# changelog

author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.103-2
changelog:
  - Add internal flag for temporary LVs to properly direct udev to not interfere.
  - Fix endless loop in blkdeactivate <device>... if unable to umount/deactivate.
  - Add dev-block-<major>:<minor>.device systemd alias for complete PV tracking.
  - Use major:minor as short form of --major and --minor arg for pvscan --cache.
  - Remove 2>/dev/null from three lvm commands executed by vgimportclone.
  - Add configure --enable-udev-systemd-background-jobs.
  - Add lvm2-pvscan@.service to run pvscan as a service for lvmetad/autoactivation.
  - Fix lvconvert swap of poolmetadata volume for active thin pool.
  - Check for open count with a timeout before removal/deactivation of an LV.
  - Report RAID images split with tracking as out-of-sync ("I").
  - Improve parsing of snapshot lv segment.
  - Add workaround for deactivation problem of opened virtual snapshot.
  - Disable unsupported merge for virtual snapshot.
  - Move code to remove virtual snapshot from tools to lib for lvm2app.
  - Fix possible race during daemon worker thread creation (lvmetad).
  - Fix possible deadlock while clearing lvmetad cache for full rescan.
  - Fix possible race while creating/destroying memory pools.
  - Recognise NVM Express devices in filter.
  - Fix failing metadata repair when lvmetad is used.
  - Fix incorrect memory handling when reading messages from lvmetad.
  - Fix locking in lvmetad when handling the PV which is gone.
  - Recognize new flag to skip udev scanning in udev rules and act appropriately.
  - Add support for flagging an LV to skip udev scanning during activation.
  - Improve message when unable to change discards setting on active thin pool.
  - Run full scan before vgrename operation to avoid any cache name collision.
  - Fix lvconvert when converting to a thin pool and thin LV at once.
  - Skip race errors when non-udev dmsetup build runs on udev-enabled system.
  - Skip error message when holders are not present in sysfs.
  - Use __linux__ instead of linux define to make libdevmapper.h C compliant.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.103-3
changelog:
  - Fix missing lvmetad scan for PVs found on MD partitions.
  - Respect DM_UDEV_DISABLE_OTHER_RULES_FLAG in lvmetad udev rules.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.104-1
changelog:
  - Workaround VG refresh race during autoactivation by retrying the refresh.
  - Handle failures in temporary mirror used when adding images to mirrors.
  - Fix and improve logic for implicitely exclusive activations.
  - Return success when LV cannot be activated because of volume_list filter.
  - Return proper error state for remote exclusive activation.
  - Fix clvmd message verification to not reject REMOTE flag. (2.02.100)
  - Compare equality of double values with DBL_EPSILON predefined constant.
  - Use additional gcc warning flags by default.
  - Add ignore_lvm_mirrors to config file to read/ignore labels on mirrors.
  - Use #ifdef __linux__ instead of linux throughout.
  - Consistently report on stderr when device is not found for dmsetup info.
  - Skip race errors when non-udev dmsetup build runs on udev-enabled system.
  - Skip error message when holders are not present in sysfs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.105-1
changelog:
  - Fix thin LV flagging for udev to skip scanning only if the LV is wiped.
  - Replace use of xfs_check with xfs_repair in fsadm.
  - Mark lvm1 format metadata as FMT_OBSOLETE. Do not use it with lvmetad.
  - Invalidate cached VG struct after a PV in it gets orphaned. (2.02.87)
  - Mark pool format metadata as FMT_OBSOLETE.
  - Use major:minor in lvm2-pvscan@.service for proper global_filter application.
  - Syntax and spelling fixes in some man pages.
  - Dependency scan counts with snapshots and external origins.
  - Make sure VG extent size is always greater or equal to PV phys. block size.
  - Optimize double call of stat() for cached devices.
  - Enable support for thin provisioning for default configuration.
  - Disable online thin pool metadata resize for 1.9 kernel thin target.
  - Shortened code for initialization of raid segment types.
  - Test for remote exclusive activation after activation fails.
  - Support lvconvert --merge for thin snapshots.
  - Add support to read thin device id from table line entry.
  - Drop extra test for origin when testing merging origin in lv_refresh().
  - Extend lv_remove_single() to not print info about removed LV.
  - Replace open_count check with lv_check_not_in_use() for snapshot open test.
  - Add error messages with LV names for failing lv refresh.
  - Compile/link executables with new RELRO and PIE options (non-static builds).
  - Support per-object compilation cflags via CFLAGS_object.o.
  - Automatically detect support for compiler/linker options to use RELRO and PIE.
  - Add --splitsnapshot to lvconvert to separate out cow LV.
  - Reinstate origin reload to complete lvconvert -s with active LVs. (2.02.98)
  - Select only active volume groups if vgdisplay -A is used.
  - Add -p and LVM_LVMETAD_PID env var to lvmetad to change pid file.
  - Allow lvmetad to reuse stale socket.
  - Only unlink lvmetad socket on error if created by the same process.
  - Append missing newline to lvmetad missing socket path error message.
  - Add allocation/use_blkid_wiping to lvm.conf to enable blkid wiping.
  - Enable blkid_wiping by default if the blkid library is present.
  - Add configure --disable-blkid_wiping to disable libblkid signature detection.
  - Add -W/--wipesignatures lvcreate option to support wiping on new LVs.
  - Add allocation/wipe_signatures_when_zeroing_new_lvs to lvm.conf.
  - Do not fail the whole autoactivation if the VG refresh done before fails.
  - Do not connect to lvmetad on vg/lvchange --sysinit -aay and socket absent.
  - Use lv_check_not_in_use() when testing device in use before merging.
  - Check for failure of lvmcache_add_mda() when writing pv.
  - Check for failure of dev_get_size() when reporting device size.
  - Drop extra unneeded '/' when scanning sysfs directory.
  - Fix undef value if skipped clustered VG ignored for toollib PV seg. (2.02.103)
  - Support validation of VG/LV names in liblvm/python.
  - Allow creation of PVs with arguments to liblvm/python.
  - Ensure sufficient metadata copies retained in liblvm/python vgreduce.
  - Fix installation of profiles from conf subdir when not building in srcdir.
  - Show UUIDs for missing PVs in reports.
  - Add reporting of thin_id device id for thin volumes.
  - Fix reporting of empty numerical values for recently-added fields.
  - Revert activation of activated nodes if a node preload callback fails.
  - Avoid busy looping on CPU when dmeventd reads event DM_WAIT_RETRY.
  - Ensure global mutex is held when working with dmeventd thread.
  - Drop taking timeout mutex for un/registering dmeventd monitor.
  - Allow section names in config file data to be quoted strings.
  - Close fifos before exiting in dmeventd restart() error path.
  - Catch invalid use of string sort values when reporting numerical fields.
  - Require util-linux >= 2.24 for blkid wiping support (via device-mapper pkg).
  - Add BuildRequires: libblkid-devel to build with blkid wiping functionality.
  - Do not install /run and /run/lvm directory but only own them by lvm2 package.
    These dirs are controlled by systemd's tmpfiles.d/lvm2.conf configuration.
  - Consolidate file permissions for all packaged files.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.105-2
changelog:
  - Avoid exposing temporary devices when initializing thin pool volume.
  - Remove udev rule for multipath's PATH_FAILED event processing,
    multipath handles that properly in its own udev rules now.
  - Remove duplicate udev rule for cryptsetup temporary devices,
    cryptsetup handles that properly directly in its code.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.106-1
changelog:
  - Require latest device-mapper-persistent-data 0.3.2-1.
  - Fix ignored --dataalignment/dataalignmentoffset for pvcreate --restorefile.
  - Fix lost information about bootloader area when using lvmetad.
  - Don't require --major to be specified when using -My option on kernels > 2.4.
  - Add configure --disable-thin_check_needs_check to support old thin_check.
  - Use thin_check --clear-needs-check-flag by default.
  - Add lvmthin man page to section 7.
  - Ensure mapped device names are not too long in vg_validate and lvrename.
  - Ensure resume failure in lvrename results in command failure.
  - Add explicit error message when using lvdisplay -c -m.
  - Report error if superfluous argument (e.g. PV name) supplied to pvscan.
  - Fix error message for pvdisplay -c -m and add one for pvdisplay -c -s.
  - Use EINVALID_CMD_LINE correctly instead of ECMD_FAILED in vgimport/export.
  - Obtain list of known VGs from lvmetad for pvchange --all.
  - Add man page for lvm-dumpconfig to section 8.
  - Validate name for renamed sub LVs.
  - When lvrename fails on argument parsing return EINVALID_CMD_LINE.
  - Fix exit code regression in failing pvchange command (2.02.66).
  - Include 'lvm dumpconfig --type missing' and '--type diff' output to lvmdump.
  - Return failure when specifying negative size for pvresize.
  - Fix memory corruption in cmd context refresh if clvmd leaks opened device.
  - Reinitialise lvmcache properly on fork to fix premature polldaemon exit.
  - Add 'lvm dumpconfig --type diff' to show differences from defaults.
  - Fix swap signature detection for devices smaller then 2MB.
  - Resolve memory release order for clvmd shutdown.
  - Report error when lvm2 activation is released in critical_section.
  - Fix memory corruption when pvscan reports long pv names.
  - Do not report internal orphan VG names when reporting pvdisplay/pvscan.
  - Fix pvdisplay -c man page referencing KB instead of sectors.
  - Skip redundant synchronization calls on local clvmd.
  - Use correct PATH_MAX for locking dir path.
  - Do not check for backups when when its creation is disabled.
  - Don't allow --mergedconfig without --type current in dumpconfig. Fix memleak.
  - Make global/lvdisplay_shows_full_device_path lvm.conf setting profilable.
  - Make global/{units|si_unit_consistency|suffix} lvm.conf setting profilable.
  - Validate minimal chunk size for snapshot COW volume in lvconvert.
  - Disallow lvconvert of origin to snapshot COW volume.
  - Make report lvm.conf settings profilable.
  - Add existing report settings to lvm.conf.
  - Use VG read lock during 'pvscan --cache -aay' autoactivation.
  - Issue a VG refresh before autoactivation only if the PV has changed/is new.
  - Add flag to lvmetad protocol to indicate the PV scanned has changed/is new.
  - Also add vgname to lvmetad protocol when referencing VGs for PVs scanned.
  - Add man page for lvm2-activation-generator.
  - Don't print an error and accept empty value for global/thin_disabled_features.
  - Do not try to check empty pool with scheduled messages.
  - Fix return value in pool_has_message() when quering for any message.
  - Cleanup all client resources on clvmd exit.
  - Use BLKID_CFLAGS when compiling with blkid support.
  - Make lvm 'dumpconfig --type default' complete for it to be consumed by lvm.
  - Run pvscan --cache via systemd-run in udev if the PV label is detected lost.
  - Fix memleak when lvmetad discovers PV to appear on another device.
  - Fix calculation of maximum size of COW device for snapshot (2.02.99).
  - Do not allow stripe size to be bigger then extent size for lvresize.
  - Zero snapshot COW header when creating read-only snapshot.
  - Comment out config lines in dumpconfig output without default values defined.
  - Improve detection of clustered mirror support.
  - Enhance raid code with feature flags, for now checks for raid10.
  - Move parsing of VG metadata from vg_commit() back to vg_write() (2.02.99)
  - Avoid a PV label scan while in a critical section.
  - Create /dev/disk/by-id/lvm-pv-uuid-<PV_UUID> symlink for each PV via udev.
  - lvcreate computes RAID4/5/6 stripes if not given from # of allocatable PVs.
  - Fix merging of old snapshot into thin volume origin.
  - Use --ignoreskippedcluster in lvm2-monitor initscript/systemd unit.
  - Do not use VG read/write state for LV read/write state.
  - Use --ignoreskippedcluster in activation systemd units if use_lvmetad=0.
  - Allow approximate allocation when specifying size in percentage terms.
  - Add basic LVM support for cache[pool] segment types.
  - Use local exclusive activation for creation of raid in cluster.
  - Use correctly signed 64b constant when selecting raid volumes.
  - Remove ExecReload from lvmetad systemd unit: lvmetad -R undefined. (2.02.98)
  - Do not fork lvmetad if running under systemd.
  - Wipe DM_snapshot_cow signature without prompt in new LVs with blkid wiping.
  - Avoid exposing temporary devices when initializing raid metadata volumes.
  - Add internal tags command to display any tags defined on the host.
  - Prohibit use of external origin with size incompatible with thin pool.
  - Avoid trying to convert single to thin pool and volume at the same time.
  - Add support for partitions on ZFS zvol.
  - Fix unwanted drop of hold flocks on forked children.
  - Respect LVM_LVMETAD_PIDFILE env var for lvm command.
  - Fix test when checking target version for available thin features.
  - Detect thin feature external_origin_extend and limit extend when missing.
  - Issue error if libbblkid detects signature and fails to return offset/length.
  - Update autoconf config.guess/sub to 2014-01-01.
  - Online thin pool metadata resize requires 1.10 kernel thin pool target.
  - Check for sprintf error when building internal device path.
  - Check for sprintf error when creating path for dm control node.
  - When buffer for dm_get_library_version() is too small, return error code.
  - Always reinitialize _name_mangling_mode in dm_lib_init().
  - Stop timeout thread immediately when the last worker thread is finished.
  - Fix dmeventd logging with parallel wait event processing.
  - Reuse _node_send_messages() for validation of transaction_id in preload.
  - Transaction_id could be lower by one only when messages are prepared.
  - Wrap is_selinux_enabled() to be called just once.
  - Use correctly signed 64b constant when working with raid volumes.
  - Exit dmeventd with pidfile cleanup instead of raising SIGKILL on DIE request.
  - Add new DM_EVENT_GET_PARAMETERS request to dmeventd protocol.
  - Do not use systemd's reload for dmeventd restart, use dmeventd -R instead.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.106-2
changelog:
  - Require exact lvm2/device-mapper version among LVM2 subpackages
    so all of them are always updated synchronously within one update.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.107-1
changelog:
  - Add cmirror-standalone subpackage containing new lvm2-cmirrord.service
    systemd unit for standalone cmirrord daemon management without cluster
    resource manager involvement.
  - Add lvm2-cluster-standalone subpackage containing new lvm2-clvmd.service
    and lvm2-cluster-activation.service systemd unit for standalone clvmd
    daemon management without cluster resource manager involvement.
  - Add Requires: resource-agents for lvm2-cluster and cmirror subpackages.
    The resource-agents package provides "clvm" cluster resource to manage
    clvmd and cmirrord instances. This replaces obsolete clvmd and cmirrord
    initscripts.
  - Introduce LCK_ACTIVATION to avoid concurrent activation of basic LV types.
  - Fix open_count test for lvchange --refresh or mirrors and raids.
  - Update pvs,vgs,lvs and lvm man page for selection support.
  - Add -S/--select to lvm devtypes for report selection.
  - Add -S/--select to pvs,vgs,lvs and {pv,vg,lv}display -C for report selection.
  - Use dm_report_init_with_selection now, implicit "selected" field appears.
  - Make use of libdm's DM_REPORT_FIELD_TYPE{SIZE,PERCENT,STRING_LIST} for fields.
  - Support all-or-nothing pvmove --atomic.
  - Automatically add snapshot metadata size for -l %ORIGIN calculation.
  - When converting RAID origin to cache LV, properly rename sub-LVs.
  - Use RemoveOnStop for lvm2-lvmetad.socket systemd unit.
  - Add thin-generic configuration profile for generic thin settings.
  - Fix crash when reporting empty labels on pvs.
  - Use retry_deactivation also when cleaning orphan devices.
  - Wait for client threads when shutting down lvmetad.
  - Remove PV from cache on pvremove.
  - Avoid repeatedly reporting of failure to connect to lvmetad.
  - Introduce MDA_FAILED to permit metadata updates even if some mdas are missing.
  - Prompt when setting the VG cluster attr if the cluster is not setup.
  - Allow --yes to skip prompt in vgextend (worked only with -f).
  - Don't use name mangling for LVM - it never uses dm names with wrong char set.
  - Remove default.profile and add {command,metadata}_profile_template.profile.
  - Use proper umask for systemd units generated by lvm2-activation-generator.
  - Check for failing mirror_remove_missing() function.
  - Prompt before converting volumes to thin pool and thin pool metadata.
  - Add dumpconfig --type profilable-{metadata,command} to select profile type.
  - Exit immediately with error if command profile is found invalid.
  - Separate --profile cmd line arg into --commandprofile and --metadataprofile.
  - Strictly separate command profiles and per-VG/LV profiles referenced in mda.
  - Fix dumpconfig --type diff when run as second and later cmd in lvm shell.
  - Fix wrong profile reuse from previous run if another cmd is run in lvm shell.
  - Move cache description from lvm(8) to new lvmcache(7) man page.
  - Display skipped prompt in silent mode.
  - Make reporting commands show help about possible sort keys on '-O help'.
  - Add metadata_percent to lvs_cols.
  - Take account of parity areas with alloc anywhere in _calc_required_extents.
  - Use proper uint64 casting for calculation of cache metadata size.
  - Better support for nesting of blocking signals.
  - Use only sigaction handler and drop duplicate signal handler.
  - Separate signal handling and flock code out into lib/misc.
  - Don't start dmeventd checking seg_monitor and monitoring is disabled.
  - Catch CTRL-c during pvremove prompts.
  - Show correct availability status for snapshot origin in lvscan.
  - Move segment thin pool/volume info into segment display 'lvdisplay --maps'.
  - Display thin pool usage even when just thin volume is available.
  - Display monitoring status for monitorable segments in 'lvdisplay --maps'.
  - Display virtual extents for virtual LVs in 'lvdisplay --maps'.
  - Make vgsplit fail cleanly when not all PVs are specified for RAID 4/5/6.
  - Make vgsplit work on mirrors with logs that share PVs with images.
  - Use devices/ignore_suspended_devices=0 by default if not defined in lvm.conf.
  - Use proper libmem mempool for allocation of unknown segment name.
  - Add --readonly to reporting and display tools for lock-free metadata access.
  - Add locking_type 5 for dummy locking for tools that do not need any locks.
  - Fix _recover_vg() error path when lock conversion fails.
  - Use X for LV attributes that are unknown when activation disabled.
  - Only output lvdisplay 'LV Status' field when activation is enabled.
  - Use lvmetad_used() in pvscan instead of config_tree.
  - Configure --enable-udev-systemd-background-jobs if not disabled explicitly.
  - Add lvmdump -s to collect system info and context (currently systemd only).
  - Refactor allocation code to make A_POSITIONAL_FILL explicit.
  - Use thread-safe ctime_r() for clvmd debug logging.
  - Skip adding replies to already finished reply thread.
  - Use mutex to check number of replies in request_timed_out() in clvmd.
  - Drop usage of extra reply_mutex for localsock in clvmd.
  - Protect manipulation with finished flag with mutex in clvmd.
  - Shift mutex creation and destroy for localsock in clvmd to correct place.
  - Fix usage of --test option in clvmd.
  - Skip more libraries to be mlocked in memory.
  - Remove LOCKED flag for pvmove replaced with error target.
  - Return invalid command when specifying negative polling interval.
  - Make "help" and "?" reporting fields implicit.
  - Recognize implicit "selected" field if using dm_report_init_with_selection.
  - Add support for implicit reporting fields which are predefined in libdm.
  - Add DM_REPORT_FIELD_TYPE_PERCENT: separate number and percent fields.
  - Add dm_percent_range_t,dm_percent_to_float,dm_make_percent to libdm for reuse.
  - Add dm_report_reserved_value to libdevmapper for reserved value definition.
  - Also display field types when listing all fields in selection help.
  - Recognize "help" keyword in selection string to show brief help for selection.
  - Always order items reported as string list field lexicographically.
  - Add dm_report_field_string_list to libdevmapper for direct string list report.
  - Add DM_REPORT_FIELD_TYPE_STRING_LIST: separate string and string list fields.
  - Add dm_str_list to libdevmapper for string list type definition and its reuse.
  - Add dmsetup -S/--select to define selection criteria for dmsetup reports.
  - Add dm_report_init_with_selection to intialize report with selection criteria.
  - Add DM_REPORT_FIELD_TYPE_SIZE: separate number and size reporting fields.
  - Use RemoveOnStop for dm-event.socket systemd unit.
  - Document env var 'DM_DEFAULT_NAME_MANGLING_MODE' in dmsetup man page.
  - Warn user about incorrect use of cookie with 'dmsetup remove --force'.
  - Also recognize 'help'/'?' as reserved sort key name to show help.
  - Add dm_units_to_factor for size unit parsing.
  - Increase bitset size for minors for thin dmeventd plugin.


author: Alasdair Kergon <agk@redhat.com> - 2.02.108-1
changelog:
  - Remove an erroneous duplicate const from libdevmapper.h. (2.02.107)
  - Add lvscan --cache which re-scans constituents of a particular LV.
  - Make dmeventd's RAID plugin re-scan failed PVs when lvmetad is in use.
  - Improve code sharing for lvconvert and lvcreate and pools (cache & thin).
  - Improve lvconvert --merge validation.
  - Improve lvconvert --splitsnapshot validation.
  - Add report/list_item_separator lvm.conf option.
  - Add lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Enhance lvconvert thin, thinpool, cache and cachepool command line support.
  - Display 'C' only for cache and cache-pool target types in lvs.
  - Prompt for confirmation before change LV into a snapshot exception store.
  - Return proper error codes for some failing lvconvert funtions.
  - Add initial code to use cache tools (cache_check|dump|repair|restore).
  - Support lvdisplay --maps for raid.
  - Add --activationmode degraded to activate degraded raid volumes by default.
  - Add separate lv_active_{locally,remotely,exclusively} LV reporting fields.
  - Recognize "auto"/"unmanaged" values in selection for appropriate fields only.
  - Add report/binary_values_as_numeric lvm.conf option for binary values as 0/1.
  - Add --binary arg to pvs,vgs,lvs and {pv,vg,lv}display -C for 0/1 on reports.
  - Add separate reporting fields for each each {pv,vg,lv}_attr bit.
  - Separate LV device status reporting fields out of LV fields.
  - Fix regression causing PVs not in VGs to be marked as allocatable (2.02.59).
  - Fix VG component of lvid in vgsplit/vgmerge and check in vg_validate.
  - Add lv_full_name, lv_parent and lv_dm_path fields to reports.
  - Change lv_path field to suppress devices that never appear in /dev/vg.
  - Postpone thin pool lvconvert prompts (2.02.107).
  - Require --yes option to skip prompt to lvconvert thin pool chunksize.
  - Support lvremove -ff to remove thin volumes from broken thin pools.
  - Require --yes to skip raid repair prompt.
  - Change makefile %.d generation to handle filename changes without make clean.
  - Fix use of buildir in make pofile.
  - Enhance private volumes UUIDs with suffixed for easier detection.
  - Do not use reserved _[tc]meta volumes for temporary LVs.
  - Leave backup pool metadata with _meta%d suffix instead of reserved _tmeta%d.
  - Allow RAID repair to reuse PVs from same image that suffered a failure.
  - New RAID images now avoid allocation on any PVs in the same parent RAID LV.
  - Always reevaluate filters just before creating PV.
  - Fix dm_report_field_string_list to handle delimiter with multiple chars.
  - Add dm_report_field_reserved_value for per-field reserved value definition.


author: Alasdair Kergon <agk@redhat.com> - 2.02.109-1
changelog:
  - Allow approximate allocation with +%FREE in lvextend.
  - Fix a segfault in lvscan --cache when devices were already missing. (2.02.108)
  - Display actual size changed when resizing LV.
  - Remove possible spurious "not found" message on PV create before wiping.
  - Handle upgrade from 2.02.105 when an LV now gaining a uuid suffix is active.
  - Remove lv_volume_type field from reports. (2.02.108)
  - Fix incorrect persistent .cache after vgcreate with PV creation. (2.02.108)
  - Add dm_tree_set_optional_uuid_suffixes to libdevmapper to handle upgrades.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.110-1
changelog:
  - Fix manipulation with thin-pools which are excluded via volume_list.
  - Support lv/vgremove -ff to remove thin vols from broken/inactive thin pools.
  - Fix typo breaking configure --with-lvm1=shared.
  - Modify lvresize code to handle raid/mirrors and physical extents.
  - Don't allow pvcreate to proceed if scanning or filtering fails.
  - Cleanly error when creating RAID with stripe size < PAGE_SIZE.
  - Print name of LV which on activation triggers delayed snapshot merge.
  - Add lv_layout and lv_role LV reporting fields.
  - Properly display lvs lv_attr volume type and target type bit for cache origin.
  - Fix pvcreate_check() to update cache correctly after signature wiping.
  - Fix primary device lookup failure for partition when processing mpath filter.
  - If LV inactive and non-clustered, do not issue "Cannot deactivate" on -aln.
  - Remove spurious "Skipping mirror LV" message on pvmove of clustered mirror.
  - Improve libdevmapper-event select() error handling.
  - Add extra check for matching transation_id after message submitting.
  - Add dm_report_field_string_list_unsorted for str. list report without sorting.
  - Support --deferred with dmsetup remove to defer removal of open devices.
  - Update dm-ioctl.h to include DM_DEFERRED_REMOVE flag.
  - Add support for selection to match string list subset, recognize { } operator.
  - Fix string list selection with '[value]' to not match list that's superset.
  - Fix string list selection to match whole words only, not prefixes.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.111-1
changelog:
  - Pass properly sized char buffers for sscanf when initializing clvmd.
  - Reinstate nosync logic when extending mirror. (2.02.110)
  - Fix total area extent calculation when allocating cache pool. (2.02.110)
  - Restore proper buffer size for parsing mountinfo line (1.02.89)


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.112-1
changelog:
  - Add cache_{read,write}_{hits,misses} reporting fields.
  - Add cache_{total,used,dirty}_blocks reporting fields.
  - Add _corig as reserved suffix.
  - Reduce number of VG writes and commits when creating spare volumes.
  - When remove_layer_from_lv() removes layer, restore subLV names.
  - Cache-pool in use becomes invisible LV.
  - Don't prompt for removal of _pmspare in VG without pool metadata LV.
  - Deactivation of snapshot origin detects and deactivates left-over snapshots.
  - Properly report error when taking snapshot of any cache type LV.
  - Add basic thread debugging messages to dmeventd.
  - Include threads being shutdown in dmeventd device registration responses.
  - Inital support for external users of thin pools based on transaction_id.
  - Report some basic percentage info for cache pools.
  - Introduce size_mb_arg_with_percent() for advanced size arg reading.
  - Add extra support for '.' as decimal point in size args.
  - Add configure parameters for default segment type choices.
  - Add global/sparse_segtype_default setting to use thin for --type sparse.
  - Update and correct lvcreate and lvcovert man pages.
  - Mark pools and snapshots as unzeroable volumes.
  - Check for zeroing of volume after segment type is fully detected.
  - Better support for persistent major and minor options with lvcreate.
  - Refactor lvcreate towards more complete validation of all supported options.
  - Support lvcreate --type linear.
  - Improve _should_wipe_lv() to warn with message.
  - Inform about temporarily created volumes only in verbose mode.
  - Better support for --test mode with pool creation.
  - Query lock holding LV when replacing and converting raid volumes.
  - Add extra validate for locked lv within validate_lv_cache_create().
  - Add internal lvseg_name() function.
  - Skip use of lock files for virtual internal VG names.
  - Fix selection on {vg,lv}_permissions fields to properly match selection criteria.
  - Fix lv_permissions reporting to display read-only{-override} instead of blank.
  - Fix liblvm2cmd and lvm shell to respect quotes around args in cmd line string.
  - Permit extent sizes > 128KB that are not power of 2 with lvm2 format.
  - Remove workaround for lvm2-monitor.service hang on stop if lvmetad stopped.
  - Change vgremove to use process_each_lv_in_vg.
  - Allow lvconvert --repair and --splitmirrors on internal LVs.
  - Introduce WARN_ flags to control some metadata warning messages.
  - Use process_each_pv in vgreduce.
  - Refactor process_each_pv in toollib.
  - Introduce single validation routine for pool chunk size.
  - Support --yes like --force in vg/lvremove to skip y|n prompt.
  - Support --yes with lvconvert --splitsnapshot.
  - Fix detection of unsupported thin external lvconversions.
  - Fix detection of unsupported cache and thin pool lvconversions.
  - Fix detection of unsupported lvconversion of cache to snapshot.
  - Improve code for creation of cache and cache pool volumes.
  - Check cluster-wide (not local) active status before removing LV.
  - Properly check if activation of removed cached LV really activated.
  - lvremove cached LV removes cachepool (keep with lvconvert --splitcache).
  - Always remove spare LV with last removed pool volume.
  - Support lvconvert --splitcache and --uncache of cached LV.
  - Option --cache has also shortcut -H (i.e. lvcreate -H).
  - Refactor lvcreate code and better preserve --type argument.
  - Refactor filter processing around lvmetad.
  - Refactor process_each_lv in toollib.
  - Refactor process_each_vg in toollib.
  - Pools cannot be used as external origin.
  - Use lv_update_and_reload() for snapshot reload.
  - Don't print message in adjusted_mirror_region_size() in activation.
  - Improve lv_update_and_reload() to find out proper lock holding LV.
  - Improve search of LV in lv_ondisk().
  - Do not scan sysfs in lv_check_not_in_use() when device is closed.
  - Backup final metadata after resync of mirror/raid.
  - Unify handling of --persistent option for lvcreate and lvchange.
  - Validate major and minor numbers stored in metadata.
  - Use -fPIE when linking -pie executables.
  - Support DEBUG_MEMLOCK to trap unsupported mmap usage.
  - Enable cache segment type by default.
  - Ensure only supported volume types are used with cache segments.
  - Fix inablility to specify cachemode when 'lvconvert'ing to cache-pool.
  - Grab cluster lock for active LVs when setting clustered attribute.
  - Use va_copy to properly pass va_list through functions.
  - Add function to detect rotational devices.
  - Review internal checks for mirror/raid/pvmove volumes.
  - Track mirror segment type with separate MIRROR flag.
  - Fix cmirror endian conversions.
  - Introduce lv_is_pvmove/locked/converting/merging macros.
  - Avoid leaving linear logical volume when thin pool creation fails.
  - Don't leak alloc_handle on raid target error path.
  - Properly validate raid leg names.
  - Archive metadata before starting their modification in raid target.
  - Add missing vg_revert() in suspend_lv() raid and snapshot error path.
  - Add missing backup of lvm2 metadata after some raid modifications.
  - Use vg memory pool for extent allocation.
  - Add allocation/physical_extent_size config option for default PE size of VGs.
  - Demote an error to a warning when devices known to lvmetad are filtered out.
  - Re-order filter evaluation, making component filters global.
  - Fix logic that checks for full scan before iterating through devices.
  - Introduce common code to modify metadata and reload updated LV.
  - Fix rename of active snapshot volume in cluster.
  - Make sure shared libraries are built with RELRO option.
  - Update cache creation and dm_config_node to pass policy.
  - Allow activation of any thin-pool if transaction_id supplied is 0.
  - Don't print uninitialized stack bytes when non-root uses dm_check_version().
  - Fix selection criteria to not match reserved values when using >, <, >=, <.
  - Add DM_LIST_HEAD_INIT macro to libdevmapper.h.
  - Fix dm_is_dm_major to not issue error about missing /proc lines for dm module.


author: Alasdair Kergon <agk@redhat.com> - 2.02.113-1
changelog:
  - Add --cachepolicy and --cachesettings options to lvchange.
  - Validate that converted volume and specified pool volume differ in lvconvert.
  - Fix regression in vgscan --mknodes usage (2.02.112).
  - Default to configure --enable-udev-systemd-background-jobs for systemd>=205.
  - Fix ignore_vg() to properly react on various vg_read errors (2.02.112).
  - Failed recovery returns FAILED_RECOVERY status flag for vg_read().
  - Exit with non-zero status code when pvck encounters a problem.
  - Fix clean_tree after activation/resume for cache target (2.02.112).
  - Fix memory corruption with sorting empty string lists (1.02.86).
  - Fix man dmsetup.8 syntax warning of groff.
  - Accept unquoted strings and / in place of {} when parsing configs.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.113-2
changelog:
  - Fix regression when parsing /dev/mapper dir (2.02.112).
  - Fix missing rounding to 64KB when estimating optimal thin pool chunk size.
  - Fix typo in clvmd initscript causing CLVMD_STOP_TIMEOUT variable to be ignored.
  - Fix size in pvresize "Resizing to ..." verbose msg to show proper result size.


