# changelog

author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  - Merged dbase_file_flush patch from Dan Walsh.
  - This removes any mention of specific tools (e.g. semanage)
  - from the comment header of the auto-generated files,
  - since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
  - Merged optimizations from Stephen Smalley.
  -    do not set all booleans upon commit, only those whose values have changed
  -    only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  - Revert hard linking of files between tmp/active/previous.
  - Enable configuration of bzip behavior from Stephen Smalley.
  -   bzip-blocksize=0 to disable compression and decompression support.
  -   bzip-blocksize=1..9 to set the blocksize for compression.
  -   bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.44-1
changelog:
  - Update to upstream
  	* Replace usage of fmemopen() with sepol_policy_file_set_mem() since
  	  glibc < 2.9 does not support binary mode ('b') for fmemopen'd
  	  streams.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.45-1
changelog:
  - Update to upstream
  	* Add enable/disable patch support from Dan Walsh.
  	* Add usepasswd flag to semanage.conf to disable genhomedircon using
  	  passwd from Dan Walsh.
  	* regenerate swig wrappers


author: David Malcolm <dmalcolm@redhat.com> - 2.0.46-2
changelog:
  - big reworking of the support-multiple-python-builds patch to deal with
  PEP 3149: the latest Python 3.2 onwards uses include paths and library names
  that don't fit prior naming patterns, and so we must query python3-config for
  this information.  To complicate things further, python 2's python-config
  doesn't understand all of the options needed ("--extension-suffix").  I've
  thus added new Makefile variables as needed, to be supplied by the specfile by
  invoking the appropriate config tool (or by hardcoding the old value for
  "--extension-suffix" i.e. ".so")
  - rework python3 manifest for PEP 3149, and rebuild for newer python3


author: Dan Walsh <dwalsh@redhat.com> - 2.0.46-5
changelog:
  - Change libsemanage mechanism for handling disabled modules. Now it will only create a flag for a module 
  indicating the module is disabled.  MODULE.pp.disabled, it will no longer rename the module.  This way we can
  ship active modules in rpm.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-1
changelog:
  -Update to upstream
  2.1.2 2011-08-17
  	* print error debug info for buggy fc
  	* introduce semanage_set_root and friends
  	* throw exceptions in python rather than return
  	* python3 support.
  	* patch for MCS/MLS in user files

  2.1.1 2011-08-01
  	* Remove generated files, expand .gitignore
  	* Use -Werror and change a few prototypes to support it


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  -Update to upstream
  	* Create a new preserve_tunables flag
  	* tree: default make target to all not
  	* fix semanage_store_access_check calling arguments


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-1
changelog:
  - Upgrade to upstream
  	* regenerate .pc on VERSION change
  	* maintain mode even if umask is tighter
  	* semanage.conf man page
  	* create man5dir if not exist


author: Dan Walsh <dwalsh@redhat.com> - 2.1.6-1
changelog:
  -Update to upstream
  	* add ignoredirs config for genhomedircon
  	* Fallback_user_level can be NULL if you are not using MLS


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* Alternate path for semanage.conf
  	* do not link against libpython, this is considered bad in Debian
  	* Allow to build for several ruby version
  	* fallback-user-level


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* remove build warning when build swig c files
  	* additional makefile support for rubywrap
  	* ignore 80 column limit for readability
  	* semanage_store: fix snprintf length argument by using asprintf
  	* Use default semanage.conf as a fallback
  	* use after free in python bindings


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-3
changelog:
  - Attempt to allocate memory for selinux_binary_policy_path and free memory 
  - allocated by asprintf.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* libsemanage: do not set soname needlessly
  	* libsemanage: remove PYTHONLIBDIR and ruby equivalent
  	* do boolean name substitution
  	* Fix segfault for building standard policies.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-2
changelog:
  - Fix handling of missing semanage permissive -d foo, not failing correctly
  - Previous to this fix the first module beginning with foo would get deleted.


author: Dan Walsh <dwalsh@redhat.com> 2.1.9-3
changelog:
  - Update to latest patches from eparis/Upstream
  -    libsemanage: fixes from coverity
  -    libsemange: redo genhomedircon minuid


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-1
changelog:
  - Update to upstream 
  	* Add sefcontext_compile to compile regex everytime policy is rebuilt
  	* Cleanup/fix enable/disable/remove module.
  	* redo genhomedircon minuid
  	* fixes from coverity
  	* semanage_store: do not leak memory in semanage_exec_prog
  	* genhomedircon: remove useless conditional in get_home_dirs
  	* genhomedircon: double free in get_home_dirs
  	* fcontext_record: do not leak on error in semanage_fcontext_key_create
  	* genhomedircon: do not leak on failure in write_gen_home_dir_context
  	* semanage_store: do not leak fd 
  	* genhomedircon: do not leak shells list
  	* semanage_store: do not leak on strdup failure 
  	* semanage_store: rewrite for readability


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-6
changelog:
  - Remove dependance on selinux-policy, /etc/selinux should be owned by libsemanage, and selinux-policy can require it.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-7
changelog:
  - Move handling of role audit records into the library
  - Patch stops semanage from removing user record while in use


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-10
changelog:
  - Do not write error message to screen when looking for previous record for auditing.
  - Add mls_range from user record if the MLS range is not specified by the seuser add record.
  - Error out if seuser or mls range is not specified when adding user records


author: Dan Walsh <dwalsh@redhat.com> - 2.1.10-14
changelog:
  - Cleanup handling of missing mls_range to fix problems with useradd -Z
  - Fix auditing of login record changes, roles were not working correctly.
  Resolves: #952237


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  	* Avoid duplicate list entries from Dan Walsh.
  	* Add audit support to libsemanage from Dan Walsh.
  	* Remove policy.kern and replace with symlink from Dan Walsh.
  	* Apply a MAX_UID check for genhomedircon from Laurent Bigonville.
  	* Fix man pages from Laurent Bigonville.


author: Petr Lautrbach <plautrba@redhat.com> 2.4-2
changelog:
  - semanage_migrate_store: use /usr/bin/python3
  - move semanage_migrate_store script to libsemanage-python3


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable


author: Petr Lautrbach <plautrba@redhat.com> 2.5-8
changelog:
  - Fixes bug preventing the installation of base modules
  - make distclean target work
  - Do not always print a module name warning
  - Use pp module name instead of filename when installing module
  - tests: Do not force using gcc
  - genhomedircon: remove hardcoded refpolicy strings
  - genhomedircon: add support for %group syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-1
changelog:
  - Update to upstream release 2017-08-04
  - Use 'sefcontext_compile -r' when it's run during SELinux policy build


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.7-2
changelog:
  - Python 2 binary package renamed to python2-libsemanage
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
  - Python 3 binary package renamed to python3-libsemanage


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-10
changelog:
  - properly check return value of iterate function
  - Use umask(0077) for fopen() write operations
  - Return commit number if save-previous false
  - Allow tmp files to be kept if a compile fails
  - build: follow standard semantics for DESTDIR and PREFIX
  - Improve warning for installing disabled module
  - silence clang static analyzer report
  - remove access() check to make setuid programs work


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.23-4
changelog:
  - Fix tests build with fresh glibc that now provides struct statx in sys/stat.h.
  - Resolves #1611749.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-2
changelog:
  - Add transition for strace32 package pn those architectures that
    provided it in RHEL 7 (ppc64 and s390x).


author: Sean Middleditch <sean@middleditch.us> 1.1.3-2
changelog:
  - Fix Changelog dates.
  - Mix autoheader warning.
  - Added make check.
  - Build and install HTML documentation in -devel package.


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Cestmir Kalina <ckalina@redhat.com> - 1.1-1
changelog:
  - Replace the Python interpreter path to RHEL8 compliant path.
  - Related: #1633691
  - Resolves: #1637594


author: Cestmir Kalina <ckalina@redhat.com> - 1.3-1
changelog:
  - Resolves: #1642134 Error restrict bugs to groups without permission while
    trying to submit RHEL8 symbols
  - New ksc reports will no longer be submitted under redhat bugzilla group.
  - At least one bugzilla group must be specified by a ksc user, otherwise ksc
    will terminate with an error.
  - Version bump to 1.3


author: Cestmir Kalina <ckalina@redhat.com> - 1.4-1
changelog:
  - Resolves: #1643187 ksc manpage lies -k can only be specified once
  - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect
  - Support for multiple -k arguments added
  - Man page reworded to match ksc behaviour


author: Čestmír Kalina <ckalina@redhat.com> - 1.5-1
changelog:
  - Resolves: #1647528 ksc add feature to copy justifications between ksc...
  - Resolves: #1648026 ksc add a non-processed .ko file
  - Resolves: #1647974 piped input causes ksc to fail when asking for user input
  - Add support for justification carry over.
  - Add support for symbol filtering using -K.
  - Fix input problems when piping through to ksc.
  - Extend manpage with EXAMPLES section.
  - Version bump fo 1.5.


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.18-1
changelog:
  - Add new option LRO_FTPUSEEPSV
  - Update AUTHORS
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)
  - Doc: Fixed minor doc typo (Philippe Ombredanne)
  - Doc: Other updates
  - Doc: Update default values in doc to reflect reality


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.19-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)


author: Tomas Mlcoch <tmlcoch@redhat.com> - 1.7.20-1
changelog:
  - Tests: Disable test_download_packages_with_resume_02 test
  - Update build utils to match new fedora spec schema


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - Reduce download delays
  - Add an option to preserve timestamps of the downloaded files (RhBug:1688537)
  - Append the '?' part of repo URL after the path
  - Fix memory leaks


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Christian Kellner <ckellner@redhat.com> - 0.1-2
changelog:
  - Set database path to /var/lib/boltd, create it during
    installation, which is needed for the service file to work.


author: Christian Kellner <ckellner@redhat.com> - 0.8-1
changelog:
  - bolt 0.8 upstream release with pre-boot ACL and IOMMU support
    D-Bus Configuration moved from sysconfdir to datadir
    Resolves: #1629715


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.5-7
changelog:
  - Let rpmbuild strip binaries, make build more verbose.
  - Resolves rhbz#669477 - libtalloc 2.0.5-6 binaries not stripped,
  -                        empty -debuginfo
  - Original patch by Ville SkyttÃ¤ <ville.skytta@iki.fi>


author: Simo Sorce <ssorce@redhat.com> - 2.0.6-1
changelog:
  - New upstream release
  - Fixes various bugs with talloc_free_children and freeing complex
    hierarchies with many siblinbgs.


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.3-1
changelog:
  - New upstream release - 2.1.3
  - Resolves: rhbz#1241928 - Switch libtalloc to use python3
  - Rename pytalloc to python-talloc (Miro Hrončok <mhroncok@redhat.com>)


author: Lukas Slebodnik <lslebodn@redhat.com> - 2.1.9-1
changelog:
  - rhbz#1427352 New upstream release - 2.1.9
  - rhbz#1401225 - Rename python packages to match packaging guidelines
    https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - New upstream release - 2.1.14
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
   - added dependency on libibverbs-devel pciutils-devel
   - cannot provide support for cuda (cuda_runtime_api.h). 
   - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-2
changelog:
  - Unversioned docdir change, more info on 
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9-1
changelog:
  - Update to 1.9
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.


author: Orion Poplwski <orion@cora.nwra.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0 (fixes bug #1208279)
  - Drop arm patch applied upstream
  - Make hwloc-devel require libibverbs-devel (bug #1191770)
  - Fix man page manipulation (bug #1235954)


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Pavel Raiskup <praiskup@redhat.com> - 3.2.0-1
changelog:
  - new upstream release 3.2.0 (rhbz#1330345), per release notes:
    https://groups.google.com/d/msg/libarchive-discuss/qIzW7doKzxA/MVbUkjlNAAAJ


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Brian C. Lane <bcl@redhat.com> - 3.2-29
changelog:
  - Add support for NVDIMM devices (sparschauer)
  - libparted/labels: link with libiconv if needed (arnout)


author: Brian C. Lane <bcl@redhat.com> - 3.2-33
changelog:
  - Switch gpt-header-move and msdos-overlap to python3 (bcl)
    Resolves: rhbz#1595810
  - Modify gpt-header-move and msdos-overlap to work with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-34
changelog:
  - Fix the length of several strncpy calls (bcl)
    Related: rhbz#1602652
  - parted.c: Always free peek_word (bcl)
    Related: rhbz#1602652
  - parted.c: Make sure dev_name is freed (bcl)
    Related: rhbz#1602652
  - t6100-mdraid-partitions: Use v0.90 metadata for the test (bcl)
  - Fix msdos-overlap to work correctly with py2 or py3 (bcl)
    Related: rhbz#1595810


author: Brian C. Lane <bcl@redhat.com> - 3.2-35
changelog:
  - Use python3-devel in buildroot
    Resolves: rhbz#1615576
  - linux.c: Use sys/sysmacros.h for major/minor
    Resolves: rhbz#1615592


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_107_dup8.0-5
changelog:
  - e67217ec68636d7570e69bab9e3b1ed1728b8292
  - iwlwifi kernel module for Driver Update Program
  - Resolves: #bz1755919


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-2
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers


author: Tomas Mraz <tmraz@redhat.com> 1.0.0c-3
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-3
changelog:
  - add support for VIA Padlock on 64bit arch from upstream (#617539)
  - do not return bogus values from load_certs (#652286)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-6
changelog:
  - add support for newest Intel acceleration improvements backported
    from upstream by Intel in form of a separate engine


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-7
changelog:
  - correct openssl cms help output (#636266)
  - more tolerant starttls detection in XMPP protocol (#608239)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0d-8
changelog:
  - drop the separate engine for Intel acceleration improvements
    and merge in the AES-NI, SHA1, and RC4 optimizations
  - add support for OPENSSL_DISABLE_AES_NI environment variable
    that disables the AES-NI support


author: Tomas Mraz <tmraz@redhat.com> 1.0.0e-3
changelog:
  - do not use AVX instructions when osxsave bit not set
  - add direct known answer tests for SHA2 algorithms


author: Tomas Mraz <tmraz@redhat.com> 1.0.0g-1
changelog:
  - new upstream release fixing CVE-2012-0050 - DoS regression in
    DTLS support introduced by the previous release (#782795)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.1.beta2
changelog:
  - new upstream release from the 1.0.1 branch, ABI compatible
  - add documentation for the -no_ign_eof option


author: Tomas Mraz <tmraz@redhat.com> 1.0.1-0.2.beta3
changelog:
  - epoch bumped to 1 due to revert to 1.0.0g on Fedora 17
  - new upstream release from the 1.0.1 branch
  - fix s390x build (#798411)
  - versioning for the SSLeay symbol (#794950)
  - add -DPURIFY to build flags (#797323)
  - filter engine provides
  - split the libraries to a separate -libs package
  - add make to requires on the base package (#783446)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-3
changelog:
  - fix DSA key generation in FIPS mode (#833866)
  - allow duplicate FIPS_mode_set(1)
  - enable build on ppc64 subarch (#834652)


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-4
changelog:
  - do not move libcrypto to /lib
  - do not use environment variables if __libc_enable_secure is on
  - fix strict aliasing problems in modes


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-7
changelog:
  - add missing initialization of str in aes_ccm_init_key (#853963)
  - add important patches from upstream CVS
  - use the secure_getenv() with new glibc


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-8
changelog:
  - use 1024 bit DH parameters in s_server as 512 bit is not allowed
    in FIPS mode and it is quite weak anyway


author: Tomas Mraz <tmraz@redhat.com> 1.0.1c-11
changelog:
  - add script for renewal of a self-signed cert by Philip Prindeville (#871566)
  - allow X509_issuer_and_serial_hash() produce correct result in
    the FIPS mode (#881336)


author: Kyle McMartin <kyle@redhat.com> 1.0.1e-21
changelog:
  - [arm] use elf auxv to figure out armcap.c instead of playing silly
    games with SIGILL handlers. (#1006474)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-32
changelog:
  - disable verification of certificate, CRL, and OCSP signatures
    using MD5 if OPENSSL_ENABLE_MD5_VERIFY environment variable
    is not set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - drop weak ciphers from the default TLS ciphersuite list
  - add back some symbols that were dropped with update to 1.0.1 branch
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-36
changelog:
  - fix CVE-2013-6449 - crash when version in SSL structure is incorrect
  - more FIPS validation requirement changes


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - fix CVE-2013-4353 - Invalid TLS handshake crash
  - fix CVE-2013-6450 - possible MiTM attack on DTLS1


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - make expiration and key length changeable by DAYS and KEYLEN
    variables in the certificate Makefile (#1058108)
  - change default hash to sha256 (#1062325)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - add DH_compute_key_padded needed for FIPS CAVS testing


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1g-1
changelog:
  - new upstream release 1.0.1g
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - fail on hmac integrity check if the .hmac file is empty


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-3
changelog:
  - make FIPS mode keygen bit length restriction enforced only when
    OPENSSL_ENFORCE_MODULUS_BITS is set
  - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1h-5
changelog:
  - disable SSLv2 and SSLv3 protocols by default (can be enabled
    via appropriate SSL_CTX_clear_options() call)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1i-1
changelog:
  - new upstream release fixing multiple moderate security issues
  - for now disable only SSLv2 by default


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1j-3
changelog:
  - disable SSLv3 by default again (mail servers and possibly
    LDAP servers should probably allow it explicitly for legacy
    clients)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-2
changelog:
  - test in the non-FIPS RSA keygen for minimal distance of p and q
    similarly to the FIPS RSA keygen


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-6
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1k-7
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2e-1
changelog:
  - minor upstream release 1.0.2e fixing moderate severity security issues
  - enable fast assembler implementation for NIST P-256 and P-521
    elliptic curves (#1164210)
  - filter out unwanted link options from the .pc files (#1257836)
  - do not set serial to 0 in Makefile.certificate (#1135719)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2f-1
changelog:
  - minor upstream release 1.0.2f fixing security issues
  - add support for MIPS secondary architecture


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2g-2
changelog:
  - reenable SSL2 in the build to avoid ABI break (it does not
    make the openssl vulnerable to DROWN attack)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2i-1
changelog:
  - minor upstream release 1.0.2i fixing security issues
  - move man pages for perl based scripts to perl subpackage (#1377617)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0b-4
changelog:
  - use a random seed if the supplied one did not generate valid
    parameters in dsa_builtin_paramgen2()


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-2
changelog:
  - EC curve NIST P-224 is now allowed, still kept disabled in TLS due
    to less than optimal security


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0c-3
changelog:
  - revert SSL_read() behavior change - patch from upstream (#1394677)
  - fix behavior on client certificate request in renegotiation (#1393579)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0e-1
changelog:
  - update to upstream version 1.1.0e
  - add documentation of the PROFILE=SYSTEM special cipher string (#1420232)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0f-1
changelog:
  - update to upstream version 1.1.0f
  - SRP and GOST is now allowed, note that GOST support requires
    adding GOST engine which is not part of openssl anymore


author: Petr Pisar <ppisar@redhat.com> - 1:1.1.0f-6
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Tomáš Mráz <tmraz@redhat.com> 1.1.0g-6
changelog:
  - one more try to apply RPM_LD_FLAGS properly (#1541033)
  - dropped unneeded starttls xmpp patch (#1417017)


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-1
changelog:
  - update to the final 1.1.1 version
  - for consistent support of security policies we build
    RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
  - use only /dev/urandom if getrandom() is not available
  - disable SM4


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-6
changelog:
  - backport of S390x ECC CPACF enhancements from master
  - FIPS mode: properly disable 1024 bit DSA key generation
  - FIPS mode: skip ED25519 and ED448 algorithms in openssl speed
  - FIPS mode: allow AES-CCM ciphersuites


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-8
changelog:
  - fix CVE-2019-1547 - side-channel weak encryption vulnerability
  - fix CVE-2019-1563 - padding oracle in CMS API
  - fix CVE-2019-1549 - ensure fork safety of the DRBG
  - fix handling of non-FIPS allowed EC curves in FIPS mode
  - fix TLS compliance issues


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-14
changelog:
  - fix incorrect error return value from FIPS_selftest_dsa
  - S390x: properly restore SIGILL signal handler


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.20-7
changelog:
  - the ownership of the spool directory should be root as at is configured
    with daemon username root
  - document the -n option


author: Stephen Gallagher <sgallagh@redhat.com> - 80.1-2
changelog:
  - Separate desktop backgrounds into their own subpackage
  - Correct the description to match the license terms
  - Drop vestiges of fedora-logos


author: Ray Strode <rstrode@redhat.com> - 80.3-1
changelog:
  - Make night time pattern lighter
    Resolves: #1628092
  - Remove Alpha from logos
    Resolves: #1637446
  - Remove Alpha from wallpapers
    Resolves: #1636822


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New stable upstream version 1.2.1
  - Resolves: rhbz#595529 - spec file should eschew %define in favor of
  -                         %global
  - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart.
  - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
  -                         keyring
  - Resolves: rhbz#599724 - sssd is broken on Rawhide


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
changelog:
  - New upstream version 1.2.91 (1.3.0rc1)
  - Improved LDAP failover
  - Synchronous sysdb API (provides performance enhancements)
  - Better online reconnection detection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
changelog:
  - Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
  -                           against LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
changelog:
  - Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
  -                         doesn't require it


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - New upstream release 1.4.0
  - Added support for netgroups to the LDAP provider
  - Performance improvements made to group processing of RFC2307 LDAP servers
  - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
  - Build-system improvements to support Gentoo
  - Split out several libraries into the ding-libs tarball
  - Manpage reviewed and updated


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
changelog:
  - New upstream release 1.4.1
  - Add support for netgroups to the proxy provider
  - Fixes a minor bug with UIDs/GIDs >= 2^31
  - Fixes a segfault in the kerberos provider
  - Fixes a segfault in the NSS responder if a data provider crashes
  - Correctly use sdap_netgroup_search_base


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
changelog:
  - Solve a shutdown race-condition that sometimes left processes running
  - Resolves: rhbz#606887 - SSSD stops on upgrade


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - New upstream release 1.5.0
  - Fixed issues with LDAP search filters that needed to be escaped
  - Add Kerberos FAST support on platforms that support it
  - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
  - Added a Kerberos access provider to honor .k5login
  - Addressed several thread-safety issues in the sss_client code
  - Improved support for delayed online Kerberos auth
  - Significantly reduced time between connecting to the network/VPN and
  - acquiring a TGT
  - Added feature for automatic Kerberos ticket renewal
  - Provides the kerberos ticket for long-lived processes or cron jobs
  - even when the user logs out
  - Added several new features to the LDAP access provider
  - Support for 'shadow' access control
  - Support for authorizedService access control
  - Ability to mix-and-match LDAP access control features
  - Added an option for a separate password-change LDAP server for those
  - platforms where LDAP referrals are not supported
  - Added support for manpage translations


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
changelog:
  - New upstream release 1.5.1
  - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
  - Vast performance improvements when enumerate = true
  - All PAM actions will now perform a forced initgroups lookup instead of just
  - a user information lookup
  -   This guarantees that all group information is available to other
  -   providers, such as the simple provider.
  - For backwards-compatibility, DNS lookups will also fall back to trying the
  - SSSD domain name as a DNS discovery domain.
  - Support for more password expiration policies in LDAP
  -    389 Directory Server
  -    FreeIPA
  -    ActiveDirectory
  - Support for ldap_tls_{cert,key,cipher_suite} config options
  -Assorted bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
changelog:
  - Fix nested group member filter sanitization for RFC2307bis
  - Put translated tool manpages into the sssd-tools subpackage


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
changelog:
  - Resolves: rhbz#677768 - name service caches names, so id command shows
  -                         recently deleted users


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
changelog:
  - New upstream release 1.5.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
  - Fixes for support of FreeIPA v2
  - Fixes for failover if DNS entries change
  - Improved sss_obfuscate tool with better interactive mode
  - Fix several crash bugs
  - Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
  - Delete users from the local cache if initgroups calls return 'no such user'
  - (previously only worked for getpwnam/getpwuid)
  - Use new Transifex.net translations
  - Better support for automatic TGT renewal (now survives restart)
  - Netgroup fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
changelog:
  - New upstream release 1.5.4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
  - Fixes for Active Directory when not all users and groups have POSIX attributes
  - Fixes for handling users and groups that have name aliases (aliases are ignored)
  - Fix group memberships after initgroups in the IPA provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
changelog:
  - New upstream release 1.5.5
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
  - Fixes for several crash bugs
  - LDAP group lookups will no longer abort if there is a zero-length member
  - attribute
  - Add automatic fallback to 'cn' if the 'gecos' attribute does not exist


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
changelog:
  - Fix systemd conversion. Upgrades from SysV to systemd weren't properly
  - enabling the systemd service.
  - Fix a serious memory leak in the memberOf plugin
  - Fix an issue where the user's full name would sometimes be removed
  - from the cache


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
changelog:
  - Resolves: rhbz#697057 - kpasswd fails when using sssd and
  -                         kadmin server != kdc server
  - Upgrades from SysV should now maintain enabled/disabled status


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
  - Fixed a serious memory leak in the memberOf plugin
  - Fixed a regression with the negative cache that caused it to be essentially
  - nonfunctional
  - Fixed an issue where the user's full name would sometimes be removed from
  - the cache
  - Fixed an issue with password changes in the kerberos provider not working
  - with kpasswd


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
changelog:
  - Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
  -                         cached password with predicatable filename


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
changelog:
  - Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
  - Make sure to properly convert to systemd if upgrading from newer
  - updates for Fedora 14


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
changelog:
  - New upstream release 1.5.8
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
  - Support for the LDAP paging control
  - Support for multiple DNS servers for name resolution
  - Fixes for several group membership bugs
  - Fixes for rare crash bugs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
changelog:
  - New upstream release 1.5.9
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
  - Support for overriding home directory, shell and primary GID locally
  - Properly honor TTL values from SRV record lookups
  - Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
  - servers)
  - Properly escape IPv6 addresses in the failover code
  - Do not crash if inotify fails (e.g. resource exhaustion)
  - Don't add multiple TGT renewal callbacks (too many log messages)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
changelog:
  - New upstream release 1.5.10
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
  - Fixed a regression introduced in 1.5.9 that could result in blocking calls
  - to LDAP


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
changelog:
  - New upstream release 1.5.11
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
  - Fix a serious regression that prevented SSSD from working with ldaps:// URIs
  - IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
  - address being saved to the AAAA record


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - New upstream release 1.6.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
  - Add host access control support for LDAP (similar to pam_host_attr)
  - Finer-grained control on principals used with Kerberos (such as for FAST or
  - validation)
  - Added a new tool sss_cache to allow selective expiring of cached entries
  - Added support for LDAP DEREF and ASQ controls
  - Added access control features for Novell Directory Server
  - FreeIPA dynamic DNS update now checks first to see if an update is needed
  - Complete rewrite of the HBAC library
  - New libraries: libipa_hbac and libipa_hbac-python


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
changelog:
  - New upstream release 1.6.1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
  - Fixes a serious issue with LDAP connections when the communication is
    dropped (e.g. VPN disconnection, waking from sleep)
  - SSSD is now less strict when dealing with users/groups with multiple names
    when a definitive primary name cannot be determined
  - The LDAP provider will no longer attempt to canonicalize by default when
    using SASL. An option to re-enable this has been provided.
  - Fixes for non-standard LDAP attribute names (e.g. those used by Active
    Directory)
  - Three HBAC regressions have been fixed.
  - Fix for an infinite loop in the deref code


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Improved handling of users and groups with multi-valued name attributes
    (aliases)
  - Performance enhancements
      Initgroups on RFC2307bis/FreeIPA
      HBAC rule processing
  - Improved process-hang detection and restarting
  - Enabled the midpoint cache refresh by default (fewer cache misses on
    commonly-used entries)
  - Cleaned up the example configuration
  - New tool to change debug level on the fly


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
changelog:
  - Change selinux policy requirement to Conflicts: with the old version,
    rather than Requires: the supported version.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
changelog:
  - New upstream release 1.6.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
  - Fixes a major cache performance issue introduced in 1.6.2
  - Fixes a potential infinite-loop with certain LDAP layouts


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
changelog:
  - Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
                            username in getpwnam()
  - Resolves: rhbz#758425 - LDAP failover not working if server refuses
                            connections


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
changelog:
  - New upstream release 1.6.4
  - Rolls up previous patches applied to the 1.6.3 tarball
  - Fixes a rare issue causing crashes in the failover logic
  - Fixes an issue where SSSD would return the wrong PAM error code for users
    that it does not recognize.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
changelog:
  - New upstream release 1.7.0
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
  - Support for case-insensitive domains
  - Support for multiple search bases in the LDAP provider
  - Support for the native FreeIPA netgroup implementation
  - Reliability improvements to the process monitor
  - New DEBUG facility with more consistent log levels
  - New tool to change debug log levels without restarting SSSD
  - SSSD will now disconnect from LDAP server when idle
  - FreeIPA HBAC rules can choose to ignore srchost options for significant
    performance gains
  - Assorted performance improvements in the LDAP provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features


author: Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
changelog:
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features - fix netgroups and sudo as well


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
changelog:
  - New upstream release
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
  - Fix two minor manpage bugs
  - Include the IPA AutoFS provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
changelog:
  - New upstream release 1.8.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed several memory-corruption bugs
  - Finalized the ABI for the autofs support
  - Fixed a regression in the proxy provider


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
changelog:
  - New upstream release 1.8.0
  - Support for the service map in NSS
  - Support for setting default SELinux user context from FreeIPA
  - Support for retrieving SSH user and host keys from LDAP (Experimental)
  - Support for caching autofs LDAP requests (Experimental)
  - Support for caching SUDO rules (Experimental)
  - Include the IPA AutoFS provider
  - Fixed several memory-corruption bugs
  - Fixed a regression in group enumeration since 1.7.0
  - Fixed a regression in the proxy provider
  - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
  - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                            logged at each login
  - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                            /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                            new LDAP features
  - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
changelog:
  - New upstream release 1.8.1
  - Resolve issue where we could enter an infinite loop trying to connect to an
    auth server
  - Fix serious issue with complex (3+ levels) nested groups
  - Fix netgroup support for case-insensitivity and aliases
  - Fix serious issue with lookup bundling resulting in requests never
    completing
  - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
    in addition to pam_authenticate
  - Fix several regressions in the proxy provider
  - Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                            against AD
  - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
changelog:
  - Fix uninitialized value bug causing crashes throughout the code
  - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
changelog:
  - Don't duplicate libsss_autofs.so in two packages
  - Set explicit package contents instead of globbing


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
changelog:
  - New upstream release 1.8.2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
  - Several fixes to case-insensitive domain functions
  - Fix for GSSAPI binds when the keytab contains unrelated principals
  - Fixed several segfaults
  - Workarounds added for LDAP servers with unreadable RootDSE
  - SSH knownhostproxy will no longer enter an infinite loop preventing login
  - The provided SYSV init script now starts SSSD earlier at startup and stops
    it later during shutdown
  - Assorted minor fixes for issues discovered by static analysis tools


author: Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
changelog:
  - New upstream release 1.8.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
  - Numerous manpage and translation updates
  - LDAP: Handle situations where the RootDSE isn't available anonymously
  - LDAP: Fix regression for users using non-standard LDAP attributes for user
    information


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
changelog:
  - New upstream release 1.9.0 beta 1
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
  - Add native support for autofs to the IPA provider
  - Support for ID-mapping when connecting to Active Directory
  - Support for handling very large (> 1500 users) groups in Active Directory
  - Support for sub-domains (will be used for dealing with trust relationships)
  - Add a new fast in-memory cache to speed up lookups of cached data on
    repeated requests


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
changelog:
  - Fix several regressions since 1.5.x
  - Ensure that the RPM creates the /var/lib/sss/mc directory
  - Add support for Netscape password warning expiration control
  - Rebuild against libldb 1.1.6


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
changelog:
  - New upstream release 1.9.0 beta 2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
  - Add support for the Kerberos DIR cache for storing multiple TGTs
    automatically
  - Major performance enhancement when storing large groups in the cache
  - Major performance enhancement when performing initgroups() against Active
    Directory
  - SSSDConfig data file default locations can now be set during configure for
    easier packaging


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
changelog:
  - Switch unicode library from libunistring to Glib
  - Drop unnecessary explicit Requires on keyutils
  - Guarantee that versioned Requires include the correct architecture


author: Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
changelog:
  - New upstream release 1.9.0 beta 3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
  - Add a new PAC responder for dealing with cross-realm Kerberos trusts
  - Terminate idle connections to the NSS and PAM responders


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
changelog:
  - New upstream release 1.9.0 beta 4
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
  - Add a new AD provider to improve integration with Active Directory 2008 R2
    or later servers
  - SUDO integration was completely rewritten. The new implementation works
    with multiple domains and uses an improved refresh mechanism to download
    only the necessary rules
  - The IPA authentication provider now supports subdomains
  - Fixed regression for setups that were setting default_tkt_enctypes
    manually by reverting a previous workaround.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
changelog:
  - New upstream release 1.9.0 beta 5
  - Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
  - Many fixes for the support for setting default SELinux user context from
    FreeIPA, most notably fixed the specificity evaluation
  - Fixed an incorrect default in the krb5_canonicalize option of the AD
    provider which was preventing password change operation
  - The shadowLastChange attribute value is now correctly updated with the
    number of days since the Epoch, not seconds


