# changelog

author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
    - do not read udev.conf, this seems to be all in the start_udev script
    - fix detection of "nomodules" kernel command line option
    - read /proc/cmdline earlier and convert rhgb to use that, too
    - load_module(): change redirection to /dev/null
    - some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
    - remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
    - remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
    - no need to set NETWORKING=no, it is not used/exported
    - do not export BOOTUP
    - delete two "sleep 1" calls that wants to add time to go
      into confirmation mode. There is enough time to press a
      key anyway or use "confirm" in /proc/cmdline.
    - read /proc/cmdline into a variable
    - use strstr() to search in /proc/cmdline
    - add "forcefsck" as possible option in /proc/cmdline
    - while removing lock files, no need to call `basename`
    - add unamer=`uname -r` and reduce number of forks
    - do not fork new bash to create /var/log/ksyms.0


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't
    initialize them. This gave error messages during startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
    daemon(): avoid starting another bash
    killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com>
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root
    filesystem -- it now happens when other filesystems are corrupt as well


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code
  - Added doexec and man page


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.37.1.el6uek]
changelog:
  - Revert "printk: Default console logging level should be set to 4" (Cesar Roque)  [Orabug: 30931820]  
  - rds: If one path needs re-connection, check all and re-connect (Rao Shoaib)  [Orabug: 30870743]  
  - xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (kaixuxia)  [Orabug: 30902190]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.4.el6uek]
changelog:
  - KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton)  [Orabug: 30944739]  {CVE-2020-2732} 
  - KVM: nVMX: Don't emulate instructions in guest mode (Paolo Bonzini)  [Orabug: 30944739]  {CVE-2020-2732}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.3.el6uek]
changelog:
  - Fix KABI error by keeping the struct field being removed by the below patch (Ritika Srivastava)  [Orabug: 30902926]  
  - Revert "PCI: Check pref compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)  [Orabug: 30902926]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.2.el6uek]
changelog:
  - rds: Use bitmap to designate dropped connections (Håkon Bugge)  [Orabug: 30868399]  
  - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru kolappan)  [Orabug: 29797476]  
  - CIFS: fix POSIX lock leak and invalid ptr deref (Aurelien Aptel)  [Orabug: 30399972]  
  - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (qize wang)  [Orabug: 30819439]  {CVE-2019-14901} 
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)  [Orabug: 30864533]  {CVE-2019-15291} 
  - rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath Srinivasan)  [Orabug: 30865080]  
  - KVM: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)  [Orabug: 30867886]  
  - KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini)  [Orabug: 30867886]  
  - slub: do not sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang)  [Orabug: 30903145]  
  - slub: extend slub debug to handle multiple slabs (Aaron Tomlin)  [Orabug: 30903145]  
  - Fix kmalloc slab creation sequence (Christoph Lameter)  [Orabug: 30903145]  
  - slab: correct size_index table before replacing the bootstrap kmem_cache_node (Daniel Sanders)  [Orabug: 30903145]  
  - mm/slab_common: support the slub_debug boot option on specific object size (Gavin Guo)  [Orabug: 30903145]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.36.1.el6uek]
changelog:
  - iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider)  [Orabug: 30459537]  
  - x86/microcode: Issue update message only once (Borislav Petkov)  [Orabug: 30528904]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30528904]  
  - KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini)  [Orabug: 30658695]  {CVE-2019-19332} 
  - rtlwifi: Fix potential overflow on P2P code (Laura Abbott)  [Orabug: 30807748]  {CVE-2019-17666}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.5.el6uek]
changelog:
  - x86: microcode: propagate return value to siblings (Mihai Carabas)  [Orabug: 30557086]  
  - x86/bugs: TSX not disabled at late loading (Mihai Carabas)  [Orabug: 30557086]  
  - mlx5: lock mlx5_core to prevent module unload (Brian Maly)  [Orabug: 30566775]  
  - rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon)  [Orabug: 30576433]  
  - x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas)  [Orabug: 30649400]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.4.el6uek]
changelog:
  - IB/mlx4: Fix use after free in RDMA CM disconnect code path (Manjunath Patil)   
  - IB/mlx4: Fix leak in id_map_find_del (Håkon Bugge)  [Orabug: 30800573]  
  - Revert "IB/mlx4: Fix leak in id_map_find_del" (Manjunath Patil)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.3.el6uek]
changelog:
  - mm/slub: don't wait for high-order page allocation (Mridula Shastry)  [Orabug: 30651572]  
  - scsi: lpfc: Handle new link fault code returned by adapter firmware. (James Smart)  [Orabug: 30708960]  
  - IB/mlx4: Fix leak in id_map_find_del (Haakon Bugge)  [Orabug: 30778457]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.35.1.el6uek]
changelog:
  - ixgbe: protect TX timestamping from API misuse (Manjunath Patil)  [Orabug: 30275491]  
  - block: init flush rq ref count to 1 (Josef Bacik)  [Orabug: 30360559]  
  - block: fix null pointer dereference in blk_mq_rq_timed_out() (Yufen Yu)  [Orabug: 30360559]  
  - blk-mq: Remove generation seqeunce (Keith Busch)  [Orabug: 30360559]  
  - scsi: libsas: delete sas port if expander discover failed (Jason Yan)  [Orabug: 30580687]  {CVE-2019-15807} 
  - scsi: qla2xxx: fix a potential NULL pointer dereference (Allen Pais)  [Orabug: 30618784]  {CVE-2019-16233} 
  - printk: Default console logging level should be set to 4 (Boris Ostrovsky)  [Orabug: 30657070]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.2.el6uek]
changelog:
  - scsi: lpfc: Remove lpfc_enable_pbde as module parameter (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Make PBDE optimizations configurable (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Update driver version to 11.4.0.8 and Copyright updates (Ketan Mukadam)  [Orabug: 30569875]  
  - scsi: lpfc: Fix ELS abort on SLI-3 adapters (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Correct race with abort on completion path (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: update manufacturer attribute to reflect Broadcom (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Enable Management features for IF_TYPE=6 (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct topology type reporting on G7 adapters (James Smart)  [Orabug: 30569875] [Orabug: 29212758]  
  - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enhance log messages when reporting CQE errors (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Fix frequency of Release WQE CQEs (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Code cleanup for 128byte wqe data type (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: use __raw_writeX on DPP copies (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add embedded data pointers for enhanced performance (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Enable fw download on if_type=6 devices (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add if_type=6 support for cycling valid bits (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add 64G link speed support (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add PCI Ids for if_type=6 hardware (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add push-to-adapter support to sli4 (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Add SLI-4 if_type=6 support to the code base (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework sli4 doorbell infrastructure (James Smart)  [Orabug: 30569875]  
  - scsi: lpfc: Rework lpfc to allow different sli4 cq and eq handlers (James Smart)  [Orabug: 30569875]  
  - x86/bugs: use check_bugs instead of microcode_late_select_mitigation (Mihai Carabas)  [Orabug: 30332499]  
  - x86/bugs: spec_ctrl_mutex taken in stop_machine context (Mihai Carabas)  [Orabug: 30332499]  
  - x86/microcode: moved cpu feature late eval to stop_machine (Mihai Carabas)  [Orabug: 30332499]  
  - x86/cpu: Re-apply forced caps every time CPU caps are re-read (Andy Lutomirski)  [Orabug: 30332499]  
  - x86/microcode/intel: Check microcode revision before updating sibling threads (Ashok Raj)  [Orabug: 30332499]  
  - tracing: Fix possible double free on failure of allocating trace buffer (Steven Rostedt (VMware))  [Orabug: 30633873]  {CVE-2017-18595}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.34.1.el6uek]
changelog:
  - block/loop: set hw_sectors (Shaohua Li)  [Orabug: 30244514]  
  - block-mq: fix hung due to too much warning log (Junxiao Bi)  [Orabug: 30273956]  
  - oled: export symbols (Wengang Wang)  [Orabug: 30512063]  
  - oled: give panic handler chance to run before kexec (Wengang Wang)  [Orabug: 30512063]  
  - USB: sisusbvga: fix oops in error path of sisusb_probe (Oliver Neukum)  [Orabug: 30548565]  {CVE-2019-15219}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.5.el6uek]
changelog:
  - net/mlx5: bump driver rev (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5: Add 25G and 50G types (John Donnelly)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 VF device ID (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix pci error recovery flow (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Add timeout handle to commands with callback (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix potential deadlock in command mode change (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - net/mlx5: Fix wait_vital for VFs and remove fixed sleep (Daniel Jurgens)  [Orabug: 30479538]  
  - net/mlx5: Add ConnectX-5 PCIe 4.0 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Add missing 50G baseSR2 link mode (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5_core: Add ConnectX-5 to list of supported devices (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5e: Fix MLX5E_100BASE_T define (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5e: Fix soft lockup when HW Timestamping is enabled (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5: Make command timeout way shorter (Or Gerlitz)  [Orabug: 30479538]  
  - net/mlx5: Fix teardown errors that happen in pci error handler (Mohamad Haj Yahia)  [Orabug: 30479538]  
  - IB/mlx5: Support setting Ethernet priority for Raw Packet QPs (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add Raw Packet QP query functionality (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Warn on unsupported events of QP/RQ/SQ (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Add RQ and SQ event handling (majd@mellanox.com)  [Orabug: 30479538]  
  - net/mlx5_core: Export transport objects (majd@mellanox.com)  [Orabug: 30479538]  
  - IB/mlx5: Add CQE version 1 support to user QPs and SRQs (Haggai Abramovsky)  [Orabug: 30479538]  
  - net/mlx5_core: Fix trimming down IRQ number (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5_core: Export flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Make ipv4/ipv6 location more clear (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Enable flow steering support for the IB driver (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Initialize namespaces only when supported by device (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Set priority attributes (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Connect flow tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce modify flow table command (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Managing root flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add utilities to find next and prev flow-tables (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering autogrouped flow table (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Add PTP Hardware Clock (PHC) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Add HW timestamping (TS) support (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to read internal timer (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5e: Do not modify the TX SKB (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add setting ATOMIC endian mode (Eran Ben Elisha)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access functions to enable/disable RoCE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Break down the vport mac address query function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename en_flow_table.c to en_fs.c (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5: Use flow steering infrastructure for mlx5_en (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Flow steering tree initialization (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering API (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering lookup algorithms (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Add flow steering base data structures (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce flow steering firmware commands (Maor Gottlieb)  [Orabug: 30479538]  
  - net/mlx5e: Assign random MAC address if needed (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Fix query E-Switch capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add support for SR-IOV ndos (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce get vf statistics (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce set vport vlan (VST mode) (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce HCA cap and E-Switch vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce Vport administration functions (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Add SR-IOV (FDB) support (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: E-Switch, Introduce FDB hardware capabilities (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introducing E-Switch and l2 table (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write vlan list into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Write UC/MC list and promisc mode into vport context (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport vlans (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport promisc mode (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport state (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Introduce access functions to modify/query vport mac lists (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Update access functions to Query/Modify vport MAC address (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5: Add HW capabilities and structs for SR-IOV E-Switch (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Add base sriov support (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Modify enable/disable hca functions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: support napi_complete_done() (Eric Dumazet)  [Orabug: 30479538]  
  - mlx5: add busy polling support (Eric Dumazet)  [Orabug: 30479538]  
  - net/mlx5e: Use the right DMA free function on TX path (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Max mtu comparison fix (Doron Tsur)  [Orabug: 30479538]  
  - net/mlx5e: Added self loopback prevention (Tariq Toukan)  [Orabug: 30479538]  
  - net/mlx5e: Fix inline header size calculation (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix LSO vlan insertion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Re-eanble client vlan TX acceleration (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Return error in case mlx5e_set_features() fails (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Don't allow more than max supported channels (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Use the the real irqn in eq->irqn (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Wait for RX buffers initialization in a more proper manner (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid NULL pointer access in case of configuration failure (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Wait for FW readiness on startup (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Add pci error handlers to mlx5_core driver (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix internal error detection conditions (Eli Cohen)  [Orabug: 30479538]  
  - mlx5: stop including <asm-generic/kmap_types.h> (Christoph Hellwig)  [Orabug: 30479538]  
  - net/mlx5e: Disable VLAN filter in promiscuous mode (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5: Fix typo in mlx5_query_port_pvlc (Jiri Pirko)  [Orabug: 30479538]  
  - net/mlx5_core: Use private health thread for each device (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Use accessor functions to read from device memory (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Prepare cmd interface to system errors handling (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Improve mlx5 messages (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Update health syndromes (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix wrong name in struct (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: New init and exit flow for mlx5_core (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Fix notification of page supplement error (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Fix async commands return code (Eli Cohen)  [Orabug: 30479538]  
  - net/mlx5_core: Remove redundant "err" variable usage (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Fix struct type in the DESTROY_TIR/TIS device commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Priv state flag not rolled-back upon netdev open error (Achiad Shochat)  [Orabug: 30479538]  
  - IB/mlx5: Remove support for IB_DEVICE_LOCAL_DMA_LKEY (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix incorrect wc pkey_index assignment for GSI messages (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose max_sge_rd correctly (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Expose correct page_size_cap in device attributes (Sagi Grimberg)  [Orabug: 30479538]  
  - mlx5: Fix missing device local_dma_lkey (Sagi Grimberg)  [Orabug: 30479538]  
  - net/mlx5e: Avoid accessing NULL pointer at ndo_select_queue (Rana Shahout)  [Orabug: 30479538]  
  - mlx5e: Fix sparse warnings in mlx5e_handle_csum(). (David S. Miller)  [Orabug: 30479538]  
  - net/mlx5e: Support RX CHECKSUM_COMPLETE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support ethtool get/set_pauseparam (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Ethtool link speed setting fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: HW LRO changes/fixes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support smaller RX/TX ring sizes (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Add ethtool RSS configuration options (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Make RSS indirection table size a constant (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Have a single RSS Toeplitz hash key (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Set log_uar_page_sz for non 4K page size architecture (Carol L Soto)  [Orabug: 30479538]  
  - net/mlx5_core: Support physical port counters (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Take advantage of the light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Disable async events before unregister_netdev() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Rename/move functions following the ndo_stop flow change (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Light-weight netdev open/stop (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Introduce access function to modify RSS/LRO params (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce the "Drop RQ" (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Unify the RX flow (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove the mlx5e_update_priv_params() function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Introduce create/destroy RSS indir table access functions (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Do not use netdev_err() before the netdev is registered (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant de-reference (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant assignment of sq->user_index (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove redundant field mlx5e_priv->num_tc (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use hard-coded 4K page size for RQ/SQ/CQ (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return value of mlx5_command_exec() (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5e: Input IPSEC.SPI into the RX RSS hash function (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Cosmetics: use BIT() instead of "1 <<", and others (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: TX latency optimization to save DMA reads (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support TX packet copy into WQE (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Allocate DMA coherent memory on reader NUMA node (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Support ETH_RSS_HASH_XOR (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Prefetch skb data on RX (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Pop cq outside mlx5e_get_cqe (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove mlx5e_cq.sqrq back-pointer (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove extra spaces (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid TX CQE generation if more xmit packets expected (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Avoid redundant dev_kfree_skb() upon NOP completion (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Remove re-assignment of wq type in mlx5e_enable_rq() (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Use skb_shinfo(skb)->gso_segs rather than counting them (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Static mapping of netdev priv resources to/from netdev TX queues (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add transport domain to the ethernet TIRs/TISs (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5_core: Add transport domain alloc/dealloc support (Achiad Shochat)  [Orabug: 30479538]  
  - net/mlx5e: Support NETIF_F_SG (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Enforce max flow-tables level >= 3 (Gal Pressman)  [Orabug: 30479538]  
  - net/mlx5e: Disable client vlan TX acceleration (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Add HW cacheline start padding (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5e: Fix HW MTU settings (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: fix an error code (Dan Carpenter)  [Orabug: 30479538]  
  - net/mlx5_core: Fix static checker warnings around system guid query flow (Majd Dibbiny)  [Orabug: 30479538]  
  - mlx5: Enable mutual support for IB and Ethernet (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Add more query port helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number when querying port ptys (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Use port number in the query port mtu helpers (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Get vendor-id using the query adapter command (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Add new query HCA vport commands (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Make the vport helpers available for the IB driver too (Majd Dibbiny)  [Orabug: 30479538]  
  - net/mlx5_core: Check the return bitmask when querying ISSI (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Enable XRCs and SRQs when using ISSI > 0 (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_core: Apply proper name convention to helpers (Haggai Abramonvsky)  [Orabug: 30479538]  
  - net/mlx5_en: Add missing check for memory allocation failure (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet resource handling files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5: Ethernet Datapath files (Amir Vadai)  [Orabug: 30479538]  
  - net/mlx5_core: Set/Query port MTU commands (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Modify CQ moderation parameters (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement get/set port status (Rana Shahout)  [Orabug: 30479538]  
  - net/mlx5_core: Implement access functions of ptys register fields (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: New device capabilities handling (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: HW data structs/types definitions cleanup (Saeed Mahameed)  [Orabug: 30479538]  
  - net/mlx5_core: Set irq affinity hints (Saeed Mahameed)  [Orabug: 30479538]  
  - mlx5: add kcompat.h (Brian Maly)  [Orabug: 30479538]  
  - net/mlx5_core,mlx5_ib: Do not use vmap() on coherent memory (Amir Vadai)  [Orabug: 30479538]  
  - mlx5: enable module in kernel configs (Brian Maly)  [Orabug: 30479538]  
  - config: disable mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - nano: remove mlx5_ib (Brian Maly)  [Orabug: 30479538]  
  - fix retpoline build breakage when CONFIG_RETPOLINE is not set (Brian Maly)  [Orabug: 30479538]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.4.el6uek]
changelog:
  - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() (Shuning Zhang)  [Orabug: 30036349]  
  - ocfs2: direct-IO: protect get_blocks (Junxiao Bi)  [Orabug: 30036349]  
  - SUNRPC: Remove xprt_connect_status() (Trond Myklebust)  [Orabug: 30165838]  
  - SUNRPC: Handle ENETDOWN errors (Trond Myklebust)  [Orabug: 30165838]  
  - vhost: make sure log_num < in_num (yongduan)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: block speculation of translated descriptors (Michael S. Tsirkin)  [Orabug: 30312787]  {CVE-2019-14835} 
  - vhost: Fix Spectre V1 vulnerability (Jason Wang)  [Orabug: 30312787]  
  - array_index_nospec: Sanitize speculative array de-references (Dan Williams)  [Orabug: 30312787]  
  - net: hsr: fix memory leak in hsr_dev_finalize() (Mao Wenan)  [Orabug: 30444853]  {CVE-2019-16995} 
  - ieee802154: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30444946]  {CVE-2019-17053} 
  - mISDN: enforce CAP_NET_RAW for raw sockets (Ori Nimron)  [Orabug: 30445158]  {CVE-2019-17055} 
  - net: sit: fix memory leak in sit_init_net() (Mao Wenan)  [Orabug: 30445305]  {CVE-2019-16994} 
  - media: dvb: usb: fix use after free in dvb_usb_device_exit (Oliver Neukum)  [Orabug: 30490491]  {CVE-2019-15213} 
  - media: cpia2_usb: first wake up, then free in disconnect (Oliver Neukum)  [Orabug: 30511741]  {CVE-2019-15215} 
  - media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap (Vandana BN)  [Orabug: 30532774]  {CVE-2019-15217} 
  - target: Propagate backend read-only to core_tpg_add_lun (Nicholas Bellinger)  [Orabug: 30538419]  
  - kvm: mmu: ITLB_MULTIHIT mitigation selection (Kanth Ghatraju)  [Orabug: 30539766]  
  - cpu/speculation: Uninline and export CPU mitigations helpers (Kanth Ghatraju)  [Orabug: 30539766]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.3.el6uek]
changelog:
  - rds: Use correct conn when dropping connections due to cancel (Håkon Bugge)  [Orabug: 30316058]  
  - rds: ib: Optimize rds_ib_laddr_check (Håkon Bugge)  [Orabug: 30327671]  
  - rds: Bring loop-back peer down as well (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Avoid connect retry on loopback connections (Håkon Bugge)  [Orabug: 30271704]  
  - rds: ib: Qualify CM REQ duplicate detection with connection being up (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Further prioritize local loop-back connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Fix initial zero delay when queuing re-connect work (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-introduce separate work-queue for local connections (Håkon Bugge)  [Orabug: 30062150]  
  - rds: Re-factor and avoid superfluous queuing of shutdown work (Håkon Bugge)  [Orabug: 29994551]  
  - rds: ib: Flush ARP cache when connection attempt is rejected (Håkon Bugge)  [Orabug: 29994550]  
  - rds: ib: Fix incorrect setting of cp_reconnect_racing (Håkon Bugge)  [Orabug: 29994553]  
  - RDMA/cma: Make # CM retries configurable (Håkon Bugge)  [Orabug: 29994555]  
  - rds: Re-factor and avoid superfluous queuing of reconnect work (Håkon Bugge)  [Orabug: 29994558]  
  - rds: ib: Correct the cm_id compare commit (Håkon Bugge)  [Orabug: 29994560]  
  - rds: Increase entropy in hashing (Håkon Bugge)  [Orabug: 29994561]  
  - rds: ib: Resurrect the CQs instead of delete+create (Håkon Bugge)  [Orabug: 29994566]  
  - rds: Avoid queuing superfluous send and recv work (Håkon Bugge)  [Orabug: 29994564]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.2.el6uek]
changelog:
  - x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/tsx: Add "auto" option to the tsx= cmdline parameter (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/speculation/taa: Add mitigation for TSX Async Abort (Kanth Ghatraju)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta)  [Orabug: 30517133]  {CVE-2019-11135} 
  - kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Add helper function for creating VM worker threads (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86/cpu: Add Tremont to the cpu vulnerability whitelist (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move mapping_level_dirty_bitmap() call in mapping_level() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - Revert "KVM: x86: use the fast way to invalidate all pages" (Sean Christopherson)  [Orabug: 30517059]  {CVE-2018-12207} 
  - kvm: Convert kvm_lock to a mutex (Junaid Shahid)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Simplify force_pt_level calculation code in FNAME(page_fault)() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make force_pt_level bool (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: extend usage of RET_MMIO_PF_* constants (Paolo Bonzini)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Make mmu_set_spte() return emulate value (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207} 
  - KVM: x86: MMU: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Takuya Yoshikawa)  [Orabug: 30517059]  {CVE-2018-12207}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.33.1.el6uek]
changelog:
  - scsi: qla2xxx: Fix NULL pointer crash due to probe failure (himanshu.madhani@cavium.com)  [Orabug: 30161119]  
  - i2c: core-smbus: prevent stack corruption on read I2C_BLOCK_DATA (Jeremy Compostella)  [Orabug: 30210503]  {CVE-2017-18551} 
  - scsi: qla2xxx: Ability to process multiple SGEs in Command SGL for CT passthrough commands. (Giridhar Malavali)  [Orabug: 30256423]  
  - net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing)  [Orabug: 30350263]  {CVE-2019-15916} 
  - Drivers: hv: vmbus: add special crash handler (Vitaly Kuznetsov)  [Orabug: 30374399]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.5.el6uek]
changelog:
  - floppy: fix div-by-zero in setup_format_params (Denis Efremov)  [Orabug: 30447843]  {CVE-2019-14284} 
  - x86/cpufeatures: Make CPU bugs sticky (Thomas Gleixner)  [Orabug: 30473385]  
  - x86/cpu: Factor out application of forced CPU caps (Andy Lutomirski)  [Orabug: 30473385]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.4.el6uek]
changelog:
  - usb: misc: legousbtower: Fix NULL pointer deference (Greg Kroah-Hartman)  [Orabug: 27124665]  {CVE-2017-15102} 
  - userfaultfd: hugetlbfs: prevent UFFDIO_COPY to fill beyond the end of i_size (Andrea Arcangeli)  [Orabug: 27422557]  {CVE-2017-15128} 
  - tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur)  [Orabug: 30317608]  {CVE-2019-11478} 
  - tcp: be more careful in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478} {CVE-2019-11478} 
  - tcp: refine memory limit test in tcp_fragment() (Eric Dumazet)  [Orabug: 30317608]  {CVE-2019-11478}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.32.3.el6uek]
changelog:
  - scsi: sg: fixup infoleak when using SG_GET_REQUEST_TABLE (Hannes Reinecke)  [Orabug: 26941755]  {CVE-2017-14991} 
  - failover: allow name change on IFF_UP slave interfaces (Si-Wei Liu)  [Orabug: 29707258]  
  - Revert "net_failover: delay taking over primary device to accommodate udevd renaming" (Si-Wei Liu)  [Orabug: 29707258]  
  - build: Revert "repairing out-of-tree build functionality" (Todd Vierling)  [Orabug: 30257829]  
  - rds: add ibmr to busy_list in flush code path (Manjunath Patil)   
  - rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil)


author: Michal Ruprich - 14:4.0.0-11.20090921gitdf3cb4.2
changelog:
  - Related: #1339662 - Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()
                      - Previous patch changed to upstream fix


author: Michal Ruprich - 14:4.0.0-10.20090921gitdf3cb4.2
changelog:
  - Resolves: #1339662 -  Race condition between SIGALARM handler function verbose_stats_dump() and main()->pcap_close()


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-5.20090921gitdf3cb4.2
changelog:
  - regenerate patch for pcap_setdirection support. Added detection of the needed
    libpcap functionality to configure script


author: Michal Sekletar <msekleta@redhat.com> - 14:4.0.0-4.20090921gitdf3cb4.2
changelog:
  - add support for pcap_setdirection, -P commandline flag (#1099701)
  - add support for nano second timestamps, -J flag and --timestamp-preciosion (#1045601)
  - fix cdp dissector, allow zero-length data frames (#1130111)
  - allow specifying NIC names which start with number (#972396)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:4.0.0-1.20090818git832d2c
changelog:
  - update to post 4.0.0 git snapshot 20090818git832d2c
  - print retrans and reachable times in ICMPv6 as milliseconds (#474264)


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.8-5
changelog:
  - update config.{guess,sub} when building tcpslice
  - remove -D_GNU_SOURCE from CFLAGS
  - disable libsmi check in configure


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.7-1
changelog:
  - update to 3.9.7
  - with -C option, drop root privileges before opening first savefile (#244860)
  - update tcpslice to 1.2a3
  - include time patch from Debian to fix tcpslice on 64-bit architectures


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.9.4-9
changelog:
  - fix processing of Prism and AVS headers (#206686)
  - fix arp2ethers script
  - update ethercodes.dat
  - move pcap man page to devel package


author: Martin Stransky <stransky@redhat.com> - 14:3.9.3-1
changelog:
  - New upstream version - 3.9.3
  - fix for #164227 (buffer overflow)
  - fix for #164230 (missing debug info)


author: Ivana Varekova <varekova@redhat.com> - 14:3.8.2-9
changelog:
  - added arpsnmp options to specify sender and recipient 
    and corrected arpwatch and arpsnmp man pages (#70386)


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 3.44.0-6.0.1
changelog:
  - Add fips140-2 DSA Known Answer Test fix [Orabug 26696773]
  - Add fips140-2 ECDSA/RSA/DSA Pairwise Consistency Test fix [Orabug 26617866],
    [Orabug 26617833], [Orabug 26617780]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#919172 - Rebase to nss-softokn 3.14.3 to fix the lucky-13 issue
  - Add export LD_LIBRARY_PATH=$RPM_BUILD_ROOT//usr/lib before the signing commands in __spec_install_post scriplet
    to ensure signing tool links with in-tree freebl so verification uses same algorithm as in signing
  - Add %check section to run the upstream crypto reqression test suite as per packaging guidelines
  - Don't install sechash.h or secmodt.h which as per 3.14 are provided by nss-devel
  - Update the licence to MPLv2.0


author: Brian Maly <brian.maly@oracle.com> [4.1.12-103.7.3.el6uek]
changelog:
  - brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Tim Tianyang Chen)  [Orabug: 26943541]  {CVE-2017-7541}


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-6
changelog:
  - Set "entry-text-column" property in constructor of GtkComboBoxText.
  - Fixes crash in evolution when creating new appointment.
  - Resolves: #1126916


author: Ray Strode <rstrode@redhat.com> - 2.24.23-5
changelog:
  - Don't crash if enumeration finishes just as it gets cancelled
    in file selector. Fixes crash in libreoffice when saving to
    SFTP mounts.
    Resolves: #1129605


author: Marek Kasik <mkasik@redhat.com> - 2.24.23-1
changelog:
  - Rebase to 2.24.23
  - Make immodule cache handling the same as in gtk3. The cache
    file is now in $libdir, no longer in /etc
  - Disable tracker explicitly
  - Initialize variable "key" in gtk_print_backend_cups_set_password()
  - Modify fresh-tooltips.patch so the "new-tooltip-style" property
    is still accepted
  - Revert deprecations added between 2.20 and 2.24 so that building
    of dependent packages don't fail
  - Update relevant patches so that they apply correctly
  - Resolves: #1100886


author: Milan Crha <mcrha@redhat.com> - 2.20.1-4
changelog:
  - Add patch for RH bug #979049 (GtkTreeView: make tree expanding/collapsing more robust)
  Resolves: #979049


author: Milan Crha <mcrha@redhat.com> - 2.20.1-3
changelog:
  - Add patch for RH bug #970594 (a11y combo names not shown without string column in model)
  Resolves: #970594


author: Matthew Barnes <mbarnes@redhat.com> - 2.20.1-2
changelog:
  - Rebase to 2.20.0 based on the Fedora 13 package.
  - Removed patches (merged into 2.20.0 tarball):
    0001-Avoid-spurious-notifications-from-GtkEntry.patch
    0001-Prevent-the-destruction-of-the-menu-label-on-page-re.patch
    0002-Yet-another-fix-for-shape-handling.patch
    allow-set-hint.patch
    filesystemref.patch
    gtk2-preview.patch
    gtk2-rotate-layout.patch
    o-minus.patch
    strftime-format.patch
  - Removed translation patches that no longer apply:
    gtk2-translations.patch
    gtk2-translations-gu.patch
  - Fixed conflicts in patches:
    gtk2-filechooser-empty-location.patch
    gtk2-filechooser-size-column-hiding-additional.patch
    gtk2-landscape-pdf-print.patch
    icon-padding.patch
    tooltip-positioning.patch
  Resolves: #883022


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-12
changelog:
  - Additional filechooser patch to make sure the size column is shown
    when switching from Recent Files to Search
  Resolves: #889172


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-10
changelog:
  - Backport a patch fixing GtkBuilder behavior with construct properties
    initialization.
  Resolves: #801620


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-8
changelog:
  - Apply the show-size-column setting when switching from search to 
    browse mode.
  Resolves: #697437


author: Cosimo Cecchi <cosimoc@redhat.com> - 2.18.9-7
changelog:
  - Set a wrap width on the type filter combobox to avoid overflowing
    the screen when a very long filter is set on the file chooser.
  Resolves: #689188


author: Matthias Clasen <mclasen@redhat.com> - 2.18.9-5
changelog:
  - Update Gujarati translation
  - Fix a problem with the location entry in file choosers
  Resolves: #636476, #625440. #647922, #647923


author: Matthias Clasen <mclasen@redhat.com> - 2.18.3-21
changelog:
  - Fix refcounting issues in the filechooser that lead
    to crashes with device hotplug (gnome #600992)


author: Matthias Clasen <mclasen@redhat.com> - 2.15.2-4
changelog:
  - Split of an immodules subpackage (#444814)
  - Disable ia64 hack thats not needed in Fedora
  - Remove some .la files that crept in


author: Marek Kasik <mkasik@redhat.com> - 2.15.2-3
changelog:
  - modify default_printer.patch to show a network default printer
    in the case of no local default printer
  - Resolves: #478400


author: Matthias Clasen <mclasen@redhat.com> - 2.15.1-4
changelog:
  - Draw radio action proxies as radio menuitems
  - Fix issues with toolitem action proxies and overflow


author: Matthias Clasen <mclasen@redhat.com> - 2.14.4-4
changelog:
  - Reduce rpmlint warnings produced by the ia64 multilib hack
  - Fight unnecessary library dependencies


author: Alexander Larsson <alexl@redhat.com> - 2.14.4-3
changelog:
  - Manually check for fallback file icon since we're not
    always returning that from gio anymore (from upstream)


author: - Marek Kasik <mkasik@redhat.com> - 2.13.2-2
changelog:
  - Reworked correction of hostname of printer which is the
  - print job sent to.
  - Resolves: #248245, #449379