author: Alasdair Kergon <agk@redhat.com> - 2.02.114-3
changelog:
  - Avoid file descriptor leak in clients that open repeated lvmetad connections.
  - Add --cachepolicy and --cachesettings to lvcreate.
  - Fix regression when parsing /dev/mapper dir (2.02.112).
  - Fix missing rounding to 64KB when estimating optimal thin pool chunk size.
  - Fix typo in clvmd initscript causing CLVMD_STOP_TIMEOUT var to be ignored.
  - Fix size in pvresize "Resizing to ..." verbose msg to show proper result size.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.115-1
changelog:
  - Report segment types without monitoring support as undefined.
  - Support lvchange --errorwhenfull for thin pools.
  - Improve the processing and reporting of duplicate PVs.
  - Report lv_health_status and health attribute also for thin pool.
  - Add lv_when_full reporting field.
  - Add support for lvcreate --errorwhenfull y|n for thin pools.
  - Fix lvconvert --repair to honour resilience requirement for segmented RAID LV.
  - Filter out partitioned device-mapper devices as unsuitable for use as PVs.
  - Also notify lvmetad about filtered device if using pvscan --cache DevicePath.
  - Use LVM's own selection instead of awk expressions in clvmd startup scripts.
  - Do not filter out snapshot origin LVs as unusable devices for an LVM stack.
  - Fix incorrect rimage names when converting from mirror to raid1 LV (2.02.112).
  - Introduce pvremove_many to avoid excessive metadata re-reading and messages.
  - Check for cmirror availability during cluster mirror creation and activation.
  - Add cache_policy and cache_settings reporting fields.
  - Add missing recognition for --binary option with {pv,vg,lv}display -C.
  - Fix vgimportclone to notify lvmetad about changes done if lvmetad is used.
  - Fix vgimportclone to properly override config if it is missing in lvm.conf.
  - Fix automatic use of configure --enable-udev-systemd-background-jobs.
  - Correctly rename active split LV with -splitmirrors for raid1.
  - Add report/compact_output to lvm.conf to enable/disable compact report output.
  - Still restrict mirror region size to power of 2 when VG extent size is not.
  - Reduce severity of ioctl error message when dmeventd waitevent is interrupted.
  - Report 'unknown version' when incompatible version numbers were not obtained.
  - Report more info from thin pool status (out of data, metadata-ro, fail).
  - Support error_if_no_space for thin pool target.
  - Fix segfault while using selection with regex and unbuffered reporting.
  - Add dm_report_compact_fields to remove empty fields from report output.
  - Remove unimplemented dm_report_set_output_selection from libdevmapper.h.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.115-2
changelog:
  - Set default cache_mode to writehrough when missing in metadata.
  - Add BuildRequires: device-mapper-persistent-data
    for proper thin and cache tool configuration.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.116-3
changelog:
  - Deactivate unused thin pools activated with lvm2 pre-2.02.112 versions.
  - Check lock holding LV when lvconverting stacked raid LV in cluster.
  - Support udev external dev info for filters: PV min size, mpath, md, partition.
  - Add fw_raid_component_detection lvm.conf option to enable FW raid detection.
  - Add devices/external_device_info_source lvm.conf option ("none" by default).
  - Scan pools in for_each_sub_lv() and add for_each_sub_lv_except_pools().
  - Fix lvm2app lvm_lv_get_property return value for fields with info/status ioctl.
  - Fix lvm2app regression in lvm_lv_get_attr causing unknown values (2.02.115).
  - Preserve chunk size with repair and metadata swap of a thin pool.
  - Fix raid --splitmirror 1 functionality (2.02.112).
  - Fix tree preload to handle splitting raid images.
  - Do not support unpartitioned DASD devices.
  - Improve config validation to check if setting with string value can be empty.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.118-1
changelog:
  - Fix LV processing with selection to always do the selection on initial state.
  - Store metadata size + checksum in lvmcache and add struct lvmcache_vgsummary.
  - Remove inaccessible clustered PVs from 'pvs -a'.
  - Don't invalidate cached orphan information while global lock is held.
  - Avoid rescan of all devices when requested pvscan for removed device.
  - Measure configuration timestamps with nanoseconds when available.
  - Disable lvchange of major and minor of pool LVs.
  - Fix pvscan --cache to not scan and read ignored metadata areas on PVs.
  - Add After=iscsi-shutdown.service to blk-availability.service systemd unit.
  - Disallow vgconvert from changing metadata format when lvmetad is used.
  - Don't do a full read of VG when creating a new VG with an existing name.
  - Reduce amount of VG metadata parsing when looking for vgname on a PV.
  - Avoid reparsing same metadata when reading same metadata from multiple PVs.
  - Save extra device open/close when scanning device for size.
  - Fix seg_monitor field to report status also for mirrors and thick snapshots.
  - Replace LVM_WRITE with LVM_WRITE_LOCKED flags in metadata if system ID is set.
  - Preserve original format type field when processing backup files.
  - Implement status action for lvm2-monitor initscript to display monitored LVs.
  - Allow lvchange -p to change kernel state only if metadata state differs.
  - Fix incorrect persistent .cache after report with label fields only (2.02.106).
  - Reinstate PV tag recognition for pvs if reporting label fields only (2.02.105).
  - Rescan devices before vgimport with lvmetad so exported VG is seen.
  - Fix hang by adjusting cluster mirror regionsize, avoiding CPG msg limit.
  - Do not crash when --cachepolicy is given without --cachesettings.
  - Add NEEDS_FOREIGN_VGS flag to vgimport so --foreign is always supplied.
  - Add --foreign to the 6 display and reporting tools and vgcfgbackup.
  - Install /etc/lvm/lvmlocal.conf template with local section for systemid.
  - Record creation_host_system_id in lvm2 metadata (never set yet).
  - Reinstate recursive config file tag section processing. (2.02.99)
  - Add 'lvm systemid' to display the current system ID (never set yet).
  - Fix configure to properly recognize --with-default-raid10-segtype option.
  - Do not refresh filters/rescan if no signature is wiped during pvcreate.
  - Enforce none external dev info for wiping during pvcreate to avoid races.
  - Add global/system_id_source and system_id_file to lvm.conf (disabled).
  - Add support for VG system_id to control host access to VGs.
  - Update vgextend to use process_each_vg.
  - Add --ignoreskippedcluster to pvchange.
  - Allow pvchange to modify several properties at once.
  - Update pvchange to use process_each_pv.
  - Fix pvs -a used with lvmetad to filter out devices unsuitable for PVs.
  - Fix selection to recognize units for ba_start, vg_free and seg_start fields.
  - Add support for -S/--select to vgexport and vgimport.
  - Add support for -S/--select to vgdisplay, lvdisplay and pvdisplay without -C.
  - Add support for -S/--select to vgremove and lvremove.
  - Add support for -S/--select to vgchange,lvchange and pvchange.
  - Add infrastructure to support selection for non-reporting tools.
  - Add LVM_COMMAND_PROFILE env var to set default command profile name to use.
  - Set CLOEXEC flag on file descriptors originating in libdaemon.
  - Add dm_report_object_is_selected for generalized interface for report/select.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.119-1
changelog:
  - New lvm2-python3-libs subpackage to provide Python 3 bindings for LVM2.
  - New LVM_LOG_FILE_EPOCH, LVM_EXPECTED_EXIT_STATUS env vars. Man page to follow.
  - Remove detailed content from lvm.conf man page: use lvmconfig instead.
  - Generate complete config files with lvmconfig or 'make generate'.
  - Also display info on deprecated config with lvmconfig --withcomments.
  - Display version since which config is deprecated in lvmconfig --withversions.
  - Add --showdeprecated to lvmconfig to also display deprecated settings.
  - Hide deprecated settings in lvmconfig output for all types but current,diff.
  - Introduce support for exit on idle feature in libdaemon
  - Add --showunsupported to lvmconfig to also display unsupported settings.
  - Display unsupported settings for lvmconfig --type current,diff only by default
  - Honour lvmconfig --ignoreunsupported and --ignoreadvanced for all --type.
  - Make python bindings usable with python3 (and compatible with 2.6 & 2.7).
  - Add lvmconfig -l|--list as shortcut for lvmconfig --type list --withsummary.
  - Add lvmconfig --type list to display plain list of configuration settings.
  - Introduce lvmconfig as the preferred form of 'lvm dumpconfig'.
  - Add lv_ancestors and lv_descendants reporting fields.
  - Add --ignorelocal option to dumpconfig to ignore the local section.
  - Close connection to lvmetad after fork.
  - Make lvchange able to resume background pvmove polling again.
  - Split pvmove update metadata fn in an initial one and a subsequent one.
  - Refactor shared pvmove and lvconvert code into new _poll files.
  - Add --unconfigured option to dumpconfig to print strings unconfigured.
  - Add --withsummary option to dumpconfig to print first line - summary comment.
  - Use number of device holders to help choose between duplicate PVs.
  - Try to make lvmetad and non-lvmetad duplicate PV handling as similar as poss.
  - Issue warnings about duplicate PVs discovered by lvmetad.
  - Track alternative devices with matching PVIDs in lvmetad.
  - Check for lvm binary in blkdeactivate and skip LVM processing if not present.
  - Add --enable-halvm and --disable-halvm options to lvmconf script.
  - Add --services, --mirrorservice and --startstopservices option to lvmconf.
  - Use proper default value of global/use_lvmetad when processing lvmconf script.
  - Respect allocation/cling_tag_list during intial contiguous allocation.
  - Make changes persist with python addTag/removeTag.
  - Set correct vgid when updating cache when writing PV metadata.
  - More efficient clvmd singlenode locking emulation.
  - Reject lvcreate -m with raid4/5/6 to avoid unexpected layout.
  - Don't skip invalidation of cached orphans if vg write lck is held (2.02.118).
  - Log relevant PV tags when using cling allocation.
  - Fix selection to not match if using reserved value in criteria with >,<,>=,<.
  - Fix selection to not match reserved values for size fields if using >,<,>=,<.
  - Include uuid or device number in log message after ioctl failure.
  - Add DM_INTERNAL_SUSPEND_FLAG to dm-ioctl.h.
  - Move blkdeactivate script from lvm2 package to device-mapper subpackage.
  - Install blkdeactivate script and its man page with make install_device-mapper.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.120-1
changelog:
  - Enable and use lvmpolld - the LVM polling daemon by default.
  - Add Requires: fedora-release>=23-0.13 for lvmpolld to be enabled by default.
  - Make various adjustments to Makefile compilation flags.
  - Add lvmpolld debug message class.
  - Add lvmpolld client mode for querying running server instance for status info.
  - Fix some libdaemon socket creation and reuse error paths.
  - Daemons (libdaemon) support exit on idle also in non-systemd environment.
  - Provide make dist and make rpm targets
  - Configure lvm.conf for use_lvmetad and use_lvmpolld.
  - Add lvpoll for cmdline communication with lvmpolld.
  - Add lvmpolld acting as a free-standing version of polldaemon.
  - Avoid repeated identical lvmetad VG lookups in commands processing all VGs. 
  - Handle switches to alternative duplicate PVs efficiently with lvmetad.
  - Properly validate PV size for pvcreate --restorefile.
  - Fix check if pvcreate wiped device (2.02.117).
  - Fix storing of vgid when caching metadata (2.02.118).
  - Fix recursive lvm-config man page. (2.02.119)
  - Refactor polldaemon interfaces to poll every operation by VG/LV couple
  - Skip wait after testing in _wait_for_single_lv when polling finished
  - Return 'None' in python for empty string properties instead of crashing.
  - Distinguish signed numerical property type in reports for lvm2app library.
  - Reread raid completion status immediately when progress appears to be zero.
  - lvm2app closes locking on lvm_quit().
  - Configure detects /run or /var/run.
  - Add missing newline in clvmd --help output.
  - New dm_task_get_info(DM_1_02_97) supports internal_suspend state.
  - New symbols are versioned and comes with versioned symbol name (DM_1_02_97).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.122-1
changelog:
  - Flush stdout before printing to stderr.
  - Use pre-allocated buffer for printed LV names in display_lvname.
  - Support thins with size of external origin unaligned with thin pool chunk.
  - Allow extension of reduced thin volumes with external origins.
  - Consider snapshot and origin LV as unusable if component devices suspended.
  - Fix lvmconfig segfault on settings with undefined default value (2.02.120).
  - Add explicit 's' (shared) LV activation mode.
  - Ignore hyphens in long options names (i.e. --long-option == --longoption).
  - Distinguish between on-disk and lvmetad versions of text metadata.
  - Remove DL_LIBS from Makefiles for daemons that don't need them.
  - Zero errno in before strtoul call in dmsetup if tested after the call.
  - Zero errno in before strtoul call in lvmpolld.
  - Fix a segfault in pvscan --cache --background command.
  - Fix test for AREA_PV when checking for failed mirrors.
  - Do not use --sysinit in lvm2-activation{-early,-net}.service if lvmpolld used.
  - Maintain outdated PV info in lvmetad till all old metadata is gone from disk.
  - Do not fail polling when poll LV not found (already finished or removed).
  - Replace poll_get_copy_vg/lv fns with vg_read() and find_lv() in polldaemon.
  - Close all device fds only in before sleep call in polldaemon.
  - Simplify Makefile targets that generate exported symbols.
  - Move various -D settings from Makefiles to configure.h.
  - New dm_tree_node_set_thin_pool_read_only(DM_1_02_99) for read-only thin pool.
  - Enhance error message when thin-pool message fails.
  - Fix dmeventd logging to avoid threaded use of static variable.
  - Remove redundant dmeventd SIGALRM coded.
  - Add dm_task_get_errno() to return any unexpected errno from a dm ioctl call.
  - Use copy of errno made after each dm ioctl call in case errno changes later.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.123-1
changelog:
  - Add report/time_format lvm.conf option to define time format for report.
  - Fix makefile shell compare == when building lvmetad lvmpolld (2.02.120).
  - Add --type full to lvmconfig for full configuration tree view.
  - Add undocumented environment variables to lvm man page. (2.02.119)
  - Add device synchronization point before activating a new snapshot.
  - Add --withspaces to lvmconfig to add spaces in output for better readability.
  - Add custom main function to libdaemon.
  - Use lvmetad to track out-of-date metadata discovered.
  - Fix makefile shell compare == when building lvmetad lvmpolld (2.02.120).
  - Add --type full to lvmconfig for full configuration tree view.
  - Add undocumented environment variables to lvm man page. (2.02.119)
  - Add device synchronization point before activating a new snapshot.
  - Add --withspaces to lvmconfig to add spaces in output for better readability.
  - Add custom main function to libdaemon.
  - Use lvmetad to track out-of-date metadata discovered.
  - Add since, after, until and before time operators to be used in selection.
  - Add support for time in reports and selection: DM_REPORT_FIELD_TYPE_TIME.
  - Support report reserved value ranges: DM_REPORT_FIELD_RESERVED_VALUE_RANGE.
  - Support report reserved value names: DM_REPORT_FIELD_RESERVED_VALUE_NAMED.
  - Add DM_CONFIG_VALUE_FMT_{INT_OCTAL,STRING_NO_QUOTES} config value format flag.
  - Add DM_CONFIG_VALUE_FMT_COMMON_{ARRAY,EXTRA_SPACE} config value format flag.
  - Add dm_config_value_{get,set}_format_flags to get and set config value format.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.124-1
changelog:
  - Move sending thin pool messages from resume to suspend phase.
  - Report warning when pool is overprovisioned and not auto resized.
  - Recognize free-form date/time values for lv_time field in selection criteria.
  - Added experimental lvmlockd with configure --enable-lvmlockd.
  - Fix regression in select to match string fields if using synonyms (2.02.123).
  - Fix regression when printing more lv names via display_lvname (2.02.122).
  - Add missing error logging to unlock_vg and sync_local_dev_names callers.
  - Add experimental support to passing messages in suspend tree.
  - Add dm_report_value_cache_{set,get} to support caching during report/select.
  - Add dm_report_reserved_handler to handle report reserved value actions.
  - Support dynamic value in select: DM_REPORT_FIELD_RESERVED_VALUE_DYNAMIC_VALUE.
  - Support fuzzy names in select: DM_REPORT_FIELD_RESERVED_VALUE_FUZZY_NAMES.
  - Thin pool trace messages show a device name and major:minor.
  - Add new lvm2-lockd subpackage with lvmlockd daemon.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.125-1
changelog:
  - Fix getline memory usage in lvmpolld.
  - Add support --clear-needs-check-flag for cache_check of cache pool metadata.
  - Add lvmetactl for developer use only.
  - Rename global/lock_retries to lvmlockd_retries.
  - Replace --enable-lvmlockd by --enable-lockd-sanlock and --enable-lockd-dlm.
  - Include tool.h for default non-library use.
  - Introduce format macros with embedded % such as FMTu64.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.125-2
changelog:
  - Add Requires: system-release>=23 for lvmpolld to be enabled by default
    instead of original Requires: fedora-release which may break installations
    in environments where fedora-release is not available.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.126-2
changelog:
  - Fix long option hyphen removal. (2.02.122)
  - Fix clvmd freeze if client disappears without first releasing its locks.
  - Fix lvconvert segfaults while performing snapshots merge.
  - Ignore errors during detection if use_blkid_wiping=1 and --force is used.
  - Recognise DM_ABORT_ON_INTERNAL_ERRORS env var override in lvm logging fn.
  - Fix alloc segfault when extending LV with fewer stripes than in first seg.
  - Fix handling of cache policy name.
  - Set cache policy before with the first lvm2 cache pool metadata commit.
  - Fix detection of thin-pool overprovisioning (2.02.124).
  - Fix lvmpolld segfaults on 32 bit architectures.
  - Add lvmlockd lock_args validation to vg_validate.
  - Fix ignored --startstopservices option if running lvmconf with systemd.
  - Hide sanlock LVs when processing LVs in VG unless named or --all used.
  - Introduce libdevmapper wrappers for all malloc-related functions.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.127-1
changelog:
  - Do not init filters, locking, lvmetad, lvmpolld if command doesn't use it.
  - Order fields in struct cmd_context more logically.
  - Add lock_type to lvmcache VG summary and info structs.
  - Fix regression in cache causing some PVs to bypass filters (2.02.105).
  - Make configure --enable-realtime the default now. 
  - Add dmstats.8 man page
  - Add dmstats --segments switch to create one region per device segment.
  - Add dmstats --regionid, --allregions to specify a single / all stats regions.
  - Add dmstats --allprograms for stats commands that filter by program ID.
  - Add dmstats --auxdata and --programid args to specify aux data and program ID.
  - Add report stats sub-command to provide repeating stats reports.
  - Add clear, delete, list, and print stats sub-commands.
  - Add create stats sub-command and --start, --length, --areas and --areasize.
  - Recognize 'dmstats' as an alias for 'dmsetup stats' when run with this name.
  - Add a 'stats' command to dmsetup to configure, manage and report stats data.
  - Add statistics fields to dmsetup -o.
  - Add libdm-stats library to allow management of device-mapper statistics.
  - Add --nosuffix to suppress dmsetup unit suffixes in report output.
  - Add --units to control dmsetup report field output units.
  - Add support to redisplay column headings for repeating column reports.
  - Fix report header and row resource leaks.
  - Report timestamps of ioctls with dmsetup -vvv.
  - Recognize report field name variants without any underscores too.
  - Add dmsetup --interval and --count to repeat reports at specified intervals.
  - Add dm_timestamp functions to libdevmapper.
  - Recognise vg/lv name format in dmsetup.
  - Move size display code to libdevmapper as dm_size_to_string.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.128-1
changelog:
  - Allocation setting cache_pool_cachemode is replaced by cache_mode.
  - Don't attempt to close config file that couldn't be opened.
  - Check for valid cache mode in validation of cache segment.
  - Change internal interface handling cache mode and policy.
  - When no cache policy specified, prefer smq (if available) over mq.
  - Add demo cache-mq and cache-smq profiles.
  - Add cmd profilable allocation/cache_policy,cache_settings,cache_mode.
  - Require cache_check 0.5.4 for use of --clear-needs-check-flag.
  - Fix lvmetad udev rules to not override SYSTEMD_WANTS, add the service instead.
  - Fix 'dmstats list -o all' segfault.
  - Separate dmstats statistics fields from region information fields.
  - Add interval and interval_ns fields to dmstats reports.
  - Do not include internal glibc headers in libdm-timestamp.c (1.02.104)
  - Exit immediately if no device is supplied to dmsetup wipe_table.
  - Suppress dmsetup report headings when no data is output. (1.02.104)
  - Adjust dmsetup usage/help output selection to match command invoked.
  - Fix dmsetup -o all to select correct fields in splitname report.
  - Restructure internal dmsetup argument handling across all commands.
  - Add dm_report_is_empty() to indicate there is no data awaiting output.
  - Add more arg validation for dm_tree_node_add_cache_target().
  - Add --alldevices switch to replace use of --force for stats create / delete.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.129-1
changelog:
  - Drop error message when vgdisplay encounters an exported VG. (2.02.27)
  - Fix shared library generation to stop exporting internal functions.(2.02.120)
  - Accept --cachemode with lvconvert.
  - Fix and improve reporting properties of cache-pool.
  - Enable usage of --cachepolicy and --cachesetting with lvconvert.
  - Don't allow to reduce size of thin-pool metadata.
  - Fix debug buffer overflows in cmirrord logging.
  - Add --foreground and --help to cmirrord.
  - Add 'precise' column to statistics reports.
  - Add --precise switch to 'dmstats create' to request nanosecond counters.
  - Add precise argument to dm_stats_create_region().
  - Add support to libdm-stats for precise_timestamps
  - Fix devmapper.pc pkgconfig file to declare -lrt dependency properly.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.130-1
changelog:
  - Fix use of uninitialized device status if reading outdated .cache record.
  - Restore support for --monitor option in lvcreate (2.02.112).
  - Read thin-pool data and metadata percent without flush.
  - Detect blocked thin-pool and avoid scanning their thin volumes.
  - Check if dm device is usable before checking its size (2.02.116).
  - Extend parsing of cache_check version in configure.
  - Make lvpoll error messages visible in lvmpolld's stderr and in syslog.
  - Add 'make install_full_man' to install all man pages regardless of config.
  - Parse thin-pool status with one single routine internally.
  - Add --histogram to select default histogram fields for list and report.
  - Add report fields for displaying latency histogram configuration and data.
  - Add dmstats --bounds to specify histogram boundaries for a new region.
  - Add dm_histogram_to_string() to format histogram data in string form.
  - Add public methods to libdm to access numerical histogram config and data.
  - Parse and store histogram data in dm_stats_list() and dm_stats_populate().
  - Add an argument to specify histogram bounds to dm_stats_create_region().
  - Add dm_histogram_bounds_from_{string,uint64_t}() to parse histogram bounds.
  - Add dm_histogram handle type to represent a latency histogram and its bounds.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.131-1
changelog:
  - Fix PV label processing failure after pvcreate in lvm shell with lvmetad.
  - Rename 'make install_full_man' to install_all_man and add all_man target.
  - Fix vgimportclone cache_dir path name (2.02.115).
  - Swapping of LV identifiers handles more complex LVs.
  - Use passed list of PVS when allocating space in lvconvert --thinpool.
  - Disallow usage of --stripe and --stripesize when creating cache pool.
  - Warn user when caching raid or thin pool data LV.
  - When layering LV, move LV flags with segments.
  - Ignore persistent cache if configuration changed. (2.02.127)
  - Fix devices/filter to be applied before disk-accessing filters. (2.02.112)
  - Make tags only when requested via 'make tags'.
  - Configure supports --disable-dependency-tracking for one-time builds.
  - Fix usage of configure.h when building in srcdir != builddir.
  - Do not check for full thin pool when activating without messages (1.02.107).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.132-1
changelog:
  - Fix lvmconf to set locking_type=2 if external locking library is requested.
  - Remove verbose message when rescanning an unchanged device. (2.02.119)
  - Add origin_uuid, mirror_log_uuid, move_pv_uuid, convert_lv_uuid report fields.
  - Add pool_lv_uuid, metadata_lv_uuid, data_lv_uuid reporting fields.
  - Fix PV label processing failure after pvcreate in lvm shell with lvmetad.
  - Update man pages for dmsetup and dmstats.
  - Improve help text for dmsetup.
  - Use --noflush and --nolockfs when removing device with --force.
  - Parse new Overflow status string for snapshot target.
  - Check dir path components are valid if using dm_create_dir, error out if not.
  - Fix /dev/mapper handling to remove dangling entries if symlinks are found.
  - Make it possible to use blank value as selection for string list report field.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.133-1
changelog:
  - Support repeated -o|--options for reporting commands.
  - Support -o- and -o# for reporting commands to remove and compact fields.
  - Fix missing PVs from pvs output if vgremove is run concurrently.
  - Remove unwanted error message when running pvs/vgs/lvs and vgremove at once.
  - Check newly created VG's metadata do not overlap in metadata ring buffer.
  - Check metadata area size is at least the minimum size defined for the format.
  - Thin pool targets uses low_water_mark from profile.
  - Dropping 'yet' from error of unsupported thick snapshot of snapshots.
  - Do not support unpartitioned DASD devices with CDL formatted with pvcreate.
  - For thins use flush for suspend only when volume size is reduced.
  - Enable code which detects the need of flush during suspend.
  - Ensure --use-policy will resize volume to fit below threshold.
  - Correct percentage evaluation when checking thin-pool over threshold.
  - Fix lvmcache to move PV from VG to orphans if VG is removed and lvmetad used.
  - Fix lvmcache to not cache even invalid info about PV which got removed.
  - Support checking of memlock daemon counter.
  - Allow all log levels to be used with the lvmetad -l option.
  - Add optional shutdown when idle support for lvmetad.
  - Fix missing in-sync progress info while lvconvert used with lvmpolld.
  - Add report/compact_output_cols to lvm.conf to define report cols to compact.
  - Do not change logging in lvm2 library when it's already set.
  - Check for enough space in thin-pool in command before creating new thin.
  - Make libblkid detect all copies of the same signature if use_blkid_wiping=1.
  - Fix vgimportclone with -n to not add number unnecessarily to base VG name.
  - Cleanup vgimportclone script and remove dependency on awk, grep, cut and tr.
  - Add vg_missing_pv_count report field to report number of missing PVs in a VG.
  - Properly identify internal LV holding sanlock locks within lv_role field.
  - Add metadata_devices and seg_metadata_le_ranges report fields for raid vols.
  - Fix lvm2-{activation,clvmd,cmirrord,monitor} service to exec before mounting.
  - Disable thin monitoring plugin when it fails too often (>10 times).
  - Fix/restore parsing of empty field '-' when processing dmeventd event.
  - Enhance dm_tree_node_size_changed() to recognize size reduction.
  - Support exit on idle for dmenventd (1 hour).
  - Add support to allow unmonitor device from plugin itself.
  - New design for thread co-operation in dmeventd.
  - Dmeventd read device status with 'noflush'.
  - Dmeventd closes control device when no device is monitored.
  - Thin plugin for dmeventd improved percentage usage.
  - Snapshot plugin for dmeventd improved percentage usage.
  - Add dm_hold_control_dev to allow holding of control device open.
  - Add dm_report_compact_given_fields to remove given empty fields from report.
  - Use libdm status parsing and local mem raid dmeventd plugin.
  - Use local mem pool and lock only lvm2 execution for mirror dmeventd plugin.
  - Lock protect only lvm2 execution for snapshot and thin dmeventd plugin.
  - Use local mempool for raid and mirror plugins.
  - Reworked thread initialization for dmeventd plugins.
  - Dmeventd handles snapshot overflow for now equally as invalid.
  - Convert dmeventd to use common logging macro system from libdm.
  - Return -ENOMEM when device registration fails instead of 0 (=success).
  - Enforce writethrough mode for cleaner policy.
  - Add support for recognition and deactivation of MD devices to blkdeactivate.
  - Move target status functions out of libdm-deptree.
  - Correct use of max_write_behind parameter when generating raid target line.
  - Fix dm-event systemd service to make sure it is executed before mounting.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.134-4
changelog:
  - Refactor some lvmetad code and adjust some duplicate PV messages.
  - No longer repair/wipe VG/PVs if inaccessible because foreign or shared.
  - Pass correct data size to mirror log calc so log can be bigger than 1 extent.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.135-1
changelog:
  - Add a model file for Coverity.
  - Show correct error message for unsupported yet cache pool repair.
  - Allow lvconvert cache pools' data and metadata LV to raid.
  - Fix reading of old metadata with missing cache policy or mode settings.
  - Issue error if external_device_info_source=udev and udev db record incomplete.
  - Update lvmetad duplicate VG name handling to use hash function extensions.
  - Detect invalid vgrenames by vgid where the name is unchanged.
  - Fix passing of 32bit values through daemons (mostly lvmlockd).
  - Use local memory pool for whole alloc_handle manipulation.
  - Add missing pointer validation after dm_get_next_target().
  - Do not deref NULL pointer in debug message for _match_pv_tags().
  - Drop unneeded stat() call when checking for sysfs file.
  - Fix memory leak on error path of failing thin-pool percentage check.
  - Add missing test for failing node allocation in lvmetad.
  - Correct configure messages when enabling/disabling lvmlockd.
  - Extend dm_hash to support multiple values with the same key.
  - Add missing check for allocation inside dm_split_lvm_name().
  - Test dm_task_get_message_response for !NULL in dm_stats_print_region().
  - Add checks for failing dm_stats_create() in dmsetup.
  - Add missing fifo close when failed to initialize client connection.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.136-1
changelog:
  - Add new --sinceversion option for lvmconfig --type new.
  - Fix inactive table loaded for wrapping thin-pool when resizing it.
  - Extend the list of ignored libraries when locking memory.
  - Show error message when trying to create unsupported raid type.
  - Improve preloading sequence of an active thin-pool target.
  - Drop extra space from cache target line to fix unneded table reloads.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.137-1
changelog:
  - Restore archiving before changing metadata in vgextend (2.02.117).
  - Dropped internal usage of log_suppress(2).
  - Cleaned logging code for buffer size usage.
  - Added internal id_read_format_try() function to check and read valid UUID.
  - Change lvcreate, lvrename, lvresize to use process_each_vg.
  - Change process_each_vg to handle single VG as separate arg.
  - Issue error if ambiguous VG name is supplied in most commands.
  - Make process_each fns always work through full list of known VG names.
  - Use dm_get_status_mirror() instead of individual parsers.
  - Add mem pool arg for check_transient_status() target function.
  - Avoid misleading error with -m is omitted with lvconvert to raid types.
  - Add system_id to vginfo cache.
  - Mirror plugin in dmeventd uses dm_get_status_mirror().
  - Add dm_get_status_mirror() for parsing mirror status line.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.138-1
changelog:
  - Support lvrename for hidden (used) cache pools.
  - Fix lvrename for stacked cache pools
  - Better support for dmsetup static linkage.
  - Extend validity checks on dmeventd client socket.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.139-2
changelog:
  - Update lvmlockd with the new VG seqno before devices are suspended.
  - Rework vgrename to use the common processing code in toollib.
  - Make pvs show new devices on the system since the last .cache update.
  - Document F,D and M thin pool health status chars for lv_attr in lvs man page.
  - Also add lvm2-activation{-early,-net}.service systemd status for lvmdump -s.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.140-3
changelog:
  - Fix lvm2app to return either 0 or 1 for lvm_vg_is_{clustered,exported}.
  - Add kernel_discards report field to display thin pool discard used in kernel.
  - Correct checking of target presence when driver access is disabled.
  - Eval poolmetadatasize arg earlier in lvresize.
  - Fix vgcfgrestore to respect allocatable attribute of PVs.
  - Add report/mark_hidden_devices to lvm.conf.
  - Use brackets consistently in report fields to mark hidden devices.
  - Restore background polling processing during auto-activation (2.02.119).
  - Fix invalid memory read when reporting cache LV policy_name (2.02.126).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.141-1
changelog:
  - Add metadata/check_pv_device_sizes switch to lvm.conf for device size checks.
  - Warn if device size is less than corresponding PV size in metadata.
  - Cache device sizes internally.
  - Restore support for command breaking in process_each_lv_in_vg() (2.02.118).
  - Use correct mempool when process_each_lv_in_vg() (2.02.118).
  - Fix lvm.8 man to show again prohibited suffixes.
  - Fix configure to set proper use_blkid_wiping if autodetected as disabled.
  - Initialise udev in clvmd for use in device scanning. (2.02.116)
  - Add seg_le_ranges report field for common format when displaying seg devices.
  - Honour report/list_item_separator for seg_metadata_le_ranges report field.
  - Don't mark hidden devs in -o devices,metadata_devices,seg_pe_ranges.(2.02.140)
  - Change LV sizes in seg_pe_ranges report field to match underlying devices.
  - Add kernel_cache_settings report field for cache LV settings used in kernel.
  - Fix man page for dmsetup udevcreatecookie.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.142-1
changelog:
  - Fix memory pool corruption in pvmove (2.02.141).
  - Support control of spare metadata creation when repairing thin-pool.
  - Fix config type of 'log/verbose' from bool to int (2.02.99).
  - Fix inverted data LV thinp watermark calc for dmeventd response (2.02.133).
  - Use use_blkid_wiping=0 if not defined in lvm.conf and support not compiled in.
  - Do not check for suspended devices if scanning for lvmetad update.
  - Clear cached bootloader areas when PV format changed.
  - Fix partn table filter with external_device_info_source="udev" and blkid<2.20.
  - Use fully aligned allocations for dm_pool_strdup/strndup() (1.02.64).
  - Fix thin-pool table parameter feature order to match kernel output.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-1
changelog:
  - Introduce new lvm2-dbusd package providing LVM D-Bus daemon and service.
  - Fix error path when sending thin-pool message fails in update_pool_lv().
  - Support reporting CheckNeeded and Fail state for thin-pool and thin LV.
  - For failing thin-pool and thin volume correctly report percentage as INVALID.
  - Report -1, not 'unkown' for lv_{snapshot_invalid,merge_failed} with --binary.
  - Add configure --enable-dbus-service for an LVM D-Bus service.
  - Replace configure --enable-python_bindings with python2 and python3 versions.
  - If PV belongs to some VG and metadata missing, skip it if system ID is used.
  - Automatically change PV header extension to latest version if writing PV/VG.
  - Identify used PVs in pv_attr field by new 'u' character.
  - Add pv_in_use reporting field to report if PV is used or not.
  - Add pv_ext_vsn reporting field to report PV header extension version.
  - Add protective flag marking PVs as used even if no metadata available.
  - Improve status parsing for thin-pool and thin devices.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.143-2
changelog:
  - Add Requires: python3-gobject dependency for lvm2-dbusd subpackage.
  - Build lvm2-lockd with sanlock support only on x86_64, arch64 and power64 arch.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.144-1
changelog:
  - Only show (u)sed pv_attr char when PV is not (a)llocatable. (2.02.143)
  - Update makefile to generate lcov output also for lvmpolld and lvmlockd.
  - Fix SystemdService lvm2-lvmdbusd.service name.
  - Improve support for env LVM_VG_NAME for reference VG name in lvconvert.
  - Fix regression when lvresize accepted zero sizes. (2.02.141)
  - Always warn user about PV in use even when pvremove uses --force --force.
  - Use uninitialized pool header detection in all cases.
  - Fix read error detection when checking for uninitialized thin-pool header.
  - Fix error path for internal error in lvmetad VG lookup code.
  - Fix string boundary check in _get_canonical_field_name().
  - Always initialized hist struct in _stats_parse_histogram().