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
changelog:
  - New upstream release 1.9.0 beta 6
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
  - A new option, override_shell was added. If this option is set, all users
    managed by SSSD will have their shell set to its value.
  - Fixes for the support for setting default SELinux user context from FreeIPA.
  - Fixed a regression introduced in beta 5 that broke LDAP SASL binds
  - The SSSD supports the concept of a Primary Server and a Back Up Server in
    failover
  - A new command-line tool sss_seed is available to help prime the cache with
    a user record when deploying a new machine
  - SSSD is now able to discover and save the domain-realm mappings
    between an IPA server and a trusted Active Directory server.
  - Packaging changes to fix ldconfig usage in subpackages (#843995)
  - Rebuild against libldb 1.1.9


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
changelog:
  - Don't discard HBAC rule processing result if SELinux is on
    Resolves: rhbz#846792 (CVE-2012-3462)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
changelog:
  - Change the default ccache location to DIR:/run/user/${UID}/krb5cc
    and patch man page accordingly
  - Resolves: rhbz#851304


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
changelog:
  - Recreate Kerberos ccache directory if it's missing
  - Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                            directory /run/user/UID/ccdir does not exist


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
changelog:
  - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
    in ding-libs
  - Fix SSH integration with fully-qualified domains
  - Add the ability to dynamically discover the NetBIOS name


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
changelog:
  - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                            realm join
  - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                            default for AD Provider
  - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                            parent directory when logging in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
changelog:
  - Apply a couple of patches from upstream git that resolve crashes when
    ID mapping object was not initialized properly but needed later


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
changelog:
  - New upstream release 1.10 beta2
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
  - BuildRequire libcmocka-devel in order to run all upstream tests during build
  - BuildRequire libnl3 instead of libnl1
  - No longer BuildRequire initscripts, we no longer use /sbin/service
  - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
    older krb5-libs version


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
changelog:
  - Fix typo in Requires that prevented an upgrade (#973916)
  - Use a hardcoded version in Conflicts, not less-than-current


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
changelog:
  - Apply a number of patches from upstream to fix issues found post-beta,
    in particular:
    -- segfault with a high DEBUG level
    -- Fix IPA password migration (upstream #1873)
    -- Fix fail over when retrying SRV resolution (upstream #1886)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
changelog:
  - Fix Obsoletes: to account for dist tag
  - Convert post and pre scripts to run on the sssd-common subpackage
  - Remove old conversion from SYSV


author: Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
changelog:
  - Move sssd_pac to the sssd-ipa and sssd-ad subpackages
  - Trim out RHEL5-specific macros since we don't build on RHEL 5
  - Trim out macros for Fedora older than F18
  - Update libldb requirement to 1.1.16
  - Trim RPM changelog down to the last year


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
changelog:
  - Resolves: #906427 - Do not use %{_lib} in specfile for the nss and
                        pam libraries


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
changelog:
  - Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
                        Process /usr/libexec/sssd/sssd_nss was killed by
                        signal 11 (SIGSEGV)
  - Resolves: #996214 - sssd proxy_child segfault


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
changelog:
  - Backport simplification of ccache management from 1.11.1
  - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
changelog:
  - Fix multicast checks in the SSSD
  - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                             code getting the host info


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
changelog:
  - New upstream release 1.11.2
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
changelog:
  - New upstream release 1.11.3
  - Remove upstreamed patches
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
changelog:
  - New upstream release 1.11.4
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4


author: Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
changelog:
  - New upstream release 1.11.5
  - Remove upstreamed patch
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5


author: Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
changelog:
  - Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
                             private group from server


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
changelog:
  - Fix regressions and bugs in sssd upstream 1.12.2
  - https://fedorahosted.org/sssd/ticket/{id}
  - Regressions: #2471, #2475, #2483, #2487, #2529, #2535
  - Bugs: #2287, #2445


author: Sumit Bose <sbose@redhat.com> - 1.12.2-7
changelog:
  - Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
                             crash in wbinfo
                             - in addition to the patch libwbclient.so is
                               filtered out of the Provides list of the package


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
changelog:
  - New upstream release 1.12.3
  - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
  - Fix spelling errors in description (fedpkg lint)


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
changelog:
  - Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
  - Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                             zipping when rotating logfile


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
changelog:
  - Apply a number of patches from upstream to fix issues found 1.12.3
  - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                             interfaces, or isn't documented to be able to
  - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                            not running
  - Resolves: upstream #2557  authentication failure with user from AD


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
changelog:
  - Decrease priority of sssd-libwbclient 20 -> 5
  - It should be lower than priority of samba veriosn of libwbclient.
  - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
changelog:
  - Fix double free in monitor
  - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                          sssd killed by SIGABRT


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
changelog:
  - Add support for python3 bindings
  - Add requirement to python3 or python3 bindings
  - Resolves: rhbz#1014594 - sssd: Support Python 3


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
changelog:
  - Fix regressions with ipa and SELinux
  - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                               context on client is staff_u


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
changelog:
  - Fix slow login with ipa and SELinux
  - Resolves: upstream #2624 - Only set the selinux context if the context
                               differs from the local one


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
changelog:
  - Backport important patches from upstream 1.13 prerelease
  - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                             attribute for group name
  - Resolves: upstream #2335 - Investigate using the krb5 responder
                               for driving the PAM conversation with OTPs
  - Enable cmocka tests for secondary architectures


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
changelog:
  - Fix ipa-migration bug
  - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                               migration mode


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
changelog:
  - Fix OTP bug
  - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                               entered separately


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
changelog:
  - Fix few segfaults
  - Resolves: upstream #2811 - PAM responder crashed if user was not set
  - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
changelog:
  - python-sssdconfig: Fix parssing sssd.conf without config_file_version
  - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
changelog:
  - Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
                             groups during getgrnam and getgrgid
  - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                             in call to 'print'


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
changelog:
  - Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
                             prompts (e.g. Password + Token)
  - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                             by remote host" if locale not available


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
changelog:
  - Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
                             sssd_ifp killed by SIGSEGV


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
changelog:
  - Backport important patches from upstream 1.14.2 prerelease
  - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                               boot
  - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
changelog:
  - Fix regression with krb5_map_user
  - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
  - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                             default if nonexistent domain is mentioned


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
changelog:
  - Resolves: rhbz#1369130 - nss_sss should not link against libpthread
  - Resolves: rhbz#1392916 - sssd failes to start after update
  - Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                             on the directory /etc/sssd


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
changelog:
  - Cherry-pick patches from upstream that enable the files provider
  - Enable the files domain
  - Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
    which is superseded by the files domain autoconfiguration
  - Related: rhbz#1357418 - SSSD fast cache for local users


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
changelog:
  - Fix issue with IPA + SELinux in containers
  - Resolves: upstream https://fedorahosted.org/sssd/ticket/3297


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
changelog:
  - Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
  - Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                             file from package sssd-common-1.15.1-1.fc25.x86_64
  - Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
changelog:
  - Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
                             access on the sock_file system_bus_socket
  - Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                             fails to download desktop profile data
  - Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
  - Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
                              after applying ID Views for them in IPA server
  - Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
                              mapping is applied


author: Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
changelog:
  - Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database access on
                             the sock_file system_bus_socket


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
changelog:
  - Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                              setnetgrent_result_timeout
  - Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
  - Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
  - Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
  - Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
  - Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
  - Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
  - Backport few upstream features from 1.16.1


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Resolves: upstream#3621 - FleetCommander integration must not require
                              capability DAC_OVERRIDE


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
changelog:
  - Resolves: upstream#3573 - sssd won't show netgroups with blank domain
  - Resolves: upstream#3660 - confdb_expand_app_domains() always fails
  - Resolves: upstream#3658 - Application domain is not interpreted correctly
  - Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
                              json_loads()
  - Resolves: upstream#3386 - KCM: Payload buffer is too small
  - Resolves: upstream#3666 - Fix usage of str.decode() in our tests
  - A few KCM misc fixes


author: Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
changelog:
  - Resolves: upstream#3684 - A group is not updated if its member is removed
                              with the cleanup task, but the group does not
                              change
  - Resolves: upstream#3558 - sudo: report error when two rules share cn
  - Tone down shutdown messages for socket activated responders
  - IPA: Qualify the externalUser sudo attribute
  - Resolves: upstream#3550 - refresh_expired_interval does not work with
                              netgrous in 1.15
  - Resolves: upstream#3402 - Support alternative sources for the files provider
  - Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
  - Resolves: upstream#3679 - Make nss netgroup requests more robust
  - Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
                              configured
  - Resolves: upstream#3469 - extend sss-certmap man page regarding priority
                              processing
  - Improve docs/debug message about GC detection
  - Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
                              list out of bound?
  - Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
                              set.
  - Document which principal does the AD provider use
  - Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
                              defined, but contains no SIDs
  - Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
  - Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                             Provider returned an error
                             [org.freedesktop.sssd.Error.DataProvider.Fatal]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-1
changelog:
  - Update to 1.16.2 release
  - Cleanup unused global definitions
  - Remove python2 references from the spec file
  - Resolves: rhbz#1585313 - Kerberos with sssd-kcm is not working on s390x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-2
changelog:
  - Resolves: rhbz#1622026 - sssd 2.0 regression: Kerberos authentication
                             fails with the KCM ccache


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-4
changelog:
  - Resolves: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                             users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-7
changelog:
  - Resolves: rhbz#1628503 - sssd only sets the SELinux login context if it
                             differs from the default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-8
changelog:
  - Resolves: rhbz#1628126 - [abrt] [faf] sssd: unknown function():
                              /usr/libexec/sssd/sssd_be killed by 11 crash
                              func _dbus_list_unlink


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-9
changelog:
  - Resolves: rhbz#1624785 - Remove references of sss_user/group/add/del
                             commands in man pages since local provider
                             is deprecated


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-10
changelog:
  - Resolves: rhbz#1626001 - SSSD should log to syslog if a domain is not
                             started due to a misconfiguration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-11
changelog:
  - Resolves: rhbz#1628122 - Printing incorrect information about domain
                             with sssctl utility


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-16
changelog:
  - Related: rhbz#1620123 - [RFE] Add option to specify a Smartcard with a
                            PKCS#11 URI


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-17
changelog:
  - Related: rhbz#1637131 - pam_unix unable to match fully qualified username
                            provided by sssd during smartcard auth using gdm


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-18
changelog:
  - Related: rhbz#1638006 - Files: The files provider always enumerates
                            which causes duplicate when running getent passwd


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-19
changelog:
  - Add OSCP checks for p11_child
  - Related: rhbz#1615417 - [RFE] Add Smart Card authentication for local
                            users


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-21
changelog:
  - Related: rhbz#1638150 - session not recording for local user when groups defined
  - Also add silence a Coverity warning, which is related to rhbz#1637131


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-23
changelog:
  - Resolves: rhbz#1642508 - sssd ifp crash when trying to access ipa webui
                             with smart card


author: Michal Židek <mzidek@redhat.com> - 2.0.0-24
changelog:
  - Resolves: rhbz#1646168 - sssctl access-report always prints an error message
  - Resolves: rhbz#1643053 - Restarting the sssd-kcm service should reload the
                             configuration without having to restart the whole
                             sssd
  - Resolves: rhbz#1640576 - sssctl reports incorrect information about local
                             user's cache entry expiration time
  - Resolves: rhbz#1645238 - Unable to su to root when logged in as a local user
  - Resolves: rhbz#1639411 - sssd support for for smartcards using ECC keys


author: Michal Židek <mzidek@redhat.com> - 2.0.0-25
changelog:
  - Resolves: rhbz#1645566 - SSSD 2.x does not sanitize domain name properly
                             for D-bus, resulting in a crash


author: Michal Židek <mzidek@redhat.com> - 2.0.0-27
changelog:
  - Resolves: rhbz#1657979 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI


author: Michal Židek <mzidek@redhat.com> - 2.0.0-29
changelog:
  - Resolves: rhbz#1655459 - [abrt] [faf] sssd: raise():
                             /usr/libexec/sssd/proxy_child killed by 6


author: Michal Židek <mzidek@redhat.com> - 2.0.0-30
changelog:
  - Resolves: 1657898 - SSSD must be cleared/restarted periodically in order to
                        retrieve AD users through IPA Trust


author: Michal Židek <mzidek@redhat.com> - 2.0.0-32
changelog:
  - Resolves: rhbz#1625670 - sssd needs to require a newer version of libtalloc
              and libtevent to avoid an issue in GPO processing


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-45
changelog:
  - Replace ARRAY_SIZE with N_ELEMENTS to reflect samba changes. This is
    done here in order to unblock gating changes before rebase.
  - Related: rhbz#1682305


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
changelog:
  - Resolves: rhbz#1673443 - sssd man pages: The default value of
                             "ldap_user_home_directory" is not mentioned
                             with AD server configuration


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
changelog:
  - Resolves: rhbz#1725168 - sssd-proxy crashes resolving groups with
                             no members


author: Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-4
changelog:
  - Resolves: rhbz#1283798 - sssd failover does not work on connecting to
                             non-responsive ldaps:// server


author: Michal Židek <mzidek@redhat.com> - 2.2.0-6
changelog:
  - Resolves: rhbz#1726945 - negative cache does not use values from
                             'filter_users' config option for known domains


author: Michal Židek <mzidek@redhat.com> - 2.2.0-7
changelog:
  - Resolves: rhbz#1711318 - p11_child::sign_data() function implementation is
                             not FIPS140 compliant


author: Michal Židek <mzidek@redhat.com> - 2.2.0-8
changelog:
  - Resolves: rhbz#1699480 - Include libsss_nss_idmap-devel in the Builder
                             repository
                           - This just required a raise in release number
                             and changelog for the record.


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.


author: Roland McGrath <roland@redhat.com> - 4.5.19-1
changelog:
  - New upstream release, work mostly by Dmitry V. Levin <ldv@altlinux.org>
    + exit/kill strace with traced process exitcode/signal (#105371);
    + fixed build on ARM EABI (#507576);
    + fixed display of 32-bit argv array on 64-bit architectures (#519480);
    + fixed display of 32-bit fcntl(F_SETLK) on 64-bit architectures (#471169);
    + fixed several bugs in strings decoder, including potential heap
      memory corruption (#470529, #478324, #511035).


author: Roland McGrath <roland@redhat.com> - 4.5.20-1
changelog:
  - New upstream release, work mostly by Andreas Schwab and Dmitry V. Levin.
    + fixed potential stack buffer overflow in select decoder (#556678);
    + fixed FTBFS (#539044).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.8-1
changelog:
  - New upstream release:
    + fixed ERESTARTNOINTR leaking to userspace on ancient kernels (#659382);
    + fixed decoding of *xattr syscalls (#885233);
    + fixed handling of files with 64-bit inode numbers by 32-bit strace (#912790);
    + added aarch64 support (#969858).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.9-1
changelog:
  - New upstream release:
    + fixed build when <sys/ptrace.h> and <linux/ptrace.h> conflict (#993384);
    + updated CLOCK_* constants (#1088455);
    + enabled ppc64le support (#1122323);
    + fixed attach to a process on ppc64le (#1129569).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11-1
changelog:
  - New upstream release:
    + print nanoseconds along with seconds in stat family syscalls (#1251176).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.11.0.163.9720-1
changelog:
  - New upstream snapshot v4.11-163-g972018f:
    + fixed decoding of syscalls unknown to the kernel on s390/s390x (#1298294).


author: Dmitry V. Levin <ldv@altlinux.org> - 4.14-1
changelog:
  - v4.13 -> v4.14:
    + added printing of the mode argument of open and openat syscalls
      when O_TMPFILE flag is set (#1377846).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-4
changelog:
  - Sync up thread handling unfairness fix with the upstream version.
  - Fix "xlat_idx: Unexpected xlat value 0 at index ..." messages (#1660759).
  - Remove "ptrace(SYSCALL): No such process" messages (#1662936).
  - Wire up rseq and kexec_file_load on aarch64 (#1676045).


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.30-1]
  - Build gtk version against gtk+-1.2.0
  - v0.30
  - Fixed a typo in the changelog (NEWS) entry for 0.27. :-)
  - added use of "MTR_OPTIONS" environment variable for defaults.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.31-1]
  - v0.31
  - Fixed a few documentation issues. -- Matt
  - Changed the autoconf stuff to find the resolver library on
    Solaris. -- REW
  - Cleaned up the autoconf.in file a bit. -- Matt.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.33-1]
  - v0.33
  - Fixed the Linux glibc resolver problems.
  - Fixed the off-by-one problem with -c option.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.34-1]
  - v0.34
  - Added Matt's nifty "use the icmp unreachables to do the timing" patch.
  - Added Steve Kann's pause/resume patch.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.35-1]
  - v0.35
  - Added Craig Milo Rogers pause/resume for GTK patch.
  - Added Craig Milo Rogers cleanup of "reset". (restart at the beginning)
  - Net_open used to send a first packet. After that the display-driver
    got a chance to distort the timing by taking its time to initialize.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.37-1]
  - v0.37
  - Added Bill Bogstad's "show the local host & time" patch.
  - Added R. Sparks' show-last-ping patch, submitted by Philip Kizer.

  - v0.36
  - Added Craigs change-the-interval-on-the-fly patch.
  - Added Moritz Barsnick's "do something sensible if host not found"
    patch.
  - Some cleanup of both Craigs and Moritz' patches.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  - renamed mtr-gtk to xmtr
  - added symlink from /usr/bin/mtr to /usr/sbin/mtr

    [mtr-0.40-1]
  - Fixed some problems with HPUX and SunOS.
  - Included Olav Kvittem's patch to do packetsize option.
  - Made the timekeeping in micro seconds.


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [mtr-0.41-1]
  - Added afr's patch to allow disabeling of gtk without Robn's hack.
  - Made report mode report the newly added extra resolution.


author: Nalin Dahyabhai <nalin@redhat.com> 0.49-9
changelog:
  - Remove absolute paths from the PAM configuration, ensuring that the modules
    for the right arch get used on multilib systems.
  - Remove Icon:.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added IPv6 patch from ftp://ftp.kame.net/pub/kame/misc/mtr-054-*
  - Enabled IPv6 in mtr.
  - Included fix from Robert Scheck to make GTK optional in configure.


author: Phil Knirsch <pknirsch@redhat.com> 0.54-7
changelog:
  - Fixed broken behaviour with resolver SERVFAIL results (#125392)
  - Added ncurses-devel libtermcap-devel as BuildPreReq (#124553)
  - Added gtk+ Requires for mtr-gtk package (#121705)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.54-9
changelog:
  - Add CVE patch for security reasons (#129386)
  - Add patch to fix broken --address option (#132628)
  - Add patch to fix broken reverse DNS lookups for ipv6 (#134532)


author: Phil Knirsch <pknirsch@redhat.com> 2:0.69-4
changelog:
  - Made the output, especially for reports much more readable (#147865)
  - Fixed --address option (#162029)


author: Adam Tkac <atkac redhat com> 2:0.75-6
changelog:
  - install mtr as SUID binary (#518828)
  - use fprintf instead of perror when getaddrinfo fails (#516603)


author: Jan Görig <jgorig redhat com> 2:0.80-1
changelog:
  - update to 0.80
  - mtr now waits for last sent packet (#611739)
  - fixed crashes in XML format
  - XML format fixes


author: Adam Tkac <atkac redhat com> - 2:0.81-1
changelog:
  - update to 0.81
  - mtr-now-waits-for-last-response.patch is no longer needed
  - fixed wide report output (#703549)


author: Michal Sekletar <msekleta@redhat.com> - 2:0.85-3
changelog:
  - enable hardened build
  - migrate from consolehelper to policykit (#502750)
  - specfile cleanup
  - introduce grace period (#1009051)
  - query all ipv6 nameservers (#966174)
  - add missing documentation (#1015552)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Jiri Pirko <jpirko@redhat.com> - 1.9-1
changelog:
  - Update to 1.9
  - libteamdctl: remove false lib dependencies
  - teamdctl: use new port config get function
  - libteamdctl: introduce support for port config get
  - libteamdctl: cache reply strings into list
  - teamd: introduce PortConfigDump control method
  - teamd: make teamd_get_port_by_ifname ifname argument const
  - Minor improvements to style and language.
  - do not install example binaries
  - minor man page(s) correction(s) and lintianisation
  - teamdctl: print error message if ifindex cannot be obtained
  - fix cflags path in pc files


author: Jiri Pirko <jpirko@redhat.com> - 1.10-1
changelog:
  - Update to 1.10
  - teamd: quit when our team device is removed from outside
  - libteam: ifinfo: watch for dellink messages and call change handlers for that
  - initscripts: make ifup/ifdown scripts usable by ifup/ifdown-eth scripts
  - teamdctl: unmess check_teamd_team_devname and fix double free there
  - man: correct type of "*_host" options
  - teamd_link_watch: specify "missed_max" option default value
  - bond2team: do not guess source_host option
  - teamd_link_watch: allow to send ARP probes if no source_host is specified
  - initscripts: do not try to re-add port if it is already there
  - teamdctl: add command for easy port presention checking
  - Fix potential small memory leak
  - usock: accept multiline message string parameters
  - libteamdctl: add notice for caller to do not modify or free certain strings
  - teamd: do not remove ports from team dev in case of take over mode
  - teamd: look for existing ports before adding new ones
  - libteam: introduce ream_refresh
  - teamd: fixed couple comments.
  - teamd: update hwaddr when changing team's macaddr
  - redhat: fix boolean types in example 2
  - initscripts: fix port up before master and port down after master
  - lb: enable/disable port according to linkwatch state
  - fix comment typo in ifdown-Team scripts
  - man teamd.conf: Minor improvements to style and language
  - man teamdctl: Minor improvements to style and language


author: Jiri Pirko <jpirko@redhat.com> - 1.11-1
changelog:
  - 1.11 release
  - teamd: add forgotten teamd_link_watch.h to noinst_HEADERS
  - teamd: add tipc.h kernel header
  - teamd: Add support for TIPC link watcher
  - teamd: add TIPC link watcher
  - teamd: move icmp6 NS/NA ping link watcher to a separate file
  - teamd: move arp ping link watcher to a separate file
  - teamd: move psr template link watcher to a separate file
  - teamd: move ethtool link watcher to a separate file
  - teamd_dbus: add PortConfigDump to introspection
  - teamd: allow restart on failure through systemd
  - teamd: distinguish exit code between init error and runtime error
  - man teamd.conf: remove "mandatory" since the options are no longer mandatory
  - teamd: add "debug_level" config option
  - teamd: allow to change debug level during run
  - teamd: register debug callback at the start of callbacks list
  - libteam: add team_change_handler_register_head function
  - teamd: lacp: update partner info before setting state
  - teamd: lacp: do not check SYNCHRO flag before enable of port
  - teamd: lacp: "expired" port is not selectable, only "current"
  - teamd: lacp: update actor system (mac) before sending lacpdu
  - teamd: respect currently set user linkup for created linkwatches
  - teamd: split --take-over option into --no-quit-destroy
  - teamd: fix port removal when using take_over
  - libteam: add SubmittingPatches doc
  - libteam: Use u8 for put/get TEAM_ATTR_OPTION_TYPE


author: Jiri Pirko <jpirko@redhat.com> - 1.12-1
changelog:
  - 1.12 release
  - teamd: teamd_state_val_dump move TEAMD_BUG_ON so it can be actually triggered
  - teamd: fix coverity error in teamd_sriov_physfn_addr
  - libteamdctl: adjust doc comments to be processed by doxygen
  - remove forgotten src dir
  - libteam: stringify.c adjust doc comments to be processed by doxygen
  - libteam: ports.c adjust doc comments to be processed by doxygen
  - libteam: options.c adjust doc comments to be processed by doxygen
  - libteam: ifinfo.c adjust doc comments to be processed by doxygen
  - libteam: libteam.c adjust doc comments to be processed by doxygen
  - add doxygen html doc generation into autoconf
  - teamd: tipc: use TIPC_MAX_*_NAME for buffers and check len
  - fix strncmp len in ifname2ifindex
  - teamd: fix incorrect usage of sizeof in __str_sockaddr


author: Jiri Pirko <jpirko@redhat.com> - 1.13-1
changelog:
  - 1.13 release
  - teamd: fix coding style a bit after previous commit
  - teamd: Don't ever kill PID 0
  - teamd: tipc: topology-aware failover
  - teamd: tipc: fix team port removal bugs
  - zmq: remove unused my_free_msg
  - libteamdctl: zmq: remove include of teamd.h
  - teamd: add teamd_zmq_common.h to noinst headers


author: Jiri Pirko <jpirko@redhat.com> - 1.16-1
changelog:
  - 1.16 release
  - teamd: events: update ctx->hwaddr_len before calling hwaddr_changed handlers
  - teamd: do not change ctx->hwaddr pointer
  - teamd: lacp: change port mac address when team mac address is changed
  - teamdctl: show port link down count in state output
  - teamd: lw: count how many times has been the port down
  - init unitialized value to 0/NULL to silence gcc warnings instead of x=x
  - libteamdctl: rename recvmsg variable to recv_message
  - teamd: check retval of malloc in lw_tipc_link_state_change
  - teamd: fix potential memory leak in __set_sockaddr error path
  - libteamdctl: fix typo in warning message in cli_zmq_recv
  - libteam: check phys_port_id_len in update_phys_port_id
  - teamnl: fix potential memory leak in run_cmd_getoption


author: Jiri Pirko <jpirko@redhat.com> - 1.17-1
changelog:
  - 1.17 release
  - update copyright dates
  - man: teamdctl: add entry for item set of debug_level
  - teamd: lw: nsna_ping: fix na rx handling
  - teamd: lw: arp_ping: fix arp rx handling
  - libteam: ifinfo: fix rtnl dellink handling


author: Jiri Pirko <jiri@resnulli.us> - 1.18-1
changelog:
  - 1.18 release
  - teamd: lacp: change actor system value on team mac change
  - Fix sending duplicate LACP frames at the start of establishing a logical channel.
  - Fix teamd memory corruption issues seen by missing port unlink in ifinfo_destroy()
  - libteam: Add check to disallow creating device names longer than 15 chars.


author: Jiri Pirko <jiri@resnulli.us> - 1.19-1
changelog:
  - 1.19 release
  - teamd: add Before=network.target to systemd service file
  - teamd: lacp: update actor state before sending LACP frames
  - regenerate dbus policy file from template when user changed
  - drop privileges to usr/grp specified at build time
  - make teamd's run directory configurable
  - create run directory at teamd program start
  - teamd: fix cut&paste issue on delay_up
  - Add stamp-h1 artifact to .gitignore
  - Reduce usock file permissions to 700.
  - Do not fail teamd_add_ports() when one port is missing
  - Add missing prototypes for admin_state functions
  - teamd: lacp: Don't send LACP frames when master team device is down.
  - libteam, teamd: Track admin state of team device and add handlers to watch for changes.
  - teamd: loadbalance mode lacks a .hwaddr_changed in teamd_event_watch_ops
  - libteamdctl: fix timeval value for select


author: Jiri Pirko <jiri@resnulli.us> - 1.21-1
changelog:
  - 1.21 release
  - libteam: add missing "static inline" in nl_updates
  - libteam: check for definition of NLA_PUT_S* separatelly


author: Jiri Pirko <jiri@resnulli.us> - 1.22-1
changelog:
  - 1.22 release
  - dbus: don't do <deny send_interface="..." /> in dbus service file
  - teamd: Fix member port state change on master team admin UP.
  - teamd: add CAP_NET_RAW capability for LACP packet sockets
  - add teamd.conf.in to EXTRA_DIST


author: Jiri Pirko <jiri@resnulli.us> - 1.23-1
changelog:
  - 1.23 release
  - dbus: don't do <deny send_interface="..." /> in template dbus s. f.
  - libteam: retry on NLE_DUMP_INTR error


author: Jiri Pirko <jiri@resnulli.us> - 1.24-1
changelog:
  - 1.24 release
  - teamd: lacp: use original hwaddr as source address in lacpdus
  - teamd: do correct l3/l4 tx hashing with vlans
  - libteam: Fix broken links


author: Jiri Pirko <jiri@resnulli.us> - 1.25-1
changelog:
  - 1.25 release
  - teamd: handle vlan 0 packets
  - libteam: fix TEAM_OPTION_TYPE_BOOL type for big endian architectures


author: Jiri Pirko <jiri@resnulli.us> - 1.26-1
changelog:
  - 1.26 release
  - teamd: lacp: Do not unselect port if it changes state to "expired"
  - man: in lacp it's 'port_config', not 'port_options'
  - teamd: fix the issue that network blocks when systemctl stop teamd
  - teamd: change to Before=network-pre.target in systemd service file
  - man teamd.conf: fix indentation
  - misc: fix an out-of-bound write with zero-length hardware address
  - teamd: LACP runner does not set Agg bit on first slave


author: Jiri Pirko <jiri@resnulli.us> - 1.27-1
changelog:
  - 1.27 release
  - teamd: check target host with nap.nah.nd_na_target
  - teamd: check ipv6 packet only with the 4 bits version
  - teamd: set correct bits for standby ports
  - libteam: Add team_get_port_enabled function
  - teamd: check port link_up when a port is added with loadbalance runner
  - libteam: resynchronize ifinfo after lost RTNLGRP_LINK notifications
  - SubmittingPatches: add checkpatch note
  - README: add note regarding pull requests
  - teamd: escape some sensitive characters in ifname with double quotation marks


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.27-4
changelog:
  - Python 2 binary package renamed to python2-libteam
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Xin Long <lxin@redhat.com> - 1.27-8
changelog:
  - Add fix to only process LACPDU after port ifinfo is set
  - Add port_hwaddr_changed for ab, lb and lacp runners
  - Add patch to fix runner.sys_prio default in man docs
  - Add patch to empty LDFLAGS before checking for libnl3 in configure.ac
  - Add patch to not crash when trying to print unregistered device name
  - Add patch to use SWIG_FromCharPtrAndSize for Python3 support
  - Add patch to check to_stdout return correctly in bond2team in bond2team
  - Add 'BuildRequires: systemd-units' in libteam.spec to fix building errors
  - Add 'autoreconf --force --install -I m4' in libteam.sepc to regenerate configure
  - Remove ifup/ifdown scripts installation in libteam.sepc


author: Xin Long <lxin@redhat.com> - 1.28-1
changelog:
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value [1679853]
  - teamd: lw: nsna_ping: only send ns on enabled port [1671195]
  - teamd: lw: arp_ping: only check arp reply message [1663093]
  - teamd: config: update local prio to kernel [1657113]
  - teamnl: update help message
  - 1.28 release
  - teamd: lacp: send LACPDU when port state transitions from DEFAULT to CURRENT
  - man teamd.conf: Document ARP Ping link_watch.vlanid option
  - man teamd.conf: fix indentation of link_watch.send_always
  - libteam/options: fix s32/u32 data storage on big endian
  - teamd: add an option to force log output to stdout, stderr or syslog
  - teamd: add port_master_ifindex_changed for teamd_event_watch_ops
  - man: add 'random' to the list of available runners
  - examples: fix duplex comparison against best port


author: Xin Long <lxin@redhat.com> - 1.28-2
changelog:
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1668132]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path [1687336]
  - teamd: remove port if adding fails [1668744]


author: Xin Long <lxin@redhat.com> - 1.28-3
changelog:
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set [1722449]
  - teamd: improve the error output for non-integer port prio


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732587]
  - 1.29 release
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1767685]
  - libteam: set netlink event socket as non-blocking [1684389]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval


author: Jeremy Katz <katzj@redhat.com> - 7.0-1
changelog:
  - BR libblkid-devel now instead of e2fsprogs-devel
  - Add bits to switch to using dracut for new-kernel-pkg


author: Hans de Goede <hdegoede@redhat.com> - 7.0.7-1
changelog:
  - Remove writing rd_plytheme=$theme to kernel args in dracut mode (hansg)
  - Add a couple of test cases for extra initrds (rstrode)
  - Allow tmplLine to be NULL in getInitrdVal (rstrode)


author: Peter Jones <pjones@redhat.com> - 7.0.12-1
changelog:
  - compare rootdev using uuid instead of stat, for better btrfs support (josef)
    Resolves: rhbz#530108


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
    Related: rhbz#557922
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 8.3-1
changelog:
  - Fix new-kernel-pkg invocation of grubby for grub (patch from Mads Kiilerich)
    Resolves: rhbz#725185


author: Adam Williamson <awilliam@redhat.com> - 8.4-1
changelog:
  - Update to 8.4:
  	+ fix Loading... line for updated kernels
  	+ Add new '--default-title' feature
  	+ Add new '--default-index' feature
  	+ add feature for testing the output of a grubby command
  	+ Fix detection when comparing stage1 to MBR
  	+ do not link against glib-2.0
  	+ Don't crash if grubConfig not found
  	+ Adding extlinux support for new-kernel-pkg
  	+ Look for Debian / Ubuntu grub config files (#703260)
  	+ Make grubby recognize Ubuntu's spin of Grub2 (#703260)


author: Peter Jones <pjones@redhat.com> - 8.9-1
changelog:
  - Refactor grub2 title extraction, making it a function (Cleber Rosa)
  - Include prefix when printing kernel information (Cleber Rosa)
  - Implement support for "default saved" for grub2 (Cleber Rosa)
  - Try to display title when printing information with '--info' (Cleber Rosa)
  - new-kernel-pkg fails to find U-Boot. (D. Marlin)
  - Add support to new-kernel-pkg to recognize ARCH == armv5tel needed for Kir
    (D.Marlin)
  - Include a / when one is missing in paths (#769641)
  - Fix hard coded paths so kernel's "make install" will DTRT.
  - Fix endswith() to correctly test its input for validity.