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-4
changelog:
  - Make sure we use the right icon size for all icons in the
    file chooser (Fix by Tomas Bzatek)
  - Improve the handling of auth dialogs in the file chooser (Tomas Bzatek)


author: Matthias Clasen <mclasen@redhat.com> - 2.12.1-5
changelog:
  - Fix a bug that prevents GtkBuilder-using apps (like totem)
    to run in some locales (like Turkish) (#348631)


author: Ray Strode <rstrode@redhat.com> - 2.11.6-8
changelog:
  - install dummy binary in libdir/gtk-2.0/immodules directory to
    aid rpm when doing ia64 multilib (bug 253726)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.7-1
changelog:
  - Make gdk_pixbuf_loader_close() idempotent
  - Always emit the closed signal when the loader is closed


author: Matthias Clasen <mclasen@redhat.com> - 2.10.6-7
changelog:
  - Fix error handling in pixbuf loaders (#218755)
  - Fix clipping of mnemonic underlines (#218615)
  - Give accessible names to message dialogs (#215472)
  - Fix a crash in the handling of invalid icon themes (#218247)
  - Make the print dialog work when the 'BrowseShortNames Off' cups
    option is used (#217220)


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Drop upstreamed patches
  - Update the search patch
  - Require pkgconfig in the -devel package


author: Ray Strode <rstrode@redhat.com> - 2.10.1-2
changelog:
  - patch from Jonathan Matthew <jontahn@kaolin.wh9.net> to fix
    crash in GtkTreeModelFilter (upstream bug 346800)


author: Matthias Clasen <mclasen@redhat.com> - 2.9.0-4
changelog:
  - Bump required versions of GLib, Pango and cairo
  - Add conflicts to force updating theme engine packages


author: Christopher Aillon <caillon@redhat.com> 2.8.11-6
changelog:
  - Fix up jkeating's recent %changelog entry to match this spec's style
  - Make the devel package Require %{version}-%{release}


author: Matthias Clasen <mclasen@redhat.com> - 2.4.14-1
changelog:
  - Upgrade to 2.4.14
  - Remove the no longer needed pa.po patch
  - Adjust gtk+-2.4.7-update-counter.patch


author: Matthias Clasen <mclasen@redhat.com> - 2.4.13-5
changelog:
  - Include an upstream bugfix in the
    gtk+-2.4.9-treeview-activate.patch. This fixes
    a crasher bug (#137461)


author: Owen Taylor <otaylor@redhat.com> - 2.4.7-2.2
changelog:
  - Fix problem with infinite loop on bad BMP data (#130450,
    test BMP from Chris Evans, fix from Manish Singh)


author: Matthias Clasen <mclasen@redhat.com> - 2.4.1-3
changelog:
  - Don't install testgtk and testtext
  - Rename binaries to -32/-64 (#124478)
  - Move arch-dependent config files to /etc/gtk-2.0/$host (#124482)
  - Add wrappers for updating the arch-dependent config files


author: Mark McLoughlin <markmc@redhat.com> 2.3.4-1
changelog:
  - Update to 2.3.4
  - Remove the xft-prefs patch, its upstream now
  - Don't kill libtool's hardcode_libdir_flag_spec anymore


author: Owen Taylor <otaylor@redhat.com> 2.2.4-2.1
changelog:
  - Fix up tutorial in packaging (#90197), add FAQ
  - Back out change to make KP_Decimal interpretation dependent on locale
    (#101046)


author: Owen Taylor <otaylor@redhat.com> 2.2.2-2.1
changelog:
  - XFlush() rather than XSync() at the end of process_all_updates()
    (big remote X anaconda speedup)
  - Add patch to fix frequent Red Hat 9 crash
    http://bugzilla.gnome.org/show_bug.cgi?id=105745


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Fix postun to not try to run a script through ldconfig
  - Only remove the gtk.immodules and gdk-pixbuf.loaders files if uninstalling
    while not upgrading


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.1.3
  - remove TODO from doc, no longer exists
  - remove 64bit patch, now upstream
  - comment out scroll_to patch, jrb has to deal with this
  - remove keycode patch now upstream
  - remove usintl patch now upstream
  - remove imenvar patch, now upstream
  - remove xftprefs patch now upstream
  - remove xftdraw patch now upstream
  - remove installdir patch (no longer applies) and do "makeinstall RUN_QUERY_IMMODULES_TEST=false"
  - remove extranotify patch, now upstream
  - add gdk-pixbuf-query-loaders to file list
  - remove gdk-pixbuf.loaders and gtk.immodules in postun as they are
    not owned by the package (these should probably live in /var since they
    aren't config files and we overwrite them all the time)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix a memory leak in xftprefs.patch
  - Fix extra settings notifies on startup that were causing significant
    performance problems as fonts were reloaded.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fixes to GtkIMContextSimple compose table for us-intl keyboards
    (#70995, Alexandre Oliva)
  - Fix problem with keycodes passed to GtkIMContextXIM


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, no longer needed
  - Fix bug with GTK_IM_MODULE environment variable
  - Remove profile.d entries setting GDK_USE_XFT, since we now default to it on
  - Backport patch from CVS HEAD to get Xft to work on non-RENDER XServers
  - Version 2.0.6


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add reference docs to -devel package (#61184)
  - Use GTK2_RC_FILES, not GTK_RC_FILES, since KDE points GTK_RC_FILES
    to gtk-1.2 ~/.gtkrc


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 1.3.11
  - check atk/pango versions explicitly prior to build,
    so that --nodeps tricks don't result in bad binary RPMs


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - PreReq specific pango and atk versions (#49434)
  - Don't package gtk.immodules (#49584)
  - Added BuildPrereq for libtiff-devel, libjpeg-devel, libpng-devel (#49495)
  - Configure with --disable-gtk-doc (#48987)
  - Package libgdk_pixbuf_xlib (#47753)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Version 1.3.1
  - move back to /usr
  - Remove gtk-config.1 manpage from build since
    it conflicts with gtk+-devel. When we go to
    gtk+ gtk+1.2 setup, we should add it back


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Set the charset explicitely for the default font to avoid
    problems with XFree86-4.0 where the default charset is
    iso10646-1, not iso8859-1.
  - Fix problems with size requisitions for scrolled windows
    that was causing looping. (RH bug #7997)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Explicitely set the foreground of the tooltips to black
    to avoid bad interactions with themes that set a
    light foreground color.


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Upgrade to real 1.2.5pre2
  - Changed name so upgrade to 1.2.5 will work :-(
  - Add extra gtkrc files
  - Add examples and English language tutorial to -devel package


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Update for GTK+-1.2.3
  - Patches that will be in GTK+-1.2.4
  - Patch to keep GTK+ from coredumping on X IO errors
  - Patch to improve compatilibity with GTK-1.2.1 (allow
    event mask to be set on realized widgets)


author: Marc Ewing <marc@redhat.com>
changelog:
  - Added aclocal and bin stuff to file list.
  - Added -k to the SMP make line.
  - Added lib/glib to file list.


author: Marc Ewing <marc@redhat.com>
changelog:
  - Reworked to integrate into gtk+ source tree
  - Truncated ChangeLog.  Previous Authors:
    Trond Eivind Glomsrod <teg@pvv.ntnu.no>
    Michael K. Johnson <johnsonm@redhat.com>
    Otto Hammersmith <otto@redhat.com>


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.3
changelog:
  - fix CVE-2016-2177 - possible integer overflow
  - fix CVE-2016-2178 - non-constant time DSA operations
  - fix CVE-2016-2179 - further DoS issues in DTLS
  - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
  - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
  - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
  - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
  - fix CVE-2016-6304 - unbound memory growth with OCSP status request
  - fix CVE-2016-6306 - certificate message OOB reads
  - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
    112 bit effective strength
  - replace expired testing certificates


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.1
changelog:
  - fix CVE-2016-2105 - possible overflow in base64 encoding
  - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
  - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
  - fix CVE-2016-2108 - memory corruption in ASN.1 encoder
  - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
  - fix CVE-2016-0799 - memory issues in BIO_printf


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48
changelog:
  - fix CVE-2016-0702 - side channel attack on modular exponentiation
  - fix CVE-2016-0705 - double-free in DSA private key parsing
  - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-46
changelog:
  - fix 1-byte memory leak in pkcs12 parse (#1229871)
  - document some options of the speed command (#1197095)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-43
changelog:
  - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
  - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
  - fix CVE-2015-3196 - race condition when handling PSK identity hint


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-41
changelog:
  - improved fix for CVE-2015-1791
  - add missing parts of CVE-2015-0209 fix for corectness although unexploitable


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-40
changelog:
  - fix CVE-2014-8176 - invalid free in DTLS buffering code
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-1791 - race condition handling NewSessionTicket
  - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-39
changelog:
  - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on
    read in multithreaded applications


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-38
changelog:
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-37
changelog:
  - drop the AES-GCM restriction of 2^32 operations because the IV is
    always 96 bits (32 bit fixed field + 64 bit invocation field)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-35
changelog:
  - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey()
  - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-34
changelog:
  - copy digest algorithm when handling SNI context switch
  - improve documentation of ciphersuites - patch by Hubert Kario
  - add support for setting Kerberos service and keytab in
    s_server and s_client


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-33
changelog:
  - fix CVE-2014-3570 - incorrect computation in BN_sqr()
  - fix CVE-2014-3571 - possible crash in dtls1_get_record()
  - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state
  - fix CVE-2014-8275 - various certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate
  - fix CVE-2015-0206 - possible memory leak when buffering DTLS records


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-31
changelog:
  - fix CVE-2014-3567 - memory leak when handling session tickets
  - fix CVE-2014-3513 - memory leak in srtp support
  - add support for fallback SCSV to partially mitigate CVE-2014-3566
    (padding attack on SSL3)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-29
changelog:
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3507 - avoid memory leak in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3509 - fix race condition when parsing server hello
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS
  - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-26
changelog:
  - drop EXPORT, RC2, and DES from the default cipher list (#1057520)
  - print ephemeral key size negotiated in TLS handshake (#1057715)
  - do not include ECC ciphersuites in SSLv2 client hello (#1090952)
  - properly detect encryption failure in BIO (#1100819)
  - fail on hmac integrity check if the .hmac file is empty (#1105567)
  - FIPS mode: make the limitations on DSA, DH, and RSA keygen
    length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment
    variable is set


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-25
changelog:
  - fix CVE-2010-5298 - possible use of memory after free
  - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment
  - fix CVE-2014-0198 - possible NULL pointer dereference
  - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet
  - fix CVE-2014-0224 - SSL/TLS MITM vulnerability
  - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-21
changelog:
  - add DH_compute_key_padded needed for FIPS CAVS testing
  - make 3des strength to be 128 bits instead of 168 (#1056616)
  - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits
  - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys)
  - FIPS mode: add DH selftest
  - FIPS mode: reseed DRBG properly on RAND_add()
  - FIPS mode: add RSA encrypt/decrypt selftest
  - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key
  - use the key length from configuration file if req -newkey rsa is invoked


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-15
changelog:
  - make DTLS1 work in FIPS mode
  - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-28
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-27
changelog:
  - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645)
  - drop superfluous lib64 fixup in pkgconfig .pc files (#770872)
  - force BIO_accept_new(*:<port-number>) to listen on IPv4


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-26
changelog:
  - use PKCS#8 when writing private keys in FIPS mode as the old
    PEM encryption mode is not FIPS compatible (#812348)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-25
changelog:
  - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686)
  - properly initialize tkeylen in the CVE-2012-0884 fix


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-21
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-16
changelog:
  - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx
    engine to the internal implementations


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-15
changelog:
  - better documentation of the available digests in apps (#693858)
  - backported CHIL engine fixes (#693863)
  - allow testing build without downstream patches (#708511)
  - enable partial RELRO when linking (#723994)
  - add intelx engine with improved performance on new Intel CPUs
  - add OPENSSL_DISABLE_AES_NI environment variable which disables
    the AES-NI support (does not affect the intelx engine)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-8
changelog:
  - add -x931 parameter to openssl genrsa command to use the ANSI X9.31
    key generation method
  - use FIPS-186-3 method for DSA parameter generation
  - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable
    to allow using MD5 when the system is in the maintenance state
    even if the /proc fips flag is on
  - make openssl pkcs12 command work by default in the FIPS mode


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-7
changelog:
  - listen on ipv6 wildcard in s_server so we accept connections
    from both ipv4 and ipv6 (#601612)
  - fix openssl speed command so it can be used in the FIPS mode
    with FIPS allowed ciphers (#619762)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-3
changelog:
  - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738)
  - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-2
changelog:
  - make CA dir readable - the private keys are in private subdir (#584810)
  - a few fixes from upstream CVS
  - make X509_NAME_hash_old work in FIPS mode (#568395)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.21.beta5
changelog:
  - gracefully handle zero length in assembler implementations of
    OPENSSL_cleanse (#564029)
  - do not fail in s_server if client hostname not resolvable (#561260)


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.19.beta4
changelog:
  - fix CVE-2009-4355 - leak in applications incorrectly calling
    CRYPTO_free_all_ex_data() before application exit (#546707)
  - upstream fix for future TLS protocol version handling


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.17.beta4
changelog:
  - upstream fix compression handling on session resumption
  - various null checks and other small fixes from upstream
  - upstream changes for the renegotiation info according to the latest draft


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.13.beta4
changelog:
  - disable enforcement of the renegotiation extension on the client (#537962)
  - add fixes from the current upstream snapshot


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.12.beta4
changelog:
  - keep the beta status in version number at 3 so we do not have to rebuild
    openssh and possibly other dependencies with too strict version check


author: Tomas Mraz <tmraz@redhat.com> 1.0.0-0.11.beta4
changelog:
  - update to new upstream version, no soname bump needed
  - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used
    so the compatibility with unfixed clients is not broken. The
    protocol extension is also not final.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-6
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS
  - make CA dir absolute path (#445344)
  - change default length for RSA key generation to 2048 (#484101)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8k-1
changelog:
  - update to new upstream release (minor bug fixes, security
    fixes and machine code optimizations only)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-7
changelog:
  - must also verify checksum of libssl.so in the FIPS mode
  - obtain the seed for FIPS rng directly from the kernel device
  - drop the temporary symlinks


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-6
changelog:
  - drop the temporary triggerpostun and symlinking in post
  - fix the pkgconfig files and drop the unnecessary buildrequires
    on pkgconfig as it is a rpmbuild dependency (#481419)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8j-1
changelog:
  - new upstream version with necessary soname bump (#455753)
  - temporarily provide symlink to old soname to make it possible to rebuild
    the dependent packages in rawhide
  - add eap-fast support (#428181)
  - add possibility to disable zlib by setting
  - add fips mode support for testing purposes
  - do not null dereference on some invalid smime files
  - add buildrequires pkgconfig (#479493)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-9
changelog:
  - fix CVE-2008-0891 - server name extension crash (#448492)
  - fix CVE-2008-1672 - server key exchange message omit crash (#448495)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-3
changelog:
  - set default paths when no explicit paths are set (#418771)
  - do not add tls extensions to client hello for SSLv3 (#422081)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8g-2
changelog:
  - enable some new crypto algorithms and features
  - add some more important bug fixes from openssl CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-16
changelog:
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191)
  - add alpha sub-archs (#296031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-14
changelog:
  - use localhost in testsuite, hopefully fixes slow build in koji
  - CVE-2007-3108 - fix side channel attack on private keys (#250577)
  - make ssl session cache id matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-13
changelog:
  - allow building on ARM architectures (#245417)
  - use reference timestamps to prevent multilib conflicts (#218064)
  - -devel package must require pkgconfig (#241031)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-3
changelog:
  - Bump and rebuild for python 2.5 on devel.
  - Add BR: python-devel as it provides a header necessary for python modules
    on python 2.5.


author: Toshio Kuratomi <toshio@tiki-lounge.com> - 2.1-2
changelog:
  - Remove pyver define as it's not needed with the automatic python(abi).
  - Stop ghosting .pyos.
  - Let automatic python compilation take care of creating pyos.
  - Rebuild for FC6.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.99999b-2
changelog:
  - Add LICENSE File.
  - Make noarch.
  - Remove executable permissions from the modules copied to examples.


author: Toshio Kuratomi <toshio@tiki-lounge.com> 0.999-2
changelog:
  - Use python_sitelib macro to resolve build issues on x86_64.
  - %ghost *.pyo
  - Install ANSI.py, screen.py, and FSM.py into the examples.  These are intended
    to suplement pexpect eventually but they are currently much less robust and
    not installed to by default.  But they are needed by some examples.
  - Use __python macro in build/install for consistency.
  - Add --skip-build to the invocation of setup.py in install.


author: Panu Matilainen <pmatilai@welho.com> 0.999-0.fdr.1
changelog:
  - get rid of distrel munging, buildsys does that...
  - update to 0.999
  - update doc and example tarballs
  - fix build on python <> 2.2
  - use -O1 in install to generate .pyo files instead of manually creating the files
  - require python-abi = pyver to get dependencies right


author: EL Errata <el-errata_ww@oracle.com> - 004-409.0.1.2
changelog:
  - Wait for md dev to become active before mounting rootfs [orabug 21158188]
  - add nvme kernel module to list for initramfs. [orabug 19476860] (Dan Duval)
  - do not strip modules with signatures. [orabug 17458249] (Jerry Snitselaar)
  - scsi_wait module removed in 3.8. Mute errors. [orabug 16977193] (Maxim Uvarov)
  - find firmware in /lib/modules/firmware/`uname -r` first
    and /lib/modules/firmware second. [orabug 13351090] (Maxim Uvarov)
  - Fix btrfs discovery [orabug 13388545]


author: Harald Hoyer <harald@redhat.com> - 004-409
changelog:
  - don't handle "iscsistart -N" exit value
    start iscsistart -b more reliably in the background
  Resolves: rhbz#1324340


author: Harald Hoyer <harald@redhat.com> - 004-408
changelog:
  - add more kernel modules for crypt
  Resolves: rhbz#1322893
  - trigger acpi subsystem before running plymouth
  Resolves: rhbz#1218130


author: Harald Hoyer <harald@redhat.com> - 004-403
changelog:
  - network/ifup: use the correct interface name for the vlan parent
  - iscsiroot: for iscsi_firmware retry, if iscsistart -N fails
  Resolves: rhbz#1111358


author: Harald Hoyer <harald@redhat.com> 004-399
changelog:
  - add hyper kernel modules
  Resolves: rhbz#1298445 rhbz#1223315
  - fix ifcfg generation
  Resolves: rhbz#1261893
  - support multiple vlan definitions
  Resolves: rhbz#1111358
  - support setting of MTU via ip=..:ibft:<mtu>
  Resolves: rhbz#1076465
  - use cpio -R root:root rather than cpio -R 0:0
  Resolves: rhbz#1049763
  - fail hard if final image could not be written
  Resolves: rhbz#1252449
  - create correct bonding interface
  Resolves: rhbz#1263013


author: Harald Hoyer <harald@redhat.com> 004-380
changelog:
  - load iSCSI modules after udevd is started for firmware
    loading
  Resolves: rhbz#1213077
  - add the hyperv-keyboard kernel module for Hyper-V Gen2 VM
  Resolves: rhbz#1205095
  - starting iscsistart in parallel has problems, if on the same
    network interface
  Resolves: rhbz#1209406


author: Harald Hoyer <harald@redhat.com> 004-371
changelog:
  - start iscistart in the background
  Resolves: rhbz#1191721 rhbz#1176671
  - require nss-softokn-freebl >= 3.14.3-22.el6_6
    and remove libfreebl3* inclusion as nss-softokn-freebl
    has its own dracut module
  Resolves: rhbz#1184142
  - logrotate: remove yearly keyword
  Resolves: rhbz#1005886
  - let ip=ibft boot without ifname=...
  Resolves: rhbz#1069275
  - save vlan info in ifcfg files
  Resolves: rhbz#1111358
  - include /etc/lvm/lvm_hostname.conf if present
  Resolves: rhbz#1130565
  - handle /etc/crypttab without newline at the end of the last line
  Resolves: rhbz#1085562
  - copy over dhcp lease files of all interfaces and write
    correct ifcfg file
  Resolves: rhbz#1198117


author: Harald Hoyer <harald@redhat.com> 004-356
changelog:
  - fixed support for multiple fcoe devices
  Resolves: rhbz#1022766
  - fixed iscsiroot with iscsi_firmware boot
  Resolves: rhbz#1126346


author: Harald Hoyer <harald@redhat.com> 004-347
changelog:
  - backport of the rootfallback= kernel cmdline option
  Resolves: rhbz#737687
  - call iscsistart regardless of network failures
  Resolves: rhbz#1099603
  - set the firmware loading timeout to 600
  Related: rhbz#1077186
  - add install_items to dracut.conf man page
  Resolves: rhbz#1041484
  - pickup nvme driver
  Resolves: rhbz#1041484
  - create  /dev/btrfs-control
  Resolves: rhbz#1070676
  - create all hook directories
  Resolves: rhbz#1051448


author: Harald Hoyer <harald@redhat.com> 004-334
changelog:
  - fcoe: add --link-retry=100 to fipvlan call
  Resolves: rhbz#1012316
  - ldd: redirect error to /dev/null
  - do not turn off biosdevname, if not given on kernel cmdline
  Resolves: rhbz#1011508
  - network: fixed ibft parsing
  Resolves: rhbz#1011508


author: Harald Hoyer <harald@redhat.com> 004-327
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed booting with iSCSI and without network config
  Resolves: rhbz#910605


author: Harald Hoyer <harald@redhat.com> 004-322
changelog:
  - fixed crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - fixed FIPS module checking
  Resolves: rhbz#947729


author: Harald Hoyer <harald@redhat.com> 004-316
changelog:
  - create the initramfs non-world readable
  - unset LD_LIBRARY_PATH and GREP_OPTIONS
  Resolves: rhbz#912299
  - add mkinitrd man page
  Resolves: rhbz#610462
  - add bonding
  Resolves: rhbz#851666
  - lvm: add "--yes" to lvchange
  Resolves: rhbz#720684
  - crypt: add support for keyfiles in the initramfs
  Resolves: rhbz#886194
  - start iscsi regardless of network, if requested
  Resolves: rhbz#813687
  - install multipath module only, when root is multipath in generic mode
  Resolves: rhbz#916144
  - fips: handle checksum checks for RHEV kernels
  Resolves: rhbz#947729
  - add xhci-hcd driver
  Resolves: rhbz#960729


author: Harald Hoyer <harald@redhat.com> 004-302
changelog:
  - add vlan support
  Resolves: rhbz#858187
  - fixed "LiveCD boot from iscsi targets" patch (Regression bug 863964)
  Resolves: rhbz#794751


author: Harald Hoyer <harald@redhat.com> 004-298
changelog:
  - fixed fcoe-up script for new Brocade switch
  Resolves: rhbz#813057
  - document "rd_retry" option in dracut(8) man page
  Resolves: rhbz#823507
  - convert all MAC parameter to lowercase
  Resolves: rhbz#835646
  - add "no_eject" option for "live_ram"
  Resolves: rhbz#843105


author: Harald Hoyer <harald@redhat.com> 004-273
changelog:
  - fixed option --omit-drivers
  Resolves: rhbz#722879
  - increase wait time for network interfaces to get UP to 10s
  Resolves: rhbz#794863


author: Harald Hoyer <harald@redhat.com> 004-271
changelog:
  - no vconfig requirement anymore
  Resolves: rhbz#714039
  - new option --omit-drivers
  Resolves: rhbz#722879
  - suppress udevadm settle output
  Resolves: rhbz#747840
  - extend lsinitrd to cope with xz images
  Resolves: rhbz#752005
  - respect primary console setting
  Resolves: rhbz#752073


author: Harald Hoyer <harald@redhat.com> 004-268
changelog:
  - fixed dracut manpage
  Resolves: rhbz#703164
  - fixed assembling of mdraid degraded arrays
  Resolves: rhbz#761584
  - fixed ifup to set broadcast address
  Resolves: rhbz#752584
  - fixed iscsiroot for multiple iscsi disks
  Resolves: rhbz#752066


author: Harald Hoyer <harald@redhat.com> 004-256
changelog:
  - increase timeout to wait for dhcp connections
  Resolves: rhbz#742920
  - check /tmp/net.$netif.override before sourcing it
  Resolves: rhbz#696980


author: Harald Hoyer <harald@redhat.com> 004-254
changelog:
  - fixed killproc()
  Resolves: rhbz#701864
  - hardcode modprobe of various iscsi offload drivers
  Resolves: rhbz#737134


author: Harald Hoyer <harald@redhat.com> 004-248
changelog:
  - 95fcoe/fcoe-up: load 8021q module before fipvlan
  Resolves: rhbz#736094
  - modprobe iscsi_boot_sysfs
  Resolves: rhbz#737134


author: Harald Hoyer <harald@redhat.com> 004-247
changelog:
  - add "-F" to selinux restorecon 
  Resolves: rhbz#741430
  - kill iscsiuio before switching root
  Resolves: rhbz#701864


author: Harald Hoyer <harald@redhat.com> 004-244
changelog:
  - add dracut-fips-aesni subpackage
  Resolves: rhbz#740487 
  - add /var/log in initramfs
  Resolves: rhbz#701864


author: Harald Hoyer <harald@redhat.com> 004-239
changelog:
  - fixed raid assembly with encrypted members
  Resolves: rhbz#737593
  - support bnx2fc for FCoE
  Resolves: rhbz#736094
  - fixed iscsi module loading
  Resolves: rhbz#737479


author: Harald Hoyer <harald@redhat.com> 004-234
changelog:
  - add broadcom iscsi offload support
  Resolves: rhbz#701864
  - fixed dm dracut module, to no require dmraid
  Resolves: rhbz#732686
  - fixed md raid assembly
  Resolves: rhbz#732967


author: Harald Hoyer <harald@redhat.com> 004-231
changelog:
  - add more kernel modules for iSCSI
  Resolves: rhbz#696980
  - chown /var/lib/rpcbind to rpc user and make it 770
  Resolves: rhbz#698160
  - remove "--no-degraded" from mdadm arguments
  Resolves: rhbz#698165
  - remove script error in mdraid_start.sh
  Resolves: rhbz#698215
  - parse and mount fstab.sys
  Resolves: rhbz#701309
  - add "dm-mod" and "dm-crypt" to fips modules
  Resolves: rhbz#707609
  - set LANG=C for chrooted selinux operations
  Resolves: rhbz#712254
  - use "--partial" to assemble degraded lvm mirrors
  Resolves: rhbz#723548
  - spec file patch cleanup to resemble git repo at
  http://git.kernel.org/?p=boot/dracut/dracut.git;a=shortlog;h=refs/heads/RHEL-6


author: Harald Hoyer <harald@redhat.com> 004-52
changelog:
  - fips: support /boot on LVM Volume for non-encrypted root
  - preunlink binaries in fips mode
  Resolves: rhbz#696131
  - Fixed FCoE booting with EDD information


author: Harald Hoyer <harald@redhat.com> 004-48
changelog:
  - removed rd.fips.skipkernel and move fipscheck to a later
    point of time, where root is already mounted
  Resolves: rhbz#692843


author: Harald Hoyer <harald@redhat.com> 004-44
changelog:
  - fixed die() and emergency mode for fips
  Resolves: rhbz#670925
  - added dracut-caps with caps module
  Resolves: rhbz#677340


author: Harald Hoyer <harald@redhat.com> 004-43
changelog:
  - fixed "fips=0"
  - fixed .hmac file installation for hostonly mode
  - hardcode to include libssl.so* in fips
  Resolves: rhbz#670925


author: Harald Hoyer <harald@redhat.com> 004-42
changelog:
  - fixed instmods() for fips module
  - do not load tcrypt with "noexit" parameter
  Resolves: rhbz#670925


author: Harald Hoyer <harald@redhat.com> 004-37
changelog:
  - add aes-xts in FIPS module
  Resolves: rhbz#670925
  - start multipathd with the new -B option
  Resolves: rhbz#674238


author: Harald Hoyer <harald@redhat.com> 004-34
changelog:
  - fix md rule generation
  Resolves: rhbz#595096
  - add 96insmodpost dracut module
  Resolves: rhbz#645648
  - add "--force" to mkinitrd
  Resolves: rhbz#610466
  - fix dmraid without mdadm
  Resolves: rhbz#626389
  - install the complete /etc/multipath directory
  Resolves: rhbz#630911
  - install multipath by default, but run only if wwids are present
  Resolves: rhbz#636668 rhbz#642083
  - removed vconfig dependency
  Resolves: rhbz#645799
  - install all md/dm modules
  Resolves: rhbz#626389
  - add fcoe=edd parameter
  Resolves: rhbz#634013
  - add ip=ibft parameter
  Resolves: rhbz#640979


author: Harald Hoyer <harald@redhat.com> 004-26
changelog:
  - wait for LVM and crypt devices to appear
  Resolves: rhbz#607699
  - add sleeps to fcoe-up and move it out of udev
  Resolves: rhbz#611976
  - fixed selinux return code handling
  Resolves: rhbz#615950


author: Harald Hoyer <harald@redhat.com> 004-25
changelog:
  - mount live images to /dev/.initramfs/live and do not
    umount it, so that cdrom_id works in the real root
    and /dev/live is pointing to the correct device
  Resolves: rhbz#605356


author: Harald Hoyer <harald@redhat.com> 004-23
changelog:
  - add vconfig requirement to dracut-network
  Resolves: rhbz#608015
  - fixed dhcp6 option for ip argument
  Resolves: rhbz#605283


author: Harald Hoyer <harald@redhat.com> 004-21
changelog:
  - Remove requirements, which are not really needed
  Resolves: rhbz#598509
  - fixed copy of network config to /dev/.initramfs/ (patch 146)
  Resolves: rhbz#594649
  - more password beauty (patch 142)
  Resolves: rhbz#561092
  - support multiple iSCSI disks (patch 143)
  Resolves: rbhz#580190
  - fixed selinux=0 (patch 130)
  Resolves: rhbz#593080
  - add support for booting LVM snapshot root volume (patch 145)
  Resolves: rbhz#602723
  - remove hardware field from BOOTIF= (patch 148)
  Resolves: rhbz#599593
  - add aes kernel modules and fix crypt handling (patch 137, patch 140 and patch 147)
  Resolves: rhbz#600170


author: Harald Hoyer <harald@redhat.com> 004-18
changelog:
  - fixed dracut manpages 
  Resolves: rhbz#589109
  - use ccw-init and ccw rules from s390utils
  Resolves: rhbz#533494
  - fixed fcoe
  Resolves: rhbz#486244
  - various other bugfixes seen in Fedora


author: Harald Hoyer <harald@redhat.com> 004-16
changelog:
  - fixed rpmlint errors (rhbz#570547)
  - removed firmware package from dracut-kernel (rhbz#572634)
  - add dcb support to dracut's FCoE support (rhbz#563794)
  - force install some modules in hostonly mode (rhbz#573094)
  - various other bugfixes
  - Resolves: rhbz#570547, rhbz#572634, rhbz#563794, rhbz#573094


author: Harald Hoyer <harald@redhat.com> 004-13
changelog:
  - fixed multipath scanning
  - fixed NFS4 (rhbz#564293)
  - add /etc/dracut.conf.d config dir
  - fixed selinux disabled state
  - fixed s390 cio scripts
  - fixed lib64 check (rhbz#562113)
  - Resolves: rhbz#564293, rhbz#562113


author: Harald Hoyer <harald@redhat.com> 004-12
changelog:
  - add IPv6 support
  - fixed multipath check
  - fixed selinux autorelabel case
  - Resolves: rhbz#546615 rhbz#553195


author: Harald Hoyer <harald@redhat.com> 002-26
changelog:
  - add WITH_SWITCH_ROOT make flag
  - add fips requirement conditional
  - add more device mapper modules (bug #539656)


author: Harald Hoyer <harald@redhat.com> 002-22
changelog:
  - add module 90multipath
  - add module 01fips
  - renamed module 95ccw to 95znet (bug #533833)
  - crypt: ignore devices in /etc/crypttab (root is not in there)
  - dasd: only install /etc/dasd.conf in hostonly mode (bug #533833)
  - zfcp: only install /etc/zfcp.conf in hostonly mode (bug #533833)
  - kernel-modules: add scsi_dh scsi_dh_rdac scsi_dh_emc (bug #527750)
  - dasd: use dasdconf.sh from s390utils (bug #533833)


author: Harald Hoyer <harald@redhat.com> 002-18
changelog:
  - renamed lvm/device-mapper udev rules according to upstream changes
  - fixed dracut search path issue


author: Harald Hoyer <harald@redhat.com> 002-13
changelog:
  - fixed init=<command> handling
  - kill loginit if "rdinitdebug" specified
  - run dmsquash-live-root after udev has settled (bug #527514)


author: Harald Hoyer <harald@redhat.com> 002-10
changelog:
  - do not destroy assembled raid arrays if mdadm.conf present
  - mount /dev/shm 
  - let udevd not resolve group and user names
  - preserve timestamps of tools on initramfs generation
  - generate symlinks for binaries correctly
  - moved network from udev to initqueue
  - mount nfs3 with nfsvers=3 option and retry with nfsvers=2
  - fixed nbd initqueue-finished
  - improved debug output: specifying "rdinitdebug" now logs
    to dmesg, console and /init.log
  - stop udev before killing it
  - add ghost /var/log/dracut.log
  - dmsquash: use info() and die() rather than echo
  - strip kernel modules which have no x bit set
  - redirect stdin, stdout, stderr all RW to /dev/console
    so the user can use "less" to view /init.log and dmesg


author: Warren Togami <wtogami@redaht.com> 002-5
changelog:
  - Revert back to -3, Add umount back to initrd
    This makes no functional difference to LiveCD.  See Bug #525319


author: Harald Hoyer <harald@redhat.com> 002-3
changelog:
  - bail out if selinux policy could not be loaded and 
    selinux=0 not specified on kernel command line 
    (bug #524113)
  - set finished criteria for dmsquash live images


author: Harald Hoyer <harald@redhat.com> 001-10
changelog:
  - add ifname= argument for persistent netdev names
  - new /initqueue-finished to check if the main loop can be left
  - copy mdadm.conf if --mdadmconf set or mdadmconf in dracut.conf


author: Harald Hoyer <harald@redhat.com> 001-8
changelog:
  - plymouth: use plymouth-populate-initrd
  - add add_drivers for dracut and dracut.conf
  - do not mount /proc and /selinux manually in selinux-load-policy


author: Harald Hoyer <harald@redhat.com> 001-1
changelog:
  - version 001
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.8-1
changelog:
  - version 0.8 
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.7-1
changelog:
  - version 0.7
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.6-1
changelog:
  - version 0.6
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.5-1
changelog:
  - version 0.5
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.4-1
changelog:
  - version 0.4
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.3-1
changelog:
  - version 0.3
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Thomas Haller <thaller@redhat.com> - 3.2.21-6
changelog:
  - fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
  - fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
  - fix printing in nl_msec2str for whole seconds
  - don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
  - backport nl_has_capability function


author: Natalya Naumova <natalya.naumova@oracle.com> - 2.7.6-20.0.1
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-20.1
changelog:
  - Fix a series of CVEs (rhbz#1286495)
  - CVE-2015-7941 Cleanup conditional section error handling
  - CVE-2015-8317 Fail parsing early on if encoding conversion failed
  - CVE-2015-7942 Another variation of overflow in Conditional sections
  - CVE-2015-7942 Fix an error in previous Conditional section patch
  - Fix parsing short unclosed comment uninitialized access
  - CVE-2015-7498 Avoid processing entities after encoding conversion failures
  - CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
  - CVE-2015-5312 Another entity expansion issue
  - CVE-2015-7499 Add xmlHaltParser() to stop the parser
  - CVE-2015-7499 Detect incoherency on GROW
  - CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
  - CVE-2015-8242 Buffer overead with HTML parser in push mode
  - Libxml violates the zlib interface and crashes