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.145-1
changelog:
  - Make it possible to use lvremove and lvrename on historical LVs.
  - For historical LVs, report 'none' for lv_layout and 'history' for lv_role.
  - Add full_{ancestors,descendants} fields to report LV ancestry with history.
  - Report (h)istorical state within 5th bit (State) of the lv_attr field.
  - Add lv_historical reporting field to report if LV is historical or not.
  - Add lv_time_removed reporting field to display removal time for hist. LVs.
  - Report lv_name, lv_uuid, vg_name, lv_time for historical LVs.
  - Add --nohistory switch to lvremove to disable history recording on demand.
  - Add -H|--history switch to lvs and lvdisplay to include historical LVs.
  - Create historical LVs out of removed thin snapshot LVs and record in history.
  - Add metadata/lvs_history_retention_time for automatic removal of hist. LVs.
  - Add metadata/record_lvs_history config for switching LV history recording.
  - Add support and infrastructure for tracking historical LVs.
  - Improve lvconvert man page.
  - Add kernel_cache_policy lvs field.
  - Display [unknown] instead of 'unknown device' in pvs output.
  - Fix error path when pvcreate allocation fails (2.02.144).
  - Display [unknown] instead of blank for unknown VG names in pvs output.
  - Fix dm_config_write_node and variants to return error on subsection failures.
  - Remove 4096 char limit due to buffer size if writing dm_config_node.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.146-3
changelog:
  - Tidy report field names, headings and widths.
  - Add vgscan --notifydbus to send a dbus notification.
  - Add dbus notification from commands after a PV/VG/LV changes state.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.146-4
changelog:
  - More man page cleanups in lvconvert.
  - Fix makefile vpath in /udev when generating udev rules files.
  - Another attempt to improve VG name parsing for lvconvert (2.02.144).
  - Use new cache status info and skip flushing for failed cache.
  - Support --uncache with missing PVs.
  - Improve parsing of cache status and report Fail, Error, needs_check, ro.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.147-5
changelog:
  - If available, use /proc/self/mountinfo to detect mounted volume in fsadm.
  - Fix resize of stacked raid thin data volume (2.02.141).
  - Fix test for lvremove failure in lvconvert --uncache (2.02.146).


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.148-1
changelog:
  - Introduce TARGET_NAME and MODULE NAME macros.
  - Replace hard-coded module and target names with macros.
  - Add pv_major and pv_minor report fields.
  - Detect and warn about mismatch between devices used and assumed for an LV.
  - Adjust raid status function.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.149-2
changelog:
  - Do not flush thin-pool when checking metadata fullness.
  - Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
  - Fix device mismatch detection for LV if persistent .cache file is used.
  - Fix holder device not being found in /dev while sysfs has it during dev scan.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.150-1
changelog:
  - Avoid using flushing dm status ioctl when checking for usable DM device.
  - Check for devices without LVM- uuid prefix only with kernels < 3.X.
  - Reuse %FREE size aproximation with lvcreate -l%PVS thin-pool.
  - Allow the lvmdump directory to exist already provided it is empty.
  - Show lvconverted percentage with 2 decimal digits.
  - Fix regression in suspend when repairing --type mirror (2.02.133).
  - Change log_debug ioctl flags from single characters into words.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.151-1
changelog:
  - Fix error path after reusing of _setup_task (2.02.150).
  - Fix memory access for empty sysfs values (2.02.149).
  - Disable lvmetad when lvm1 metadata is seen, so commands revert to scanning.
  - Suppress errors when snapshot merge gets delayed because volume is in use.
  - Avoid internal snapshot LV names in messages.
  - Autodetect and use /run/lock dir when available instead of /var/lock.
  - lvchange --refresh for merging thin origin will retry to deactivate snapshot.
  - Recognize in-progress snapshot merge for thin volumes from dm table.
  - Avoid deciding to initiate a pending snapshot merge during resume.
  - Improve retrying lvmetad requests while lvmetad is being updated.
  - Read devices instead of using the lvmetad cache if rescan fails.
  - Move lvmetad token/filter check and device rescan to the start of commands.
  - Don't try deactivating fictional internal LV before snapshot merge. (2.02.105)
  - When not obtaining devs from udev, check they exist before caching them.
  - Detect device mismatch also when compiling without udev support.
  - Do not strip LVM- when debug reporting not found uuid.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.152-1
changelog:
  - Use any inherited tags when wiping metadata sub LVs to ensure activation.
  - Add str_list_wipe.
  - Improve support for interrupting procesing of volumes during lvchange.
  - Use failed command return code when lvchanging read-only volume.
  - Show creation transaction_id and zeroing state of pool with thin volume.
  - Stop checking for dm_cache_mq policy with cache target 1.9 (alias to smq).
  - Check first /sys/module/dm_* dir existance before using modprobe.
  - Remove mpath from 10-dm.rules, superseded by 11-dm-mpath.rules (mpath>=0.6.0).
  - Add dm_udev_wait_immediate to libdevmapper for waiting outside the library.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.153-2
changelog:
  - Change warning messages related to duplicate PVs.
  - A named device is always processed itself, not switched for a duplicate.
  - Add PV attr "d" and report field "duplicate" for duplicate PVs.
  - Add config setting to disallow VG changes when duplicate PVs exist.
  - Use device size and active LVs to choose the preferred duplicate PV.
  - Disable lvmetad when duplicate PVs are seen.
  - Support --chunksize option also when caching LV when possible.
  - Add function to check for target presence and version via 1 ioctl.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.154-1
changelog:
  - Fix liblvm segfault after failure initialising lvmetad connection.
  - Retry open without O_NOATIME if it fails (not file owner/CAP_FOWNER).
  - Split _report into one fn for options and arguments and one for processing.
  - Show library version in message even if dm driver version is unavailable.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.155-1
changelog:
  - Reject PV tags on pvmove cmdline because only 1 PV is supported. (2.02.141)
  - Fix compilation error when building with configure --disable-devmapper.
  - Fix lvmconfig --type diff to display complete diff if config cascade used.
  - Automatically filter out partitioned loop devices with partscan (losetup -P).
  - Fix lvm devtypes internal error if -S used with field name from pvs/vgs/lvs.
  - When reporting Data%,Snap%,Meta%,Cpy%Sync use single ioctl per LV.
  - Add lvseg_percent_with_info_and_seg_status() for percent retrieval.
  - Enhance internal seg_status handling to understand snapshots better.
  - When refresh failed in suspend, call resume upon error path.
  - Support passthrough cache mode when waiting for clean cache.
  - Check cache status only for 'in-use' cache pools.
  - Extend setup_task() to preset flushing for dm_task object.
  - When checking LV is a merging COW, validate its a COW LV first.
  - Correcting value in copy_percent() for 100%.
  - Update vgreduce to use process_each_vg.
  - Update lvconvert to use process_each_lv.
  - Update pvscan to use process_each_vg for autoactivation.
  - Add basic support for --type raid0 using md.
  - Add support for lvchange --cachemode for cached LV.
  - Fix liblvm2app error handling when setting up context.
  - Delay liblvm2app init in python code until it is needed.
  - Simplify thread locking in lvmetad to fix locking problems.
  - Allow pvremove -ff to remove a duplicate PV.
  - Fix lvm2-activation-generator to read lvm.conf without full command setup.
  - Allow a minimal context to be used in lvm2app for reading lvm.conf.
  - Report passthrough caching mode when parsing cache mode.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.156-1
changelog:
  - Don't allow duplicate orphan PVs to be used with vgcreate/vgextend/pvcreate.
  - Improve handling of lvmetad update failures.
  - Yes/No prompt accepts '^[ ^t]*([Yy]([Ee]([Ss]|)|)|[Nn]([Oo]|))[ ^t]*$'.
  - If available, also collect output from lsblk command when running lvmdump -s.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.158-1
changelog:
  - Add a more efficient native vgimportclone command to replace the script.
  - Make lvmlockd always attempt to connect to lvmetad if no connection exists.
  - Let lvmetad handle new connections after shutdown signal.
  - Disable lvmetad when vgcfgrestore begins and enable it again after.
  - Make pvscan do activation if lvmetad is configured but not running.
  - Fix rescanning the PVs for a single VG when using lvmetad.
  - Pool metadata lvresize uses now same code as resize of normal volume.
  - Preserve monitoring status when updating thin-pool metadata.
  - Return 0 (inactive) when status cannot be queried in _lv_active().
  - Switch to log_warn() for failing activation status query.
  - Replace vgimportclone script with binary.
  - While lvmetad is shutting down, continue handling all connections cleanly.
  - Refactor lvconvert argument handling code.
  - Notify lvmetad when vgcfgrestore changes VG metadata.
  - Add --logonly option to report only cmd log for a command, not other reports.
  - Add log/command_log_selection to configure default selection used on cmd log. 
  - Use 'orphan' object type in cmd log for groups to collect PVs not yet in VGs. 
  - Add lvm lastlog command for query and display of last cmd's log in lvm shell.
  - Report per-object return codes via cmd log while processing multiple objects.
  - Annotate processing code with log report hooks for per-object command log. 
  - Also pass common printed messages (besides warnings and errors) to log report.
  - Log warnings and errors via report during cmd processing if this is enabled.
  - Make it possible to iterate over internal 'orphan' VGs in process_each_vg fn.
  - Make -S|--select option groupable that allows this option to be repeated.
  - Make -O|--sort option groupable that allows this option to be repeated.
  - Add --configreport option to select report for which next options are applied.
  - Add support for priorities on grouping command arguments.
  - Add report/{pvs,vgs,lvs,pvsegs,segs}_{cols,sort}_full to lvm.conf.
  - Add lvm fullreport command for joined PV, VG, LV and segment report per VG.
  - Integrate report group handling and cmd log report into cmd processing code.
  - Add log/report_command_log to lvm.conf to enable or disable cmd log report.
  - Add log/report_output_format to lvm.conf for default report output format.
  - Recognize --reportformat {basic|json} option to select report output format.
  - Add log/command_log_{sort,cols} to lvm.conf to configure command log report.
  - Add log_object_{type,name,id,group,group_id} fields to cmd log. 
  - Add log_{seq_num,type,context,message,errno,ret_code} fields to cmd log. 
  - Add CMDLOG report type - a separate report type for command logging.
  - Recognize 'all' keyword used in selection as synonym for "" (no selection).
  - Add dm_report_set_selection to set selection for multiple output of report.
  - Add DM_REPORT_OUTPUT_MULTIPLE_TIMES flag for multiple output of same report.
  - Move field width handling/sort init from dm_report_object to dm_report_output.
  - Add _LOG_BYPASS_REPORT flag for bypassing any log report currently set. 
  - Introduce DM_REPORT_GROUP_JSON for report group with JSON output format.
  - Introduce DM_REPORT_GROUP_BASIC for report group with basic report output.
  - Introduce DM_REPORT_GROUP_SINGLE for report group having single report only.
  - Add dm_report_group_{create,push,pop,destroy} to support report grouping.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.159-1
changelog:
  - Add raid0_meta segment type that provides metadata space for raid conversions.
  - Fix created link for a used pool for vgmknode.
  - Introduce and use is_power_of_2 macro.
  - Support conversions between striped and raid0 segment types.
  - Add infrastructure for raid takeover lvconvert options.
  - Update default dmstats field selections for groups.
  - Add 'obj_type', 'group_id', and 'statsname' fields to dmstats reports.
  - Add --area, --region, and --group to dmstats to control object selection.
  - Add --alias, --groupid, --regions to dmstats for group creation and deletion.
  - Add 'group' and 'ungroup' commands to dmstats.
  - Allow dm_stats_delete_group() to optionally delete all group members.
  - Add dm_stats_get_object_type() to return the type of object present.
  - Add dm_stats_walk_init() allowing control of objects visited by walks.
  - Add dm_stats_get_group_descriptor() to return the member list as a string.
  - Introduce dm_stats_get_nr_groups() and dm_stats_group_present().
  - Add dm_stats_{get,set}_alias() to set and retrieve alias names for groups.
  - Add dm_stats_get_group_id() to return the group ID for a given region.
  - Add dm_stats_{create,delete}_group() to allow grouping of stats regions.
  - Add enum-driven dm_stats_get_{metric,counter}() interfaces.
  - Add dm_bitset_parse_list() to parse a string representation of a bitset.
  - Thin dmeventd plugin umounts lvm2 volume only when pool is 95% or more.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.161-1
changelog:
  - Prohibit some lvchange/lvresize that were failing on raid0 volumes.
  - Fix segfaults in complex vgsplits. (2.02.159)
  - Reformat unwieldy lvconvert man page.
  - Allow --force to be passed through to pvcreate from vgcreate. (2.02.144)
  - Fix lvresize of filesystem when LV has already right size (2.02.141)
  - New LVM_LOG_FILE_MAX_LINES env var to limit max size of created logs.
  - Disable queueing on mpath devs in blk-availability systemd service/initscript.
  - Add new -m|--mpathoption disablequeueing to blkdeactivate.
  - Automatically group regions with 'create --segments' unless --nogroup.
  - Fix resource leak when deleting the first member of a group.
  - Allow --bounds with 'create --filemap' for dmstats.
  - Enable creation of filemap regions with histograms.
  - Enable histogram aggregation for regions with more than one area.
  - Enable histogram aggregation for groups of regions.
  - Add a --filemap option to 'dmstats create' to allow mapping of files.
  - Add dm_stats_create_regions_from_fd() to map file extents to regions.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.162-1
changelog:
  - Support lvconvert -Zn also when doing full cache pool conversion.
  - Suppress not zeroing warn when converting to thin LV for non-zeroing tpool.
  - Fix automatic updates of PV extension headers to newest version.
  - Improve lvconvert --trackchanges validation to require --splitmirrors 1.
  - Add note about lastlog built-in command to lvm man page.
  - Fix unrecognised segtype flag message.
  - lvconvert not clears cache pool metadata ONLY with -Zn. 
  - Enabled lvconvert --uncache to work with partial VG.
  - Fix json reporting to escape '"' character that may appear in reported string.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.163-1
changelog:
  - Add profile for lvmdbusd which uses lvm shell json report output.
  - Restrict in-command modification of some parms in lvm shell.
  - Apply LVM_COMMAND_PROFILE early for lvm shell.
  - Refactor reporting so lvm shell log report collects whole of cmd execution.
  - Support LVM_*_FD envvars to redirect output to file descriptors.
  - Limit use of --corelog and --mirrorlog to mirrors in lvconvert.
  - Reject --nosync option for RAID6 LVs in lvcreate.
  - Do not refresh whole cmd context if profile dropped after processing LVM cmd. 
  - Support straightforward lvconvert between striped and raid4 LVs. 
  - Support straightforward lvconvert between raid1 and mirror LVs. 
  - Report supported conversions when asked for unsupported raid lvconvert.
  - Add "--rebuild PV" option to lvchange to allow for PV selective rebuilds.
  - Preserve existing mirror region size when using --repair.
  - Forbid stripe parameters with lvconvert --repair.
  - Unify stripe size validation into get_stripe_params to catch missing cases.
  - Further lvconvert validation logic refactoring.
  - Add "lvm fullreport" man page.
  - Add dm_report_destroy_rows/dm_report_group_output_and_pop_all for lvm shell.
  - Adjust group handling and json production for lvm shell.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.164-2
changelog:
  - Fix selection of PVs when allocating raid0_meta.
  - Fix sdbus socket leak leading to hang in lvmnotify.
  - Specify max stripes for raid LV types: raid0:64; 1:10; 4,5:63; 6:62; 10:32.
  - Avoid double suffix when naming _rmeta LV paired with _rimage LV.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.165-1
changelog:
  - Add lvmraid(7) man page.
  - Use udev db to check for mpath components before running pvscan for lvmetad.
  - Use lsblk -s and lsblk -O in lvmdump only if these options are supported.
  - Fix number of stripes shown in lvcreate raid10 message when too many.
  - Change lvmdbusd to use new lvm shell facilities.
  - Do not monitor cache-pool metadata when LV is just being cleared.
  - Add allocation/cache_pool_max_chunks to prevent misuse of cache target.
  - Give error not segfault in lvconvert --splitmirrors when PV lies outside LV.
  - Fix typo in report/columns_as_rows config option name recognition (2.02.99).
  - Avoid PV tags when checking allocation against parallel PVs. 
  - Disallow mirror conversions of raid10 volumes.
  - Fix dmeventd unmonitoring when segment type (and dso) changes.
  - Don't allow lvconvert --repair on raid0 devices or attempt to monitor them.
  - No longer adjust incorrect number of raid stripes supplied to lvcreate.
  - Move lcm and gcd to lib/misc.
  - Fix vgsplit of external origins. (2.02.162)
  - Prohibit creation of RAID LVs unless VG extent size is at least the page size.
  - Suppress some unnecessary --stripesize parameter warnings.
  - Fix 'pvmove -n name ...' to prohibit collocation of RAID SubLVs
  - Improve explanation of udev fallback in libdevmapper.h.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.166-1
changelog:
  - Fix lvm2-activation-generator to read all LVM2 config sources. (2.02.155)
  - Fix lvchange-rebuild-raid.sh to cope with older target versions.
  - Use dm_config_parse_without_dup_node_check() to speedup metadata reading.
  - Fix lvconvert --repair regression
  - Fix reported origin lv field for cache volumes. (2.02.133)
  - Always specify snapshot cow LV for monitoring not internal LV. (2.02.165)
  - Fix lvchange --discard|--zero for active thin-pool.
  - Enforce 4MiB or 25% metadata free space for thin pool operations.
  - Fix lock-holder device for thin pool with inactive thin volumes.
  - Use --alloc normal for mirror logs even if the mimages were stricter.
  - Use O_DIRECT to gather metadata in lvmdump.
  - Ignore creation_time when checking for matching metadata for lvmetad.
  - Fix possible NULL pointer derefence when checking for monitoring.
  - Add lvmreport(7) man page.
  - Don't install lvmraid(7) man page when raid excluded. (2.02.165)
  - Report 0% as dirty (copy%) for cache without any used block.
  - Fix lvm2api reporting of cache data and metadata percent.
  - Restore reporting of metadata usage for cache volumes (2.02.155).
  - Support raid scrubbing on cache origin LV.
  - Fix man entry for dmsetup status.
  - Introduce new dm_config_parse_without_dup_node_check().
  - Don't omit last entry in dmstats list --group.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.167-1
changelog:
  - Use log_error in regex and sysfs filter to describe reason of failure.
  - Fix blkdeactivate to deactivate dev stack if dev on top already unmounted.
  - Prevent non-synced raid1 repair unless --force
  - Prevent raid4 creation/conversion on non-supporting kernels
  - Add direct striped -> raid4 conversion
  - Fix raid4 parity image pair position on conversions from striped/raid0*
  - Fix a few unconverted return code values for some lvconvert error path.
  - Disable lvconvert of thin pool to raid while active.
  - Disable systemd service start rate limiting for lvm2-pvscan@.service.
  - Log failure of raid device with log_error level.
  - Use dm_log_with_errno and translate runtime to dm_log only when needed.
  - Make log messages from dm and lvm library different from dmeventd.
  - Notice and Info messages are again logged from dmeventd and its plugins.
  - Dmeventd now also respects DM_ABORT_ON_INTERNAL_ERRORS as libdm based tool.
  - Report as non default dm logging also when logging with errno was changed.
  - Use log_level() macro to consistently decode message log level in dmeventd.
  - Still produce output when dmsetup dependency tree building finds dev missing.
  - Check and report pthread_sigmask() failure in dmeventd.
  - Check mem alloc fail in _canonicalize_field_ids().
  - Use unsigned math when checking more then 31 legs of raid.
  - Fix 'dmstats delete' with dmsetup older than v1.02.129
  - Fix stats walk segfault with dmsetup older than v1.02.129


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.168-1
changelog:
  - Display correct sync_percent on large RaidLVs
  - lvmdbusd --blackboxsize <n> added, used to override default size of 16
  - Allow a transiently failed RaidLV to be refreshed
  - Use lv_update_and_reload() inside mirror code where it applies.
  - Preserve mirrored status for temporary layered mirrors.
  - Use transient raid check before repairing raid volume.
  - Implement transient status check for raid volumes.
  - Only log msg as debug if lvm2-lvmdbusd unit missing for D-Bus notification.
  - Avoid duplicated underscore in name of extracted LV image.
  - Missing stripe filler now could be also 'zero'.
  - lvconvert --repair accepts --interval and --background option.
  - More efficiently prepare _rmeta devices when creating a new raid LV.
  - Document raid status values.
  - Always exit dmsetup with success when asked to display help/version.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.171-1
changelog:
  - Add RAID takeover and reshaping.
  - Add pvcreate prompt when device size doesn't match setphysicalvolumesize.
  - Remove obsolete lvmchange binary - convert to built-in command.
  - Support cache segment with configurable metadata format.
  - Add option for lvcreate/lvconvert --cachemetadataformat auto|1|2.
  - Add allocation/cache_metadata_format profilable settings.
  - Command line options, help and man pages using common definitions.
  - Add build-time configuration command line to 'lvm version' output.
  - Disable lvmetad when lvconvert --repair is run.
  - Raise mirror/raid default regionsize to 2MiB.
  - Support shrinking of RaidLVs.
  - Introduce global/fsadm_executable to make fsadm path configurable.
  - Look for limited thin pool metadata size when using 16G metadata.
  - Add lvconvert pool creation rule disallowing options with poolmetadata.
  - Fix missing lvmlockd LV locks in lvchange and lvconvert.
  - Fix dmeventd setup for lvchange --poll.
  - Fix use of --poll and --monitor with lvchange and vgchange.
  - Disallow lvconvert of hidden LV to a pool.
  - Ignore --partial option when not used for activation.
  - Allow --activationmode option with lvchange --refresh.
  - Allow valid lvconvert --regionsize change
  - Fix SIGINT blocking to prevent corrupted metadata
  - Fix systemd unit existence check for lvmconf --services --startstopservices.
  - Check and use PATH_MAX buffers when creating vgrename device paths.
  - Handle known table line parameter order change in specific raid target vsns.
  - Show more information for cached volumes in lvdisplay [-m].
  - Use function cache_set_params() for both lvcreate and lvconvert.
  - Skip rounding on cache chunk size boudary when create cache LV.
  - Improve cache_set_params support for chunk_size selection.
  - Fix metadata profile allocation/cache_[mode|policy] setting.
  - Fix missing support for using allocation/cache_pool_chunk_size setting.
  - Support conversion of raid type, stripesize and number of disks
  - Reject writemostly/writebehind in lvchange during resynchronization.
  - Deactivate active origin first before removal for improved workflow.
  - Fix regression of accepting both --type and -m with lvresize. (2.02.158)
  - Add extra memory page when limiting pthread stack size in clvmd.
  - Support striped/raid0* <-> raid10_near conversions.
  - Support region size changes on existing RaidLVs.
  - Avoid parallel usage of cpg_mcast_joined() in clvmd with corosync.
  - Support raid6_{ls,rs,la,ra}_6 segment types and conversions from/to it.
  - Support raid6_n_6 segment type and conversions from/to it.
  - Support raid5_n segment type and conversions from/to it.
  - Support new internal command _dmeventd_thin_command.
  - Introduce new dmeventd/thin_command configurable setting.
  - Use new default units 'r' for displaying sizes.
  - Also unmount mount point on top of MD device if using blkdeactivate -u.
  - Restore check preventing resize of cache type volumes (2.02.158).
  - Add missing udev sync when flushing dirty cache content.
  - vgchange -p accepts only uint32 numbers.
  - Report thin LV date for merged LV when the merge is in progress.
  - Detect if snapshot merge really started before polling for progress.
  - Checking LV for merging origin requires also it has merged snapshot.
  - Extend validation of metadata processing.
  - Enable usage of cached volumes as snapshot origin LV.
  - Fix displayed lv name when splitting snapshot (2.02.146).
  - Warn about command not making metadata backup just once per command.
  - Enable usage of cached volume as thin volume's external origin.
  - Support cache volume activation with -real layer.
  - Improve search of lock-holder for external origin and thin-pool.
  - Support status checking of cache volume used in layer.
  - Avoid shifting by one number of blocks when clearing dirty cache volume.
  - Extend metadata validation of external origin LV use count.
  - Fix dm table when the last user of active external origin is removed.
  - Improve reported lvs status for active external origin volume.
  - Fix table load for splitted RAID LV and require explicit activation.
  - Always active splitted RAID LV exclusively locally.
  - Do not use LV RAID status bit for segment status.
  - Check segtype directly instead of checking RAID in segment status.
  - Reusing exiting code for raid image removal.
  - Fix pvmove leaving -pvmove0 error device in clustered VG.
  - Avoid adding extra '_' at end of raid extracted images or metadata.
  - Optimize another _rmeta clearing code.
  - Fix deactivation of raid orphan devices for clustered VG.
  - Fix lvconvert raid1 to mirror table reload order.
  - Add internal function for separate mirror log preparation.
  - Fix segfault in lvmetad from missing NULL in daemon_reply_simple.
  - Simplify internal _info_run() and use _setup_task_run() for mknod.
  - Better API for internal function _setup_task_run.
  - Avoid using lv_has_target_type() call within lv_info_with_seg_status.
  - Simplify internal lv_info_with_seg_status API.
  - Decide which status is needed in one place for lv_info_with_seg_status.
  - Fix matching of LV segment when checking for it info status.
  - Report log_warn when status cannot be parsed.
  - Test segment type before accessing segment members when checking status.
  - Implement compatible target function for stripe segment.
  - Use status info to report merge failed and snapshot invalid lvs fields.
  - See WHATS_NEW and WHATS_NEW_DM in the documentation directory for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.172-1
changelog:
  - Do not lvdisplay --maps unset settings of cache pool.
  - Fix lvdisplay --maps for cache pool without policy settings.
  - Support aborting of flushing cache LV.
  - Improve lvcreate --cachepool arg validation.
  - Cache format2 flag is now using segment name type field.
  - Disallow cachepool creation with policy cleaner and mode writeback.
  - Lvconvert --repair handles failing raid legs (present but marked 'D'ead).
  - Add display_percent helper function for printing percent values.
  - Add dm_percent_to_round_float for adjusted percentage rounding.
  - Fix lvcreate extent percentage calculation for mirrors.
  - Reenable conversion of data and metadata thin-pool volumes to raid.
  - Linear to RAID1 upconverts now use "recover" sync action, not "resync".
  - No longer necessary to '--force' a repair for RAID1.
  - Improve raid status reporting with lvs.
  - dm_get_status_raid() handle better some incosistent md statuses.
  - Limit maximal size of thin-pool for specific chunk size.
  - Print a warning about in-use PVs with no VG using them.
  - Disable automatic clearing of PVs that look like in-use orphans.
  - Extend validation of filesystems resized by fsadm.
  - Properly handle subshell return codes in fsadm.
  - Stop using '--yes' mode when fsadm runs without terminal.
  - Support storing status flags via segtype name field.
  - Enhance lvconvert automatic settings of possible (raid) LV types.
  - Add missing NULL to argv array when spliting cmdline arguments.
  - Don't reinstate still-missing devices when correcting inconsistent metadata.
  - Allow lvchange to change properties on a thin pool data sub LV.
  - Fix reusing of dm_task structure for status reading (used by dmeventd).
  - Drop unneeded --config option from raid dmeventd plugin.
  - Accept truncated files in calls to dm_stats_update_regions_from_fd().
  - Restore Warning by 5% increment when thin-pool is over 80% (1.02.138).
  - Reset array with dead rimage devices once raid gets in sync.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.173-1
changelog:
  - Create /dev/disk/by-part{uuid,label} and gpt-auto-root symlinks with udev.
  - Add synchronization points with udev during conversion of raid LVs.
  - Improve --size args validation and report more detailed error message.
  - Initialize debugging mutex before any debug message in clvmd.
  - Log error instead of warn when noticing connection problem with lvmetad.
  - Fix memory leak in lvmetad when working with duplicates.
  - Remove restrictions on reshaping open and clustered raid devices.
  - Add incompatible data_offset to raid metadata to fix reshape activation.
  - Accept 'lvm -h' and 'lvm --help' as well as 'lvm help' for help.
  - Suppress error message from accept() on clean lvmetad shutdown.
  - Tidy clvmd client list processing and fix segfaults.
  - Protect clvmd debug log messages with mutex and add client id.
  - Fix shellcheck reported issues for script files.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.174-1.f28
changelog:
  - NOTE: Deprecating python bindings and liblvm2app.
  - Prevent raid1 split with trackchanges in a shared VG.
  - Avoid double unlocking of client & lockspace mutexes in lvmlockd.
  - Fix leaking of file descriptor for non-blocking filebased locking.
  - Fix check for 2nd mda at end of disk fits if using pvcreate --restorefile.
  - Use maximum metadataarea size that fits with pvcreate --restorefile.
  - Always clear cached bootloaderarea when wiping label e.g. in pvcreate.
  - Disallow --bootloaderareasize with pvcreate --restorefile.
  - Fix lvmlockd check for running lock managers during lock adoption.
  - Add --withgeneralpreamble and --withlocalpreamble to lvmconfig.
  - Add warning when creating thin-pool with zeroing and chunk size >= 512KiB.
  - Introduce exit code 4 EINIT_FAILED to replace -1 when initialisation fails.
  - Add synchronization points with udev during reshape of raid LVs.
  - Restore umask when creation of node fails.
  - Add --concise to dmsetup create for many devices with tables in one command.
  - Accept minor number without major in library when it knows dm major number.
  - Introduce single-line concise table output format: dmsetup table --concise.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.175-1
changelog:
  - Use --help with blockdev when checking for --getsize64 support in fsadm.
  - Dump lvmdbusd debug information with SIGUSR1.
  - Fix metadata corruption in vgsplit and vgmerge intermediate states.
  - Add PV_MOVED_VG PV status flag to mark PVs moving between VGs.
  - Fix lvmdbus hang and recognise unknown VG correctly.
  - Improve error messages when command rules fail.
  - Require LV name with pvmove in a shared VG.
  - Allow shared active mirror LVs with lvmlockd, dlm, and cmirrord.
  - Support lvconvert --repair with cache and cachepool volumes.
  - lvconvert --repair respects --poolmetadataspare option.
  - Fix thin pool creation in a shared VG. (2.02.173)
  - Schedule exit when received SIGTERM in dmeventd.
  - Fix blkdeactivate regression with failing DM/MD devs deactivation (1.02.142).
  - Add blkdeactivate -r wait option to wait for MD resync/recovery/reshape.
  - Use blkdeactivate -r wait in blk-availability systemd service/initscript.
  - Also try to unmount /boot on blkdeactivate -u if on top of supported device.
  - Fix typo in blkdeactivate's '--{dm,lvm,mpath}options' option name.
  - Correct return value testing when get reserved values for reporting.
  - Take -S with dmsetup suspend/resume/clear/wipe_table/remove/deps/status/table.
  - Fix mistakenly commented out %python_provide line for python3-lvm.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.176-1
changelog:
  - Fix segfault in lvm_pv_remove in liblvm. (2.02.173)
  - Do not allow storing VG metadata with LV without any segment.
  - Fix printed message when thin snapshot was already merged.
  - Remove created spare LV when creation of thin-pool failed.
  - Avoid reading ignored metadata when MDA gets used again.
  - Fix detection of moved PVs in vgsplit. (2.02.175)
  - Ignore --stripes/--stripesize on RAID takeover
  - Disallow creation of snapshot of mirror/raid subLV (was never supported).
  - Keep Install section only in *.socket systemd units.
  - Improve used paths for generated systemd units and init shells.
  - Fix regression in more advanced vgname extraction in lvconvert (2.02.169).
  - Allow lvcreate to be used for caching of _tdata LV.
  - Avoid internal error when resizing cache type _tdata LV (not yet supported).
  - Show original converted names when lvconverting LV to pool volume.
  - Move lib code used only by liblvm into metadata-liblvm.c.
  - Distinguish between device not found and excluded by filter.
  - Monitor external origin LVs.
  - Allow lvcreate --type mirror to work with 100%FREE.
  - Improve selection of resource name for complex volume activation lock.
  - Avoid cutting first character of resource name for activation lock.
  - Support for encrypted devices in fsadm.
  - Improve thin pool overprovisioning and repair warning messages.
  - Fix incorrect adjustment of region size on striped RaidLVs.
  - Issue a specific error with dmsetup status if device is unknown.
  - Fix RT_LIBS reference in generated libdevmapper.pc for pkg-config.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.177-1
changelog:
  - When writing text metadata content, use complete 4096 byte blocks.
  - Change text format metadata alignment from 512 to 4096 bytes.
  - When writing metadata, consistently skip mdas marked as failed.
  - Refactor and adjust text format metadata alignment calculation.
  - Fix python3 path in lvmdbusd to use value detected by configure.
  - Reduce checks for active LVs in vgchange before background polling.
  - Ensure _node_send_message always uses clean status of thin pool.
  - Fix lvmlockd to use pool lock when accessing _tmeta volume.
  - Report expected sanlock_convert errors only when retries fail.
  - Avoid blocking in sanlock_convert on SH to EX lock conversion.
  - Deactivate missing raid LV legs (_rimage_X-missing_Y_Z) on decativation.
  - Skip read-modify-write when entire block is replaced.
  - Categorise I/O with reason annotations in debug messages.
  - Allow extending of raid LVs created with --nosync after a failed repair.
  - Command will lock memory only when suspending volumes.
  - Merge segments when pvmove is finished.
  - Remove label_verify that has never been used.
  - Ensure very large numbers used as arguments are not casted to lower values.
  - Enhance reading and validation of options stripes and stripes_size.
  - Fix printing of default stripe size when user is not using stripes.
  - Activation code for pvmove automatically discovers holding LVs for resume.
  - Make a pvmove LV locking holder.
  - Do not change critical section counter on resume path without real resume.
  - Enhance activation code to automatically suspend pvmove participants.
  - Prevent conversion of thin volumes to snapshot origin when lvmlockd is used.
  - Correct the steps to change lock type in lvmlockd man page.
  - Retry lock acquisition on recognized sanlock errors.
  - Fix lock manager error codes in lvmlockd.
  - Remove unnecessary single read from lvmdiskscan.
  - Check raid reshape flags in vg_validate().
  - Add support for pvmove of cache and snapshot origins.
  - Avoid using precommitted metadata for suspending pvmove tree.
  - Ehnance pvmove locking.
  - Deactivate activated LVs on error path when pvmove activation fails.
  - Add "io" to log/debug_classes for logging low-level I/O.
  - Avoid importing persistent filter in vgscan/pvscan/vgrename.
  - Fix memleak of string buffer when vgcfgbackup runs in secure mode.
  - Do not print error when clvmd cannot find running clvmd.
  - Prevent start of new merge of snapshot if origin is already being merged.
  - Fix offered type for raid6_n_6 to raid5 conversion (raid5_n).
  - Deactivate sub LVs when removing unused cache-pool.
  - Do not take backup with suspended devices.
  - Avoid RAID4 activation on incompatible kernels under all circumstances.
  - Reject conversion request to striped/raid0 on 2-legged raid4/5.
  - Activation tree of thin pool skips duplicated check of pool status.
  - Remove code supporting replicator target.
  - Do not ignore failure of _info_by_dev().
  - Propagate delayed resume for pvmove subvolumes.
  - Suppress integrity encryption keys in 'table' output unless --showkeys supplied.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.179-1
changelog:
  - Bugfix release mainly fixing known cache and lvmlockd issues.
  - Remove lvm1 and pool format handling and add filter to ignore them.
  - Rework disk scanning and when it is used.
  - Add new io layer using libaio for faster scanning.
  - Support activation of component LVs in read-only mode.
  - Avoid non-exclusive activation of exclusive segment types.
  - Restore pvmove support for clusterwide active volumes (2.02.177).
  - Add prioritized_section() to restore cookie boundaries (2.02.177).
  - Again accept striped LV as COW LV with lvconvert -s (2.02.169).
  - Restore usability of thin LV to be again external origin for another thin (2.02.169).
  - See WHATS_NEW and WHATS_NEW_DM in the documentation directory for more.