author: Peter Jones <pjones@redhat.com> - 8.10-1
changelog:
  - Update to 8.10
  - Use "isquote" where appropriate
  - Make --remove-kenrel support titles in grub2 (jianzhong.huang)
  - Use grub2 if it's there on ppc.


author: Peter Jones <pjones@redhat.com> - 8.12-1
changelog:
  - Update to 8.12
  - Preserve trailing indentation when splitting line elements (mads)
    Resolves: rhbz#742720
  - Pick last device mounted on / (pjones,bcl)
    Related: rhbz#820340
    Related: rhbz#820351


author: Peter Jones <pjones@redhat.com> - 8.21-1
changelog:
  - Use systemd vconsole.conf and locale.conf if present
    Resolves rhbz#881908
  - Avoid unnecessary stat calls (from Ville Skyttä)
    Resolves rhbz#741135
  - Spelling fixes (Ville Skyttä)
  - Add a test case for rhbz#742885
  - Handle case-insensitive extlinux config files properly (from Johannes Weiner)


author: Peter Jones <pjones@redhat.com> - 8.23-1
changelog:
  - Update to 8.23
  - Fix empty root device in case of an empty /etc/fstab (lemenkov)
  - General refactoring and cleanup (harald)
  - Don't clean up modules.* so aggressively (harald)


author: Peter Jones <pjones@redhat.com> - 8.25-1
changelog:
  - Error instead of segfaulting if we can't find any working config
    Resolves: rhbz#912873
    Resolves: rhbz#751608


author: Peter Jones <pjones@redhat.com> - 8.27-1
changelog:
  - Make grubby understand grub's "saved_entry" system
    Resolves: rhbz#768106
    Resolves: rhbz#736188
  - BuildRequire grub2 on appropriate platforms, for the test suite.


author: Peter Jones <pjones@redhat.com> - 8.34-1
changelog:
  - Make grub2 "--copy-default --add-kernel=foo --initrd=bar" work when default
    has no initrd line.
    Resolves: rhbz#1099627
    Related: rhbz#1096358


author: Peter Jones <pjones@redhat.com> - 8.35-5
changelog:
  - See if what people are seeing in 1141414 is actually 957681
    Related: rhbz#957681
    Related: rhbz#1141414


author: Peter Jones <pjones@redhat.com> - 8.35-7
changelog:
  - Revert "debug" image creation for now
    Resolves: rhbz#1153410
  - Fix minor quoting errors in dtbdir code
    Resolves: rhbz#1088933


author: Peter Jones <pjones@redhat.com> - 8.35-9
changelog:
  - Disable "make check" on arm builds; right now the test suite is broken
    there and raises false positives constantly.


author: Peter Jones <pjones@redhat.com> - 8.38-1
changelog:
  - Update to 8.38
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.39-1
changelog:
  - Update to 8.39
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.40-13
changelog:
  - Make the temporary config wrapper be what "grubby" contains, and put
    traditional grubby in grubby-deprecated.


author: Peter Jones <pjones@redhat.com> - 8.40-15
changelog:
  - Install installkernel-bls here as well, not just in the grub2 package,
    since s390x doesn't have grubby packages.
    Related: rhbz#1619344


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-17
changelog:
  - grubby-bls should only check if kernel exists and not if was installed
    Resolves: rhbz#1634740
  - Use ! instead of , as sed delimiter in grubby-bls script
    Resolves: rhbz#1634744
  - Print information about the entry set as default
    Resolves: rhbz#1636180


author: Peter Jones <pjones@redhat.com> - 8.40-19
changelog:
  - grubby-bls: Make grubby-bls sort everything the same way grub2 does
    Resolves: rhbz#1638103
  - grubby-bls: Consistently use the filename as the bls id
    Related: rhbz#1638103
  - grubby-bls: check if entry exists before attempting to print its info
    Resolves: rhbz#1634712


author: Peter Jones <pjones@redhat.com> - 8.40-20
changelog:
  - Add missing patches from RHEL-7 for grubby-deprecated.
    Resolves: rhbz#1561919
  - grubby-bls: make a copy of the cmdline if is modified for an entry
    Resolves: rhbz#1629054


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-21
changelog:
  - grubby-bls: escape delimiter character before replacing the options field
    Resolves: rhbz#1640017


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-29
changelog:
  - grubby-bls: print the absolute kernel and initramfs images paths
    Resolves: rhbz#1649778
  - grubby-bls: make info print the root parameter if is present in cmdline
    Resolves: rhbz#1649791


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-31
changelog:
  - grubby-bls: allow to specify the same kernel param multiple times
    Resolves: rhbz#1652486
  - grubby-bls: expand kernel options if these are environment variables
    Resolves: rhbz#1649785
  - grubby-bls: always generate the BLS snippets when adding new entries
    Resolves: rhbz#1653365
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651672


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Stef Walter <stefw@redhat.com> - 0.5-1
changelog:
  - Update to upstream 0.5 version
  - No more libadcli, and thus no adcli-devel
  - Many new adcli commands
  - Documentation


author: Stef Walter <stefw@redhat.com> - 0.7-1
changelog:
  - Work around broken krb5 with empty passwords [#960001]
  - Fix memory corruption issue [#959999]
  - Update to 0.7, fixing various bugs


author: Stef Walter <stefw@redhat.com> - 0.7.4-1
changelog:
  - Update to upstream point release 0.7.4
  - Correctly handle truncating long host names
  - Try to contact all available addresses for discovery
  - Build fixes


author: Stef Walter <stefw@redhat.com> - 0.7.5-1
changelog:
  - Update to upstream point release 0.7.5
  - Workaround for discovery via IPv6 address
  - Correctly put IPv6 addresses in temporary krb5.conf


author: Sumit Bose <sbose@redhat.com> - 0.8.2-1
changelog:
  - Update to upstream release 0.8.2
  - various other fixes and improvements from the latest Fedora update


author: Sumit Bose <sbose@redhat.com> - 0.8.2-3
changelog:
  - use autosetup macro to simplify patch handling
  - fixed rpmlint warnings in the spec file
  - join failed if hostname is not FQDN [#1677194]
  - adcli join fails in FIPS enabled environment [#1717355]
  - forward port of RHEL-7.7 fixes and enhancements


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.8.0-0.fdr.0.2.cvs20030730
changelog:
  - Update to 20030730.
  - Clean up %docs.
  - Include *.la (uses ltdl).
  - Own the %{_libdir}/pkcs11 directory.
  - Disable signer; assuan has disappeared from the tarball :(


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.2-0.fdr.1
changelog:
  - Update to 0.9.2, old patches applied upstream.
  - Add patch to fix parallel builds.
  - Convert man pages to UTF-8.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.2-0.fdr.2
changelog:
  - Building the signer plugin can be disabled with "--without signer".
    Thanks to Fritz Elfert for the idea.
  - Update description.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:0.9.4-0.fdr.1
changelog:
  - Update to 0.9.4, parallel build patch applied upstream.
  - Patch to fix library paths and LDFLAGS.
  - Don't require mozilla, but the plugin dir in signer.
  - Build with dependency tracking disabled.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.4-1
changelog:
  - Drop unnecessary Epochs, pre-FC1 compat cruft, and no longer relevant
    --with(out) rpmbuild options.
  - Exclude *.la.


author: Michael Schwendt <mschwendt[AT]users.sf.net> - 0.9.4-2
changelog:
  - Substitute hardcoded 'lib' in OpenSSL checks for multi-lib platforms.
  - Use --with-plugin-dir instead of --with-plugin-path (fixes x86_64).


author: Ville Skyttä <ville.skytta at iki.fi> - 0.9.6-2
changelog:
  - 0.9.6, build patch applied upstream.
  - Package summary and description improvements.
  - Drop explicit openct dependency.


author: Ville Skyttä <ville.skytta at iki.fi> - 0.11.2-0.1.pre3
changelog:
  - 0.11.2-pre3.
  - Build with new libassuan.
  - Don't run autotools during build.
  - Adjust to readline/termcap/ncurses changes.


author: Michael Schwendt <mschwendt@fedoraproject.org> - 0.11.11-2
changelog:
  - Explicitly BR libassuan-static in accordance with the Packaging
    Guidelines (libassuan-devel is still static-only).


author: Kalev Lember <kalev@smartlink.ee> - 0.11.12-1
changelog:
  - new upstream version
  - replaced %define with %global
  - BR clean up from items not applicable to current Fedora releases


author: Kalev Lember <kalev@smartlink.ee> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Removed and obsoleted mozilla-opensc-signer and opensc-devel subpackages
  - Dropped patches which are now upstreamed
  - It is no longer possible to build in both pcsc-lite and openct support,
    so opensc now gets built exclusively with pcsc-lite.


author: Milan Broz <mbroz@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0 (#890770)
  - Remove no longer provided onepin-opensc-pkcs11.so.
  - Add iasecc-tool, openpgp-tool and sc-hsm-tool.


author: Stef Walter <stefw@redhat.com> - 0.13.0-4
changelog:
  - Use the standard name format for p11-kit module configs
  - Put the p11-kit module config is the system location


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 0.13.0-12
changelog:
  - Added fix for crash when calling pkcs11-tool with an invalid module (#1071368)
  - Added fix for invalid parameters passed to module by pkcs11-tool
    when importing a private key (#1071369)
  - Configuration file opensc.conf was renamed to opensc-arch.conf to
    avoid multi-arch issues.


author: Jakub Jelen <jjelen@redhat.com> - 0.15.0-6
changelog:
  - Add support for 2048 key length (#1350588)
  - Explicitly set CKA_PRIVATE to false when writing certificates (#1272127)


author: Jakub Jelen <jjelen@redhat.com> - 0.16.0-2.20161016git0362439
changelog:
  - Updated to latest git to address openssl 1.1.0 compilation issues (#1388895)
  - Do not own /etc/bash_completion.d directory (#1303441)


author: Jakub Jelen <jjelen@redhat.com> - 0.17.0-6
changelog:
  - PIV: Use Cardholder name in the token label
  - Avoid infinite loop when reading CAC cards
  - Properly parse multi-byte length in SimpleTLV
  - Support CAC Alt tokens


author: Jakub Jelen <jjelen@redhat.com> - 0.17.0-7
changelog:
  - Obsolete coolkey
  - Do not report bogus errors from pkcs11-switch
  - Do not delete nonexisting modules during uninstall (#1526670)


author: Jakub Jelen <jjelen@redhat.com> - 0.17.0-10
changelog:
  - Install the PKCS#11 modules also to the new NSS DB
  - Drop the pkcs11-switch as the coolkey is gone


author: Jakub Jelen <jjelen@redhat.com> - 0.18.0-3
changelog:
  - Do not add pkcs11 module to NSS after installation
    (NSS is loading p11-kit modules by default)
  - Remove pkcs11-switch since there is nothing to switch to


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-1
changelog:
  - New upstream release fixing various CVE-2018-16418 - 16421, 16423 - 16427
  - Add support for RSA-PSS signatures


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-2
changelog:
  - Avoid mismatching coolkey cards for muscle ones (#1588722)
  - Implement legacy CAC1 driver (#1638052)
  - Disable pinpad
  - Fixup verification after RSA-PSS implementation


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-3
changelog:
  - Unbreak the RSA-PSS mechanisms (#1595626)
  - Unbreak the signing using hashed mechanisms in CardOS and others (#1644338)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-4
changelog:
  - Unbreak the Dual CAC cards in PIV driver (#1651748)
  - Fix few more corner cases for handling different types of padding (#1595626)
  - Unbreak signature verification in pkcs11-tool (#1651748)


author: Kevin Fenzi <kevin@scrye.com> 0-0.3.20140118git
changelog:
  - Update to 20140118 snapshot
  - Fixed License tag to be correct
  - Fixed changelog
  - nft scripts now use full path for nft
  - Fixed man page building
  - Dropped unneeded rm in install
  - Patched build to not be silent.


author: Phil Sutter - 1:0.9.0-4
changelog:
  - Add fixes for covscan report
  - Fix for ECN keyword in LHS of relational
  - Update meta pkt_type value description
  - Fix for segfault with JSON output if xt expression is present
  - Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
  - Use native JSON API in nft monitor


author: Phil Sutter <psutter@redhat.com> - 1:0.9.0-9
changelog:
  - Allow variables in jump statement
  - Make example configs readable only by root
  - Document nft list parameters
  - Document vmap statement
  - Install netdev-ingress.nft sample config in the right spot
  - Backport upstream fixes since last release


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190514a-2
changelog:
  - Remove disclaimer, as it is not as important now to justify kmsg/log
    pollution; its contents are partially adopted in README.caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20190918.1
changelog:
  - Intel CPU microcode update to 20190918 (#1758538).
  - Add new disclaimer, generated based on relevant caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191112-1
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764059, #1764072, #1764951,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Christopher Snyder <csnyder@redhat.com> 1.23.8-26
changelog:
  - 1654531: Add proxy_scheme to rhsm.conf (csnyder@redhat.com)
  - 1665409: Update syspurpose status in cockpit addon (nmoumoul@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.8-28
changelog:
  - 1668152: Remove the Select SLA screen from initial-setup
    (nmoumoul@redhat.com)
  - 1676982: Do not make duplicate sync calls on syspurpose show
    (csnyder@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.23.8-34
changelog:
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)
  - 1666845: Always submit empty string for reset (csnyder@redhat.com)


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.1
changelog:
  - Resolves: rhbz#1691750 - pam_sss failing for external users not configured
                             via sssd


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.2
changelog:
  - Resolves: rhbz#1696596 - AD user not found after establishing trust and
                             restarting sssd [ZStream Clone]


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.3
changelog:
  - Resolves: rhbz#1701135 - Include libsss_nss_idmap-devel in the Builder
                             repository


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - make biosdevname optional even on Dell servers (#1623621)
  - prevent infinite recursion in smbios_setslot() (#1499458)
  - Netronome biosdevname support (#1649036)


author: Steve Fox <drfickle@k-lug.org> - 0.20060706-2
changelog:
  - Fix the Makefile so that the ld.hugetlbfs script doesn't store the
    DESTDIR in the path to the ldscripts dir


author: Eric Munson <ebmunson@us.ibm.com> 2.1-1
changelog:
  - Updating for libhuge-2.1 release
  - Adding -devel and -utils subpackages for various utilities
    and devel files.


author: Jarod Wilson <jarod@redhat.com> 2.6-3
changelog:
  - Add hopefully-about-to-be-merged-upstream hugeadm enhancements
  - Add huge pages setup helper script, using new hugeadm enhancements


author: Kyle McMartin <kyle@fedoraproject.org> - 2.17-1
changelog:
  - Update for upstream 2.17 release (adds AArch64 support)
  - update libhugetlbfs-2.16-s390.patch for 2.17 changes to Makefile
  - add libhugetlbfs-2.17-ppc.patch to fix powerpc{,64}


author: Rafael Aquini <aquini@redhat.com> - 2.20-10
changelog:
  - Fix up annocheck distro flag failures (1624131)
  - Convert libhugetlbfs run_tests.py to Python3 (1620250)


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com> 1.3.31-1
changelog:
  - fix man page (#220558, <esr@thyrus.com>)
  - add some more verbiage in alternatives man page (#221089)
  - don't print usage message on a nonexstent service (#226804)


author: Bill Nottingham <notting@redhat.com> 1.3.33-1
changelog:
  - various changes from review - support alternate %{_sbindir}, fix
    summaries, add version to requires, assorted other bits


author: Bill Nottingham <notting@redhat.com> 1.3.34-1
changelog:
  - translation updates: as, bg, bn_IN, bs, ca, de, fr, hi, hu, id, ja,
    ka, ml, ms, nb, or, sk, sl
  - add resetpriorities to the man page (#197399)


author: Bill Nottingham <notting@redhat.com> 1.3.40-1
changelog:
  - fix some overflows. (#176944)
  - add --type parameter to specify either xinetd or sysv services.
    (#467863, <mschmidt@redhat.com>
  - do a permissions check before add/remove/on/off/resetpriorities. (#450254)
  - parse Short-Description correctly (#441813, <peter_e@gmx.net>)


author: Bill Nottingham <notting@redhat.com> 1.3.42-1
changelog:
  - further LSB fixes (#474223)
  - throw errors on various malformed init scripts (#481198)
  - man page updates re: LSB (#487979)
  - translation updates: mai, gu, pt_BR, ro, ca, pa, sr, fr, hu


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.50-1
changelog:
  - forward actions to systemctl when necessary (<lennart@poettering.net>)
  - assorted translation updates


author: Bill Nottingham <notting@redhat.com> 1.3.52-1
changelog:
  - set state before frobbing dependencies (#693202)
  - ntsysv: don't list or configure service overridden by systemd (#691224)
  - chkconfig: don't show services overridden by systemd in --list (#693504, #693500)
  - don't forward to systemd if it's not installed (<arvidjaar@gmail.com>)
  - update translations


author: Bill Nottingham <notting@redhat.com> 1.3.53-1
changelog:
  - ntsysv: change the default to configure runlevels 2/3/4/5 (#709254)
  - alternatives: check whether the --initscript param is a systemd service, act appropriately (#714830)
  - forward chkconfig --del to systemctl disable where necessary


author: Bill Nottingham <notting@redhat.com> 1.3.54-1
changelog:
  - alternatives: fix --initscript systemd support (#714830)
  - revert forwarding of 'chkconfig --del' to 'systemctl disable'


author: Bill Nottingham <notting@redhat.com> 1.3.57-1
changelog:
  - assorted cleanups to LSB dependency support (#693202 fixed properly, #701573)
  - fix kill values for LSB-only scripts (#696305, <jbastian@redhat.com>)
  - don't apply start deps for services that aren't starting anywhere (#750446)


author: Bill Nottingham <notting@redhat.com> 1.3.58-1
changelog:
  - fix forwarding to systemctl with systemd >= 41 (#789256)
  - assorted regression fixes from 1.3.57 (#782152, etc.)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.60-1
changelog:
  - don't completely override LDFLAGS
  - pass along any rpm-configured LD flags
  - make sure install_initd/remove_initd provides appropriate help output for those commands (#803818)
  - check for overridden services in /etc too (#850899)
  - chconfig should own /etc/rc.d (#894328)
  - isXinetdEnabled should also ask systemd (#820363)
  - alternatives: look for service file also in /etc
  - alternatives: add --list option (#622635)
  - chkconfig: add hint to call systemctl list-unit-files and list-dependencies (#800334)
  - chkconfig: correctly handle unreadable init.d (#913807)
  - alternatives: call systemctl enable with --force (#915667)


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.8-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config
  - chkconfig: use isXinetdEnabled instead of isOn
  - leveldb: trim leading whitespaces from systemctl
  - leveldb: suppress error messages when selinux is turned off
  - alternatives: always recreate symlinks when the alternative is updated
  - test-alternatives: basic tests for slave links
  - chkconfig: resetpriorities should work on all runlevels


author: Lukas Nykryn <lnykryn@redhat.com> - 1.11-1
changelog:
  - Add tests for --add/remove-slave and use beakerlib
  - alternatives: add-slave and remove-slave
  - leveldb: don't crash on long names
  - alternatives: prettier --list output


author: Phil Knirsch <pknirsch@redhat.com> 1.17-1
changelog:
  - Update to sg3-utils-1.17
  - Split package up into 3 subpackages: sg3_utils, devel and libs
  - Some minor updates to the specfile


author: Phil Knirsch <pknirsch@redhat.com> - 1.25-4
changelog:
  - Dropped really unnecessary Provides of sg_utils (#226414)
  - Use --disable-static in configure (#226414)


author: Dan Horák <dan@danny.cz> - 1.28-1
changelog:
  - update to version 1.28
  - added fixes from RHEL to rescan-scsi-bus.sh
  - added scsi-rescan symlink to the rescan-scsi-bus.sh script


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Pavel Raiskup <praiskup@redhat.com> - 1.29-3
changelog:
  - revert back some docs
  - fix --create to use --xattrs-include/exclude (rhbz#1341787)
  - don't hang with '-x --skip-old-files --xattrs' (rhbz#1399036)


author: Pavel Raiskup <praiskup@redhat.com> - 1.30-1
changelog:
  - rebase to latest upstream release, per release notes
    http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html


author: Aleš Kozumplík <ales@redhat.com> - 0.4.16-1
changelog:
  - fix: ensure MDPayload always has a valid progress attribute. (RhBug:1069996) (Ales Kozumplik)
  - refactor: Move repo-pkgs upgrade-to to a standalone class instead of reusing the UpgradeToCommand. (Radek Holy)
  - remove: BaseCli.updatePkgs (Radek Holy)
  - refactor: Remove the reference to updatePkgs from UpgradeSubCommand. (Radek Holy)
  - refactor: Remove the reference to updatePkgs from UpgradeCommand. (Radek Holy)
  - refactor: Move repo-pkgs upgrade to a standalone class instead of reusing the UpgradeCommand. (Radek Holy)
  - remove: BaseCli.installPkgs (Radek Holy)
  - refactor: Remove the reference to installPkgs from InstallSubCommand. (Radek Holy)
  - refactor: Remove the reference to installPkgs from InstallCommand. (Radek Holy)
  - refactor: Move repo-pkgs install to a standalone class instead of reusing the InstallCommand. (Radek Holy)
  - Revert "Support filtering by repository name in install_groupie." (Radek Holy)
  - Revert "Support filtering by repository name in Base.select_group." (Radek Holy)
  - Drop group filtering by repository name from installPkgs. (Radek Holy)
  - Drop "repo-pkgs install @Group" support. (Radek Holy)
  - refactor: Move CheckUpdateCommand.check_updates to BaseCli. (Radek Holy)
  - refactor: Move repo-pkgs check-update to a standalone class instead of reusing the CheckUpdateCommand. (Radek Holy)
  - refactor: Move repo-pkgs list to a standalone class instead of reusing the ListCommand. (Radek Holy)
  - tests: Add tests of repo-pkgs info against the documentation. (Radek Holy)
  - Fix "repo-pkgs info installed" behavior with respect to the documentation. (Radek Holy)
  - refactor: Move MockBase methods to BaseStubMixin. (Radek Holy)
  - refactor: Move repo-pkgs info to a standalone class instead of reusing the InfoCommand. (Radek Holy)
  - refactor: Move InfoCommand._print_packages to BaseCli.output_packages. (Radek Holy)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.17-1
changelog:
  - doc: in the faq, warn users who might install rawhide packages on stable. (RhBug:1071677) (Ales Kozumplik)
  - cli: better format the download errors report. (Ales Kozumplik)
  - drpm: properly report applydeltarpm errors. (RhBug:1071501) (Ales Kozumplik)
  - fixed Japanese translatated message (RhBug:1071455) (Jan Silhan)
  - generated and synchronized translations with transifex (Jan Silhan)
  - added transifex support to cmake (gettext-export, gettext-update) (Jan Silhan)
  - api: expose RepoDict.get_matching() and RepoDict.all() (RhBug:1071323) (Ales Kozumplik)
  - api: add Repo.set_progress_bar() to the API. (Ales Kozumplik)
  - tests: test_cli_progress uses StringIO to check the output. (Ales Kozumplik)
  - downloads: fix counting past 100% on mirror failures (RhBug:1070598) (Ales Kozumplik)
  - repo: log callback calls to librepo. (Ales Kozumplik)
  - Add repository-packages remove-or-reinstall command. (Radek Holy)
  - Support negative filtering by new repository name in Base.reinstall. (Radek Holy)
  - Support removal N/A packages in Base.reinstall. (Radek Holy)
  - Add repository-packages remove command. (Radek Holy)
  - refactor: Reduce amount of code in repository-packages subcommands. (Radek Holy)
  - Support filtering by repository name in Base.remove. (Radek Holy)
  - remove: BaseCli.erasePkgs (Radek Holy)
  - Add repository-packages reinstall command. (Radek Holy)
  - exceptions: improve empty key handling in DownloadError.__str__(). (Ales Kozumplik)
  - downloads: fix fatal error message return value from download_payloads() (RhBug:1071518) (Ales Kozumplik)
  - fixes problem with TypeError in Base.read_comps() in python3 (RhBug:1070710) (Tim Lauridsen)
  - fix read_comps: not throwing exceptions when repo has no repodata (RhBug:1059704) (Jan Silhan)
  - not decompressing groups when --cacheonly option is set (RhBug:1058224) (Jan Silhan)
  - added forgotten import (Jan Silhan)
  - Add repository-packages move-to command. (Radek Holy)
  - Add repository-packages reinstall-old command. (Radek Holy)
  - Support filtering by repository name in Base.reinstall. (Radek Holy)
  - tests: test effects instead of mock calls. (Radek Holy)
  - Wrap some recently added long lines. (Radek Holy)
  - remove: BaseCli.reinstallPkgs (Radek Holy)
  - repos: repos can never expire. (RhBug:1069538) (Ales Kozumplik)
  - build: rebuild with 9d95442 (updated summaries_cache). (Ales Kozumplik)
  - doc: update summaries_cache. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.18-1
changelog:
  - api: drop items deprecated since 0.4.9 or earlier. (Ales Kozumplik)
  - api: deprecate Base.select_group() (Ales Kozumplik)
  - doc: document the group marking operations. (Ales Kozumplik)
  - api: add Base.group_install() with exclude capability. (Ales Kozumplik)
  - groups: recognize 'mark install' instead of 'mark-install'. (Ales Kozumplik)
  - Allow installing optional packages from a group. (RhBug:1067136) (Ales Kozumplik)
  - groups: add installing groups the object marking style. (Ales Kozumplik)
  - groups: add Base.group_remove(). (Ales Kozumplik)
  - groups: add support for marking/unmarking groups. (Ales Kozumplik)
  - groups: add dnf.persistor.GroupPersistor(), to store the installed groups. (Ales Kozumplik)
  - logging: log plugin import tracebacks on the subdebug level. (Ales Kozumplik)
  - rename: dnf.persistor.Persistor -> RepoPersistor. (Ales Kozumplik)
  - doc: update README and FAQ with the unabbreviated name. (Ales Kozumplik)
  - groups: fix grouplist crashes with new libcomps. (Ales Kozumplik)
  - Do not terminate for unreadable repository config. (RhBug:1071212) (Ales Kozumplik)
  - cli: get rid of ridiculous slashes and the file:// scheme on config read fails. (Ales Kozumplik)
  - repo: log more than nothing about a remote repo MD download. (Ales Kozumplik)
  - drpm: fallback to .rpm download on drpm rebuild error. (RhBug:1071501) (Ales Kozumplik)
  - remove: Base.download_packages()' inner function mediasort(). (Ales Kozumplik)
  - tests: tidy up the imports, in particular import mock from support. (Ales Kozumplik)
  - changed documentation of distro-sync command (Jan Silhan)
  - added distro-sync explicit packages support (RhBug:963710) (Jan Silhan)
  - renamed testcase to distro_sync_all (Jan Silhan)
  - Minor spelling (Arjun Temurnikar)
  - i18n: translate repo sync error message. (Ales Kozumplik)
  - add support for ppc64le (Dennis Gilmore)
  - there is no arch called arm64 it is aarch64 (Dennis Gilmore)