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-19.el6
changelog:
  - Stop parsing on entities boundaries errors
  - Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)


author: Daniel Veillard <veillard@redhat.com> - libxml2-2.7.6-18.el6
changelog:
  - CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149086)
  - Fix html serialization error and htmlSetMetaEncoding (rhbz#1004513)


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-9.el6
changelog:
  - Fix a failure to report xmlreader parsing failures
  - Fix parser local buffers size problems (rhbz#843742)
  - Fix entities local buffers size problems (rhbz#843742)
  - Fix an error in previous commit (rhbz#843742)
  - Do not fetch external parsed entities
  - Impose a reasonable limit on attribute size (rhbz#843742)
  - Impose a reasonable limit on comment size (rhbz#843742)
  - Impose a reasonable limit on PI size (rhbz#843742)
  - Cleanups and new limit APIs for dictionaries (rhbz#843742)
  - Introduce some default parser limits (rhbz#843742)
  - Implement some default limits in the XPath module
  - Fixup limits parser (rhbz#843742)
  - Enforce XML_PARSER_EOF state handling through the parser
  - Avoid quadratic behaviour in some push parsing cases (rhbz#843742)
  - More avoid quadratic behaviour (rhbz#843742)
  - Strengthen behaviour of the push parser in problematic situations (rhbz#843742)
  - More fixups on the push parser behaviour (rhbz#843742)
  - Fix a segfault on XSD validation on pattern error
  - Fix an unimplemented part in RNG value validation


author: Daniel Veillard <veillard@redhat.com> - 2.7.6-5.el6
changelog:
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919
  - Resolves: rhbz#771910


author: Daniel Veillard <veillard@redhat.com> - 2.7.4-1
changelog:
  - upstream release 2.7.4
  - symbol versioning of libxml2 shared libs
  - very large number of bug fixes


author: Daniel Veillard <veillard@redhat.com> - 2.7.3-1
changelog:
  - new release 2.7.3
  - limit default max size of text nodes
  - special parser mode for PHP
  - bug fixes and more compiler checks


author: Daniel Veillard <veillard@redhat.com> 2.7.2-1.fc10
changelog:
  - new release 2.7.2
  - Fixes the known problems in 2.7.1
  - increase the set of options when saving documents


author: Daniel Veillard <veillard@redhat.com> 2.7.0-1.fc10
changelog:
  - upstream release of 2.7.0
  - switch to XML 1.0 5th edition
  - switch to RFC 3986 for URI parsing
  - better entity handling
  - option to remove hardcoded limitations in the parser
  - more testing
  - a new API to allocate entity nodes
  - and lot of fixes and clanups


author: Daniel Veillard <veillard@redhat.com> 2.6.27-1
changelog:
  - upstream release 2.6.27 see http://xmlsoft.org/news.html
  - very large amount of bug fixes reported upstream


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Joe Orton <jorton@redhat.com> 1.95.8-10
changelog:
  - remove trailing dot in Summary (#225742)
  - use preferred BuildRoot per packaging guidelines (#225742)


author: Joe Orton <jorton@redhat.com> 1.95.8-9
changelog:
  - regenerate configure/libtool correctly (#199361)
  - strip DSP files from examples (#186889)
  - fix expat.h compilation with g++ -pedantic (#190244)


author: Petr Lautrbach <plautrba@redhat.com> 2.0.43-5.1
changelog:
  - Detect already enabled/disabled modules in semanage_direct_{enable,disable} functions
  Resolves: rhbz#872700
  - Fix sources to pass all tests
  Rsolves: rhbz#591451


author: Dan Walsh <dwalsh@redhat.com> - 2.0.43-1
changelog:
  - Update to upstream
    * Move libsemanage.so to /usr/lib
    * Add NAME lines to man pages from Manoj Srivastava<srivasta@debian.org>


author: Dan Walsh <dwalsh@redhat.com> - 2.0.41-1
changelog:
  - Update to upstream
    * Add pkgconfig file from Eamon Walsh.
    * Add semanage_set_check_contexts() function to disable calling
    setfiles


author: Dan Walsh <dwalsh@redhat.com> - 2.0.38-1
changelog:
  - Update to upstream
    * Change semodule upgrade behavior to install even if the module
      is not present from Dan Walsh.
    * Make genhomedircon trim excess '/' from homedirs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.37-1
changelog:
  - Update to upstream
    * Fix persistent dontaudit support to rebuild policy if the 
          dontaudit state is changed from Chad Sellers.
  - Move load_policy to /sbin


author: Dan Walsh <dwalsh@redhat.com> - 2.0.36-1
changelog:
  - Update to upstream
    * Changed bzip-blocksize=0 handling to support existing compressed
    modules in the store.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.35-1
changelog:
  * Revert hard linking of files between tmp/active/previous.
    * Enable configuration of bzip behavior from Stephen Smalley.
      bzip-blocksize=0 to disable compression and decompression support.
      bzip-blocksize=1..9 to set the blocksize for compression.
      bzip-small=true to reduce memory usage for decompression.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.31-1
changelog:
  - Update to upstream
    * Policy module compression (bzip) support from Dan Walsh.
    * Hard link files between tmp/active/previous from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.28-1
changelog:
  - Update to upstream
    * allow fcontext and seuser changes without rebuilding the policy from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.27-1
changelog:
  - Update to upstream
    * Modify genhomedircon to skip groupname entries.
    Ultimately we need to expand them to the list of users to support per-role homedir labeling when using the groupname syntax.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.26-1
changelog:
  - Update to upstream
    * Fix bug in genhomedircon fcontext matches logic from Dan Walsh.
    Strip any trailing slash before appending /*$.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.25-1
changelog:
  - Update to upstream
    * Do not call genhomedircon if the policy was not rebuilt from Stephen Smalley.
      Fixes semanage boolean -D seg fault (bug 441379).


author: Dan Walsh <dwalsh@redhat.com> - 2.0.23-1
changelog:
  - Update to upstream
    * Use vfork rather than fork for libsemanage helpers to reduce memory overhead as suggested by Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.22-1
changelog:
  - Update to upstream
    * Free policydb before fork from Joshua Brindle.
    * Drop the base module immediately after expanding to permit memory re-use from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.20-1
changelog:
  - Update to upstream
    * Use sepol_set_expand_consume_base to reduce peak memory usage when
    using semodule


author: Dan Walsh <dwalsh@redhat.com> - 2.0.19-1
changelog:
  - Update to upstream
    * Fix genhomedircon to not override a file context with a homedir context from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.18-1
changelog:
  - Update to upstream
    * Fix spurious out of memory error reports.
    * Merged second version of fix for genhomedircon handling from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.16-1
changelog:
  - Update to upstream
    * Merged fix for genhomedircon handling of missing HOME_DIR or HOME_ROOT templates from Caleb Case.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.15-1
changelog:
  - Update to upstream
    * Fix genhomedircon handling of shells and missing user context template from Dan Walsh.
    * Copy the store path in semanage_select_store from Dan Walsh.
  - Add expand-check=0 to semanage.conf


author: Dan Walsh <dwalsh@redhat.com> - 2.0.14-1
changelog:
  - Upgrade to latest from NSA
    * Call rmdir() rather than remove() on directory removal so that errno isn't polluted from Stephen Smalley.
    * Allow handle_unknown in base to be overridden by semanage.conf from Stephen Smalley.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.12-1
changelog:
  - Upgrade to latest from NSA
    * ustr cleanups from James Antill.
    * Ensure that /root gets labeled even if using the default context from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.11-1
changelog:
  - Upgrade to latest from NSA
    * Fix ordering of file_contexts.homedirs from Todd Miller and Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.10-1
changelog:
  - Upgrade to latest from NSA
    * Fix error checking on getpw*_r functions from Todd Miller.
    * Make genhomedircon skip invalid homedir contexts from Todd Miller.
    * Set default user and prefix from seusers from Dan Walsh.
    * Add swigify Makefile target from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.9-1
changelog:
  - Upgrade to latest from NSA
    * Pass CFLAGS to CC even on link command, per Dennis Gilmore.
    * Clear errno on non-fatal errors to avoid reporting them upon a
      later error that does not set errno.
    * Improve reporting of system errors, e.g. full filesystem or read-only filesystem from Stephen Smalley.

  - Fix segfault in genhomedircon when using bad user names


author: Dan Walsh <dwalsh@redhat.com> - 2.0.6-1
changelog:
  - Upgrade to latest from NSA
    * Change to use getpw* function calls to the _r versions from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.4-1
changelog:
  - Upgrade to latest from NSA
    * Allow dontaudits to be turned off via semanage interface when
      updating policy


author: Dan Walsh <dwalsh@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to latest from NSA
    * Fix to libsemanage man patches so whatis will work better from Dan Walsh


author: Dan Walsh <dwalsh@redhat.com> - 2.0.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged optimizations from Stephen Smalley.
      - do not set all booleans upon commit, only those whose values have changed
      - only install the sandbox upon commit if something was rebuilt


author: Dan Walsh <dwalsh@redhat.com> - 2.0.1-1
changelog:
  * Merged dbase_file_flush patch from Dan Walsh.
      This removes any mention of specific tools (e.g. semanage)
      from the comment header of the auto-generated files,
      since there are multiple front-end tools.


author: Dan Walsh <dwalsh@redhat.com> - 2.0.0-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile test target patch from Caleb Case.
    * Merged get_commit_number function rename patch from Caleb Case.
    * Merged strnlen -> strlen patch from Todd Miller.


author: Dan Walsh <dwalsh@redhat.com> - 1.10.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged python binding fix from Dan Walsh.
    * Updated version for stable branch.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to optionally reduce disk usage by removing 
      the backup module store and linked policy from Karl MacMillan
    * Merged patch to correctly propagate return values in libsemanage


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to compile wit -fPIC instead of -fpic from
      Manoj Srivastava to prevent hitting the global offest table
      limit. Patch changed to include libselinux and libsemanage in
      addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch to skip reload if no active store exists and
      the store path doesn't match the active store path from Dan Walsh.
    * Merged patch to not destroy sepol handle on error path of
      connect from James Athey.
    * Merged patch to add genhomedircon path to semanage.conf from
      James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
    * Make most copy errors fatal, but allow exceptions for
      file_contexts.local, seusers, and netfilter_contexts if
      the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged separate local file contexts patch from Chris PeBenito.
    * Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.12-1
changelog:
  - Upgrade to latest from NSA
    * Merged support for read operations on read-only fs from 
      Caleb Case (Tresys Technology).


author: Dan Walsh <dwalsh@redhat.com> - 1.6.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged several fixes from Serge Hallyn:
         dbase_file_cache:  deref of uninit data on error path.
         dbase_policydb_cache:  clear fp to avoid double fclose
         semanage_fc_sort:  destroy temp on error paths


author: Dan Walsh <dwalsh@redhat.com> - 1.6.8-1
changelog:
  - Upgrade to latest from NSA
    * Updated default location for setfiles to /sbin to
      match policycoreutils.  This can also be adjusted via 
      semanage.conf using the syntax:
      [setfiles]
      path = /path/to/setfiles
      args = -q -c $@ $<
      [end]


author: Dan Walsh <dwalsh@redhat.com> - 1.6.6-1
changelog:
  - Upgrade to latest from NSA
    * Merged updated file context sorting patch from Christopher
      Ashworth, with bug fix for escaped character flag.
    * Merged file context sorting code from Christopher Ashworth 
      (Tresys Technology), based on fc_sort.c code in refpolicy.
    * Merged python binding t_output_helper removal patch from Dan Walsh.
    * Regenerated swig files.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.3-1
changelog:
  - Fix to work with new version of swig
  - Upgrade to latest from NSA
    * Merged corrected fix for descriptor leak from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.2-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile PYLIBVER definition patch from Dan Walsh.
    * Merged man page reorganization from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.6-1
changelog:
  - Make work on RHEL4
  - Upgrade to latest from NSA
    * Merged abort early on merge errors patch from Ivan Gyurdiev.
    * Cleaned up error handling in semanage_split_fc based on a patch
      by Serge Hallyn (IBM) and suggestions by Ivan Gyurdiev.
    * Merged MLS handling fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.28-1
changelog:
  - Upgrade to latest from NSA
    * Merged bug fix for fcontext validate handler from Ivan Gyurdiev.
    * Merged base_merge_components changes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.26-1
changelog:
  - Upgrade to latest from NSA
    * Merged paths array patch from Ivan Gyurdiev.
    * Merged bug fix patch from Ivan Gyurdiev.
    * Merged improve bindings patch from Ivan Gyurdiev.
    * Merged use PyList patch from Ivan Gyurdiev.  
    * Merged memory leak fix patch from Ivan Gyurdiev.
    * Merged nodecon support patch from Ivan Gyurdiev.
    * Merged cleanups patch from Ivan Gyurdiev.
    * Merged split swig patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.23-1
changelog:
  - Upgrade to latest from NSA
    * Merged optionals in base patch from Joshua Brindle.
    * Merged treat seusers/users_extra as optional sections patch from
      Ivan Gyurdiev.
    * Merged parse_optional fixes from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> - 1.5.21-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser/user_extra support patch from Joshua Brindle.
    * Merged remote system dbase patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.19-1
changelog:
  - Upgrade to latest from NSA
    * Merged fname parameter patch from Ivan Gyurdiev.
    * Merged more size_t -> unsigned int fixes from Ivan Gyurdiev.
    * Merged seusers.system patch from Ivan Gyurdiev.
    * Merged improve port/fcontext API patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.18-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser -> seuser_local rename patch from Ivan Gyurdiev.
    * Merged set_create_store, access_check, and is_connected interfaces
      from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.5.15-1
changelog:
  - Upgrade to latest from NSA
    * Merged pywrap Makefile diff from Dan Walsh.
    * Merged cache management patch from Ivan Gyurdiev.
    * Merged bugfix for dbase_llist_clear from Ivan Gyurdiev.
    * Merged remove apply_local function patch from Ivan Gyurdiev.
    * Merged only do read locking in direct case patch from Ivan Gyurdiev.
    * Merged cache error path memory leak fix from Ivan Gyurdiev.
    * Merged auto-generated file header patch from Ivan Gyurdiev.
    * Merged pywrap test update from Ivan Gyurdiev.
    * Merged hidden defs update from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.14-1
changelog:
  - Upgrade to latest from NSA
    * Merged disallow port overlap patch from Ivan Gyurdiev.
    * Merged join prereq and implementation patches from Ivan Gyurdiev.
    * Merged join user extra data part 2 patch from Ivan Gyurdiev.
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged remove add_local/set_local patch from Ivan Gyurdiev.
    * Merged user extra data part 1 patch from Ivan Gyurdiev.
    * Merged size_t -> unsigned int patch from Ivan Gyurdiev.
    * Merged calloc check in semanage_store patch from Ivan Gyurdiev,
      bug noticed by Steve Grubb.
    * Merged cleanups after add/set removal patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.9-1
changelog:
  - Upgrade to latest from NSA
    * Merged const in APIs patch from Ivan Gyurdiev.
    * Merged validation of local file contexts patch from Ivan Gyurdiev.
    * Merged compare2 function patch from Ivan Gyurdiev.
    * Merged hidden def/proto update patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.8-1
changelog:
  - Upgrade to latest from NSA
    * Re-applied string and file optimization patch from Russell Coker,
      with bug fix.
    * Reverted string and file optimization patch from Russell Coker.
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.


author: Dan Walsh <dwalsh@redhat.com> 1.5.6-1
changelog:
  - Upgrade to latest from NSA
    * Clarified error messages from parse_module_headers and 
      parse_base_headers for base/module mismatches.
    * Merged string and file optimization patch from Russell Coker.
    * Merged swig header reordering patch from Ivan Gyurdiev.
    * Merged toggle modify on add patch from Ivan Gyurdiev.
    * Merged ports parser bugfix patch from Ivan Gyurdiev.
    * Merged fcontext swig patch from Ivan Gyurdiev.
    * Merged remove add/modify/delete for active booleans patch from Ivan Gyurdiev.
    * Merged man pages for dbase functions patch from Ivan Gyurdiev.
    * Merged pywrap tests patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.4-1
changelog:
  - Upgrade to latest from NSA
    * Merged patch series from Ivan Gyurdiev.
      This includes patches to:
      - separate file rw code from linked list
      - annotate objects
      - fold together internal headers
      - support ordering of records in compare function
      - add active dbase backend, active booleans
      - return commit numbers for ro database calls
      - use modified flags to skip rebuild whenever possible
      - enable port interfaces
      - update swig interfaces and typemaps
      - add an API for file_contexts.local and file_contexts
      - flip the traversal order in iterate/list
      - reorganize sandbox_expand
      - add seusers MLS validation
      - improve dbase spec/documentation
      - clone record on set/add/modify


author: Dan Walsh <dwalsh@redhat.com> 1.5.3-1
changelog:
  - Upgrade to latest from NSA
    * Merged further header cleanups from Ivan Gyurdiev.
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-2
changelog:
  - Upgrade to latest from NSA
    * Merged toggle modified flag in policydb_modify, fix memory leak
      in clear_obsolete, polymorphism vs headers fix, and include guards
      for internal headers patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.5.1-1
changelog:
  - Upgrade to latest from NSA
    * Added file-mode= setting to semanage.conf, default to 0644.
      Changed semanage_copy_file and callers to use this mode when
      installing policy files to runtime locations.


author: Dan Walsh <dwalsh@redhat.com> 1.3.64-1
changelog:
  - Upgrade to latest from NSA
    * Changed semanage_handle_create() to set do_reload based on
      is_selinux_enabled().  This prevents improper attempts to
      load policy on a non-SELinux system.


author: Dan Walsh <dwalsh@redhat.com> 1.3.63-1
changelog:
  - Upgrade to latest from NSA
    * Dropped handle from user_del_role interface.
    * Removed defrole interfaces.


author: Dan Walsh <dwalsh@redhat.com> 1.3.61-1
changelog:
  - Upgrade to latest from NSA
    * Merged Makefile python definitions patch from Dan Walsh.
    * Removed is_selinux_mls_enabled() conditionals in seusers and users
      file parsers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.59-1
changelog:
  - Add additional swig objects
    * Merged wrap char*** for user_get_roles patch from Joshua Brindle.
    * Merged remove defrole from sepol patch from Ivan Gyurdiev.
    * Merged swig wrappers for modifying users and seusers from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.56-1
changelog:
  - Upgrade to latest from NSA
    * Fixed free->key_free bug.
    * Merged clear obsolete patch from Ivan Gyurdiev.
    * Merged modified swigify patch from Dan Walsh 
      (original patch from Joshua Brindle).
    * Merged move genhomedircon call patch from Chad Sellers.


author: Dan Walsh <dwalsh@redhat.com> 1.3.53-1
changelog:
  - Upgrade to latest from NSA
    * Merged move seuser validation patch from Ivan Gyurdiev.
    * Merged hidden declaration fixes from Ivan Gyurdiev,
      with minor corrections.


author: Dan Walsh <dwalsh@redhat.com> 1.3.52-1
changelog:
  - Upgrade to latest from NSA
    * Merged cleanup patch from Ivan Gyurdiev.
      This renames semanage_module_conn to semanage_direct_handle,
      and moves sepol handle create/destroy into semanage handle
      create/destroy to allow use even when disconnected (for the
      record interfaces).


author: Dan Walsh <dwalsh@redhat.com> 1.3.51-1
changelog:
  - Upgrade to latest from NSA
    * Clear modules modified flag upon disconnect and commit.
          * Added tracking of module modifications and use it to
      determine whether expand-time checks should be applied
      on commit.
    * Reverted semanage_set_reload_bools() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.3.48-1
changelog:
  - Upgrade to latest from NSA
    * Disabled calls to port dbase for merge and commit and stubbed
      out calls to sepol_port interfaces since they are not exported.
    * Merged rename instead of copy patch from Joshua Brindle (Tresys).
    * Added hidden_def/hidden_proto for exported symbols used within 
      libsemanage to eliminate relocations.  Wrapped type definitions
      in exported headers as needed to avoid conflicts.  Added
      src/context_internal.h and src/iface_internal.h.
    * Added semanage_is_managed() interface to allow detection of whether
      the policy is managed via libsemanage.  This enables proper handling
      in setsebool for non-managed systems.
    * Merged semanage_set_reload_bools() interface from Ivan Gyurdiev,
      to enable runtime control over preserving active boolean values
      versus reloading their saved settings upon commit.


author: Dan Walsh <dwalsh@redhat.com> 1.3.43-1
changelog:
  - Upgrade to latest from NSA
    * Merged seuser parser resync, dbase tracking and cleanup, strtol
      bug, copyright, and assert space patches from Ivan Gyurdiev.
    * Added src/*_internal.h in preparation for other changes.
     * Added hidden/hidden_proto/hidden_def to src/debug.[hc] and
            src/seusers.[hc].


author: Dan Walsh <dwalsh@redhat.com> 1.3.41-1
changelog:
  - Upgrade to latest from NSA
    * Merged interface parse/print, context_to_string interface change,
      move assert_noeof, and order preserving patches from Ivan Gyurdiev.
          * Added src/dso.h in preparation for other changes.
    * Merged install seusers, handle/error messages, MLS parsing,
      and seusers validation patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.39-1
changelog:
  - Upgrade to latest from NSA
    * Merged record interface, dbase flush, common database code,
      and record bugfix patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.38-1
changelog:
  - Upgrade to latest from NSA
    * Merged dbase policydb list and count change from Ivan Gyurdiev.
    * Merged enable dbase and set relay patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.35-1
changelog:
  - Update from NSA
    * Merged sepol handle passing, seusers support, and policydb cache
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.34-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and booleans fixes/improvements 
      patches from Ivan Gyurdiev.
    * Merged support for genhomedircon/homedir template, store selection,
      explicit policy reload, and semanage.conf relocation from Joshua
      Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.32-1
changelog:
  - Update from NSA
    * Merged resync to sepol changes and transaction fix patches from
      Ivan Gyurdiev.
    * Merged reorganize users patch from Ivan Gyurdiev.
    * Merged remove unused relay functions patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.30-1
changelog:
  - Update from NSA
    * Fixed policy file leaks in semanage_load_module and
      semanage_write_module.
    * Merged further database work from Ivan Gyurdiev.
    * Fixed bug in semanage_direct_disconnect.


author: Dan Walsh <dwalsh@redhat.com> 1.3.28-1
changelog:
  - Update from NSA
    * Merged interface renaming patch from Ivan Gyurdiev.
    * Merged policy component patch from Ivan Gyurdiev.
    * Renamed 'check=' configuration value to 'expand-check=' for 
      clarity.
    * Changed semanage_commit_sandbox to check for and report errors 
      on rename(2) calls performed during rollback.
    * Added optional check= configuration value to semanage.conf 
      and updated call to sepol_expand_module to pass its value
      to control assertion and hierarchy checking on module expansion.
    * Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.24-1
changelog:
  - Update from NSA
    * Merged default database from Ivan Gyurdiev.
    * Merged removal of connect requirement in policydb backend from
      Ivan Gyurdiev.
    * Merged commit locking fix and lock rename from Joshua Brindle.
    * Merged transaction rollback in lock patch from Joshua Brindle.
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Changed default args for load_policy to be null, as it no longer
      takes a pathname argument and we want to preserve booleans.
    * Merged move local dbase initialization patch from Ivan Gyurdiev.
    * Merged acquire/release read lock in databases patch from Ivan Gyurdiev.
    * Merged rename direct -> policydb as appropriate patch from Ivan Gyurdiev.
    * Added calls to sepol_policy_file_set_handle interface prior
      to invoking sepol operations on policy files.
    * Updated call to sepol_policydb_from_image to pass the handle.


author: Dan Walsh <dwalsh@redhat.com> 1.3.20-1
changelog:
  - Update from NSA
    * Merged user and port APIs - policy database patch from Ivan
    Gyurdiev.
    * Converted calls to sepol link_packages and expand_module interfaces
    from using buffers to using sepol handles for error reporting, and 
    changed direct_connect/disconnect to create/destroy sepol handles.


author: Dan Walsh <dwalsh@redhat.com> 1.3.18-1
changelog:
  - Update from NSA
    * Merged bugfix patch from Ivan Gyurdiev.
    * Merged seuser database patch from Ivan Gyurdiev.
    Merged direct user/port databases to the handle from Ivan Gyurdiev.
    * Removed obsolete include/semanage/commit_api.h (leftover).
    Merged seuser record patch from Ivan Gyurdiev.
    * Merged boolean and interface databases from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.14-1
changelog:
  - Update from NSA
    * Updated to use get interfaces for hidden sepol_module_package type.
    * Changed semanage_expand_sandbox and semanage_install_active
    to generate/install the latest policy version supported  by libsepol
    by default (unless overridden by semanage.conf), since libselinux
    will now downgrade automatically for load_policy.
    * Merged new callback-based error reporting system and ongoing
    database work from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.11-1
changelog:
  - Update from NSA
    * Fixed semanage_install_active() to use the same logic for
    selecting a policy version as semanage_expand_sandbox().  Dropped
    dead code from semanage_install_sandbox().


author: Dan Walsh <dwalsh@redhat.com> 1.3.10-1
changelog:
  - Update from NSA
    * Updated for changes to libsepol, and to only use types and interfaces
    provided by the shared libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.3.7-1
changelog:
  - Update from NSA
    * Merged patch series from Ivan Gyurdiev.
      (pointer typedef elimination, file renames, dbase work, backend
       separation)
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.5-1
changelog:
  - Update from NSA
    * Split interfaces from semanage.[hc] into handle.[hc], modules.[hc].
    * Separated handle create from connect interface.
    * Added a constructor for initialization.
    * Moved up src/include/*.h to src.
    * Created a symbol map file; dropped dso.h and hidden markings.


author: Dan Walsh <dwalsh@redhat.com> 1.3.3-1
changelog:
  - Update from NSA
    * Merged boolean record, stub record handler, and status codes 
      patches from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.2-1
changelog:
  - Update from NSA
    * Merged stub iterator functionality from Ivan Gyurdiev.
    * Merged interface record patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.3.1-1
changelog:
  - Update from NSA
    * Merged stub functionality for managing user and port records,
    and record table code from Ivan Gyurdiev.
    * Updated version for release.


author: Dan Walsh <dwalsh@redhat.com> 1.1.6-1
changelog:
  - Update from NSA
    * Merged semod.conf template patch from Dan Walsh (Red Hat),
    but restored location to /usr/share/semod/semod.conf.
    * Fixed several bugs found by valgrind.
    * Fixed bug in prior patch for the semod_build_module_list leak.
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.1.3-1
changelog:
  - Update from NSA
    * Merged errno fix from Joshua Brindle (Tresys).
    * Merged fix for semod_build_modules_list leak on error path
      from Serge Hallyn (IBM).  Bug found by Coverity.
    * Merged several fixes from Serge Hallyn (IBM).  Bugs found by
      Coverity.
    * Fixed several other bugs and warnings.
    * Merged patch to move module read/write code from libsemanage
      to libsepol from Jason Tang (Tresys).  
    * Merged relay records patch from Ivan Gyurdiev.
    * Merged key extract patch from Ivan Gyurdiev.