author: Tomas Orsava <torsava@redhat.com> - 2.02.179-3
changelog:
  - Switch hardcoded python3 path into the %{__python3} macro
  - Patch is needed for the configure file because it mistakenly unsets the user
    defined variable PYTHON before checking it


author: Marian Csontos <mcsontos@redhat.com> - 2.02.180-1
changelog:
  - Never send any discard ioctl with test mode.
  - Fix thin-pool alloc which needs same PV for data and metadata.
  - Enhance vgcfgrestore to check for active LVs in restored VG.
  - Provide possible layouts when converting between linear and striped/raid.
  - Fix unmonitoring of merging snapshots.
  - Cache can uses metadata format 2 with cleaner policy.
  - Avoid showing internal error in lvs output or pvmoved LVs.
  - Fix check if resized PV can also fit metadata area.
  - Reopen devices RDWR only before writing to avoid udev issues.
  - Change pvresize output confusing when no resize took place.
  - Fix lvmetad hanging on shutdown.
  - Fix mem leak in clvmd and more coverity issues.


author: Marian Csontos <mcsontos@redhat.com> - 2.02.181-1
changelog:
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.
  - Add vdo plugin for monitoring VDO devices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.00-0.2
changelog:
  - New upstream release.
  - Deduplication and compression - support for VDO volumes.
  - Dropped lvmetad, clvmd and liblvm2app.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-1
changelog:
  - Fix libdevmapper-event linking issue.
  - Fix missing proper initialization of pv_list struct when adding pv.
  - Fix (de)activation of RaidLVs with visible SubLVs.
  - Prohibit mirrored 'mirror' log via lvcreate and lvconvert.
  - Use sync io if async io_setup fails, or use_aio=0 is set in config.
  - Fix more issues reported by coverity scan.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-3
changelog:
  - Fix handling of exported VGs lvmdbusd.
  - Restore missing man info lvcreate --zero for thin-pools.
  - Drop misleadning comment for metadata minimum_io_size for VDO segment.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-4
changelog:
  - Introduce LVM_SUPPRESS_SYSLOG to suppress syslog usage by generator.
  - Fix generator querying config options missing from lvm.conf.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-6
changelog:
  * Thu Feb 07 2019 Marian Csontos <mcsontos@redhat.com> - 2.03.02-5
  - Improve -lXXX%VG modifier which improves cache segment estimation.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-2
changelog:
  - Fix scanning of PVs with size not matching device.
  - Allow --stripe/--stripesize in mirror conversions.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-3
changelog:
  - Remove unsupported OPTIONS+="event_timeout" udev rule from 11-dm-lvm.rules.
  - Prevent creating VGs with PVs with different logical block sizes.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.07-1
changelog:
  - Ensure minimum required region size on striped RaidLV creation.
  - Fix resize of thin-pool with data and metadata of different segtype.
  - Improve mirror type leg splitting.
  - Fix activation order when removing merged snapshot.
  - Experimental VDO support for lvmdbusd.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
  - Activate thin-pool layered volume as 'read-only' device.
  - Ignore crypto devices with UUID signature CRYPT-SUBDEV.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - See WHATS_NEW for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.08-1
changelog:
  - VDO and writecache volume improvements.
  - Prohibit reshaping of stacked raid LVs to prevent corruption.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.1-2
changelog:
  - Add BuildRequires (#49562)
  - s/Copyright/License/
  - Fix license (it's actually dual-licensed BSD/GPL, not just "distributable")


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-1
changelog:
  - 20.2
  - Add patch from bug report #56186; the problem is not reproducable,
    but the patch can't hurt.


author: Bernhard Rosenkraenzer <bero@redhat.com> 20.2-4
changelog:
  - Autogenerate the signal list from _includedir/bits/signum.h
    to make sure it works on all arches and doesn't break again.


author: Mike A. Harris <mharris@redhat.com> 21.2-2
changelog:
  - Updated to new upstream version 21.2
  - Updated Source: URL to sourceforge's current ftp area
  - Fixes fuser largefile bug (#66340)
  - Disable prep time sh %{SOURCE1} >src/signames.h as the 21.2 release
    fixes this already now.


author: Mike A. Harris <mharris@redhat.com> 21.3-1
changelog:
  - Updated to new upstream version 21.3
  - Removed dead script gensig.sh
  - Disabled psmisc-21.2-gcc33.patch as it is included in 21.3


author: Mike A. Harris <mharris@redhat.com> 21.4-1
changelog:
  - Updated to new upstream version 21.4
  - Ported SELinux patch forward as psmisc-21.4-redhat-selinux-psmisc.patch,
    but disabled SELINUX support temporarily until other build problems are
    resolved
  - Remove MKINSTALLDIRS-./mkinstalldirs from "make install" as that causes the
    build to fail when "./" changes.  If this option is ever added back, make
    it relative to $RPM_BUILD_DIR instead of ./ so that things do not break
  - Added pstree.x11 to file list after rpm reported it present in buildroot but
    not packaged


author: Karel Zak <kzak@redhat.com> 21.5-1
changelog:
  - Updated to new upstream version 21.5
  - Ported SELinux patch forward as psmisc-21.5-selinux.patch
  - Added psmisc-21.5-term.patch that fix termcap.h and term.h conflicts


author: Karel Zak <kzak@redhat.com> 21.6-1
changelog:
  - sync with upstream release 21.6
  - cleanup selinux patch
  - fix #165167 - buffer overflow detected in fuser


author: Karel Zak <kzak@redhat.com> 22.1.03072006cvs-1
changelog:
  - update to new upstream CVS version 
  - enable new fuser version
  - fix fuser return code 
  - fix #183897 - "pstree -a" call results in segmentation fault


author: Tomas Smetana <tsmetana@redhat.com> 22.6-5
changelog:
  - fix configure.ac to include all the required headers for peekfd
  - remove kernel-headers again -- not needed in rawhide


author: Jan Görig <jgorig@redhat.com> 22.13-1
changelog:
  - updated to new upstream version
  - removed unused patch
  - peekfd should work on all architectures now
  - spec cleanups


author: Richard W.M. Jones <rjones@redhat.com> 22.20-1
changelog:
  - Update to 22.20.
    Contains a fix for: http://sourceforge.net/p/psmisc/bugs/53/
  - Fix src/pstree.c when SELinux is available.


author: Jan Rybar <jrybar@redhat.com> - 23.1
changelog:
  - Rebase to the newest upstream official release
  - Source0 updated to latest functional SourceForge URL format
  - peekfd manpage now not present if peekfd binary missing on given architecture
  - URL of the project updated
  - new tool pslog added with rebase
  - Resolves: #1460695


author: Ray Strode <rstrode@redhat.com> - 2.56.1-4
changelog:
  - Ensure shared-mime-info is installed during testing
  - Ensure test suite runs as unprivileged user
  - Ensure test suite works when debugging is enabled
  - Ensure echo-script from spawn test is marked executable
    Related: #1625683


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.10.0-3
changelog:
  - Python 2 binary package renamed to python2-pywbem
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ralph Bean <rbean@redhat.com> - 1.5-3
changelog:
  - Renamed patches to python-urllib3-*
  - Fixed ssl check patch to use the correct cert path for Fedora.
  - Included dependency on ca-certificates
  - Cosmetic indentation changes to the .spec file.


author: Ralph Bean <rbean@redhat.com> - 1.5-4
changelog:
  - Upstream patch to fix Accept header when behind a proxy.
  - Reorganize patch numbers to more clearly distinguish them.


author: Ralph Bean <rbean@redhat.com> - 1.7-1
changelog:
  - Update to latest upstream.
  - Removed the accept-header proxy patch which is included in upstream now.
  - Removed py2.6 compat patch which is included in upstream now.


author: Ralph Bean <rbean@redhat.com> - 1.10-1
changelog:
  - Latest upstream 1.10, for python-requests-2.5.0.
  - Re-do unbundling without patch, with symlinks.
  - Modernize python2 macros.
  - Remove the with_dummyserver tests which fail only sometimes.


author: Ralph Bean <rbean@redhat.com> - 1.10.4-3.20150503gita91975b
changelog:
  - Apply pyopenssl injection for an outdated cpython as per upstream advice
    https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning
    https://urllib3.readthedocs.org/en/latest/security.html#pyopenssl


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.22-9
changelog:
  - Do not lowercase hostnames with custom-protocol (rhbz 1567862)
  - upstream: https://github.com/urllib3/urllib3/issues/1267


author: Tomas Orsava <torsava@redhat.com> - 1.24.2-1
changelog:
  - Rebased to 1.24.2 to fix CVE-2019-11324
  - Added patches for CVE-2019-11236 (AKA CVE-2019-9740)
  - Resolves: rhbz#1703361 rhbz#1706026


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-80.4.2.el8_0]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719922 1719923] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719857 1719858] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719602 1719603] {CVE-2019-11477}


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Frantisek Hrbata <fhrbata@redhat.com> [4.18.0-147.0.3.el8_1]
changelog:
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756871 1756873] {CVE-2019-0155}


author: Marian Csontos <mcsontos@redhat.com> 0.9-7
changelog:
  - Reduce log level of "Could not load BootEntry" messages.
  - Raise more appropriate LookupError on unknown BLS keys.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.1.10-28
changelog:
  - Python 2 binary package renamed to python2-gamin
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Steve Dickson <steved@redhat.com> 1.3b-1
changelog:
  - Updated to latest upstream version 1.3b
  - Incorporated Merge Review comments (bz 226002)
  - Increased the polling timeout (bz 204990)


author: Steve Dickson <steved@redhat.com> 1.4.12-1
changelog:
  - Updated to latest stable upstream version: 1.4.12
  - API documentation is now installed (bz 487977)
  - libevent-devel multilib conflict (bz 477685)
  - epoll backend allocates too much memory (bz 517918)


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.21-4
changelog:
  - Fix -doc package for F20 UnversionedDocDirs (#993956)
  - Add missing directory /usr/include/event2
  - Fix directory ownership in -doc package
  - Correct summary and description of -devel and -doc packages
  - Set -doc package Group tag to "Documentation"
  - Add %?_isa to -devel package base dependency
  - Remove %defattr


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-6
changelog:
  - Pull upstream fix for ioctl evdev bitset decoding, fix the tests (#1747214).
  - Include commit v4.26~65 "s390x: beautify sthyi data tail prints" (#1747514).
  - Include upstream patches that fix issues reported by covscan (#1747526):
    91281fec "v4l2: avoid shifting left a signed number by 31 bit",
    522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing",
    9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register", and
    2b64854e "xlat: use unsgined type for mount_flags fallback values".


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-7
changelog:
  - Fix printing stack traces for early syscalls on process attach (#1790053):
    69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
    8e515c74 "tests: add strace-k-p test".
  - Properly decode struct sockaddr_hci without hci_channel field.
  - Update tests-m32/ioctl_evdev.c and tests-mx32/ioctl_evdev.c
    in 0002-evdev-fix-decoding-of-EVIOCGBIT-0.patch.
  - Update tests-m32/Makefile.in and tests-mx32/Makefile.in
    in 0032-tests-check-decoding-of-successful-evdev-ioctl.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-8
changelog:
  - Fix expected alignment for IPC tests (#1795251):
    4377e3a1 "tests: fix expected output for some ipc tests", and
    a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".
  - Update tests-m32/looping_threads.test and tests-mx32/looping_threads.test
    in 0025-tests-check-tracing-of-looping-threads.patch.
  - Update the bpf syscall decoder:
    d6c71dd0 "Fix preprocessor indentation",
    cabd6955 "bpf: print struct bpf_prog_info.gpl_compatible",
    14a9b6ca "bpf: add support for btf_* fields in BPF_MAP_CREATE",
    27bd13d3 "bpf: add support for btf_* fields in struct bpf_map_info",
    d1f90bcd "bpf: add support for *jited_ksyms and *jited_func_lens fields
             in struct bpf_prog_info", and
    940fe50f "bpf: add support for new twelve fields in struct bpf_prog_info".
    c661605b "tests: robustify bpf-obj_get_info_by_fd test against future kernels"


author: Eugene Syromiatnikov <esyr@redhat.com> - 4.24-9
changelog:
  - Fix the "extra tokens at end of #ifdef directive" warning:
    579f2702 "bpf: exclude bit fields from the check".


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.1-2
changelog:
  - Add Provides for libssh_threads.so to unbreak applications
  - Fix ABIMap detection to not depend on python to build


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.3-1
changelog:
  - Update to version 0.8.3
    * Added support for rsa-sha2 (#1610882)
    * Added support to parse private keys in openssh container format (other than
      ed25519) (#1622983)
    * Added support for diffie-hellman-group18-sha512 and
      diffie-hellman-group16-sha512 (#1610885)
    * Added ssh_get_fingerprint_hash()
    * Added ssh_pki_export_privkey_base64()
    * Added support for Match keyword in config file
    * Improved performance and reduced memory footprint for sftp
    * Fixed ecdsa publickey auth
    * Fixed reading a closed channel
    * Added support to announce posix-rename@openssh.com and hardlink@openssh.com
      in the sftp server
    * Use -fstack-protector-strong if possible (#1624135)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-1
changelog:
  - Update to 0.4.10 (#1745082)
  - Add BuildRequires for OpenSSL >= 1.0.2, required for testing
  - Print tests logs if failed during build
  - Small bug fixes such as removal of unused variable
  - Search objects in all matching tokens (#1705505)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el8]
changelog:
  - Rebase onto upstream version 1.1.1
  - Sync spec file with RHEL7
  - Disable JSON parsing, deprecated by upstream
  - Make use of builtin testsuite


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: Kalev Lember <klember@redhat.com> - 1.55.2-1
changelog:
  - Update to 1.55.2
  - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly
  - Remove ldconfig scriptlets


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8_4.18.0_80.23_dup8.0-3
changelog:
  - 1d6a0fb6a4ad99d22c0a6e537e3d408b683aa60d
  - btusb kernel module for Driver Update Program
  - Resolves: #bz1755922


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-1
changelog:
  - New upstream release 5.1.1
  - Fix detection of readline during compile (iow add readline support back)


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.1-2
changelog:
  - Only link /usr/bin/lua with readline / do not link %{_libdir}/liblua-5.1.so
    with readline so that we don't cause any License troubles for packages
    linking against liblua-5.1.so, otherwise lua could drag the GPL only readline
    lib into the linking of non GPL apps.


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-3
changelog:
  - own $libdir/lua/5.1 and $datadir/lua/5.1. These are the standard package
    search path for Lua. Packaging them properly allows for easy creation of
    Lua addon packages.


author: Hans de Goede <j.w.r.degoede@hhs.nl> 5.1.3-4
changelog:
  - Not only own $libdir/lua/5.1 and $datadir/lua/5.1 but also $libdir/lua
    and $datadir/lua for proper removal of these dirs upon lua removal


author: Tim Niemueller <tim@niemueller.de> - 5.1.3-5
changelog:
  - Provide lua = 5.1, this way add-on packages can easily depend on the Lua
    base version and expect certain paths for packages


author: Tim Niemueller <tim@niemueller.de> - 5.1.4-7
changelog:
  - Add patch to from lua.org with smaller bugfixes
  - sed -i -e 's/5\.1\.3/5.1.4/g' on autotoolize patch, bug #641144


author: Hans de Goede <hdegoede@redhat.com> - 5.2.2-3
changelog:
  - Drop compat-lua-libs package, as there now is a separate compat-lua
    package (including a -devel)


author: Lukas Czerner <lczerner@redhat.com> 0.4-4
changelog:
  - Update to a new upstream release v0.4
  - Remove btrfs resize support
  - Unmount all btrfs subvolumes when removing a filesystem
  - Fix size argument parsing for create and snapshot command
  - Fix list output for some cases
  - Add support to create encrypted volumes with crypt backend
  - Add dry-run option
  - Fix removing volumes with crypt backend
  - Add raid1 and raid10 support for lvm backend
  - Allow to check btrfs volumes
  - Fix error handling when trying to resize btrfs subvolume
  - Fix ssm mount command so it detects directory properly
  - Suppress backtrace when a command fails
  - Fix ssm to recognize units in new btrfs output properly
  - Use correct sysfs file to get size for a partition
  - Fix ssm to be able add a device with signature to btrfs file system
  - Resognize btrfs devices from new btrfs output properly


author: Lukas Czerner <lczerner@redhat.com> 0.4-7
changelog:
  - Big upstream update
  - Python3 support (#1239016)
  - Error out if file system is not supported (#1196428)


author: Jan Tulak <jtulak@redhat.com> - 1.2-3:
changelog:
  - Gating tests implementation, which meant adding few more changes
    to the existing patches (#1681969)
  - sphinx patch was merged to python3 change
  - add seq numbers to patch files


author: Jan Tulak <jtulak@redhat.com> - 1.4-1:
changelog:
  - Bring changes from upstream 1.4 (mostly bugfixes)
  - Remove multipath from the list of default backends (rhbz#1685019)
  - Fix locale issue (rhbz#1679587)


author: Thomas Woerner <twoerner@redhat.com> 1.38-1
changelog:
  - new version 1.38
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
    Merged from RHEL-4
  - enable tune2fs to set and clear feature resize_inode (#167816)
  - removed outdated information from ext2online man page (#164383)


author: Thomas Woerner <twoerner@redhat.com> 1.38-2
changelog:
  - splitted up libs from main package, into a new e2fsprogs-libs package
  - fixed requires and prereqs


author: Thomas Woerner <twoerner@redhat.com> 1.38-2.1
changelog:
  - fixed file conflicts between 32bit and 64bit packages (#168815)
  - fixed mklost+found crashes with buffer overflow (#157773)
    Thanks to Arjan van de Ven for the patch


author: Thomas Woerner <twoerner@redhat.com> - 1.39-1
changelog:
  - new version 1.39
  - dropped ext2online, because resize2fs is now able to do online resize
  - spec file cleanup
  - enabled checks for build


author: Eric Sandeen <esandeen@redhat.com> 1.39-14
changelog:
  - Many coverity-found potential leaks, segfaults, etc (#239354)
  - Fix debugfs segfaults when no fs open (#208416, #209330)
  - Avoid recursive loops in logdump due to symlinks in /dev (#210371)
  - Don't write changes to the backup superblocks by default (#229561)
  - Correct byteswapping for fast symlinks with xattrs (#232663)
  - e2fsck: added sanity check for xattr validation (#230193)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-3
changelog:
  - Update license tags
  - Fix one open-create caller with no mode
  - Protect ->open ops from glibc open-create-mode-checker
  - Fix source URL
  - Add gawk to BuildRequires


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-10
changelog:
  - Make (more) file timestamps match those in tarball for multilib tidiness 
  - Fix e2fsprogs-libs summary (shared libs not static)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-12
changelog:
  - Use upstream patch for blkid fat detection, avoids div-by-zero
    when encountering some BSD partitions (#398281)


author: Stepan Kasal <skasal@redhat.com> 1.40.2-13
changelog:
  - The -devel package now requires device-mapper-devel, to match
    the dependency in blkid.pc (#410791)


author: Eric Sandeen <esandeen@redhat.com> 1.40.2-15
changelog:
  - Drop resize_inode removal patch from tune2fs; ostensibly was
    for old kernels which could not mount, but seems to be fine.
  - Drop pottcdate removal patch, and don't rebuild .po files,
    causes multilib problems and we generally shouldn't rebuild.
  - Drop multilib patch; wrapper header should take care of this now.
  - Drop ->open rename, Fedora seems ok with this now.


author: Eric Sandeen <sandeen@redhat.com> 1.40.4-7
changelog:
  - Fix sb flag comparisons properly this time (#428893)
  - Make 256-byte inodes for the [default] mkfs case.
    This will facilitate upgrades to ext4 later, and help xattr perf.


author: Eric Sandeen <esandeen@redhat.com> 1.40.7-1
changelog:
  - New upstream version, special leap-day edition
  - Fix resize2fs losing inline xattrs when shrinking (#434893)
    and add patch to fix swap_inode_full in this case
  - Allow mke2fs & tune2fs to manipulate large_file feature (#258381)
  - Handle lvm error conditions in libblkid (#433857)
  - Allow tune2fs to clear the resize_inode feature (#167816)
  - Teach blkid to detect LVM2 physical volumes (#409321)
  - Show "mostly printable" xattrs as text in debugfs (#430621)
  - Trimmed pre-1.38 rpm changelog entries


author: Eric Sandeen <esandeen@redhat.com> 1.40.8-2
changelog:
  - Update ext2fs_swap_inode_full() fix to match upstream
  - Check more of swapv1 header in blkid detection (#442937)


author: Eric Sandeen <sandeen@redhat.com> 1.41.2-1
changelog:
  - New upstream version
  - Updated default dir hash (half_md4) for better perf & fewer collisions
  - Fixed ext4 online resizing with flex_bg
  - ext4 journal now in extents format and in middle of filesystem
  - fix unreadable e2image files
  - fix file descriptor leak in libcom_err (#464689)


author: Eric Sandeen <sandeen@redhat.com> 1.41.3-3
changelog:
  - Remove conservative "don't change journal location" patch for F11
  - Add btrfs recognition to blkid


author: Eric Sandeen <sandeen@redhat.com> 1.41.4-4
changelog:
  - Edit summary & description to include ext4 (#487469)
  - Fix blkid null ptr deref in initrd (#486997)


author: Karel Zak <kzak@redhat.com> 1.41.6-3
changelog:
  - temporary use BuildRequires: e2fsprogs-devel (we cannot install 
    new util-linux-ng with libblkid to buildroots without new e2fsprogs 
    without libblkid).


author: Eric Sandeen <sandeen@redhat.com> 1.41.6-5
changelog:
  - Update journal backup blocks in sb after resize (#505339)
  - Fix memory leak in extent handling functions
  - Fix bug in inode writing in extent code, clobbered i_extra_isize etc


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-8
changelog:
  - Fix up topology patch to build w/ new util-linux-ng
  - Fix endian swapping of backup journal blocks in sb


author: Eric Sandeen <sandeen@redhat.com> 1.41.9-9
changelog:
  - Fix up stray output & re-enable make check
  - Fix dlopen issues for newer libreadline
  - Fix access beyond end of array in resize2fs


author: Eric Sandeen <sandeen@@redhat.com> 1.42.2-5
changelog:
  - Add broken system clock config to e2fsck.conf to let boot
    continue even if system clock very wrong.


author: Eric Sandeen <sandeen@redhat.com> 1.42.8-2
changelog:
  - Interpackage dependencies should be for same arch
  - Remove newly added but failing resize2fs tests for now


author: Dan Horák <dan@danny.cz> - 1.42.10-5
changelog:
  - Rebuilt for buggy rpm 4.12 alpha -
    https://lists.fedoraproject.org/pipermail/devel/2014-June/200633.html


author: Eric Sandeen <sandeen@redhat.com> 1.42.12-4
changelog:
  - Fix potential buffer overflow in closefs (#1193947, CVE-2015-1572)
  - Fix dumpe2fs segfault with no arguments (#1194063)
  - Don't require fsck prior to resize2fs -P (#1170803)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Jakub Martisko <jamartis@redhat.com> - 1.9-4
changelog:
  - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28p1-1
changelog:
  - RHEL 8.2 ERRATUM
  - rebase to 1.8.28p1
  Resolves: rhbz#1733961
  - fixed man page for always_set_home
  Resolves: rhbz#1576880
  - sudo does not work with notbefore/after
  Resolves: rhbz#1679508
  - NOTBEFORE showing value of sudoNotAfter Ldap attribute
  Resolves: rhbz#1715516
  - CVE-2019-14287 sudo
  - Privilege escalation via 'Runas' specification with 'ALL' keyword
  Resolves: rhbz#1760697


author: John W. Linville <linville@redhat.com> - 3.18_2016.02.08-1
changelog:
  - Update wireless-regdb to version 2016.02.08
  - Do not treat unused-const-variable warnings as errors


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.3
changelog:
  - Limit the size of vmcore-dmesg.txt to 2G
  - makedumpfile: x86_64: Fix incorrect exclusion by -e option with KASLR
  - mkdumprd: ensure ssh path exists before check size


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.4
changelog:
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed
  - dracut-module-setup: fix bond ifcfg processing
  - Doc: amend the man page of kdump.conf


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-5
changelog:
  - Don't execute final_action if failure_action terminates the system
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed
  - kdumpctl: echo msg when waiting for connection
  - kdumpctl: distinguish the failed reason of ssh
  - kdumpctl: wait a while for network ready if dump target is ssh
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - dracut-module-setup: get localhost alias by manual


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Martin Osvald <mosvald@redhat.com> - 2.12.2-3
changelog:
  - add pcp user to /etc/aliases (#1744089)
  - set PATH if it is empty in csh.login (#1744104)
  - lang.csh: prevent grep from failing so scripts do not end
    prematurely when tcsh -e option in use (#1678706)
  - use full path for non-builtins (#1688302)
  - add nrpe tcp port 5666 to /etc/services (#1730396)


author: Pavel Raiskup <praiskup@redhat.com> - 1.2.11-1
changelog:
  - latest upstream release (rhbz#1409372)
  - cleanup rpmlint
  - revert fix for rhbz#985344
  - requires with %_isa tag
  - drop zlib Z_BLOCK flush patch (rhbz#1417355)


author: luto@kernel.org - 1.9-1
changelog:
  - Update to 1.9
  - Certain fabric functionality may not work yet due to missing dracut
    support and missing hostid and hostnqn configuration.


author: Matej Cepl <mcepl@redhat.com> - 0.6.1-2
changelog:
  - Fix requires, for reasons why other development files were not
    eliminated see https://github.com/pyca/cryptography/issues/1463.


author: Nathaniel McCallum <npmccallum@redhat.com> - 0.7.2-1
changelog:
  - New upstream release. BSD is now an optional license.
  - Fix test running on python3
  - Add upstream patch to fix test paths


author: Christian Heimes <cheimes@redhat.com> - 2.2.1-2
changelog:
  - Drop Python 2 subpackages from RHEL 8, fixes RHBZ#1589754
  - Remove unnecessary copy and shebang mangling


author: Christian Heimes <cheimes@redhat.com> - 2.3-1
changelog:
  - New upstream release 2.3
  - Fix AEAD tag truncation bug, CVE-2018-10903, RHBZ#1602755, RHBZ#1602932


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.97-1
changelog:
  - Update to 0.97. This release contains a port from EggDBus to the
    GDBus code available in recent GLib releases.


author: David Zeuthen <davidz@redhat.com> - 0.97-3
changelog:
  - Add a patch to make pkcheck(1) work the way libvirtd uses it (#623257)
  - Require GLib >= 2.25.12 instead of 2.25.11
  - Ensure polkit-gnome packages earlier than 0.97 are not used with
    these packages


author: David Zeuthen <davidz@redhat.com> - 0.101-2
changelog:
  - Nuke desktop_admin_r and desktop_user_r groups - just use the
    wheel group instead (#688363)
  - Update the set of configuration directives that gives users
    in the wheel group extra privileges


author: David Zeuthen <davidz@redhat.com> 0.102-2.el8
changelog:
  - Add patch to neuter the annoying systemd behavior where stdout/stderr
    is sent to the system logs


author: David Zeuthen <davidz@redhat.com> 0.103-1.el8
changelog:
  - Update to upstream release 0.103
  - Drop upstreamed patch
  - Drop Fedora-specific policy, it is now upstream (fdo #41008)


author: David Zeuthen <davidz@redhat.com> 0.104-1.el8
changelog:
  - Update to upstream release 0.104
  - Force usage of systemd (instead of ConsoleKit) for session tracking


author: David Zeuthen <davidz@redhat.com> 0.105-1.el8
changelog:
  - Update to upstream release 0.105
  - Nuke patches that are now upstream
  - Change 'PolicyKit' to 'polkit' in summary and descriptions


author: David Zeuthen <davidz@redhat.com> 0.106-1.el8
changelog:
  - Update to upstream release 0.106
  - Authorizations are no longer controlled by .pkla files - from now
    on, use the new .rules files described in the polkit(8) man page


author: David Zeuthen <davidz@redhat.com> 0.108-1.el8
changelog:
  - Update to upstream release 0.108
  - Drop upstreamed patches
  - This release dynamically loads the JavaScript interpreter and can
    cope with it not being available. In this case, polkit authorization
    rules are not processed and the defaults for an action - as defined
    in its .policy file - are used for authorization decisions.
  - Add new meta-package, polkit-js-engine, that pulls in the required
    JavaScript bits to make polkit authorization rules work. The default
    install - not the minimal install - should include this package


author: David Zeuthen <davidz@redhat.com> 0.108-3.el8
changelog:
  - Attempt to open the correct libmozjs185 library, otherwise polkit
    authz rules will not work unless js-devel is installed (fdo #57146)