author: Aleš Kozumplík <ales@redhat.com> - 0.4.19-1
changelog:
  - downloads: bump number of downloaded files on a skip. (RhBug:1079621) (Ales Kozumplik)
  - packaging: add dnf.cli.commands to the installation. (Ales Kozumplik)
  - refactor: put GroupCommand into its separate module. (Ales Kozumplik)
  - rename: make cli.commands a subpackage. (Ales Kozumplik)
  - AUTHORS: added Albert. (Ales Kozumplik)
  - test: fixed CacheTest.test_noroot() when running as root (Albert Uchytil)
  - AUTHORS: added Tim. (Ales Kozumplik)
  - fixes TypeError: '_DownloadErrors' object is not iterable (RhBug:1078832) (Tim Lauridsen)
  - fixed not including .mo files (Jan Silhan)
  - comps: _by_pattern() no longer does the comma splitting. (Ales Kozumplik)
  - including .mo files correctly (Jan Silhan)
  - tests: fix locale independence. (Radek Holy)
  - remove: unused trashy methods in dnf.yum.misc. (Ales Kozumplik)
  - persistor: do not save Groups if it didn't change (RhBug:1077173) (Ales Kozumplik)
  - tests: simplify the traceback logging. (Ales Kozumplik)
  - main: log IO errors etc. thrown even during Base.__exit__. (Ales Kozumplik)
  - logging: do not log IOError tracebacks in verbose mode. (Ales Kozumplik)
  - refactor: move out main._main()'s inner error handlers. (Ales Kozumplik)
  - added gettext as a build dependency  for translation files (Jan Silhan)
  - translation: updated .pot file and fetched fresh .po files from transifex (Jan Silhan)
  - removed redundant word from persistor translation (Jan Silhan)
  - translation: show relative path in generated pot file (Jan Silhan)
  - refactor: replaced type comparisons with isinstance (Jan Silhan)
  - translation: added mo files generation and including them in rpm package (Jan Silhan)
  - removed unused imports in base.py (Jan Silhan)
  - doc: typo in Base.group_install(). (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.0-1
changelog:
  - doc: fix formatting in api_cli.rst. (Ales Kozumplik)
  - doc: document operation of 'group upgrade'. (Ales Kozumplik)
  - comps: ensure only packages of 'group' reason get deleted on 'group erase'. (Ales Kozumplik)
  - comps: store 'group' reason when installing a group-membering package. (Ales Kozumplik)
  - Override Goal.get_reason(). (Ales Kozumplik)
  - Add dnf.goal.Goal deriving from hawkey.Goal. (Ales Kozumplik)
  - fix: encoding of yumdb directory names in py3. (Ales Kozumplik)
  - tests: clean up the functions that load seeded comps a bit. (Ales Kozumplik)
  - remove: cli._*aybeYouMeant(). (Ales Kozumplik)
  - simplify groups/envs API methods in Base a lot. (Ales Kozumplik)
  - tests: add test for Base._translate_comps_pkg_types() (Ales Kozumplik)
  - refactor: move the group listing etc. methods() away from Base into GroupCommand. (Ales Kozumplik)
  - api: add group.upgrade opration to Base and CLI (RhBug:1029022) (Ales Kozumplik)
  - remove: OriginalGroupPersistor. (Ales Kozumplik)
  - groups: store format version of the groups db. (Ales Kozumplik)
  - groups: saving the persistent data. (Ales Kozumplik)
  - refactor: extract out the transactioning part of _main(). (Ales Kozumplik)
  - groups: Integrate the redone components with Base. (Ales Kozumplik)
  - Add comps Solver. (Ales Kozumplik)
  - groups: redo the GroupPersistor class. (Ales Kozumplik)
  - doc: faq: why we don't check for root. (RhBug:1088166) (Ales Kozumplik)
  - cosmetic: reordered import statements (Jan Silhan)
  - added --refresh option (RhBug:1064226) (Jan Silhan)
  - added forgotten import (Jan Silhan)
  - fixed import errors after yum/i18n.py removal (Jan Silhan)
  - removed to_utf8 from yum/i18n.py (Jan Silhan)
  - removed to_str from yum/i18n.py (Jan Silhan)
  - removed utf8_text_fill from yum/i18n.py (Jan Silhan)
  - removed utf8_width from yum/i18n.py (Jan Silhan)
  - removed utf8_width_fill from yum/i18n.py (Jan Silhan)
  - removed to_unicode from yum/i18n.py (Jan Silhan)
  - make all strings unicode_literals implicitly (Jan Silhan)
  - moved _, P_ to dnf/i18n.py (Jan Silhan)
  - removed utf8_valid from yum/i18n.py (Jan Silhan)
  - removed str_eq from yum/i18n.py (Jan Silhan)
  - removed exception2msg from yum/i18n.py (Jan Silhan)
  - removed dummy_wrapper from yum/i18n.py (Jan Silhan)
  - cosmetics: leave around the good things from 660c3e5 (documentation, UT). (Ales Kozumplik)
  - Revert "fix: provides are not recognized for erase command. (RhBug:1087063)" (Ales Kozumplik)
  - fix: provides are not recognized for erase command. (RhBug:1087063) (Ales Kozumplik)
  - test: fix UsageTest test, so it work without dnf is installed on the system PEP8 cleanup (Tim Lauridsen)
  - cleanup: getSummary() and getUsage() can be dropped entirely now. (Ales Kozumplik)
  - test: use Command.usage & Command.summary API in unittest (Tim Lauridsen)
  - show plugin commands in separate block api: add new public Command.usage & Command.summary API cleanup: make Commands (Tim Lauridsen)
  - tests: move libcomps test to a separate test file. (Ales Kozumplik)
  - refactor: put DistoSyncCommand into its own file (Tim Lauridsen)
  - refactor: commands.group: _split_extcmd is a static method. (Ales Kozumplik)
  - GroupsCommand: make the way comps are searched more robust. (RhBug:1051869) (Ales Kozumplik)
  - tests: move GroupCommand tests to a more proper place. (Ales Kozumplik)
  - fix leak: Base.__del__ causes GC-uncollectable circles. (Ales Kozumplik)
  - gruops: 'list' and similar commands should run without root. (RhBug:1080331) (Ales Kozumplik)
  - refactor: conf is given to Output on instantiation. (Ales Kozumplik)
  - remove: Command.done_command_once and Command.hidden. (Ales Kozumplik)
  - [doc] improve documentation of '--best' (RhBug:1084553) (Ales Kozumplik)
  - api: Command.base and Command.cli are API attributes. (Ales Kozumplik)
  - demands: similarly to 78661a4, commands should set the exit success_exit_status directly. (Ales Kozumplik)
  - demands: commands requiring resolving dymamically need to set the demand now. (Ales Kozumplik)
  - doc: typo in group doc. (RhBug:1084139) (Ales Kozumplik)
  - api: Base.resolve() takes allow_erasing. (RhBug:1073859) (Ales Kozumplik)
  - refactor: OptionParser._checkAbsInstallRoot is static. (Ales Kozumplik)
  - option_parser: remove base dependency. (Ales Kozumplik)
  - move: dnf.cli.cli.OptionParser -> dnf.cli.option_parser.OptionParser. (Ales Kozumplik)
  - doc: 'clean packages' incorrectly mentions we do not delete cached packages. (RhBug:1083767) (Ales Kozumplik)
  - fix: TypeError in dnf history info <id> (RHBug: #1082230) (Tim Lauridsen)
  - Start new version: 0.5.0. (Ales Kozumplik)
  - remove: instance attrs of Base, namely cacheonly. (Ales Kozumplik)
  - tests: remove: support.MockCli. (Ales Kozumplik)
  - tests: fix locale independence. (Radek Holy)
  - cleanups in cli.OptionParser. (Ales Kozumplik)
  - fix: PendingDeprecationWarning from RPM in gpgKeyCheck(). (Ales Kozumplik)
  - api: add Cli.demands.root_user (RhBug:1062889) (Ales Kozumplik)
  - api: add Cli.demands and Command.config() to the API (RhBug:1062884) (Ales Kozumplik)
  - Integrate DemandSheet into CLI. (Ales Kozumplik)
  - Command.configure() takes the command arguments like run(). (Ales Kozumplik)
  - Add dnf.cli.demand.DemandSheet. (Ales Kozumplik)
  - remove: dead code for deplist, version and check-rpmdb commands. (Ales Kozumplik)
  - sync with transifex (Jan Silhan)
  - removed _enc method that did nothing without specspo (Jan Silhan)
  - fixed local reinstall error (Jan Silhan)
  - Fix Term.MODE setting under Python 3 in case of incapable tty stdout. (Radek Holy)
  - tests: move Term tests to better file. (Radek Holy)
  - refactor: move ReinstallCommand in its own module. (Ales Kozumplik)
  - rename: yumbase (case insensitive) -> base. (Ales Kozumplik)
  - fixed py3 error thrown by search command (Jan Silhan)
  - fixed wrong named variable (Jan Silhan)
  - fixed local downgrade error (Jan Silhan)
  - doc: fix Package references that are ambiguous now. (Ales Kozumplik)
  - fix: resource leak in yum.misc.checksum() under py3. (Ales Kozumplik)
  - fix: leak: couple of files objects left open. (Ales Kozumplik)
  - fix PendingDepreaction warning from rpm in _getsysver(). (Ales Kozumplik)
  - repo: Repo.cachedir is not a list. (Ales Kozumplik)
  - api: add Base.package_install et al. and Base.add_remote_rpm(). (RhBug:1079519) (Ales Kozumplik)
  - tests: fix tests broken under foreign locale after 32818b2. (Ales Kozumplik)
  - refactor: move install, downgrade and upgrade commands into separate modules. (Ales Kozumplik)
  - tests: refactor: make Term tests more isolated. (Radek Holy)
  - tests: fix terminfo capability independence. (Radek Holy)
  - api: explain that Base is a context manager with a close(). (Ales Kozumplik)
  - cosmetic: move stuff around in comps. (Ales Kozumplik)
  - api: groups: add comps.Package, add group.package_iter(). (RhBug:1079932) (Ales Kozumplik)
  - fixed installation of conflicted packages (RhBug:1061780) (Jan Silhan)
  - removed never executed code based on _ts_saved_file variable (Jan Silhan)
  - added logrotate script and ownership of log files to dnf (RhBug:1064211) (Jan Silhan)
  - fixed: highlight characters broken under py3 (RhBug:1076884) (Jan Silhan)
  - remove: base.deselectGroup(). it is not used. (Ales Kozumplik)
  - tests: fix broken InstallMultilib.test_install_src_fails(). (Ales Kozumplik)
  - groups: support manipulation with environments (RhBug:1063666) (Ales Kozumplik)
  - add dnf.util.partition(). (Ales Kozumplik)
  - refactor: RepoPersistor: use the global logger instead of an instance variable. (Ales Kozumplik)
  - groups: besides installed groups also store persistently the environments. (Ales Kozumplik)
  - rename: persistor.Groups -> ClonableDict. (Ales Kozumplik)
  - doc: cli_vs_yum: typography in bandwidth limiting section. (Ales Kozumplik)
  - doc: cli_vs_yum: we do not partially allow operations that install .srpm. (RhBug:1080489) (Ales Kozumplik)
  - refactor: imports order in cli/commands/__init__.py. (Ales Kozumplik)
  - refactor: groups: make all commands use _patterns2groups(). (Ales Kozumplik)
  - kernel: remove kernel-source from const.INSTALLONLYPKGS. (Ales Kozumplik)
  - build: 0.4.19-1 (Ales Kozumplik)
  - New version: 0.4.19 (Ales Kozumplik)
  - downloads: bump number of downloaded files on a skip. (RhBug:1079621) (Ales Kozumplik)
  - packaging: add dnf.cli.commands to the installation. (Ales Kozumplik)
  - refactor: put GroupCommand into its separate module. (Ales Kozumplik)
  - rename: make cli.commands a subpackage. (Ales Kozumplik)
  - AUTHORS: added Albert. (Ales Kozumplik)
  - test: fixed CacheTest.test_noroot() when running as root (Albert Uchytil)
  - AUTHORS: added Tim. (Ales Kozumplik)
  - fixes TypeError: '_DownloadErrors' object is not iterable (RhBug:1078832) (Tim Lauridsen)
  - fixed not including .mo files (Jan Silhan)
  - comps: _by_pattern() no longer does the comma splitting. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.1-1
changelog:
  - drpm: output stats (RhBug:1065882) (Ales Kozumplik)
  - refactor: architectures. (Ales Kozumplik)
  - cli: be lot less verbose about dep processing. (Ales Kozumplik)
  - groups: do not error out if group install/remove produces no RPM transaction. (Ales Kozumplik)
  - fix: do not traceback on comps remove operations if proper pkg reasons can not be found. (Ales Kozumplik)
  - fix: tracebacks in 'group remove ...' (Ales Kozumplik)
  - groups: move all the logic of persistor saving from main.py to Base. (Ales Kozumplik)
  - groups: auto-saving the groups persistor. (RhBug:1089864) (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - remove: profiling code from cli.main. (Ales Kozumplik)
  - remove: removal of dead code (Miroslav Suchý)
  - doc: changes to rhbug.py to work on readthedocs.org. (Ales Kozumplik)
  - doc: build the documentation without any dependencies (on DNF or anything else). (Ales Kozumplik)
  - doc: make clear where one should expect bin/dnf (Miroslav Suchý)
  - abrt: disable abrt for 'dnf makecache timer' run from systemd.service. (RhBug:1081753) (Ales Kozumplik)
  - remove: stray itertools import from group.py. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.2-1
changelog:
  - doc: packaging: add license block to each .rst. (Ales Kozumplik)
  - cosmetic: replaced yum with dnf in comment (Jan Silhan)
  - takes non-ascii cmd line input (RhBug:1092777) (Jan Silhan)
  - replaced 'unicode' conversion functions with 'ucd' (RhBug:1095861) (Jan Silhan)
  - using write_to_file py2/py3 compatibility write function (Jan Silhan)
  - encoding: all encode methods are using utf-8 coding instead of default ascii (Jan Silhan)
  - fixed rpmbuild warning of missing file (Jan Silhan)
  - transifex update (Jan Silhan)
  - fixed typos in comments (Jan Silhan)
  - Drop --debugrepodata and susetags generation with it. (Ales Kozumplik)
  - doc: document --debugsolver. (Ales Kozumplik)
  - fix: 'dnf repo-pkgs' failures (RhBug:1092006) (Radek Holy)
  - lint: make dnf_pylint take '-s' that suppresses line/column numbers. (Ales Kozumplik)
  - doc: cli_vs_yum: we do not promote installs to the obsoleting package. (RhBug:1096506) (Ales Kozumplik)
  - dealing with installonlies, we always need RPMPROB_FILTER_OLDPACKAGE (RhBug:1095580) (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - arch: recognize noarch as noarch's basearch. (RhBug:1094594) (Ales Kozumplik)
  - pylint: clean up dnf.repo. (Ales Kozumplik)
  - sslverify: documentation and bumped librepo require. (Ales Kozumplik)
  - repos: support sslverify setting. (RhBug:1076045) (Ales Kozumplik)
  - search: exact matches should propagate higher. (RhBug:1093888) (Ales Kozumplik)
  - refactor: concentrate specific search functionality in commands.search. (Ales Kozumplik)
  - refactor: SearchCommand in its own file. (Ales Kozumplik)
  - pylint: fix around one hundred pylint issues in dnf.base. (Ales Kozumplik)
  - pylint: add simple pylint script (Ales Kozumplik)
  - autoerase: write out the debugdata used to calculate redundant packages. (Ales Kozumplik)
  - cosmetic: fix pylint comment in test_group.py. (Ales Kozumplik)
  - refactor: err_mini_usage() is public. (Ales Kozumplik)
  - refactor: fix several pylint errors in dnf.cli.commands.group. (Ales Kozumplik)
  - fix: 'dnf remove' is deprecated so autoremove should be autoerase. (Ales Kozumplik)
  - doc: command_ref: remove the deprecated aliases from the initial list. (Ales Kozumplik)
  - Add autoremove command. (RhBug:963345) (Ales Kozumplik)
  - refactor: Base.push_userinstalled() is public. (Ales Kozumplik)
  - Remove sudo from dnf-completion.bash RhBug:1073457 (Elad Alfassa)
  - exclude switch takes <package-spec> as a parameter (Jan Silhan)
  - using nevra glob query during list command (RhBug:1083679) (Jan Silhan)
  - removed rpm.RPMPROB_FILTER_REPLACEOLDFILES filter flag (Jan Silhan)
  - test: changed tests according to new distro-sync behavior (Jan Silhan)
  - packaging: cosmetic: copyright years in bin/dnf. (Ales Kozumplik)
  - bin/dnf: run the python interpreter with -OO. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.3-1
changelog:
  - packaging: bump hawkey dep to 0.4.17. (Ales Kozumplik)
  - api: remove Base.select_group(). (Ales Kozumplik)
  - tests: cleanup our base test case classes a bit. (Ales Kozumplik)
  - Add DNF itself among the protected packages. (Ales Kozumplik)
  - api: plugins: add the resolved() hook. (Ales Kozumplik)
  - api: expose Transaction introspecting in the API. (RhBug:1067156) (Ales Kozumplik)
  - api: add basic documentation for dnf.package.Package. (Ales Kozumplik)
  - tests: cosmetic: conf.protected_packages is ignored, drop it in FakeConf. (Ales Kozumplik)
  - cli: simplify exception handling more. (Ales Kozumplik)
  - Fixed a minor typo in user_faq - 'intall' should be 'install' (Martin Preisler)
  - fixed encoding of parsed config line (RhBug:1110800) (Jan Silhan)
  - syntax: replaced tab with spaces (Jan Silhan)
  - doc: acknowledge the existence of plugins on the man page (RhBug:1112669) (Ales Kozumplik)
  - improve the 'got root?' message of why a transaction couldn't start. (RhBug:1111569) (Ales Kozumplik)
  - traceback in Base.do_transaction. to_utf8() is gone since 06fb280. (Ales Kozumplik)
  - fix traceback from broken string formatting in _retrievePublicKey(). (RhBug:1111997) (Ales Kozumplik)
  - doc: replace Yum with DNF in command_ref.rst (Viktor Ashirov)
  - Fix a missing s in the title (mscherer)
  - api: add dnf.rpm.detect_releasever() (Ales Kozumplik)
  - Detect distroverpkg from 'system-release(release)' (RhBug:1047049) (Ales Kozumplik)
  - bulid: add dnf/conf to cmake. (Ales Kozumplik)
  - lint: clean up most lint messages in dnf.yum.config (Ales Kozumplik)
  - remove: couple of dead-code methods in dnf.yum.config. (Ales Kozumplik)
  - api: document client's responsibility to preset the substitutions. (RhBug:1104757) (Ales Kozumplik)
  - move: rpmUtils -> rpm. (Ales Kozumplik)
  - refactor: move yumvar out into its proper module dnf.conf.substitutions. (Ales Kozumplik)
  - refactor: turn dnf.conf into a package. (Ales Kozumplik)
  - doc: api_base.rst pointing to nonexistent method. (Ales Kozumplik)
  - remove: some logging from Transaction.populate_rpm_ts(). (Ales Kozumplik)
  - Update cli_vs_yum.rst (James Pearson)
  - api: doc: queries relation specifiers, with an example. (RhBug:1105009) (Ales Kozumplik)
  - doc: phrasing in ip_resolve documentation. (Ales Kozumplik)
  - cli: refactored transferring cmdline options to conf (Jan Silhan)
  - cli: added -4/-6 option for using ipv4/ipv6 connection (RhBug:1093420) (Jan Silhan)
  - cosmetic: empty set inicialization (Jan Silhan)
  - repo: improve the RepoError message to include URL. (Ales Kozumplik)
  - remove: dnf.yum.config.writeRawRepoFile(). (Ales Kozumplik)
  - remove: bunch of (now) blank config options. (Ales Kozumplik)
  - removed unique function (Jan Silhan)
  - tests: mock.assert_has_calls() enforces its iterable arguments in py3.4. (Ales Kozumplik)
  - logging: improve how repolist logs the total number of packages. (Ales Kozumplik)
  - logging: Base.close() should not log to the terminal. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.4-1
changelog:
  - pkg name from rpm transaction callback is in Unicode (RhBug:1118796) (Jan Silhan)
  - packaging: python3-dnf depends on dnf. (RhBug:1119032) (Ales Kozumplik)
  - Ship /usr/bin/dnf-3 to run DNF under Py3. (RhBug:1117678) (Ales Kozumplik)
  - packaging: own /etc/dnf/plugins. (RhBug:1118178) (Ales Kozumplik)
  - fix: pluginconfpath is a list. (Ales Kozumplik)
  - cosmetic: use classmethod as a decorator in config.py. (Ales Kozumplik)
  - cleanup: imports in dnf.cli.output (Ales Kozumplik)
  - lint: straightforward lint fixes in dnf.cli.output. (Ales Kozumplik)
  - Repo.__setattr__ has to use the parsed value. (Ales Kozumplik)
  - Repo priorities. (RhBug:1048973) (Ales Kozumplik)
  - repo: simplify how things are propagated to repo.hawkey_repo. (Ales Kozumplik)
  - refactor: concentrate Repo.hawkey_repo construction in Repo.__init__(). (Ales Kozumplik)
  - bash-completion: Update command and option lists, sort in same order as --help (Ville Skyttä)
  - bash-completion: Use grep -E instead of deprecated egrep (Ville Skyttä)
  - output: fixed identation of info command output (Jan Silhan)
  - i18n: calculates right width of asian utf-8 strings (RhBug:1116544) (Jan Silhan)
  - transifex update + renamed po files to Fedora conventions (Jan Silhan)
  - remove: CLI: --randomwait (Ales Kozumplik)
  - cli: fix: --installroot has to be used with --releasever (RhBug:1117293) (Ales Kozumplik)
  - Base.reset(goal=True) also resets the group persistor (RhBug:1116839) (Ales Kozumplik)
  - tests: fix failing DistroSync.test_distro_sync(). (Ales Kozumplik)
  - logging: RPM transaction markers are too loud. (Ales Kozumplik)
  - logging: silence drpm a bit. (Ales Kozumplik)
  - logging: put timing functionality into one place. (Ales Kozumplik)
  - repolist: fix traceback with disabled repos. (RhBug:1116845) (Ales Kozumplik)
  - refactor: cleanups in repolist. (Ales Kozumplik)
  - lint: remove some unused imports. (Ales Kozumplik)
  - cli: break out the repolsit command into a separate module. (Ales Kozumplik)
  - does not crash with non-ascii user name (RhBug:1108908) (Jan Silhan)
  - doc: document 'pluginpath' configuration option. (RhBug:1117102) (Ales Kozumplik)
  - Spelling fixes (Ville Skyttä)
  - cli: Fix software name in --version help (Ville Skyttä)
  - doc: ip_resolve documented at two places. remove one. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.5.5-1
changelog:
  - packaging: also add pyliblzma to BuildRequires. (Ales Kozumplik)
  - essential cleanup in dnf.yum.misc, removing a couple of functions too. (Ales Kozumplik)
  - remove: Base.findDeps and friends. (Ales Kozumplik)
  - Make pyliblzma a requriement. (RhBug:1123688) (Ales Kozumplik)
  - whole user name can contain non-ascii chars (RhBug:1121280) (Jan Silhan)
  - Straighten up the exceptions when getting a packages header. (RhBug:1122900) (Ales Kozumplik)
  - tests: refactor: rename test_resource_path() -> resource_path() and use it more. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - remove: conf.commands. (Ales Kozumplik)
  - proxy username and password, for both CLI and API. (RhBug:1120583) (Ales Kozumplik)
  - conf: only 'main' is a reserved section name. (Ales Kozumplik)
  - refactoring: cleanup a couple of lint warnings in base.py. (Ales Kozumplik)
  - refactoring: move repo reading implementation out of dnf.Base. (Ales Kozumplik)
  - refactor: repo_setopts is a CLI thing and doesn't belong to Base. (Ales Kozumplik)
  - refactor: move cleanup methods to dnf.cli.commands.clean. (Ales Kozumplik)
  - depsolving: doesn't install both architectures of pkg by filename (RhBug:1100946) (Jan Silhan)
  - refactor: put CleanCommand in its own module. (Ales Kozumplik)
  - cli: avoid 'Error: None' output on malformed CLI commands. (Ales Kozumplik)
  - remove the special SIGQUIT handler. (Ales Kozumplik)
  - api: In Repo(), cachedir is a required argument. (Ales Kozumplik)
  - api: better describe how Repos should be created, example. (RhBug:1117789) (Ales Kozumplik)
  - Base._conf lasts the lifetime of Base and can be passed via constructor. (Ales Kozumplik)
  - doc: faq: having Yum and DNF installed at the same time. (Ales Kozumplik)
  - remove: protected_packages config option, it has been ignored. (Ales Kozumplik)
  - fix: misleading error message when no repo is enabled. (Ales Kozumplik)


author: Aleš Kozumplík <ales@redhat.com> - 0.6.0-1
changelog:
  - lint: fix convention violations in the new source files (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] security" command. (RhBug:850912) (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] bugfix" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] enhancement" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] [<package-name>...]" command. (Radek Holy)
  - Add "updateinfo [<output>] [<availability>] [<advisory>...]" command. (Radek Holy)
  - Add "updateinfo [<output>] all" command. (Radek Holy)
  - Add "updateinfo [<output>] updates" command. (Radek Holy)
  - Add "updateinfo [<output>] installed" command. (Radek Holy)
  - Add "-v updateinfo info" command. (Radek Holy)
  - Add "updateinfo info" command. (Radek Holy)
  - Add "updateinfo list" command. (Radek Holy)
  - Add "updateinfo available" command. (Radek Holy)
  - Add "updateinfo summary" command. (Radek Holy)
  - Add basic updateinfo command. (Radek Holy)
  - test: add updateinfo to the testing repository (Radek Holy)
  - test: support adding directory repos to Base stubs (Radek Holy)
  - test: really don't break other tests with the DRPM fixture (Radek Holy)
  - Load UpdateInfo.xml during the sack preparation. (Radek Holy)
  - Add Repo.updateinfo_fn. (Radek Holy)
  - lint: add Selector calls to false positives, it's a hawkey type. (Ales Kozumplik)
  - removed recursive calling of ucd in DownloadError (Jan Silhan)
  - does not throw error when selector is empty (RhBug:1127206) (Jan Silhan)
  - remove etc/version-groups.conf, not used. (Ales Kozumplik)
  - lint: dnf.conf.parser (Ales Kozumplik)
  - rename: dnf.conf.parser.varReplace()->substitute() (Ales Kozumplik)
  - pycomp: add urlparse/urllib.parser. (Ales Kozumplik)
  - move: dnf.yum.parser -> dnf.conf.parser. (Ales Kozumplik)
  - packaging: add dnf-automatic subpackage. (Ales Kozumplik)
  - doc: properly list the authors. (Ales Kozumplik)
  - automatic: add documentation, including dnf.automatic(8) man page. (Ales Kozumplik)
  - dnf-automatic: tool supplying the yum-cron functionality. (Ales Kozumplik)
  - doc: cosmetic: fixed indent in proxy directive (Jan Silhan)
  - include directive support added (RhBug:1055910) (Jan Silhan)
  - refactor: move MultiCallList to util. (Ales Kozumplik)
  - cli: do not output that extra starting newline in list_transaction(). (Ales Kozumplik)
  - refactor: extract CLI cachedir magic to cli.cachedir_fit. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - move: test_output to tests/cli. (Ales Kozumplik)
  - refactor: move Term into its own module. (Ales Kozumplik)
  - refactoring: cleanup and linting in dnf.exceptions. (Ales Kozumplik)
  - lint: test_cli.py (Ales Kozumplik)
  - lint: rudimentary cleanups in tests.support. (Ales Kozumplik)
  - refactor: loggers are module-level variables. (Ales Kozumplik)
  - groups: promote unknown-reason installed packages to 'group' on group install. (RhBug:1116666) (Ales Kozumplik)
  - c82267f refactoring droppped plugins.run_transaction(). (Ales Kozumplik)
  - cli: sort packages in the transaction summary. (Ales Kozumplik)
  - refactor: cli: massively simplify how errors are propagated from do_transaction(). (Ales Kozumplik)
  - groups: rearrange things in CLI so user has to confirm the group changes. (Ales Kozumplik)
  - groups: committing the persistor data should only happen at one place. (Ales Kozumplik)
  - groups: visualizing the groups transactions. (Ales Kozumplik)
  - Add dnf.util.get_in() to navigate nested dicts with sequences of keys. (Ales Kozumplik)
  - group persistor: generate diffs between old and new DBs. (Ales Kozumplik)
  - Better quoting in dnf_pylint. (Ales Kozumplik)
  - lint: logging.py. (Ales Kozumplik)
  - Do not print tracebacks to the tty on '-d 10' (RhBug:1118272) (Ales Kozumplik)
  - search: do not double-report no matches. (Ales Kozumplik)
  - refactor: move UpgradeToCommand to its own module. (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.1-1
changelog:
  - packaging: add dnf-yum. (Ales Kozumplik)
  - cli: added plugins missing hint (RhBug:1132335) (Jan Silhan)
  - using ts.addReinstall for package reinstallation (RhBug:1071854) (Jan Silhan)
  - Add history redo command. (Radek Holy)
  - Add a TransactionConverter class. (Radek Holy)
  - bash-completion: complete `help` with commands (Igor Gnatenko)
  - bash-completion: generate commands dynamically (Igor Gnatenko)
  - base: group_install accepts glob exclude names (RhBug:1131969) (Jan Silhan)
  - README: changed references to new repo location (Jan Silhan)
  - transifex update (Jan Silhan)
  - syntax: fixed indentation (Jan Silhan)
  - removed lt.po which was accidentally added in c2e9b39 (Jan Silhan)
  - lint: fix convention violations in the new source files (Radek Holy)
  - Fix setting of the resolving demand for repo-pkgs command. (Radek Holy)
  - Add repository-packages remove-or-distro-sync command. (RhBug:908764) (Radek Holy)
  - fix: traceback that GroupPersistor._original might not exist. (RhBug:1130878) (Ales Kozumplik)
  - pycomp: drop to_ord(). (Ales Kozumplik)
  - refactor: crypto.keyids_from_pubring() using _extract_signing_subkey(). (Ales Kozumplik)
  - fix: another 32-bit hex() problem in crypto. (Ales Kozumplik)
  - remove: pgpmsg.py. (Ales Kozumplik)
  - replace the whole of pgpmsg.py with gpgme and a dummy context. (Ales Kozumplik)
  - cosmetic: sort methods of Repo according to the coding standard. (Ales Kozumplik)
  - Fix dnf.crypto.keyinfo2keyid(). (Ales Kozumplik)
  - util: get rid of an inconvenient 'default_handle' constant. (Ales Kozumplik)
  - simplify misc.import_key_to_pubring()'s signature. (Ales Kozumplik)
  - cleanup: header of dnf.yum.pgpmsg. (Ales Kozumplik)
  - crypto: add crypto.retrieve() and drop Base._retrievePublicKey() (Ales Kozumplik)
  - cosmetic: order of functions in dnf.crypto. (Ales Kozumplik)
  - unicode: fixed locale.format error (RhBug:1130432) (Jan Silhan)
  - remove: misc.valid_detached_sig(). (Ales Kozumplik)
  - tests: some tests for dnf.crypto. (Ales Kozumplik)
  - crypto: use pubring_dir() context manager systematically. (Ales Kozumplik)
  - Drop unused argument from getgpgkeyinfo(). (Ales Kozumplik)
  - remove: Base._log_key_import(). (Ales Kozumplik)
  - doc: cosmetic: conf_ref: maintain alphabetical order of the options. (Ales Kozumplik)
  - crypto: document crypto options for repo. (Ales Kozumplik)
  - crypto: fixup procgpgkey() to work with Py3 bytes. (Ales Kozumplik)
  - dnf.util.urlopen(): do not create unicode streams for Py3 and bytes for Py2 by default. (Ales Kozumplik)
  - lint: delinting of the repo_gpgcheck patchset. (Ales Kozumplik)
  - Add CLI parts to let the user confirm key imports. (RhBug:1118236) (Ales Kozumplik)
  - gpg: make key decoding work under Py3. (Ales Kozumplik)
  - crypto: add dnf.crypto and fix things up so untrusted repo keys can be imported. (Ales Kozumplik)
  - transifex update (Jan Silhan)
  - syntax: fixed indentation (Jan Silhan)
  - packaging: pygpgme is a requirement. (Ales Kozumplik)
  - remove: support for gpgcakey gets dropped for now. (Ales Kozumplik)
  - repo: smarter _DetailedLibrepoError construction. (Ales Kozumplik)
  - repo: nicer error message on librepo's perform() failure. (Ales Kozumplik)
  - get_best_selector returns empty selector instead of None (Jan Silhan)
  - packaging: add automatic's systemd unit files. (RhBug:1109915) (Ales Kozumplik)
  - automatic: handle 'security' update_cmd. (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.2-1
changelog:
  - transifex update (Jan Silhan)
  - refactor: move MakeCacheCommand out into its own file. (Ales Kozumplik)
  - api: add dnf.cli.CliError. (Ales Kozumplik)
  - Update user_faq.rst (Stef Krie)
  - Make --refresh play nice with lazy commands. (Ales Kozumplik)
  - bash-completion: more faster completing install/remove (Igor Gnatenko)
  - bash-completion: complete 'clean|groups|repolist' using help (Igor Gnatenko)
  - Allow some commands to use stale metadata. (RhBug:909856) (Ales Kozumplik)
  - does not install new pkgs when updating from local pkgs (RhBug:1134893) (Jan Silhan)
  - doesn't upgrade packages by installing local packages (Related:RhBug:1138700) (Jan Silhan)
  - refactor: repo: separate concepts of 'expiry' and 'sync strategy'. (Ales Kozumplik)
  - fix: dnf.cli.util.* leaks file handles. (Ales Kozumplik)
  - remove: YumRPMTransError. (Ales Kozumplik)
  - rename: Base's runTransaction -> _run_transaction(). (Ales Kozumplik)
  - drop unused parameter of Base.verify_transaction(). (Ales Kozumplik)
  - bash-completion: new completion from scratch (RhBug:1070902) (Igor Gnatenko)
  - py3: add queue.Queue to pycomp. (Ales Kozumplik)
  - locking: store lockfiles with the resource they are locking. (RhBug:1124316) (Ales Kozumplik)
  - groups: marks reason 'group' for packages that have no record yet (RhBug:1136584) (Jan Silhan)
  - goal: renamed undefined name variable (Jan Silhan)
  - refactor: split out and clean up the erase command. (Ales Kozumplik)
  - py3: fix traceback in fmtColumns() on a non-subscriptable 'columns'. (Ales Kozumplik)
  - groups: allow erasing depending packages on remove (RhBug:1135861) (Ales Kozumplik)
  - history: fixed wrong set operation (RhBug:1136223) (Jan Silhan)
  - base: does not reinstall pkgs from local rpms with install command (RhBug:1122617) (Jan Silhan)
  - refactor: crypto: drop the integer keyid representation altogether. (Ales Kozumplik)
  - crypto: fix importing rpmfusion keys. (RhBug:1133830) (Ales Kozumplik)
  - refactor: crypto: Key is a class, not an "info" dict. (Ales Kozumplik)
  - repos: fix total downloaded size reporting for cached packages. (RhBug:1121184) (Ales Kozumplik)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.3-1
changelog:
  - transifex update (Jan Silhan)
  - bash-completion: don't query if we trying to use local file (RhBug:1153543) (Igor Gnatenko)
  - bash-completion: fix local completion (RhBug:1151231) (Igor Gnatenko)
  - bash-completion: use sqlite cache from dnf-plugins-core (Igor Gnatenko)
  - base: output a whole list of installed packages with glob pattern (RhBug:1163063) (Michal Luscon)
  - cli: _process_demands() does not respect --caheonly (RhBug:1151854) (Michal Luscon)
  - new authors added (Jan Silhan)
  - install: allow installation of provides with glob (Related:RhBug:1148353) (Michal Luscon)
  - tests: removed mock patch for _, P_ (Jan Silhan)
  - fixed error summary traceback (RhBug:1151740) (Jan Silhan)
  - doc: swap command alternative mentioned (RhBug:1110780) (Jan Silhan)
  - base: package_reinstall works only with the same package versions (Jan Silhan)
  - base: package_install allows install different arch of installed package (Jan Silhan)
  - base: package_downgrade prints message on failure (Jan Silhan)
  - base: package_upgrade does not reinstall or downgrade (RhBug:1149972) (Jan Silhan)
  - groups: searches also within localized names (RhBug:1150474) (Jan Silhan)
  - Run tests with C locales. (Daniel Mach)
  - Adds new motd emitter for dnf-automatic (RhBug:995537) (Kushal Das)
  - Fix wrong cache directory path used to clean up binary cache (Satoshi Matsumoto)
  - fix: traceback in history info <name> (RhBug: 1149952) (Tim Lauridsen)
  - logging: added logrotate script for hawkey.log (RhBug:1149350) (Jan Silhan)
  - output: renamed displayPkgsInGroups (Jan Silhan)
  - logging: renamed log files (RhBug:1074715)" (Jan Silhan)
  - comps: Environment differentiates optional and mandatory groups (Jan Silhan)
  - group info handles environments (RhBug:1147523) (Jan Silhan)
  - deltarpm enabled by default (RhBug:1148208) (Jan Silhan)
  - doc: deplist command (Jan Silhan)
  - doc: minor fixes + repo references changed (Jan Silhan)
  - spec: requires rpm-plugin-systemd-inhibit (RhBug:1109927) (Jan Silhan)