  - Initial version
  - Created by Stephen Smalley <sds@epoch.ncsc.mil>


author: Ales Ledvinka <aledvink@redhat.com> - 1.8.11-23
changelog:
  - (#1194420) Fix DDR4 SDR crash.
  - (#1170266) Wrong version reported.
  - (#1162175) Extra dependency.
  - (#1126333) Very slow response from SDR owner type SW ID
  - (#903019)  SDR lists x4600m2 fan units as unspecified


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-13
changelog:
  - added new options to configure retransmissions on lan/lanplus interfaces
    (#748073)
  - updated dellem command (#739358)
  - fixed exit code of ipmitool -o list (#715615)
  - improved checking of command line arguments (#725993)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-11
changelog:
  - fixed delloem powermonitor on bigendian systems (#731718)
  - fixed memory leak in Serial-over-Lan module (#731977)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - added -Y option for ipmitool to hide Kg key from cmdline (#698647)
  - added 'channel setkg' command to set Kg encryption key on remote machine
    (#726390)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.11-10
changelog:
  - updated 'delloem setled' command to indicate SES status and drive
    activities for a PCI-e SSD (#727314)


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Bruce Hill <bruce.hill@oracle.com> - 0.4.9-100.0.1.el6_9.1
changelog:
  - Process the change uevent in multipath only for a multipath device (Ritika Srivastava).
  - Revert: 0253-RHBZ-1305589-check-multipathd.patch - warn if multipath devices 
    exist and mutipathd is not running [orabug 25945982] (John Sobecki)
  - Fix libmpathpersist file descriptor leak [orabug 25742949] (Ritika Srivastava)
  - Fix typo in readsector0.c that causes multipath hang [orabug 20561622] (John Sobecki)
  - Add ora_bug17287949-return-path_down-for-quiesced-paths.patch [orabug 17287949] (Guangyu Sun)
  - Add ora_bug17220746-cleanup-dev_loss_tmo-issues [orabug 17220746] (Guangyu Sun)
  - Add ora_bug16739691-update-dev_loss_tmo.patch [orabug 16739691]
  - Add ora_bug16739691-reload-map.patch [orabug 16739691]
  - Add ora_bug16739691-no-reload-prio.patch [orabug 16739691]
  - Add ora_bug16739691-set-def-fast_io_fail.patch [orabug 16739691]
  - fix flush_on_last_del config handlers [orabug 16389355]


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100.1
changelog:
  - Add 0268-RHBZ-1497059-fix-reserve.patch
    * stop waiting for threads that weren't successfully created
  - Resolves: bz #1497059


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.100
changelog:
  - Modify 0261-RHBZ-1377532-disable-changed-paths.patch
    * add man page information
  - Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
  - Related: #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.98
changelog:
  - Add 0266-RHBZ-1401391-fix-prio-put.patch
    * don't try to drop a nonexistant prio handler
  - Add 0267-RHBZ-1401769-orphan-status.patch
    * don't print out checker and device status for orphan paths
  - Resolves: bz #1401391, #1401769


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.97
changelog:
  - Add 0265-RHBZ-1355669-max-sectors-kb.patch
    * add "max_sectors_kb" config option to set this value on all paths
  - Change devicemapper Requires to >= 1.02.117-9.el6 (bz #1344381)
    * forces multipath to use latest version of blk-availability
  - Resolves: bz #1344381, #1355669


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.96
changelog:
  - Add 0258-UPBZ-1300414-PURE_config.patch
  - Add 0264-RHBZ-1365710-no-use-after-free.patch
    * Fix two segfaults, and NULL out some structures after free
  - Add 0265-RHBZ-1390472-dont-exit.patch
    * don't exit if multipath hits recoverable errors during startup
  - Resolves: bz #1300414, #1365710, #1390472


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.95
changelog:
  - Modify 0254-RHBZ-1310320-no-kpartx.patch
    * fix small bug with unitialized data
  - Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
  - Add 0262-RH-free-vector.patch
    * Fix coverity discovered bug in error path
  - Resolves: bz #1310320


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.94
changelog:
  - Add 0251-RHBZ-1349376-fix-makefile.patch
    * make multipath use correct version of libdevmapper
  - Add 0252-RHBZ-1333334-huawei-config.patch
  - Add 0253-RHBZ-1305589-check-multipathd.patch
    * warn if multipath devices exist and mutipathd is not running
  - Add 0254-RHBZ-1310320-no-kpartx.patch
    * add skip_kpartx option to skip kpartx device creation
  - Add 0255-UPBZ-1322532-disable-reinstate.patch
    * do not reinstate unusable Implicit ALUA ghost paths
  - Add 0256-RHBZ-1324764-man-page-typo.patch
  - Add 0257-UPBZ-1328077-resize-map.patch
    * reset size if resizer operation fails
  - Add 0259-UPBZ-1343747-dont-fail-discovery.patch
    * keep multipath from failing if it fails to get information on any device
  - Add 0260-RHBZ-1364879-check-mpath-prefix.patch
    * ignore all devices that don't have a uuid starting with "mpath-"
  - Add 0261-RHBZ-1377532-disable-changed-paths.patch
    * do not use path devices that change their wwid
  - Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
  - Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.93
changelog:
  - Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
    * make multipathd use uint64_t for tracking the interactive command
      fingerprint.
  - Resolves: bz #1316165


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.92
changelog:
  - Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * fix PAD and PRINT macros
  - Resolves: bz #1145442


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.90
changelog:
  - Add 0248-RHBZ-1289353-alua-pref-arg.patch
    * add exclusive_pref_bit argument to the alua prioritizer
  - Resolves: bz #1289353


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.89
changelog:
  - Add 0247-RHBZ-1283181-fix-remove-crash.patch
    * Check is sysdev is NULL before dereferencing
  - Resolves: bz #1283181


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.88
changelog:
  - Add 0233-RHBZ-1215903-remove-pg-timeout.patch
  - Add 0234-RHBZ-818404-update-doc.patch
  - Add 0235-RHBZ-1033789-rdac-update.patch
    * Don't use trasntioning controllers
  - Add 0236-RH-per-path-prio.patch
    * Paths now store their own prio structure, instead of pointing
      to a global one
  - Add 0237-RHBZ-1081395-save-alua-info.patch
    * Save alua information in prioritizer to speed access
  - Add 0238-RHBZ-1153704-async-timeout.patch
    * Make directio use the checker_timeout in async mode
  - Add 0239-RHBZ-1201444-update-eternus-config.patch
  - Add 0241-RHBZ-1214127-fix-help.patch
  - Add 0242-RHBZ-1238507-kpartx-fix.patch
    * Don't overwrite already in use partitions
  - Add 0243-RHBZ-1248177-reset-alias.patch
    * Use existing alias on failed rename
  - Add 0244-RHBZ-1254692-kpartx-sync.patch
    * kpartx runs in sync mode by default
  - Add 0245-RHBZ-1273829-autodetect-readonly-devs.patch
    * auto-reload devices as RO when a path turns RO
  - Add 0246-RHBZ-1145442-raw-output-and-wildcards.patch
    * and raw output and more wildcards
  - Modify device-mapper Requires
    * Require version with deferred remove support
  - Resolves: bz #818404, #1033789, #1081395, #1145442, #1153704, #1187278
  - Resolves: bz #1201444, #1208521, #1214127, #1215903, #1238507, #1248177
  - Resolves: bz #1254692, #1273829


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9.75
changelog:
  - Add 0196-RHBZ-1012672-fix-sysdev.patch
    * rewrite multipath sysfs device handling to fix various issues from
      bzs #1012672, #1064636, and #1049637
  - Add 0197-RHBZ-1049315-netapp-rw-change.patch
    * allow reload_readwrite to be set by device, and set it by default for
      netapp devices.
  - Add 0198-RHBZ-1080052-orphan-paths-on-reload.patch
    * make multipath orphan paths that are no longer included in the device
      when the table is reread.
  - Add 0199-RHBZ-1007719-multipath-man.patch
    * documentation update
  - Add 0200-RHBZ-1009061-allow_devt.patch
    * allow specifying paths to multipath by major:minor, instead of devname
  - Add 0201-RHBZ-1018697-cli-use-basename.patch
    * make multipathd interactive commands accept device names that start with
      /dev/
  - Add 0202-RHBZ-1024604-weighted-prio-man.patch
    * documentation update
  - Add 0203-RHBZ-1054046-mpathconf-typo.patch
    * fix command output typo
  - Add 0204-RHBZ-1067102-doc-add-selectors.patch
    * documentation update
  - Add 0205-RHBZ-1072974-alua-typo.patch
    * fix priritizer output typo
  - Add 0206-UPBZ-1020556-e-series-config.patch
    * udpate E-Series config to autodetect prio and hardware handler.
  - Resolves: bz #1049637, #1064636, #1049315, #1080052, #1007719, #1009061
  - Resolves: bz #1018697, #1024604, #1054046, #1067102, #1072974, #1020556


author: Jingdong Lu <jingdong.lu@oracle.com> - 1.0-7
changelog:
  - Bug 21562863 - Update vbox-img
    improve error message when converting raw image which is not sector aligned in size (zhigang.x.wang@oracle.com)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.19.el6uek]
changelog:
  - acpi: Disable ACPI table override if securelevel is set (Linn Crosetto)  [Orabug: 25058966]  {CVE-2016-3699} 
  - aacraid: Check size values after double-fetch from user (Dave Carroll)  [Orabug: 25060060]  {CVE-2016-6480} {CVE-2016-6480} 
  - audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore)  [Orabug: 25059969]  {CVE-2016-6136} 
  - ecryptfs: don't allow mmap when the lower fs doesn't support it (Jeff Mahoney)  [Orabug: 25023269]  {CVE-2016-1583} {CVE-2016-1583} 
  - Revert "ecryptfs: forbid opening files without mmap handler" (Chuck Anderson)  [Orabug: 24971921]  {CVE-2016-1583} 
  - percpu: fix synchronization between synchronous map extension and chunk destruction (Tejun Heo)  [Orabug: 25060084]  {CVE-2016-4794} 
  - percpu: fix synchronization between chunk->map_extend_work and chunk destruction (Tejun Heo)  [Orabug: 25060084]  {CVE-2016-4794} 
  - ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt (Kangjie Lu)  [Orabug: 25059898]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in events via snd_timer_user_ccallback (Kangjie Lu)  [Orabug: 25059898]  {CVE-2016-4578} 
  - ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS (Kangjie Lu)  [Orabug: 25059752]  {CVE-2016-4569} 
  - Bluetooth: Fix potential NULL dereference in RFCOMM bind callback (Jaganath Kanakkassery)  [Orabug: 25058894]  {CVE-2015-8956} 
  - ASN.1: Fix non-match detection failure on data overrun (David Howells)  [Orabug: 25059037]  {CVE-2016-2053} 
  - mm: migrate dirty page without clear_page_dirty_for_io etc (Hugh Dickins)  [Orabug: 25059188]  {CVE-2016-3070}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.18.el6uek]
changelog:
  - uek-rpm ol7: change uek-rpm/ol7/update-el release value from 7.1 to 7.3 (Chuck Anderson)  [Orabug: 25050614]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.17.el6uek]
changelog:
  - sched: panic on corrupted stack end (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583} 
  - ecryptfs: forbid opening files without mmap handler (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583} 
  - proc: prevent stacking filesystems on top (Jann Horn)  [Orabug: 24971921]  {CVE-2016-1583}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.3.7.el6uek]
changelog:
  - mm: fix new crash in unmapped_area_topdown() (Hugh Dickins)  [Orabug: 26326143]  {CVE-2017-1000364} 
  - mm: larger stack guard gap, between vmas (Hugh Dickins)  [Orabug: 26326143]  {CVE-2017-1000364}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.3.6.el6uek]
changelog:
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 26143545]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 26143545]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 26143545]  {CVE-2017-7308}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.3.4.el6uek]
changelog:
  - ipv6: catch a null skb before using it in a DTRACE (Shannon Nelson)  [Orabug: 26075879]  
  - sparc64: Do not retain old VM_SPARC_ADI flag when protection changes on page (Khalid Aziz)  [Orabug: 26038830]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.3.3.el6uek]
changelog:
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986971]  {CVE-2017-7895}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.3.2.el6uek]
changelog:
  - sparc64: Detect DAX ra+pgsz when hvapi minor doesn't indicate it (Rob Gardner)  [Orabug: 25997533]  
  - sparc64: DAX memory will use RA+PGSZ feature in HV (Rob Gardner)  [Orabug: 25997533] [Orabug: 25931417]  
  - sparc64: Disable DAX flow control (Rob Gardner)  [Orabug: 25997226]  
  - sparc64: DAX memory needs persistent mappings (Rob Gardner)  [Orabug: 25997137]  
  - sparc64: Fix incorrect error print in DAX driver when validating ccb (Sanath Kumar)  [Orabug: 25996975]  
  - sparc64: DAX request for non 4MB memory should return with unique errno (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: DAX request to mmap non 4MB memory should fail with a debug print (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: DAX request for non 4MB memory should return with unique errno (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: Incorrect print by DAX driver when old driver API is used (Sanath Kumar)  [Orabug: 25996790]  
  - sparc64: DAX request to dequeue half of a long CCB should not succeed (Sanath Kumar)  [Orabug: 25996747]  
  - sparc64: dax_overflow_check reports incorrect data (Sanath Kumar)  [Orabug: 25996655]  
  - sparc64: Ignored DAX ref count causes lockup (Rob Gardner)  [Orabug: 25996628]  
  - sparc64: disable dax page range checking on RA (Rob Gardner)  [Orabug: 25996546]  
  - sparc64: Oracle Data Analytics Accelerator (DAX) driver (Sanath Kumar)  [Orabug: 25996522]  
  - sparc64: Add DAX hypervisor services (Allen Pais)  [Orabug: 25996475]  
  - sparc64: create/destroy cpu sysfs dynamically (Atish Patra)  [Orabug: 21775890] [Orabug: 25216469]  
  - megaraid: Fix unaligned warning (Allen Pais)  [Orabug: 24817799]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.3.1.el6uek]
changelog:
  - Re-enable SDP for uek-nano kernel (Ashok Vairavan)  [Orabug: 25968572]  
  - xsigo: Compute node crash on FC failover (Pradeep Gopanapalli)  [Orabug: 25946533]  
  - NVMe: Set affinity after allocating request queues (Keith Busch)  [Orabug: 25945973]  
  - nvme: use an integer value to Linux errno values (Christoph Hellwig)  [Orabug: 25945973]  
  - blk-mq: fix racy updates of rq->errors (Christoph Hellwig)  [Orabug: 25945973]  
  - x86/apic: Handle zero vector gracefully in clear_vector_irq() (Keith Busch)  [Orabug: 24515998]  
  - PCI: Prevent VPD access for QLogic ISP2722 (Ethan Zhao)  [Orabug: 24819170]  
  - PCI: Prevent VPD access for buggy devices (Babu Moger)  [Orabug: 24819170]  
  - ipv6: Skip XFRM lookup if dst_entry in socket cache is valid (Jakub Sitnicki)  [Orabug: 25525433]  
  - Btrfs: don't BUG_ON() in btrfs_orphan_add (Josef Bacik)  [Orabug: 25534945]  
  - Btrfs: clarify do_chunk_alloc()'s return value (Liu Bo)  [Orabug: 25534945]  
  - btrfs: flush_space: treat return value of do_chunk_alloc properly (Alex Lyakas)  [Orabug: 25534945]  
  - Revert "[SCSI] libiscsi: Reduce locking contention in fast path" (Ashish Samant)  [Orabug: 25721518]  
  - qla2xxx: Allow vref count to timeout on vport delete. (Joe Carnuccio)  [Orabug: 25862953]  
  - Drivers: hv: kvp: fix IP Failover (Vitaly Kuznetsov)  [Orabug: 25866691]  
  - Drivers: hv: util: Pass the channel information during the init call (K. Y. Srinivasan)  [Orabug: 25866691]  
  - Drivers: hv: utils: run polling callback always in interrupt context (Olaf Hering)  [Orabug: 25866691]  
  - Drivers: hv: util: Increase the timeout for util services (K. Y. Srinivasan)  [Orabug: 25866691]  
  - Drivers: hv: kvp: check kzalloc return value (Vitaly Kuznetsov)  [Orabug: 25866691]  
  - Drivers: hv: fcopy: dynamically allocate smsg_out in fcopy_send_data() (Vitaly Kuznetsov)   
  - Drivers: hv: vss: full handshake support (Vitaly Kuznetsov)  [Orabug: 25866691]  
  - xen: Make VPMU init message look less scary (Juergen Gross)  [Orabug: 25873416]  
  - udp: properly support MSG_PEEK with truncated buffers (Eric Dumazet)  [Orabug: 25876652]  {CVE-2016-10229}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.2.1.el6uek]
changelog:
  - KVM: VMX: fix vmwrite to invalid VMCS (Radim Krčmář)   
  - Revert "i40e: enable VSI broadcast promiscuous mode instead of adding broadcast filter" (Brian Maly)  [Orabug: 25825419]  
  - qla2xxx: Fix NULL pointer deref in QLA interrupt (Bruno PrÃ©mont)  [Orabug: 25894919]  
  - sched/wait: Fix the signal handling fix (Peter Zijlstra)  [Orabug: 25896852]  
  - Change return value for notify_change() to EACCES (Dhaval Giani)  [Orabug: 25897119]  
  - block: fix use-after-free in seq file (Vegard Nossum)  [Orabug: 25877496]  {CVE-2016-7910} 
  - net/mlx4_core: panic the system on unrecoverable errors (Santosh Shilimkar)  [Orabug: 25225861]  
  - restore mutex_lock() call to blk_mq_freeze_queue_start() (Dan Duval)  [Orabug: 25638616]  
  - Revert "restrict /dev/mem to idle io memory ranges" (Chuck Anderson)  [Orabug: 25785410]  
  - Revert "be2net: fix MAC addr setting on privileged BE3 VFs" (Somasundaram Krishnasamy)  [Orabug: 25814899]  
  - xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder (Andy Whitcroft)  [Orabug: 25814632]  {CVE-2017-7184} 
  - xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window (Andy Whitcroft)  [Orabug: 25814632]  {CVE-2017-7184} 
  - ipc/shm: Fix shmat mmap nil-page protection (Davidlohr Bueso)  [Orabug: 25796993]  {CVE-2017-5669} 
  - vfs: move permission checking into notify_change() for utimes(NULL) (Miklos Szeredi)  [Orabug: 25684456]  
  - dtrace: fix handling of save_stack_trace sentinel (x86 only) (Kris Van Hees)  [Orabug: 25727046]  
  - xen-netfront: Rework the fix for Rx stall during OOM and network stress (Dongli Zhang)  [Orabug: 25803206]  
  - xen-netfront: Fix Rx stall during network stress and OOM (Dongli Zhang)  [Orabug: 25803206]  
  - lpfc cannot establish connection with targets that send PRLI under P2P mode (Joe Jin)  [Orabug: 25790926]  
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790386]  {CVE-2016-9644} 
  - Revert "ipv4: use skb coalescing in defragmentation" (Florian Westphal)  [Orabug: 25508841]  
  - Drivers: hv: vss: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 24745861]  
  - Drivers: hv: vss: switch to using the hvutil_device_state state machine (Vitaly Kuznetsov)  [Orabug: 24745861]  
  - Drivers: hv: vss: process deferred messages when we complete the transaction (Vitaly Kuznetsov)  [Orabug: 24745861]  
  - Drivers: hv: kvp: convert to hv_utils_transport (Vitaly Kuznetsov)  [Orabug: 24745861]  
  - dtrace: DTrace walltime lock-free implementation (Tomas Jedlicka)  [Orabug: 25715256]  
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766894]  {CVE-2016-8399} {CVE-2016-8399} 
  - Revert "be2net: fix initial MAC setting" (Somasundaram Krishnasamy)  [Orabug: 25766096]  
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765432]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25758993]  {CVE-2017-7187} 
  - xsigo: Fix spinlock release in case of error (Pradeep Gopanapalli)  [Orabug: 25714787]  
  - IB/CORE: sync the resouce access in fmr_pool (Wengang Wang)   
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696600]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696600]  {CVE-2017-2636} 
  - xsigo: Optimize xsvnic module parameters for UEK4 (Pradeep Gopanapalli)  [Orabug: 25675936]  
  - ovl: Do d_type check only if work dir creation was successful (Vivek Goyal)  [Orabug: 25656740]  
  - ovl: Ensure upper filesystem supports d_type (Vivek Goyal)  [Orabug: 25656740]  
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25644572]  {CVE-2017-6345} 
  - ip: fix IP_CHECKSUM handling (Paolo Abeni)  [Orabug: 25644367]  {CVE-2017-6347} 
  - udp: fix IP_CHECKSUM handling (Eric Dumazet)  [Orabug: 25644367]  {CVE-2017-6347} 
  - udp: do not expect udp headers in recv cmsg IP_CMSG_CHECKSUM (Willem de Bruijn)  [Orabug: 25644367]  {CVE-2017-6347} 
  - tcp: avoid infinite loop in tcp_splice_read() (Eric Dumazet)  [Orabug: 25615169]  {CVE-2017-6214} 
  - sctp: avoid BUG_ON on sctp_wait_for_sndbuf (Marcelo Ricardo Leitner)  [Orabug: 25557999]  {CVE-2017-5986} 
  - ext4: store checksum seed in superblock (Darrick J. Wong)  [Orabug: 25494931]  {CVE-2016-10208} 
  - ext4: reserve code points for the project quota feature (Theodore Ts'o)  [Orabug: 25494931]  {CVE-2016-10208} 
  - ext4: validate s_first_meta_bg at mount time (Eryu Guan)  [Orabug: 25494931]  {CVE-2016-10208} 
  - ext4: clean up feature test macros with predicate functions (Darrick J. Wong)  [Orabug: 25494931]  {CVE-2016-10208} 
  - KVM: x86: fix emulation of "MOV SS, null selector" (Paolo Bonzini)  [Orabug: 25437453]  {CVE-2017-2583} {CVE-2017-2583} 
  - gfs2: fix slab corruption during mounting and umounting gfs file system (Thomas Tai)   
  - gfs2: handle NULL rgd in set_rgrp_preferences (Abhi Das)   
  - sched/wait: Fix signal handling in bit wait helpers (Peter Zijlstra)  [Orabug: 25416990]  
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 25652330]


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-94.1.1.el6uek]
changelog:
  - Add the PCI Host driver into the UEK config files (Jack Vogel)  [Orabug: 25774693]  
  - PCI: hv: Microsoft changes in support of RHEL and UEK4 (Jake Oshins)  [Orabug: 25774693]


author: parag <paragn@fedoraproject.org> 1.2.2-2
changelog:
  - Merge-Review #226083
  - Removed BR:pkgconfig 
  - Removed XFree86-libs, xorg-x11-libs XFree86-devel, xorg-x11-devel as Obsoletes
  - Removed zero-length README file


author: Adam Jackson <ajax@redhat.com> 1.2.0-3
changelog:
  - BuildRequire on the randrproto virtual instead of a magic x-x-p-d version.
  - Fix -devel package to require sufficiently new randrproto.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193428)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0.1-1
changelog:
  - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXrandr to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXrandr to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-5
changelog:
  - Added support for environmental variable GREP_LEGACY_R to enhance
    backward compatibility of -r switch behavior
    Resolves: rhbz#1256756


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-2
changelog:
  - Fixed invalid UTF-8 byte sequence error in PCRE mode
    (by pcre-backported-fixes patch)
    Resolves: rhbz#1193030
  - Fixed buffer overrun for grep -F
    Resolves: CVE-2015-1345
  - Fixed bogus date in the changelog


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.20-1
changelog:
  - New version
    Resolves: rhbz#1064668
    Resolves: rhbz#982215
    Resolves: rhbz#1126757
    Resolves: rhbz#1167766
    Resolves: rhbz#1171806
  - Fixed \w and \W behaviour in multibyte locales
    Resolves: rhbz#799863
  - Documented --fixed-regexp option
    Resolves: rhbz#1103270


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-4
changelog:
  - Fixed crash on grep -Fif /dev/null (fif-null-fix patch)
    Resolves: rhbz#797934
  - Fixed heap overrun on specific REs (dfa-heap-overrun-fix patch)
    Resolves: rhbz#715295
  - Fixed -i (case insensitive matching)
    Resolves: rhbz#826997


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.3-2
changelog:
  - Added dfa-optimize-period patch (speedup for . patterns in UTF-8)
  - Added glibc-matcher-fallback patch (speedup for [a-z] patterns in UTF-8)
  - Added mmap-option-fix patch
  - Added dfa-convert-to-wide-char patch (speedup for -m and remove quadratic
    complexity when going to glibc)
  - Added dfa-speedup-digit-xdigit patch (speedup for [[:digit:]] [:xdigit:]])


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6-1
changelog:
  - New version: grep-2.6
  - Added sigsegv patch (after release patch from upstream)
  - Dropped obsoleted patches: fedora-tests, pcrewrap, case, egf-speedup,
    bz460641, utf8, dfa-optional, w


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.4-1
changelog:
  - New version: grep-2.5.4
  - Fixed typos in %description
  - Updated utf-8 patch
  - Added dfa-optional patch (#538423)


author: Lubomir Rintel <lkundrak@v3.sk> 2.5.3-1
changelog:
  - Update to latest upstream version
  - Drop upstreamed patches
  - Add a couple of regression tests
  - Temporarily disable tests
  - Minor cleanup


author: Lubomir Rintel <lkundrak@v3.sk> 2.5.1a-61
changelog:
  - Fix pcre-mode (-P) line wrapping (bug #324781)
  - Match the version with upstream
  - Recode AUTHORS to utf8


author: Stepan Kasal <skasal@redhat.com> - 2.5.1-58
changelog:
  - Adhere to packaging guidelines.
  - Resolves: #225857
  - Use CPPFLAGS= argument to configure to add an -I option.
  - Do not set LDFLAGS=-s for "make install".


author: Tim Waugh <twaugh@redhat.com> 2.5.1-47
changelog:
  - Run 'make check'.
  - Fixed -w handling for EGexecute.  Now 'make check' passes.
  - Cache MB_CUR_MAX value in egf-speedup patch.
  - Fixed variable shadowing in egf-speedup patch.
  - Removed redundant (and incorrect) code in prline.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-45
changelog:
  - More tests (Jakub Jelinek).
  - Jakub Jelinek's much improved -Fi algorithm.
  - Removed bogus part of grep-2.5.1-fgrep patch.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-42
changelog:
  - Further UTF-8 processing avoided since a '\n' byte is always an
    end-of-line character in that encoding.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-38
changelog:
  - Applied patch from Karsten Hopp to fix background colour problems with
    --color output (bug #138913).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-36
changelog:
  - Automatically disable DFA when processing multibyte input.  GREP_USE_DFA
    environment variable overrides.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-35
changelog:
  - Fixes to egf-speedup patch: now it does not change any functionality,
    as intended.
  - GREP_NO_DFA now turns off the DFA engine, for performance testing.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-32
changelog:
  - Remove mb-caching hack.
  - Better multibyte handling in EGexecute() and Fexecute().
  - Don't need regex.c changes in grep-2.5-i18n.patch.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-31
changelog:
  - Make 'grep -F' avoid UTF-8 processing if the pattern contains no
    multibyte characters (bug #133932).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-27
changelog:
  - Fix dfa multibyte character class matching when -i is used (bug #123363).
  - Use bracket patch before i18n patch to make it clear that the bug exists
    upstream.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-24
changelog:
  - Work around glibc bug #112869 (segfault in re_compile_pattern).
  - Avoid patching Makefile.am, to avoid automake/autoconf weirdness.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.4.2-7
changelog:
  - Fix up the i18n patch - it used to break "grep '[]a]'" (#49003)
  - revert to 2.4.2 (latest official release) for now


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.5e-2
changelog:
  - Fix up the --color option to behave like the one from ls (--color=auto)
    Sooner or later, some people will alias grep="grep --color" and wonder why
    their scripts break.
  - Update docs accordingly
  - Get rid of the annoying blinking in grep --color


author: Miloslav Trmač <mitr@redhat.com> - 1.102-2
changelog:
  - Use %{?_smp_mflags}
  - Use the four-parameter version of %defattr
  - Be more paranoid about dropping privileges
  - Set PAM_TTY


author: Miloslav Trmač <mitr@redhat.com> - 1.99-2
changelog:
  - Fix problems pointed out in merge review:
    - Drop Conflicts: SysVinit < very-old
    - Remove very old version requirements from Requires and BuildRequires
    - Make /etc/security/console.apps/* %config(noreplace)
    - Update BuildRoot


author: Miloslav Trmač <mitr@redhat.com> - 1.98.1-2
changelog:
  - Hide usermount from GNOME and KDE menus
    Resolves: #440029
  - Only hide userinfo and userpasswd in GNOME and KDE


author: Miloslav Trmač <mitr@redhat.com> - 1.98-1
changelog:
  - Support dialogs with no text entries
  - Preserve timestamps of some installed files
    Resolves: #456749
  - Remove /usr/X11R6/bin from the default path.
    Resolves: #446849
  - Left-justify messages
  - Preserve file timestamps where possible.


author: Miloslav Trmač <mitr@redhat.com> - 1.96-1
changelog:
  - Remove code that overrides SELinux contexts of processes started by
    userhelper.
    Related: #247967
  - Delete the WITH_SELINUX variable.


author: Miloslav Trmač <mitr@redhat.com> - 1.95-1
changelog:
  - New home page at https://fedorahosted.org/usermode/
  - Correctly preserve exit code when SESSION=yes
  - Fix minor errors in the .desktop files
  - Ship documentation


author: Miloslav Trmač <mitr@redhat.com> - 1.94-1
changelog:
  - Add support for including files from wrapper configuration files.  Original
    patch by Carlo de Wolf.
    Resolves: #426095
  - Add /etc/security/console.apps/config-util for use by system-config-*
  - Rename sr@Latn.po to sr@latin.po
    Resolves: #425842


author: Miloslav Trmač <mitr@redhat.com> - 1.93.1-1
changelog:
  - New release with updated translations
    Resolves: #332441
  - Build with startup notification
    Resolves: #294591


author: Miloslav Trmač <mitr@redhat.com> - 1.92-1
changelog:
  - Fix userhelper hangs in non-UTF8 locales
    Resolves: #242420
  - Clean up menu categories in desktop files


author: Miloslav Trmač <mitr@redhat.com> - 1.91.2-1
changelog:
  - Show the user we're authenticating as in an i18n-safe way.
    Resolves: #233210
  - Remove BuildRequires: libattr-devel


author: Miloslav Trmac <mitr@redhat.com> - 1.91-1
changelog:
  - Preserve environment variables in consolehelper if specified in the service
    config file
    Related: #213402


author: Miloslav Trmac <mitr@redhat.com> - 1.90-1
changelog:
  - Fix GUI=no handling
    Resolves: #110701
  - Add a dialog caption when changing user password
    Resolves: #154861
  - Fix an use of PAM data after free
    Resolves: #176992
  - Support "user", "users", LABEL= and UUID= in usermount and userformat
    Resolves: #189907
  - Use less memory in pam-panel-icon until the icon is actually displayed
  - Don't use deprecated GTK+ widgets


author: Miloslav Trmac <mitr@redhat.com> - 1.89-1
changelog:
  - Preserve application exit code in consolehelper
    Resolves: #178991, #210893
  - Drop the historical build6x spec file variable
  - Fix some rpmlint warnings


author: Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
changelog:
  - fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
  - Serbian latin script translation added (#203003)


author: Jindrich Novy <jnovy@redhat.com> 1.85-1
changelog:
  - fix userpasswd - don't crash if pam produces multi-line output (#175735)
    Thanks to toddp@bestweb.net
  - added Serbian translation (#176152)


author: Jindrich Novy <jnovy@redhat.com> 1.83-1
changelog:
  - accept gecos information on commandline for userinfo,
    patch by mclasen@redhat.com (#173232)
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.82-1
changelog:
  - don't use pam_stack.so
  - introduce userformat to better handle device formatting
    and removing usermount from menus (#132559)


author: Jindrich Novy <jnovy@redhat.com> 1.80-1
changelog:
  - fix "Unknown error" when password is mistyped in userpasswd (#135500)
  - add icons to windows for usermode-gtk applications (#155867)
  - add missing checks for some PAM error codes
  - fix ungettextized error message
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.78-1
changelog:
  - pam-panel-icon has popup menu to choose to forget/keep
    authentization by right clicking as usual for other panel applets (#75845)
  - fix race condition (#142254)


author: Jindrich Novy <jnovy@redhat.com> 1.77-1
changelog:
  - preserve LANGUAGE environment variable in userhelper (#82300)
  - use badge instead of keyring icon for pam-panel-icon (#122487)
  - icon is not showed in the panel when logged as root (#75234)
  - use new environment variable USERHELPER_UID to identify
    an user who executed an application via userhelper  (#116186)


author: Jindrich Novy <jnovy@redhat.com> 1.76-1
changelog:
  - fix dependencies to Perl-XML-Parser #124170
  - use pamconsole instead of user in /etc/fstab to let
    usermount work with hal #139820


author: Jindrich Novy <jnovy@redhat.com> 1.75-1
changelog:
  - make pam-panel-icon using localized strings (#138609)
  - update translations
  - fix usermount to use "-I" option only for vfat and msdos fs
  - fix Makefile.am to not to use "Release" from spec to name dist tarballs


author: Jindrich Novy <jnovy@redhat.com> 1.74-1
changelog:
  - add patch from Mathew Miller (mattdm@mattdm.org) to use
    own user's password instead of root's in authentization
    (the user must be a member of specific group to enable it)


author: Jindrich Novy <jnovy@redhat.com> 1.73-1
changelog:
  - add support to configure.in for more languages
  - update translations from upstream
  - generate build scripts by autogen.sh


author: Rik van Riel <riel@redhat.com> 1.72-2
changelog:
  - add dependency on passwd (bz #125010)
  - make sure the Release: isn't part of the path name and tarball name


author: Ray Strode <rstrode@redhat.com> 1.72-1
changelog:
  - remove X-Red-Hat-Base category from userinfo.desktop
  - fix `make distcheck'
  - use proper value types for Terminal keys in desktop entries
  - remove upstreamed mkfs patch


author: Jindrich Novy <jnovy@redhat.com> 1.71-3
changelog:
  - installation to Preferences/More Preferences as a request
    of Ray Strode (rstrode@redhat.com) and #131605


author: Dan Walsh <dwalsh@redhat.com> 1.70-7
changelog:
  - More fixes for SELinux.  roll back to only use root for auth.
  - Add getenforce checks
  - Add root_passwd check


author: Nalin Dahyabhai <nalin@redhat.com> 1.70-1
changelog:
  - fix accidental mixup of role and type setting up new selinux context
  - log the new selinux context if we're running an app in a new selinux context


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't disable use of deprecated GLib and GTK+ APIs, reported by the
    mysterious Pierre-with-no-last-name


author: Nalin Dahyabhai <nalin@redhat.com> 1.69-1
changelog:
  - all around: cleanups
  - consolehelper: coalesce multiple messages from PAM again
  - usermount: handle user-not-allowed-to-control-mounts error correctly (#100457)
  - userhelper: trim off terminating commas when changing chfn info


author: Nalin Dahyabhai <nalin@redhat.com> 1.67-1
changelog:
  - work around GTK+ clearing DESKTOP_STARTUP_ID at gtk_init() time, so that
    startup notification actually works (#84684)


author: Nalin Dahyabhai <nalin@redhat.com> 1.66-1
changelog:
  - consolehelper-gtk: complete startup notification at startup
  - userhelper: pass startup notification data to consolehelper-gtk
  - consolehelper-gtk: setup startup notification for children if userhelper
    requests it