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Make the JavaScript engine mandatory.  The polkit-js-engine package has been
    removed, main polkit package Provides:polkit-js-engine for compatibility.
  - Add Requires: polkit-pkla-compat
    Resolves: #908808


author: Miloslav Trmač <mitr@redhat.com> - 0.110-4
changelog:
  - Shut up rpmlint about Summary:
  - Build with V=1
  - Use %{_unitdir} instead of hard-coding the path
  - Use the new systemd macros, primarily to run (systemctl daemon-reload)
    Resolves: #857382


author: Miloslav Trmač <mitr@redhat.com> - 0.111-1
changelog:
  - Update to polkit-0.111
    Resolves: #917888
  - Use SpiderMonkey from mozjs17 instead of js
  - Ship the signature in the srpm
  - Try to preserve timestamps in (make install)


author: Miloslav Trmač <mitr@redhat.com> - 0.112-2
changelog:
  - Workaround pam_systemd setting broken XDG_RUNTIME_DIR
    Resolves: #1033774
  - Always use mozjs-17.0 even if js-devel is installed


author: Colin Walters <walters@redhat.com> - 0.112-8
changelog:
  - Split separate -libs package, so that NetworkManager can just depend on
    that, without dragging in the daemon (as well as libmozjs17).  This
    allows the creation of more minimal systems that want programs like NM,
    but do not need the configurability of the daemon; it would be ok if only
    root is authorized.


author: Rex Dieter <rdieter@fedoraproject.org> - 0.112-9
changelog:
  - polkit doesn't release reference counters of GVariant data (#1180886)
  - fix ldconfig scriptlets (move to -libs subpkg)


author: Miloslav Trmač <mitr@redhat.com> - 0.113-1
changelog:
  - Update to polkit-0.113 (CVE-2015-3218, CVE-2015-3255, CVE-2015-3256,
    CVE-2015-4625)
    Resolves: #910262, #1175061, #1177930, #1194391, #1228739, #1233810


author: Miloslav Trmač <mitr@redhat.com> - 0.113-2
changelog:
  - Add a fully versioned dependency from polkit to polkit-libs
    Resolves: #1241759
  - Require polkit-libs, not polkit, in polkit-devel


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.113-8
changelog:
  - Use %license, license needs to be in -libs as it's the only guaranteed installed package
  - Move to mozjs38
  - Other upstream fixes
  - Spec cleanups


author: Miloslav Trmač <mitr@redhat.com> - 0.113-12
changelog:
  - Fix a memory leak in PolkitPermission.
    Patch by Rui Matos <tiagomatos@gmail.com>
    Resolves: #1433915


author: Jan Rybar <jrybar@redhat.com> - 0.115-7
changelog:
  - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
  - Mitigation of regression caused by fix of CVE-2018-19788
  - Resolves: rhbz#1693781
  - Resolves: rhbz#1693814


author: Miroslav Lichvar <mlichvar@redhat.com> 14:0.9.5-1
changelog:
  - split from tcpdump package (#193657)
  - update to 0.9.5
  - don't package static library
  - maintain soname


author: Miroslav Lichvar <mlichvar@redhat.com> 14:1.1.1-3
changelog:
  - ignore /sys/net/dev files on ENODEV (#693943)
  - drop ppp patch
  - compile with -fno-strict-aliasing


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.1.b45
changelog:
  - New upstream release 0.4b45 (#1361495)
  - Fix issue with bad UUID error message (#1048548)
  - Spec file has been updated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.4-5
changelog:
  - Python 2 binary package renamed to python2-libxml2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.3-2
changelog:
  - Properly own all appropriate directories
  - Remove unneeded %defattr
  - Remove deprecated Group tag 
  - Make Obsoletes versioned
  - Remove unneeded ldconfig scriptlets


author: Pavel Březina <pbrezina@redhat.com> - 1.0-2
changelog:
  - authconfig --update overwrites current profile (RHBZ #1628492)
  - authselect profile nis enhancements (RHBZ #1628493)
  - scriptlet can fail if coreutils is not installed  (RHBZ #1630896)
  - authconfig --update --enablenis stops ypserv (RHBZ #1632567)
  - compat tool generates invalid pwquality configuration (RHBZ #1628491)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-3
changelog:
  - scriptlet can fail if coreutils is not installed  (RHBZ #1630896)
  - fix typo (require systemd instead of systemctl)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-7
changelog:
  - pam_systemd shouldn't be optional in system-auth (RHBZ #1643928)
  - compat tool: support --enablerequiresmartcard (RHBZ #1649277)
  - compat tool: support --smartcardaction=0 (RHBZ #1649279)
  - remove ecryptfs from authselect since it is not present in rhel8 (RHBZ #1649282)
  - authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-9
changelog:
  - fix sources for official rhel translations (RHBZ #1608286)
  - fix coverity warnings for authselect enable-features should error on unknown features (RHBZ #1651637)


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: David Nalley <david@gnsa.us> 0.7.0-2
changelog:
  - Added some verbiage regarding what WBEM is and expanding WBEM and CIM acronyms
  - Added python-twisted as a dependency


author: Tony Asleson <tasleson@redhat.com> - 0.11.0-8
changelog:
  - Fix the conflict with sblim-wbemcli: RHBZ #1757855
  - Corrected warning about multiple file inclusion


author: Petr Pisar <ppisar@redhat.com> - 1.8-1
changelog:
  - 1.8 bump
  - License changed from GPLv2+ to (GPLv3+ and GFDL)
  - Disable printing command failure in POSIX mode


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - dhclient logs its pid to make troubleshooting NM managed systems
    with multiple dhclients running easier (#546792)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-18
changelog:
  - Hide startup info when starting dhcpd6 service.
  - Remove -TERM from calling killproc when stopping dhcrelay (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
  - document -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559142)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - In dhclient-script:
    - use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet' resp. '-f[amily] inet6'
    - do not use IP protocol family identifier with 'ip link'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#573090)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-14
changelog:
  - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast option
  - Fix dhclient-script to set interface MTU only when it's greater than 576 (#574629)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-15
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559147)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559147)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559153)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-18
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578097)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20
changelog:
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#586999)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - 4.1.1-P1: pair of bug fixes including one for CVE-2010-2156 (#601405)
  - Compile with -fno-strict-aliasing


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
changelog:
  - Add 12-dhcpd NM dispatcher script (#565921)
  - Rename 10-dhclient to 11-dhclient (10-sendmail already exists)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-16.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-22.P2
changelog:
  - 4.2.0-P2: fix for CVE-2010-3616 (#662326)
  - Use upstream fix for #628258
  - Provide versioned symbols for rpmlint


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-0.1.b1
changelog:
  - 4.2.1b1: fix for CVE-2011-0413 (#672996)
  - No longer need invalid-dhclient-conf, parse_date and release6-elapsed patches


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
changelog:
  - Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
    with the same version and release (bug #705037).
  - Fix triggerun scriptlet


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-11.P1
changelog:
  - Add triggerpostun scriptlet tied to dhcp-sysvinit
  - Make it possible to build without downstream patches (Kamil Dudka)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
changelog:
  - Removed upstream-merged IFNAMSIZ.patch
  - Polished patches according to results from static analysis of code.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-0.1.b1
changelog:
  - 4.2.2b1: upstream merged initialization-delay.patch
  - Drop all capabilities in dhcpd/dhcrelay (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-2
changelog:
  - #699713:
    - Use '--enable-paranoia --enable-early-chroot' configure flags
    - Create/delete dhcpd user in %post/%postun
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-3
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-6
changelog:
  - PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same
  - One more tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-7
changelog:
  - Support for IPoIB (IP over InfiniBand) interfaces (#660681)
  - Hopefully last tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-12
changelog:
  - change ownership of /var/lib/dhcpd/ to dhcpd:dhcpd (#744292)
  - no need to drop capabilies in dhcpd since it's been running as regular user


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-2
changelog:
  - Write PID file BEFORE changing of the effective user/group ID.
  - Really define _hardened_build this time


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-3
changelog:
  - Write lease file AFTER changing of the effective user/group ID.
  - Move omshell from dhcp-common to main package (where it originally was).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
changelog:
  - Send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).
  - Don't build with -D_GNU_SOURCE, configure.ac uses AC_USE_SYSTEM_EXTENSIONS


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-9.P1
changelog:
  - don't ship legacy SysV initscripts
  - dhcpd6: move '-cf /etc/dhcp/dhcpd6.conf' from sysconfig/dhcpd6 to dhcpd6.service
  - run 'chown -R dhcpd:dhcpd /var/lib/dhcpd/' before starting dhcpd/dhcpd6 service
    for the case where leases file is owned by root:root as a
    consequence of running dhcpd without '-user dhcpd -group dhcpd' (#744292)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-10.P1
changelog:
  - hopefully we don't need 12-dhcpd anymore as 'After=network.target'
    in dhcpd[6].service should take care of the original problem (#565921)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-11.P1
changelog:
  - revert change made in 4.2.3-3 because of failing failover inicialization (#765967)
    the procedure is now:
    init lease file, init failover, init PID file, change effective user/group ID
  - don't need to fix lease files ownership before starting service
  - dhclient-script: allow static route with a 0.0.0.0 next-hop address (#769463)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-0.5.rc1
changelog:
  - dhcpd.service: explicitly add -cf to indicate what conf file we use (#819325)
  - no need to copy /etc/*.conf to /etc/dhcp/*.conf in %prep anymore


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-6
changelog:
  - ib.patch: added fall-back method (using ioctl(SIOCGIFHWADDR)) when getting
              of HW address with getifaddrs() fails (#626514-c#63, #840601).


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-12.P1
changelog:
  - dhclient-script: fixed CONFIG variable value passed to need_config (#848858)
  - dhclient-script: calling dhclient-up-hooks after setting up route, gateways 
                     & interface alias (#848869)


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
changelog:
  - SystemD unit files don't use Environment files any more (#850558)
  - NetworkManager dispatcher script doesn't use DHCPDARGS any more


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-22.P2
changelog:
  - add After=time-sync.target to dhcpd[6].service (#878293)
  - remove groff from BuildRequires (no idea why it's been there)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-2
changelog:
  - during update convert DHC*ARGS from /etc/sysconfig/dhc*
    to /etc/systemd/system/dhc*.service (#895475)
  - 12-dhcpd NM dispatcher script now restarts also dhcpd6 service


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-5
changelog:
  - remove missing-ipv6-not-fatal.patch because the concerning code is later
    removed with getifaddrs.patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-21
changelog:
  - 12-dhcpd: wait a few seconds before restarting services (#1003695)
  - another solution for #1001742 (#1005814#c10)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-23
changelog:
  - 'No subnet declaration for <iface>' should be info, not error
  - decrease the sleep in 12-dhcpd due to timeout (#1003695#8)


author: Filipe Brandenburger <filbranden@google.com> - 12:4.3.0-15
changelog:
  - dhclient-script: fix issue with classless static routes that breaks Fedora 20 on GCE cloud (#1102830)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-5
changelog:
  - spec: use -D with 'install'
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
    added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-11
changelog:
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-15
changelog:
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.3-0.1b1
changelog:
  - 4.3.3b1
  - enable krb5/gssapi authentication for OpenLDAP
  - enable support for binary insertion of leases


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.3-4
changelog:
  - dhclient-script: make_resolv_conf(): keep old nameservers
    if server sends domain-name/search, but no nameservers (#1269595)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.4-3
changelog:
  - [dhclient] rename -R option to --request-options (#1357947)
  - [dhclient] rename -timeout option to --timeout


author: Petr Menšík <pemensik@redhat.com> - 12:4.3.6-14
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.3.6-33
changelog:
  - Resolves: #1673946 - Change default prefix length to 128
  - Add address-prefix-lenght option to change default value
  - Fix backporting issues


author: Daniel Veillard <veillard@redhat.com> 1.1.24-1.fc10
changelog:
  - release of 1.1.24
  - fixes a few bugs including the key initialization problem
  - tentative fix for multiarch devel problems


author: Daniel Veillard <veillard@redhat.com> 1.1.25-1
changelog:
  - release of 1.1.25
  - Add API versioning  for libxslt shared library
  - xsl:sort lang support using the locale
  - many bug fixes


author: Matthias Clasen <mclasen@redhat.com> - 1.1.28-3
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.1.29-5
changelog:
  - Python 2 binary package renamed to python2-libxslt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Doug Ledford <dledford@redhat.com> - 3.3.5-1
changelog:
  - Update to latest upstream release.  We need various defines in ib_types.h
    for the latest ibutils package to build properly, and the latest ibutils
    package is needed because we found licensing problems in the older
    tarballs during review.


author: Doug Ledford <dledford@redhat.com> - 3.3.9-1
changelog:
  - Update to latest upstream version
  - Add /etc/sysconfig/opensm for use by opensm init script
  - Enable the ability to start more than one instance of opensm for multiple
    fabric support
  - Enable the ability to start opensm with a priority other than default for
    support of backup opensm instances


author: Doug Ledford <dledford@redhat.com> - 3.3.13-1
changelog:
  - Update to latest upstream version
  - Fix a minor issue in init scripts that would cause systemd to try and
    start/stop things in the wrong order
  - Add a patch to allow us to specify the subnet prefix on the command line


author: Doug Ledford <dledford@redhat.com> - 3.3.15-2
changelog:
  - More tweaks to systemd setup (proper scriptlets now)
  - More tweaks to old sysv init script support (fix Requires)


author: Doug Ledford <dledford@redhat.com> - 3.3.15-5
changelog:
  - Drop the old sysv init script
  - Fix opensm-launch to restart opensm in a loop.  This works around the
    fact that systemd starts opensm so early that we very well might not have
    sync on the link yet.  Without the physical link being up, opensm exits
    immediately.  This way opensm will get restarted every 30 seconds until
    sync is active on the link or until the opensm service is stopped.
  - Always install the newly generated opensm-%{version}.conf as opensm.conf
  - Make the launch work properly in the event that no GUIDs are set and
    there are no numbered config files


author: Michael Schwendt <mschwendt@fedoraproject.org> - 3.3.17-2
changelog:
  - Don't include manual page directories (#1089412).
  - Use standard group Development/Libraries in library devel packages.
  - Use %?_isa in base package dependencies.


author: Stephen Gallagher <sgallagh@redhat.com> - 0.2.0-1
changelog:
  - Update to libmodulemd 0.2.0
  - Adds gtk-doc generated documentation
  - (ABI-break) Makes all optional properties accept NULL as a value to clear
    them
  - (ABI-break) Modulemd.SimpleSet takes a STRV (char **) instead of a
    GLib.PtrArray
  - Fixes a bug where the name was not always set for components
  - Adds support for dumping YAML from the introspected API
  - Includes add/remove routines for profiles


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
changelog:
  - Support modulemd v2
  - Add tool to do quick validation of modulemd
  - Fix memory management
  - Warn and ignore unparseable sub-documents in the YAML
  - Fix several memory issues detected by Coverity scan


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Be more strict with certain parser edge-cases
  - Replace popt argument processing with glib
  - Drop upstreamed patches


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - RPM components are properly emitted when no module components exist
  - Parser works around late determination of modulemd version


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1
changelog:
  - Update to version 1.1.0
  - Adds support for handling modulemd-defaults YAML documents
  - Adds peek()/dup() routines to all object properties
  - Adds Modulemd.Module.dup_nsvc() to retrieve the canonical form of the unique module identifier.
  - Adds support for boolean types in the XMD section
  - Revert obsoletion of pythonX-modulemd packages for now


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - Update to version 1.1.1
  - Make default stream and profiles optional
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/25
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/26
  - Fixes: https://github.com/fedora-modularity/libmodulemd/issues/27


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.2-1
changelog:
  - Update to version 1.1.2
  - Revert backwards-incompatible API change
  - Fix version string in pkgconfig file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-1
changelog:
  - Update to version 1.2.0
  - New Functions:
    * Modulemd.objects_from_file()
    * Modulemd.objects_from_string()
    * Modulemd.dump()
    * Modulemd.dumps()
    * Modulemd.Defaults.new_from_file()
    * Modulemd.Defaults.new_from_string()
  - Deprecated Functions:
    * Modulemd.Module.new_all_from_file()
    * Modulemd.Module.new_all_from_file_ext()
    * Modulemd.Module.new_all_from_string()
    * Modulemd.Module.new_all_from_string_ext()
    * Modulemd.Module.dump_all()
    * Modulemd.Module.dumps_all()
  - Bugfixes
    * Properly use G_BEGIN_DECLS and G_END_DECLS in headers
    * Assorted fixes for memory ownership in GObject Introspection


author: Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
  - New Public Objects:
    * Modulemd.Prioritizer - tool to merge module defaults
  - New Public Functions:
    * Modulemd.SimpleSet.is_equal()
    * Modulemd.Defaults.copy()
    * Modulemd.Defaults.merge()


author: Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
  - Adds new API for returning failed YAML subdocuments
  - Stop emitting log messages by default (polluting consumer logs)
  - Validate RPM artifacts for proper NEVRA format
  - Improve the validator tool
  - Drop upstreamed patch


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
changelog:
  - Update to version 1.5.0
  - Adds support for "intents" in Modulemd.Defaults
  - Adds `Modulemd.get_version()`
  - Adds support for RPM whitelists in the buildopts
  - Adds a new object: Modulemd.Buildopts
  - Deprecates Modulemd.Module.get_rpm_buildopts()
  - Deprecates Modulemd.Module.set_rpm_buildopts()
  - Fixes some missing license blurbs


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
changelog:
  - Update to 1.6.0
  - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
  - Adds Modulemd.Translation and Modulemd.TranslationEntry objects
  - Adds Modulemd.ImprovedModule object that collects streams, defaults and
    translations together
  - Adds new Modulemd.index_from_*() funtions to get a hash table of
    Modulemd.ImprovedModule objects for easier searching
  - Moves function documentation to the public headers
  - Corrects the license headers to MIT (they were incorrectly listed as MITNFA
    in previous releases)
  - Makes the "eol" field optional for Modulemd.ServiceLevel
  - Clean up HTML documentation
  - Fixes a type error on 32-bit systems


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.5.0-4
changelog:
  - Python 2 binary package renamed to python2-sanlock
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Ales Matej <amatej@redhat.com> - 4.0.10-1
changelog:
  - Update to 4.0.10
  - debuginfo-install: Update both debuginfo and debugsource for updated package (RhBug:1586084)
  - copr: Support multilib repofiles (RhBug:1393664)
  - copr: Fix disable if copr instance has non-default port
  - copr: Fix repoid when using subdirectories in copr project


author: Ales Matej <amatej@redhat.com> - 4.0.11-1
changelog:
  - Update to 4.0.11
  - [spec] Specify attributes for ghost file (RhBug:1754463)
  - download: add the --debugsource option (RhBug:1637008)
  - Fix incorrect handling richdeps in buildep (RhBug:1756902)


author: Ales Matej <amatej@redhat.com> - 4.0.12-1
changelog:
  - Update to 4.0.12
  - [reposync] Add --urls option (RhBug:1686602)
  - [versionlock] Add --raw option (RhBug:1645564)
  - [doc] move manpages for plugins to "dnf-PLUGIN" (RhBug:1706386)
  - Add new plugin post-transaction-actions (RhBug:967264)
  - [builddep] Add --skip-unavailable switch (RhBug:1628634)
  - [versionlock] Don't apply excludes on @System (RhBug:1726712)
  - [reposync] Ignore only modular excludes (RhBug:1750273)


author: Ales Matej <amatej@redhat.com> - 4.0.12-2
changelog:
  - [config-manager] Allow use of --set-enabled without arguments (RhBug:1679213)
  - [reposync] Fix --delete with multiple repos (RhBug:1774103)
  - Redesign reposync --latest for modular system (RhBug:1775434)


author: Matthias Saou <http://freshrpms.net/> 1.0.4-1
changelog:
  - Update to 1.0.4.
  - Update syntax patch.
  - Execute bootstrap if no configure script is found.
  - Don't own entire man? directories.
  - Own data and lib lksctp-tools directories.
  - Move devel libs in _libdir/lksctp-tools/ to devel package.
  - Exclude .la files.
  - Minor spec file cleanups.


author: Xin Long <lxin@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191112.2
changelog:
  - Package the publicy available microcode-20191112 release (#1758539):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191113.1
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191115.1
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191115.3
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt (#1780009).


author: - Orion Poplawski <orion@cora.nwra.com> - 3.2.6-4
changelog:
  - Add patch to fix extraneous version path entry properly
  - Use --with-module-path to point to /etc/modulefiles for local modules,
    this also fixes bug #436041


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.7b-7
changelog:
  - Add patch to set a sane default MANPATH
  - Add createmodule.sh utility script for creating modulefiles


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-2
changelog:
  - Add patch to comment out stray module use in modules file when not using
    versioning (bug #895555)
  - Add patch to fix module clear command (bug #895551)
  - Add patch from modules list to add completion to avail command


author: Orion Poplawski <orion@cora.nwra.com> - 3.2.10-9
changelog:
  - Use alternatives for /etc/profile.d/modules.{csh,sh}
  - Add /usr/share/modulefiles to MODULEPATH
  - Add rpm macro to define %_modulesdir


author: Orion Poplwski <orion@cora.nwra.com> - 3.2.10-14
changelog:
  - Fix createmodule.sh to handle exported functions (bug #1197321)
  - Handle more prefix/suffix cases in createmodule.{sh,py} (bug #1079341)


author: Petr Pisar <ppisar@redhat.com> - 3.28-2
changelog:
  - Introduce a build-condition on groff
  - Rename a _without_tk build-condition to
    _without_perl_Pod_Perldoc_enables_tk_test


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190918-1
changelog:
  - Intel CPU microcode update to 20190918 (#1753544).
  - Add new disclaimer, generated based on relevant caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-1
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1755019, #1764060, #1764073,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-2
changelog:
  - Package the publicy available microcode-20191112 release (#1755027):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-3
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt (#1766178).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20191115.5
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20200602.1
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827183):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a;
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.
  - Change the URL to point to the GitHub repository since the microcode download
    section at Intel Download Center does not exist anymore.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.3.0-11
changelog:
  - Python 2 binary package renamed to python2-urwid
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: David Cantrell <dcantrell@redhat.com> - 1.3.1-2
changelog:
  - Apply upstream fix for EINTR handling in test_vterm test case
  - Apply upstream fix for test_remove_watch_file flakiness
  - Apply upstream fix for test_vterm handling of NUL characters


author: Lumír Balhar <lbalhar@redhat.com> - 39.2.0-4
changelog:
  - New subpackage platform-python-setuptools without files from /usr/bin/*
  - python3-setuptools contains only files from /usr/bin/* and depends
    on platform-python-setuptools
  - Resolves: rhbz#1641973


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.2-1
changelog:
  - Initial Red Hat Linux packaging, based on spec file from
    Simon J Mudd <sjmudd@pobox.com>
  - Changes from that:
    - Set up chroot environment in triggers to make sure we catch glibc errata
    - Remove some hacks to support building on all sorts of distributions at
      the cost of specfile readability
    - Remove postdrop group on deletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-1
changelog:
  - 1.1.3, TLS 0.8.3
  - Fix updating
  - Don't run the statistics cron job
  - remove requirement on perl Date::Calc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.3-2
changelog:
  - listen on 127.0.0.1 only by default (#60071)
  - Put config samples in %{_docdir}/%{name}-%{version} rather than
    /etc/postfix (#60072)
  - Some spec file cleanups


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.3-3
changelog:
  - adjust the default postfix-files config file to match the alternatives setup
    by altering the arguments passed to post-install in the %install phase
    (otherwise, it might point to sendmail's binaries, breaking it rather rudely)
  - adjust the post-install script so that it silently uses paths which have been
    modified for use with alternatives, for upgrade cases where the postfix-files
    configuration file isn't overwritten
  - don't forcefully strip files -- that's a build root policy
  - remove hard requirement on openldap, library dependencies take care of it
  - redirect %postun to /dev/null
  - don't remove the postfix user and group when the package is removed


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.4-1
changelog:
  - 1.1.4
  - TLS 0.8.4
  - Move postalias run from %post to init script to work around
    anaconda being broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed missing smtpd.conf file for SASL support and included SASL Postfix
    Red Hat HOWTO (#62505).
  - Included SASL2 support patch (#68800).


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix shell in /etc/passwd (#68373)
  - fix documentation in /etc/postfix (#65858)
  - Provides: /usr/bin/newaliases (#66746)
  - fix autorequires by changing /usr/local/bin/perl to /usr/bin/perl in a
    script in %doc (#68852), although I don't think this is necessary anymore


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to release 2.0.6
  - remove chroot as this is now the preferred installation according to Wietse Venema, the postfix author


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - upgrade to new 2.0.11 upstream release
  - fix authentication problems
  - rewrite SASL documentation
  - upgrade to use SASL version 2
  - Fix bugs 75439, 81913 90412, 91225, 78020, 90891, 88131


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-3
changelog:
  - add zlib-devel build prereq, fixes bug 112822
  - remove copy of resolve.conf into chroot jail, fixes bug 111923


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.16-4
changelog:
  - remove mysqlclient prereq, fixes bug 101779
  - remove md5 verification override, this fixes bug 113370. Write parse-postfix-files
    script to generate explicit list of all upstream files with ownership, modes, etc.
    carefully add back in all other not upstream files, files list is hopefully
    rock solid now.


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - revert back to v1 of sasl because LDAP still links against v1 and we can't 
  - bump revision for build
    have two different versions of the sasl library loaded in one load image at
    the same time. How is that possible? Because the sasl libraries have different 
    names (libsasl.so & libsasl2.so) but export the same symbols :-(
    Fixes bugs 115249 and 111767


author: John Dennis <jdennis@porkchop.devel.redhat.com>
changelog:
  - set sasl back to v2 for mainline, this is good for fedora and beyond,
    for RHEL3, we'll branch and set set sasl to v1 and turn off ipv6


author: John Dennis <jdennis@finch.boston.redhat.com> 2:2.0.18-1
changelog:
  - bring source up to upstream release 2.0.18
  - include pflogsumm, fixes bug #68799
  - include smtp-sink, smtp-source man pages, fixes bug #118163


author: John Dennis <jdennis@redhat.com> 2:2.0.18-4
changelog:
  - remove version from pflogsumm subpackage, it was resetting the
    version used in the doc directory, fixes bug 119213


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.1-3.1
changelog:
  - fixed directory permissions in %doc (#125406)
  - fixed missing spool dirs (#125460)
  - fixed verify problem for aliases.db (#125461)
  - fixed bogus upgrade warning (#125628)
  - more spec file cleanup


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.4-1
changelog:
  - new version 2.1.4
  - new ipv6 and tls+ipv6 patches: 1.25-pf-2.1.4
  - new pfixtls-0.8.18-2.1.3-0.9.7d patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2
changelog:
  - switched over to system aliases file and database in /etc/ (#117661)
  - new reuires and buildrequires for setup >= 2.5.36-1


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-2.2
changelog:
  - automated postalias call in init script
  - removed postconf call from spec file: moved changes into patch


author: Thomas Woerner <twoerner@redhat.com> 2:2.1.5-5.1
changelog:
  - fixed open relay bug in postfix ipv6 patch: new version 1.26 (#146731)
  - fixed permissions on doc directory (#147280)
  - integrated fixed fqdn patch from Joseph Dunn (#139983)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.0-1
changelog:
  - new version 2.2.0
  - cleanup of spec file: removed external TLS and IPV6 patches, removed 
    smtp_sasl_proto patch
  - dropped samples directory till there are good examples again (was TLS and
    IPV6)
  - v2.2.0 fixes code problems: #132798 and #137858


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.5-2.1
changelog:
  - replaced postconf and postalias call in initscript with newaliases (#156358)
  - fixed initscripts messages (#155774)
  - fixed build problems when sasl is disabled (#164773)
  - fixed pre-definition of mailbox_transport lmtp socket path (#122910)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.2-1
changelog:
  - new version 2.3.2 with major upstream fixes:
    - corrupted queue file after a request to modify a short message header
    - panic after spurious Milter request when a client was rejected
    - maked the Milter more tolerant for redundant "data cleanup" requests
  - applying pflogsumm-conn-delays-dsn-patch from postfix tree to pflogsumm


author: Thomas Woerner <twoerner@redhat.com> 2:2.3.6-1
changelog:
  - new version 2.3.6
  - limiting SASL mechanisms to plain login for sasl with saslauthd (#175259)
  - dropped usage of ed in the install stage


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-1
changelog:
  - new stable version 2.4.3
  - enabled mysql support (rhbz#185515)
  - dropped build requirements for gawk, ed and sed


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.3-2
changelog:
  - diabled mysql support again (rhbz#185515)
  - added support flag for PostgreSQL build (rhbz#180579)
    Ben: Thanks for the patch
  - Fixed remaining rewiew problems (rhbz#226307)


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-2
changelog:
  - made init script lsb conform (#243286, rhbz#247025)
  - added link to postfix sasl readme into Postfix-SASL-RedHat readme


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.5-3
changelog:
  - fixed multilib conflict for makedefs.out: rename to makedefs.out-%{_arch}
    (rhbz#342941)
  - enabled mysql support


author: Thomas Woerner <twoerner@redhat.com> 2:2.4.6-1
changelog:
  - new verison 2.4.6
  - added virtual server(smtp) provide (rhbz#380631)
  - enabling IPv6 support (rhbz#197105)
  - made the MYSQL and PGSQL defines overloadable as build argument


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-2
changelog:
  - fixed fix for enabling IPv6 support (rhbz#437024)
  - added new postfix data directory (rhbz#437042)


author: Thomas Woerner <twoerner@redhat.com> 2:2.5.1-3
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936) (rhbz#459101)


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.5-2
changelog:
  - enable Large file support on 32-bit archs (#428996)
  - fix mailq(1) and newaliases(1) man pages (#429501)
  - move pflogsumm and qshape to -perl-scripts subpackage (#467529)
  - update pflogsumm to 1.1.1
  - fix large-fs patch
  - drop open_define patch
  - add -Wno-comment to CFLAGS


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.5.6-1
changelog:
  - update to 2.5.6 (#479108)
  - rebuild /etc/aliases.db only when necessary (#327651)
  - convert doc files to UTF-8


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.1-1
changelog:
  - update to 2.6.1
  - move non-config files out of /etc/postfix (#490983)
  - fix multilib conflict in postfix-files (#502211)
  - run chroot-update script in init script (#483186)
  - package examples (#251677)
  - provide all alternatives files
  - suppress postfix output in post script


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.6.5-3
changelog:
  - fix init script LSB compliance (#528151)
  - update pflogsumm to 1.1.2
  - require Date::Calc for pflogsumm (#536678)
  - fix some rpmlint warnings


author: Miroslav Lichvar <mlichvar@redhat.com> 2:2.7.0-2
changelog:
  - follow guidelines for alternatives (#570801)
  - move sasl config to /etc/sasl2 (#574434)
  - drop sasl v1 support
  - remove unnecessary requirements
  - use bcond macros


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.8.7-2
changelog:
  - Introduce systemd unit file, thanks to Jóhann B. Guðmundsson <johannbg@hi.is>
    Resolves: rhbz#718793


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.10.0-2
changelog:
  - Fixed systemd error message regarding chroot-update, patch provided
    by John Heidemann <johnh@isi.edu>
    Resolves: rhbz#917463


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:2.11.0-1
changelog:
  - New version
    Resolves: rhbz#1054116
  - Updated / de-fuzzified patches
  - Compiled with USE_LDAP_SASL if both "ldap" and "sasl" options are enabled.
    Patch provided by Davide Principi <davide.principi@nethesis.it>
    Resolves: rhbz#1052958


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.0-1
changelog:
  - New version
    Resolves: rhbz#1190797
  - Defuzzified alternatives, config, large-fs patches
  - Rebased files patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.0-4
changelog:
  - Switched to dynamically loaded libraries and database plugins
  - Enabled PostgreSQL support by default
  - Added SQLite support
  - Added CDB support


author: Dodji Seketeli <dodji@seketeli.org> - 2:3.0.1-2
changelog:
  - Avoid spurious errors by re-setting errno to 0 before calling that readdir()
    Resolves: rhbz#1204139
  - Add a patch to support compiling on Linux 4.*


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.2-1
changelog:
  - New version
    Resolves: rhbz#1245183
  - Dropped linux4 patch (not needed)
  - Defuzzified alternatives patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.0.3-4
changelog:
  - Increased alternatives priority, it is desirable to prefer postfix
    to e.g. ssmtp
    Resolves: rhbz#1255131


author: Ondřej Lysoněk <olysonek@redhat.com> - 2:3.1.1-3
changelog:
  - Preserve timestamps during 'make install'
    Patch provided by Robert Scheck
    Resolves: rhbz#1307064


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.1.2-1
changelog:
  - New version
    Resolves: rhbz#1370899
  - Dropped timestamps patch (upstream rejected)
  - Fixed minor whitespace problem


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.0-1
changelog:
  - New version
    Resolves: rhbz#1427860
  - De-fuzzified patches
  - Dropped timestamps patch (upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.1-1
changelog:
  - New version
    Resolves: rhbz#1460474
  - Updated pflogsumm to 1.1.5
  - Fixed warnings if IPv6 addresses are in the log
    Resolves: rhbz#1384871


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.5-1
changelog:
  - New version
    Resolves: rhbz#1539465
  - Switched to libnsl2, because nsl is no longer provided by glibc
  - Macro workaround not to check symbols during compilation, because
    plugins have symbols which are unresolvable during compile time


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.3.1-10
changelog:
  - Release bump and rebuild for relengs to be able to ship postfix-pcre,
    postfix-cdb, postfix-sqlite
    Resolves: rhbz#1745321


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-2.el8_1.1
changelog:
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1800552)


author: Kamil Dudka <kdudka@redhat.com> - 3.14.0-3
changelog:
  - fix programming mistakes detected by Coverity Analysis
  - document the --version option in the logrotate(8) man page (#1611498)


author: Jan Rybar <jrybar@redhat.com> - 6.6.3-2
changelog:
  - lastcomm: added new --pid option to show process PID and PPID
  - changelog update: 6.6.3-1 author change
  - spec file update: added correct access mode to created /var/account/pacct


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.6-2
changelog:
  - Splitted documentation to the doc subpackage
    Resolves: rhbz#1380291
  - Fixed whitespace
  - Dropped obsoleted defattr


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1:8.6.8-2
changelog:
  - Reverted _module_build macro check which fixes systemtap probes on RHEL-8
    Resolves: rhbz#1579386


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-1
changelog:
  - New upstream release 2.5 - fixes rhbz #1449666
  - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES


author: Filipe Rosset <rosset.filipe@gmail.com> - 2.5-4
changelog:
  - Fixes rhbz #1476851 tmux bell-action other not working
  - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Paul Howarth <paul@city-fan.org> - 1:0.236-1
changelog:
  - Update to 0.236
    - Add Travis test configuration
    - Make test for PMC availability more reliable
    - Disable benchmark test rt62341.t as it runs out of memory on many smoker
      systems (CPAN RT#118310)
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1:0.237-1
changelog:
  - Update to 0.237
    - Don't load vars.pm (CPAN RT#132077)
  - Drop legacy Group: tag
  - Drop buildroot cleaning in %install section


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.4-1
changelog:
  - First build from the distribute codebase -- distribute-0.6.4.
  - Remove svn patch as upstream has chosen to go with an easier change for now.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.7-1
changelog:
  - Move easy_install back into the main package as the needed files have been
    moved from python-devel to the main python package.
  - Update to 0.6.7 bugfix.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.9-4
changelog:
  - Fix install to make /usr/bin/easy_install the py2 version
  - Don't need python3-tools since the library is now in the python3 package
  - Few other changes to cleanup style


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.10-1
changelog:
  - Update the python3 portions but disable for now.
  - Update to 0.6.10
  - Remove %pre scriptlet as the file has a different name than the old
    package's directory


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.13-5
changelog:
  - Upstream patch for compatibility problem with setuptools
  - Minor spec cleanups
  - Provide python-distribute for those who see an import distribute and need
    to get the proper package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.6.28-1
changelog:
  - New upstream release:
    - python-3.3 fixes
    - honor umask when setuptools is used to install other modules


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.8-1
changelog:
  - Update to upstream 0.8  release.  Codebase now runs on anything from
    python-2.4 to python-3.3 without having to be translated by 2to3.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 0.9.5-1
changelog:
  - Update to 0.9.5
    - package_index can handle hashes other than md5
    - Fix security vulnerability in SSL certificate validation
    - https://bugzilla.redhat.com/show_bug.cgi?id=963260


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.6-1
changelog:
  - Update to newer upstream release.  Some minor incompatibilities listed but
    they should affect few, if any consumers.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 1.1.7-1
changelog:
  - Update to newer upstream release that has our patch to the unittests
  - Fix for http://bugs.python.org/issue17997#msg194950 which affects us since
    setuptools copies that code. Changed to use
    python-backports-ssl_match_hostname so that future issues can be fixed in
    that package.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-1
changelog:
  - Update to new upstream release with a few things removed from the API:
    Changelog: https://pypi.python.org/pypi/setuptools#id139


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0-8
changelog:
  - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21
    Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel


author: Ralph Bean <rbean@redhat.com> - 6.0.2-2
changelog:
  - Modernized python2 macros.
  - Inlined locale environment variables in the %check section.
  - Remove bundled egg-info and .exes.


author: Kevin Fenzi <kevin@scrye.com> 17.1.1-3
changelog:
  - Drop no longer needed Requires/BuildRequires on python-backports-ssl_match_hostname
  - Fixes bug #1231325


author: Kevin Fenzi <kevin@scrye.com> - 34.1.1-1
changelog:
  - Update to 34.1.1. Fixes bug #1412268
  - Fix License tag. Fixes bug #1412268
  - Add Requires for fomerly bundled projects: six, packaging appdirs


author: Michal Cyprian <mcyprian@redhat.com> - 36.2.0-3
changelog:
  - Revert "Add --executable option to easy_install command"
    This enhancement is currently not needed and it can possibly
    collide with `pip --editable`option


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-4
changelog:
  - Switch macros to bcond's and make Python 2 optional to facilitate building
    the Python 2 and Python 3 modules.