author: Jan Silhan <jsilhan@redhat.com> - 0.6.4-1
changelog:
  - Adapt to librepo-1.7.13, metalink and mirrorlist are not loaded anymore when the repo is local. (Radek Holy)
  - not raises value error when no metadata exist (Jan Silhan)
  - Remove lock files during boot (RhBug:1154476) (Michal Luscon)
  - doc: groups are ordered not categories (Jan Silhan)
  - doc: added Package attributes to API (Jan Silhan)
  - README: link to bug reporting guide (Jan Silhan)
  - README: the official documentation is on readthedoc (Jan Silhan)
  - i18n: unicode encoding does not throw error (RhBug:1155877) (Jan Silhan)
  - conf: added minrate repo option (Related:RhBug:1175466) (Jan Silhan)
  - conf: added timeout repo option (RhBug:1175466) (Jan Silhan)
  - doc: api_queries: add 'file' filter description (RhBug:1186461) (Igor Gnatenko)
  - doc: documenting enablegroups (Jan Silhan)
  - log: printing metadata timestamp (RhBug:1170156) (Jan Silhan)
  - base: setup default cachedir value (RhBug:1184943) (Michal Luscon)
  - orders groups/environments by display_order tag (RhBug:1177002) (Jan Silhan)
  - no need to call create_cmdline_repo (Jan Silhan)
  - base: package-spec matches all packages which the name glob pattern fits (RhBug:1169165) (Michal Luscon)
  - doc: move dnf.conf to appropriate man page section (RhBug:1167982) (Michal Luscon)
  - tests: add test for blocking process lock (Michal Luscon)
  - lock: fix several race conditions in process lock mechanism (Michal Luscon)
  - base: use blocking process lock during download phase (RhBug:1157233) (Michal Luscon)
  - Update the Source0 generation commands in dnf.spec.in file (Parag Nemade)
  - Enhancement to dnf.spec.in file which follows current fedora packaging guidelines (Parag Nemade)
  - doc: add some examples and documentation of the core use case (RhBug:1138096) (Radek Holy)
  - bash-completion: enable downgrading packages for local files (RhBug:1181189) (Igor Gnatenko)
  - group: prints plain package name when package not in any repo (RhBug:1181397) (Jan Silhan)
  - spec: own __pycache__ for python 3 (Igor Gnatenko)
  - changed hawkey.log dir to /var/log (RhBug:1175434) (Jan Silhan)
  - bash-completion: handle sqlite errors (Igor Gnatenko)
  - use LANG=C when invoking 'dnf help' and 'sed' with regular expressions (Jakub Dorňák)
  - spec: own __pycache__ directory for py3 (Igor Gnatenko)
  - doc: mentioning Install command accepts path to local rpm package (Jan Silhan)
  - groups: in erase and install cmd non-existent group does not abort transaction (Jan Silhan)
  - doc: running tests in README (Jan Silhan)
  - api: transaction: added install_set and remove_set (RhBug:1162887) (Jan Silhan)
  - cosmetic: fixed some typos in documentation (Jan Silhan)
  - groups: environments described after @ sign works (RhBug:1156084) (Jan Silhan)
  - own /etc/dnf/protected.d (RhBug:1175098) (Jan Silhan)
  - i18n: computing width of char right (RhBug:1174136) (Jan Silhan)
  - cosmetic: renamed _splitArg -> _split_arg (Jan Silhan)
  - conf: removed include name conflict (RhBug:1055910) (Jan Silhan)
  - output: removed unpredictable decision based on probability introduced in ab4d2c5 (Jan Silhan)
  - output: history list is not limited to 20 records (RhBug:1155918) (Jan Silhan)
  - doc: referenced forgotten bug fix to release notes (Jan Silhan)
  - cosmetic: doc: removed duplicated word (Jan Silhan)
  - doc: described unavailable package corner case with skip_if_unavailable option (RhBug:1119030) (Jan Silhan)
  - log: replaced size with maxsize directive (RhBug:1177394) (Jan Silhan)
  - spec: fixed %ghost log file names (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 0.6.5-1
changelog:
  - subject: expand every glob name only once (RhBug:1203151) (Michal Luscon)
  - group mark: skips already installed groups (Jan Silhan)
  - Merge pull request #246 from mluscon/yum2dnf (mluscon)
  - Add yum2dnf man page (Michal Luscon)
  - doc: extend cli_vs_yum (Michal Luscon)
  - dnf-yum package does not conflict with yum 3.4.3-505+ (Jan Silhan)
  - fixed double set of demand from 0e4276f (Jan Silhan)
  - group: remove cmd don't load available_repos, see 04da412 (Jan Silhan)
  - spec: /var/lib/dnf owned by dnf-conf (Jan Silhan)
  - spec: apply the weak dependencies only on F21+ (Radek Holy)
  - dnf-automatic: fixed python_sitelib (RhBug:1199450) (Jan Silhan)
  - Add release instructions (Michal Luscon)
  - setup tito to bump version in VERSION.cmake (Michal Luscon)
  - initialize to use tito (Michal Luscon)
  - prepare repo for tito build system (Michal Luscon)
  - spec: recommends bash-completion (RhBug:1190671) (Jan Silhan)
  - completion: work with just python(3)-dnf (Jan Silhan)
  - spec: move necessary files inside python(3) subpackages (RhBug:1191579) (Jan Silhan)
  - bash-completion: use python method to get commands (RhBug:1187579) (Igor Gnatenko)
  - api: exposed pluginconfpath main config (RhBug:1195325) (Jan Silhan)
  - updated AUTHORS (Jan Silhan)
  - add reinstall to bash_completion (Alberto Ruiz)
  - added new packages to @System for duplicated query test (Michael Mraka)
  - test for duplicated, installonly and latest_limit pkgs (Michael Mraka)
  - tests for autoremove, extras and recent pkgs (Michael Mraka)
  - moved push_userinstalled from base to goal (Michael Mraka)
  - filter or skip 'n' latest packages (Michael Mraka)
  - moved recent to query (Michael Mraka)
  - moved autoremove to query (Michael Mraka)
  - moved extras list to query (Michael Mraka)
  - create query for installonly packages (Michael Mraka)
  - create query for duplicated packages (Michael Mraka)
  - cosmetic: base: fixed pylint warnings (Jan Silhan)
  - do transaction cleanup after plugin hook (RhBug:1185977) (Michal Luscon)
  - base: extend download lock (RhBug:1157233) (Michal Luscon)
  - lock: output meaningful error for malformed lock file (Michal Luscon)
  - util: fix race condition in ensure_dir() (Michal Luscon)
  - lock: switch metadata lock to blocking mode (Michal Luscon)
  - install nonmandatory group packages as optional (Related:RhBug:1167881) (Michal Luscon)
  - remove command deletes whole dependency tree (RhBug:1154202) (Jan Silhan)
  - cmd list takes <package-name-specs> as parameter, revert of 526e674 (Jan Silhan)
  - spec: own /var/lib/dnf directory (RhBug:1198999) (Jan Silhan)
  - transifex update (Jan Silhan)
  - doc: fixed systemd execution of dnf-automatic (Jan Silhan)
  - doc: how to run dnf-automatic (RhBug:1195240) (Jan Silhan)
  - cosmetic: added forgotten :api mark from 05b03fc (Jan Silhan)
  - api: exposed Repo.skip_if_unavailable config (RhBug:1189083) (Jan Silhan)
  - updated documentation for 'dnf list autoremove' (Michael Mraka)
  - reuse list_autoremove() in autoremove command (Michael Mraka)
  - function for autoremove package list (Michael Mraka)
  - implemented dnf list autoremove (Michael Mraka)
  - exclude not documented history subcommands (RhBug:1193914,1193915) (Jan Silhan)
  - better file pattern recognition (RhBug:1195385) (Jan Silhan)
  - spec: fix Obsoletes of the new DNF (Radek Holy)
  - remove boot only constraint and add missing download lock (Michal Luscon)
  - util: remove unused user_run_dir() function (Michal Luscon)
  - lock: change the destination folder of locks to allow suided programs work properly (RhBug:1195661) (Michal Luscon)
  - install dnf-3 only when python3 is enabled (thanks glensc) (Jan Silhan)
  - fixed unicode Download error (RhBug:1190458) (Jan Silhan)
  - log: print metadata age along with timestamp (Petr Spacek)
  - cli: fix double expansion of cachedir (RhBug:1194685) (Michal Luscon)
  - removed unused dnf-makecache.cron (Jan Silhan)
  - renamed erase command to remove (RhBug:1160806) (Jan Silhan)
  - spec: made python3-dnf package installed by default in f23 (Jan Silhan)
  - AUTHORS: changed email address (Jan Silhan)
  - doc: improve the documentation of the "install" command (Radek Holy)
  - "dnf install non-existent" should fail (Radek Holy)
  - tests: add some tests of Base.install (Radek Holy)
  - tests: add some tests of Base.package_install (Radek Holy)
  - Revert "doesn't upgrade packages by installing local packages" (RhBug:1160950) (Radek Holy)
  - lint: fix all Pylint errors in test_install (Radek Holy)
  - tests: add some tests to test_install (Radek Holy)
  - tests: improve some tests in test_install (Radek Holy)
  - cosmetic: reorder tests in test_install (Radek Holy)
  - cosmetic: rename some tests in test_install and add some docstrings (Radek Holy)
  - AUTHORS: updated (Jan Silhan)
  - Add support for armv6hl (Peter Hjalmarsson)
  - doc: subject.__init__(): what is pkg_spec (Jan Silhan)
  - doc: mentioning raising IOError from Base.fill_sack() (Jan Silhan)
  - option_parser: fixed splitting multiple values (RhBug:1186710) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - Standardize words describing boolean data type (Christopher Meng)


author: Michal Luscon <mluscon@redhat.com> 1.0.0-1
changelog:
  - doc: release notes dnf-1.0.0 (Michal Luscon)
  - completion: don't do aliases (RhBug:1215289) (Jan Silhan)
  - use Sack.load_repo() instead of Sack.load_yum_repo() (Jan Silhan)
  - Repo.name has default value of repo ID (RhBug:1215560) (Jan Silhan)
  - cosmetic: get rid of user visible yum references (Jan Silhan)
  - moved install_or_skip to dnf.comps (Jan Silhan)
  - group: see already installed group during installation (RhBug:1199648) (Jan
    Silhan)
  - group: install_or_skip returns num of packages to install (Jan Silhan)
  - group: made global function install_or_skip (Jan Silhan)
  - AUTHORS: updated (Radek Holy)
  - describe --refresh option in --help output (Pádraig Brady)
  - better no such command message (RhBug:1208773) (Jan Silhan)
  - doc: package-cleanup example doesn't print 'No match for argument:...'
    garbage (Jan Silhan)
  - mention yum check replacement (Michael Mraka)
  - added ref to dnf list (Michael Mraka)
  - added package-cleanup to dnf translation table (Michael Mraka)
  - python3: Repo comparison (RhBug:1208018) (Jan Silhan)
  - python3: YumHistoryRpmdbProblem comparison (RhBug:1207861) (Jan Silhan)
  - python3: YumHistoryTransaction comparison (Jan Silhan)
  - tests: use packages in test_transaction (Radek Holy)
  - cosmetic: fix some Pylint errors (Radek Holy)
  - updated documentation wrt installonlypkgs and auto removal (Michael Mraka)
  - mark installonly packages always as userinstalled (RhBug:1201445) (Michael
    Mraka)
  - mark username/password as api (Michael Mraka)
  - document username/password repo attributes (Michael Mraka)
  - support HTTP basic auth (RhBug:1210275) (Michael Mraka)
  - cli: better metadata timestamp info (Michal Luscon)
  - repo: add metadata mirror failure callback (Michal Luscon)
  - dnf-yum: cosmetic: lower case after comma (Jan Silhan)
  - dnf-yum: print how to install migrate plugin (Jan Silhan)
  - doc: show the real package for each tool in dnf-plugins-extras (Tim
    Lauridsen)
  - doc: improve the documentation of repo costs (Radek Holy)
  - doc: fix debuginfo-install package name (Michal Luscon)
  - doc: release notes 0.6.5 (Michal Luscon)
  - bash-completion: allow only one subcmd for help (Igor Gnatenko)
  - bash-completion: add history completion (Igor Gnatenko)
  - bash-completion: add completion for help (Igor Gnatenko)
  - bash-completion: check where pointing bin/dnf (Igor Gnatenko)
  - bash-completion: implement completion for clean cmd (Igor Gnatenko)
  - bash_completion: implement downgrade command (Igor Gnatenko)
  - bash-completion: refactor to python helper (Igor Gnatenko)
  - command downgrade does downgrade_to (RhBug:1191275) (Jan Silhan)
  - AUTHORS: updated (Jan Silhan)
  - clean: 'dnf clean all' should also clean presto and updateinfo solvx files
    (Parag Nemade)
  - dnf-yum: modified warning message (RhBug:1207965) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.0.1-1
changelog:
  - doc: document variables in repo conf (Michal Luscon)
  - groups: temporary fix for group remove (RhBug:1214968) (Michal Luscon)
  - group: print summary of marked groups / environments together at the end (Jan
    Silhan)
  - group: fixed marking as installed (RhBug:1222694) (Jan Silhan)
  - doc: Spelling fixes (Ville Skyttä)
  - dnf-automatic: Fix systemd service description (thanks Ville Skyttä) (Jan
    Silhan)
  - doc: assumeyes added to Base.conf and config option (Jan Silhan)
  - optionparser: deleted --obsoletes option that conflicted with repoquery
    plugin (Jan Silhan)
  - dnf-automatic: Document emit_via default (Ville Skyttä)
  - man: yum2dnf don;t show content (RhBug:1225246) (Thanks Adam Salih) (Jan
    Silhan)
  - doc: allowed chars of repo ID (Jan Silhan)
  - doc: minimal repo config file (Jan Silhan)
  - doc: configuration files replacement policy (Jan Silhan)
  - fixed typo in man page (RhBug:1225168) (Michael Mraka)
  - Update authors (Michal Luscon)
  - dnf-automatic: add random_sleep option (RhBug:1213985) (Vladan Kudlac)
  - don't print bug report statement when rpmdb is corrupted
    (Related:RhBug:1225277) (Jan Silhan)
  - comps: fix unicode issue (RhBug:1223932) (Thanks Parag) (Parag Nemade)
  - logging: setup librepo log in verbose mode (Michal Luscon)
  - doc: document the versioning scheme (Radek Holy)
  - groups: end up empty group removal before solving (Michal Luscon)
  - groups: end up empty installation before solving (RhBug:1223614) (Michal
    Luscon)
  - doc: add support for transactions/packages/ranges in "dnf history list"
    (Radek Holy)
  - doc: add support for transaction ranges in "dnf history info" (Radek Holy)
  - support ssl client certificates (RhBug:1203661) (Michael Mraka)
  - doc: document the "mirrorlist" configuration option (Radek Holy)
  - doc: document the "metalink" configuration option (Radek Holy)
  - doc: document the "baseurl" configuration option (Radek Holy)
  - doc: document the "enabled" configuration option (Radek Holy)
  - doc: document the "name" configuration option (Radek Holy)
  - Revert "spec: added sqlite requirement" (Jan Silhan)
  - spec: added sqlite requirement (Jan Silhan)
  - cosmetic: fixed typo in comment (Jan Silhan)
  - man: added reference to bug reporting guide (Jan Silhan)
  - test: ignore user terminal width (Jan Silhan)
  - cosmetic: base: import dnf.util.first (Jan Silhan)
  - base.upgrade: inform user when pkg not installed and skipped (RhBug:1187741)
    (Jan Silhan)
  - disable buildtime c/c++ dependency (Michael Mraka)
  - doc: document the new virtual provides (Radek Holy)
  - AUTHORS: updated (Jan Silhan)
  - AUTHORS: distuinguish authors and contributors (Jan Silhan)
  - Create ka.po (George Machitidze)
  - Parser: fix path handling (Haikel Guemar)
  - doc: metadata_timer_sync checked every hour (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.0.1-2
changelog:
  - conf: change minrate threshold to librepo default (RhBug:1212320)
  - group: fixed installation of already installed environments


author: Michal Luscon <mluscon@redhat.com> 1.0.2-1
changelog:
  - give --allowerasing hint when error occurs during resolution (RhBug:1148630)
    (Jan Silhan)
  - show --best hint with skipped packages every time (RhBug:1176351) (Jan Silhan)
  - notify about skipped packages when upgrade (RhBug:1210445) (Jan Silhan)
  - dnf-automatic: Document apply_updates=no behavior wrt keepcache (Ville
    Skyttä)
  - persistor: share functionality of JSONDB (Jan Silhan)
  - keepcache=0 persists packages till next successful transaction
    (RhBug:1220074) (Jan Silhan)
  - do not use releasever in cache path (related to RhBug:1173107) (Michael
    Mraka)
  - doc: add dnf list use case (Michal Luscon)
  - repo: allow ntlm proxy auth (RhBug:1219199) (Michal Luscon)
  - add a script which updates release notes (Radek Holy)
  - doc: reverse the order of release notes (Radek Holy)
  - completion_helper: fix tb if list XXX is not known arg (RhBug:1220040) (Igor
    Gnatenko)
  - configurable maximum number of parallel downloads (RhBug:1230975) (Igor
    Gnatenko)
  - add info to bash_completion (1nsan3)
  - dnf upgrade does not try to upgrade uninstalled packages (RhBug: 1234763)
    (Adam Salih)
  - dnf group list now checks every package and prints out only invalid ones
    (Adam Salih)
  - install: return zero exit code if group is already installed (RhBug:1232815)
    (Michal Luscon)
  - doc: add -b which does the same as --best (Igor Gnatenko)
  - support category groups (Michael Mraka)
  - cli test update for repofrompath (Michael Mraka)
  - documentation for --repofrompath (Michael Mraka)
  - implemented --repofrompath option (RhBug:1113384) (Michael Mraka)
  - doc: document filter provides and obsoletes (Michal Luscon)
  - doc: extend --quiet explanation (RhBug:1133979) (Jan Silhan)
  - fixed dnf-automatic email emitter unicode error (RhBug:1238958) (Jan Silhan)
  - doc: be specific what 'available' means in list/info (Jan Silhan)
  - cosmetic: fixed typo (RhBug:1238252) (Jan Silhan)
  - groups: clean dependencies (Michal Luscon)
  - groups: fix removing of env that contains previously removed group (Michal
    Luscon)
  - groups: fix removing of empty group (Michal Luscon)
  - AUTHORS: updated (Jan Silhan)
  - bash-completion: ignore sqlite3 user configuration (Peter Simonyi)
  - Fix package name for rawhide .repo files (Frank Dana)
  - Add 'transaction_display' to DemandSheet (Will Woods)
  - translation: update (Jan Silhan)
  - translation: use zanata instead of transifex (Jan Silhan)
  - Updated Polish translation (Piotr Drąg)
  - updated georgian translation (George Machitidze)
  - group: fixed installing of already installed environment (Jan Silhan)
  - conf: change minrate threshold to librepo default (RhBug:1212320) (Michal
    Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.0.2-3
changelog:
  - Fix regression in group list command introduced by 02c3cc3 (Adam Salih)
  - AUTHORS: updated (Jan Silhan)
  - stop saying "experimental" (Matthew Miller)


author: Michal Luscon <mluscon@redhat.com> 1.1.0-1
changelog:
  - print skipped pkg with broken deps too (Related:RhBug:1210445) (Jan Silhan)
  - history: set commands output as default (RhBug:1218401) (Michal Luscon)
  - Update es.po. save:guardar -> save:ahorrar (Máximo Castañeda)
  - cosmetic: option arg in Base.*install is replaced with strict (Jan Silhan)
  - group: don't fail on first non-existing group (Jan Silhan)
  - install: skips local pkgs of lower version when strict=0
    (Related:RhBug:1227952) (Jan Silhan)
  - install: skip broken/conflicting packages in groups when strict=0 (Jan
    Silhan)
  - install: skip broken/conflicting packages when strict=0 (Jan Silhan)
  - implemented `strict` config option working in install cmd (RhBug:1197456)
    (Jan Silhan)
  - fixed 'dnf --quiet repolist' lack of output (RhBug:1236310) (Nick Coghlan)
  - Add support for MIPS architecture (Michal Toman)
  - package: respect baseurl attribute in localPkg() (RhBug:1219638) (Michal
    Luscon)
  - Download error message is not written on the same line as progress bar
    anymore (RhBug: 1224248) (Adam Salih)
  - dnf downgrade does not try to downgrade not installed packages (RhBug:
    1243501) (max9631)
  - pkgs not installed due to rpm error are reported (RhBug:1207981) (Adam Salih)
  - dnf install checks availability of all given packages (RhBug:1208918) (Adam
    Salih)
  - implemented install_weak_deps config option (RhBug:1221635) (Jan Silhan)
  - ignore SIGPIPE (RhBug:1236306) (Michael Mraka)
  - always add LoggingTransactionDisplay to the list of transaction displays
    (RhBug:1234639) (Radek Holy)
  - Add missing FILES section (RhBug: 1225237) (Adam Salih)
  - doc: Add yum vs dnf hook information (RhBug:1244486) (Parag Nemade)
  - doc: clarify the expected type of the do_transactions's display parameter
    (Radek Holy)
  - apichange: add dnf.cli.demand.DemandSheet.transaction_display (Radek Holy)
  - apichange: add dnf.callback.TransactionProgress (Radek Holy)
  - move the error output from TransactionDisplay into a separate class (Radek
    Holy)
  - rename TransactionDisplay.errorlog to TransactionDisplay.error (Radek Holy)
  - report package verification as a regular RPM transaction event (Radek Holy)
  - rename TransactionDisplay.event to TransactionDisplay.progress (Radek Holy)
  - apichange: deprecate dnf.callback.LoggingTransactionDisplay (Radek Holy)
  - use both CliTransactionDisplay and demands.transaction_display (Radek Holy)
  - apichange: accept multiple displays in do_transaction (Radek Holy)
  - support multiple displays in RPMTransaction (Radek Holy)


author: Michal Luscon <mluscon@redhat.com> 1.1.0-2
changelog:
  - update: installonly pkgs are not shown in both install and skipped section
    (RhBug:1252415) (Jan Silhan)
  - output: sort skipped packages (Jan Silhan)
  - output: skipped conflicts are set (RhBug:1252032) (Jan Silhan)
  - keep the dwongrading package installed if transaction fails (RhBug:1249379)
    (Jan Silhan)
  - don't store empty attributes (RhBug:1246928) (Michael Mraka)
  - doc: correct dnf.conf man section (RhBug:1245349) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.1-1
changelog:
  - Fixed typo (RhBug:1249319) (Adam Salih)
  - fixed downgrade with wildcard (RhBug:1234763) (Adam Salih)
  - reorganize logic of get_best_selector(s) and query (RhBug:1242946) (Adam
    Salih)
  - completion_helper: don't crash if exception occurred (RhBug:1225225) (Igor
    Gnatenko)
  - base: expire cache if repo is not available (Michal Luscon)
  - Don't suggest --allowerasing if it is enabled (Christian Stadelmann)
  - translation works in python3 (RhBug:1254687) (Jan Silhan)
  - logrotate less often (RhBug:1247766) (Jan Silhan)
  - implement dnf mark command (RhBug:1125925) (Michal Luscon)
  - groups: use comps data to migrate persistor (Michal Luscon)
  - groups: preserve api compatibility (Michal Luscon)
  - groups: use persistor data for removing env/group (Michal Luscon)
  - persistor: add migration and bump version (Michal Luscon)
  - persistor: store name and ui_name of group (Michal Luscon)
  - show real metadata timestamp on the server in verbose mode (Jan Silhan)
  - lock: make rpmdb lock blocking (RhBug:1210289) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.1-2
changelog:
  - fix access to demands (RhBug:1259194) (Jan Silhan)
  - make clean_requiremets_on_remove=True (RhBug:1260280) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.1.2-1
changelog:
  - doc: release notes 1.1.2 (Michal Luscon)
  - sanitize non Unicode command attributes (RhBug:1262082) (Jan Silhan)
  - don't redirect confirmation to stderr RhBug(1258364) (Vladan Kudlac)
  - clean: add rpmdb to usage (Vladan Kudlac)
  - completion_helper: don't get IndexError (RhBug:1250038) (Vladan Kudlac)
  - add --downloadonly switch (RhBug:1048433) (Adam Salih)
  - Add globbing support to base.by_provides() (RhBug:11259650) (Valentina
    Mukhamedzhanova)
  - spec: packaging python(3)-dnf according to new Fedora guidelines
    (RhBug:1260198) (Jaroslav Mracek)
  - Bug in Source0: URL in dnf.spec fixed (RhBug:126255) (Jaroslav Mracek)
  - To dnf.spec added provides dnf-command(command name) for 21 dnf commands
    (RhBug:1259657) (jmracek)
  - Expire repo cache on failed package download (Valentina Mukhamedzhanova)
  - cosmetic: ci: fix the Copr name in the README (Radek Holy)
  - Add the continuous integration script (Radek Holy)
  - Set proper charset on email in dnf-automatic (RhBug:1254982) (Valentina
    Mukhamedzhanova)
  - doc: improve configuration description (RhBug:1261766) (Michal Luscon)
  - remove: show from which repo a package is (Vladan Kudlac)
  - list: show from which repo a package is (RhBug:1234491) (Vladan Kudlac)
  - Spelling/grammar fixes (Ville Skyttä)
  - install: fix crash when terminal window is small (RhBug:1256531) (Vladan
    Kudlac)
  - install: mark unification of the progress bar (Vladan Kudlac)
  - fix translations in python3 (RhBug:1254687) (Michal Luscon)
  - group: CompsQuery now returns group ids (RhBug:1261656) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.3-1
changelog:
  - Update command_ref.rst (Jaroslav Mracek)
  - Change in automatic.conf email settings to prevent email error with default
    sender name (Jaroslav Mracek)
  - Replace assert_called() with assert_called_with() for Py35 support (Neal
    Gompa (ニール・ゴンパ))
  - doc: improve documentation (Jaroslav Mracek)
  - doc: update the instructions related to nightly builds (Radek Holy)
  - Revert "Add the continuous integration script" (Radek Holy)
  - Revert "cosmetic: ci: fix the Copr name in the README" (Radek Holy)
  - Fix typo in Command.canonical's doctring (Timo Wilken)
  - base: group_install is able to exclude mandatory packages
    (Related:RhBug:1199868) (Jan Silhan)


author: Michal Luscon <mluscon@redhat.com> 1.1.4-1
changelog:
  - AUTHORS: updated (Jan Silhan)
  - query: add compatibility methods (Michal Luscon)
  - query: add recent, extras and autoremove methods to Query (Michal Luscon)
  - query: add duplicated and latest-limit queries into api (Michal Luscon)
  - format the email message with its as_string method (Olivier Andrieu)
  - added dnf.i18n.ucd* functions as deprecated API (Jan Silhan)
  - i18n: unicode resulting translations (RhBug:1278031) (Jan Silhan)
  - po: get rid of new lines in translation (Jan Silhan)
  - output: add skip count to summary (RhBug:1264032) (Michal Domonkos)
  - groups: fix environment upgrade (Michal Luscon)
  - Fix plural strings extraction (RhBug:1209056) (Baurzhan Muftakhidinov)
  - po: fixed malformed beginning / ending (Jan Silhan)
  - zanata update (Jan Silhan)
  - cli: prevent tracebacks after C^ (RhBug:1274946) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.5-1
changelog:
  - base: save group persistor only after successful transaction (RhBug:1229046)
    (Michal Luscon)
  - base: do not clean tempfiles after remove transaction (RhBug:1282250) (Michal
    Luscon)
  - base: clean packages that do not belong to any trans (Michal Luscon)
  - upgrade: allow group upgrade via @ syntax (RhBug:1265391) (Michal Luscon)
  - spec: Mark license files as %license where available (Ville Skyttä)
  - Remove unused imports (Ville Skyttä)
  - Spelling fixes (Ville Skyttä)
  - Fix typos in documentation (Rob Cutmore)
  - parser: add support for braces in substitution (RhBug:1283017) (Dave
    Johansen)
  - completion_helper: Don't omit "packages" from clean completions (Ville
    Skyttä)
  - bash-completion: Avoid unnecessary python invocation per _dnf_helper (Ville
    Skyttä)
  - repo: Download drpms early (RhBug:1260421) (Ville Skyttä)
  - clean: Don't hardcode list of args in two places (Ville Skyttä)
  - cli: don't crash if y/n and sys.stdin is None (RhBug:1278382) (Adam
    Williamson)
  - sp err "environement" -> "environment" (Michael Goodwin)
  - Remove -OO from #!/usr/bin/python (RhBug:1230820) (Jaroslav Mracek)
  - cli: warn if plugins are disabled (RhBug:1280240) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.6-1
changelog:
  - history: don't fail if there is no history (RhBug:1291895) (Michal Luscon)
  - Allow dnf to use a socks5 proxy, since curl support it (RhBug:1256587)
    (Michael Scherer)
  - output: do not log rpm info twice (RhBug:1287221) (Michal Luscon)
  - dnf owns /var/lib/dnf dir (RhBug:1294241) (Jan Silhan)
  - Fix handling of repo that never expire (RhBug:1289166) (Jaroslav Mracek)
  - Filter out .src packages when multilib_proto=all (Jeff Smith)
  - Enable string for translation (RhBug:1294355) (Parag Nemade)
  - Let logging format messages on demand (Ville Skyttä)
  - clean: include metadata of local repos (RhBug:1226322) (Michal Domonkos)
  - completion: Install to where bash-completion.pc says (Ville Skyttä)
  - spec: bash completion is not a %config file (Ville Skyttä)
  - Change assertion handling for rpmsack.py (RhBug:1275878) (Jaroslav Mracek)
  - cli: fix storing arguments in history (RhBug:1239274) (Ting-Wei Lan)


author: Michal Luscon <mluscon@redhat.com> 1.1.7-1
changelog:
  - Add `/etc/distro.repos.d` as a path owned by the dnf package (Neal Gompa
    (ニール・ゴンパ))
  - Change order of search and add new default repodirs (RhBug:1286477) (Neal
    Gompa (ニール・ゴンパ))
  - group: don't mark available packages as installed (RhBug:1305356) (Jan
    Silhan)
  - history: adjust demands for particular subcommands (RhBug:1258503) (Michal
    Luscon)
  - Added extension command for group list (RhBug:1283432) (Abhijeet Kasurde)
  - perf: dnf repository-packages <repo> upgrade (RhBug:1306304) (Jan Silhan)
  - sack: Pass base.conf.substitutions["arch"] to sack in build_sack() function.
    (Daniel Mach)
  - build: make python2/3 binaries at build time (Michal Domonkos)
  - fix dnf history traceback (RhBug:1303149) (Jan Silhan)
  - cli: truncate expiration msg (RhBug:1302217) (Michal Luscon)


author: Michal Luscon <mluscon@redhat.com> 1.1.8-1
changelog:
  - refactor: repo: add md_expired property (Michal Domonkos)
  - test: fix cachedir usage in LocalRepoTest (Michal Domonkos)
  - clean: operate on all cached repos (RhBug:1278225) (Michal Domonkos)
  - refactor: repo: globally define valid repoid chars (Michal Domonkos)
  - RepoPersistor: only write to disk when requested (Michal Domonkos)
  - clean: remove dead subcommands (Michal Domonkos)
  - doc: --best in case of problem (RhBug:1309408) (Jan Silhan)
  - Added fix for correct error message for group info (RhBug:1209649) (Abhijeet
    Kasurde)
  - repo: don't get current timeout for librepo (RhBug:1272977) (Igor Gnatenko)
  - doc: fix default timeout value (Michal Luscon)
  - cli: inform only about nonzero md cache check interval (Michal Luscon)
  - base: report errors in batch at the end of md downloading (Michal Luscon)
  - repo: produce more sane error if md download fails (Michal Luscon)
  - zanata update (RhBug:1322226) (Jan Silhan)
  - doc: Fixed syntax of `assumeyes` and `defaultyes` ref lables in
    `conf_ref.rst` (Matt Sturgeon)
  - Fix output headers for dnf history command (Michael Dunphy)
  - doc: change example of 'dnf-command(repoquery)' (Jaroslav Mracek)
  - makacache.service: shorten journal logs (RhBug:1315349) (Michal Luscon)
  - config: improve UX of error msg (Michal Luscon)
  - Added user friendly message for out of range value (RhBug:1214562) (Abhijeet
    Kasurde)
  - doc: prefer repoquery to list (Jan Silhan)
  - history: fix empty history cmd (RhBug:1313215) (Michal Luscon)
  - Very minor tweak to the docs for `--assumeyes` and `--assumeno` (Matt
    Sturgeon)


author: Igor Gnatenko <ignatenko@redhat.com> 1.1.9-1
changelog:
  - doc: release notes 1.1.9 (Igor Gnatenko)
  - spec: correctly set up requirements for python subpkg (Igor Gnatenko)
  - spec: follow new packaging guidelines & make compatible with el7 (Igor
    Gnatenko)
  - zanata update (Jan Silhan)
  - enforce-api: add missing bits of Base class (Michal Luscon)
  - help: unify help msg strings (Michal Luscon)
  - enforce-api: decorate Base class (Michal Luscon)
  - util: add decorator informing users of nonapi functions (Michal Luscon)
  - Added description for 'autoremove' in dnf help (RhBug:1324086) (Abhijeet
    Kasurde)
  - i18n: fixup for 0db13feed (Michal Luscon)
  - i18n: use fallback mode if terminal does not support UTF-8 (RhBug:1332012)
    (Michal Luscon)
  - Revert "spec: follow new packaging guidelines & make compatible with el7"
    (Michal Luscon)
  - move autoglob feature directly to filterm() and filter() (Michael Mraka)
  - group: treat mandatory pkgs as mandatory if strict=true (RhBug:1292892)
    (Michal Luscon)
  - locks: fix lock paths in tmpfsd config since cachedir has been changed
    (Michal Luscon)
  - remove formating from translation strings (Michal Luscon)
  - base: set diskspace check filter before applying the filters (RhBug:1328674)
    (Michal Luscon)
  - order repos by priority and cost (Michael Mraka)
  - spec: follow new packaging guidelines & make compatible with el7 (Igor
    Gnatenko)
  - bash-completion: first try to set fallback to BASH_COMPLETION_COMPATDIR (Igor
    Gnatenko)
  - updated copyrights for files changed this year (Michael Mraka)
  - cli: fix warning from re.split() about non-empty pattern (RhBug:1286556)
    (Igor Gnatenko)
  - update authors file (Michal Luscon)
  - Define __hash__ method for YumHistoryPackage (RhBug:1245121) (Max Prokhorov)