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-2
changelog:
  - remove directory names from PAM config files, allowing the same config
    files to work for both arches on multilib boxes
  - translation updates


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-1
changelog:
  - userhelper: swallow the exec'd program's exit status, which would be
    misinterpreted by consolehelper anyway


author: Nalin Dahyabhai <nalin@redhat.com> 1.62-1
changelog:
  - consolehelper: suppress dialog on successful execution
  - userhelper: return 0 on success, not 1 (what was I *thinking*?)


author: Nalin Dahyabhai <nalin@redhat.com> 1.61-1
changelog:
  - userinfo: exit properly on escape. handle site_info field properly. go
    insensitive while running child process.
  - userpasswd: exit properly on cancel.
  - all of the above: reap the child instead of checking for pipe close -- this
    way is more robust (#68578,72684).
  - usermount: run mount/umount synchronously. capture stderr and display in a
    dialog. desensitize action buttons when no filesystems are selected.
  - consolehelper: display errors if we're attempting to run bogus programs
    (#72127)
  - translation updates (#70278)


author: Nalin Dahyabhai <nalin@redhat.com> 1.60-1
changelog:
  - reconnect the "cancel" and "ok" buttons in userinfo
  - heed the cancel button when prompting for passwords in userinfo (#68578)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-2
changelog:
  - change "forget password" to "forget authorization", because we don't actually
    remember the password (that would be scary, #71476)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-1
changelog:
  - pam-panel-icon: overhaul, change the 'locked' icon to keyring-small, nix the
    'unlocked' icon
  - consolehelper-gtk: properly set up the dialog buttons (should be 'cancel/ok'
    when we're asking questions, was always 'close')
  - disappear pam_timestamp_init


author: Nalin Dahyabhai <nalin@redhat.com> 1.56-1
changelog:
  - userinfo: prevent users from selecting "nologin" as a shell (#68579)
  - don't strip binaries by default; leave that to the buildroot policy
  - use desktop-file-install


author: Nalin Dahyabhai <nalin@redhat.com> 1.54-1
changelog:
  - suppress even error messages from Xlib when consolehelper calls
    gtk_init_check() to see if the display is available


author: Nalin Dahyabhai <nalin@redhat.com> 1.52-1
changelog:
  - attempt to make prompts at the console more meaningful
  - when falling back, reset the entire environment to the user's


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - stop giving the user chances to enter the right password if we get a
    conversation error reading a response (appears to be masked by libpam)
    (#62195)
  - always center consolehelper dialog windows


author: Nalin Dahyabhai <nalin@redhat.com> 1.50-1
changelog:
  - fix userpasswd dialog message being incorrect for password changes
  - use a dumb conversation function when text mode is invoked without a tty -- if
    the service's configuration doesn't call for prompts, then it'll still work
  - port from pwdb to libuser
  - catch child-exit errors correctly again
  - fix keyboard-grabbing


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the grand libglade/gtk2 overhaul
  - allow disabling display of GUI windows by setting "GUI=false" in the
    console.apps configuration file (default: TRUE)
  - allow disabling display of GUI windows by recognizing a magic option
    on the command-line of the program being wrapped (NOXOPTION, no default)


author: Nalin Dahyabhai <nalin@redhat.com> 1.44-1
changelog:
  - only try to call gtk_main_quit() if we've got a loop to get out of (#54109)
  - obey RPM_OPT_FLAGS, obey


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set XAUTHORITY if we fall back to regular behavior (#26343)
  - make the suid helper 04711 instead of 04755


author: Yukihiro Nakai <ynakai@redhat.com>
changelog:
  - Some fix for Japanese environment.
  - Use gtk_set_locale() instead of setlocale()
  - Copyright update.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix the /usr/bin/shutdown wrapper so that root can call shutdown
  - only include the /usr/bin/shutdown wrapper on 6.x
  - also sanitize LC_MESSAGES
  - tweak sanitizing checks (from mkj)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix incorrect user name
  - add a shell wrapper version of /usr/bin/shutdown
  - build for 6.x errata
  - bump revision to upgrade the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix stdin/stdout redirection shenanigans (#11706)
  - fix authentication and execution as users other than root
  - make sure the right descriptors are terminals before dup2()ing them
  - cut out an extra-large CPU waster that breaks GUI apps


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install translations
  - fixup a messy text string
  - make "Mount"/"Unmount" translatable
  - stop prompting for passwords to shut down -- we can hit ctrl-alt-del anyway,
    and gdm users can just shut down without logging in


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - strip all binaries by default
  - add the name of the program being run to the userhelper dialog
  - add a graphic to the userhelper-wrap package
  - add a button to jump straight to nonprivileged operation when supported


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - The root exploit fix created a bug that only showed up in certain
    circumstances.  Unfortunately, we didn't test in those circumstances...


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed old complex broken gecos parsing, replaced with simple working parsing
  - can now blank fields (was broken by previous fix for something else...)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - FALLBACK/RETRY in consolehelper/userhelper
  - session management fixed for consolehelper/userhelper SESSION=true
  - fix memory leak and failure to close in error condition (#3614)
  - fix various bugs where not all elements in userinfo got set


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - better check for X availability
  - center windows to make authentication easier (improve later with
    transients and embedded windows where possible)
  - applink -> applnk
  - added a little padding, especially important when running without
    a window manager, as happens when running from session manager at
    logout time


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - updated userhelper.8 man page for consolehelper capabilities
  - moved from wmconfig to desktop entries


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - strip binaries
  - use defattr
  - fix spec file ( rm -rf $(RPM_BUILD_ROOT) is a stupid thing to do ! )


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - Updated the packages... now includes userpasswd for changing passwords
    and newer versions of usermount and userinfo.  No known bugs or
    misfeatures. 
  - Fixed the file list...


author: Miloslav Trmač <mitr@redhat.com> - 0.96-6
changelog:
  - Use real --help text and error messages instead of showing a man page in
    pkaction and pkcheck.  Fix description of (pkaction --action-id) in the man 
    page.
    Resolves: #628862
  - Add support for Identity=default in .pkla files
    Resolves: #812684
  - Use a consistent order for .pkla files within a directory.  Based on a patch
    by Jared Jennings <jared.jennings.ctr@eglin.af.mil>.
    Resolves: #864613
  - Build using PIE and relro
    Resolves: #927406


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913.1
changelog:
  - Add bugfix for polkit_unix_process_new_full() (thanks Bastien Nocera)
  - Obsolete old PolicyKit packages


author: David Zeuthen <davidz@redhat.com> - 0.95-0.git20090913
changelog:
  - Update to git snapshot
  - Drop upstreamed patches
  - Turn on GObject introspection
  - Don't delete desktop_admin_r and desktop_user_r groups when
    uninstalling polkit-desktop-policy


author: David Zeuthen <davidz@redhat.com> - 0.94-4
changelog:
  - Add some patches from git master
  - Sort pkaction(1) output
  - Bug 23867 – UnixProcess vs. SystemBusName aliasing


author: David Zeuthen <davidz@redhat.com> - 0.94-3
changelog:
  - Add desktop_admin_r and desktop_user_r groups along with a first cut
    of default authorizations for users in these groups.


author: Brian Maly <brian.maly@oracle.com> [4.1.12-124.27.3.el6uek]
changelog:
  - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget (Shuning Zhang)  [Orabug: 29233739]  
  - Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt (Marcel Holtmann)  [Orabug: 29526426]  {CVE-2019-3459} 
  - HID: debug: fix the ring buffer implementation (Vladis Dronov)  [Orabug: 29629481]  {CVE-2019-3819} {CVE-2019-3819} 
  - scsi: target: iscsi: Use hex2bin instead of a re-implementation (Vincent Pelletier)  [Orabug: 29778875]  {CVE-2018-14633} {CVE-2018-14633} 
  - scsi: libsas: fix a race condition when smp task timeout (Jason Yan)  [Orabug: 29783225]  {CVE-2018-20836} 
  - scsi: megaraid_sas: return error when create DMA pool failed (Jason Yan)  [Orabug: 29783254]  {CVE-2019-11810} 
  - Bluetooth: hidp: fix buffer overflow (Young Xiao)  [Orabug: 29786786]  {CVE-2011-1079} {CVE-2019-11884} 
  - x86/speculation/mds: Add 'mitigations=' support for MDS (Kanth Ghatraju)  [Orabug: 29791046]  
  - net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock(). (Mao Wenan)  [Orabug: 29802785]  {CVE-2019-11815}


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.3
changelog:
  - Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

  <* Wed Feb 28 2018 Pavel Zhukov <pzhukov@redhat.com> - 12:4.1.1-53.P1.2
  - Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-50.P1
changelog:
  - Lease table overflow crash. (#1133917)
  - Add ignore-client-uids option. (#1196768)
  - dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
  - VLAN ID is only bottom 12-bits of TCI. (#1259552)
  - dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
  - dhclient-script: make_resolv_conf(): Keep old nameservers
    if server sends domain-name/search, but no nameservers. (#1269595)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-44.P1
changelog:
  - option 97 - pxe-client-id (#1058674)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130804)
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-41.P1
changelog:
  - Fix dhcpd.leases reverting to root:root on every dhcpd start (#1067142)
    New patch "paranoia" merged with older "paranoia-pid" patch
  - Add init script for dhcrelay IPv6 version (#1053155)


author: Jaromír Končický <jkoncick@redhat.com> - 12:4.1.1-40.P1
changelog:
  - Fix handling of UDP packets with checksum 0xffff. (#1015997)
  - Add GUIDs in the DHCP logs for IPoIB. (#1064416)


author: Jiri Popelka - 12:4.1.1-35.P1
changelog:
  - various memory leaks in omapi (#978420)
  - Modify the reply handling in the server code to send to a specified port
    rather than to the source port for the incoming message. (#952126)
  - Multiple key statements in zone definition causes inappropriate error (#919221)
  - Make sure range6 is correct for subnet6 where it's declared (#902966)
  - Relay no longer crashes, when DHCP packet is received over interface
    without any IPv4 address assigned. (#863936)
  - Expose next-server DHCPv4 option to dhclient script. (#658855)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-34.P1
changelog:
  - Reducing the expiration time for an IPv6 lease may cause the server to crash
    (CVE-2012-3955, #858130)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-33.P1
changelog:
  - Use getifaddrs() for interface discovery code on Linux (#803540)
  - dhclient-script: do not backup&restore /etc/resolv.conf (#824622)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-32.P1
changelog:
  - An error in the handling of malformed client identifiers can
    cause a denial-of-service condition in affected servers. (CVE-2012-3571, #843122)
  - Memory Leaks Found In ISC DHCP (CVE-2012-3954, #843122)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-31.P1
changelog:
  - don't flush old addresses in PREINIT (#815355)
  - remove inherit-leases.patch - it's not needed anymore (#815355)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-27.P1
changelog:
  - dhclient-script: fix looking for other running dhclients (#656339)
  - avoid infinite loop when parsing slp-service-scope option (#747017)
  - dhclient-script: arping address in BOUND|RENEW|REBIND|REBOOT (#752116)
  - send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - Build libraries with -fpic/-fPIC, not with -fPIE (#736999)
  - Add dhcp-common subpackage (#736194)
  - Do not run dhcpd as root (#693381)
    - Use '--enable-paranoia' configure flag
    - Create dhcpd user in %pre
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'
    - Move changing of the effective user/group ID after writing new PID file.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-21.P1
changelog:
  - A pair of defects cause the server to halt upon processing certain packets
    (CVE-2011-2748, CVE-2011-2749, #729885)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20.P1
changelog:
  - The 'hardware [ethernet|etc] ...;' parameter in host records has been
    extended to attempt to match DHCPv6 clients by the last octets
    of a DUID-LL or DUID-LLT provided by the client. (#706974)
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#694799)
  - Use PID for seeding the random number generator in dhclient (#694798)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16.P1
changelog:
  - Unexpected abort caused by a DHCPv6 decline message (CVE-2011-0413, #672995)
  - Write/accept a semi-colon at the end of the max-life and preferred-life
    clauses in dhcpv6 lease files (#672551)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13.P1
changelog:
  - Add LICENSE file to dhclient subpackage (#613683)
  - Add DHCRELAYARGS variable to /etc/sysconfig/dhcrelay (#625846)
  - dhclient logs its pid to make troubleshooting systems
    with multiple dhclients running easier (#627257)
  - Fix parsing of date (#631071)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)
  - Fix for CVE-2010-3611 (#651914)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-10
changelog:
  - Add domain-search to the list of default requested DHCP options (#588352)
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#591140).
  - Compile with -fno-strict-aliasing (#594151).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578098)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-7
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559404)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-6
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559403)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559403)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-5
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#554622)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Add interface-mtu to the list of default requested DHCP options (#571719)
  - Fix paths in man pages (#571720)
  - Remove odd tests in %preun


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - Fix pm-utils/sleep.d/ directory ownership conflict (#566751)
  - Fix pm-utils script location (#479639, c#16)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-2
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559402)
  - Fix dhclient-decline-backoff.patch (#563458)
  - Improve documentation of -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-16
changelog:
  - Added init script (dhcpd6) to also start dhcpd for IPv6 (#558825)
  - Fixed dhcpd and dhcrelay initscripts
  - Added dhcpd6.conf.sample


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - Memory leak in the load_balance_mine() function is fixed (#554384)
  - Use macro global instead of define


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Ray Strode <rstrode@redhat.com> 0.8.3-28
changelog:
  - use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
    to work around a kernel bug leading to blocked boot.
    Resolves: #1120904


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.33.el6uek]
changelog:
  - Revert "x86/mm: Expand the exception table logic to allow new handling options" (Brian Maly)  [Orabug: 25790387]  {CVE-2016-9644} 
  - Revert "fix minor infoleak in get_user_ex()" (Brian Maly)  [Orabug: 25790387]  {CVE-2016-9644}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.32.el6uek]
changelog:
  - x86/mm: Expand the exception table logic to allow new handling options (Tony Luck)  [Orabug: 25790387]  {CVE-2016-9644}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.30.el6uek]
changelog:
  - net: ping: check minimum size on ICMP header length (Kees Cook)  [Orabug: 25766898]  {CVE-2016-8399} {CVE-2016-8399} 
  - sg_write()/bsg_write() is not fit to be called under KERNEL_DS (Al Viro)  [Orabug: 25765436]  {CVE-2016-10088} 
  - scsi: sg: check length passed to SG_NEXT_CMD_LEN (peter chang)  [Orabug: 25751984]  {CVE-2017-7187}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.29.el6uek]
changelog:
  - tty: n_hdlc: get rid of racy n_hdlc.tbuf (Alexander Popov)  [Orabug: 25696677]  {CVE-2017-2636} 
  - TTY: n_hdlc, fix lockdep false positive (Jiri Slaby)  [Orabug: 25696677]  {CVE-2017-2636} 
  - If Slot Status indicates changes in both Data Link Layer Status and Presence Detect, prioritize the Link status change. (Jack Vogel)  [Orabug: 25353783]  
  - PCI: pciehp: Leave power indicator on when enabling already-enabled slot (Ashok Raj)  [Orabug: 25353783]  
  - firewire: net: guard against rx buffer overflows (Stefan Richter)  [Orabug: 25451520]  {CVE-2016-8633} 
  - usbnet: cleanup after bind() in probe() (Oliver Neukum)  [Orabug: 25463898]  {CVE-2016-3951} 
  - cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind (Bjørn Mork)  [Orabug: 25463898]  {CVE-2016-3951} 
  - cdc_ncm: Add support for moving NDP to end of NCM frame (Enrico Mioso)  [Orabug: 25463898]  {CVE-2016-3951} 
  - x86/mm/32: Enable full randomization on i386 and X86_32 (Hector Marco-Gisbert)  [Orabug: 25463918]  {CVE-2016-3672} 
  - kvm: fix page struct leak in handle_vmon (Paolo Bonzini)  [Orabug: 25507133]  {CVE-2017-2596} 
  - crypto: mcryptd - Check mcryptd algorithm compatibility (tim)  [Orabug: 25507153]  {CVE-2016-10147} 
  - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF) (Jim Mattson)  [Orabug: 25507188]  {CVE-2016-9588} 
  - KVM: x86: drop error recovery in em_jmp_far and em_ret_far (Radim Krčmář)  [Orabug: 25507213]  {CVE-2016-9756} 
  - tcp: take care of truncations done by sk_filter() (Eric Dumazet)  [Orabug: 25507226]  {CVE-2016-8645} 
  - rose: limit sk_filter trim to payload (Willem de Bruijn)  [Orabug: 25507226]  {CVE-2016-8645} 
  - tipc: check minimum bearer MTU (Michal Kubeček)  [Orabug: 25507239]  {CVE-2016-8632} {CVE-2016-8632} 
  - fix minor infoleak in get_user_ex() (Al Viro)  [Orabug: 25507269]  {CVE-2016-9178} 
  - scsi: arcmsr: Simplify user_len checking (Borislav Petkov)  [Orabug: 25507319]  {CVE-2016-7425} 
  - scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() (Dan Carpenter)  [Orabug: 25507319]  {CVE-2016-7425} 
  - tmpfs: clear S_ISGID when setting posix ACLs (Gu Zheng)  [Orabug: 25507341]  {CVE-2016-7097} {CVE-2016-7097} 
  - posix_acl: Clear SGID bit when setting file permissions (Jan Kara)  [Orabug: 25507341]  {CVE-2016-7097} {CVE-2016-7097} 
  - ext2: convert to mbcache2 (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - ext4: convert to mbcache2 (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - mbcache2: reimplement mbcache (Jan Kara)  [Orabug: 25512366]  {CVE-2015-8952} 
  - USB: digi_acceleport: do sanity checking for the number of ports (Oliver Neukum)  [Orabug: 25512466]  {CVE-2016-3140} 
  - net/llc: avoid BUG_ON() in skb_orphan() (Eric Dumazet)  [Orabug: 25682419]  {CVE-2017-6345} 
  - net/mlx4_core: Disallow creation of RAW QPs on a VF (Eli Cohen)  [Orabug: 25697847]  
  - ipv4: keep skb->dst around in presence of IP options (Eric Dumazet)  [Orabug: 25698300]  {CVE-2017-5970} 
  - perf/core: Fix concurrent sys_perf_event_open() vs. 'move_group' race (Peter Zijlstra)  [Orabug: 25698751]  {CVE-2017-6001} 
  - ip6_gre: fix ip6gre_err() invalid reads (Eric Dumazet)  [Orabug: 25699015]  {CVE-2017-5897} 
  - mpt3sas: Don't spam logs if logging level is 0 (Johannes Thumshirn)  [Orabug: 25699035]  
  - xen-netfront: cast grant table reference first to type int (Dongli Zhang)   
  - xen-netfront: do not cast grant table reference to signed short (Dongli Zhang)


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.28.el6uek]
changelog:
  - dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov)  [Orabug: 25598257]  {CVE-2017-6074}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.27.el6uek]
changelog:
  - vfio/pci: Fix integer overflows, bitmask check (Vlad Tsyrklevich)  [Orabug: 25164094]  {CVE-2016-9083} {CVE-2016-9084} 
  - Don't feed anything but regular iovec's to blk_rq_map_user_iov (Linus Torvalds)  [Orabug: 25231931]  {CVE-2016-9576} 
  - kvm: x86: Check memopp before dereference (CVE-2016-8630) (Owen Hofmann)  [Orabug: 25417387]  {CVE-2016-8630} 
  - crypto: algif_hash - Only export and import on sockets with data (Herbert Xu)  [Orabug: 25417799]  {CVE-2016-8646} 
  - USB: usbfs: fix potential infoleak in devio (Kangjie Lu)  [Orabug: 25462755]  {CVE-2016-4482} 
  - net: fix infoleak in llc (Kangjie Lu)  [Orabug: 25462799]  {CVE-2016-4485}


author: Chuck Anderson <chuck.anderson@oracle.com> [4.1.12-61.1.26.el6uek]
changelog:
  - xen-netback: fix extra_info handling in xenvif_tx_err() (Paul Durrant)  [Orabug: 25445336]  
  - net: Documentation: Fix default value tcp_limit_output_bytes (Niklas Cassel)  [Orabug: 25458076]  
  - tcp: double default TSQ output bytes limit (Wei Liu)  [Orabug: 25458076]  
  - xenbus: fix deadlock on writes to /proc/xen/xenbus (David Vrabel)  [Orabug: 25430143]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.25.el6uek]
changelog:
  - KEYS: Fix short sprintf buffer in /proc/keys show function (David Howells)  [Orabug: 25306361]  {CVE-2016-7042} 
  - nvme: Limit command retries (Keith Busch)  [Orabug: 25374751]  
  - fs/proc/task_mmu.c: fix mm_access() mode parameter in pagemap_read() (Kenny Keslar)  [Orabug: 25374977]  
  - tcp: fix use after free in tcp_xmit_retransmit_queue() (Eric Dumazet)  [Orabug: 25374364]  {CVE-2016-6828} 
  - tunnels: Don't apply GRO to multiple layers of encapsulation. (Jesse Gross)  [Orabug: 25036352]  {CVE-2016-8666} 
  - i40e: Don't notify client(s) for DCB changes on all VSIs (Neerav Parikh)  [Orabug: 25046290]  
  - packet: fix race condition in packet_set_ring (Philip Pettersson)  [Orabug: 25231617]  {CVE-2016-8655} 
  - netlink: Fix dump skb leak/double free (Herbert Xu)  [Orabug: 25231692]  {CVE-2016-9806} 
  - ALSA: pcm : Call kill_fasync() in stream lock (Takashi Iwai)  [Orabug: 25231720]  {CVE-2016-9794} 
  - net: avoid signed overflows for SO_{SND|RCV}BUFFORCE (Eric Dumazet)  [Orabug: 25231751]  {CVE-2016-9793}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.23.el6uek]
changelog:
  - net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo)  [Orabug: 25298601]  {CVE-2016-7117}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.22.el6uek]
changelog:
  - ocfs2: fix trans extend while free cached blocks (Junxiao Bi)  [Orabug: 25136991]  
  - ocfs2: fix trans extend while flush truncate log (Junxiao Bi)  [Orabug: 25136991]  
  - ocfs2: extend enough credits for freeing one truncate record while replaying truncate records (Xue jiufei)  [Orabug: 25136991]  
  - mpi: Fix NULL ptr dereference in mpi_powm() [ver #3] (Andrey Ryabinin)  [Orabug: 25154096]  {CVE-2016-8650} {CVE-2016-8650} 
  - mlx4: avoid multiple free on id_map_ent (Wengang Wang)  [Orabug: 25159035]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-61.1.21.el6uek]
changelog:
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 25144380]  
  - sctp: validate chunk len before actually using it (Marcelo Ricardo Leitner)  [Orabug: 25142868]  {CVE-2016-9555}


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-32
changelog:
  - Don't double-close the socket
  - Resolves: rhbz#1309364 - Use-after-free in case resolving hosts or
                             networks fail


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-31
changelog:
  - Resolves: rhbz#1293564 - fix doc to describe actual uri format
                             in nslcd.conf


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-30
changelog:
  - Resolves: rhbz#1293564 - Segmentation fault during upstream make check
  - Also fix regressions in the tio.c module revealed by subsequent testing


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-27
changelog:
  - Resolves: rhbz#1240388 - nslcd fails to fetch member of group if that
                             members name has 19 or more character in its name


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-26
changelog:
  - Apply patches in prep
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-25
changelog:
  - Resolves: rhbz#917876 - [patch] Retry on zero length buffers rather than
                            declaring source unavailable


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-24
changelog:
  - Apply two patches from upstream
  - Resolves: rhbz#1105382 - nslcd: error reading from client: Success


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-23
changelog:
  - Use a static buffer for OpenLDAP callback structure
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-22
changelog:
  - Do not crash when parsing the tls_ciphers option
  - Resolves: rhbz#1184361 - segfault occurs when nslcd starts


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-21
changelog:
  - Resolves: rhbz#999472 - nslcd does not reconnect to alternate ldap server
                            when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-16
changelog:
  - Do not print a "Broken Pipe" error message after requesting a large group
    (#791042)
  - Fix a typo in the disconnection logic (#747281), patch by Martin Poole


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-14
changelog:
  - run the config file upgrade in %posttrans to avoid problems on multilib
    (#706454)
  - convert UID to long long on all arches to catch negative values (#741362)


author: Jakub Hrozek <jhrozek@redhat.com> 0.7.5-11
changelog:
  - do not overflow big UID values, use explicit base when converting UIDs
    and GIDs to integer types (#741362)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-10
changelog:
  - update the validnames changes to the self-tests so that their expectations
    match the modified defaults (#737496)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-9
changelog:
  - include backported enhancement to take URIs in the form "dns:DOMAIN" in
    addition to the already-implemented "dns" (#730309)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-8
changelog:
  - switch to only munging the contents of /etc/nslcd.conf on the very first
    install (#706454)
  - make sure that we have enough space to parse any valid GID value when
    parsing a user's primary GID (#716822,#720230)
  - tweak the default "validnames" setting to also allow shorter and shorter
    names to pass muster (#706860)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-6
changelog:
  - backport patches from 0.7.10 to interpret more types of errors as indicators
    that we need to ask a different server (#692817) and from 0.7.12 to not
    get stuck while cleaning up SSL/TLS encrypted connections


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-5
changelog:
  - backport support for the "validnames" option from SVN and use it to allow
    parentheses characters by modifying the default setting (#690870)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-4
changelog:
  - tweak the pre-generated man pages to avoid a syntax error warning with older
    versions of groff (#676483)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.5-2
changelog:
  - don't return an uninitialized buffer as the value for an optional attribute
    that isn't present in the directory server entry (#592965)


author: Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
changelog:
  - update to 0.7.4 (#592385)
  - stop trying to migrate retry timeout parameters from old ldap.conf files
  - add an explicit requires: on nscd to make sure it's at least available
    on systems that are using nss-pam-ldapd; otherwise it's usually optional
    (#587306)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - rename to nss-pam-ldapd
  - also check for import settings in /etc/nss_ldap.conf and /etc/pam_ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mitchell Berger's patch to clean up the init script, use %{_initddir},
    and correct the %post so that it only thinks about turning on nslcd when
    we're first being installed (#522947)
  - tell status() where the pidfile is when the init script is called for that


author: Nalin Dahyabhai <nalin@redhat.com> 0.6.8-1
changelog:
  - bump release number to 1 (part of #491767)
  - fix which group we check for during %pre (part of #491767)


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.8-2
changelog:
  - New upstream version 0.2.8 introducing cache_{check,dump,repair,restore}; missing patch
    Resolves: #1019217


author: Heinz Mauelshagen <heinzm@redhat.com> - 0.2.6-1
changelog:
  - New upstream version 0.2.6; working around build system providing
    old boost-devel-1.41.0-17.el6_4 with constraints
    Resolves: #814790


author: Milan Broz <mbroz@redhat.com> - 0.1.4-1
changelog:
  - Fix thin_check man page (add -q option).
  - Install utilities in /usr/sbin.
    Resolves: #803204 #803144


author: Kai Engert <kaie@redhat.com> - 3.21.3-2
changelog:
  - Mozilla #1314604 / Red Hat CVE-2016-8635
  - remove disable_hw_gcm.patch which hasn't been used since 3.16.1


author: Petr Šabata <contyk@redhat.com> - 0.9.45-6
changelog:
  - Willing SUT retains PFC operational state from peer after peer
    stops transmitting TLV (#870578)
  - Unable to query configured PFC priorities under IEEE DCBX (#870576)


author: Petr Šabata <contyk@redhat.com> - 0.9.45-4
changelog:
  - The devel subpackage now properly requires the base package to avoid
    multilib conflicts (#869633)


author: Petr Sabata <contyk@redhat.com> - 0.9.43-12
changelog:
  - lldpad: fix core dump (#749943)
  - Support for multiple filter info formats (#731407)
  - Updating documentation for previous commit (#749057)


author: Petr Sabata <psabata@redhat.com> - 0.9.41-4
changelog:
  - Upstream sync up to 4bf0f2db41be0b282e63646fb6b31f0a938d3865
  - Resolves: rhbz#694671
  - Resolves: rhbz#694323
  - Resolves: rhbz#694925


author: Petr Sabata <psabata@redhat.com> - 0.9.38-4
changelog:
  - patch to resolve hang observed during FCoE boot due to dcbx failing to initiate PFC and FCoE app priority negotiations
  - Resolves: rhbz#631587


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.38-1
changelog:
  - rebased to 0.9.38 (various enhancements and bugfixes, see 
    lldpad-0.9.38-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.32-1
changelog:
  - rebased to 0.9.32 (various enhancements and bugfixes, see 
    lldpad-0.9.32-relnotes.txt on http://e1000.sf.net for complete list)