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-5
changelog:
  - Add Patch 0 that fixes a test suite failure on Python 3 in absence of
    the Python 2 version of pip
  - Move docs to their proper place


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-6
changelog:
  - Add the platform-python subpackage
  - Disable tests so platform-python stack can be bootstrapped
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Tomas Orsava <torsava@redhat.com> - 36.2.0-7
changelog:
  - Re-enable tests to finish bootstrapping the platform-python stack
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Miro Hrončok <mhroncok@redhat.com> - 37.0.0-1
changelog:
  - Update to 37.0.0 (fixes #1474126)
  - Removed not needed pip3 patch (upstream included different version of fix)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Jiri Olsa <jolsa@redhat.com> - 0.9.9-1
changelog:
  - updating to version 0.9.9
  - Resolves: #881654
  - Resolves: #1028410
  - Resolves: #1045025
  - Resolves: #1045368
  - Resolves: #1045388


author: Stanislav Kozina <skozina@redhat.com> - 0.9.15-1
changelog:
  - always load whitelist file from kernel-abi-whitelists package, remove the attached files
  - always load Module.symvers file from kernel-devel package, remove attached files
  - use python-bugzilla instead of private bz_xmlrpc package
  - Resolves: #1328384
  - Resolves: #906664
  - Resolves: #906659
  - Resolves: #1272348


author: Stanislav Kozina <skozina@redhat.com> - 0.9.17-1
changelog:
  - Add -y option to provide path to the Module.symvers file
  - Resolves: #1366929
  - Resolves: #1366952


author: Stanislav Kozina <skozina@redhat.com> - 0.9.19-1
changelog:
  - Resolves: #1432864
  - Resolves: #1500383
  - Resolves: #1502930
  - Resolves: #1503526
  - Resolves: #1503603
  - Resolves: #1503964
  - Resolves: #1499249
  - Resolves: #1441455
  - Resolves: #1481310
  - Resolves: #1456140


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-1
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - Add modinfo vermagic field to the output.
  - Add kmod (provides modinfo) to requires.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-2
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - (OSCI) Add kmod to Makefile-generated Requires


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-6
changelog:
  - Fix sys/capabilities.h header (#55727)
  - Move to /lib, some applications seem to be using this rather early
    (#55733)


author: Jakub Jelinek <jakub@redhat.com> 1.10-12
changelog:
  - CFLAGS was using COPTFLAG variable, not COPTFLAGS
  - build with -fpic
  - apply the IA-64 patch everywhere, use capget/capset from glibc,
    not directly as _syscall (as it is broken on IA-32 with -fpic)
  - reenable alpha


author: Mike A. Harris <mharris@redhat.com> 1.10-13
changelog:
  - Removed %name macro sillyness from package Summary, description text, etc.
  - Removed archaic Prefix: tag
  - lib64 fixes everywhere to use _lib, _libdir, etc
  - Removed deletion of RPM_BUILD_DIR from %clean section
  - Added -q flag to setup macro
  - Severely cleaned up spec file, and removed usage of perl


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.2.1.el8_2]
changelog:
  - [net] vti[6]: fix packet tx through bpf_redirect() in XinY cases (Sabrina Dubroca) [1821375 1795145]
  - [net] xfrm interface: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
  - [net] vti[6]: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
  - [scripts] redhat: fix modpost.c prerequisites (Frantisek Hrbata) [1828229 1818499]
  - [infiniband] IB/core: Avoid deadlock during netlink message handling (Kamal Heib) [1821381 1818986]
  - [infiniband] RDMA/core: Support netlink commands in non init_net net namespaces (Kamal Heib) [1821381 1818986]
  - [misc] mei: me: add comet point (lake) H device ids (Ken Cox) [1825262 1815355]
  - [misc] mei: me: add comet point (lake) LP device ids (Ken Cox) [1825262 1815355]
  - [misc] mei: define dma ring buffer sizes for PCH12 HW and newer (Ken Cox) [1825262 1815355]
  - [misc] mei: hbm: define dma ring setup protocol (Ken Cox) [1825262 1815355]
  - [net] SUNRPC: fix krb5p mount to provide large enough buffer in rq_rcvsize (Steve Dickson) [1826219 1825388]
  - [mm] mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix flags for pmd migration when split (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
  - [mm] mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Rafael Aquini) [1827619 1763878]
  - [md] Revert "dm: always call blk_queue_split() in dm_process_bio()" (Mike Snitzer) [1821382 1820705]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.3.1.el8_2]
changelog:
  - [kernel] sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters (Peter Xu) [1832367 1799014]
  - [firmware] efi: fix a mistype in comments mentioning efivar_entry_iter_begin() (Vladis Dronov) [1829527 1804417]
  - [firmware] efi: add a sanity check to efivar_store_raw() (Vladis Dronov) [1829527 1804417]
  - [firmware] efi: fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov) [1829527 1804417]
  - [net] net/smc: keep vlan_id for SMC-R in smc_listen_work() (Philipp Rudo) [1827631 1796890]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.4.1.el8_2]
changelog:
  - [bluetooth] Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" (Gopal Tiwari) [1827620 1811534]
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
  - [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.6.1.el8_2]
changelog:
  - [char] tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (Steve Best) [1827632 1808048]
  - [netdrv] bonding: fix active-backup transition after link failure (Jarod Wilson) [1838477 1819408]
  - [netdrv] bonding: fix state transition issue in link monitoring (Jarod Wilson) [1838477 1819408]
  - [kernel] sched/fair: Allow a per-CPU kthread waking a task to stack on the same CPU, to fix XFS performance regression (Phil Auld) [1834517 1745111]
  - [block] block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Ming Lei) [1835531 1835532] {CVE-2020-12657}
  - [kvm] KVM: x86: use raw clock values consistently (Marcelo Tosatti) [1822498 1768622]
  - [kvm] KVM: x86: reorganize pvclock_gtod_data members (Marcelo Tosatti) [1822498 1768622]
  - [kvm] KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [1822498 1768622]


author: Bruno Meneguele <bmeneg@redhat.com> [4.18.0-193.6.2.el8_2]
changelog:
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}


author: Dridi Boukelmoune <dridi@fedoraproject.org>- 2.1-1
changelog:
  - Update to 2.1
  - Upstream moved to github
  - Upstream switched to autotools
  - Disable --as-needed until it's patched upstream
  - Drop defunct 32bit x86 support
  - Add ppc64le support
  - Run the new test suite


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add remaining binaries.
  - casts to remove compilation warnings.
  - terminate if -w deadline is reached exactly (#8724).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include README.ifenslave doco.
  - "ping -i N" was broke for N >= 3 (#9929).
  - update to ss000121:
  -- clockdiff: preserve raw socket errno.
  -- ping: change error exit code to 1 (used to be 92,93, ...)
  -- ping,ping6: if -w specified, transmit until -c limit is reached.
  -- ping,ping6: exit code non-zero if some packets not received within deadline.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a bunch of compiler warnings (#37131)
  - Fixed wrong exit code for no packets and deadline (#40323)
  - Moved arping to /sbin from /usr/sbin due to ifup call (#45785). Symlink from
    /usr/sbin/ provided for backwards compatibility.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added a patch to activate the rdisc server (#64270).
  - Display the countermeasures warning only in verbose (#55236)


author: Phil Knirsch <pknirsch@redhat.com> 20020124-7
changelog:
  - Added new BuildPreReqs for docbook-utils and perl-SGMLSpm (#66661)
  - Fixed ipv6 error printing problem (#66659).


author: Phil Knirsch <pknirsch@redhat.com> 20020927-3
changelog:
  - Removed bonding tarball and replaced it with ifenslave.c and README
  - FHS compliance for all tools, now to be found in /bin with compat symlinks to
    old places.


author: Phil Knirsch <pknirsch@redhat.com> 20020927-4
changelog:
  - Fixed DNS lookup problems (#68212).
  - Added warning if binding problem failed on subinterface (#81640).


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Martin Bacovsky <mbacovsk@redhat.com>- 20020927-42
changelog:
  - Resolves: #218706 - now defines the destination address along RFC3484
  - Resolves: #229630 - ifenslave(8) man page added
  - Resolves: #213716 - arping doesn't work on InfiniBand ipoib interfaces


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-1
changelog:
  - upgarde to new upstream iputils-s20070202
  - Resolves: #229995
  - Resolves: #225909 - Merge Review: iputils
  - patches revision


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-2
changelog:
  - Resolves: #234060: [PATCH] IDN (umlaut domains) support for ping and ping6
    patch provided by Robert Scheck <redhat@linuxnetz.de>


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-4
changelog:
  - resolves: #236725: ping does not work for subsecond intervals for ordinary user
  - resolves: #243197: RFE: Please sync ifenslave with current kernel
  - resolves: #246954: Initscript Review
  - resolves: #251124: can't build rdisc - OPEN_MAX undeclared


author: Martin Nagy <mnagy@redhat.com> - 20070202-6
changelog:
  - fix absolute symlinks and character encoding for RELNOTES (#225909)
  - preserve file timestamps (#225909)
  - use %{?_smp_mflags} (#225909)
  - fix service rdisc stop removing of lock file


author: Martin Nagy <mnagy@redhat.com> - 20071127-3
changelog:
  - major patch cleanup so it will be easier to get patches upstream
  - fix for #68212, previous fix actually didn't work for ping6
  - renewed the ia64 align patches
  - update README.bonding
  - clear up the code from warnings
  - spec file cleanup


author: Jiri Skala <jskala@redhat.com> - 20101006-3
changelog:
  - applied patch dropping capabilities of Ludwig Nussel
  - fixes building ping, pinpg6 with -pie option
  - moves most CFLAGS options from spec to Makefile


author: Jan Synáček <jsynacek@redhat.com> 20101006-15
changelog:
  - Ping fixes:
    + enable marking packets when the correct capabilities are set (#802197)
    + integer overflow (#834661)
    + Fallback to numeric addresses while exiting (#834661)


author: Jan Synáček <jsynacek@redhat.com> - 20121112-1
changelog:
  - Update to iputils-s20121112 (#875767)
    + drop unnecessary patches
    + update patches
    + wrap SO_BINDTODEVICE with the correct capability
    + fix incorrect free (hits when -lidn is used)


author: Jan Synáček <jsynacek@redhat.com> - 20121121-1
changelog:
  - Update to iputils-s20121121, drop unnecessary patches
  - Add capabilities to clockdiff and arping
  - Renumber patches
  - Fix arping's default device search logic


author: Jan Synáček <jsynacek@redhat.com> - 20121125-2
changelog:
  - Comment patches and cleanup
  - Update ifaddrs patch
  - Call usage() before limiting capabilities
  - Correct ifaddrs patch
  - Drop corr_type patch (gcc 4.4 build hack)
  - Fix missing end tags in sgml documentation


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-8
changelog:
  - reference documentation in the service files
  - remove redundant sysconfig-related stuff
  - remove sysvinit script


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Yunying Sun <yunying.sun@intel.com> - 3.1.0-1
changelog:
  - Update Requires version of tpm2-tss to 2.0.0
  - Remove BuildRequires for tcti-abrmd since it is optional
  - Remove BuildRequires for tcti-{device,mssim} as it is now dynamically loaded
  - Update to 3.1.0 release


author: Jerry Snitselaar <jsnitsel@redhat.com> - 3.1.1-4
changelog:
  - lib/tpm2_options: restore TCTI configuration environment variables
  - tpm2_getcap: restore tool output to print properties with TPM_PT prefix
  resolves: rhbz#1648001


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-14.20170916
changelog:
  - update to 6.0-20170916 (CVE-2017-13728 CVE-2017-13729 CVE-2017-13730
    CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Miro Hrončok <mhroncok@redhat.com> - 0.13-1
changelog:
  - Updated to 0.13
  - Added python3 and python2 subpackages
  - Add --with tests
  - Modernize spec
  - Remove merged patch
  - Update upstream URL


author: Lumír Balhar <lbalhar@redhat.com> - 0.14-3
changelog:
  - Backport patch from upstream/rhel7 which allows pifconfig to show
    multiple IPv4 addresses for each interface
  - Move patches to dist-git
  - Resolves: rhbz#1652174


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update to latest from NSA
    * Merged endianness and compute_av patches from Darrel Goeddel (TCS).
    * Merged range_transition support from Darrel Goeddel (TCS).
    * Added sepol_genusers function.


author: Dan Walsh <dwalsh@redhat.com> 1.3.6-1
changelog:
  - Update to latest from NSA
    * Changed sepol_genusers to also use getline and correctly handle
      EOL.


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-1
changelog:
  - Update to latest from NSA
          * Cleaned up error handling in sepol_genusers and sepol_genbools.


author: Dan Walsh <dwalsh@redhat.com> 1.5.2-1
changelog:
  - Update to latest from NSA
    * Added man page for sepol_check_context.
    * Added man page for sepol_genusers function.
    * Merged man pages for genpolusers and chkcon from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_ prefix to Flask types to avoid 
      namespace collision with libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-2
changelog:
  - Upgrade to latest from NSA
    * Added sepol_genbools_policydb and sepol_genusers_policydb for
      audit2why.


author: Dan Walsh <dwalsh@redhat.com> 1.5.10-1
changelog:
  - Fix reset booleans warning message
  - Upgrade to latest from NSA
    * License changed to LGPL v2.1, see COPYING.


author: Dan Walsh <dwalsh@redhat.com> 1.7.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged header file cleanup and memory leak fix from Ivan Gyurdiev (Red Hat).
    * Merged genbools debugging message cleanup from Red Hat.


author: Dan Walsh <dwalsh@redhat.com> 1.7.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged debug support, policydb conversion functions from Ivan Gyurdiev (Red Hat).
    * Removed genpolbools and genpolusers utilities.
    * Merged hierarchy check fix from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged context reorganization, memory leak fixes, 
      port and interface loading, replacements for genusers and
      genbools, debug traceback, and bugfix patches from Ivan Gyurdiev.
    * Merged uninitialized variable bugfix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.7.9-1
changelog:
  - Upgrade to latest from NSA
    * Enabled further compiler warning flags and fixed them.
    * Merged user, context, port records patch from Ivan Gyurdiev.
    * Merged key extract function patch from Ivan Gyurdiev.
    * Merged mls_context_to_sid bugfix from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.7.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.13-1
changelog:
  - Upgrade to latest from NSA
    * Improved memory use by SELinux by both reducing the avtab 
      node size and reducing the number of avtab nodes (by not
      expanding attributes in TE rules when possible).  Added
      expand_avtab and expand_cond_av_list functions for use by
      assertion checker, hierarchy checker, compatibility code,
      and dispol.  Added new inline ebitmap operators and converted
      existing users of ebitmaps to the new operators for greater 
      efficiency.
      Note:  The binary policy format version has been incremented to 
      version 20 as a result of these changes.


author: Dan Walsh <dwalsh@redhat.com> 1.7.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed empty list test in cond_write_av_list.  Bug found by
      Coverity, reported by Serge Hallyn (IBM).
    * Merged patch to policydb_write to check errors 
      when writing the type->attribute reverse map from
      Serge Hallyn (IBM).  Bug found by Coverity.
    * Fixed policydb_destroy to properly handle NULL type_attr_map
      or attr_type_map.


author: Dan Walsh <dwalsh@redhat.com> 1.7.19-1
changelog:
  - Upgrade to latest from NSA
    * Changed to treat all type conflicts as fatal errors.
    * Merged several error handling fixes from 
      Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.20-1
changelog:
  - Upgrade to latest from NSA
    * Merged more fixes for resource leaks on error paths 
      from Serge Hallyn (IBM).  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.7.22-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for memory leak in sepol_context_to_sid from
    Jason Tang (Tresys).
    * Merged fixes for resource leaks on error paths and
      change to scope_destroy from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.7.24-1
changelog:
  - Upgrade to latest from NSA
    * Fixed symtab_insert return value for duplicate declarations.
    * Merged fix for memory error in policy_module_destroy from
    Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed expand_avtab and expand_cond_av_list to keep separate
    entries with identical keys but different enabled flags.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.9.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged stddef.h patch and debug conversion patch from 
    Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged boolean record and memory leak fix patches from Ivan
    Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.8-1
changelog:
  - Upgrade to latest from NSA
    * Merged pointer typedef elimination patch from Ivan Gyurdiev.
    * Merged user list function, new mls functions, and bugfix patch
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged iterate patch from Ivan Gyurdiev.
    * Merged MLS in modules patch from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for check_assertions handling of no assertions
    from Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.14.1-1
changelog:
  - Upgrade to latest from NSA
    * Fixed use of policydb_from_image/to_image to ensure proper
    init of policydb.
    * Isolated policydb internal headers under <sepol/policydb/*.h>.
    These headers should only be used by users of the static libsepol.
    Created new <sepol/policydb.h> with new public types and interfaces
    for shared libsepol.
    Created new <sepol/module.h> with public types and interfaces moved
    or wrapped from old module.h, link.h, and expand.h, adjusted for
    new public types for policydb and policy_file.
    Added public interfaces to libsepol.map.
    Some implementation changes visible to users of the static libsepol:
    1) policydb_read no longer calls policydb_init.
    Caller must do so first.
    2) policydb_init no longer takes policy_type argument.
    Caller must set policy_type separately.
    3) expand_module automatically enables the global branch.  
    Caller no longer needs to do so.
    4) policydb_write uses the policy_type and policyvers from the 
    policydb itself, and sepol_set_policyvers() has been removed.


author: Dan Walsh <dwalsh@redhat.com> 1.9.17-1
changelog:
  - Upgrade to latest from NSA
    * Hid sepol_module_package type definition, and added get interfaces.
    * Merged new callback-based error reporting system from Ivan
    Gyurdiev.
    * Merged support for require blocks inside conditionals from
    Joshua Brindle (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.9.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditional expression mapping fix in the module linking
    code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.19-1
changelog:
  - Upgrade to latest from NSA
    * Reworked link_packages, link_modules, and expand_module to use
    callback-based error reporting system rather than error buffering.


author: Dan Walsh <dwalsh@redhat.com> 1.9.21-1
changelog:
  - Upgrade to latest from NSA
    * Changed sepol_module_package_set_file_contexts to copy the
      file contexts data since it is internally managed.
    * Added sepol_policy_file_set_handle interface to associate
      a handle with a policy file.
    * Added handle argument to policydb_from_image/to_image.
    * Added sepol_module_package_set_file_contexts interface.
    * Dropped sepol_module_package_create_file interface.
    * Reworked policydb_read/write, policydb_from_image/to_image, 
      and sepol_module_package_read/write to use callback-based error
      reporting system rather than DEBUG.


author: Dan Walsh <dwalsh@redhat.com> 1.9.23-1
changelog:
  - Upgrade to latest from NSA
    * Added check flag to expand_module() to control assertion
      and hierarchy checking on expansion.
    * Reworked check_assertions() and hierarchy_check_constraints()
      to take handles and use callback-based error reporting.
    * Changed expand_module() to call check_assertions() and 
      hierarchy_check_constraints() prior to returning the expanded
      policy.


author: Dan Walsh <dwalsh@redhat.com> 1.9.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged users cleanup patch from Ivan Gyurdiev.
    * Merged user record memory leak fix from Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.

  - Need to check for /sbin/telinit


author: Dan Walsh <dwalsh@redhat.com> 1.9.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged context interface cleanup, record conversion code, 
      key passing, and bug fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.30-1
changelog:
  - Upgrade to latest from NSA
    * Removed processing of system.users from sepol_genusers and
      dropped delusers logic.
    * Removed policydb_destroy from error path of policydb_read,
      since create/init/destroy/free of policydb is handled by the
      caller now.
    * Fixed sepol_module_package_read to handle a failed policydb_read
      properly.
    * Merged query/exists and count patches from Ivan Gyurdiev.
    * Merged fix for pruned types in expand code from Joshua Brindle.
    * Merged new module package format code from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.9.32-1
changelog:
  - Upgrade to latest from NSA
    * Added further checking and error reporting to 
      sepol_module_package_read and _info.
    * Merged sepol handle passing, DEBUG conversion, and memory leak
      fix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.34-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, record bugfix, and set_roles patches 
      from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.35-1
changelog:
  - Upgrade to latest from NSA
    * Added src/dso.h and src/*_internal.h.
      Added hidden_def for exported symbols used within libsepol.
      Added hidden for symbols that should not be exported by
      the wildcards in libsepol.map.


author: Dan Walsh <dwalsh@redhat.com> 1.9.36-1
changelog:
  - Upgrade to latest from NSA
    * Merged context_to_string interface change patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.9.38-1
changelog:
  - Upgrade to latest from NSA
    * Removed sepol_port_* from libsepol.map, as the port interfaces
      are not yet stable.


author: Dan Walsh <dwalsh@redhat.com> 1.9.39-1
changelog:
  - Upgrade to latest from NSA
    Prepare for removal of booleans* and *.users files.
    * Cleaned up sepol_genbools to not regenerate the image if
      there were no changes in the boolean values, including the
      degenerate case where there are no booleans or booleans.local
      files.
    * Cleaned up sepol_genusers to not warn on missing local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.9.40-1
changelog:
  - Upgrade to latest from NSA
    * Merged module function and map file cleanup from Ivan Gyurdiev.
    * Merged MLS and genusers cleanups from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.2-2
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - support ordering of records in compare function
      - enable port interfaces
      - add interfaces for context validity and range checks
      - add include guards


author: Dan Walsh <dwalsh@redhat.com> 1.11.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged bugfix for sepol_port_modify from Russell Coker.
    * Fixed bug in sepol_iface_modify error path noted by Ivan Gyurdiev.
    * Merged port ordering patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged further fixes from Russell Coker, specifically:
      - av_to_string overflow checking
      - sepol_context_to_string error handling
      - hierarchy checking memory leak fixes and optimizations
      - avrule_block_read variable initialization
    * Marked deprecated code in genbools and genusers.


author: Dan Walsh <dwalsh@redhat.com> 1.11.7-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Fixed hierarchy checker to only check allow rules.


author: Dan Walsh <dwalsh@redhat.com> 1.11.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged cond_expr mapping and package section count bug fixes
      from Joshua Brindle.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.  
    * Merged fixes for overflow bugs on 64-bit from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged assertion copying bugfix from Joshua Brindle.
    * Merged sepol_av_to_string patch from Joshua Brindle.
    * Merged clone record on set_con patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.13-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged fix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged nodes, ports: always prepend patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Added a defined flag to level_datum_t for use by checkpolicy.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.11.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged node_expand_addr bugfix and node_compare* change from
      Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12-2
changelog:
  - Upgrade to latest from NSA
    * Updated version for release.
    * Merged cond_evaluate_expr fix from Serge Hallyn (IBM).
    * Fixed bug in copy_avrule_list reported by Ivan Gyurdiev.
    * Merged sepol_policydb_mls_enabled interface and error handling
      changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.3-1
changelog:
  - Upgrade to latest from NSA
    * Fixed attr_convert_callback and expand_convert_type_set
      typemap bug.


author: Dan Walsh <dwalsh@redhat.com> 1.12.5-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for leak of optional package sections from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.12.6-1
changelog:
  - Upgrade to latest from NSA
    * Fixed cond_normalize to traverse the entire cond list at link time.


author: Dan Walsh <dwalsh@redhat.com> 1.12.9-1
changelog:
  - Upgrade to latest from NSA
    * Dropped tests from all Makefile target.
    * Merged fix warnings patch from Karl MacMillan.
    * Merged libsepol test framework patch from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.12.11-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to initialize sym_val_to_name arrays from Kevin Carr.
      Reworked to use calloc in the first place, and converted some other
      malloc/memset pairs to calloc calls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.12-1
changelog:
  - Upgrade to latest from NSA
    * Added sepol_policydb_compat_net() interface for testing whether
      a policy requires the compatibility support for network checks
      to be enabled in the kernel.


author: Dan Walsh <dwalsh@redhat.com> 1.12.14-1
changelog:
  - Upgrade to latest from NSA
    * Fixed bool_ids overflow bug in cond_node_find and cond_copy_list,
      based on bug report and suggested fix by Cedric Roux.
    * Merged sens_copy_callback, check_role_hierarchy_callback,
      and node_from_record fixes from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.17-1
changelog:
  - Upgrade to latest from NSA
    * Revert 1.12.16.
    * Merged cleaner fix for bool_ids overflow from Karl MacMillan,
      replacing the prior patch.
    * Merged fixes for several memory leaks in the error paths during
      policy read from Serge Hallyn.


author: Dan Walsh <dwalsh@redhat.com> 1.12.19-1
changelog:
  - Upgrade to latest from NSA
    * Lindent.
    * Merged optionals in base take 2 patch set from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.12.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged helpful hierarchy check errors patch from Joshua Brindle.
    * Merged semodule_deps patch from Karl MacMillan.
      This adds source module names to the avrule decls.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol unit tests from Joshua Brindle.
    * Merged symtab datum patch from Karl MacMillan.
    * Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
    * Merged conditionally expand neverallows patch from Jeremy Mowery.
    * Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged range transition enhancements and user format changes
      Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
    * Merged mls user and range_transition support in modules
      from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix for version comparison that was preventing range
      transition rules from being written for a version 5 base policy
      from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl MacMillan for a segfault when linking
      non-MLS modules with users in them.


author: Dan Walsh <dwalsh@redhat.com> 1.15.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libselinux.


author: Dan Walsh <dwalsh@redhat.com> 2.0.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged libsepol segfault fix from Stephen Smalley for when
      sensitivities are required but not present in the base.
    * Merged patch to add errcodes.h to libsepol by Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged fix from Karl to remap booleans at expand time to 
      avoid holes in the symbol table.


author: Dan Walsh <dwalsh@redhat.com> 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged add boolmap argument to expand_module_avrules() from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 2.0.5-1
changelog:
  - Upgrade to latest from NSA
       * Fix sepol_context_clone to handle a NULL context correctly.
            This happens for e.g. semanage_fcontext_set_con(sh, fcontext, NULL)
      to set the file context entry to "<<none>>".
  - Apply patch from Joshua Brindle to disable dontaudit rules


author: Dan Walsh <dwalsh@redhat.com> 2.0.7-1
changelog:
  - Upgrade to latest from NSA
    * Eliminate unaligned accesses from policy reading code from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Moved next_entry and put_entry out-of-line to reduce code size from Ulrich Drepper.
    * Fixed module_package_read_offsets bug introduced by the prior patch.


author: Dan Walsh <dwalsh@redhat.com> 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for the handle_unknown policydb flag from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Reject self aliasing at link time from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.
    * Fixed bug in require checking from Stephen Smalley.
    * Added user hierarchy checking from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.15-1
changelog:
  - Upgrade to latest from NSA
    * clarify and reduce neverallow error reporting from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.18-1
changelog:
  - Upgrade to latest from NSA
    * Added support for policy capabilities from Todd Miller.
    * Prevent generation of policy.18 with MLS enabled from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.19-1
changelog:
  - Upgrade to latest from NSA
    * Add support for consuming avrule_blocks during expansion to reduce
      peak memory usage.


author: Dan Walsh <dwalsh@redhat.com> 2.0.20-1
changelog:
  - Upgrade to latest from NSA
    * Port of Yuichi Nakamura's tune avtab to reduce memory usage patch from the kernel avtab to libsepol from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.21-1
changelog:
  - Upgrade to latest from NSA
    * Fix invalid memory allocation in policydb_index_others() from Jason Tang.


author: Dan Walsh <dwalsh@redhat.com> 2.0.23-1
changelog:
  - Upgrade to latest from NSA
    * Accept "Flask" as an alternate identifier string in kernel policies from Stephen Smalley.
    * Add support for open_perms policy capability from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> 2.0.25-1
changelog:
  - Upgrade to latest from NSA
    * Drop unused ->buffer field from struct policy_file.
    * Add policy_file_init() initalizer for struct policy_file and use it, from Todd C. Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.28-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_level_convert() to gracefully handle an empty user declaration/require from Stephen Smalley.
    * Belatedly merge test for policy downgrade from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> 2.0.30-1
changelog:
  - Upgrade to latest from NSA
    * Fix endianness bug in the handling of network node addresses from Stephen Smalley.
      Only affects big endian platforms.
      Bug reported by John Weeks of Sun upon policy mismatch between x86 and sparc.


author: Dan Walsh <dwalsh@redhat.com> 2.0.31-1
changelog:
  - Upgrade to latest from NSA
    * Fix mls_semantic_level_expand() to handle a user require w/o MLS information from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> 2.0.32-1
changelog:
  - Upgrade to latest from NSA
    * Allow require then declare in the source policy from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 2.0.34-1
changelog:
  - Upgrade to latest from NSA
    * Add bounds support from KaiGai Kohei.
    * Fix invalid aliases bug from Joshua Brindle.


author: Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.35-2
changelog:
  * Wed Feb 18 2009 Dan Walsh <dwalsh@redhat.com> 2.0.35-1
  - Upgrade to latest from NSA
          * Fix alias field in module format, caused by boundary format change
            from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> 2.0.38-1
changelog:
  - Upgrade to latest from NSA
    * Check last offset in the module package against the file size.
    Reported by Manoj Srivastava for bug filed by Max Kellermann.


author: Dan Walsh <dwalsh@redhat.com> 2.0.42-3
changelog:
  - Apply Eparis Patch
    This patch add libsepol support for filename_trans rules.  These rules
  allow on to make labeling decisions for new objects based partially on
  the last path component.  They are stored in a list.  If we find that
  the number of rules grows to an significant size I will likely choose to
  store these in a hash, both in libsepol and in the kernel.  But as long
  as the number of such rules stays small, this should be good.


author: Dan Walsh <dwalsh@redhat.com> 2.0.44-1
changelog:
  -Update to upstream
  	* Fixes for new role_transition class field by Eric Paris.
  	* Add libsepol support for filename_trans rules by Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.2-0
changelog:
  - Update to upstream 
  	* Only call role_fix_callback for base.p_roles during expansion.
  	* use mapped role number instead of module role number


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-1
changelog:
  -Update to upstream
  	* Skip writing role attributes for policy.X and
  	* Indicate when boolean is indeed a tunable.
  	* Separate tunable from boolean during compile.
  	* Write and read TUNABLE flags in related
  	* Copy and check the cond_bool_datum_t.flags during link.
  	* Permanently discard disabled branches of tunables in
  	* Skip tunable identifier and cond_node_t in expansion.
  	* Create a new preserve_tunables flag
  	* Preserve tunables when required by semodule program.
  	* setools expects expand_module_avrules to be an exported
  	* tree: default make target to all not


author: Dan Walsh <dwalsh@redhat.com> - 2.1.3-2
changelog:
  -The filename_trans code had a bug where duplicate detection was being
  done between the unmapped type value of a new rule and the type value of
  rules already in policy.  This meant that duplicates were not being
  silently dropped and were instead outputting a message that there was a
  problem.  It made things hard because the message WAS using the mapped
  type to convert to the string representation, so it didn't look like a
  dup!