author: Michal Luscon <mluscon@redhat.com> 1.1.9-2
changelog:
  - Revert "group: treat mandatory pkgs as mandatory if strict=true" (RhBug:1337731)
  - enforce-api: reflect changes from #992475 in completion_helper (RhBug:1338504)
  - enforce-api: add compatibility methods for renamed counterparts (RhBug:1338564)


author: Michal Luscon <mluscon@redhat.com> 2.0.0-1
changelog:
  - tests: catch ModuleNotFoundError as well (Igor Gnatenko)
  - Switch out automatic service for automatic-download and automatic-install
    (Pat Riehecky)
  - Make upgrade-to alias for upgrade (RhBug:1327999) (Jaroslav Mracek)
  - skip appending an empty option (RhBug: 1400081) (Michael Mraka)
  - Add description of nevra foems for commands and autoremove args (Jaroslav
    Mracek)
  - Add support of arguments nevra forms for autoremove command (Jaroslav Mracek)
  - Add nevra forms for remove command (Jaroslav Mracek)
  - Add nevra forms for install command (Jaroslav Mracek)
  - add bin/yum into .gitignore (Michal Luscon)
  - clean: acquire all locks before cleaning (RhBug:1293782) (Michal Luscon)
  - Change hawkey version requirement (Jaroslav Mracek)
  - Add information for translators (RhBug:1386078) (Jaroslav Mracek)
  - Change info to warning for clean repoquery output (RhBug:1358245) (Jaroslav
    Mracek)
  - Add description of pkg flag for Query (RhBug:1243393) (Jaroslav Mracek)
  - Add minor changes in documentation (Jaroslav Mracek)
  - Do not always overwrite the name with the repo ID (Neal Gompa)


author: Jaroslav Mracek <jmracek@redhat.com> 2.0.1-1
changelog:
  - bump version to 2.0.1 + update release notes (Jaroslav Mracek)
  - introduce cli 'obsoletes' option (Martin Hatina)
  - swap tids if they are in wrong order (RhBug:1409361) (Michael Mraka)
  - Disable shell command recursion (Jaroslav Rohel)
  - Honor additional arguments for DNF shell repo list command (Jaroslav Rohel)
  - don't traceback when bug title is not set (Michael Mraka)
  - introducing list-security, info-security etc. commands (Michael Mraka)
  - Add lsedlar to contributors list (Lubomír Sedlář)
  - Return just name from Package.source_name (Lubomír Sedlář)
  - introduce dnf.conf.config.MainConf.exclude() (Martin Hatina)
  - systemd: Disable daemons on ostree-managed systems (Colin Walters)
  - introduced dnf.base.Base.autoremove() (RhBug:1414512) (Martin Hatina)
  - po: update translations (Igor Gnatenko)
  - build: use relative directory for translations (Igor Gnatenko)
  - Temporary eliminate a problem with install remove loop (Jaroslav Mracek)
  - Handle info message when DRPM wastes data (RhBug:1238808) (Daniel
    Aleksandersen)
  - Fix output for better translation (RhBug:1386085) (Abhijeet Kasurde)
  - yum layer refactored (Martin Hatina)
  - return values changed to match yum's (Martin Hatina)
  - Reword sentence after removing package (RhBug:1286553) (Abhijeet Kasurde)
  - Minor documentation revisions (Mark Szymanski)
  - Minor code fix (Abhijeet Kasurde)
  - automatic: email emitter date header (David Greenhouse)
  - Solve problem when no repo and only rpms with upgrade command (Jaroslav
    Mracek)
  - bash_completion: use system-python if it's available (Igor Gnatenko)
  - spec: use system-python for dnf-yum as well (Igor Gnatenko)
  - comps/groups: fix tests (Michal Luscon)
  - comps: adjust group_upgrade to new CompsTransPkg style (Michal Luscon)
  - groups: refactored installation (RhBug:1337731, RhBug:1336879) (Michal
    Luscon)
  - Increase requirement for hawkey (Jaroslav Mracek)
  - Change reporting problems for downgradePkgs() (Jaroslav Mracek)
  - Use selector for base.package_upgrade() (Jaroslav Mracek)
  - Add usage of selectors for base.package_install() (Jaroslav Mracek)
  - Use selector for base.package_downgrade() (Jaroslav Mracek)
  - Redirect base.downgrade() to base.downgrade_to() (Jaroslav Mracek)
  - Enable wildcard for downgrade command (RhBug:1173349) (Jaroslav Mracek)
  - Refactor downgrade cmd behavior (RhBug:1329617)(RhBug:1283255) (Jaroslav
    Mracek)
  - Redirect logger.info into stderr for repolist (RhBug:1369411) (Jaroslav
    Mracek)
  - Redirect logger.info into stderr for repoquery (RhBug:1243393) (Jaroslav
    Mracek)
  - Add possibility for commands to redirect logger (Jaroslav Mracek)
  - Put information about metadata expiration into stdout (Jaroslav Mracek)
  - Change warning about added repo into info (RhBug:1243393) (Jaroslav Mracek)
  - Move grouplist output from logger into stdout (Jaroslav Mracek)
  - let repo exclude work the same way as global exclude (Michael Mraka)
  - Fix wrong assumptions about metalinks (RhBug:1411349) (Jaroslav Mracek)
  - handle --disablerepo/--enablerepo properly with strict (RhBug:1345976)
    (Štěpán Smetana)
  - Add fix to notify user about no repos (RhBug:1369212) (Abhijeet Kasurde)
  - Add information about "hidden" option in dnf doc (RhBug:1349247) (Abhijeet
    Kasurde)
  - Fix for 'history package-list' (Amit Upadhye)
  - Enable multiple args for repoquery -f (RhBug:1403930) (Jaroslav Mracek)
  - Set default repo.name as repo._section (Jaroslav Mracek)
  - Create from self.forms value forms in cmd.run() (Jaroslav Mracek)
  - Add description of swap command into documentation (Jaroslav Mracek)
  - Add swap command (RhBug:1403465) (RhBug:1110780) (Jaroslav Mracek)
  - Solve a problem with shell when empty line or EOF (Jaroslav Mracek)
  - shell: add history of commands (RhBug:1405333) (Michal Luscon)
  - Add info if no files with repoquery -l (RhBug:1254879) (Jaroslav Mracek)
  - po: update translations (Igor Gnatenko)
  - po: migrate to zanata python client and trivial fixes in build (Igor
    Gnatenko)
  - po: include all possible languages from zanata (Igor Gnatenko)
  - po: include comments for translations (Igor Gnatenko)
  - shell: catch exceptions from depsolving (Michal Luscon)
  - shell: update documentation (Michal Luscon)
  - shell: add transaction reset cmd (Michal Luscon)
  - shell: add transaction resolve cmd (Michal Luscon)
  - shell: provide rewritable demands for cmds (Michal Luscon)
  - shell: catch tracebacks from shlex (Michal Luscon)
  - shell: handle ctrl+D more gracefully (Michal Luscon)
  - groups: set demands in configure instead of run (Michal Luscon)
  - shell: implement config cmd (Michal Luscon)
  - shell: add help (Michal Luscon)
  - shell: make alias repo list -> repolist (Michal Luscon)
  - shell: catch exceptions from do_transaction (Michal Luscon)
  - shell: resolve transaction in ts run (Michal Luscon)
  - shell: add default value for internal methods argument (Michal Luscon)
  - shell: create run alias for ts run (Michal Luscon)
  - shell: add ts list cmd (Michal Luscon)
  - shell: refill sack after every successful repo cmd (Michal Luscon)
  - shell: allow running multiple transaction in one session (Michal Luscon)
  - shell: add ts command (Michal Luscon)
  - shell: catch cmd parsing and run exceptions (Michal Luscon)
  - shell: allow to run scripts (Michal Luscon)
  - shell: add repo cmd (Michal Luscon)
  - shell: add resolving + transaction run support (Michal Luscon)
  - shell: implement quit method (Michal Luscon)
  - shell: add custom cmds stubs (Michal Luscon)
  - shell: implement basic logic (Michal Luscon)
  - shell: register new cmd (Michal Luscon)


author: Jaroslav Mracek <jmracek@redhat.com> 2.1.0-1
changelog:
  - bump version to 2.1.0 + update release notes (Jaroslav Mracek)
  - Fix problem with --recent option in repoquery (Jaroslav Mracek)
  - Fix problem with duplicated --obsoletes (RhBug:1421835) (Jaroslav Mracek)
  - Python 3.6 invalid escape sequence deprecation fixes (Ville Skyttä)
  - Add --repoid as alias for --repo (Jaroslav Mracek)
  - introduce dnf.base.Base.update_cache() (Martin Hatina)
  - Try to install uninstalled packages if group installed (Jaroslav Mracek)
  - Enable search of provides in /usr/(s)bin (RgBug:1421618) (Jaroslav Mracek)
  - style: ignore E261 (Igor Gnatenko)
  - makecache: do not run on metered connections (RhBug:1415711) (Igor Gnatenko)
  - change '--disableplugins' to '--disableplugin' (Martin Hatina)
  - cosmetic: removed unused import (Jan Silhan)
  - show hint how to display why package was skipped (RhBug:1417627) (Jan Silhan)
  - spec: add information how to obtain archive (Igor Gnatenko)
  - fix messages (UX) (Jaroslav Rohel)
  - zanata update (Jan Silhan)


author: Jaroslav Mracek <jmracek@redhat.com> 2.1.1-1
changelog:
  - bump version to 2.1.1 + update release notes (Jaroslav Mracek)
  - Sync the translation with locale (Jaroslav Rohel)
  - Disable exceptions in logging (Jaroslav Rohel)
  - Fix severity info in "updateinfo info" (Jaroslav Mracek)
  - Add help for shell commands (Jaroslav Rohel)
  - shell: no crash if missing args (Jaroslav Rohel)
  - proper check of releasever, when using installroot (RhBug:1417542) (Martin
    Hatina)
  - Inform about "Cache was expired" with "dnf clean" (RhBug:1401446) (Jaroslav
    Mracek)
  - crypto: port to the official gpgme bindings (Igor Gnatenko)
  - Fix doc example for `fill_sack` method (Lubomír Sedlář)
  - po: update translations (Igor Gnatenko)
  - Not try to install src package (RhBug:1416699) (Jaroslav Mracek)
  - Add usage for add_new_repo() with repofrompath option (Jaroslav Mracek)
  - Add new API add_new_repo() in RepoDict() (RhBug:1427132) (Jaroslav Mracek)
  - docs: adds documentation for dnf-automatic's Command and CommandEmail
    emitters. (rhn)
  - docs: fixes typo in section description in automatic (rhn)
  - Adds new emitters for dnf-automatic. (rhn)
  - po: update translations (Igor Gnatenko)
  - Ensure that callback will not kill dnf transaction (Jaroslav Mracek)
  - Ensure that name will be not requested on None (RhBug:1397047) (Jaroslav
    Mracek)
  - Python 3.6 invalid escape sequence deprecation fix (Ville Skyttä)
  - display severity information in updateinfo (#741) (Michael Mraka)
  - po: update translations (Igor Gnatenko)
  - Add --nodocs option for dnf (RhBug:1379628) (Jaroslav Mracek)
  - Replace passive plugin noroot (Jaroslav Mracek)
  - Fix incorrect formating of string for logger.info (Jaroslav Mracek)
  - Not print help if empty line in script for shell command (Jaroslav Mracek)
  - Run fill_sack after all repos have changed status (Jaroslav Mracek)
  - Remove Hawkey object from repo if rerun of dnf.fill_sack (Jaroslav Mracek)
  - util/on_metered_connection: be more polite to failures (Igor Gnatenko)
  - cosmetic: i18n: rewording of 'Login user' (RhBug:1424939) (Jan Silhan)
  - Fix problem with --whatprovides in repoquery (RhBug:1396992) (Jaroslav
    Mracek)
  - Add -a and --all option for repoquery (RhBug:1412970) (Jaroslav Mracek)
  - Change camel-case of output of grouplist (Jaroslav Mracek)
  - Minor correction in release notes (Jaroslav Mracek)
  - Minor correction in release notes (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.2.0-1
changelog:
  - bump version to 2.2.0 + update release notes (Jaroslav Mracek)
  - Add documentation of new API callback actions (RhBug:1411432) (Jaroslav
    Mracek)
  - Fix python2 doesn't have e.__traceback__ attribute (Jaroslav Mracek)
  - Do not report erasing package as None. (Jaroslav Mracek)
  - Display scriplet for transaction (RhBug:1411423) (RhBug:1406130) (Jaroslav
    Mracek)
  - Add support for rpmcallbacks (Jaroslav Mracek)
  - AUTHORS: updated (Jaroslav Rohel)
  - Not show expiration check if no repo enabled (RhBug:1369212) (Jaroslav
    Mracek)
  - Fix changelog in dnf spec file (Jaroslav Mracek)
  - po: update translations (Igor Gnatenko)
  - Add myself (mhatina) to AUTHORS (Martin Hatina)
  - po: Update translations (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> 2.3.0-1
changelog:
  - update release notes (Jaroslav Mracek)
  - po: Update translations (Igor Gnatenko)
  - Add require of subcommand for repo-pkgs command (Jaroslav Rohel)
  - shell: Fix commands initialization (Jaroslav Rohel)
  - po: Update translations (Igor Gnatenko)
  - Add support for --location for repoquery command (RhBug:1290137) (Jaroslav
    Mracek)
  - Add support of --recursive with --resolve in repoquery (Jaroslav Mracek)
  - Add --recursive option for repoquery (Jaroslav Mracek)
  - Add --whatconflicts for repoquery (Jaroslav Mracek)
  - Add support for multiple options for repoquery (Jaroslav Mracek)
  - Add multiple format option for repoquery (Jaroslav Mracek)
  - Fix problem with "dnf repoquery --querytags" (Jaroslav Mracek)
  - Add support of 3 options into updateinfo command (Jaroslav Mracek)
  - Add inheritance of reason for obsoleting packages (Jaroslav Mracek)
  - Mark installonlypkgs correctly as user installed (RhBug:1349314) (Jaroslav
    Mracek)
  - Solve a problem with None names in callbacks (Jaroslav Mracek)
  - Solve a problem for callbacks (Jaroslav Mracek)
  - Revert "remove: CLI: --randomwait" (RhBug:1247122) (Ondřej Sojka)
  - po: update translations (Igor Gnatenko)
  - po: update translations (Igor Gnatenko)
  - Set strings for translations (RhBug:1298717) (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.4.0-1
changelog:
  - po: Update translations (Igor Gnatenko)
  - po: Update translations (Igor Gnatenko)
  - introduce '--enableplugin' option (Martin Hatina)
  - Improve detection of file patterns (Jaroslav Mracek)
  - Add method _get_nevra_solution() for subject (Jaroslav Mracek)
  - Do not add "*" into query filter in _nevra_to_filters() (Jaroslav Mracek)
  - Remove usage of nevra_possibilities_real() (Jaroslav Mracek)
  - Increase performance for downgrade_to() (Jaroslav Mracek)
  - Add additional keys for get_best_query() (Jaroslav Mracek)
  - Increase performance for get_best_selector() (Jaroslav Mracek)
  - Increase performance for get_best_query() (Jaroslav Mracek)
  - Fix "Package" text translation (RhBug:1302935) (Jaroslav Rohel)
  - Create a warning if releasever is None (Jaroslav Mracek)
  - Adds cost, excludepkgs, and includepkgs to Doc (RhBug:1248684) (Jaroslav
    Mracek)
  - Change auto-detection of releasever in empty installroot (Jaroslav Mracek)
  - Do not load system repo for makecache command (RhBug:1441636) (Jaroslav
    Mracek)
  - Do not raise assertion if group inst and rmv pkgs (RhBug:1438438) (Jaroslav
    Mracek)
  - yum layer using python3 (Martin Hatina)
  - Filter url protocols for baseurl in Package.remote_location (Jaroslav Mracek)
  - Add armv5tl to arm basearch (Neal Gompa)
  - Setup additional parameters for handler for remote packages (Jaroslav Mracek)
  - Use same method for user/password setting of every librepo.handle (Jaroslav
    Mracek)
  - Fix PEP8 violations and remove unused import (Jaroslav Mracek)
  - Handle unknown file size in download progress (Jaroslav Mracek)
  - Allow to delete cashed files from command line by clean command (Jaroslav
    Mracek)
  - Save command line packages into chachedir (RhBug:1256313) (Jaroslav Mracek)
  - Add progress bar for download of commandline pkgs (RhBug:1161950) (Jaroslav
    Mracek)
  - Fix minor typo Closes: #781 Approved by: ignatenkobrain (Yuri Chornoivan)
  - Mark unremoved packages as failed (RhBug:1421244) (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.4.1-1
changelog:
  - bump version to 2.4.1 + update release notes (Jaroslav Mracek)
  - goal: do not mark weak dependencies as userinstalled (Igor Gnatenko)
  - fix typo in supplements (RhBug:1446756) (Igor Gnatenko)
  - Describe present behavior of installonly_limit conf option (Jaroslav Mracek)
  - Reset all transaction for groups if Base.reset() (RhBug:1446432) (Jaroslav
    Mracek)
  - Explain how add negative num for --latest-limit (RhBug:1446641) (Jaroslav
    Mracek)
  - trivial: don't duplicate option names (Igor Gnatenko)
  - Add support for --userinstalled for repoquery command (RhBug:1278124)
    (Jaroslav Rohel)
  - Fix header of search result sections (RhBug:1301868) (Jaroslav Rohel)
  - Filter out src for get_best_selector (Jaroslav Mracek)
  - Add minor changes in formating of documentation (Jaroslav Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.5.0-1
changelog:
  - Update release notes (Jaroslav Mracek)
  - Change documentation for history --userinstalled (RhBug:1370062) (Jaroslav
    Mracek)
  - Change example to install plugin using versionlock (Jaroslav Mracek)
  - Remove unused method Goal.best_run_diff() (Jaroslav Mracek)
  - Change recommendations if some problems appear (RhBug:1293067) (Jaroslav
    Mracek)
  - Report problems for goals with optional=True (Jaroslav Mracek)
  - Format resolve problem messages in method in dnf.util (Jaroslav Mracek)
  - Enhance reports about broken dep (RhBug:1398040)(RhBug:1393814) (Jaroslav
    Mracek)
  - search: do not generate error if not match anything (RhBug:1342157) (Jaroslav
    Rohel)
  - Check if any plugin is removed in transaction (RhBug:1379906) (Jaroslav
    Mracek)
  - Show progress for DRPM (RhBug:1198975) (Jaroslav Mracek)
  - Fix disabledplugin option (Iavael)
  - [history]: fixed info command merged output (Eduard Čuba)


author: Jaroslav Mracek <jmracek@redhat.com> 2.5.1-1
changelog:
  - bump version to 2.5.1 + update release notes (Jaroslav Mracek)
  - Fix: dnf update --refresh fails for repo_gpgcheck=1 (RhBug:1456419) (Daniel
    Mach)
  - Don't try to cut datetime message (Jaroslav Rohel)
  - Use localized datetime format (RhBug:1445021) (Jaroslav Rohel)
  - Work with locale date (Jaroslav Rohel)
  - Use ISO 8601 time format in logfile (Jaroslav Rohel)
  - Add unitest to prevent callbacks breakage (Jaroslav Mracek)
  - Provide compatibility for tools that do not use total_drpms (Jaroslav Mracek)
  - Requires strict usage of repoquery --recursive (Jaroslav Mracek)
  - Fix output for --resolve with --installed for repoquery (Jaroslav Mracek)
  - Remove unnecessary inheritance of yum conf options (Martin Hatina)
  - Remove alwaysprompt option support (RhBug:1400714) (Jaroslav Rohel)
  - Allow to install groups with multilib_policy=all (RhBug:1250702) (Jaroslav
    Mracek)
  - Redesign Base.install() to provide alternatives (Jaroslav Mracek)
  - Report excludes includes into logger.debug (RhBug:1381988) (Jaroslav Mracek)
  - Provide new API to parse string to NEVRA () (Jaroslav Mracek)
  - Add more repoquery querytags (Jaroslav Rohel)
  - Not hide tracebacks (Jaroslav Mracek)
  - Solve error handling for get attr in yumdb (RhBug:1397848) (Jaroslav Mracek)
  - Provide a better error if throttle to low (RhBug:1321407) (Jaroslav Mracek)
  - Change timeout to 30s (RhBug:1291867) (Jaroslav Mracek)
  - Add pre_transaction hook for plugins (Jaroslav Rohel)
  - Not download metadata if "dnf history [info|list|userinstalled]" (Jaroslav
    Mracek)
  - Not download metadata if "dnf repo-pkgs <repo> list --installed" (Jaroslav
    Mracek)
  - Not download metadata if "dnf list --installed" (RhBug:1372895) (Jaroslav
    Mracek)
  - Format pkg str for repoquery --tree due to -qf (RhBug:1444751) (Jaroslav
    Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> 2.6.2-1
changelog:
  - Remove autodeglob optimization (Jaroslav Rohel)
  - Integrate --destdir with --destdir from download plugin (Ondřej Sojka)
  - Add CLI option --destdir (RhBug:1279001) (Ondřej Sojka)
  - Add myself to the AUTHORS file (Nathaniel McCallum)
  - Add the --forcearch CLI flag (Nathaniel McCallum)
  - Add 'ignorearch' option (Nathaniel McCallum)
  - Provide an API for setting 'arch' and 'basearch' (Nathaniel McCallum)
  - Add nevra forms for repoquery command (Jaroslav Rohel)
  - Fix UnicodeDecodeError during checkSig() on non UTF-8 locale (RhBug:1397848)
    (Jaroslav Rohel)
  - Add dnf option --noautoremove (RhBug:1361424) (Jaroslav Mracek)
  - Add group argument for mark command (Jaroslav Mracek)
  - Report problems for each pkg during gpgcheck (RhBug:1387925) (Jaroslav
    Mracek)
  - fix minor spelling mistakes (René Genz)
  - Print warning when wrong delimiter in cache (RhBug:1332099) (Vítek Hoch)
  - Fix the loading of config for dnf-automatic command_email (RhBug:1470116)
    (Jaroslav Rohel)
  - Enable download progress bar if redirected output (RhBug:1161950) (Jaroslav
    Mracek)
  - Support short abbrevations of commands (RhBug:1320254) (Vítek Hoch)
  - Remove unused variables kwargs (Jaroslav Mracek)
  - Not reinstall packages if install from repository-pkgs used (Jaroslav Mracek)
  - bump dnf version to 2.6.0 (Igor Gnatenko)
  - spec: use python2- prefix for hawkey (Igor Gnatenko)
  - spec: use sphinx-build binary rather than package name (Igor Gnatenko)
  - spec: python-bugzilla is not needed for building (Igor Gnatenko)
  - spec: fix instructions about generating tarball (Igor Gnatenko)
  - po: Update translations (Igor Gnatenko)
  - Add an example of installation without weak-deps  (RhBug:1424723) (Jaroslav
    Mracek)
  - Add detection if mirrorlist is used for metalink (Jaroslav Mracek)
  - Rename variable (Jaroslav Mracek)
  - Add --groupmember option to repoquery (RhBug:1462486) (Jaroslav Mracek)
  - Check checksum for local repositories (RhBug:1314405) (Jaroslav Mracek)
  - Spelling fixes (Ville Skyttä)
  - repoquery --obsoletes prints obsoletes (RhBug:1457368) (Matěj Cepl)
  - Provide pkg name hint for icase (RhBug:1339280) (RhBug:1138978) (Jaroslav
    Mracek)
  - Return only latest pkgs for "dnf list upgrades" (RhBug:1423472) (Jaroslav
    Mracek)
  - cleanup code not executed in case of exception (Marek Blaha)
  - Allow to modify message for user confirmation (Jaroslav Mracek)
  - Add autocheck_running_kernel config option (Štěpán Smetana)
  - Inform about skipped packages for group install (RhBug:1427365) (Jaroslav
    Mracek)
  - Remove group remove unneeded pkgs (RhBug:1398871) (RhBug:1432312) (Jaroslav
    Mracek)
  - po: update translations (Igor Gnatenko)


author: Jaroslav Mracek <jmracek@redhat.com> 2.6.3-1
changelog:
  - Fix problem with dnf.Package().remote_location() (RhBug:1476215) (Jaroslav
    Mracek)
  - Change behavior of -C according to documentation (RhBug:1473964) (Jaroslav
    Mracek)
  - It should prevent to ask attribute of None (RhBug:1359482) (Jaroslav Mracek)
  - Solve a problems with --arch options (RhBug:1476834) (Jaroslav Mracek)
  - Use security plugin code for dnf-automatic (Jaroslav Mracek)
  - Fix unicode error for python2 (Jaroslav Mracek)
  - Inform about packages installed for group (Jaroslav Mracek)
  - Provide info if pkg is removed due to dependency (RhBug:1244755) (Jaroslav
    Mracek)
  - Unify format of %{_mandir} paths in dnf.spec (Jaroslav Mracek)
  - Remove test_yumlayer.py as unneeded test (Jaroslav Mracek)
  - Provide yum4 package for rhel7 build (Jaroslav Mracek)
  - Make yum compatible layer very minimal (RhBug:1476748) (Jaroslav Mracek)
  - Remove metadata_expire from yum compatible layer (Jaroslav Mracek)
  - Remove keepcache from yum compatibility layer (Jaroslav Mracek)
  - Remove options from yum conf (Jaroslav Mracek)
  - Remove unused functionality from  yum compatible layer (Jaroslav Mracek)
  - Add deplist command for dnf (Jaroslav Mracek)
  - Fix problems with --downloaddir options (RhBug:1476464) (Jaroslav Mracek)
  - Move description of --forcearch into proper place (Jaroslav Mracek)
  - Provide description of --downloaddir option (Jaroslav Mracek)
  - Fix if in spec file (Jaroslav Mracek)
  - Add description of "test" tsflags (Jaroslav Mracek)
  - Enable import gpg_keys with tsflag test (RhBug:1464192) (Jaroslav Mracek)
  - Keep old reason when undoing erase (RhBug:1463107) (Eduard Čuba)
  - spec: eliminate other weak dependencies for el<=7 (Igor Gnatenko)
  - spec: do not strongly require inhibit plugin (Igor Gnatenko)
  - Inform that packages are only downloaded (RhBug:1426196) (Jaroslav Mracek)
  - Move releasever check after the etc/dnf/vars substitutions. (Alexander
    Kanavin)
  - Provide substitution for Repodict.add_new_repo() (RhBug:1457507) (Jaroslav
    Mracek)


author: Jaroslav Mracek <jmracek@redhat.com> - 2.7.2-1
changelog:
  - Update to 2.7.2-1
  - Added new option ``--comment=<comment>`` that adds a comment to transaction in history
  - :meth:`dnf.Base.pre_configure_plugin` configure plugins by running their pre_configure() method
  - Added pre_configure() methotd for plugins and commands to configure dnf before repos are loaded
  - Resolves: rhbz#1421478 - dnf repository-packages: error: unrecognized arguments: -x rust-rpm-macros
  - Resolves: rhbz#1491560 - 'dnf check' reports spurious "has missing requires of" errors
  - Resolves: rhbz#1465292 - DNF remove protected duplicate package
  - Resolves: rhbz#1279001 - [RFE] Missing dnf --downloaddir option
  - Resolves: rhbz#1212341 - [RFE] Allow plugins to override the core configuration
  - Resolves: rhbz#1299482 - mock --init fails with message "Failed calculating RPMDB checksum"
  - Resolves: rhbz#1488398 - dnf upstream tests failures on f26
  - Resolves: rhbz#1192811 - dnf whatprovides should show which provides matched a pattern
  - Resolves: rhbz#1288845 - "dnf provides" wildcard matching is unreliable (not all packages with matches listed)
  - Resolves: rhbz#1473933 - [abrt] dnf-automatic: resolved(): rpm_conf.py:58:resolved:AttributeError: 'Rpmconf' object has no attribute '_interactive'
  - Resolves: rhbz#1237349 - dnf autoremove not removing what dnf list extras shows
  - Resolves: rhbz#1470050 - the 'priority=' option in /etc/yum.repos.d/*.repo is not respected
  - Resolves: rhbz#1347927 - dnf --cacheonly downloads packages
  - Resolves: rhbz#1478115 - [abrt] dnf: _hcmd_undo(): __init__.py:888:_hcmd_undo:IndexError: list index out of range
  - Resolves: rhbz#1461171 -  RFE: support --advisory= with install
  - Resolves: rhbz#1448874 - "dnf needs-restarting" vanished from bash completion
  - Resolves: rhbz#1495116 - Dnf version fails with traceback in container


author: Igor Gnatenko <ignatenko@redhat.com> - 2.7.3-1
changelog:
  - Fix URL detection (RHBZ #1472847)
  - Do not remove downloaded files with --destdir option (RHBZ #1498426)
  - Fix handling of conditional packages in comps (RHBZ #1427144)


author: Jaroslav Mracek <jmracek@redhat.com> - 2.7.4-1
changelog:
  - Update to 2.7.4-1
  - Enhanced performance for excludes and includes handling
  - Solved memory leaks at time of closing of dnf.Base()
  - Resolves: rhbz#1480979 - I thought it abnormal that dnf crashed.
  - Resolves: rhbz#1461423 - Memory leak in python-dnf
  - Resolves: rhbz#1499564 - dnf list installed crashes
  - Resolves: rhbz#1499534 - dnf-2 is much slower than dnf-1 when handling groups
  - Resolves: rhbz#1499623 - Mishandling stderr vs stdout (dnf search, dnf repoquery)


author: Igor Gnatenko <ignatenko@redhat.com> - 2.7.5-1
changelog:
  - Improve performance for excludes and includes handling (RHBZ #1500361)
  - Fixed problem of handling checksums for local repositories (RHBZ #1502106)
  - Fix traceback when using dnf.Base.close() (RHBZ #1503575)


author: Jaroslav Mracek <jmracek@redhat.com> - 3.0.1-1
changelog:
  - Update to 3.0.1-1
  - Support of MODULES - new DNF command `module`
  - Add attribute dnf.conf.Conf.proxy_auth_method
  - New repoquery option `--depends` and `--whatdepends`
  - Enhanced support of variables
  - Enhanced documentation
  - Resolves: rhbz#1565599
  - Resolves: rhbz#1508839
  - Resolves: rhbz#1506486
  - Resolves: rhbz#1506475
  - Resolves: rhbz#1505577
  - Resolves: rhbz#1505574
  - Resolves: rhbz#1505573
  - Resolves: rhbz#1480481
  - Resolves: rhbz#1496732
  - Resolves: rhbz#1497272
  - Resolves: rhbz#1488100
  - Resolves: rhbz#1488086
  - Resolves: rhbz#1488112
  - Resolves: rhbz#1488105
  - Resolves: rhbz#1488089
  - Resolves: rhbz#1488092
  - Resolves: rhbz#1486839
  - Resolves: rhbz#1486839
  - Resolves: rhbz#1486827
  - Resolves: rhbz#1486816
  - Resolves: rhbz#1565647
  - Resolves: rhbz#1583834
  - Resolves: rhbz#1576921
  - Resolves: rhbz#1270295
  - Resolves: rhbz#1361698
  - Resolves: rhbz#1369847
  - Resolves: rhbz#1368651
  - Resolves: rhbz#1563841
  - Resolves: rhbz#1387622
  - Resolves: rhbz#1575998
  - Resolves: rhbz#1577854
  - Resolves: rhbz#1387622
  - Resolves: rhbz#1542416
  - Resolves: rhbz#1542416
  - Resolves: rhbz#1496153
  - Resolves: rhbz#1568366
  - Resolves: rhbz#1539803
  - Resolves: rhbz#1552576
  - Resolves: rhbz#1545075
  - Resolves: rhbz#1544359
  - Resolves: rhbz#1547672
  - Resolves: rhbz#1537957
  - Resolves: rhbz#1542920
  - Resolves: rhbz#1507129
  - Resolves: rhbz#1512956
  - Resolves: rhbz#1512663
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1247083
  - Resolves: rhbz#1519325
  - Resolves: rhbz#1492036
  - Resolves: rhbz#1391911
  - Resolves: rhbz#1391911
  - Resolves: rhbz#1479330
  - Resolves: rhbz#1505185
  - Resolves: rhbz#1305232


author: Daniel Mach <dmach@redhat.com> - 3.0.4-1
changelog:
  - [transaction] Fix 'TransactionItem not found for key' error.
  - [module] Allow removing module profile without specifying a stream.
  - [module] Fix 'BaseCli' object has no attribute '_yumdb' error.
  - [callback] Fix TransactionDisplay.PKG_ERASE redirect to a non-existing constant.
  - [spec] Change yum compat package version to 4.0.version.
  - [cache] Clean transaction temp files after successfull transaction
  - [log] Log messages from libdnf logger
  - [transaction] Add states to report rpm transaction progress
  - [transaction] Cache TransactionItem during handling of RPM callback (RhBug:1599597)
  - [systemd] dnf-makecache.timer: move to multi-user to fix loop


author: Daniel Mach <dmach@redhat.com> - 3.1.0-1
changelog:
  - [module] Move 'hotfixes' conf option to libdnf and rename it to 'module_hotfixes'.
  - [goal] Exclude @System repo packages from distro_sync.
  - [conf] Setup configuration values using C++ bindings.
  - [module] Drop module lock command.
  - [crypto] Use handle from repo in dnf.crypto.retrieve().
  - [module] Assume a 'default' profile exists for all modules (RhBug:1568165)
  - [base] Introduce easy installation of package, group and module specs.