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.26-1
changelog:
  - rebased to 0.9.26
  - package renamed to lldpad
  - enahanced functionality (LLDP supported as well as DCBX)


author: Karsten Hopp <karsten@redhat.com> 0.9.15-4
changelog:
  - buildrequire libconfig-devel >= 1.3.2, it doesn't build with 1.3.1 due to
    the different config_lookup_string api


author: Jan Zeleny <jzeleny@redhat.com> - 0.9.7-3
changelog:
  - added devel files again to support fcoe-utils package
  - added kernel >= 2.6.29 to Requires, deleted dcbnl.h, since it is
    aviable in kernel 2.6.29-rc7
  - changed config dir from /etc/sysconfig/dcbd to /etc/dcbd
  - updated init script: added mandatory Short description tag,
    deleted default runlevels, which should start the script


author: Chris Leech <christopher.leech@intel.com> - 0.9.7-1
changelog:
  - Updated to 0.9.7
  - Added a private copy of dcbnl.h until kernel-headers includes it.
    Export patch is making it's way to the upstream kernel via net-2.6,
    expected in 2.6.29-rc7


author: Curt Carter <curt.carter@oracle.com> 004-388.0.1
changelog:
  - add nvme kernel module to list for initramfs. [orabug 19476860] (Dan Duval)
  - do not strip modules with signatures. [orabug 17458249] (Jerry Snitselaar)
  - scsi_wait module removed in 3.8. Mute errors. [orabug 16977193] (Maxim Uvarov)
  - find firmware in /lib/modules/firmware/`uname -r` first
    and /lib/modules/firmware second. [orabug 13351090] (Maxim Uvarov)
  - Fix btrfs discovery [orabug 13388545]


author: EL Errata <el-errata_ww@oracle.com> - 147-2.73.0.1.2
changelog:
  - Correct script for EMC Powerpath to support OL6 syntax (Cathy Avery) [orabug 19323516]
  - Decrease loglevel of inotify_add_watch failure [orabug 18609660] (vaughan.cao@oracle.com)
  - Add hyper-v dynamic memory support (Jerry Snitselaar) [orabug 18074065]
  - Add powerpath support (John Haxby) [orabug 16511097]
  - Add multi-volume btrfs detection. (John Haxby) [orabug 13443447]
  - use oom_score_adj() in place of deprecated oom_adj() (Chuck Anderson) [orabug 13712009]


author: Michal Sekletar <msekleta@redhat.com> - 147-2.66
changelog:
  - prevent creation of duplicate udev rules by write_net_rules helper (#652499)
  - fix memory leak in scsi_id (#891669)
  - introduce SECLABEL{selinux} for setting explicit SELinux labels on device nodes (#1015300)
  - for ATA disks udev will now also create by-id/wwn-* symlinks when appropriate (#1220617)


author: Harald Hoyer <harald@redhat.com> 147-2.65
changelog:
  - 80-drivers.rules: only make an exception for ipmi for
                      modprobe with DRIVER set
  Resolves: rhbz#1268251


author: Harald Hoyer <harald@redhat.com> 147-2.60
changelog:
  - ata_id - fixup all 8 not only 6 bytes of the fw_rev string
  Resolves: rhbz#794561
  - udev: properly handle symlink removal by 'change' event
  Resolves: rhbz#1018171


author: Harald Hoyer <harald@redhat.com> 147-2.58
changelog:
  - do not print error, if /sys/class/firmware/timeout does
    not exist (yet)
  Resolves: rhbz#1140336
  - always call modprobe, even when a driver is bound to the device
  Resolves: rhbz#1084513
  - fixed for every modprobe locked worker, increase max_childs
    use ncnt instead of zcnt
  Resolves: rhbz#1164960
  - print warning in start_udev, if udevlog is used
  Resolves: rhbz#876535


author: Harald Hoyer <harald@redhat.com> 147-2.53
changelog:
  - add rule for idrac interface renaming
  Resolves: rhbz#1054482
  - for every modprobe locked worker, increase max_childs
  Resolves: rhbz#1028174
  - increase firmware timeout to 600 seconds
  Resolves: rhbz#1077186
  - add nvme pcie ssd scsi_id ENV
  Resolves: rhbz#1020856
  - scsi_id: add short option "-b" parsing
  Resolves: rhbz#910168
  - add  by-id (hardware serial number) for Micron PCIe SSDs
  Resolves: rhbz#839172
  - 80-iosched.rules: check for attributes
  Resolves: rhbz#1008341


author: Harald Hoyer <harald@redhat.com> 147-2.47
changelog:
  - add OPTIONS="log_priority=<loglevel>" for debugging purposes
  Resolves: rhbz#947067
  - limit default udevd maximum childs
  Resolves: rhbz#833172 rhbz#885978
  - add scm path_id support
  Resolves: rhbz#888647
  - header fix for C++
  Resolves: rhbz#909792
  - scsi_id: retry on EBUSY
  Resolves: rhbz#920961


author: Harald Hoyer <harald@redhat.com> 147-2.46
changelog:
  - make symlink/rename failure info() only
    this can happen for multipath devices
  Resolves: rhbz#838451


author: Harald Hoyer <harald@redhat.com> 147-2.43
changelog:
  - add cciss handling to path_id
  Resolves: rhbz#784697
  - add kmsg alias logger
  Resolves: rhbz#826396
  - extend udev(7) man page about character encoding in symlinks
  Resolves: rhbz#790321
  - fix cdrom_id to honor feature profiles, if no medium is present
  Resolves: rhbz#847925


author: Harald Hoyer <harald@redhat.com> 147-2.41
changelog:
  - add "nowatch" option to manpage
  Resolves: rhbz#628762
  - fixed return code of udev-post for "status"
  Resolves: rhbz#735410
  - fixed udev_device_get_devnode()
    backported cdb1d7608a2e2ba708a890eeab6e5e99409a1953
  Resolves: rhbz#784648


author: Harald Hoyer <harald@redhat.com> 147-2.37
changelog:
  - add requires for libgudev1 on libudev with version and release
  Resolves: rhbz#727500
  - change import property buffer to 16384 bytes
  Resolves: rhbz#726566


author: Harald Hoyer <harald@redhat.com> 147-2.36
changelog:
  - handle Vodafone K3565-Z 3G modem
  Resolves: rhbz#632646
  - update path_id to upstream version, which can handle SAS devices that 
    have no enclosure and handles iSCSI devices.
  Resolves: rhbz#698540 rhbz#714951
  - use IFINDEX for temporary network interface renaming
  Resolves: rhbz#701265
  - udev now changes the IO scheduler for all disks except sata disks to the 
    "deadline" scheduler.
  Resolves: rhbz#711254


author: Harald Hoyer <harald@redhat.com> 147-2.34
changelog:
  - add CFLAGS and LDFLAGS to add missing PIE and RELRO flags
  Resolves: rhbz#676004
  - fixed udevadm trigger segmentation fault
  Resolves: rhbz#677857


author: Harald Hoyer <harald@redhat.com> 147-2.32
changelog:
  - added new page codes for scsi_id, to export ID_SERIAL_80 and ID_SERIAL_83.
  Resolves: rhbz#644902
  - correctly handle ENV{ACL_MANAGE}==0
  Resolves: rhbz#674168


author: Harald Hoyer <harald@redhat.com> 147-2.31
changelog:
  - fixed zero macs in 70-persistent-net.rules
  Resolves: rhbz#656059
  - add 42-qemu-usb.rules
  Resolves: rhbz#663064
  - create /dev/hugepages directory
  Resolves: rhbz#667750


author: Harald Hoyer <harald@redhat.com> 147-2.30
changelog:
  - fixed udevadm segfault, if log is set to debug
  Resolves: rhbz#657360
  - fixed keyboard handling for extra keys, especially volume
    control
  Resolves: rhbz#617572
  - quote output of 'udevadm info --query=shenv' or
                    'udevadm info --query=shproperty'
  Resolves: rhbz#644330


author: Harald Hoyer <harald@redhat.com> 147-2.29
changelog:
  - set the selinux context for "add" events, regression
    the fix for rhbz#575128 caused a lot of selinux errors like
    rhbz#603729
  Resolves: rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.28
changelog:
  - quirk for cisco virtual cdrom was not complete, reports
    blank media, rhbz#628962
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.27
changelog:
  - added ID_SERIAL_RAW to scsi_id export output, which is not
    whitespace stripped
  Resolves: rhbz#612173


author: Harald Hoyer <harald@redhat.com> 147-2.26
changelog:
  - more quirk for virtual machines, which do not report correct
    CDROM information
  Resolves: rhbz#624707


author: Harald Hoyer <harald@redhat.com> 147-2.22
changelog:
  - fixed random MAC address handling 
  - honor ifcfg HWADDR settings for 70-persistent-net.rules
  Resolves: rhbz#596464


author: Harald Hoyer <harald@redhat.com> 147-2.19
changelog:
  - do not blkid blank or audio CDROMs 
  Resolves: rhbz#606293
  - fixed scsi changer symlink
  Resolves: rhbz#603051
  - suppress warnings from usb_id
  Resolves: rhbz#585648
  - add path_id for virtio-blk devices
  Resolves: rhbz#601248
  - fixed reference leak in path_id sas patch
  Resolves: rhbz#537185


author: Harald Hoyer <harald@redhat.com> 147-2.18
changelog:
  - removed obsolete arguments to configure
  Resolves: rhbz#601882
  - add IMPORT{db} IMPORT{cmdline} and set rd_NO_MDIMSM for noiswmd kernel cmdline option
  Resolves: rhbz#589775
  - add port for sas in path_id 
  Resolves: rhbz#537185
  - add modprobe hack to serialize modprobes
  Resolves: rhbz#515413
  - revert path check from 147-2.16
  Resolves: rhbz#591970


author: Harald Hoyer <harald@redhat.com> 147-2.15
changelog:
  - fix "do not mark xvd* devices as cdrom by default (rhbz#584163)"
    included patch but did not apply
  - Resolves: rhbz#584163


author: Harald Hoyer <harald@redhat.com> 147-2.14
changelog:
  - do not mark xvd* devices as cdrom by default (rhbz#584163)
  - Do not rename network interfaces.
    This causes more problems, than solving the original one.
    (rhbz#565724)
  - Resolves: rhbz#584163, rhbz#572681


author: Harald Hoyer <harald@redhat.com> 147-2.13
changelog:
  - supress error message in pre/post while killing old udevd
    (rhbz#576819)
  - fixed a lot of cdrom related problems (rhbz#582557, rhbz#582559)
  - Resolves: rhbz#576819, rhbz#582557, rhbz#582559


author: Harald Hoyer <harald@redhat.com> 147-2.12
changelog:
  - fixed virtio-ports rule patch (rhbz#569699)
  - removed IFINDEX from renamed interfaces (rhbz#572681)
  - do not reset selinux labels (rhbz#575128)
  - Resolves: rhbz#572681, rhbz#569699, rhbz#575128


author: Harald Hoyer <harald@redhat.com> 147-2.11
changelog:
  - add SCSI SAS handling to path_id (rhbz#537185)
  - fixed handling of boxes with lots of disks and huge
    volume groups (rhbz#570016)
  - fixed virtio-ports rule (rhbz#569699)
  - Resolves: rhbz#537185, rhbz#569699, rhbz#570016


author: Harald Hoyer <harald@redhat.com> 147-2.10
changelog:
  - add one more letter to renamed interfaces to avoid name 
    clashing (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.9
changelog:
  - rename non-handled network interfaces, so that the handled
    can be renamed to their destination name (rhbz#565724)
  - Resolves: rhbz#565724


author: Harald Hoyer <harald@redhat.com> 147-2.7
changelog:
  - fixed udev-post initscript retriggering (rhbz#566568)
  - attempt to fix network interface renaming (rhbz#565724)
  - Resolves: rhbz#565724, rhbz#566568


author: Harald Hoyer <harald@redhat.com> 147-2.4
changelog:
  - add symlink rule for virtio ports (rhbz#559180)
  - fixed initscript
  - create /dev/net/tun with 0666 in start_udev
  - Export ID_WWN_VENDOR_EXTENSION and ID_WWN_WITH_EXTENSION
  - Related: rhbz#543948 rhbz#515413
  - Resolves: rhbz#559180


author: Harald Hoyer <harald@redhat.com> 147-2.2
changelog:
  - only require s390utils-base, rather than s390utils (#553156)
  - removed non-working softlinks (partly fixes also #528883)
  - Resolves: rhbz#553156


author: Harald Hoyer <harald@redhat.com> 147-1
changelog:
  - version 147
  - Fix upgrade from Fedora 11 with bluez installed (#533925)
  - obsolete DeviceKit and DeviceKit-devel (#532961)
  - fixed udev-post exit codes (#523976)
  - own directory /lib/udev/keymaps (#521801)
  - no more floppy modaliases (#514329)
  - added one more modems to modem-modeswitch.rules (#515349)
  - add NEWS file to the doc section
  - automatically turn on hotplugged CPUs (rhbz#523127)
  - recognize a devtmpfs on /dev (bug #528488)


author: Harald Hoyer <harald@redhat.com> 145-2
changelog:
  - fix file permissions
  - remove rpath
  - chkconfig --add for udev-post
  - fix summaries
  - add "Required-Stop" to udev-post


author: Harald Hoyer <harald@redhat.com> 145-1
changelog:
  - version 145
  - add "udevlog" kernel command line option to redirect the
    output of udevd to /dev/.udev/udev.log


author: Harald Hoyer <harald@redhat.com> 143-2
changelog:
  - add acpi floppy modalias
  - add retrigger of failed events in udev-post.init
  - killall pids of udev in %pre


author: Harald Hoyer <harald@redhat.com> 142-4
changelog:
  - git fix: udevadm: settle - fix timeout
  - git fix: OWNER/GROUP: fix if logic
  - git fix: rule-generator: cd - skip by-path links if we create by-id links
  - git fix: fix possible endless loop for GOTO to non-existent LABEL
  - git fix: cdrom_id: suppress ID_CDROM_MEDIA_STATE=blank for plain non-writable 
  		CDROM media


author: Harald Hoyer <harald@redhat.com> 139-3
changelog:
  - renamed modprobe /etc/modprobe.d/floppy-pnp to
    /etc/modprobe.d/floppy-pnp.conf (bug #492732 #488768)
  - Resolves: rhbz#492732


author: Harald Hoyer <harald@redhat.com> 136-1
changelog:
  - test for restorecon in start_udev before it is used (bug #480608)
  - added groups video audio cdrom tape dialout in post
    (might be moved to MAKEDEV)
  - version 136


author: Harald Hoyer <harald@redhat.com> 135-2
changelog:
  - changed udevsettle -> udevadm settle
  - added doc to libudev-devel
  - added more attr and defattr
  - various rpmlint fixes


author: Harald Hoyer <harald@redhat.com> 126-1
changelog:
  - version 126
  - fixed udevadm syntax in start_udev (credits B.J.W. Polman)
  - removed some manually created devices from makedev (bug #457125)


author: Harald Hoyer <harald@redhat.com> 120-4.20080421git
changelog:
  - added patches from git:
  - persistent device naming: also read unpartitioned media
  - scsi_id: initialize serial strings
  - logging: add trailing newline to all strings
  - path_id: remove subsystem whitelist
  - allow setting of MODE="0000"
  - selinux: more context settings
  - rules_generator: net rules - always add KERNEL== match to generated rules
  - cdrom_id: replace with version which also exports media properties
  - vol_id: add --offset option
  - udevinfo: do not replace chars when printing ATTR== matches
  - Resolves: rhbz#440568


author: Harald Hoyer <harald@redhat.com> 120-3
changelog:
  - fixed pre/preun scriptlets (bug #441941)
  - removed fedora specific patch for selinux symlink handling


author: Harald Hoyer <harald@redhat.com> 120-2
changelog:
  - removed warning about deprecated /lib/udev/devices (rhbz#440961)
  - replaced /usr/bin/find with shell find function (rhbz#440961)


author: Harald Hoyer <harald@redhat.com> 118-9
changelog:
  - added more support for the "modprobedebug" kernel command 
    line option, to debug hanging kernel modules


author: Harald Hoyer <harald@redhat.com> 118-8
changelog:
  - added /etc/sysconfig/udev to configure some speedups
  - added "udevnopersist" as a kernel command line, to disable
    persistent storage symlink generation


author: Harald Hoyer <harald@redhat.com> 118-7
changelog:
  - files from /var/lib/udev/rules.d are copied to /dev/.udev/rules.d 
    at startup and back at shutdown
  - persistent cd and net rules generate the files in 
    /dev/.udev/rules.d now
  - added post section to symlink 70-persistent-cd.rules 70-persistent-net.rules
    from /etc/udev/rules.d to /dev/.udev/rules.d


author: Harald Hoyer <harald@redhat.com> 118-6
changelog:
  - moved all generated files to /var/lib/udev 
    (also 70-persistent-cd.rules 70-persistent-net.rules)
  - added a caching mechanism for MAKEDEV (saves some seconds on startup)
  - added trigger for selinux-policy and MAKEDEV to remove the udev cache files


author: Harald Hoyer <harald@redhat.com> 118-4
changelog:
  - made symlinks relative (rhbz#432878)
  - removed the backgrounding of node creation (rhbz#381461)
  - do not change sg group ownership to disk for scanners (rhbz#432602)
  - attempt to fix selinux symlink bug (rhbz#345071)
  - fixed URL
  - made rpmlint mostly happy
  - disabled static version (no static selinux lib)


author: Harald Hoyer <harald@redhat.com> 116-3
changelog:
  - fixed preun chkconfig
  - added /sbin path to chkconfig in post section 
  - patch: do not generate net rules for type > 256
  - fixes glitches appearing in bz#323991


author: Harald Hoyer <harald@redhat.com> 115-5.20071012git
changelog:
  - added upstream patch for rhbz#328691
  - moved floppy module loading to pnp-alias in /etc/modprobe.d/floppy-pnp


author: Harald Hoyer <harald@redhat.com> - 115-3
changelog:
  - some upstream fixes from git
  - removed last_rule for loop rules
  - added "udevinfo udevtrace" kernel command line options for better debugging


author: Harald Hoyer <harald@redhat.com> - 115-2
changelog:
  - some upstream fixes from git
  - last_rule for loop rules (speedup for live-cds/qemu with 128 loop devices)


author: Harald Hoyer <harald@redhat.com> - 114-4
changelog:
  - added patch to prevent persistent net rules for virtual network interfaces,
    like vmware and vlans


author: Harald Hoyer <harald@redhat.com> - 113-10
changelog:
  - do not run vol_id on non-partition block devices (bug #251401)
  - read all multiline pnp modaliases again


author: Harald Hoyer <harald@redhat.com> - 114-1
changelog:
  - version 114
  - big rule unification and cleanup
  - added persistent names for network and cdrom devices over reboot


author: Harald Hoyer <harald@redhat.com> - 113-7
changelog:
  - major rule cleanup
  - removed persistent rules from 50 and included upstream rules
  - removed skip_wait from modprobe


author: Harald Hoyer <harald@redhat.com> - 106-3
changelog:
  - modprobe only on modalias (bug #238140)
  - make startup messages visible again
  - speedup boot process by not executing pam_console_apply while booting
  - Resolves: rhbz#238140


author: Harald Hoyer <harald@redhat.com> - 106-1
changelog:
  - version 106
  - specfile cleanup
  - removed pilot rule
  - removed dasd_id and dasd_id rule
  - provide static versions in a subpackage


author: Harald Hoyer <harald@redhat.com> - 104-2
changelog:
  - moved uinput to input subdirectory (rhbz#213854)
  - added USB floppy symlinks (rhbz#185171)
  - fixed ZIP drive handling (rhbz#223016)
  - Resolves: rhbz#213854,rhbz#185171,rhbz#223016


author: Harald Hoyer <harald@redhat.com> - 095-9
changelog:
  - improved error msg for firmware_helper (bug #206944)
  - added xpram symlink to slram device nodes (bug #205563)
  - removed infiniband rules (bug #206224)
  - use newest path_id script (bug #207139)


author: Harald Hoyer <harald@redhat.com> - 095-7
changelog:
  - added udevtimeout=<timeout in seconds>
    kernel command line parameters for start_udev 
    (default is to wait forever)


author: Harald Hoyer <harald@redhat.com> - 089-1
changelog:
  - version 089
  - do not force loading of parport_pc (bug #186850)
  - manually load snd-powermac (bug #176761)
  - added usb floppy symlink (bug #185171)
  - start_udev uses udevtrigger now instead of udevstart


author: Harald Hoyer <harald@redhat.com> - 084-9
changelog:
  - create non-enum device (cdrom, floppy, scanner, changer)
    for compatibility (random device wins)
    e.g. /dev/cdrom -> hdd /dev/cdrom-hdc -> hdc /dev/cdrom-hdd -> hdd


author: Harald Hoyer <harald@redhat.com> - 084-8
changelog:
  - fixed ZIP drive thrashing (bz #181041 #182601)
  - fixed enumeration (%e does not work anymore) (bz #183288)


author: Peter Jones <pjones@redhat.com> - 084-7
changelog:
  - Don't start udevd in %post unless it's already running
  - Stop udevd before chkconfig --del in %preun


author: Harald Hoyer <harald@redhat.com> - 084-4
changelog:
  - fixed group issue with vol_id (bz #181432)
  - fixed dvb permissions (bz #179993)
  - added support for scsi media changer (bz #181911)
  - fixed pktcdvd device creation (bz #161268)


author: Harald Hoyer <harald@redhat.com> - 078-4
changelog:
  - removed group "video" from the rules
  - fixed specfile
  - load nvram, floppy, parport and lp modules in
    /etc/sysconfig/modules/udev-stw.modules until there 
    is a better solution
  - fixed more floppy module loading


author: Harald Hoyer <harald@redhat.com> - 077-2
changelog:
  - switched back to udevstart and use active /dev/.udev/queue waiting 
    in start_udev
  - removed support for old kernels
  - refined some udev.rules


author: Harald Hoyer <harald@redhat.com> - 075-2
changelog:
  - moved /etc/udev/scripts to /lib/udev
  - moved /etc/udev/devices to /lib/udev/devices
  - added new event replay for kernel >= 2.6.15
  - added usb devices
  - renamed cpu device to cpuid (bug #161538)
  - changed vendor string "Onstream" to "On[sS]tream" (bug #173043)
  - compiled all *_id programs statically


author: Bill Nottingham <notting@redhat.com> - 062-2
changelog:
  - update to 062
  - use included ata_id, build usb_id
  - load modules for pci, usb, pcmcia
  - ship RELEASE-NOTES in %doc


author: Harald Hoyer <harald@redhat.com> - 056-1
changelog:
  - updated to version 056
  - merged permissions in the rules file
  - added udevpermconv.sh to convert old permission files


author: Harald Hoyer <harald@redhat.com> - 050-6
changelog:
  - introducing /etc/udev/makedev.d/50-udev.nodes
  - glibcstatic patch modified to let gcc4 compile udev


author: Harald Hoyer <harald@redhat.com> - 048-2
changelog:
  - fixed a case where reading /proc/ide/hd?/media returns EIO
    (bug rh#142713)
  - changed all device node permissions of group "disk" to 0640 
    (bug rh#110197)
  - remove $udev_db with -fr in case of a directory (bug rh#142962)


author: Harald Hoyer <harald@redhat.com> - 039-6.FC3.1
changelog:
  - speed up pam_console.dev
  - mount pts and shm, in case of the dev trigger
  - increased timeout for udevstart
  - removed syslog() from signal handler (caused vmware locks)
  - turned off logging, which speeds up the boot process


author: Harald Hoyer <harald@redhat.com> - 039-5
changelog:
  - added udev-039-norm.patch, which prevents removal of hd* devices,
    because the kernel sends remove/add events, if an IDE removable device
    is close(2)ed. mke2fs, e.g. would fail in this case.


author: Harald Hoyer <harald@redhat.com> - 039-4
changelog:
  - do not call dev.d scripts, if network interface hasn't changed 
    the name
  - correct wait for dummy network devices
  - removed NONBLOCK from volume-id
  - do not log in udev.static, which should fix bug 136005


author: Harald Hoyer <harald@redhat.com> - 039-2
changelog:
  - improved wait_for_sysfs for virtual consoles with Kay Siever's patch
  - wait for ppp class
  - wait for LVM dm- devices
  - integrate wait_for_sys in udev.static for the initrd


author: Harald Hoyer <harald@redhat.com> - 039-1
changelog:
  - version 039, fixes also manpage bug 135996 
  - fixed glibc issue for static version (getgrnam, getpwnam) (bug 136005)
  - close the syslog in every app


author: Harald Hoyer <harald@redhat.com> - 038-2
changelog:
  - par[0-9] is now a symlink to lp
  - MAKEDEV the parport devices
  - now conflicts with older initscripts


author: Harald Hoyer <harald@redhat.com> - 035-1
changelog:
  - version 035, which only improves wait_for_sysfs
  - load ide modules in start_udev, until a hotplug script is available
    (bug 135260)


author: Harald Hoyer <harald@redhat.com> - 034-3
changelog:
  - removed scary error messages from wait_for_sysfs
  - symlink from nst? -> tape?
  - kill udevd on update


author: Harald Hoyer <harald@redhat.com> - 034-1
changelog:
  - new version udev-034
  - removed patches, which went upstream
  - pam_console.dev link renamed to 05-pam_console.dev
  - MAKEDEV.dev links renamed to 10-MAKEDEV.dev


author: Harald Hoyer <harald@redhat.com> - 032-10
changelog:
  - added floppy madness (bug 134830)
  - replay scsi events in start_udev for the devices on the adapter (bug 130746)


author: Harald Hoyer <harald@redhat.com> - 032-9
changelog:
  - obsoleted $UDEV_LOG, use udev_log
  - correct SYMLINK handling in pam_console.dev
  - specfile cleanup
  - added check-cdrom.sh for nice cdrom symlinks


author: Harald Hoyer <harald@redhat.com> - 032-8
changelog:
  - added patches from Féliciano Matias for multiple symlinks (bug 134477 and 134478)
  - corrected some permissions with a missing leading 0
  - added z90crypt to the permissions file (bug 134448)
  - corrected requires and conflicts tags
  - removed /dev/log from MAKEDEV creation


author: Harald Hoyer <harald@redhat.com> - 032-4
changelog:
  - made /etc/udev/devices/ for manual device nodes
  - refined SELINUX check, if /dev is not yet mounted in start_dev


author: Harald Hoyer <harald@redhat.com> - 032-3
changelog:
  - corrected permissions for /dev/rtc (bug 133636)
  - renamed device-mapper to mapper/control (bug 133688)


author: Harald Hoyer <harald@redhat.com> - 030-27
changelog:
  - simplified udev.conf
  - refined close_on_exec patch
  - added pam_console supply for symlinks, now gives correct permissions,
    for e.g. later plugged in cdroms
  - renamed sr? to scd? (see devices.txt; k3b likes that :)


author: Jeremy Katz <katzj@redhat.com> - 030-26
changelog:
  - require a 2.6 kernel
  - prereq instead of requires MAKEDEV
  - obsolete and provide dev
  - add a trigger for the removal of /dev so that we set things up


author: Harald Hoyer <harald@redhat.com> - 030-21
changelog:
  - applied enumeration patch from David Zeuthen for cdrom symlinks (bug 131532)
  - create /dev/ppp in start_udev (bug 131114)
  - removed nvidia devices from start_udev
  - check for restorecon presence in start_udev (bug 131904)


author: Harald Hoyer <harald@redhat.com> - 030-16
changelog:
  - moved %{_sysconfdir}/hotplug.d/default/udev.hotplug to %{_sysconfdir}/hotplug.d/default/10-udev.hotplug


author: Harald Hoyer <harald@redhat.com> - 030-15
changelog:
  - added nvidia devices to start_udev
  - added UDEV_RAMFS for backwards compat to udev.conf
  - changed Group (bug 131488)
  - added libselinux-devel to build requirements


author: Jeremy Katz <katzj@redhat.com> - 030-11
changelog:
  - use tmpfs instead of ramfs (it has xattr support now)
  - change variables appropriately to TMPFS intead of RAMFS in udev.conf
  - create loopN, not just loop in start_udev


author: Harald Hoyer <harald@redhat.com> - 030-8
changelog:
  - changed defaults not to remove device nodes
  - added rule for net/tun
  - extended start_udev to create devices, which can trigger module autoloading
  - refined cloexec patch, to redirect stdin,out,err of /dev.d execed apps to /dev/null


author: Harald Hoyer <harald@redhat.com> - 030-7
changelog:
  - removed usage of /usr/bin/seq in start_udev
  - set correct permissions in start_udev
  - extended the cloexec patch
  - removed udev-persistent package (define with_persistent==0)
  - check for /var/run/console/console.lock before calling /sbin/pam_console_setowner
  - linked pam_console_setowner statically against libglib-2.0.a


author: Harald Hoyer <harald@redhat.com> - 029-3
changelog:
  - put /etc/sysconfig/udev in /etc/udev/udev.conf and removed it
  - made only udev.static static
  - make our defaults the default values
  - removed /udev


author: Harald Hoyer <harald@redhat.com> - 026-2
changelog:
  - udev-026
  - preserve ownership of device nodes, which already exist
  - do not remove device nodes if UDEV_REMOVE="no"
  - added volume_id
  - build with klibc


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add some more files to the documentation directory
  - add ability to build scsi_id and make it the default


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - fix up udevd build, as it's no longer needed to be build seperatly
  - add udevtest to list of files
  - more Red Hat sync ups.


author: Greg Kroah-Hartman <greg@kroah.com>
changelog:
  - add udevsend, and udevd to the files
  - add ability to build udevd with glibc after the rest is build with klibc


author: Robert Love <rml@tech9.net>
changelog:
  - Make work without a build root
  - Correctly install the right files
  - Pass the RPM_OPT_FLAGS to gcc so we can build per the build policy
  - Put some prereqs in
  - Install the hotplug symlink to udev


author: Dan Horák <dhorak@redhat.com> - 0.23-2
changelog:
  - fix path separator for FC devices (#589327)
  - fix for kernels with unified string representation of NULL (#589860)
  - Resolves: #589327, #589860


author: Shelly Ma <shelly.ma@oracle.com> - 1.0-170.el6.22
changelog:
  - ovs-devmon not reporting CHANGE_DM_SD events, fixed udev event path from UEK NETLINK_KOBJECT_UEVENT socket. 
    Acknowledged by Adnan Misherfi <adnan.misherfi@oracle.com>


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-15
changelog:
  - don't use " for saslauth user's description (#1081445)
  - backport the ad_compat option (#994242)
  - fixed a memory leak in the client side DIGEST-MD5 code (#838628)


author: Petr Lautrbach <plautrba@redhat.com> 2.1.23-14
changelog:
  - release the GSSAPI server credential handle immediately after the
    GSSAPI security context is established (#825863)


author: Tomas Mraz <tmraz@redhat.com> - 2.1.22-19
changelog:
  - always use the current external db4 when linking,
    thanks to Dan Horak for the original patch (#464098)


author: Tomas Mraz <tmraz@redhat.com> - 2.1.22-15
changelog:
  - drop reload from initscript help (#448154)
  - fix hang in rimap auth method (#438533)
  - build the krb4 plugin (#154675)


author: Steve Conklin <sconklin@redhat.com> - 2.1.22-11
changelog:
  - Cleanup after merge review bz #225673
  - no longer mark /etc/rc.d/init.d/saslauthd as config file
  - removed -x permissions on include files
  - added devel package dependency on cyrus-sasl
  - removed some remaining .la files that were being delivered


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-6
changelog:
  - install config files and init scripts using -p
  - pull in patch to build with current automake (#229010, Jacek Konieczny
    and Robert Scheck)
  - remove prereq on ldconfig, RPM should pick it up based on the -libs
    scriptlets
  - pull in patch to correctly detect gsskrb5_register_acceptor_identity
    (#200892, Mirko Streckenbach)
  - move sasldb auxprop modules into the -lib subpackage, so that we'll pick
    it up for multilib systems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove static build, which is no longer a useful option because not all of
    our dependencies are available as static libraries
  - drop patches which were needed to keep static builds going
  - drop gssapi-generic patch due to lack of interest
  - update the bundled copy of db to 4.5.20 (#229012)
  - drop dbconverter-2, as we haven't bundled v1 libraries since FC4


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-5
changelog:
  - rebuild
  - add 'authentication' or 'auxprop' to summaries for plugin packages to
    better indicate what the plugin provides
  - switch from automake 1.9 to automake 1.7


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12
changelog:
  - add conditionalized build dependency on openldap-devel (#191855)
  - patch md5global.h to be the same on all architectures


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11
changelog:
  - add unapplied patch which makes the DIGEST-MD5 plugin omit the realm
    argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
    non-zero value, for testing purposes
  - add missing buildrequires on zlib-devel (#190113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9
changelog:
  - use --as-needed to avoid linking dbconverter-2 with SQL libraries, which
    it doesn't use because it manipulates files directly (#173321)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8
changelog:
  - rebuild with new OpenLDAP, overriding the version checks to assume that
    2.3.11 is acceptable
  - remove a lingering patch for 1.x which we no longer use


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4
changelog:
  - move the ldapdb auxprop support into a subpackage (#167300)
    (note: the ldap password check support in saslauthd doesn't use auxprop)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
changelog:
  - move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
    systems can use it without installing the main package
  - build the static libraries without sql auxprop support


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
changelog:
  - update to 2.1.21
  - turn off compilation of libsasl v1 (finally)
  - explicitly disable sqlite to avoid the build warning
  - change the default mechanism which is set for saslauthd from "shadow" to
    "pam" (#159194)
  - split the shared library up from saslauthd so that multilib systems don't
    have to pull in every dependency of saslauthd for the compat arch (#166749)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
changelog:
  - rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
    revision between 2.1.18 and 2.1.19)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a saslauthd_version option to libsasl's saslauthd client and teach it to
    do the right thing
  - enable the saslauthd client code in libsasl version 1 (it's still going away!)
  - add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17, forcing the gssapi plugin to be shared now, as before
  - use a bundled libdb (#112215)
  - build static-with-all-plugins and normal-shared libsasl versions
  - add sasl2-{shared,static}-mechlist for very basic sanity checking
  - make inclusion of sasl1 stuffs conditional, because it's so going away


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
changelog:
  - use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
    safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
    use it to seed the libc RNG only (#103378)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
changelog:
  - install saslauthd's mdoc page instead of the pre-formatted man page, which
    would get formatted again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include testsaslauthd
  - note in the README that the saslauthd protocol is different for v1 and v2,
    so v1's clients can't talk to the v2 server


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
    searching for a DES implementation in libcrypto
  - pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
changelog:
  - rebuild, overriding sasldir when running make so that on multilib systems
    applications will be able to load modules for the right arch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
    1.x, so fork the package and rename it to cyrus-sasl2
  - add the sasldb auxprop plugin to the main package
  - add disabled-by-default saslauthd init script
  - move the .la files for plugins into their respective packages -- they're
    needed by the library


author: Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
changelog:
  - include sample programs in the -devel subpackage, prefixing their names
    with "sasl-" to reduce future potential naming conflicts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add gdbm-devel as a build dependency (#44990)
  - split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
    and dialogs with David L. Parsley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split out the PLAIN and LOGIN mechanisms into their own package (this allows
    an administrator to disable them by simply removing the package)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move .so files for modules to their respective packages -- they're not -devel
    links meant for use by ld anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - force use of gdbm for database files to avoid DB migration weirdness
  - enable login mechanism
  - disable gssapi until it can coexist peacefully with non-gssapi setups
  - actually do a make in the build section (#15410)


author: Mads Kiilerich <mads@kiilerich.com>
changelog:
  - updated to sasl 1.5.11
  - configure --disable-krb4 --without-rc4 --disable-cram 
    because of missing libraries and pine having cram as default...
  - handle changing libsasl.so versions


author: EL Errata <el-errata_ww@oracle.com> - 147-2.63.0.1.1
changelog:
  - Decrease loglevel of inotify_add_watch failure [orabug 18609660] (vaughan.cao@oracle.com)
  - Add hyper-v dynamic memory support (Jerry Snitselaar) [orabug 18074065]
  - Add powerpath support (John Haxby) [orabug 16511097]
  - Add multi-volume btrfs detection. (John Haxby) [orabug 13443447]
  - use oom_score_adj() in place of deprecated oom_adj() (Chuck Anderson) [orabug 13712009]


author: Michal Sekletar <msekleta@redhat.com> - 147-2.63.1
changelog:
  - also limit the additional modprobe locked workers (#1281469)
  - 80-drivers.rules: only make an exception for ipmi for modprobe with DRIVER set (#1281467)