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-1
changelog:
  - Update to upstream 
  	* regenerate .pc on VERSION change
  	* Move ebitmap_* functions from mcstrans to libsepol
  	* expand: do filename_trans type comparison on mapped representation


author: Dan Walsh <dwalsh@redhat.com> - 2.1.4-2
changelog:
  - Allow policy to specify the source of target for generating the default user,role 
  - or mls label for a new target.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.5-3
changelog:
  - Fix off by one error that is causing file_name transition rules to be expanded- incorrectly on i686 machines


author: Dan Walsh <dwalsh@redhat.com> - 2.1.7-1
changelog:
  - Update to upstream 
  	* reserve policycapability for redhat testing of ptrace child
  	* cosmetic changes to make the source easier to read
  	* prepend instead of append to filename_trans list
  	* Android/MacOS X build support
  	* allocate enough space to hold filename in trans rules


author: Dan Walsh <dwalsh@redhat.com> - 2.1.8-1
changelog:
  - Update to upstream 
  	* fix neverallow checking on attributes
  	* Move context_copy() after switch block in ocontext_copy_*().
  	* check for missing initial SID labeling statement.
  	* Add always_check_network policy capability
  	* role_fix_callback skips out-of-scope roles during expansion.


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  - filename_trans: use some better sorting to compare and merge
  - coverity fixes
  - implement default type policy syntax
  - Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: Dan Walsh <dwalsh@redhat.com> - 2.2-1
changelog:
  - Update to upstream 
  - Richard Haines patch V1 Allow constraint denials to be determined.
  - Add separate role declarations as required by modern checkpolicy.


author: Dan Walsh <dwalsh@redhat.com> - 2.3-1
changelog:
  - Update to upstream 
  	* Improve error message for name-based transition conflicts.
  	* Revert libsepol: filename_trans: use some better sorting to compare and merge.
  	* Report source file and line information for neverallow failures.
  	* Fix valgrind errors in constraint_expr_eval_reason from Richard Haines.
  	* Add sepol_validate_transition_reason_buffer function from Richard Haines.


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-5
changelog:
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-7
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL


author: Petr Lautrbach <plautrba@redhat.com> 2.5-9
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-10
changelog:
  - Check for too many permissions in classes and commons in CIL
  - Fix xperm mapping between avrule and avtab
  - tests: Fix mispelling of optimization option
  - Fix unused/uninitialized variables on mac build
  - Produce more meaningful error messages for conflicting type rules in CIL
  - make "make test" fail when a CUnit test fails
  - tests: fix g_b_role_2 test
  - Change which attributes CIL keeps in the binary policy
  - Port str_read() from kernel and remove multiple occurances of similar code
  - Use calloc instead of malloc for all the *_to_val_structs
  - Fix bugs found by AFL
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Petr Lautrbach <plautrba@redhat.com> - 2.6-3
changelog:
  - Fix neverallow bug when checking conditional policy
  - Destroy the expanded level when mls_semantic_level_expand() fails
  - Do not seg fault on sepol_*_key_free(NULL)


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix the case where stderr isnt flushed for ask(). Now the 'no such file'
    appears before the skip patch question, not at the very end, Doh!


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - use .orig as default suffix, as per man page and previous behaviour
    (bug #20202).
  - use better patch for this, from maintainer.


author: Tim Waugh <twaugh@redhat.com> 2.5.4-31
changelog:
  - Convert spec file to UTF-8 (bug #226233).
  - Use _bindir macro in %files (bug #226233).
  - Parallel make (bug #226233).
  - Better defattr declaration (bug #226233).


author: Tim Waugh <twaugh@redhat.com> 2.5.4-35
changelog:
  - Don't fail if setfilecon() returns EPERM (bug #453365), although the
    setfilecon man page suggests that ENOTSUP will be returned in this
    case.


author: Tim Waugh <twaugh@redhat.com> 2.6-1
changelog:
  - 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
    ifdef, program_name, or posix-backup patches.


author: Tim Waugh <twaugh@redhat.com> 2.6-2
changelog:
  - Applied upstream patch to prevent incorrect filename being chosen
    when adding a new file (bug #549122).


author: Tim Waugh <twaugh@redhat.com> 2.6.1-4
changelog:
  - Fixed interpretation of return value from getfilecon().
  - Fixed argument type for --get (bug #553624).


author: Tim Waugh <twaugh@redhat.com> 2.6.1-7
changelog:
  - Applied upstream patch to fix CVE-2010-4651 so that malicious
    patches cannot create files above the current directory
    (bug #667529).


author: Tim Waugh <twaugh@redhat.com> 2.6.1-8
changelog:
  - Incorporate upstream fix for CVE-2010-4651 patch so that a target
    name given on the command line is not validated (bug #667529).


author: Tim Waugh <twaugh@redhat.com> 2.6.1-10
changelog:
  - Applied Jiri Popelka's fixes from Coverity scan (bug #704554):
    - Avoid unchecked return from getfilecon() in patch-selinux.patch.
    - Fix memory leak.


author: Tim Waugh <twaugh@redhat.com> 2.7-1
changelog:
  - 2.7.  No longer need sigsegv, get-arg, CVE-2010-4651,
    backup-if-mismatch or coverity-leak patches.


author: Tim Waugh <twaugh@redhat.com> - 2.7.4-1
changelog:
  - 2.7.4, including a better fix for CVE-2015-1196 that still allows
    symlinks referencing ".." to be created.


author: Tim Waugh <twaugh@redhat.com> - 2.7.5-1
changelog:
  - Fixed memory leak in selinux patch.
  - 2.7.5, including an even better fix for CVE-2015-1196 that still
    allows relative symlinks to be created/used.


author: Than Ngo <than@redhat.com> - 2.7.6-10
changelog:
  - CVE-2019-13636 , Don't follow symlinks unless --follow-symlinks is given
  - Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist


author: - Andreas Schneider <asn@redhat.com> - 0.6.1-1
changelog:
  - Update to version 0.6.1.
  - resolves: #1056757 - Fix scp mode.
  - resolves: #1053305 - Fix known_hosts heuristic.


author: Andreas Schneider <asn@redhat.com> - 0.6.5-1
changelog:
  - resolves: #1213775 - Security fix for CVE-2015-3146
  - resolves: #1218076 - Security fix for CVE-2015-3146


author: Andreas Schneider <asn@redhat.com> - 0.7.0-1
changelog:
  - Update to version 0.7.0
    * Added support for ed25519 keys
    * Added SHA2 algorithms for HMAC
    * Added improved and more secure buffer handling code
    * Added callback for auth_none_function
    * Added support for ECDSA private key signing
    * Added more tests
    * Fixed a lot of bugs
    * Improved API documentation


author: Andreas Schneider <asn@redhat.com> - 0.7.1-1
changelog:
  - Update to version 0.7.1
    * Fixed SSH_AUTH_PARTIAL auth with auto public key
    * Fixed memory leak in session options
    * Fixed allocation of ed25519 public keys
    * Fixed channel exit-status and exit-signal
    * Reintroduce ssh_forward_listen()


author: Andreas Schneider <asn@redhat.com> - 0.7.2-1
changelog:
  - Update to version 0.7.2
    * Fixed OpenSSL detection on Windows
    * Fixed return status for ssh_userauth_agent()
    * Fixed KEX to prefer hmac-sha2-256
    * Fixed sftp packet handling
    * Fixed return values of ssh_key_is_(public|private)
    * Fixed bug in global success reply
  - resolves: #1267346


author: Andreas Schneider <asn@redhat.com> - 0.7.3-1
changelog:
  - resolves: #1311259 - Fix CVE-2016-0739
  - resolves: #1311332 - Update to version 0.7.3
    * Fixed CVE-2016-0739
    * Fixed ssh-agent on big endian
    * Fixed some documentation issues
  - Enabled GSSAPI support


author: Andreas Schneider <asn@redhat.com> - 0.7.4-1
changelog:
  - Update to version 0.7.4
    * Added id_ed25519 to the default identity list
    * Fixed sftp EOF packet handling
    * Fixed ssh_send_banner() to confirm with RFC 4253
    * Fixed some memory leaks
  - resolves: #1419007


author: Rex Dieter <rdieter@fedoraproject.org> - 0.7.4-2
changelog:
  - BR: compat-openssl10-devel (f26+, #1423088)
  - use %license
  - -devel: drop hardcoded pkgconfig dep (let autodeps handle it)
  - %files: track library sonames, simplify -devel
  - %install: use 'install/fast' target
  - .spec cosmetics, drop deprecated %clean section


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9-16
changelog:
  - Python 2 binary package renamed to python2-kmod
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - make the dummy install as /lib/libredhat-kernel.so.1.0.0 so 
    that ldconfig will link against it if no other is installed.


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - add requires initscripts >= 6.47-1 to get boot time libredhat-kernel 
    linkage correct.
  - typo fix


author: Benjamin LaHaise <bcrl@redhat.com>
changelog:
  - libaio 0.3.93 test release
  - add powerpc support from Gianni Tedesco <gianni@ecsc.co.uk>
  - add s/390 support from Arnd Bergmann <arnd@bergmann-dalldorf.de>


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-1
changelog:
  - Use libc syscall(2) instead of rolling our own calling mechanism.  This 
    change is inspired due to a failure to build with newer gcc, since clobber 
    lists were wrong.
  - Add -fpic to the CFLAGS for all architectures.  Should address bz #109457.
  - change a #include from <linux/types.h> to <sys/types.h>.  Fixes a build
    issue on s390.


author: Jeff Moyer <jmoyer@redhat.com> 0.3.97-2
changelog:
  - make srpm was using rpm to do a build.  changed that to use rpmbuild if
    it exists, and fallback to rpm if it doesn't.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.107-2
changelog:
  - Update to the latest upstream which adds eventfd support and fixes broken
    test cases.  (Rusty Russell)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-2
changelog:
  - Rebase to 0.3.110 which adds support for aarch64 and other arches (Jeff Moyer)
  - Move to /usr
  - Resolves: bz#969680


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release (#1614972)
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403
      (#1623754, #1625052, #1625057).


author: Mark Wielaard <mjw@redhat.com> - 0.174-4
changelog:
  - Add elfutils-0.174-size-rec-ar.patch
    CVE-2018-18520 (#1646479)
  - Add elfutils-0.174-ar-sh_entsize-zero.patch
    CVE-2018-18521 (#1646484)


author: Mark Wielaard <mjw@redhat.com> - 0.174-5
changelog:
  - Add elfutils-0.174-x86_64_unwind.patch (#1650114).
  - Add elfutils-0.174-gnu-property-note.patch (#1650120).
  - Add elfutils-0.174-version-note.patch.
  - Add elfutils-0.174-gnu-attribute-note.patch (#1650125).


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.48-10
changelog:
  - Added bash command completion for vdostats.
    - Resolves: rhbz#1666425
  - Added missing newline to the output from vdoFormat.
    - Resolves: rhbz#1669492
  - Fixed bug in the value displayed by vdostats for statistics which are not
    currently available.
    - Resolves: rhbz#1668747
  - Updated vdo script to reflect changes in lvm.
    - Resolves: rhbz#1684249
  - Reduced error output when removing a VDO device whose backing storage is
    missing.
    - Resolves: rhbz#1684248
  - Removed the VDO Ansible module and examples from the vdo package.
    - Resolves: rhbz#1669534
    - Resolves: rhbz#1663259
  - Fixed bugs in vdo script argument parsing.
    - Resolves: rhbz#1679224


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-11
changelog:
  - Added bash command completion for the vdo command.
    - Resolves: rhbz#1540287
  - Modified the vdo script's list command to not display VDO devices which
    were not created with the vdo command (i.e. via LVM or using raw dm
    commands).
    - Resolves: rhbz#1686091
  - Modified vdostats to continue to work on VDO devices which were not
    created with the vdo script.
    - Resolves: rhbz#1686091
  - Modified vdo script to always close the UDS index when disabling
    deduplication on a running VDO device.
    - Resolves: rhbz#1643291


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-11
changelog:
  - Added UUID filtering of underlying devices when running vdo create with
    the --force flag as this failed when run on certain PVs.
  - Resolves: rhbz#1710017


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.18-11
changelog:
  - Added the ability to modify the UUID of a VDO device.
  - Resolves: rhbz#1713749
  - Added an import command to the vdo script to allow management of an
    existing VDO device which is not already in the vdo config file.
  - Resolves: rhbz#1737619
  - Modified the vdo script to warn the user when starting or stopping a VDO
    device if the device is already in the desired state.
  - Resolves: rhbz#1738651


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.24-11
changelog:
  - Began preparations for releasing more VDO analysis and debugging tools.
  - Relates: rhbz#1687996
  - Really added the ability to modify the UUID of a VDO device (the previous
    version omitted some of the files necessary for this feature).
  - Resolves: rhbz#1713749


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.33-12
changelog:
  - Fixed bug in the import command of the vdo script which would fail if
    there were no active dm devices.
  - Resolves: rhbz#1767491
  - Added a version command to the vdo script to report the script version.
  - Resolves: rhbz#1730429
  - Added version options to vdo utilities which did not have one.
  - Resolves: rhbz#1730429
  - Removed deprecated vdoprepareupgrade utility.
  - Resolves: rhbz#1774700


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-13
changelog:
  - Improved man pages and help text for vdo script and vdo utilities.
  - Resolves: rhbz#1505748
  - Resolves: rhbz#1636043
  - Resolves: rhbz#1746539
  - Modified vdoformat to display the maximum VDO size based on the
    configured slab size when formatting a volume. Modified vdo script to
    also display this output when creating a new VDO.
  - Resolves: rhbz#1659173


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Use O_NONBLOCK when opening devices so we can manipulate CD-ROM drives
    with no media inserted, even when running a current kernel (Bug #6457)


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - disable readahead (#14268)
  - add comment in /etc/sysconfig/harddisks about possible extra parameters


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - update to 5.2 with the following fixes:
   - v5.2 compile fixes for 2.5.xx
   - v5.1 fixed segfault in "-i" on older drives
   - v5.0 lots of updates and new features
   - v4.9 fixed compile error with 2.5.xx kernels
   - v4.8 changed -Q to allow specifying queue depth
   - v4.7 added -z, -Q, -M flags; expanded parm range for -p


author: Karsten Hopp <karsten@redhat.de> 6.1-1
changelog:
  - update to 6.1 (BLKGETSIZE fixes)
  - work around hdparm's usage of kernel headers, assume
    that we run it on little-endian machines only


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-2
changelog:
  - Remove pkg_version to avoid dupliate use of version
  - Remove redundant BuildRequires for autoconf/automake/pkgconfig
  - Add comments for BuildRequires of sapi/tcti-device/tcti-socket
  - Use ExclusiveArch instead of ExcludeArch
  - Requires tpm2-tss version updated to 1.0-2
  - Updated release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-3
changelog:
  - Change spec file permission to 644 to avoid rpmlint complain
  - Update Requires to fix dependency check error reported in Bodhi
  - Remove tpm2-tss-devel version in BuildRequires comment
  - Update release version and changelog


author: Sun Yunying <yunying.sun@intel.com> - 1.1.0-4
changelog:
  - Dependency check failed for Requires again, here to fix this
  - Update release version and changelog


author: Javier Martinez Canillas <javierm@redhat.com> - 2.1.1-1
changelog:
  - Rename remaining tpm2.0-tools prefixes to tpm2-tools
  - Remove global pkg_prefix since now the upstream repo and package names match
  - Remove downstream patches since now these are in the latest upstream release
  - Update to 2.1.1 release (RHBZ#1504438)


author: Javier Martinez Canillas <javierm@redhat.com> - 3.0-0.1.rc1
changelog:
  - Update to 3.0 release candidate 1
  - Update URLs to point to the new project location
  - Make the package to obsolete version 2.1.1


author: Javier Martinez Canillas <javierm@redhat.com> - 3.0.1-1
changelog:
  - Update to 3.0.1 release (RHBZ#1512743)
  - Download the generated tarball provided instead of the source code tarball


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.0-18.1
changelog:
  - run make with libdir overridden so that it has the value passed to configure
    instead of $(prefix)/lib


author: Stepan Kasal <skasal@redhat.com> - 1.8.0-31
changelog:
  - drop *-cflags.patch, move all makefile fixes to *-fhs.patch
  - propagate libdir to Makefile; no need to set it on cmdline


author: Karel Klic <kklic@redhat.com> - 1.8.3-1
changelog:
  - Newer upstream release
  - Removed gdbm-1.8.0-64offset.patch, because it was merged by the upstream
  - `jbj' patch extended and renamed to `zeroheaders'
  - Added shortread patch from Debian


author: Karel Klic <kklic@redhat.com> - 1.8.3-5
changelog:
  - Removed fake Provides: libgdbm.so.2 and corresponding symlinks
  - Moved autoconf, libtoolize from %build to %prep section
  - Remove static builds from the devel package (#556050)


author: Honza Horak <hhorak@redhat.com> - 1.9.1-1
changelog:
  - Updated to new upstream release 1.9.1
  - Dropped -filestruct, -ndbmlock and -fhs patches, they are not 
    needed anymore and GDBM_NOLOCK is used always
  - Run testsuite


author: Honza Horak <hhorak@redhat.com> - 1.10-1
changelog:
  - Updated to new upstream release 1.10
  - Dropped -shortread patch, which has been already applied by upstream
  - Disable large file support, that is enabled by default since 1.9, 
    but not compatible with db files created using gdbm-1.8.3 and lower
  - License change to GPLv3+
  - Add doc files THANKS AUTHORS NOTE-WARNING
  - Changed text in NOTE-WARNING to correspond with build settings


author: Jarod Wilson <jarod@redhat.com> - 3.0-6
changelog:
  - Update to upstream 3.0-3.1.gb36a595 tarball for upstream fixes
  - Add in manpages
  - Related: rhbz#1365750
  - Resolves: rhbz#948476


author: Jarod Wilson <jarod@redhat.com> - 3.0-7
changelog:
  - Address a myriad more coverity/clang warnings
  - Add raw_ethernet_* man page symlinks
  - Related: rhbz#1273176
  - Related: rhbz#948476


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-101
changelog:
  - add patches for read overflow and null pointer dereference in the
    implementation of the SPNEGO mechanism (CVE-2009-0844, CVE-2009-0845)
  - add patch for attempt to free uninitialized pointer in libkrb5
    (CVE-2009-0846)
  - add patch to fix length validation bug in libkrb5 (CVE-2009-0847)
  - put the krb5-user .info file into just -workstation and not also
    -workstation-clients


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-103
changelog:
  - fix a typo in a ksu error message (Marek Mahut)
  - "rev" works the way the test suite expects now, so don't disable tests
    that use it


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-104
changelog:
  - extend PAM support to ksu: perform account and session management for the
    target user
  - pull up and merge James Leddy's changes to also set PAM_RHOST in PAM-aware
    network-facing services


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-1
changelog:
  - update to 1.7
    - no need to work around build issues with ASN1BUF_OMIT_INLINE_FUNCS
    - configure recognizes --enable/--disable-pkinit now
    - configure can take --disable-rpath now
    - no more libdes425, krb524d, krb425.info
    - kadmin/k5srvutil/ktutil are user commands now
    - new kproplog
    - FAST encrypted-challenge plugin is new
  - drop static build logic
  - drop pam_krb5-specific configuration from the default krb5.conf
  - drop only-use-v5 flags being passed to various things started by xinetd
  - put %{krb5prefix}/sbin in everyone's path, too (#504525)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - compile with %{?_smp_mflags} (Steve Grubb)
  - drop the bit where we munge part of the error table header, as it's not
    needed any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a type mismatch in krb5_copy_error_message()
  - ftp: fix some odd use of strlen()
  - selinux labeling: use selabel_open() family of functions rather than
    matchpathcon(), bail on it if attempting to get the mutex lock fails


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-3
changelog:
  - switch buildrequires: and requires: on e2fsprogs-devel into
    buildrequires: and requires: on libss-devel, libcom_err-devel, per
    sandeen on fedora-devel-list


author: Nalin Dahyabhai <nalin@redhat.com> 1.7-4
changelog:
  - try to merge and clean up all the large file support for ftp and rcp
    - ftpd no longer prints a negative length when sending a large file
      from a 32-bit host


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - simplify the man pages patch by only preprocessing the files we care about
    and moving shared configure.in logic into a shared function
  - catch the case of ftpd printing file sizes using %i, when they might be
    bigger than an int now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if the init script fails to start krb5kdc/kadmind/kpropd because it's already
    running (according to status()), return 0 (part of #521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-8
changelog:
  - specify the location of the subsystem lock when using the status() function
    in the kadmind and kpropd init scripts, so that we get the right error when
    we're dead but have a lock file - requires initscripts 8.99 (#521772)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-10
changelog:
  - move /etc/pam.d/ksu from krb5-workstation-servers to krb5-workstation,
    where it's actually needed (#538703)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-11
changelog:
  - ksu: move account management checks to before we drop privileges, like
    su does (#540769)
  - selinux: set the user part of file creation contexts to match the current
    context instead of what we looked up
  - configure with --enable-dns-for-realm instead of --enable-dns, which isn't
    recognized any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages that live in the -libs subpackage into the regular
    %{_mandir} tree where they'll still be found if that package is the
    only one installed (#529319)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-15
changelog:
  - add upstream patch for KDC crash during referral processing (CVE-2009-3295),
    via Tom Yu (#545002)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-16
changelog:
  - use %global instead of %define
  - pull up proposed patch for creating previously-not-there lock files for
    kdb databases when 'kdb5_util' is called to 'load' (#551764)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-17
changelog:
  - put the conditional back for the -devel subpackage
  - back down to the earlier version of the patch for #551764; the backported
    alternate version was incomplete


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-18
changelog:
  - add upstream patch for integer underflow during AES and RC4 decryption
    (CVE-2009-4212), via Tom Yu (#545015)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-19
changelog:
  - use portreserve to make sure the KDC can always bind to the kerberos-iv
    port, kpropd can always bind to the krb5_prop port, and that kadmind can
    always bind to the kerberos-adm port (#555279)
  - correct inadvertent use of macros in the changelog (rpmlint)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-20
changelog:
  - krb5_get_init_creds_password: check opte->flags instead of options->flags
    when checking whether or not we get to use the prompter callback (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-21
changelog:
  - suppress warnings of impending password expiration if expiration is more than
    seven days away when the KDC reports it via the last-req field, just as we
    already do when it reports expiration via the key-expiration field (#556495)
  - link with libtinfo rather than libncurses, when we can, in future RHEL


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7-22
changelog:
  - use portreserve correctly -- portrelease takes the basename of the file
    whose entries should be released, so we need three files, not one


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-1
changelog:
  - update to 1.7.1
    - don't trip AD lockout on wrong password (#542687, #554351)
    - incorporates fixes for CVE-2009-4212 and CVE-2009-3295
    - fixes gss_krb5_copy_ccache() when SPNEGO is used
  - move sim_client/sim_server, gss-client/gss-server, uuclient/uuserver to
    the devel subpackage, better lining up with the expected krb5/krb5-appl
    split in 1.8
  - drop kvno,kadmin,k5srvutil,ktutil from -workstation-servers, as it already
    depends on -workstation which also includes them


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-3
changelog:
  - pull up the change to make kpasswd's behavior better match the docs
    when there's no ccache (#563431)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-4
changelog:
  - move the package changelog to the end to match the usual style (jdennis)
  - scrub out references to $RPM_SOURCE_DIR (jdennis)
  - include a symlink to the readme with the name LICENSE so that people can
    find it more easily (jdennis)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.7.1-6
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-1
changelog:
  - update to 1.8
    - temporarily bundling the krb5-appl package (split upstream as of 1.8)
      until its package review is complete
    - profile.d scriptlets are now only needed by -workstation-clients
    - adjust paths in init scripts
    - drop upstreamed fix for KDC denial of service (CVE-2010-0283)
    - drop patch to check the user's password correctly using crypt(), which
      isn't a code path we hit when we're using PAM


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-2
changelog:
  - pull up patch to get the client libraries to correctly perform password
    changes over IPv6 (Sumit Bose, RT#6661)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
changelog:
  - remove the krb5-appl bits (the -workstation-clients and -workstation-servers
    subpackages) now that krb5-appl is its own package
  - replace our patch for #563431 (kpasswd doesn't fall back to guessing your
    principal name using your user name if you don't have a ccache) with the
    one upstream uses


author: Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
changelog:
  - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628, #576325)
  - kdc.conf: no more need to suggest keeping keys with v4-compatible salting


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - drop patch to suppress key expiration warnings sent from the KDC in
    the last-req field, as the KDC is expected to just be configured to either
    send them or not as a particular key approaches expiration (#556495)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-1
changelog:
  - update to 1.8.1
    - no longer need patches for #555875, #561174, #563431, RT#6661, CVE-2010-0628
  - replace buildrequires on tetex-latex with one on texlive-latex, which is
    the package that provides it now


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-5
changelog:
  - add patch to correct GSSAPI library null pointer dereference which could be
    triggered by malformed client requests (CVE-2010-1321, #582466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.1-6
changelog:
  - make krb5-server-ldap also depend on the same version-release of krb5-libs,
    as the other subpackages do, if only to make it clearer than it is when we
    just do it through krb5-server
  - drop explicit linking with libtinfo for applications that use libss, now
    that readline itself links with libtinfo (as of readline-5.2-3, since
    fedora 7 or so)
  - go back to building without strict aliasing (compiler warnings in gssrpc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: move session management calls to before we drop privileges, like
    su does (#596887), and don't skip the PAM account check for root or the
    same user (more of #540769)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull up fix for upstream #6745, in which the gssapi library would add the
    wrong error table but subsequently attempt to unload the right one


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-2
changelog:
  - libgssapi: pull in patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605366,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.2-3
changelog:
  - tell krb5kdc and kadmind to create pid files, since they can
  - add logrotate configuration files for krb5kdc and kadmind (#462658)
  - fix parsing of the pidfile option in the KDC (upstream #6750)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-1
changelog:
  - update to 1.8.3
    - drop backports of fixes for gss context expiration and error table
      registration/deregistration mismatch
    - drop patch for upstream #6750


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-3
changelog:
  - build with -fstack-protector-all instead of the default -fstack-protector,
    so that we add checking to more functions (i.e., all of them) (#629950)
  - also link binaries with -Wl,-z,relro,-z,now (part of #629950)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-4
changelog:
  - fix reading of keyUsage extensions when attempting to select pkinit client
    certs (part of #629022, RT#6775)
  - fix selection of pkinit client certs when one or more don't include a
    subjectAltName extension (part of #629022, RT#6774)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-6
changelog:
  - pull down patches from trunk to implement k5login_authoritative and
    k5login_directory settings for krb5.conf (#539423)


author: Nalin Dahyabhai <nalin@redhat.com> 1.8.3-8
changelog:
  - incorporate upstream patch to fix uninitialized pointer crash in the KDC's
    authorization data handling (CVE-2010-1322, #636335)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-0.beta1.0
changelog:
  - start moving to 1.9 with beta 1
    - drop patches for RT#5755, RT#6762, RT#6774, RT#6775
    - drop no-longer-needed backport patch for #539423
    - drop no-longer-needed patch for CVE-2010-1322
  - if WITH_NSS is set, built with --with-crypto-impl=nss (requires NSS 3.12.9)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-2
changelog:
  - pkinit: when verifying signed data, use the CMS APIs for better
    interoperability (#636985, RT#6851)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-4
changelog:
  - add upstream patches to fix standalone kpropd exiting if the per-client
    child process exits with an error (MITKRB5-SA-2011-001), a hang or crash
    in the KDC when using the LDAP kdb backend, and an uninitialized pointer
    use in the KDC (MITKRB5-SA-2011-002) (CVE-2010-4022, #664009,
    CVE-2011-0281, #668719, CVE-2011-0282, #668726, CVE-2011-0283, #676126)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-5
changelog:
  - krb5kdc init script: prototype some changes to do a quick spot-check
    of the TGS and kadmind keys and warn if there aren't any non-weak keys
    on file for them (to flush out parts of #651466)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-6
changelog:
  - turn on NSS as the backend for libk5crypto, adding nss-devel as a build
    dependency when that switch is flipped


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - throw in a not-applied-by-default patch to try to make pkinit debugging
    into a run-time boolean option named "pkinit_debug"


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-7
changelog:
  - turn off NSS as the backend for libk5crypto for now to work around its
    DES string2key not working (#679012)
  - add revised upstream patch to fix double-free in KDC while returning
    typed-data with errors (MITKRB5-SA-2011-003, CVE-2011-0284, #674325)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - override INSTALL_SETUID at build-time so that ksu is installed into
    the buildroot with the right permissions (part of #225974)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9-9
changelog:
  - kadmind: add upstream patch to fix free() on an invalid pointer (#696343,
    MITKRB5-SA-2011-004, CVE-2011-0285)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-1
changelog:
  - update to 1.9.1:
    - drop no-longer-needed patches for CVE-2010-4022, CVE-2011-0281,
      CVE-2011-0282, CVE-2011-0283, CVE-2011-0284, CVE-2011-0285


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#576093)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-3
changelog:
  - pull a fix from SVN to get libgssrpc clients (e.g. kadmin) authenticating
    using the old protocol over IPv4 again (RT#6920)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-4
changelog:
  - apply upstream patch by way of Burt Holzman to fall back to a non-referral
    method in cases where we might be derailed by a KDC that rejects the
    canonicalize option (for example, those from the RHEL 2.1 or 3 era) (#715074)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-5
changelog:
  - pull a fix from SVN to try to avoid triggering a PTR lookup in getaddrinfo()
    during krb5_sname_to_principal(), and to let getaddrinfo() decide whether or
    not to ask for an IPv6 address based on the set of configured interfaces
    (#717378, RT#6922)
  - pull a fix from SVN to use AI_ADDRCONFIG more often (RT#6923)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-6
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time (#701446,
    RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-7
changelog:
  - kadmind.init: drop the attempt to detect no-database-present errors (#723723),
    which is too fragile in cases where the database has been manually moved or
    is accessed through another kdb plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-8
changelog:
  - build shared libraries with partial RELRO support (#723995)
  - filter out potentially multiple instances of -Wl,-z,relro from krb5-config
    output, now that it's in the buildroot's default LDFLAGS
  - pull in a patch to fix losing track of the replay cache FD, from SVN by
    way of Kevin Coffman


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-9
changelog:
  - override the default build rules to not delete temporary y.tab.c files,
    so that they can be packaged, allowing debuginfo files which point to them
    do so usefully (#729044)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-10
changelog:
  - handle an assertion failure that starts cropping up when the patch for
    using poll (#701446) meets servers that aren't running KDCs or against
    which the connection fails for other reasons (#727829, #734172)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-12
changelog:
  - pull in upstream patch for RT#6952, confusion following referrals for
    cross-realm auth (#734341)
  - pull in build-time deps for the tests