author: Daniel Mach <dmach@redhat.com> - 3.2.0-1
changelog:
  - [sack] Use module_platform_id option.
  - [module] Switch module persistor to libdnf implementation.
  - [module] Auto-enable module streams based on installed RPMs.
  - [transaction] Fix: show packages from the current transaction.
  - [conf] Convert any VectorString type to list.
  - [module] Replace 'enabled' config option with 'state'.
  - [install_specs] Do not exclude groups' packages
  - [module] Use module sack filtering from libdnf
  - [module] Many UX fixes.


author: Daniel Mach <dmach@redhat.com> - 3.3.0-1
changelog:
  - [misc] Fallback to os.getuid() if /proc/self/loginuid can't be read (RhBug:1597005)
  - [translations] Update translations from zanata.
  - [doc] Update module documentation.
  - [module] Fix `module provides` output.
  - [module] Add `module reset` command.
  - [module] Fix module disable command
  - [repo] Improve error message on broken repo (RhBug:1595796)
  - [doc] Enhance a command documentation (RhBug:1361617)
  - [module] Automatically save module persistor in do_transaction().
  - [drpm] Fixed setting deltarpm_percentage=0 to switch drpm off
  - [repo] Split base.download_packages into two functions
  - [output] Use libdnf wrapper for smartcols
  - [conf] Do not traceback on empty option (RhBug:1613577)


author: Daniel Mach <dmach@redhat.com> - 3.4.0-1
changelog:
  - [history] Fix 'attempt to write a readonly database' error in addConsoleOutputLine().
  - [spec] Improve YUM v3 compat layer.
  - [doc] document missing link from yum-rhn-plugin to dnf-plugin-spacewalk (RhBug:1580356)
  - [doc] document difference between yum and dnf when listing packages (RhBug:1615834)
  - [doc] document missing download functionality after transaction table is displayed (RhBug:1585140)
  - [systemd] dnf-makecache.timer: move the ordering after network to .service
  - [translations] Update translations from zanata.
  - [cli] Fix 'already installed' message output.
  - [module] change 'module_nsvp' to 'module_spec'
  - [module] show module profiles without ', ...'
  - [module] unify usability of RepoModuleDict.get_info*(); fix traceback
  - [security] fix update count (RhBug:1585138)
  - [cli] enable reposync to use --destdir (RhBug:1582152)
  - [repo] Replace dnf.repo.Repo with libdnf implementation.
  - [dnf] Limit DeprecationWarning to dnf.* modules only.


author: Jaroslav Mracek <jmracek@redhat.com> - 3.5.0-1
changelog:
  - New implementation of modularity
  - dnf makecache should not fail in red color if no enabled repos (RhBug:1622090)
  - [modularity] dnf module profile command doesn't work (RhBug:1622580)
  - [modularity] incorrect output in dnf module list (RhBug:1623398)
  - [modularity] dnf could be smarter when installing what's already installed (RhBug:1622599)
  - [modularity] dnf module install circular error on missing dependency (RhBug:1620233)
  - not descriptive output in dnf verbose (RhBug:1612718)
  - RFE: provide way to query all packages from module (RhBug:1569068)


author: Jaroslav Mracek <jmracek@redhat.com> - 3.6.1-1
changelog:
  - [module] Improved module commands list, info
  - [module] Reports error from module solver
  - Fix: Error detected when calling 'RepoCB.fastestMirror' (RhBug:1628056)
  - Preserve packages from other installed mod profiles (RhBug:1629841)
  - [spec] Postpone conflict with yum to Fedora 30+ (RhBug:1600444)
  - [cli] Install command recommends alternative packages (RhBug:1625586)
  - [cli] Fix case insensitive hint (1628514)
  - Fix installed profiles for module info (RhBug:1629689)
  - Fix module provides not having consistent output (RhBug:1623866)
  - Enhance label for transaction table (RhBug:1609919)
  - Implement C_, the gettext function with a context (RhBug:1305340)
  - Actually disambiguate some messages using C_ (RhBug:1305340)
  - Restore 'strict' choice for group installs (#1461539)
  - [repoquery] More strict queryformat parsing (RhBug:1631458)
  - Redirect repo progress to std error (RhBug:1626011)
  - Unify behavior of remove and module remove (RhBug:1629848)
  - Change behavior of disabled module for module install (RhBug:1629711)
  - Allow enablement on disabled plugin (RhBug:1614539)
  - Resolves: rhbz#1622585 - [modularity] dnf should not be proposing distro-sync
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Bug 1564369 - don't show duplicate errors in dnf output
  - Resolves: rhbz#1597257 - dnf should accept localinstall command, at least as an alias
  - Resolves: rhbz#1613860 - dnf search behaviour is slightly confusing
  - Resolves: rhbz#1625586 - Advise user about alternatives to the non-existing "python" package
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - Resolves: rhbz#1612752 - platform-python should be used in completion_helper
  - Resolves: rhbz#1618421 - dnf module install fails to find non-modular dependencies
  - Bug 1629655 - not helpful/complete error message when specifying wrong stream or profile
  - Bug 1629709 - disabled modules should be identified in the module listing
  - Bug 1630761 - [usability] unable to determine if a stream with [d] is enabled or not
  - Bug 1625270 - there is ???% [=== when baseurl is wrong
  - Resolves: rhbz#1624056 - quoted baseurl is error out


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.4-1
changelog:
  - Update to 4.0.4
  - Add dnssec extension
  - Set termforce to AUTO to automatically detect if stdout is terminal
  - Repoquery command accepts --changelogs option (RhBug:1483458)
  - Calculate sack version from all installed packages (RhBug:1624291)
  - [module] Allow to enable module dependencies (RhBug:1622566)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9-1
changelog:
  - Added dnf.repo.Repo.get_http_headers
  - Added dnf.repo.Repo.set_http_headers
  - Added dnf.repo.Repo.add_metadata_type_to_download
  - Added dnf.repo.Repo.get_metadata_path
  - Added dnf.repo.Repo.get_metadata_content
  - Added --changelogs option for check-update command
  - [module] Add information about active modules
  - Hide messages created only for logging
  - Enhanced --setopt option
  - [module] Fix dnf remove @<module>
  - [transaction] Make transaction content available for plugins


author: Daniel Mach <dmach@redhat.com> - 4.0.9.1-1
changelog:
  - Updated difference YUM vs. DNF for yum-updateonboot
  - Added new command ``dnf alias [options] [list|add|delete] [<name>...]`` to allow the user to
    define and manage a list of aliases
  - Enhanced documentation
  - Unifying return codes for remove operations
  - [transaction] Make transaction content available for commands
  - Add hotfix packages to install pool (RhBug:1654738)
  - Report group operation in transaction table
  - [sack] Change algorithm to calculate rpmdb_version
  - Add basic integration with digest (RhBug:1614351)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-1
changelog:
  - Print information about skipped packages after the transaction
  - Sort reported skipped packages, force ignore_weak
  - Allow to enable modules that break default modules (RhBug:1648839)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-2
changelog:
  - Backport patches for: RHEL should use --best option by default for dnf / libdnf (RhBug:1670776)
  - Add --nobest dnf option to revert the new default behavior from commandline


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.6-1
changelog:
  - Update to 4.2.6
  - Use improved config parser that preserves order of data
  - Follow RPM security policy for package verification
  - Update modules regardless of installed profiles
  - [conf] Use environment variables prefixed with DNF_VAR_
  - Allow adjustment of repo from --repofrompath (RhBug:1689591)
  - Allow globs in setopt in repoid part
  - Add command abbreviations (RhBug:1634232)
  - Installroot now requires absolute path
  - librepo: Turn on debug logging only if debuglevel is greater than 2 (RhBug:1355764,1580022)
  - Document cachedir option (RhBug:1691365)
  - Enhance documentation - API examples
  - Enhance documentation of --whatdepends option (RhBug:1687070)
  - Update documentation: implemented plugins; options; deprecated commands (RhBug:1670835,1673278)
  - [doc] Add info of relation update_cache with fill_sack (RhBug:1658694)
  - Rename man page from dnf.automatic to dnf-automatic to match command name
  - Fix alias list command (RhBug:1666325)
  - Fix behavior  of ``--bz`` option when specifying more values
  - Add protection of yum package (RhBug:1639363)
  - Fix ``list --showduplicates`` (RhBug:1655605)
  - Retain order of headers in search results (RhBug:1613860)
  - Solve traceback with the "dnf install @module" (RhBug:1688823)
  - Fix multilib obsoletes (RhBug:1672947)
  - Do not remove group package if other packages depend on it
  - Remove duplicates from "dnf list" and "dnf info" outputs
  - Fix the installation of completion_helper.py
  - Fix formatting of message about free space required
  - Fix installation failiure when duplicit RPMs are specified (RhBug:1687286)
  - Fix issues with terminal hangs when attempting bash completion (RhBug:1702854)
  - Allow plugins to terminate dnf (RhBug:1701807)
  - [provides] Enhanced detecting of file provides (RhBug:1702621)
  - [provides] Sort the output packages alphabetically


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-1
changelog:
  - Update to 4.2.7
  - Fix package reinstalls during yum module remove (RhBug:1700529)
  - Fail when "-c" option is given nonexistent file (RhBug:1512457)
  - Reuse empty lock file instead of stopping dnf (RhBug:1581824)
  - Propagate comps 'default' value correctly (RhBug:1674562)
  - Better search of provides in /(s)bin/ (RhBug:1657993)
  - Add detection for armv7hcnl (RhBug:1691430)
  - Fix group install/upgrade when group is not available (RhBug:1707624)
  - Report not matching plugins when using --enableplugin/--disableplugin
    (RhBug:1673289) (RhBug:1467304)
  - Add support of modular FailSafe (RhBug:1623128)
  - Replace logrotate with build-in log rotation for dnf.log and dnf.rpm.log
    (RhBug:1702690)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-3
changelog:
  - Update localizations from zanata (RhBug:1689982)
  - Accept multiple specs in repoquery options (RhBug:1667898,1656801)
  - Prevent switching modules in all cases (RhBug:1706215)
  - Change synchronization of rpm transaction to swdb (RhBug:1737328)
  - Print rpm error messages during transaction (RhBug:1677199)
  - Report missing default profile as an error (RhBug:1669527,1724564)
  - Describe a behavior when plugin is removed (RhBug:1700741)


author: Ales Matej <amatej@redhat.com> - 4.2.11-1
changelog:
  - Update to 4.2.11
  - Improve modularity documentation (RhBug:1730162,1730162,1730807,1734081)
  - Fix detection whether system is running on battery (used by metadata caching timer) (RhBug:1498680)
  - New repoquery queryformat: %{reason}
  - Print rpm errors during test transaction (RhBug:1730348) 
  - Fix incorrectly marked profile and stream after failed rpm transaction check (RhBug:1719679)
  - Show transaction errors inside dnf shell (RhBug:1743644)
  - dnf-automatic now respects versionlock excludes (RhBug:1746562)
  - [doc] Add user_agent and countme options
  - [history] Don't store failed transactions as succeeded
  - [history] Do not require root for informative commands
  - [dnssec] Fix UnicodeWarning when using new rpm (RhBug:1699650)
  - Apply excludes before modular excludes (RhBug:1709453)
  - Improve help for command line arguments (RhBug:1659328)
  - Add new modular API method ModuleBase.get_modules
  - Mark features used by ansible, anaconda and subscription-manager as an API


author: Ales Matej <amatej@redhat.com> - 4.2.16-1
changelog:
  - Update to 4.2.16
  - Fix downloading local packages into destdir (RhBug:1727137)
  - Report skipped packages with identical nevra only once (RhBug:1643109)
  - Restore functionality of dnf remove --duplicates (RhBug:1674296)
  - Improve API documentation
  - Document NEVRA parsing in the man page
  - Do not wrap output when no terminal (RhBug:1577889)
  - Allow to ship alternative dnf.conf (RhBug:1752249)
  - Don't check if repo is expired if it doesn't have loaded metadata (RhBug:1745170)
  - Remove duplicate entries from "dnf search" output (RhBug:1742926)
  - Set default value of repo name attribute to repo id (RhBug:1669711)
  - Allow searching in disabled modules using "dnf module provides" (RhBug:1629667)
  - Group install takes obsoletes into account (RhBug:1761137)
  - Improve handling of vars
  - Do not load metadata for repolist commands (RhBug:1697472,1713055,1728894)
  - Fix messages for starting and failing scriptlets (RhBug:1724779)
  - Don't show older install-only pkgs updates in updateinfo (RhBug:1649383,1728004)
  - Add --ids option to the group command (RhBug:1706382)
  - Add --with_cve and --with_bz options to the updateinfo command (RhBug:1750528)


author: Ales Matej <amatej@redhat.com> - 4.2.17-2
changelog:
  - Update to 4.2.17
  - Enable versionlock for check-update command (RhBug:1750620)
  - Add error message when no active modules matched (RhBug:1696204)
  - Log mirror failures as warning when repo load fails (RhBug:1713627)
  - dnf-automatic: Change all systemd timers to a fixed time of day (RhBug:1754609)
  - DNF can use config from the remote location (RhBug:1721091)
  - [doc] update reference to plugin documentation (RhBug:1706386)
  - [yum compatibility] Report all packages in repoinfo
  - [doc] Add definition of active/inactive module stream
  - repoquery: Add a switch to disable modular excludes
  - Report more informative messages when no match for argument (RhBug:1709563)
  - [doc] Add description of excludes in dnf
  - Report more descriptive message when removed package is excluded
  - Add module repoquery command
  - Fix assumptions about ARMv8 and the way the rpm features work (RhBug:1691430)
  - Add Requires information into module info commands
  - Enhance inheritance of transaction reasons (RhBug:1672618,1769788)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.17-3
changelog:
  - Do a substitution of variables in repo_id (RhBug:1748841)
  - Respect order of config files in aliases.d (RhBug:1680489)
  - [doc] Remove note about user-agent whitelist (RhBug:1777255)
  - Fix detection of the latest module (RhBug:1781769)


author: Ales Matej <amatej@redhat.com> - 4.2.17-4
changelog:
  - Fix alias processing with '\' escaping (RhBug:1680482)
  - [doc] Explain the backslash notation also near the example (RhBug:1680482)
  - Better descriptions for infinite aliases recursion (RhBug:1680488)
  - Improve help for 'dnf module' command (RhBug:1758447)
  - Unify downgrade exit codes with upgrade (RhBug:1759847)
  - Honor priority with check-update (RhBug:1769466)
  - Add shell restriction with local packages (RhBug:1773483)
  - Restore functionality of remove --oldinstallonly (RhBug:1774670)


author: Ales Matej <amatej@redhat.com> - 4.2.17-6
changelog:
  - Sort packages in transaction output by nevra (RhBug:1773436)
  - Add support of commandline packages by repoquery (RhBug:1784148)
  - [doc] Document that the include option was removed (RhBug:1786072)
  - New API function for setting loggers (RhBug:1788212)


author: Björn Esser <besser82@fedoraproject.org> - 52.5.0-3
changelog:
  - SpiderMonkey tests do not fail on any arch
  - Basic JIT tests are failing on s390 arches, only
  - Use macro for ppc64 arches
  - Run tests using Python2 explicitly
  - Simplify %check
  - Use the %{major} macro consequently
  - Replace %define with %global


author: Hans de Goede <j.w.r.degoede@hhs.nl> 1.08-7
changelog:
  - Taking over as maintainer since Anvil has other priorities
  - Add a patch to fix asm detection on i386 (bug 145882, 145893). Thanks to
    Carlo Marcelo Arenas Belon <carenas@sajinet.com.pe> for the initial patch.
  - Removed unused build dependency on nasm
  - Remove static lib
  - Cleanup %doc a bit


author: Hans de Goede <j.w.r.degoede@hhs.nl> 2.02-5
changelog:
  - Fix configure failure with -Werror-implicit-function-declaration in CFLAGS
  - Add a minilzo subpackage which contains a shared version of minilzo, to be
    used by all applications which ship with their own copy of it (bz 439979)


author: Eric Sandeen <sandeen@redhat.com> 5.0.0-2
changelog:
  - mkfs.xfs: validate log stripe unit alignment (#1632596)
  - xfs_growfs: allow mounted device node as argument (#1765217)


author: Jindrich Novy <jnovy@redhat.com> 5.0.21-0.2
changelog:
  - remove C# documentation
  - disable/remove rpath
  - fix description
  - tighten dependencies
  - run ldconfig for cxx and sql subpackages


author: Jindrich Novy <jnovy@redhat.com> 5.1.19-1
changelog:
  - update to 5.1.19
  - rename -devel-static to -static subpackage (#617800)
  - build java on all arches


author: Jindrich Novy <jnovy@redhat.com> 5.2.36-1
changelog:
  - update to 5.2.36,
    http://download.oracle.com/otndocs/products/berkeleydb/html/changelog_5_2.html#id3647664


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-21
changelog:
  - Reintroduce upstream patch for rhbz#1394862
  - Do not rebuild rpm's environment during a rpm transaction


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Reintroduce patches removed in 5.3.28-22
  - Modify upstream patch to fail on pthread version mismatch (#1460003)


author: Petr Kubat <pkubat@redhat.com> - 5.3.28-23
changelog:
  - Try looking at env lock via /proc/locks during env_attach (#1460003)
  - Check rpm's transaction lock via /proc/locks
  - Do not access DB_CONFIG when db_home is not set (#1464033)


author: Jeff Garzik <jgarzik@pobox.com>
changelog:
  - Update to version 3.
  - Use %buildroot macro, rather than RPM_BUILD_ROOT env var,
    as recommended by RPM packaging guidelines.


author: Jay Fenlason <fenlason@redhat.com> 5-1
changelog:
  - Upgrade to ethtool version 5 to close
    bz#184985: RFE: 10gigE support
    bz#204840: "buffer overflow detected" when devname's length >=16 of ethtool
    Resolves: #184985, #204840


author: Robert Scheck <robert@fedoraproject.org> 6-2.20090115git
changelog:
  - Changes to match with Fedora Packaging Guidelines (#225735)
  - Upgrade to GIT 20090115 (#225735, #477498)
  - Removed bogus stated need of DEVNAME in -h/--help (#472038)
  - Removed completely needless INSTALL file from %doc (#472034)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.3-5
changelog:
  - Make irqbalance scan for new irqs when it detects new irqs (bz832815)
  - Fixes SIGFPE crash for some banning configuration (bz849792)
  - Fixes affinity_hint values processing (bz832815)
  - Adds banirq and bansript options (bz837049)
  - imake isn't needed for building any more (bz844359)
  - Fixes clogging of syslog (bz837646)
  - Added IRQBALANCE_ARGS variable for passing arguments via systemd(bz837048)
  - Fixes --hint-policy=subset behavior (bz844381)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-2
changelog:
  - Fix several memleak problems found by covscan (bz1606969)
  - Fix an possible overflow error (bz1606969)
  - Don't leak socket fd on connection error (bz1606969)
  - Check xen-dyn-event more flexible (bz1576164)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.0-19.1
changelog:
  - Resolves: rhbz#1816591 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module does not
                             implement it properly [rhel-8.1.0.z]


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream release
  - Adds support for an upcoming Dell USB-C dock
  - Don't use an obsolete font when building the UEFI images
  - Resolves: #1607842


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream release
  - Use HTTPS_PROXY if set
  - Make the dell-dock plugin more robust in several ways
  - Adjust EVB board handling
  - Resolves: #1647557


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
  - Added session-keyfile statement into default named.conf since we use /run/named


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#997030)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
changelog:
  - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
  - Fix race condition when freeing fetch object (ISC-Bugs #35385)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
changelog:
  - Update to 9.9.6
  - drop merged patches and rebase some of existing patches
  - Add architecture specific dependencies.
  - Fix assert in dig when using +sigchase (#985918)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
changelog:
  - Added native PKCS#11 functionality (#1097752)
  - bind-sdb now requires bind due to configuration and other utilities
  - bind-pkcs11 now requires bind due to configuration and other utilities


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
changelog:
  - Fixed systemctl path in logrotate configuration (#1148360)
  - drop engine_pkcs11 dependency, since we use native PKCS#11 implementation


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
changelog:
  - update to 9.10.2rc1
  - fix nsupdate server auto-detection (#1184151)
  - drop merged patch bind99-rh985918.patch


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
changelog:
  - update to 9.10.2 stable
  - remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
changelog:
  - enable tuning for large systems - increases hardcoded internal limits
  - enable GeoIP access control feature


author: Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
changelog:
  - Remove unrecognized build options for %configure
  - Own %{_includedir}/bind9 directory in -lite-devel
  - Fixed building without (optional) PKCS#11 support


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
changelog:
  - Commented out bindkeys-file statement in default configuration (#1223365#c3)
  - Removed unrecognized configure option --enable-developer
  - Added configure option --enable-full-report to get report on enabled features


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
changelog:
  - Remove NM dispatcher script, since it is not needed any more (#1277257)
  - Replaced After=network-online.target with After=network.target in all unit files


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
changelog:
  - RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
  - Fix some rpm warnings


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
changelog:
  - Update to 9.11.2
  - Add recursing and secroots file into default and sample config
  - Fix nsupdate GSSAPI auth against AD server (#1484451)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
changelog:
  - Build against mariadb-connector-c-devel (#1493615)
  - Include DNSKEY 20326 also in trusted-key.key (#1505476)
  - Fix dynamic symbols conflict with ldap (#1205168)
  - Use hmac-sha256 for new RNDC keys (#1508003)
  - Include protocols and services in chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
changelog:
  - Enable unit tests with kyua tool (#1532694)
  - Provide internal tool to prepare softhsm token storage
  - Proper fix for python3-bind subpackage directory ownership (#1522944)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
changelog:
  - Use versioned provides
  - Fix starting of unit tests
  - Forward export libs path to isc-config
  - Rename export devel subpackage to bind-export-devel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
changelog:
  - Require openssl-devel and libcap-devel from bind-export-devel
  - Conflict with bind99-devel
  - Change spec globals to rpmbuild --with feature


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
changelog:
  - Use new config file named-chroot.files for chroot setup (#1429656)
  - Fix chroot devices file verification (#1592873)
  - Prevent errors on bind-chroot uninstall when running (#1600583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2
changelog:
  - Install generated manual pages
  - Remove system-config-bind from manual
  - Disable GeoIP support (#1609856)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
changelog:
  - Update to 9.11.4-P1
  - Adds root key sentinel support
  - Large IXFR zone transfers are rejected to prevent journal corruption
  - Fixes CVE-2018-5740


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.50.
  - added slattach/plipconfig/ipmaddr/iptunnel commands.
  - enabled translated man pages.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.57.
  - MTU (and other) option(s) not parsed correctly (#9215).
  - allow more granularity iwth --numeric (#9129).


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix nstrcmp() to be correct in the case where there are many devices 
    of the same type, eg, "eth10" > "eth1"  (#61436)


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed incorrect address display for ipx (#46434).
  - Fixed wrongly installed manpage dirs (#50664).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added inet6-lookup patch from John van Krieken (#84108).
  - Fixed outdated link in ifconfig manpage (#91287).


author: Phil Knirsch <pknirsch@redhat.com> 1.60-19
changelog:
  - Fixed trailing blank bug in hostname output (#101263).
  - Remove -O2 fir alpha (#78955).
  - Updated netstat statistic output, was still broken.


author: Phil Knirsch <pknirsch@redhat.com> 1.60-27
changelog:
  - Fixed compiler warning/error in netplug.
  - Updated to netplug-1.2.6 for security update and fixes.


author: Radek Vokal <rvokal@redhat.com> 1.60-38
changelog:
  - fixed fail to assign the specified netmask before adress is assigned
  - patch by Malita, Florin <florin.malita@glenayre.com>


author: Radek Vokal <rvokal@redhat.com> 1.60-39
changelog:
  - IBM patch for netstat -s returning negative values on 64bit arch (#144064)
  - broadcast calulated if only netmask provided (#60509)


author: Radek Vokal <rvokal@redhat.com> 1.60-40
changelog:
  - mii-tool(8) fixed, labeled as obsolete, added info (#138687)
  - netstat crashing on i64 fixed (#138804) Patch by <Andreas.Hirstius@cern.ch>


author: Radek Vokal <rvokal@redhat.com> 1.60-43
changelog:
  - don't report statistics for virtual devices (#143981) <kzak@redhat.com>
  - fixing translation headers - content type format
  - kill bitkeeper warning messages


author: Radek Vokal <rvokal@redhat.com> 1.60-44
changelog:
  - net-plug-1.2.9 - no changes, upstream included Red Hat patches
  - ether-wake-1.08 - few changes in implementation (#145718)


author: Radek Vokal <rvokal@redhat.com> 1.60-48
changelog:
  - behaviour of netstat -i option changed (#115987)
  - netstat -i shows all interface, -I<Iface> only one


author: Radek Vokal <rvokal@redhat.com> 1.60-50
changelog:
  - added mii-diag tool
  - added newer ether-wake
  - remove useless -i option from ifconfig
  - stop trimming interface names (#152457)


author: Radek Vokal <rvokal@redhat.com> 1.60-52
changelog:
  - don't show "duplicate line" warning (#143933)
  - netstat has new statistcs (#133032)
  - /etc/neplug is owned by net-tools (#130621)


author: Radek Vokal <rvokal@redhat.com> 1.60-57
changelog:
  - add note to hostname man page about gethostbyname() (#166581)
  - don't ship any rarp man page (#170537)


author: Zdenek Prikryl <zprikryl@redhat.com> - 1.60-89
changelog:
  - fixed man pages for arp (#446195)
  - fixed netstat --interfaces option (#446187)
  - fixed clearing flags in ifconfig (#450252)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-93
changelog:
  - scanf format length fix (non exploitable?) from Fabian Hugelshofer <hugelshofer2006@gmx.ch>
  - URL tag changed to http://net-tools.berlios.de/


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-95
changelog:
  - netstat - avoid name resolution for listening or established sockets (-l) by return fast. 
  - netstat - --continuous should flush stdout
  - added missing man pages (iptunnel, ipmaddr, netplug, netplug.d, netplugd.conf)
  - added note about obsolete commands to existing man pages 
  - let the user know that ifconfig can correctly show only first 8 bytes of Infiniband hw address


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-96
changelog:
  - netplug moved to separate package
  - #319981 and #322901 - minor man pages changes
  - applied changes from berlios cvs, which fix: Berlios #16232, Gentoo #283759 and polish Makefile and slattach


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-97
changelog:
  - Make "hostname -s" display host name cut at the first dot (no
    matter if the host name resolves or not) (bug #531702)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-99
changelog:
  - return defining of BuildRoot even it's no longer necessary
    (https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRoot_tag)
    to silent rpmlint false warning


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-101
changelog:
  - fixed overflow patch (#551625)
  - ifconfig interface:0 del <IP> will remove the Aliased IP on IA64 (#473211)
  - interface slip: cast keepalive/outfill to unsigned long to fix warnings on 64bit hosts -- no functional changes since these only have an 8bit range anyways
  - interface: fix IPv6 parsing of interfaces with large indexes (> 255) (Debian #433543)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-102
changelog:
  - fixed statistics.c to use unsigned long long (instead of int) to handle 64 bit integers (Bug #579854, Debian #561161)
  - fixed typo in statistics.c (Bug #579855)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-116
changelog:
  - Fix mii-tool/mii-diag/ether-wake to not default to eth0 because
    since Fedora 15 network devices can have arbitrary names (#682367)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-118
changelog:
  - patch netstat to separate basename of -p only if it is absolute
    path (in order to make argv[0]="sshd pty/0" display as sshd, and not as /0).