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.0.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.0.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2012.87-65.7
changelog:
  - ExcludeArch/ExclusiveArch doesn't work to enforce a build host
  - Added comment that explains the special build requirements.
  - Added a comment suggesting to keep the release number below the 
    ones used on RHEL 7.
  - Fixed permissions of /etc/pki/java (thanks to stefw)


author: Kai Engert <kaie@redhat.com> - 2012.87-65.4
changelog:
  - attempt to handle unsupported downgrades, where the admin has enabled
    legacy support, but downgrades to an old package that is incompatible
    provide the new feature.
  - move manual page to the man8 section (system administration commands)
  - simplify the README files now that we have a manual page


author: Kai Engert <kaie@redhat.com> - 2012.87-65.3
changelog:
  - added a manual page and related build requirements
  - updated copyright sections in scripts
  - enhance update-ca-trust script


author: Kai Engert <kaie@redhat.com> - 2012.87-65.0
changelog:
  - Major rework introducing the SharedSystemCertificates feature, 
    disabled by default.
  - Require the p11-kit package that contains tools to automatically create
    other file format bundles.
  - Added a update-ca-trust script which can be used to enable the
    new system and to regenerate the merged trust output.
  - Refer to the various README files that have been added for more detailed
    explanation of the new system.
  - No longer require rsc for building. Remove use of rcs/ident.
  - Update source URLs and comments, add source file for version information.
  - Add explanation for the future version numbering scheme,
    because the old numbering scheme assumed upstream using cvs,
    which is no longer true, and therefore can no longer be used.


author: Joe Orton <jorton@redhat.com> - 2010.63-4
changelog:
  - fix inclusion of code-signing-only certs in .trust.crt
  - exclude blacklisted root from java keystore too
  - remove trust from DigiNotar root (#734678)


author: Joe Orton <jorton@redhat.com> - 2010-3
changelog:
  - update to certdata.txt r1.58
  - add /etc/pki/tls/certs/ca-bundle.trust.crt using 'TRUSTED CERTICATE' format
  - exclude ECC certs from the Java cacerts database
  - catch keytool failures
  - fail parsing certdata.txt on finding untrusted but not blacklisted cert


author: Joe Orton <jorton@redhat.com> - 2010-2
changelog:
  - fix Java cacert database generation: use Subject rather than Issuer
    for alias name; add diagnostics; fix some alias names.


author: Joe Orton <jorton@redhat.com> 2008-2
changelog:
  - add (but don't use) mkcabundle.pl
  - tweak description
  - use /usr/bin/keytool directly; BR java-openjdk


author: William Roche <william.roche@oracle.com> - 1.0-9.el6.1
changelog:
  - 27678206 - OVS-Agent vbox-img isn't supported on Solaris 11.4
    Signed-off-by: William Roche <william.roche@oracle.com> [bug 27678206]


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-3
changelog:
  - Fix left button press event in windowed mode (sdl894, Resolves: #640682)
  - Remove invalid configure arguments (Resolves: #640687)
  - Kernel joystick structure has grown in unknown 2.6 Linux version (sdl900,
    Resolves: #640694)
  - Do not call memcpy() on overlapping areas (sdl1090, Resolves: #678569)
  - Don't block SDL_WM_GrabInput() if window is not viewable (sdl1155,
    Resolves: #733605)


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - rebase to 1.2.14
  - fixed build for libtool 2.2.6 and newer
  - fix from Josh Boyer <jwboyer@gmail.com>:
    - disable ps3 video support that was added in 2.14.  It fails to
      build on ppc/ppc64


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-13
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip (really)
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-11
changelog:
  - removed joyos2.h from source archive, because of licensing issues
    Resolves: rhbz#537918
    Related: rhbz#543948


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-6
changelog:
  - dropped pulseaudio hack (rhbz#448270)
  - pulseaudio is now used by default
  - simplified spec file for new architecture support (rhbz#433618)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - new version 1.2.13
    - fixes i810 video overlay problem (rhbz#310841)
    - fixes c++ style comments in header files (rhbz#426475)
  - review fixes: spec file cleanup, dropped static libs (rhbz#226402)
  - fixed pulseaudio hack scripts from Warren for multilib systems (rhbz#426579)
  - fixed pulseaudio detection in configure to enable dynamic use of pulseaudio
    libraries


author: Warren Togami <wtogami@redhat.com> 1.2.12-5
changelog:
  - correct stupid mistake that broke SDL-devel
    RPM should error out if a SourceX is defined twice...


author: Warren Togami <wtogami@redhat.com> 1.2.12-4
changelog:
  - Build with --enable-pulseaudio-shared for testing purposes (#343911)
    It is known to not work in some cases, so not enabled by default.
  - Move pulseaudio enabler hack from SDL_mixer (#426275)
  - Make pulseaudio enabler hack conditional.  It will only attempt to use it if
    alsa-plugins-pulseaudio is installed.


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - new version 1.2.12
    fixes TEXTRELs (rhbz#179407)
  - added arm support (rhbz#245411)
    Thanks to Lennert Buytenhek for the patch
  - added alpha support (rhbz#246463)
    Thanks to Oliver Falk for the patch
  - disabled yasm for SDL (rhbz#234823)
    Thanks to Nikolay Ulyanitsky for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - new version 1.2.11
  - fixed man page SDL_ListModes (rhbz#208212)
  - fixed spurious esound, audiofile dependencies (rhbz#217389)
    Thanks to Ville Skyttä for the patch
  - dropped requirements for imake and libXt-devel (rhbz#226402)
  - made nasm arch %{ix86} only (rhbz#226402)
  - dropped O3 from options (rhbz#226402)
  - dropped tagname environment variable (rhbz#226402)


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-6
changelog:
  - dropped libXt build requires, because libSDL does not need libXt at all - 
    this was an autofoo bug (fixed already)
  - fixed multilib devel conflicts (#192749)
  - added buidrequires for imake: AC_PATH_X needs imake currently


author: Christopher Stone <chris.stone@gmail.com> 1.2.10-4
changelog:
  - added missing (build) requires for libXt libXrender libXrandr
  - remove %makeinstall macro (bad practice)
  - use %{buildroot} macro consistantly


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - new version 1.2.10
  - dropped the following patches because they are not needed anymore:
    ppc_modes, gcc4, yuv_mmx_gcc4 and no_exec_stack
  - new pagesize patch (drop PAGE_SIZE, use sysconf(_SC_PAGESIZE) instead)


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-2
changelog:
  - removed rpath
  - using O3 instead of O2, now (SDL_RLEaccel.c compile error)
  - added BuildRequires for nasm


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-5
changelog:
  - dlopen() aRts and esd rather than linking directly to them.
  - make sure aRts and esd are actually used if they're running.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-2
changelog:
  - Rebuild with new aRts, require arts-devel rather than kdelibs-sound-devel
  - Temporarily exclude alpha (compiler bugs)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - output same libraries for sdl-config whether --libs or --static-libs 
    selected.  Fixes compilation of most SDL programs.
  - properly packaged new HTML documentation


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch from Hans de Goede <hans@highrise.nl> for fullscreen toggling.
  - using  --enable-video-x11-dgamouse since it smoothes the mouse some.


author: Sam Lantinga <slouken@devolution.com>
changelog:
  - Re-integrated spec file into SDL distribution
  - 'name' and 'version' come from configure 
  - Some of the documentation is devel specific
  - Removed SMP support from %build - it doesn't work with libtool anyway


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346355


author: Matthias Clasen <mclasen@redhat.com> - 1.1.10-4
changelog:
  - Make default cursor theme inherit dmz-aa instead of Bluecurve
  - Also require the cursor theme package


author: Parag <paragn@fedoraproject.org> - 1.1.10-2
changelog:
  - Merge-Review #226066
  - Removed XFree86-libs, xorg-x11-libs as Obsoletes
  - Removed BR:pkgconfig
  - Few spec cleanups


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.5-1
changelog:
  - Updated libXcursor to version 1.1.5 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Colin Walters <walters@verbum.org> - 2.28.8-8
changelog:
  - Revert use of FAM on NFS - introduces perf regressions for deployments
    which are not using NFS for home directories; this is better handled
    in RHEL7.
    Resolves: #1399726
    Reverts: #725178


author: Colin Walters <walters@redhat.com> - 2.28.8-6
changelog:
  - Backport patch to avoid integer overflow on reuse of GMainContext
    source ids, which qemu hits.
    Resolves: #1212722


author: Matthew Barnes <mbarnes@redhat.com> - 2.28.8-3
changelog:
  - Revert deprecations picked up through rebases to avoid further bugs
    like rhbz#1136304 (devhelp).


author: Colin Walters <walters@redhat.com> - 2.26.1-8
changelog:
  - Split off a separate -doc package (as is done currently in RHEL7)
    to avoid multilib conflicts with gtk-doc.
    Resolves: rhbz#1036097


author: Colin Walters <walters@redhat.com> - 2.26.1-4
changelog:
  - Remove /usr/bin/gsettings and g_settings_*() symbols; many
    projects such as OpenJDK and VMWare Workstation conflate the
    existence of these symbols with the presence of gsettings-desktop-schemas
    schemas such as org.gnome.system.proxy.
    Resolves: rhbz#1035941


author: Colin Walters <walters@redhat.com> - 2.26.1-3
changelog:
  - Explicitly disable systemtap for this rebase; I am not aware
    of a significant number of current users in upstream, and it
    has not to my knowledge been tested in RHEL6.
    Resolves: #1000287


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.1-1
changelog:
  - Update to 2.26.1 to pick up some additional bug fixes.
  - Remove 0001-message_to_write_data_free-Don-t-unref-data-message-.patch
    (included in 2.26.1).
  Resolves: #883021


author: Matthew Barnes <mbarnes@redhat.com> - 2.26.0-3
changelog:
  - Rebase to 2.26.0 based on the Fedora 14 package.
  - Retain glib-2.22.5-gio-hide-dot-mounts.patch
  - Drop all other patches.  Code patches were already merged into
    the 2.26.0 tarball, translation patches no longer apply.
  Resolves: #883021


author: Alexander Larsson <alexl@redhat.com> - 2.18.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: Dan Williams <dcbw@redhat.com> - 2.16.3-3
changelog:
  - Revert upstream changes to g_static_mutex_get_mutex_impl_shortcut that broke
      users of GMutex and GStaticMutex (bgo#316221)


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-3
changelog:
  - More package review feedback:
   * install /etc/profile.d snipplets as 644
   * explain Conflict with libgnomeui
   * remove stale Conflict with glib-devel


author: Matthias Clasen <mclasen@redhat.com> - 2.12.9-2
changelog:
  - Incorporate package review feedback:
   * drop an obsolete Provides:
   * add a -static subpackage
   * explain %check ppc exception
   * align summaries


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Add static libraries to build (#78685, Bernd Kischnick)
  - Bump-and-rebuild for new redhat-rpm-config


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Make -devel package require main package (#45388)
  - Fix description and summary
  - Configure with --disable-gtk-doc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add some portability fixes needed at least on s390
  - copy config.{guess,sub} instead of calling libtoolize


author: Havoc Pennington <hp@redhat.com>
changelog:
  - try a new glib tarball with Makefile changes to work around
    libtool linking to installed .la files
  - make -devel require pkgconfig


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove glib-config.1 manpage from build since
    it conflicts with glib-devel. When we go to 
    glib glib1.2 setup, we should add it back


author: Robbie Harwood <rharwood@redhat.com> - 1.10.3-42z1
changelog:
  - Fix CVE-2015-8629 and CVE-2015-8631
  - Also fix a spec trigger issue that prevents building
  - Resolves: #1306973


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: autoconf" temporarily as long as autoconf is needed


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libfontenc to version 1.0.0 from X11R7 RC4
  - Added libfontenc-1.0.0-get-fontdir-from-pkgconfig.patch which now replaces
    libfontenc-0.99.2-use-datadir-for-encodings.patch by using pkgconfig to
    query fontutil.pc for fontdir.
  - Added "BuildRequires: font-utils >= 1.0.0" to find fontutil.pc
  - Removed libfontenc-0.99.2-use-datadir-for-encodings.patch


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libfontenc to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added libfontenc-0.99.2-use-datadir-for-encodings.patch and invoke aclocal
    and automake to activate the changes.  This fixes a bug reported against
    mkfontscale, in which it looks in _datadir for the font encodings files,
    which was traced back to libfontenc (#173875).
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-2" to ensure that
    /usr/include/X11 is a directory rather than a symlink before this package
    gets installed, to avoid bug (#173384).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libfontenc to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Tomáš Mráz <tmraz@redhat.com> 1.0.1e-48.4
changelog:
  - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
  - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib64/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-8
changelog:
  - DB_ENV->lock_get may self deadlock if user defined locks
    are used and there is only one lock partition defined
    (upstream bz#16415)
  - fix for dd segfaults (upstream bz#16541)
  - reorder patches


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-7
changelog:
  - remove s390 and s390x from java_arches (#474061)
  - BR: tcl-devel for the tclConfig.sh change (#474062)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-1
changelog:
  - update to 4.7.25 (#449735)
  - package static java library only if listed in java_arches
  - move to java-1.6.0-openjdk
  - fix tcl library path
  - drop glibc patch, no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-5
changelog:
  - add upstream patch to fix a race condition between checkpoint
    and DB->close which can result in the checkpoint thread self-deadlocking


author: Jindrich Novy <jnovy@redhat.com> 4.6.18-1
changelog:
  - update to 4.6.18
  - drop upstream patches for 4.5.20 and gcj patch
  - remove nptl-abi-note.S, useless as we are definitely
    running kernel >= 2.4.20 (#245416)
  - move C++ stuff to subpackages to reduce dependency bloat (#220484)
  - package db_codegen
  - correct open() calls so that new db4 compiles with the new glibc


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-2
changelog:
  - sync db4 and compat-db licenses to BSD-style as the result of
    consultation with legal department
  - fix some rpmlint warnings


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-1
changelog:
  - update to db-4.5.20 (#198038)
  - fix BuildRoot
  - drop .64bit patch
  - patch/source URLs now point to correct location


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-7.fc6
changelog:
  - fix memleak caused by SET_TXN macro in xa_db.c, when opening
    database created with DB_XA_CREATE flag (#204920)


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-2
changelog:
  - don't package /usr/share/doc/images in the main db4 package
    and move it to db4-devel (#33328)
  - make db4 LFS capable (#33849)
  - move db4-devel, db4-tcl, db4-java to Development/Libraries
    group instead of System Environment/Libraries (#54320)
  - BuildPrereq -> BuildRequires
  - don't use RPM_SOURCE_DIR
  - Obsoletes db3, db2


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.52-6
changelog:
  - on %{ix86} systems, make the availability of an NPTL-requiring libdb match
    the availability of an NPTL libpthread in glibc > 2.3.3-48
  - run ldconfig in db4-java's %post/%postun
  - when building java support, assume that libgcj is equivalent enough to 1.3


author: Jeff Johnson <jbj@jbj.org> 4.2.52-4
changelog:
  - remove dangling symlinks (#123721 et al).
  - remove db_cxx.so and db_tcl.so symlinks, versioned equivs exist.
  - apply 2 patches from sleepycat.
  - resurrect db4-java using sun jvm-1.4.2.
  - cripple autoconf sufficiently to build db4-java with gcj, without jvm.
  - check javac first, gcj34 next, then gcj-ssa, finally gcj.
  - add ed build dependency (#125180).


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-14
changelog:
  - symlink from %{_libdir}/tls/libdb-4.1.so to the copy in /%{_lib}/tls, so
    that the run-time linker can find the right copy for of apps which use an
    RPATH to point at %{_libdir}/libdb-4.1.so


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-13
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build both with and without support for shared mutex locks, which require NPTL
  - make behavior wrt where we put libdb the same for all OSs
  - revert changes making tcl optional - nesting %if tcl and %ifarch nptl
    doesn't work
  - fix dangling HREFs in utility docs (pointed to main docs dir, while they're
    actually in the -utils docs dir)
  - run ldconfig when installing/removing the -utils subpackage, as it contains
    shared libraries


author: Jeff Johnson <jbj@jbj.org> 4.2.42-0.1
changelog:
  - update to 4.2.42.
  - build in build_unix subdir.
  - eliminate --enable-dump185, db_dump185.c no longer compiles for libdb*.
  - create db4-tcl sub-pkg to isolate libtcl dependencies.


author: Jeff Johnson <jbj@redhat.com> 4.1.25-6
changelog:
  - build with libtool-1.5, which can't recognize the .so in libfoo*.so atm.
  - whack out libtool predep_objects wonkiness.


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-2
changelog:
  - change configure to only warn if JNI includes aren't found, assuming that
    the C compiler can find them
  - remove build requirement on jdkgcj -- gcj is sufficient


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-20
changelog:
  - add dynamic libdb-4.0.so link back to %{_libdir} so that dynamically
    linking with -ldb-4.0 will work again


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-19
changelog:
  - rebuild to use link the shared object with the same libraries we use
    for the bundled utils, should pull in libpthread when needed
  - move libdb.so from /%{_lib} to %{_libdir} where the linker can find it


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - re-enable db.h symlink creation, db_util names, and db[23]-devel obsoletes.
  - make sure that -ldb is functional.


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-3
changelog:
  - remove relocatability stuffs
  - swallow a local copy of db1 and build db185_dump statically with it, to
    remove the build dependency and simplify bootstrapping new arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix dangling docs symlinks
  - fix dangling doc HREFs (#33328)
  - apply the two patches listed at http://www.sleepycat.com/update/3.2.9/patch.3.2.9.html


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't build with --enable-diagnostic.
  - add build prereq on tcl.
  - default value for %_lib macro if not found.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rather than hack *.la (see below), create /usr/lib/libdb-3.1.so symlink.
  - turn off --enable-diagnostic for performance.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove redundant strip of libnss_db* that is nuking symbols.
  - change location in /usr/lib/libdb-3.1.la to point to /lib (#16776).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - summaries from specspo.
  - all of libdb_tcl* (including symlinks) in db3-utils, should be db3->tcl?


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.1.14.
  - create db3-utils sub-package to hide tcl dependency, enable tcl Yet Again.
  - FHS packaging.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - disable --enable-test --enable-debug_rop --enable-debug_wop.
  - disable --enable-posixmutexes --enable-tcl as well, to avoid glibc-2.1.3
    problems.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add 3.0.55.1 alignment patch.
  - add --enable-posixmutexes (linux threads has not pthread_*attr_setpshared).
  - add --enable-tcl (needed -lpthreads).


author: Pavel Cahyna <pcahyna@redhat.com> - 1.7.5-4
changelog:
  - Fix and enable tests (%check).
  - Backport a change which makes tests exit with nonzero status when they fail.
  - Add a fix for upstream tests for CVE-2018-7750 (broken in previous).


author: Pavel Cahyna <pcahyna@redhat.com> - 1.7.5-3
changelog:
  - Fix a security flaw (CVE-2018-7750) in Paramiko's server mode
    (emphasis on **server** mode; this does **not** impact *client* use!)
    Backported from 1.10: https://gist.github.com/stevebeattie/0eb190004e10ba0926ad8782f89676ad
    Resolves #1557140


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.5-1
changelog:
  - v1.7.5 (Ernest) 19jul09
  - -----------------------
  -  * added support for ARC4 cipher and CTR block chaining (Denis Bernard)
  -  * made transport threads daemonize, to fix python 2.6 atexit behavior
  -  * support unicode hostnames, and IP6 addresses (Maxime Ripard, Shikhar
  -    Bhushan)
  -  * various small bug fixes


author: Jeffrey C. Ollie <jeff@ocjtech.us> - 1.7.1-3
changelog:
  - Update to latest Python packaging guidelines.
  - Apply patch that fixes insecure use of RandomPool.


author: Patrick Colp <patrick.colp@oracle.com> - 4.4.4-222.0.9.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=81966751f0f0c4c7fa38ad9bc8f6fda3ddba9943
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - x86/vtx ept-shatter ... (Andrew Cooper)  [Orabug: 30522230]  {CVE-2018-12207}
  - x86: rename public functions in p2m-pt.c (Mukesh Rathor)  [Orabug: 30522230] 
  - Rename "set_p2m_entry" to "p2m_set_entry" (Mukesh Rathor)  [Orabug: 30522230] 
  - x86/mm: add information about faulted page's presence to npfec structure (Boris Ostrovsky)  [Orabug: 30522230] 
  - relocate struct npfec definition into common (Tamas K Lengyel)  [Orabug: 30522230] 
  - EPT: utilize GLA->GPA translation known for certain faults (Jan Beulich)  [Orabug: 30522230] 
  - x86/mem_event: deliver gla fault EPT violation information (Tamas K Lengyel)  [Orabug: 30522230] 
  - x86: consolidate boolean inputs in hvm and p2m into a shared bitmap (Tamas K Lengyel)  [Orabug: 30522230]


author: Elena Ufimtseva <elena.ufimtseva@oracle.com> - 4.4.4-222.0.8.el6
changelog:
  - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8
  - BUILDINFO: xen commit=8bc781c6ccc1afe6dc9466679d0be54e7d1ad051
  - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff
  - BUILDINFO: QEMU traditional commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba
  - BUILDINFO: IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e
  - BUILDINFO: SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee
  - vNUMA: disable vNUMA and restart when construction fails (Elena Ufimtseva)  [Orabug: 30373016] 
  - xen-tools: return correct error code (Elena Ufimtseva)  [Orabug: 30373016]


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-28
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #253892


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-26
changelog:
  - Fix ro.map to generate right unicode for s, S, t, T with comma
  - Fix LatArCyrHeb-16 unicode mapping table to show comma-version
    of s, S, t, T and cedilla-version of s, S, t, T as the same glyph
    (because there is no font in kbd for comma-version)
    Resolves: #329071


author: Miloslav Trmac <mitr@redhat.com> - 1.12-20
changelog:
  - Document that setkeycodes doesn't affect USB keyboards and that the kernel
    doesn't provide the raw scan codes by default
    Resolves: #211803


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-11
changelog:
  - Don't ship character set lists (they are already in glibc-common) and an
    obsolete copy of kbd.FAQ


author: Miloslav Trmac <mitr@redhat.com> - 1.12-5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (patch by Jochen Schmitt)
  - Don't ship patch backup files, simpler way


author: Miloslav Trmac <mitr@redhat.com> - 1.12-4
changelog:
  - Don't ship a patch backup file
  - Mention in setfont.8 that 512-glyph fonts reduce the number of available
    colors (#140935, patch by Dmitry Butskoj)
  - Remove "Meta_acute" from German keymaps (#143124)
  - Make the %triggerun script condition more precise, ignore failure of the
    script


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Steve Dickson <steved@redhat.com> - 0.2.0-10
changelog:
  - Make is_loopback check more permissive (bz 731542)
  - Removed the rpcbind(3) reference in the man page (bz 813898)


author: Steve Dickson <steved@redhat.com> - 0.2.0-2
changelog:
  - Fixed pre scriptle failure during upgrades (bz 507364)
  - Corrected the usage info to match what the rpcbind man
      page says. (bz 466332)
  - Correct package issues (bz 503508)


author: Tom "spot" Callaway <tcallawa@redhat.com> - 0.1.7-3
changelog:
  - Replace the Sun RPC license with the BSD license, with the explicit permission of Sun Microsystems


author: Steve Dickson <steved@redhat.com> 0.1.6-3
changelog:
  - Fixed a typo in the rpcbind.init script that stop warm starts
    from happening with conrestarts
  - Fixed scriptlet failure (bz 462533)


author: Steve Dickson <steved@redhat.com> 0.1.6-2
changelog:
  - Added usptream patches 01 thru 03 that do:
      * Introduce helpers for ipprot/netid mapping
      * Change how we decide on the netids to use for portmap
      * Simplify port live check in pmap_svc.c


author: Steve Dickson <steved@redhat.com> 0.1.4-14
changelog:
  - Fixed a warning in pmap_svc.c
  - Cleaned up warmstarts so uid are longer needed, also
    changed condrestarts to use warmstarts. (bz 428496)


author: Steve Dickson <steved@redhat.com> 0.1.4-13
changelog:
  - Fixed connectivity with Mac OS clients by making sure handle_reply()
    sets the correct fromlen in its recvfrom() call (bz 244492)


author: Steve Dickson <steved@redhat.com> 0.1.4-12
changelog:
  - Changed is_loopback() and check_access() see if the calling
    address is an address on a local interface, just not a loopback
    address (bz 358621).


author: Steve Dickson <steved@redhat.com> 0.1.4-11
changelog:
  - Reworked logic in initscript so the correct exit is 
    used when networking does not exist or is set up
    incorrectly.


author: Steve Dickson <steved@redhat.com> 0.1.4-8
changelog:
  - Fixed typo in init script (bz 248285)
  - Added autoconf rules to turn on secure host checking
    via libwrap. Also turned on host check by default (bz 248284)
  - Changed init script to start service in runlevel 2 (bz 251568)
  - Added a couple missing Requires(pre) (bz 247134)


author: Steve Dickson <steved@redhat.com> 0.1.4-5
changelog:
  - Added dependency on setup which contains the correct
    rpcbind /etc/service entry which in turns stops 
    rpcbind from haning when NIS is enabled. (bz 236865)


author: Jeremy Katz <katzj@redhat.com> - 0.1.4-4
changelog:
  - change man-pages requires into a conflicts as we don't have to have 
    man-pages installed, but if we do, we need the newer version


author: Steve Dickson <steved@redhat.com> 0.1.4-2
changelog:
  - Added dependency on glibc-common which allows the
    rpcinfo command to be installed in the correct place.
  - Added dependency on man-pages so the rpcinfo man 
    pages don't conflict.
  - Added the creation of /var/lib/rpcbind which will be
    used to store state files.
  - Make rpcbind run with the 'rpc' uid/gid when it exists.


author: Steve Dickson <steved@redhat.com> 0.1.4-1
changelog:
  - Initial commit
  - Spec reviewed (bz 228894)
  - Added the Provides/Obsoletes which should
    cause rpcbind to replace portmapper


author: Tomas Orsava <torsava@redhat.com> - 2.6.6-65
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346354


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.6.2.el6uek]
changelog:
  - blk-mq: don't redistribute hardware queues on a CPU hotplug event (Christoph Hellwig)  [Orabug: 26621020]  
  - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells)  [Orabug: 26585986]  {CVE-2016-9604} {CVE-2016-9604} 
  - l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault)  [Orabug: 26586038]  {CVE-2016-10200} 
  - mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman)  [Orabug: 26585938]  {CVE-2016-6213} {CVE-2016-6213} 
  - ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet)  [Orabug: 26578187]  {CVE-2017-9242}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.6.1.el6uek]
changelog:
  - xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)   
  - PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran)  [Orabug: 26339147]  
  - Revert "net/rds: Revert "RDS: add reconnect retry scheme for stalled connections"" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: use different workqueue for base_conn" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: determine active/passive connection with IP addresses" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - Revert "net/rds: prioritize the base connection establishment" (Ajaykumar Hotchandani)  [Orabug: 26444722]  
  - blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch)  [Orabug: 26385993]  
  - blk-mq: Provide freeze queue timeout (Keith Busch)  [Orabug: 26385993]  
  - nvme: Complete all stuck requests (Keith Busch)  [Orabug: 26385993]  
  - nvme: Don't suspend admin queue that wasn't created (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme: Delete created IO queues on reset (Keith Busch)  [Orabug: 26385993]  
  - nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi)  [Orabug: 26385993]  
  - nvme/pci: No special case for queue busy on IO (Keith Busch)  [Orabug: 26385993]  
  - sg: Fix double-free when drives detach during SG_IO (Calvin Owens)  [Orabug: 26408570]  
  - SUNRPC: Handle EADDRNOTAVAIL on connection failures (Trond Myklebust)  [Orabug: 26221921]  
  - ALSA: timer: Fix missing queue indices reset at SNDRV_TIMER_IOCTL_SELECT (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - ALSA: timer: Fix race between read and ioctl (Takashi Iwai)  [Orabug: 26403952]  {CVE-2017-1000380} 
  - xfs: Timely free truncated dirty pages (Jan Kara)  [Orabug: 26452561]  
  - xfs: skip dirty pages in ->releasepage() (Brian Foster)  [Orabug: 26452561]  
  - Revert "SUNRPC: Refactor svc_set_num_threads()" (Kirtikar Kashyap)  [Orabug: 26476721]  
  - Revert "NFSv4: Fix callback server shutdown" (Kirtikar Kashyap)  [Orabug: 26476721]  
  - net/rds: Replace printk in TX path with stat variable (Yuval Shaia)  [Orabug: 26367820]  
  - net: properly release sk_frag.page (Eric Dumazet)  [Orabug: 26354016]  
  - NVMe: Retain QUEUE_FLAG_SG_GAPS flag for bio vector alignment. (Ashok Vairavan)  [Orabug: 26361950]  
  - btrfs: introduce device delete by devid (Anand Jain)  [Orabug: 26362382]  
  - btrfs: enhance btrfs_find_device_by_user_input() to check device path (Anand Jain)  [Orabug: 26362382]  
  - btrfs: make use of btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper btrfs_find_device_by_user_input() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: clean up and optimize __check_raid_min_device() (Anand Jain)  [Orabug: 26362382]  
  - btrfs: create helper function __check_raid_min_devices() (Anand Jain)  [Orabug: 26362382]  
  - char: lp: fix possible integer overflow in lp_setup() (Willy Tarreau)  [Orabug: 26403937]  {CVE-2017-1000363} 
  - NFSv4: Fix callback server shutdown (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - SUNRPC: Refactor svc_set_num_threads() (Trond Myklebust)  [Orabug: 26403977]  {CVE-2017-9059} 
  - ipv6/dccp: do not inherit ipv6_mc_list from parent (WANG Cong)  [Orabug: 26404000]  {CVE-2017-9077} 
  - Signature verification support in kexec_file_load (Alexey Petrenko)  [Orabug: 26426837]  
  - IB/cm: remove unnecessary ib_query_device in PSIF RNR WA (Wei Lin Guay)  [Orabug: 26245885]  
  - aacraid: Update scsi_host_template to use tagged commands (Dave Carroll)  [Orabug: 26291288]  
  - IB/mlx4: Suppress warning for not handled portmgmt event subtype (Mukesh Kacker)  [Orabug: 26308324]  
  - aacraid: initialize scsi shared tag map (Joe Jin)  [Orabug: 26308827]  
  - RDS: Print failed rdma op details if failure is remote access (Rama Nichanamatlu)  [Orabug: 26351414]  
  - bnxt_en: Fix netpoll handling. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add missing logic to handle TPA end error conditions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix xmit_more with BQL. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass in sh parameter to bnxt_set_dflt_rings(). (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Implement xmit_more. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Optimize doorbell write operations for newer chips. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add additional chip ID definitions. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add a callback to inform RDMA driver during PCI shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PCI IDs for BCM57454 VF devices. (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Support for Short Firmware Message (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration. (Michael Chan)  [Orabug: 26402533]  
  - bnxt: add dma mapping attributes (Shannon Nelson)  [Orabug: 26366387]  
  - dma-mapping: add interfaces for mapping pages with attributes (Shannon Nelson)  [Orabug: 26402533]  
  - bnxt_en: allocate enough space for ->ntp_fltr_bmap (Dan Carpenter)  [Orabug: 26402533]  
  - bnxt_en: Restrict a PF in Multi-Host mode from changing port PHY configuration (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Check the FW_LLDP_AGENT flag before allowing DCBX host agent. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add 100G link speed reporting for BCM57454 ASIC in ethtool (Deepak Khungar)  [Orabug: 26402533]  
  - bnxt_en: Fix VF attributes reporting. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Pass DCB RoCE app priority to firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Cap the msix vector with the max completion rings. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add interrupt test to ethtool -t selftest. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add PHY loopback to ethtool self-test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool mac loopback self test. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic ethtool -t selftest support. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add suspend/resume callbacks. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool set_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add ethtool get_wol method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add pci shutdown method. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Add basic WoL infrastructure. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Update firmware interface spec to 1.7.6.2. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Fix DMA unmapping of the RX buffers in XDP mode during shutdown. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Correct the order of arguments to netdev_err() in bnxt_set_tpa() (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Fix NULL pointer dereference in reopen failure path (Sankar Patchineelam)  [Orabug: 26402533]  
  - bnxt_en: Ignore 0 value in autoneg supported speed from firmware. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Check if firmware LLDP agent is running. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Call bnxt_ulp_stop() during tx timeout. (Michael Chan)  [Orabug: 26402533]  
  - bnxt_en: Perform function reset earlier during probe. (Michael Chan)  [Orabug: 26402533]  
  - x86/tsc: Enumerate SKL cpu_khz and tsc_khz via CPUID (Len Brown)  [Orabug: 26387040]  
  - x86/tsc: Save an indentation level in recalibrate_cpu_khz() (Borislav Petkov)  [Orabug: 26387040]  
  - x86/tsc_msr: Remove irqoff around MSR-based TSC enumeration (Len Brown)  [Orabug: 26387040]  
  - perf/x86: Fix time_shift in perf_event_mmap_page (Adrian Hunter)  [Orabug: 26387040]  
  - perf/x86: Improve accuracy of perf/sched clock (Adrian Hunter)  [Orabug: 26387040]  
  - bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal (Paolo Abeni)  [Orabug: 26397292]  
  - net/rds: Add mutex exclusion for vector_load (Håkon Bugge)  [Orabug: 26406403]  
  - block: defer timeouts to a workqueue (Christoph Hellwig)  [Orabug: 25654233]  
  - mlx4: add diagnostic counters via sysfs (Chris Gray)  [Orabug: 25743434]  
  - x86/ras/therm_throt: Do not log a fake MCE for thermal events (Borislav Petkov)  [Orabug: 26355098]  
  - net/rds: Reduce memory footprint in rds_sendmsg (Wei Lin Guay)  [Orabug: 26350965]  
  - macsec: dynamically allocate space for sglist (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - macsec: avoid heap overflow in skb_to_sgvec (Jason A. Donenfeld)  [Orabug: 26051882]  {CVE-2017-7477} 
  - nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields)  [Orabug: 26366009]  {CVE-2017-7645} 
  - xfs: reset b_first_retry_time when clear the retry status of xfs_buf_t (Hou Tao)  [Orabug: 26354399]  
  - xfs: fix max_retries _show and _store functions (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: normalize "infinite" retries in error configs (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: don't reset b_retries to 0 on every failure (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: fix xfs_error_get_cfg for negative errnos (Eric Sandeen)  [Orabug: 26354399]  
  - xfs: add "fail at unmount" error handling configuration (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration handlers for specific errors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configuration of error failure speed (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce table-based init for error behaviors (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: add configurable error support to metadata buffers (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: introduce metadata IO error class (Carlos Maiolino)  [Orabug: 26354399]  
  - xfs: configurable error behavior via sysfs (Carlos Maiolino)  [Orabug: 26354399]  
  - mm: fix new crash in unmapped_area_topdown() (Hugh Dickins)  [Orabug: 26337733]  {CVE-2017-1000364} 
  - mm: larger stack guard gap, between vmas (Hugh Dickins)  [Orabug: 26337733]  {CVE-2017-1000364} 
  - Fix Express lane queue creation. (James Smart)  [Orabug: 26241742]  
  - rds: tcp: Set linger when rejecting an incoming conn in rds_tcp_accept_one (Sowmini Varadhan)  [Orabug: 26298950]  
  - IB/mlx4: Fix CM REQ retries in paravirt mode (Håkon Bugge)  [Orabug: 26304710]  
  - vfio/pci: Fix unsigned comparison overflow (Alex Williamson)   
  - blkback/blktap: don't leak stack data via response ring (Jan Beulich)  [Orabug: 26321947]