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-16
changelog:
  - kadmin.service: fix #723723 again
  - kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
    lines, because systemd parsing doesn't handle alternate value shell variable
    syntax
  - kprop.service: add missing Type=forking so that systemd doesn't assume simple
  - kprop.service: expect the ACL configuration to be there, not absent
  - handle a harder-to-trigger assertion failure that starts cropping up when we
    exit the transmit loop on time (#739853)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-17
changelog:
  - pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
    make it public (#745533)


author: Nalin Dahyabhai <nalin@redhat.com> 1.9.1-18
changelog:
  - apply upstream patch to fix a null pointer dereference with the LDAP kdb
    backend (CVE-2011-1527, #744125), an assertion failure with multiple kdb
    backends (CVE-2011-1528), and a null pointer dereference with multiple kdb
    backends (CVE-2011-1529) (#737711)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.0
changelog:
  - update to 1.10 alpha 1
  - on newer releases where we can assume NSS >= 3.13, configure PKINIT to build
    using NSS
  - on newer releases where we build PKINIT using NSS, configure libk5crypto to
    build using NSS
  - rename krb5-pkinit-openssl to krb5-pkinit on newer releases where we're
    expecting to build PKINIT using NSS instead
  - during %check, run check in the library and kdc subdirectories, which
    should be able to run inside of the build system without issue


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.2
changelog:
  - apply upstream patch to fix a null pointer dereference when processing
    TGS requests (CVE-2011-1530, #753748)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha1.3
changelog:
  - pull in patch for RT#7046: tag a ccache containing credentials obtained via
    S4U2Proxy with the principal name of the proxying principal (part of #761317)
    so that the default principal name can be set to that of the client for which
    it is proxying, which results in the ccache looking more normal to consumers
    of the ccache that don't care that there's proxying going on
  - pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
    (more of #761317)
  - pull in patch for RT#7048: allow PAC verification to only bother trying to
    verify the signature with keys that it's given (still more of #761317)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-0.alpha2.2
changelog:
  - modify the deltat grammar to also tell gcc (4.7) to suppress
    "maybe-uninitialized" warnings in addition to the "uninitialized" warnings
    it's already being told to suppress (RT#7080)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-2
changelog:
  - add patch to accept keytab entries with vno==0 as matches when we're
    searching for an entry with a specific name/kvno (#230382/#782211,RT#3349)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10-5
changelog:
  - when removing -workstation, remove our files from the info index while
    the file is still there, in %preun, rather than %postun, and use the
    compressed file's name (#801035)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-1
changelog:
  - update to 1.10.1
    - drop the KDC crash fix
    - drop the KDC lookaside cache fix
    - drop the fix for kadmind RPC ACLs (CVE-2012-1012)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-2
changelog:
  - change back dns_lookup_kdc to the default setting (Stef Walter, #805318)
  - comment out example.com examples in default krb5.conf (Stef Walter, #805320)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.1-3
changelog:
  - have -server require /usr/share/dict/words, which we set as the default
    dict_file in kdc.conf (#817089)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-1
changelog:
  - update to 1.10.2
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user
    - also package the PDF format admin, user, and install guides
    - drop some PDFs that no longer get built right
  - add a backport of Stef's patch to set the client's list of supported
    enctypes to match the types of keys that we have when we are using a
    keytab to try to get initial credentials, so that a KDC won't send us
    an AS reply that we can't encrypt (RT#2131, #748528)
  - don't shuffle around any shared libraries on releases with no-separate-/usr,
    since /usr/lib is the same place as /lib
  - add explicit buildrequires: on 'hostname', for the tests, on systems where
    it's in its own package, and require net-tools, which used to provide the
    command, everywhere


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-2
changelog:
  - back out this labeling change (dwalsh):
    - when building the new label for a file we're about to create, also mix
      in the current range, in addition to the current user


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-3
changelog:
  - backport a fix to allow a PKINIT client to handle SignedData from a KDC
    that's signed with a certificate that isn't in the SignedData, but which
    is available as an anchor or intermediate on the client (RT#7183)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-5
changelog:
  - add upstream patch to fix freeing an uninitialized pointer and dereferencing
    another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
    and CVE-2012-1015, #844779 and #844777)
  - fix a thinko in whether or not we mess around with devel .so symlinks on
    systems without a separate /usr (sbose)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-6
changelog:
  - go back to not messing with library file paths on Fedora 17: it breaks
    file path dependencies in other packages, and since Fedora 17 is already
    released, breaking that is our fault


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.2-7
changelog:
  - selinux: hang on to the list of selinux contexts, freeing and reloading
    it only when the file we read it from is modified, freeing it when the
    shared library is being unloaded (#845125)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-2
changelog:
  - undo rename from krb5-pkinit-openssl to krb5-pkinit on EL6
  - version the Obsoletes: on the krb5-pkinit-openssl to krb5-pkinit rename
  - reintroduce the init scripts for non-systemd releases
  - forward-port %{?_rawbuild} annotations from EL6 packaging


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-3
changelog:
  - backport patch to disable replay detection in krb5_verify_init_creds()
    while reading the AP-REQ that's generated in the same function (RT#7229)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-4
changelog:
  - cut down the number of times we load SELinux labeling configuration from
    a minimum of two times to actually one (more of #845125)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - on EL6, conflict with libsmbclient before 3.5.10-124, which is when it
    stopped linking with a symbol which we no longer export (#771687)
  - pull up patch for RT#7063, in which not noticing a prompt for a long
    time throws the client library's idea of the time difference between it
    and the KDC really far out of whack (#773496)
  - add a backport of more patches to set the client's list of supported enctypes
    when using a keytab to be the list of types of keys in the keytab, plus the
    list of other types the client supports but for which it doesn't have keys,
    in that order, so that KDCs have a better chance of being able to issue
    tickets with session keys of types that the client can use (#837855)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-5
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#838548)


author: Nalin Dahyabhai <nalin@redhat.com> 1.10.3-7
changelog:
  - tag a couple of other patches which we still need to be applied during
    %{?_rawbuild} builds (zmraz)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.11 alpha 1
    - drop backported patch for RT #7406
    - drop backported patch for RT #7407
    - drop backported patch for RT #7408
    - the new docs system generates PDFs, so stop including them as sources
    - drop backported patch to allow deltat.y to build with the usual
      warning flags and the current gcc
    - drop backported fix for disabling use of a replay cache when verifying
      initial credentials
    - drop backported fix for teaching PKINIT clients which trust the KDC's
      certificate directly to verify signed-data messages that are signed with
      the KDC's certificate, when the blobs don't include a copy of the KDC's
      certificate
    - drop backported patches to make keytab-based authentication attempts
      work better when the client tells the KDC that it supports a particular
      cipher, but doesn't have a key for it in the keytab
    - drop backported fix for avoiding spurious clock skew when a TGT is
      decrypted long after the KDC sent it to the client which decrypts it
    - move the cross-referenced HTML docs into the -libs package to avoid
      broken internal links
    - drop patches to fixup paths in man pages, shouldn't be needed any more


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.0
changelog:
  - move the rather large pile of html and pdf docs to -workstation, so
    that just having something that links to the libraries won't drag
    them onto a system, and we avoid having to sort out hard-coded paths
    that include %{_libdir} showing up in docs in multilib packages
  - actually create %{_var}/kerberos/kdc/user, so that it can be packaged
  - correct the list of packaged man pages
  - don't dummy up required tex stylesheets, require them
  - require pdflatex and makeindex


author: Nalin Dahyabhai <nalin@redhat.com> 1.11-0.alpha1.1
changelog:
  - handle releases where texlive packaging wasn't yet as complicated as it
    is in Fedora 18
  - fix an uninitialized-variable error building one of the test programs


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - when building with our bundled copy of libverto, package it in with -libs
    rather than with -server (#886049)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-1
changelog:
  - update to 1.11.1
    - drop patch for noticing negative timeouts being passed to the poll()
      wrapper in the client transmit functions


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-2
changelog:
  - prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
  - drop the kerberos-iv portreserve file, and drop the rest on systemd systems
  - escape uses of macros in comments (more of #884065)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a version comparison to expect newer texlive build requirements when
    %{_rhel} > 6 rather than when it's > 7


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-5
changelog:
  - pull up Simo's patch to mark the correct mechanism on imported GSSAPI
    contexts (RT#7592)
  - go back to using reconf to run autoconf and autoheader (part of #925640)
  - add temporary patch to use newer config.guess/config.sub (more of #925640)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-6
changelog:
  - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user,
    since that's what the libraries actually look for
  - add buildrequires on nss-myhostname, in an attempt to get more of the tests
    to run properly during builds
  - pull in Simo's patch to recognize "client_keytab" as a key type which can
    be passed in to gss_acquire_cred_from() (RT#7598)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-7
changelog:
  - when testing the RPC library, treat denials from the local portmapper the
    same as a portmapper-not-running situation, to allow other library tests
    to be run while building the package


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.1-9
changelog:
  - move the compiled-in default ccache location from the previous default of
    FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-1
changelog:
  - update to 1.11.2
    - drop pulled in patch for RT#7586, included in this release
    - drop pulled in patch for RT#7592, included in this release
  - pull in fix for keeping track of the message type when parsing FAST requests
    in the KDC (RT#7605, #951843) (also #951965)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-3
changelog:
  - pull the changing of the compiled-in default ccache location to
    DIR:/run/user/%{uid}/krb5cc back into F19, in line with SSSD and
    the most recent pam_krb5 build


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-6
changelog:
  - pull in upstream fix to start treating a KRB5CCNAME value that begins
    with DIR:: the same as it would a DIR: value with just one ccache file
    in it (RT#7172, #965574)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-7
changelog:
  - backport fix for not being able to verify the list of transited realms
    in GSS acceptors (RT#7639, #959685)
  - backport fix for not being able to pass an empty password to the
    get-init-creds APIs and have them actually use it (RT#7642, #960001)
  - add backported proposed fix to use the unauthenticated server time
    as the basis for computing the requested credential expiration times,
    rather than the client's idea of the current time, which could be
    significantly incorrect (#961221)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-8
changelog:
  - pull in patches from master to not test GSSRPC-over-UDP and to not
    depend on the portmapper, which are areas where our build systems
    often give us trouble, too


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.2-9
changelog:
  - don't forget to set the SELinux label when creating the directory for
    a DIR: ccache
  - pull in proposed fix for attempts to get initial creds, which end up
    following referrals, incorrectly trying to always use master KDCs if
    they talked to a master at any point (should fix RT#7650)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-1
changelog:
  - update to 1.11.3
    - drop patch for RT#7605, fixed in this release
    - drop patch for CVE-2002-2443, fixed in this release
    - drop patch for RT#7369, fixed in this release
  - pull upstream fix for breaking t_skew.py by adding the patch for #961221


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-2
changelog:
  - special-case /run/user/0, attempting to create it when resolving a
    directory cache below it fails due to ENOENT and we find that it doesn't
    already exist, either, before attempting to create the directory cache
    (maybe helping, maybe just making things more confusing for #961235)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-3
changelog:
  - specify dependencies on the same arch of krb5-libs by using the %{?_isa}
    suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-4
changelog:
  - use (a bundled, for now, copy of) nss_wrapper to let us run some of the
    self-tests at build-time in more places than we could previously (#978756)
  - cover inconsistencies in whether or not there's a local caching nameserver
    that's willing to answer when the build environment doesn't have a
    resolver configuration, so that nss_wrapper's faking of the local
    hostname can be complete


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-6
changelog:
  - tweak configuration files used during tests to try to reduce the number
    of conflicts encountered when builds for multiple arches land on the same
    builder


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-8
changelog:
  - drop a patch we weren't not applying (build tooling)
  - wrap kadmind and kpropd in scripts which check for the presence/absence
    of files which dictate particular exit codes before exec'ing the actual
    binaries, instead of trying to use ConditionPathExists in the unit files
    to accomplish that, so that we exit with failure properly when what we
    expect isn't actually in effect on the system (#800343)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-9
changelog:
  - take another stab at accounting for UnversionedDocdirs for the -libs
    subpackage (spotted by ssorce)
  - switch to just the snapshot of nss_wrapper we were using, since we
    no longer need to carry anything that isn't in the cwrap.org repository
    (ssorce)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-10
changelog:
  - incorporate Simo's backport of his persistent-keyring changes (#991148)
  - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and
    instead set default_ccache_name in the default krb5.conf's [libdefaults]
    section (#991148)
  - on releases where we expect krb5.conf to be configured with a
    default_ccache_name, add it whenever we upgrade from an older version of
    the package that wouldn't have included it in its default configuration
    file (#991148)


author: Nalin Dahyabhai <nalin@redhat.com> 1.11.3-11
changelog:
  - don't let comments intended for one scriptlet become part of the "script"
    that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only apply the patch to autocreate /run/user/0 when we're hard-wiring the
    default ccache location to be under it; otherwise it's unnecessary


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-15
changelog:
  - add explicit build-time dependency on a version of keyutils that's new
    enough to include keyctl_get_persistent() (more of #991148)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-16
changelog:
  - back out setting default_ccache_name to the new default for now, resetting
    it to the old default while the kernel/keyutils bits get sorted (sgallagh)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-19
changelog:
  - configure --without-krb5-config so that we don't pull in the old default
    ccache name when we want to stop setting a default ccache name at configure-
    time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-20
changelog:
  - pull up fix for not calling a kdb plugin's check-transited-path
    method before calling the library's default version, which only knows
    how to read what's in the configuration file (RT#7709, #1013664)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-21
changelog:
  - switch to the version of persistent-keyring that was just merged to
    master (RT#7711), along with related changes to kinit (RT#7689)
  - go back to setting default_ccache_name to a KEYRING type


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-24
changelog:
  - backport the callback to use the libkrb5 prompter when we can't load PEM
    files for PKINIT (RT#7590, includes part of #965721/#1016690)
  - extract the rest of the fix #965721/#1016690 from the changes for RT#7680


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-25
changelog:
  - pull up fix for importing previously-exported credential caches in the
    gssapi library (RT# 7706, #1019420)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-alpha1.0
changelog:
  - initial update to alpha1
    - drop backport of persistent keyring support
    - drop backport for RT#7689
    - drop obsolete patch for fixing a use-before-init in a test program
    - drop obsolete patch teaching config.guess/config.sub about aarch64-linux
    - drop backport for RT#7598
    - drop backport for RT#7172
    - drop backport for RT#7642
    - drop backport for RT#7643
    - drop patches from master to not test GSSRPC-over-UDP and to not
      depend on the portmapper, which are areas where our build systems
      often give us trouble, too; obsolete
    - drop backports for RT#7682
    - drop backport for RT#7709
    - drop backport for RT#7590 and partial backport for RT#7680
    - drop OTP backport
    - drop backports for RT#7656 and RT#7657
  - BuildRequires: libedit-devel to prefer it
  - BuildRequires: pkgconfig, since configure uses it


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-27
changelog:
  - add some minimal description to the top of the wrapper scripts we use
    when starting krb5kdc and kadmind to describe why they exist (tooling)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-28
changelog:
  - drop patch to add additional access() checks to ksu - they add to breakage
    when non-FILE: caches are in use (#1026099), shouldn't be resulting in any
    benefit, and clash with proposed changes to fix its cache handling


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-29
changelog:
  - incorporate upstream patch for remote crash of KDCs which serve multiple
    realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-30
changelog:
  - check more thoroughly for errors when resolving KEYRING ccache names of type
    "persistent", which should only have a numeric UID as the next part of the
    name (#1029110)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-1
changelog:
  - update to 1.11.4
    - drop patch for RT#7650, obsoleted
    - drop patch for RT#7706, obsoleted as RT#7723
    - drop patch for CVE-2013-1418/CVE-2013-6800, included in 1.11.4


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.4-2
changelog:
  - pull in fix to store KDC time offsets in keyring credential caches (RT#7768,
    - pull in fix to set expiration times on credentials stored in keyring
    credential caches (RT#7769, #1031724)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-beta2.0
changelog:
  - update to beta2
    - drop obsolete backports for storing KDC time offsets and expiration times
      in keyring credential caches


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-2
changelog:
  - pull in fix from master to return a NULL pointer rather than allocating
    zero bytes of memory if we read a zero-length input token (RT#7794, part of
    - pull in fix from master to ignore an empty token from an acceptor if
    we've already finished authenticating (RT#7797, part of #1043962)
  - pull in fix from master to avoid a memory leak when a mechanism's
    init_sec_context function fails (RT#7803, part of #1043962)
  - pull in fix from master to avoid a memory leak in a couple of error
    cases which could occur while obtaining acceptor credentials (RT#7805, part
    of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update a test wrapper to properly handle things that the new libkrad does,
    and add python-pyrad as a build requirement so that we can run its tests


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-5
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-8
changelog:
  - add patch from Dhiru Kholia for the AES-NI implementations to allow
    libk5crypto to be properly marked as not needing an executable stack
    on arches where they're used (#1045699, and so many others)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-9
changelog:
  - grab a more-commented version of the most recent patch from upstream
    master
  - make a guess at making the 32-bit AES-NI implementation sufficiently
    position-independent to not require execmod permissions for libk5crypto
    (more of #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-10
changelog:
  - amend the PIC patch for iaesx86.s to also save/restore ebx in the
    functions where we modify it, because the ELF spec says we need to


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12-11
changelog:
  - update the PIC patch for iaesx86.s to not use ELF relocations to the version
    that landed upstream (RT#7815, #1045699)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-1
changelog:
  - update to 1.12.1
    - drop patch for RT#7794, included now
    - drop patch for RT#7797, included now
    - drop patch for RT#7803, included now
    - drop patch for RT#7805, included now
    - drop patch for RT#7807, included now
    - drop patch for RT#7045, included now
    - drop patches for RT#7813 and RT#7815, included now
    - add patch to always retrieve the KDC time offsets from keyring caches,
      so that we don't mistakenly interpret creds as expired before their
      time when our clock is ahead of the KDC's (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-2
changelog:
  - pull in multiple changes to allow replay caches to be added to a GSS
    credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add currently-proposed changes to teach ksu about credential cache
    collections and the default_ccache_name setting (#1015559,#1026099)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-4
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-5
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066000, RT#7858)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-9
changelog:
  - pull in changes from upstream which add processing of the contents of
    /etc/gss/mech.d/*.conf when loading GSS modules (#1102839)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-10
changelog:
  - pull in fix for denial of service by injection of malformed GSSAPI tokens
    (CVE-2014-4341, CVE-2014-4342, #1116181)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.1-12
changelog:
  - gssapi: pull in proposed fix for a double free in initiators (David
    Woodhouse, CVE-2014-4343, #1117963)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-1
changelog:
  - update to 1.12.2
    - drop patch for RT#7820, fixed in 1.12.2
    - drop patch for #231147, fixed as RT#3277 in 1.12.2
    - drop patch for RT#7818, fixed in 1.12.2
    - drop patch for RT#7836, fixed in 1.12.2
    - drop patch for RT#7858, fixed in 1.12.2
    - drop patch for RT#7924, fixed in 1.12.2
    - drop patch for RT#7926, fixed in 1.12.2
    - drop patches for CVE-2014-4341/CVE-2014-4342, included in 1.12.2
    - drop patch for CVE-2014-4343, included in 1.12.2
    - drop patch for CVE-2014-4344, included in 1.12.2
    - drop patch for CVE-2014-4345, included in 1.12.2
  - replace older proposed changes for ksu with backports of the changes
    after review and merging upstream (#1015559, #1026099, #1118347)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.13-0.alpha1.2
changelog:
  - kpropd hasn't bothered with -S since 1.11; stop trying to use that flag
    in the systemd unit file


author: Roland Mainz <rmainz@redhat.com> - 1.13-0.alpha1.3
changelog:
  - fix for CVE-2014-5351 (#1145425) "krb5: current keys returned when
    randomizing the keys for a service principal"


author: Roland Mainz <rmainz@redhat.com> - 1.13-1
changelog:
  - Update from krb5-1.13-alpha1 to final krb5-1.13
  - Removed patch for CVE-2014-5351 (#1145425) "krb5: current
    keys returned when randomizing the keys for a service principal" -
    now part of upstream sources
  - Use patch for glibc |eventfd()| prototype mismatch (#1147887) only
    for Fedora > 20


author: Roland Mainz <rmainz@redhat.com> - 1.13-2
changelog:
  - Bump 1%{?dist} to 2%{?dist} to workaround RPM sort issue
    which would lead yum updates to treat the last alpha as newer
    than the final version.


author: Roland Mainz <rmainz@redhat.com> - 1.13-5
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").
  - Added "python-sphinx-latex" to the build requirements
    to fix build failures on F22 machines.


author: Roland Mainz <rmainz@redhat.com> - 1.13-7
changelog:
  - Remove "python-sphinx-latex" and "tar" from the build requirements
    to fix build failures on F22 machines.
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13-8
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-1
changelog:
  - Update to krb5-1.13.1
    - drop patch for CVE_2014_5353_fix_LDAP_misused_policy_name_crash, fixed in krb5-1.13.1
    - drop patch for kinit -C loops (MIT/krb5 bug #243), fixed in krb5-1.13.1
    - drop patch for CVEs { 2014-9421, 2014-9422, 2014-9423, 2014-5352 }, fixed in krb5-1.13.1
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-2
changelog:
  - fix for CVE-2014-5355 (#1193939) "krb5: unauthenticated
    denial of service in recvauth_common() and others"


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-3
changelog:
  - Add temporay workaround for RH bug #1204646 ("krb5-config
    returns wrong -specs path") which modifies krb5-config post
    build so that development of krb5 dependicies gets unstuck.
    This MUST be removed before rawhide becomes F23 ...


author: Roland Mainz <rmainz@redhat.com> - 1.13.1-4
changelog:
  - fix for CVE-2015-2694 (#1216133) "requires_preauth bypass
    in PKINIT-enabled KDC".
    In MIT krb5 1.12 and later, when the KDC is configured with
    PKINIT support, an unauthenticated remote attacker can
    bypass the requires_preauth flag on a client principal and
    obtain a ciphertext encrypted in the principal's long-term
    key.  This ciphertext could be used to conduct an off-line
    dictionary attack against the user's password.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-0
changelog:
  - Update to krb5-1.13.2
    - drop patch for krb5-1.13.2-CVE_2015_2694_requires_preauth_bypass_in_PKINIT_enabled_KDC, fixed in krb5-1.13.2
    - drop patch for krb5-1.12.1-CVE_2014_5355_fix_krb5_read_message_handling, fixed in krb5-1.13.2
  - Add script processing for upcoming Zanata l10n support
  - Minor spec cleanup


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add patch to fix Redhat Bug #1227542 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Remove Zanata test glue and related workarounds
    - Bug #1234292 ("IPA server cannot be run in container due to incorrect /usr/sbin/_kadmind")
    - Bug #1234326 ("krb5-server introduces new rpm dependency on ksh")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Use system nss_wrapper and socket_wrapper for testing.
    Patch by Andreas Schneider <asn@redhat.com>


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-7
changelog:
  - Support config snippets in /etc/krb5.conf.d/ and /usr/share/krb5.conf.d/
    (#1225792, #1146370, #1145808)


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-8
changelog:
  - Remove dependency on systemd-sysv which is no longer needed for fedora > 20
    This also fixes a fail-to-build issue.
  - Miscalaneous spec cleanup fixes


author: Robbie Harwood <rharwood@redhat.com> - 1.14-9
changelog:
  - Upstream release.  No actual change from beta, just version bump
  - Clean up unused parts of spec file


author: Robbie Harwood <rharwood@redhat.com> - 1.14-11
changelog:
  - Backport interposer fix (#1284985)
  - Drop workaround pwsize initialization patch (gcc has been fixed)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-14
changelog:
  - Remove WITH_NSS macro (always false)
  - Remove WITH_SYSTEMD macro (always true)
  - Remove WITH_LDAP macro (always true)
  - Remove WITH_OPENSSL macro (always true)


author: Robbie Harwood <rharwood@redhat.com> - 1.14-19
changelog:
  - Replace _kadmin/_kprop with systemd macros
  - Remove traces of upstart from fedora package per policy
  - Resolves: #1290185


author: Robbie Harwood <rharwood@redhat.com> - 1.14-21
changelog:
  - Adjust dependency on crypto-polices to be just the file we want
  - Patch courtesy of lslebodn
  - Resolves: #1308984


author: Robbie Harwood <rharwood@redhat.com> - 1.14.1-1
changelog:
  - New rawhide, new upstream version
  - Drop CVE patches
  - Rename fix_interposer.patch to acquire_cred_interposer.patch
  - Update acquire_cred_interposer.patch to apply to new source


author: Robbie Harwood <rharwood@redhat.com> - 1.14.4-3
changelog:
  - Switch to using autosetup macro.
    - Patches come from git, so it is easiest to just make a git repo


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-5
changelog:
  - Automatically add includedir where not present
  - Try removing sleep statement to see if it is still needed
  - Resolves: #1433083


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-22
changelog:
  * Mon Aug 07 2017 Robbie Harwood <rharwood@redhat.com> - 1.15.1-21
  - Display an error message if ocsp pkinit is requested


author: Robbie Harwood <rharwood@redhat.com> - 1.16-6
changelog:
  - Fix a leak in the previous commit
  - Restore dist macro that was accidentally removed
  - Resolves: #1540939


author: Robbie Harwood <rharwood@redhat.com> - 1.16-15
changelog:
  - Add SPAKE support
  - Improve protections on internal sensitive buffers
  - Improve internal hex encoding/decoding


author: Elliot Lee <sopwith@redhat.com> 2.1.10-5
changelog:
  - Add patch4 for ppc64. The basic rule seems to be that on any platform
  where it is possible to be running a 64-bit kernel, we need to always 
  print out 64-bit addresses.


author: Jeremy Katz <katzj@redhat.com> 2.1.11-2
changelog:
  - build a diet libpci_loader.a on i386
  - always assume pread exists, it does with diet and all vaguely recent glibc


author: Harald Hoyer <harald@redhat.com> 2.2.9-3
changelog:
  - removed static library, preserve timestamps on install (rhbz#226236)
  - added modified patch from Michael E. Brown @ Dell, to also
    read all /usr/share/hwdata/pci.ids.d/*.ids files (rhbz#195327)


author: Michal Hlavinka <mhlavink@redhat.com> 3.0.1-1
changelog:
  - version 3.0.1
  - add support for Super-H (sh3,sh4) (#446600)
  - fix: broken -L in libpci.pc (#456469)


author: Peter Jones <pjones@redhat.com> - 8-1
changelog:
  - Update to dbxtool 8
  - Make a "make coverity" rule to scan the source
    Results at: https://scan.coverity.com/projects/rhboot-dbxtool
  - Don't try to apply anything if PK and KEK aren't enrolled
  - Add --force and --quiet for the PK/KEK checker, and use them in the
    systemd service.
    Resolves: rhbz#1489942
  - Add a .syntastic_c_config for vim's Syntastic modules
  - Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  - Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  - Lots of minor bug fixes gcc -Wextra and friends found.


author: Peter Jones <pjones@redhat.com> - 8-2
changelog:
  - Don't use -f in dbxtool.service; that'll make it do the thing we're
    trying to avoid.
    Resolves: rhbz#1489942


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.3-24
changelog:
  - Add example.c and minigzip.c to the doc files, as
    they are listed as examples in the README (#52574)


author: Jakub Jelinek <jakub@redhat.com> 1.1.4-2
changelog:
  - remove glibc patch, it is no longer needed (zlib uses gcc -shared
    as it should)
  - run tests and only build the package if they succeed


author: Jeff Johnson <jbj@jbj.org> 1.2.0.7-2
changelog:
  - fix: gzeof not set when reading compressed file (#106424).
  - fix: revert zlib.h include constants for now (#106291).


author: Stepan Kasal <skasal@redhat.com> - 1.2.3-21
changelog:
  - consolidate the autoconfiscation patches into one and clean it up
  - consequently, clean up the %build and %install sections
  - zconf.h includes unistd.h again (#479133)


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.2.4-1
changelog:
  - update to 1.2.4
    use the upstream make/configure files for zlib,
    change additional makefile/configure file to be used only to minizip
    add pkgconfig to zlib


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.2.5-4
changelog:
  - Resolves: #678603
    zlib from minizip allowed NULL pointer parameter of function unzGetCurrentFileInfo


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-7
changelog:
  - resolves: #844791
    rank Z_BLOCK flush below Z_PARTIAL_FLUSH only when last flush was Z_BLOCK
  - done some minor .spec file cleanup


author: Peter Schiffer <pschiffe@redhat.com> - 1.2.7-8
changelog:
  - related: #832545
    reverted changes for this bug, static libraries shouldn't be compiled with
    -fPIC flag


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-11
changelog:
  - IBM Z hardware-accelerated deflate for s390x architectures
  - IBM CRC32 optimalization for POWER 8+ architectures
  - fixed firefox crash due to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures


author: John (J5) Palmieri <johnp@redhat.com> - 0.80.1-1
changelog:
  - upgrade to 0.80.1
  - remove dependency on Pyrex and libxml2
  - some API breakage,
    please see http://dbus.freedesktop.org/doc/dbus-python/NEWS.html
    for notes on changes


author: Rex Dieter <rdieter@fedoraproject.org> - 1.1.1-3
changelog:
  - python3-dbus subpkg (#892474)
  - (main) Provides: python-dbus
  - BR: python-docutils
  - .spec cosmetics
  - skip failed tests on rawhide (#913936)


author: Jens Petersen <petersen@redhat.com> - 0.2-3.fc8
changelog:
  - add fontdir macro
  - create fonts.dir and fonts.scale (reported by Mark Alford, #245961)
  - add catalogue symlink


author: Caius Chance <cchance@redhat.com> - 1.03-1.fc9
changelog:
  - Resolves: rhbz#251890 (Exchanged and incomplete glyphs.)
  - Repack source tarball and re-align source version number.


author: Caius Chance <cchance@redhat.com> - 1.04-0.1.beta2.fc10
changelog:
  - Updated source version to 1.04.beta2.
  - Removed License.txt and COPYING as already included in sources.


author: Caius Chance <cchance@redhat.com> - 1.04.90-1.fc10
changelog:
  - Resolves: rhbz#258592
    (Incorrect glyph points and missing hinting instructions for U+0079, U+03BC,
     U+0431, U+2010..2012.)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090630-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090630.
  - Reconverted from original TTF with better procedures of data conservation.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090706-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090706.
  - Reconverted from original TTF with traditional kern table. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-1.fc12
changelog:
  - Updated to upstream 1.05.1.20090713.
  - Generate TTFs with traditional kern table via fontforge scripts. (rh#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090713-2.fc12
changelog:
  - Required fontforge ver 20090408 which supports generation with traditional
    kern table. (rhbz#503430)


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.1.20090721-1.fc12
changelog:
  - Fixed fontforge scripting of sfd -> ttf generation.
  - Checked existance of traditionat kern table in Sans and Serif.


author: Caius 'kaio' Chance <k at kaio.me> - 1.05.2.20091019-3.fc13
changelog:
  - Removed full stop in Summary.
  - Set default file permission in files.
  - Provides liberation-fonts and liberation-fonts-compat by 
    liberation-fonts-common.
  - Macro as much as possible in .spec.


author: Caius 'kaio' Chance <k at kaio.net> - 1.05.3.20100428-1
changelog:
  - rhbz#510174: Corrected version number of all SFD files.
  - Corrected license exceptions to GPLv2.
  - Updated README file.


author: Caius 'kaio' Chance <k at kaio.net> - 1.05.3.20100505-1
changelog:
  - Updated from upstream.
  - Resolves: rhbz#474522 - Incorrect cent sign glyph (U+00A2) in Sans and Mono style in Liberation fonts.


author: Caius 'kaio' Chance <me at kaio.net> - 1.05.3.20100506-1
changelog:
  - Updated from upstream.
  - Cleaned up points and auto-instructed hinting of 'u', 'v', 'w', 'y'.
  (rhbz#463036)


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.2-11
changelog:
  - Decided to defer Liberation 2.0 feature in Fedora 18.
  - Reverting to Liberation 1.07.2. 
  - Using 11 release to match with Liberation Sans Narrow


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.4-1
changelog:
  - Upstream release of 1.07.4
  - Restored Liberation Sans Bold 'u' instructions
  - Resolved #1009650, renames serbian shapes as per AGL
  - Added new glyph for "imacron" and "g"
  - Added Correct shape for uni266B in all Liberation variants #1014357
  - Resolved Problematic shapes for macedonian alphabet #1013949


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 1:1.07.4-10
changelog:
  - Resolves:rh#1526510 - USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release
  - some spec cleanups


author: Vishal Vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-1
changelog:
  - Resolves: rhbz#1614529
  - Updated the BuildRequires to python3 and using latest build
  - Changed the upstream URL


author: Vishal vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-4
changelog:
  - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro


author: Vishal Vijayraghavan <vvijayra@redhat.com> - 1:2.00.3-6
changelog:
  - Resolves: #1664501 - liberation-fonts-common contains fonts.dir
  - Splitted the font family(mono, sans and serif) into diferrent root font directories


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM). Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