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-120
changelog:
  - Do not mention /proc/net/socket in ifconfig(8) (#661905)
  - Merge all 'man page only fix' patches into net-tools-1.60-man.patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-121
changelog:
  - Added arp-ethers.service systemd unit file to run 'arp -f /etc/ethers'
    on startup of system. Don't ship default /etc/ethers (#713759)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-129.20111206git
changelog:
  - upstream git snapshot
  - reduced number of patches from 95 to 32
  - netstat -T/--notrim option is now -W/--wide


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-131.20120105git
changelog:
  - next 11 patches merged upstream
  - removed bcast.patch (seems to be fixed upstream)
  - removed netstat-p-basename.patch (upstream is not happy with it)
  - netstat-leak.patch merged into duplicate-tcp.patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-132.20120111git
changelog:
  - 3 patches merged upstream
  - removed 2digit.patch (#718610)
  - removed fgets.patch (probably not needed anymore)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-133.20120119git
changelog:
  - SELinux patch merged upstream
  - several page fixes merged upstream
  - mark localized man pages with %lang


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-134.20120127git
changelog:
  - Do not show interface metric in 'ifconfig', 'ifconfig -s' and 'netstat -i'.
    Spare place is used for interface name so trim_iface.patch is no longer needed.
  - No need to convert man pages to utf-8 as upstream ship them in utf-8 now.


author: Jaromír Končický <jkoncick@redhat.com> - 2.0-0.10.20130607git
changelog:
  - use all interfaces instead of default (#1003875)
  - reverted all changes on ether-wake.c and put original file


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-0.35.20150915git
changelog:
  - ether-wake: add interface into message (#1149502)
  - latest upstream snapshot (ipx.patch & sctp-statistics.patch merged)


author: Zdenek Dohnal <zdohnal@redhat.com> - 2.0-0.37.20160329git
changelog:
  - latest upstream snapshot
  - adding HAVE_PLIP_TOOLS=1, HAVE_SERIAL_TOOLS=1, HAVE_ARP_TOOLS=1 into net-tools-config.h and net-tools-config.make
  - commenting out "%{buildroot}%{_mandir}/man8/rarp.8*" and its language alternatives in spec
  - adding "rm -rf %{buildroot}%{_mandir}/pt/man5" in spec


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.50.20160912git
changelog:
  - Resolves: 1557470 - netstat -i cut's interface names
  - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: systemd maintenance team <systemd-maint@redhat.com> - 239-18.5
changelog:
  - journal: do not trigger assertion when journal_file_close() get NULL (#1807350)
  - journal: use cleanup attribute at one more place (#1807350)


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-6
changelog:
  - Add tss user if doesn't currently exist - PR#1 from Jerry Snitselaar
  - Removed source tarball and cleared it from .gitignore


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Kamil Dudka <kdudka@redhat.com> - 2.17-5
changelog:
  - do not update currency.units from network during build
  - units_cur: validate rate data from server (#1598913)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokál <rvokal@redhat.com> - 1:5.4-13
changelog:
  - fix overly verbose log message (#221911)
  - few minor tweaks for review - still not perfect
  - fix linking with lcrypto (#231805)


author: Jan Safranek <jsafranek@redhat.com> 5.4-14
changelog:
  - fix snmptrapd hostname logging (#238587)
  - fix udpEndpointProcess remote IP address (#236551)
  - fix -M option of net-snmp-utils (#244784)
  - default snmptrapd.conf added (#243536)
  - fix crash when multiple exec statements have the same name
    (#243536)
  - fix ugly error message when more interfaces share
    one IP address (#209861)


author: Jan Safranek <jsafranek@redhat.com> 5.4-16
changelog:
  - supported lm_sensors on ppc64 (#249255)
  - snmpconf generates config files with proper selinux context
    (#247462)
  - fix leak  in udp transport (#247771)
  - add alpha to supported archs in net-snmp-config (#246825)
  - fix hrSWInst (#250237)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-3
changelog:
  - include these tables: ip-mib/ipv4InterfaceTable
    ip-mib/ipv6InterfaceTable, ip-mib/ipAddressPrefixTable
  - fix Requires of net-snmp-devel to include lmsensors-devel on supported
    architectures


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-5
changelog:
  - move mib2c-update from net-snmp-utils to net-snmp-perl, where
    mib2c is located
  - add tkmib to net-snmp-gui package (#167933)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-6
changelog:
  - add support of lm_sensors v3
  - added procps to build dependencies (#380321)
  - removed beecrypt from dependencies
  - fixed crash on reading xen interfaces (#386611)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-9
changelog:
  - introduce /etc/sysconfig/snmpd. Use it to specify snmpd command line options.
    /etc/snmp/snmpd.options is not used anymore (#431391)


author: Jan Safranek <jsafranek@redhat.com> 5.4.1-15
changelog:
  - explicitly require lm_sensor > 3 for build (#442718)
  - create multilib net-snmp-config on multilib architectures only


author: Jan Safranek <jsafranek@redhat.com> 5.4.2-2
changelog:
  - redistribute the perl scripts to the net-snmp package,
    net-snmp-utils doesn't depend on perl now (#462484)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-1
changelog:
  - explicitly require the right version and release of net-snmp and
    net-snmp-libs
  - update to net-snmp-5.4.2.1 to fix CVE-2008-4309


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-12
changelog:
  - make the default configuration less noisy, i.e. do not print "Connection from
    UDP:" and "Received SNMP packet(s) from UDP:" messages on each connection.
    (#509055)


author: Jan Safranek <jsafranek@redhat.com> 5.4.2.1-13
changelog:
  - package cleanup, remove unnecessary patches
  - move local state file from /var/net-snmp/ to /var/lib/net-snmp


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-2
changelog:
  - introduce /etc/sysconfig/snmptrapd. Use it to specify snmptrapd command
    line options.  /etc/snmp/snmptrapd.options is not used anymore (#540799)
  - build-in ipAddressPrefixTable, ipDefaultRouterTable, ipv6ScopeZoneIndexTable,
    ipIfStatsTable, SCTP-MIB, RMON-MIB and Etherlike-MIBs
  - remove ucd5820stat helper script, it depends on get5820stats, which is not
    available in Fedora
  - move sample services ipf-mod.pl to documentation
  - remove logrotate config, snmpd logs into syslog


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-3
changelog:
  - prepare the .spec file for review
  - run automatic regression suite after the compilation of the package
    to check for obvious regressions
  - remove unnecessary package dependencies


author: Jan Safranek <jsafrane@redhat.com> 1:5.5-4
changelog:
  - fix udpTable indexes on big-endian systems (#543352)
  - fix snmptrapd init script to survive with empty /etc/sysconfig/snmptrapd
  - lower the default log level of snmpd to get rid of the debug messages


author: Jan Safranek <jsafrane@redhat.com> - 1:5.6-5
changelog:
  - re-create /var/run/net-snmp on boot using tmpfiles.d (#656637)
  - move snmp-bridge-mib and net-snmp-cert utilities to net-snmp-perl
    subpackage, net-snmp-utils subpackage does not depend on Perl now


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-2
changelog:
  - restored rpath in net-snmp-config output - SNMP subagent won't link
    with libsnmpagent.so without it, linker needs to know location
    of libperl.so
  - fixed check section to make tests pass on machine without DNS


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7-6
changelog:
  - added new net-snmp-agent-libs subpackage with agent libraries
    -> net-snmp-libs do not need perl and lm_sensors libs
  - removed libsnmp.so, it's not used in Fedora (#729811)
  - added README.systemd
  - added new net-snmp-sysvinit subpackage with legacy init scripts
    (#718183)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-1
changelog:
  - updated to 5.7.1:
    - Fixed the mib-parsing-bug introduced shortly before 5.7
    - fixed rounding errors for disk percentage calculations
    - Many other miscellaneous minor bug fixes


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.1-10
changelog:
  - Updated RPM scriplets with latest systemd-rpm macros (#850403).
  - Fixed fedora-review tool complaints.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-3
changelog:
  - Added direct dependency on perl-devel with architectute in
    net-snmp-devel package to pull proper dependencies.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-6
changelog:
  - fixed net-snmp-create-v3-user to have the same content on all architectures
  - /var/lib/net-snmp/mib_indexes and cert_indexes added to net-snmp-libs
    (#906761)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-10
changelog:
  - moved agentxtrap utility to net-snmp subpackage,
    it needs libraries provided by net-snmp-agent-libs.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-13
changelog:
  - set permissions of snmpd.conf and snmptrapd conf to 0600 to prevent
    users from reading passwords and community strings.


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-16
changelog:
  - Fixed snmpd crashing when AgentX subagent disconnects in the middle of
    request processing (#1038011)


author: Jan Safranek <jsafrane@redhat.com> - 1:5.7.2-23
changelog:
  - Fixed CVE-2014-3565
  - Fixed net-snmp-cert tool, now it does not depend on net-snmp-devel (#1134475)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-13
changelog:
  - net-snmp.redhat.conf: update default configuration to conform to the best practices (#1359123)
  - nmp_transport.c: use strtok_r for strtok to avoid a race condition (#1366282)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-15
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  - Add support for new version of OpenSSL library (#1423984)


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-19
changelog:
  - Fix issue with undefined symbol my_progname when try to load NetSNMP::TrapReceiver in perl script. (#1470004)


author: Adam Williamson <awilliam@redhat.com> -1:5.7.3-20
changelog:
  - Edit fix of issue with undefined symbol my_progname when try to load
    NetSNMP::TrapReceiver in perl script (#1470004)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:5.7.3-26
changelog:
  - Python 2 binary package renamed to python2-net-snmp
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-30
changelog:
  - remove Group tag
  - remove sysvinit package and init files (no longer needed)
  - fix python2 references and dependencies in spec file


author: Josef Ridky <jridky@redhat.com> - 1:5.7.3-33
changelog:
  - Fix strstr() crash when looking for RPM Group tag
  - Fix wrong usage of structure iterator
  - Fix issue with statistics from autofs


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for /var/log files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Jon Masters <jcm@redhat.com> 2:1.0-0.1.pre3
changelog:
  - Bump epoch and use standard Fedora Packaging Guidelines for NVR.
  - Switch to using signed bz2 source and remove dead patch.


author: Prarit Bhargava <prarit@redhat.com> 2:1.0-0.3.6e4e2a00
changelog:
  - Updated sources to deal with various warning issues [701083] [704302]
  - Update URL for new location of Andi's mcelog tree
  - Update n-v-r to include latest git hash


author: Prarit Bhargava <prarit@redhat.com> 2:1.0-0.10.f0d7654
changelog:
  - updated to latest mcelog
  - removed mcelog-fix-trigger-path-and-cacheing.patch. AFAICT triggers are
    correctly installed
  - added mcelog-disable-cron-job.patch as mcelog runs in daemon mode by
    default in Fedora


author: Prarit Bhargava <prarit@redhat.com> - 3:160-1
changelog:
  - Deduce channel number for Haswell/Broadwell/Skylake systems [1641046]
  - Add decoding for Optane DC persistent memory mode [1645344]


author: Havoc Pennington <hp@redhat.com>
changelog:
  - add firstboot images to makefile/specfile
  - add /usr/share/pixmaps stuff
  - add splash screen images
  - add COPYING


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.3-1
changelog:
  - Add attributions to the background graphics metadata
  - Add a 4:3 asspect ratio version of the default background graphic


author: John (J5) Palmieri <johnp@redhat.com> - 1.2.7-1
changelog:
  - Add background xml file for the new backgrounds
  - Add po directory for translating the background xml


author: David Zeuthen <davidz@redhat.com> - 4.9.13-1
changelog:
  - Make firstboot/splash-small.png completely transparent
  - Fix up date for last commit
  - Resolves: #216501


author: David Zeuthen <davidz@redhat.com> - 4.9.14-1
changelog:
  - Don't include LILO splash. Resolves: #216748
  - New syslinux-splash from Diana Fong. Resolves: #217493


author: Ray Strode <rstrode@redhat.com> 60.0.3-1
changelog:
  Resolves: #565886
  - Put backgrounds here since they're "trade dress"
  - Rename firstboot theme from leonidas to RHEL (with compat link)


author: Ray Strode <rstrode@redhat.com> 60.0.4-1
changelog:
  Resolves: #565886
  - One more update to the KDE artwork
  - Revert firstboot theme rename until later since compat link
    is causing problems.


author: Ray Strode <rstrode@redhat.com> 60.0.7-1
changelog:
  - Rename firstboot theme to RHEL
    Resolves: #566173
  - Add new plymouth artwork
    Related: #558608
  - Update backgrounds
  - Update anaconda
  - Drop gnome-splash
  - Drop empty screensaver dir
    Resolves: #576912
  - Drop grub splash at request of artists


author: Ray Strode <rstrode@redhat.com> 60.0.8-1
changelog:
  - Add large logo for compiz easter egg
    Resolves: #582411
  - Drop Bluecurve
    Related: #559765
  - Install logo icons in System theme
    Related: #566370


author: Ray Strode <rstrode@redhat.com> 69.1.3-2
changelog:
  - Drop fedora.icns (It brings in an undesirable dependency,
    and we don't support the platform it's designed for
    anyway)


author: Ray Strode <rstrode@redhat.com> 69.1.6-1
changelog:
  - Update syslinux background to black
    Resolves: #1003873
  - Prune unused images from anaconda/ after talking to #anaconda


author: Ray Strode <rstrode@redhat.com> 70.0.3-1
changelog:
  - Shrink supplemental backgrounds by making them jpegs instead
    of pngs.
    Related: #1053025 1065938


author: Ray Strode <rstrode@redhat.com> - 79.0.1-1
changelog:
  - Update artwork with first cut alpha content
  - Drop obsolete bits of package like KDE artwork and references
    to Bluecurve


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Kai Engert <kaie@redhat.com> - 0.23.8-2
changelog:
  - Fix a regression caused by a recent nss.rpm change, add a %ghost file
    for %{_libdir}/libnssckbi.so that p11-kit-trust scripts install.


author: Thomas Spura <tomspur@fedoraproject.org> - 3.3-4
changelog:
  - update to most recent python packaging guidelines
  - rebuild with python3.2
    http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-2
changelog:
  - Updated to OpenIPMI-1.4.14
  - Split the main package into normal and libs package for multilib support
  - Added ipmitool-1.8.2 to OpenIPMI and put it in tools package
  - Added sysconf and initscript (#158270)
  - Fixed oob subscripts (#149142)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-7
changelog:
  - Fixed the unwanted output of failed module loading of the initscript. Behaves
    now like all our other initscripts (#165476)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-9
changelog:
  - Another update to latest initscripts from Dell
  - Fixed some missing return statements for non-void functions (#164138)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-13
changelog:
  - Rebuilt to link against latest openssl libs.
  - Fixed ipmitool not setting session privilege level (#172312)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-16
changelog:
  - Included FRU fix for displaying FRUs with ipmitool
  - Included patch for new option to specify a BMC password for IPMI 2.0 sessions


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-18
changelog:
  - Updated ipmitool to latest upstream version.
  - Removed 3 patches for already fixed bugs in latest ipmitool.
  - Adapted warning message fix for ipmitool for latest version.


author: Phil Knirsch <pknirsch@redhat.com> 2.0.6-1
changelog:
  - Fixed bug with type conversion in ipmitool (#191091)
  - Added python bindings 
  - Split off perl and python bindings in separate subpackages
  - Dropped obsolete patches
  - Added missing buildprereq on readline-devel
  - Made it install the python bindings properly on 64bit archs


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-3
changelog:
  - split ipmitool to separate package
  - added 'reload' functionality to init script
  - added seraparate -gui subpackage


author: Jan Safranek <jsafrane@redhat.com> - 2.0.14-8
changelog:
  - shorter probe interval is used in init script, making the service startup
    quicker in most situations (#475101)


author: Jan Safranek <jsafrane@redhat.com> - 2.0.16-9
changelog:
  - fix package License: field, there *are* sources with BSD header
  - distribute README files and COPYING in package


author: Jan Safranek <jsafrane@redhat.com> - 2.0.19-2
changelog:
  - Updated RPM scriptlets with latest systemd-rpm macros (#850246)
  - Fixed fedora-review tool complaints


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-5
changelog:
  - Support aarch64 by replicating release toolchain.
  - Configuration subpackage with kernel probed wildcard module aliases.
    as workaround for bz#961878 and fesco#1110
  - Man pages symlinks same as bin symlinks.
  - ipmi_ui command help argument.
  - ipmilan missing options.
  - Fixed build requirements.


author: Ledvinka Ales <aledvink@redhat.com> - 2.0.19-7
changelog:
  - Hint compilation to avoid strict aliasing and prevent type-punned pointer issues.
  - Fix rPath regression for OpenIPMI-perl library.


author: Boris Ranto <branto@redhat.com> - 0:2.0.22-1
changelog:
  - New version (0:2.0.22-1)
  - Apply 'OpenIPMI-2.0.18-pthread-pkgconfig.patch'
  - Apply './OpenIPMI-2.0.19-man.patch'
  - Apply 'OpenIPMI-2.0.21-nobundle.patch'


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Harald Hoyer <harald@redhat.com> 0.3-1
changelog:
  - version 0.3
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.4-1
changelog:
  - version 0.4
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.5-1
changelog:
  - version 0.5
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.6-1
changelog:
  - version 0.6
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.7-1
changelog:
  - version 0.7
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.8-1
changelog:
  - version 0.8 
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 001-1
changelog:
  - version 001
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 001-8
changelog:
  - plymouth: use plymouth-populate-initrd
  - add add_drivers for dracut and dracut.conf
  - do not mount /proc and /selinux manually in selinux-load-policy


author: Harald Hoyer <harald@redhat.com> 001-10
changelog:
  - add ifname= argument for persistent netdev names
  - new /initqueue-finished to check if the main loop can be left
  - copy mdadm.conf if --mdadmconf set or mdadmconf in dracut.conf


author: Harald Hoyer <harald@redhat.com> 002-3
changelog:
  - bail out if selinux policy could not be loaded and 
    selinux=0 not specified on kernel command line 
    (bug #524113)
  - set finished criteria for dmsquash live images


author: Warren Togami <wtogami@redaht.com> 002-5
changelog:
  - Revert back to -3, Add umount back to initrd
    This makes no functional difference to LiveCD.  See Bug #525319


author: Harald Hoyer <harald@redhat.com> 002-10
changelog:
  - do not destroy assembled raid arrays if mdadm.conf present
  - mount /dev/shm 
  - let udevd not resolve group and user names
  - preserve timestamps of tools on initramfs generation
  - generate symlinks for binaries correctly
  - moved network from udev to initqueue
  - mount nfs3 with nfsvers=3 option and retry with nfsvers=2
  - fixed nbd initqueue-finished
  - improved debug output: specifying "rdinitdebug" now logs
    to dmesg, console and /init.log
  - stop udev before killing it
  - add ghost /var/log/dracut.log
  - dmsquash: use info() and die() rather than echo
  - strip kernel modules which have no x bit set
  - redirect stdin, stdout, stderr all RW to /dev/console
    so the user can use "less" to view /init.log and dmesg


author: Harald Hoyer <harald@redhat.com> 002-13
changelog:
  - fixed init=<command> handling
  - kill loginit if "rdinitdebug" specified
  - run dmsquash-live-root after udev has settled (bug #527514)


author: Harald Hoyer <harald@redhat.com> 002-18
changelog:
  - renamed lvm/device-mapper udev rules according to upstream changes
  - fixed dracut search path issue


author: Harald Hoyer <harald@redhat.com> 002-22
changelog:
  - add module 90multipath
  - add module 01fips
  - renamed module 95ccw to 95znet (bug #533833)
  - crypt: ignore devices in /etc/crypttab (root is not in there)
  - dasd: only install /etc/dasd.conf in hostonly mode (bug #533833)
  - zfcp: only install /etc/zfcp.conf in hostonly mode (bug #533833)
  - kernel-modules: add scsi_dh scsi_dh_rdac scsi_dh_emc (bug #527750)
  - dasd: use dasdconf.sh from s390utils (bug #533833)


author: Harald Hoyer <harald@redhat.com> 002-26
changelog:
  - add WITH_SWITCH_ROOT make flag
  - add fips requirement conditional
  - add more device mapper modules (bug #539656)


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed rpmlint errors (rhbz#570547)
  - removed firmware package from dracut-kernel (rhbz#572634)
  - add dcb support to dracut's FCoE support (rhbz#563794)
  - force install some modules in hostonly mode (rhbz#573094)
  - various other bugfixes
  - Resolves: rhbz#570547, rhbz#572634, rhbz#563794, rhbz#573094


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages
  - dmraid parse different error messages
  - add cdrom polling mechanism for slow cdroms
  - add module btrfs
  - teach dmsquash live-root to use rootflags
  - trigger udev with action=add
  - fixed add_drivers handling 
  - add sr_mod
  - use pigz instead of gzip, if available


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed network with multiple nics
  - fixed nfsidmap paths
  - do not run blkid on non active container raids
  - fixed cdrom polling mechanism
  - update to latest git


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages 
  Resolves: rhbz#589109
  - use ccw-init and ccw rules from s390utils
  Resolves: rhbz#533494
  - fixed fcoe
  Resolves: rhbz#486244
  - various other bugfixes seen in Fedora


author: Harald Hoyer <harald@redhat.com>
changelog:
  - Remove requirements, which are not really needed
  Resolves: rhbz#598509
  - fixed copy of network config to /dev/.initramfs/ (patch 146)
  Resolves: rhbz#594649
  - more password beauty (patch 142)
  Resolves: rhbz#561092
  - support multiple iSCSI disks (patch 143)
  Resolves: rbhz#580190
  - fixed selinux=0 (patch 130)
  Resolves: rhbz#593080
  - add support for booting LVM snapshot root volume (patch 145)
  Resolves: rbhz#602723
  - remove hardware field from BOOTIF= (patch 148)
  Resolves: rhbz#599593
  - add aes kernel modules and fix crypt handling (patch 137, patch 140 and patch 147)
  Resolves: rhbz#600170


author: Harald Hoyer <harald@redhat.com> 008-2
changelog:
  - do not write dracut.log to /tmp under any circumstances
  - touch /dev/.systemd/plymouth after plymouth started


author: Harald Hoyer <harald@redhat.com> 009-3
changelog:
  - fixed dhcp
  - added /lib/firmware/updates to firmware directories 
  - fixed LiveCD /dev/.initramfs fallback
  - fixed cdrom polling
  - dropped net-tools dependency


author: Harald Hoyer <harald@redhat.com> 017-22.git20120302
changelog:
  - nfs path fixes for live image over nfs
    root=live:nfs://10.10.10.10:/srv/all/install.img ip=dhcp rd.neednet


author: Harald Hoyer <harald@redhat.com> 017-39.git20120308
changelog:
  - kill dhclient silently
  - cleanup and fix network config writeout to /run/initramfs/state
  Resolves: rhbz#799989
  - various cleanups


author: Harald Hoyer <harald@redhat.com> 019-92.git20120625
changelog:
  - support vlan tagged binding
  - speedup initramfs emergency service
  - speedup image creation
  - fix installkernel() return codes
  Resolves: rhbz#833256
  - add qemu and qemu-net modules to add qemu drivers even in host-only
  - speedup btrfs and xfs fsck (nop)
  - no more mknod in the initramfs (fixes plymouth on s390)


author: Harald Hoyer <harald@redhat.com> 020-64.git20120709
changelog:
  - fixed plymouth install
  - fixed resume
  - fixed dhcp
  - no dracut systemd services installed in the system


author: Harald Hoyer <harald@redhat.com> 020-70.git20120710
changelog:
  - more systemd unit fixups
  - restart systemd-journald in switch-root post
  - fixed dracut-install loader ldd error message


author: Harald Hoyer <harald@redhat.com> 020-83.git20120711
changelog:
  - more systemd journal fixes
  - nfs module fix
  - install also /lib/modprobe.d/*
  - fixed dracut-shutdown service
  - safeguards for dracut-install
  - for --include also copy symlinks


author: Harald Hoyer <harald@redhat.com> 023-13.git20120821
changelog:
  - reintroduce rd.neednet, which reenables anaconda networking
  - fix some dracut-install corner cases
  - fix FIPS for /boot not on extra partition


author: Harald Hoyer <harald@redhat.com> 026-33.git20130313
changelog:
  - add module-load.d modules to the initramfs
  - add sysctl.d to the initramfs
  - optimize plymouth module for systemd mode
  - add new dracut parameter "--regenerate-all"
  - add new dracut parameter "--noimageifnotneeded"
  - shutdown: mount move /run /sys /dev /proc out of /oldroot
    before pre-shutdown
  - add bash completion for dracut


author: Harald Hoyer <harald@redhat.com> 026-72.git20130320
changelog:
  - fix rescue image naming
  Resolves: rhbz#923439
  - turn off host-only mode if essential system filesystems not mounted
  - turn off host-only mode if udev database is not accessible


author: Harald Hoyer <harald@redhat.com> 027-17.git20130409
changelog:
  - only include needed /etc/crypttab entries
  Resolves:rhbz#919752
  - add support for bridge over team and vlan
  - support multiple bonding interfaces
  - add "action_on_fail=" kernel command line parameter
  - add support for bridge over a vlan tagged interface


author: Harald Hoyer <harald@redhat.com> 027-26.git20130415
changelog:
  - do not call plymouth with full path
  - include systemd-random-seed-load.service
  - fix ca-bundle.crt for ssl curl
  Resolves: rhbz#950770
  - add support for "iso-scan/filename" kernel parameter


author: Harald Hoyer <harald@redhat.com> 027-36.git20130418
changelog:
  - fix initramfs creation on noexec tmpdir
  Resolves: rhbz#953426
  - more options for lsinitrd
  - bash completion for lsinitrd
  - do not output debug information on initramfs creation, if rd.debug is
    on the kernel command line
  - drop requirement on 'file', lsinitrd can find the magic on its own


author: Harald Hoyer <harald@redhat.com> 027-81.git20130531
changelog:
  - fix btrfs mount flags for /usr
  - degrade message about missing tools for stripping
  Resolves: rhbz#958519
  - set environment vars DRACUT_SYSTEMD, NEWROOT in service file
  Resolves: rhbz#963159
  - don't add volatile swap partitions to host_devs
  - add libssl.so.10 to make kdump work with fips mode
  - readd selinux dracut module for kdump
  - url-lib/url-lib.sh: turn off curl globbing
  Resolves: rhbz#907497
  - include btrfs-zero-log in the initramfs
  Resolves: rhbz#963257
  - proper NAME the network interfaces
  Resolves: rhbz#965842
  - install default font latarcyrheb-sun16
  Resolves: rhbz#927564
  - optionally install /etc/pcmcia/config.opts
  Resolves: rhbz#920076
  - fix ONBOOT for slaves, set TYPE=Bond for bonding
  Resolves: rhbz#919001
  - add nvme kernel module
  Resolves: rhbz#910734
  - add xfs_metadump
  - selinux: load_policy script fix
  - add hid-hyperv and hv-vmbus kernel modules
  - add parameter rd.live.squashimg
  Resolves: rhbz#789036 rhbz#782108
  - wait for all required interfaces if "rd.neednet=1"
  Resolves: rhbz#801829
  - lvm: add tools for thin provisioning
  Resolves: rhbz#921235
  - ifcfg/write-ifcfg.sh: fixed ifcfg file generation
  - do not wait for mpath* devices
  Resolves: rhbz#969068


author: Harald Hoyer <harald@redhat.com> 028-1
changelog:
  - lvm: fixed "thin" recognition
  Resolves: rhbz#921235
  - install libs also from one dir above
    fixes booting power6 generated initramfs on power7
  - setup correct system time and time zone in initrd
  - cms fixups
  Resolves: rhbz#970982 rhbz#971025 rhbz#825199
  - iso-scan/filename fixes
  Resolves: rhbz#972337
  - add udev rules for persistent network naming
  Resolves: rhbz#972662


author: Harald Hoyer <harald@redhat.com> 029-1
changelog:
  - wait for IPv6 auto configuration
  Resolves: rhbz#973719
  - i18n: make the default font configurable
  - systemd/dracut-pre-pivot.service: also execute for cleanup hooks or rd.break
  - add dracut-shutdown.service.8 manpage
  - lvm: redirect error message of lvs to /dev/null
  Resolves: rhbz#921235


author: Harald Hoyer <harald@redhat.com> 030-1
changelog:
  - support new persistent network interface names
  - fix findmnt calls, prevents hang on stale NFS mounts
  - add systemd.slice and slice.target units
  - major shell cleanup
  - support root=PARTLABEL= and root=PARTUUID=
  - terminfo: only install l/linux v/vt100 and v/vt220
  - unset all LC_* and LANG, 10% faster
  - fixed dependency loop for dracut-cmdline.service
  - do not wait_for_dev for the root devices
  - do not wait_for_dev for devices, if dracut-initqueue is not needed
  - support early microcode loading with --early-microcode
  - dmraid, let dmraid setup its own partitions
  - sosreport renamed to rdsosreport


author: Harald Hoyer <harald@redhat.com> 031-1
changelog:
  - do not include the resume dracut module in hostonly mode,
    if no swap is present
  - don't warn twice about omitted modules
  - use systemd-cat for logging on systemd systems, if logfile is unset
  - fixed PARTUUID parsing
  - support kernel module signing keys
  - do not install the usrmount dracut module in hostonly mode,
    if /sbin/init does not live in /usr
  - add debian udev rule files
  - add support for bcache
  - network: handle bootif style interfaces
    e.g. ip=77-77-6f-6f-64-73:dhcp
  - add support for kmod static devnodes
  - add vlan support for iBFT


author: Harald Hoyer <harald@redhat.com> 031-22.git20130809
changelog:
  - lsinitrd.sh: add old cpio signature
  - dracut.sh: call find with -print0 and cpio with --null
  - dracut.asc: small corrections
  - systemd/dracut-initqueue.sh: continue to boot if finished failed
  - dracut.sh/dracut-functions.sh: handle root on non-block device
  - dracut-functions.sh: removed non dracut-install shell functions
  - dracut-functions.sh: inst_multiple == dracut_install
  - 51-dracut-rescue.install: fixed rescue image creation
  - dracut.sh: do not strip in FIPS mode
  Resolves: rhbz#990250
  - dracut.sh: check the value of --kver
  - crypt: Fix typo--/etc/crypttab not /etc/cryptab
  - network/net-lib.sh: fix ibft interface configuration
  - iscsi/module-setup.sh: install some modules regardless of hostonly
  - multipath: need_shutdown if multipath devices exist
  Resolves: rhbz#994913
  - omit drivers fix


author: Harald Hoyer <harald@redhat.com> 032-1
changelog:
  - fix for kdump in FIPS mode
  Resolves: rhbz#920931
  - fixed iBFT booting
  Resolves: rhbz#989944
  - fixed FIPS mode initramfs creation
  Resolves: rhbz#990250
  - shutdown: fixed killall_proc_mountpoint()
  Resolves: rhbz#996549
  - disable lvmetad in the initramfs
  Resolves: rhbz#996627
  - require dhclient


author: Harald Hoyer <harald@redhat.com> 032-23.git20130904
changelog:
  - fixed curl error with zero size kickstart file
  Resolves: rhbz#989133
  - fixed systemd-cat failure, when systemd is installed
    but not actually running
  Resolves: rhbz#1002021
  - do not fail on empty dracut module directories
  Resolves: rhbz#1003153


author: Harald Hoyer <harald@redhat.com> 033-1
changelog:
  - do not cache the kernel cmdline
  Resolves: rhbz#989944
  - fixed iso-scan
  Resolves: rhbz#1005487
  - support blkid with bcache
  Resolves: rhbz#1003207
  - ifup with dhcp, if no ip= params specified
  Resolves: rhbz#989944
  - silently try to umount rpc_pipefs
  Resolves: rhbz#999996


author: Harald Hoyer <harald@redhat.com> 033-3.git20130913
changelog:
  - do not dhcp members of team, bond, etc.
  - harden against weird ppc kernel driver
  Resolves: rhbz#1007891


author: Harald Hoyer <harald@redhat.com> 034-1
changelog:
  - version 034
  - add option to turn on/off prelinking
      --prelink, --noprelink
      do_prelink=[yes|no]
  - add ACPI table overriding
  - do not log to syslog/kmsg/journal for UID != 0
  - lvm/mdraid: Fix LVM on MD activation
  - bcache module removed (now in bcache-tools upstream)
  - mdadm: also install configs from /etc/mdadm.conf.d
  - fixes for mdadm-3.2.6+
  - fcoe: add FCoE UEFI boot device support
  - rootfs-block: add support for the rootfallback= kernel cmdline option


author: Harald Hoyer <harald@redhat.com> 034-7.git20131008
changelog:
  - lvm: install thin utils for non-hostonly
  - do not bail out, if kernel modules dir is missing
  - dmsquash-live: add /dev/mapper/live-base
  Resolves: rhbz#1016726


author: Harald Hoyer <harald@redhat.com> 034-24.git20131030
changelog:
  - fixed booting with rd.iscsi.firmware and without root=
  - fips: include crct10dif_generic
  - fixed missing modules in hostonly, which have no modalias
  - moved dracut to /usr/sbin


author: Harald Hoyer <harald@redhat.com> 034-62.git20131205
changelog:
  - fixed PATH shortener
  - also install /etc/system-fips in the initramfs
  - nbd, do not fail in hostonly mode
  - add ohci-pci to the list of hardcoded modules
  - lvm: do not run pvscan for lvmetad
  - network fixes
  - skip crypt swaps with password files
  - fixed i18n


author: Harald Hoyer <harald@redhat.com> 036-16.git20140206
changelog:
  - version 036
  - parse dns information on "ip=" command line arg
  - preserve ownership of files, if root creates the initramfs
  - parse ibft nameserver settings
  - do not run dhcp twice on an interface
  - try to not reload systemd


author: Harald Hoyer <harald@redhat.com> 038-14.git20140724
changelog:
  - fixed lvm modules issues
  Resolves: rhbz#1118890
  - fixed vlan issues
  - fixed prelink for FIPS
  - new rd.route parameter
  - more ARM modules


author: Harald Hoyer <harald@redhat.com> 043-60.git20150811
changelog:
  - fixed checkiso timeout
  - fixed log output although quiet is set
  - fixed qemu detection
  - cleanup compressor handling


author: Harald Hoyer <harald@redhat.com> - 044-4.git20151127
changelog:
  - fixes for the dmsquash-live module
  - remove udev watch for raid members
  - mode 0755 for the livenet generator
  Resolves: rhbz#1285903


author: Harald Hoyer <harald@redhat.com> - 044-17.git20160108
changelog:
  - include more HID driver
  - include machine info file
  - fix network carrier detection
  - fix nbd
  - do not copy over lldpad state
  - restorecon the final initramfs image


author: Lukas Nykryn <lnykryn@redhat.com> - 048-34.git20180814
changelog:
  - TEST-50-MULTINIC/test.sh: fixed server startup
  - kernel-network-modules: add vlan kernel modules
  - test: fixed KVERSION and qemu backwards compatiblity
  - TEST-70-BONDBRIDGETEAMVLAN: load vlan kernel modules
  - test: also output server.log on failure
  - TEST-50-MULTINIC: s/--device/-device
  - enable parallel test suite
  - TEST-31-ISCSI-MULTI: use different port than TEST-30
  - load modules earlier for iscsi via dhcp root-path
  - test/{TEST-50-MULTINIC,TEST-70-BONDBRIDGETEAMVLAN}: use qemu-3.0 syntax
  - multipath-shutdown: fix shell syntax
  - dracut.spec: remove warpclock from z-series, not the other way round
  - iscsi: remove $() where it does not fit
  - mdraid: better handling of various UUID formats
  - dracut-functions: fix the word splitting
  - Add gpio and pinctrl drivers for arm*/aarch64
  - mdraid/parse-md.sh: also accept rd.md.uuid with ":"
  - spec: sort modules
  - spec: warpclock is not available on s390 or s390x
  - dracut.spec: Remove needless use of defattr
  - dracut.spec: add 00warpclock dracut module
  - Bring back 51-dracut-rescue-postinst.sh
  - lsinitrd: update help message and man page
  - lsinitrd: optimize performance when handling multiple files
  - lsinitrd: allow to only unpack certain files
  - NEWS: forgot to update the latest version
  - 00warpclock: Set correct timezone
  - dracut-install: skip modules with empty path
  - Record loaded kernel modules when hostonly mode is enabled
  - modules.d/95fcoe/cleanup-fcoe.sh: chmod +x
  - TEST-40-NBD: disable for now
  - TEST-30-ISCSI: readd multiple target test


author: Lukas Nykryn <lnykryn@redhat.com> - 049-12.git20190603
changelog:
  - 95iscsi: rd.iscsi.initiator should have priority over stored configuration
  - net-lib: strstr is not for globs


author: Lukas Nykryn <lnykryn@redhat.com> - 049-17.git20190725
changelog:
  - rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-24.git20190802
changelog:
  - 95fcoe: load 'libfcoe' module as a fallback
  - 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
  - dracut: let module handling function accept optional path option
  - squash: also squash systemctl if switch-root is not needed
  - squash: fix and simplify required_in_root
  - squash: squash systemd binary and udevadm


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