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.5.1.el6uek]
changelog:
  - percpu_ref: allow operation mode switching operations to be called concurrently (Tejun Heo)  [Orabug: 26223304]  
  - percpu_ref: restructure operation mode switching (Tejun Heo)  [Orabug: 26223304]  
  - percpu_ref: unify staggered atomic switching wait behavior (Tejun Heo)  [Orabug: 26223304]  
  - percpu_ref: reorganize __percpu_ref_switch_to_atomic() and relocate percpu_ref_switch_to_atomic() (Tejun Heo)  [Orabug: 26223304]  
  - percpu_ref: remove unnecessary RCU grace period for staggered atomic switching confirmation (Tejun Heo)  [Orabug: 26223304]  
  - block: Fix mismerge in queue freeze logic (Martin K. Petersen)  [Orabug: 26223304]  
  - nvme: Add a wrapper for getting the admin queue depth (Martin K. Petersen)  [Orabug: 26247244]  
  - nvme: Remove timeout when deleting queue (Martin K. Petersen)  [Orabug: 26256275]  
  - nvme: Quirks for PM1725 controllers (Martin K. Petersen)  [Orabug: 26033880]  
  - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too (Guilherme G. Piccoli)  [Orabug: 26033880]  
  - nvme/quirk: Add a delay before checking device ready for memblaze device (Wenbo Wang)  [Orabug: 26033880]  
  - nvme/quirk: Add a delay before checking for adapter readiness (Guilherme G. Piccoli)  [Orabug: 26033880]  
  - net/mlx4_core: Use round robin scheme to avoid stale caches (Santosh Shilimkar)  [Orabug: 26265818]  
  - IP/ipoib: Move initialization of ACL instances table to device init phase (Yuval Shaia)  [Orabug: 25993610]  
  - Revert "mlx4_ib: Memory leak on Dom0 with SRIOV." (Hakon Bugge)  [Orabug: 26107170]  
  - Revert "mlx4: avoid multiple free on id_map_ent" (Hakon Bugge)  [Orabug: 26107170]  
  - NVMe: During NVMe probe, get NVMe device information before mapping the device. (Ashok Vairavan)  [Orabug: 26227515]  
  - PCI/AER: include header file (Sudip Mukherjee)  [Orabug: 26138886]  
  - NVMe: reverse IO direction for VUC command code F7 (Ashok Vairavan)  [Orabug: 26138886]  
  - nvme: factor out a add nvme_is_write helper (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: allow for size limitations from transport drivers (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme.h: add constants for PSDT and FUSE values (James Smart)  [Orabug: 26138886]  
  - nvme.h: add AER constants (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme.h: add NVM command set SQE/CQE size defines (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme.h: Add get_log_page command strucure (Armen Baloyan)  [Orabug: 26138886]  
  - nvme.h: add RTD3R, RTD3E and OAES fields (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Only release requested regions (Johannes Thumshirn)  [Orabug: 26138886]  
  - NVMe: Fix removal in case of active namespace list scanning method (Sunad Bhandary)  [Orabug: 26138886]  
  - NVMe: Implement namespace list scanning (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Don't unmap controller registers on reset (Keith Busch)  [Orabug: 26138886]  
  - NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 26138886]  
  - nvme: Limit command retries (Keith Busch)  [Orabug: 26138886]  
  - NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata (Ashok Vairavan)  [Orabug: 26138886]  
  - NVMe: Create discard zero quirk white list (Keith Busch)  [Orabug: 26138886]  
  - nvme: use UINT_MAX for max discard sectors (Minfei Huang)  [Orabug: 26138886]  
  - nvme: move nvme_cancel_request() to common code (Ming Lin)  [Orabug: 26138886]  
  - nvme: update and rename nvme_cancel_io to nvme_cancel_request (Ming Lin)  [Orabug: 26138886]  
  - blk-mq: Export tagset iter function (Sagi Grimberg)  [Orabug: 26138886]  
  - NVMe: Add device ID's with stripe quirk (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Short-cut removal on surprise hot-unplug (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Allow user initiated rescan (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Reduce driver log spamming (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Unbind driver on failure (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Delete only created queues (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 26138886]  
  - nvme: fix nvme_ns_remove() deadlock (Ming Lin)  [Orabug: 26138886]  
  - nvme: switch to RCU freeing the namespace (Ming Lin)  [Orabug: 26138886]  
  - NVMe: correct comment for offset enum of controller registers in nvme.h (Wang Sheng-Hui)  [Orabug: 26138886]  
  - nvme: add helper nvme_cleanup_cmd() (Ming Lin)  [Orabug: 26138886]  
  - nvme: move AER handling to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move namespace scanning to core (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: tighten up state check for namespace scanning (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: introduce a controller state machine (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: remove the io_incapable method (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: nvme_core_exit() should do cleanup in the reverse order as nvme_core_init does (Wang Sheng-Hui)  [Orabug: 26138886]  
  - NVMe: Fix check_flush_dependency warning (Keith Busch)  [Orabug: 26138886]  
  - NVMe: small typo in section BLK_DEV_NVME_SCSI of host/Kconfig (Wang Sheng-Hui)  [Orabug: 26138886]  
  - nvme: fix cntlid type (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: Avoid reset work on watchdog timer function during error recovery (Guilherme G. Piccoli)  [Orabug: 26138886]  
  - nvme: remove dead controllers from a work item (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: silence warning about unused 'dev' (Jens Axboe)  [Orabug: 26138886]  
  - NVMe: switch to using blk_queue_write_cache() (Jens Axboe)  [Orabug: 26138886]  
  - block: add ability to flag write back caching on a device (Jens Axboe)  [Orabug: 26138886]  
  - nvme: Use blk-mq helper for IO termination (Sagi Grimberg)  [Orabug: 26138886]  
  - NVMe: Skip async events for degraded controllers (Keith Busch)  [Orabug: 26138886]  
  - nvme: add helper nvme_setup_cmd() (Ming Lin)  [Orabug: 26138886]  
  - block: add offset in blk_add_request_payload() (Ming Lin)  [Orabug: 26138886]  
  - nvme: rewrite discard support (Ming Lin)  [Orabug: 26138886]  
  - nvme: add helper nvme_map_len() (Ming Lin)  [Orabug: 26138886]  
  - nvme: add missing lock nesting notation (Ming Lin)  [Orabug: 26138886]  
  - NVMe: Always use MSI/MSI-x interrupts (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix reset/remove race (Keith Busch)  [Orabug: 26138886]  
  - nvme: avoid cqe corruption when update at the same time as read (Marta Rybczynska)  [Orabug: 26138886]  
  - NVMe: Expose ns wwid through single sysfs entry (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Remove unused sq_head read in completion path (Jon Derrick)  [Orabug: 26138886]  
  - nvme: fix max_segments integer truncation (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: set queue limits for the admin queue (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Fix 0-length integrity payload (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Don't allow unsupported flags (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Move error handling to failed reset handler (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Simplify device reset failure (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix namespace removal deadlock (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Use IDA for namespace disk naming (Keith Busch)  [Orabug: 26138886]  
  - nvme: expose cntlid in sysfs (Ming Lin)  [Orabug: 26138886]  
  - nvme: return the whole CQE through the request passthrough interface (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: fix Kconfig description for BLK_DEV_NVME_SCSI (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: replace the kthread with a per-device watchdog timer (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: don't poll the CQ from the kthread (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: use a work item to submit async event requests (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Rate limit nvme IO warnings (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Poll device while still active during remove (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Requeue requests on suspended queues (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Allow request merges (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix io incapable return values (Keith Busch)  [Orabug: 26138886]  
  - nvme: split pci module out of core module (Ming Lin)  [Orabug: 26138886]  
  - nvme: split dev_list_lock (Ming Lin)  [Orabug: 26138886]  
  - nvme: move timeout variables to core.c (Ming Lin)  [Orabug: 26138886]  
  - nvme/host: reference the fabric module for each bdev open callout (Sagi Grimberg)  [Orabug: 26138886]  
  - nvme: Log the ctrl device name instead of the underlying pci device name (Sagi Grimberg)  [Orabug: 26138886]  
  - nvme: fix drvdata setup for the nvme device (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Fix possible queue use after freed (Keith Busch)  [Orabug: 26138886]  
  - nvme: switch abort to blk_execute_rq_nowait (Christoph Hellwig)  [Orabug: 26138886]  
  - blk-mq: fix racy updates of rq->errors (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Export NVMe attributes to sysfs group (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Shutdown controller only for power-off (Keith Busch)  [Orabug: 26138886]  
  - NVMe: IO queue deletion re-write (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Remove queue freezing on resets (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Use a retryable error code on reset (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix admin queue ring wrap (Keith Busch)  [Orabug: 26138886]  
  - nvme: make SG_IO support optional (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: fixes for NVME_IOCTL_IO_CMD on the char device (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: synchronize access to ctrl->namespaces (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: Move nvme_freeze/unfreeze_queues to nvme core (Sagi Grimberg)  [Orabug: 26138886]  
  - NVMe: Export namespace attributes to sysfs (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Add pci error handlers (Keith Busch)  [Orabug: 26138886]  
  - nvme: merge iod and cmd_info (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: meta_sg doesn't have to be an array (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: properly free resources for cancelled command (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: simplify completion handling (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: special case AEN requests (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: factor out a few helpers from req_completion (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: fix admin queue depth (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Simplify metadata setup (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Remove device management handles on remove (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Use unbounded work queue for all work (Keith Busch)  [Orabug: 26138886]  
  - nvme: switch abort_limit to an atomic_t (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: merge probe_work and reset_work (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: do not restart the request timeout if we're resetting the controller (Keith Busch)  [Orabug: 26138886]  
  - nvme: simplify resets (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: add NVME_SC_CANCELLED (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: merge nvme_abort_req and nvme_timeout (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: don't take the I/O queue q_lock in nvme_timeout (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: protect against simultaneous shutdown invocations (Keith Busch)  [Orabug: 26138886]  
  - nvme: only add a controller to dev_list after it's been fully initialized (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: only ignore hardware errors in nvme_create_io_queues (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: precedence bug in nvme_pr_clear() (Dan Carpenter)  [Orabug: 26138886]  
  - nvme: fix another 32-bit build warning (Arnd Bergmann)  [Orabug: 26138886]  
  - nvme: refactor set_queue_count (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move chardev and sysfs interface to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move namespace scanning to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move the call to nvme_init_identify earlier (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: add a common helper to read Identify Controller data (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move nvme_{enable,disable,shutdown}_ctrl to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move remaining CC setup into nvme_enable_ctrl (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: add explicit quirk handling (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move block_device_operations and ns/ctrl freeing to common code (Ashok Vairavan)  [Orabug: 26138886]  
  - nvme: use the block layer for userspace passthrough metadata (Keith Busch)  [Orabug: 26138886]  
  - nvme: split __nvme_submit_sync_cmd (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move nvme_setup_flush and nvme_setup_rw to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move nvme_error_status to common code (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: factor out a nvme_unmap_data helper (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: simplify nvme_setup_prps calling convention (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: split a new struct nvme_ctrl out of struct nvme_dev (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: use vendor it from identify (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: split nvme_trans_device_id_page (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: use offset instead of a struct for registers (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: split command submission helpers out of pci.c (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move struct nvme_iod to pci.c (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Precedence error in nvme_pr_clear() (Dan Carpenter)  [Orabug: 26138886]  
  - Update target repo for nvme patch contributions (Jay Freyensee)  [Orabug: 26138886]  
  - nvme: add missing endianess annotations in nvme_pr_command (Christoph Hellwig)  [Orabug: 26138886]  
  - block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV (Christoph Hellwig)  [Orabug: 26138886]  
  - block: add an API for Persistent Reservations (Christoph Hellwig)  [Orabug: 26138886]  
  - NVMe: Add persistent reservation ops (Keith Busch)  [Orabug: 26138886]  
  - nvme: suspend i/o during runtime blk_integrity_unregister (Dan Williams)  [Orabug: 26138886]  
  - nvme include linux types.h (Christoph Hellwig)  [Orabug: 26138886]  
  - nvme: move to a new drivers/nvme/host directory (Jay Sternberg)  [Orabug: 26138886]  
  - NVMe: Set affinity after allocating request queues (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Fix IO for extended metadata formats (Keith Busch)  [Orabug: 26138886]  
  - NVMe: Remove hctx reliance for multi-namespace (Keith Busch)  [Orabug: 26138886]  
  - Revert "nvme: move to a new drivers/nvme/host directory" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "NVMe: reduce admin queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "nvme: Limit command retries" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "nvme: avoid cqe corruption when update at the same time as read" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "NVMe: Don't unmap controller registers on reset" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "NVMe: reverse IO direction for VUC command code F7" (Ashok Vairavan)  [Orabug: 26138886]  
  - Revert "NVMe: reduce queue depth as workaround for Samsung EPIC SQ errata" (Ashok Vairavan)  [Orabug: 26138886]  
  - net/rds: prioritize the base connection establishment (Wei Lin Guay)  [Orabug: 26268911]  
  - net/rds: determine active/passive connection with IP addresses (Wei Lin Guay)  [Orabug: 26268911]  
  - net/rds: use different workqueue for base_conn (Wei Lin Guay)  [Orabug: 26268911]  
  - net/rds: Revert "RDS: add reconnect retry scheme for stalled connections" (Wei Lin Guay)  [Orabug: 26268911]  
  - uek-rpm/config: build tcmu kernel module by default (Shan Hai)  [Orabug: 26270004] [Orabug: 25983319]  
  - target: consolidate backend attribute implementations (Christoph Hellwig)  [Orabug: 26270004]  
  - target: simplify backend driver registration (Christoph Hellwig)  [Orabug: 26270004]  
  - IB/ipoib: Expose acl_enable sysfs file as read only (Yuval Shaia)  [Orabug: 26214325]  
  - xsigo: UEK4-QU4:poor performance discovering 256 FC LUNs w/4 paths per LUN (Pradeep Gopanapalli)  [Orabug: 26199203]  
  - xen-netback: copy buffer on xenvif_start_xmit (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: slightly rework xenvif_rx_skb (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: introduce rx copy mode (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: use gref mappings for Tx buffers (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: generalize recycling for grants (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: add rx page statistics (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: introduce rx page recyling (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: move rx_gso_checksum_fixup into netfront_stats (Joao Martins)  [Orabug: 23585649]  
  - xen-netfront: introduce staging gref pools (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: use gref mappings for Tx requests (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: use gref mappings for Rx requests (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: shorten tx grant copy (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: introduce staging grant mappings ops (Joao Martins)  [Orabug: 23585649]  
  - include/xen: import vendor extension to netif.h (Joao Martins)  [Orabug: 23585649]  
  - xen-netback: fix type mismatch warning (Arnd Bergmann)  [Orabug: 23585649]  
  - xen-netback: fix guest Rx stall detection (after guest Rx refactor) (David Vrabel)  [Orabug: 23585649]  
  - xen/netback: add fraglist support for to-guest rx (Ross Lagerwall)  [Orabug: 23585649]  
  - xen-netback: batch copies for multiple to-guest rx packets (David Vrabel)  [Orabug: 23585649]  
  - xen-netback: process guest rx packets in batches (David Vrabel)  [Orabug: 23585649]  
  - xen-netback: immediately wake tx queue when guest rx queue has space (David Vrabel)  [Orabug: 23585649]  
  - xen-netback: refactor guest rx (David Vrabel)  [Orabug: 23585649]  
  - xen-netback: retire guest rx side prefix GSO feature (Paul Durrant)  [Orabug: 23585649]  
  - xen-netback: separate guest side rx code into separate module (Paul Durrant)  [Orabug: 23585649]  
  - x86/xen/time: setup secondary time info for vdso (Joao Martins)  [Orabug: 23585649]  
  - mlx4_core: Add func name to common error strings to locate uniquely (Mukesh Kacker)  [Orabug: 26087732]  
  - RDS/IB: active bonding port state fix for intfs added late (Mukesh Kacker)  [Orabug: 26095774]  
  - net/packet: fix overflow in check for tp_reserve (Andrey Konovalov)  [Orabug: 26170622]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for tp_frame_nr (Andrey Konovalov)  [Orabug: 26170622]  {CVE-2017-7308} 
  - net/packet: fix overflow in check for priv area size (Andrey Konovalov)  [Orabug: 26170622]  {CVE-2017-7308} 
  - xen-pcifront/hvm: Slurp up "pxm" entry and set NUMA node on PCIe device. (V5) (Konrad Rzeszutek Wilk)   
  - dccp/tcp: do not inherit mc_list from parent (Eric Dumazet)  [Orabug: 26108560]  {CVE-2017-8890}


author: Brian Maly <brian.maly@oracle.com> [4.1.12-94.4.1.el6uek]
changelog:
  - I/O ERROR WHEN A FILE ON ACFS FILESYSTEM IS ATTACHED TO THE GUEST DOMU (Joe Jin)  [Orabug: 25877674]  
  - HID: hid-cypress: validate length of report (Greg Kroah-Hartman)  [Orabug: 25891893]  {CVE-2017-7273} 
  - Revert "xen/events: remove unnecessary call to bind_evtchn_to_cpu()" (Zhenzhong Duan)   
  - NVMe: Use requested sync command timeout (Keith Busch)  [Orabug: 26046907]  
  - xen-blkback: report hotplug-status busy when detach is initiated but frontend device is busy. (Niranjan Patil)  [Orabug: 26086380]  
  - RDS/IB: 4KB receive buffers get posted by mistake on 16KB frag connections. (Venkat Venkatsubra)  [Orabug: 26079995]  
  - mlx4: limit max MSIX allocations (Ajaykumar Hotchandani)  [Orabug: 26088056]  
  - ipv6: catch a null skb before using it in a DTRACE (Shannon Nelson)  [Orabug: 26075879]  
  - sparc64: Do not retain old VM_SPARC_ADI flag when protection changes on page (Khalid Aziz)  [Orabug: 26038830]  
  - nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields)  [Orabug: 25986971]  {CVE-2017-7895} 
  - sparc64: Detect DAX ra+pgsz when hvapi minor doesn't indicate it (Rob Gardner)  [Orabug: 25997533]  
  - sparc64: DAX memory will use RA+PGSZ feature in HV (Rob Gardner)  [Orabug: 25997533] [Orabug: 25931417]  
  - sparc64: Disable DAX flow control (Rob Gardner)  [Orabug: 25997226]  
  - sparc64: DAX memory needs persistent mappings (Rob Gardner)  [Orabug: 25997137]  
  - sparc64: Fix incorrect error print in DAX driver when validating ccb (Sanath Kumar)  [Orabug: 25996975]  
  - sparc64: DAX request for non 4MB memory should return with unique errno (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: DAX request to mmap non 4MB memory should fail with a debug print (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: DAX request for non 4MB memory should return with unique errno (Sanath Kumar)  [Orabug: 25996823]  
  - sparc64: Incorrect print by DAX driver when old driver API is used (Sanath Kumar)  [Orabug: 25996790]  
  - sparc64: DAX request to dequeue half of a long CCB should not succeed (Sanath Kumar)  [Orabug: 25996747]  
  - sparc64: dax_overflow_check reports incorrect data (Sanath Kumar)  [Orabug: 25996655]  
  - sparc64: Ignored DAX ref count causes lockup (Rob Gardner)  [Orabug: 25996628]  
  - sparc64: disable dax page range checking on RA (Rob Gardner)  [Orabug: 25996546]  
  - sparc64: Oracle Data Analytics Accelerator (DAX) driver (Sanath Kumar)  [Orabug: 25996522]  
  - sparc64: Add DAX hypervisor services (Allen Pais)  [Orabug: 25996475]  
  - sparc64: create/destroy cpu sysfs dynamically (Atish Patra)  [Orabug: 21775890] [Orabug: 25216469]  
  - megaraid: Fix unaligned warning (Allen Pais)  [Orabug: 24817799]


author: Milind Changire <mchangir@redhat.com> - 3.7.5-15
changelog:
  - fixes bugs bz#1285226 bz#1285167 bz#1291969 bz#1277944 bz#1288509 
    bz#1293380 bz#1278798 bz#1294816 bz#1285797 bz#1288490 bz#1272409 bz#1219794


author: Milind Changire <mchangir@redhat.com> - 3.7.5-14
changelog:
  - fixes bugs bz#1294487 bz#1293903 bz#1294594 bz#1291386 bz#1294073 
    bz#1281946 bz#1282729 bz#1285797 bz#1272409 bz#1294478


author: Milind Changire <mchangir@redhat.com> - 3.7.5-13
changelog:
  - fixes bugs bz#1293240 bz#1275751 bz#1276273 bz#1285783 bz#1286218 
    bz#1289228 bz#1282729 bz#1291152 bz#1219794 bz#1293228 bz#1293237 bz#1292762 
    bz#1274334 bz#1291195 bz#1292751 bz#1285797 bz#1291560 bz#1291566 bz#1293286 
    bz#1286028


author: Milind Changire <mchangir@redhat.com> - 3.7.5-12
changelog:
  - fixes bugs bz#1285226 bz#1283940 bz#1291052 bz#1275751 bz#1288003 
    bz#1283035 bz#1285238 bz#1290401 bz#1262680 bz#1289893 bz#1289423 bz#1276227


author: Milind Changire <mchangir@redhat.com> - 3.7.5-11
changelog:
  - fixes bugs bz#1287532 bz#1288988 bz#1275751 bz#1289071 bz#1284834 
    bz#1287980 bz#1284387 bz#1287997


author: Milind Changire <mchangir@redhat.com> - 3.7.5-9
changelog:
  - bz#1275971 bz#1285295 bz#1286346 bz#1257343 bz#1286605 bz#1275912 bz#1286604 bz#1264800 bz#1272008 bz#1283563 bz#1250241 bz#1278254 bz#1286927 bz#1247515 bz#1286654 bz#1286637


author: Milind Changire <mchangir@redhat.com> - 3.7.5-7
changelog:
  - fixes bugs bz#1280410 bz#1276248 bz#1269885 bz#1224226 bz#1277088 
    bz#1277028 bz#1279350 bz#1278408 bz#1277562 bz#1283410 bz#1277126 bz#1278279 
    bz#1246007 bz#1275521 bz#1282701 bz#1224928 bz#1283050 bz#1275525 bz#1275998 
    bz#990558 bz#1278754 bz#1224064 bz#1228079 bz#1283566 bz#1271732 bz#1224880 
    bz#1278390 bz#1272929


author: Milind Changire <mchangir@redhat.com> - 3.7.5-6
changelog:
  - fixes bugs bz#1276248 bz#1278399 bz#1265074 bz#1276246 bz#1278723 
    bz#1277359 bz#1276587 bz#1276234 bz#1272452 bz#1276542 bz#1277126 bz#1257209 
    bz#1276541 bz#1265200 bz#1276678 bz#1277043 bz#1275925 bz#1249975 bz#1261248 
    bz#1271999 bz#1264804 bz#1277316 bz#1269557 bz#1278389 bz#1275919 bz#1241436


author: Bala.FA <barumuga@redhat.com> - 3.7.5-4
changelog:
  - fixes bugs bz#1200815 bz#1273703 bz#1227029 bz#1232641 bz#1262627 
    bz#1274411 bz#1236052 bz#1267185 bz#1233486 bz#1269753 bz#1211839 bz#1275158 
    bz#1272407 bz#1272341 bz#1273711 bz#1272409 bz#1248895 bz#1267194 bz#1273249 
    bz#1273260 bz#1275906 bz#1230114 bz#1274595 bz#1275155 bz#1271999 bz#1266878 
    bz#1274334 bz#1275515 bz#1265571 bz#1243797 bz#1272403 bz#1275907


author: Bala.FA <barumuga@redhat.com> - 3.7.5-2
changelog:
  - fixes bugs bz#1228643 bz#1271178 bz#1271184 bz#1271648 bz#1271659 bz#1271705
    bz#1271724 bz#1271725 bz#1271727 bz#1271729 bz#1271732 bz#1271733 bz#1271750
    bz#1271752 bz#1271757


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-10.el6_6
changelog:
  - add a patch to fix a segfault in the regex module
    resolves: #1172165
  - explicitly disable systemd service file generation
  - turn on verbose make output


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-8
changelog:
  - drop patch 5 which introduced a regression
    resolves: #927405
    reverts: #847568
  - add a patch to prevent 'RepeatedMsgReduction' causing missing hostnames
    resolves: #893197
  - add a patch to enable specifying UID/GID as a number
    resolves: #886117
  - add a patch to prevent a segfault in gssapi
    resolves: #862517


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-7
changelog:
  - add a patch to support large groups in the $FileGroup directive
    resolves: #924754
  - add a patch to fix 'pri-text' property format
    resolves: #951727
  - add a patch to fix the behavior of the *QueueMaxFileSize directives
    resolves: #963942


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-6
changelog:
  - the previous patch to enable RFC3339 timestamps revealed a bug
    in the upstream code - adding another patch
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-5
changelog:
  - add a patch to permit RFC3339 timestamps in messages comming from
    the local log socket, patch taken from upstream - commit:
    bfae69d68b0032a383821a54bc52aeff36a90e52
    Resolves: #886004


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-2
changelog:
  - add patch to update information on debugging in the man page
    Resolves: #820311
  - add patch to prevent debug output to stdout after forking
    Resolves: #820996
  - add patch to support ssl certificates with domain names longer than 128 chars
    Resolves: #822118


author: Tomas Heinrich <theinric@redhat.com> 5.8.10-1
changelog:
  - rebase to rsyslog 5.8.10
    Resolves: #803550
    Resolves: #805424
    Resolves: #813079
    Resolves: #813084
  - consider lock file in 'status' action
    Resolves: #807608
  - add impstats and imptcp modules
  - include new license text files
  - specify which versions of sysklogd are obsoleted


author: Tomas Heinrich <theinric@redhat.com> 5.8.7-1
changelog:
  - rebase to rsyslog-5.8.7
    - change license from 'GPLv3+' to '(GPLv3+ and ASL 2.0)'
      http://blog.gerhards.net/2012/01/rsyslog-licensing-update.html
    - remove patches obsoleted by rebase
    - add patches for better sysklogd compatibility (taken from upstream)
    - update included files for the new major version
    Resolves: #672182
    Resolves: #727380
    Resolves: #756664
    Resolves: #767527
    Resolves: #769025
  - add several directories for storing auxiliary data
    Resolves: #740420
  - fix source package URL


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-11
changelog:
  - provide configuration directive for sysklogd message format compatibility
  - provide log format template for sysklogd message format compatibility
    Resolves: #737096


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-8
changelog:
  - workaround the mysql_conf multilib issue by directly using
    the arch-specific script
    Resolves: #694414


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-7
changelog:
  - add patch to correct the behavior of the ActionExecOnlyOnceEveryInterval
    configuration directive
    Resolves: #727208


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-5
changelog:
  - provide omsnmp module in rsyslog-snmp subpackage
    Resolves: #618488
  - modify logrotate configuration to omit boot.log
    Resolves: #683537
  - use correct lock file name
    Resolves: #698705
  - provide ommail module
    Resolves: #702314


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-3
changelog:
  - build rsyslog with PIE and RELRO
    Resolves: #642994
  - add ChangeLog file to documentation
  - add /etc/pki/rsyslog directory


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-2
changelog:
  - Fix a potential segfault upon SIGHUP induced restart
    Resolves: #598421
  - Add Obsoletes: sysklogd
    Resolves: #513277


author: Tomas Heinrich <theinric@redhat.com> 4.6.2-1
changelog:
  - upgrade to new upstream stable version 4.6.2
    Resolves: #554998
  - correct the default value of the OMFileFlushOnTXEnd directive
  - add upstream fix for message-induced off-by-one error
  - change the default value of the HUPisRestart directive to enabled
  - remove autoconf, automake, libtool from BuildRequires
  - change exec-prefix to nil
  - redefine _libdir as it doesn't use _exec_prefix
    Resolves: #591860


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-3
changelog:
  - remove '_smp_mflags' make argument as it seems to be
    producing corrupted builds
    Resolves: #556522


author: Tomas Heinrich <theinric@redhat.com> - 4.4.2-1
changelog:
  - upgrade to new upstream stable version 4.4.2
    Resolves: #554998
  - add support for arbitrary number of open file descriptors
  - run libtoolize to avoid errors due mismatching libtool version
  - change exec-prefix to /


author: Peter Vrabec <pvrabec@redhat.com> 3.21.3-4
changelog:
  - use RPM_OPT_FLAGS
  - use same pid file and logrotate file as syslog-ng (#441664)
  - mark config files as noreplace (#428155)


author: Tomas Heinrich <theinric@redhat.com> 3.21.3-3
changelog:
  - fix a wrong module name in the rsyslog.conf manual page (#455086)
  - expand the rsyslog.conf manual page (#456030)


author: Peter Vrabec <pvrabec@redhat.com> 1.17.1-1
changelog:
  - upstream bug fix release
  - include html docs (#248712)
  - make "-r" option compatible with sysklogd config (248982)


author: John Sobecki <john.sobecki@oracle.com> - 6.2.0.873-27.0.2
changelog:
  iscsiuio: Update Iscsiuio Userspace Tool to v0.7.8.3 (Manish Rangankar, Adheer Chandravanshi, Nilesh Javali) [orabug 25667173] [orabz 15894]
   - iscsiadm : Add header file definition for set_host_ip_opts (Anish Bhatt)
   - iscsid: Changes to support the new qedi transport
   - iscsiuio: Add support for the new qedi transport
   - iscsiuio: v0.7.8.3 Update version and documentation
   - iscsid: Add qedi ping transport hook
   - iscsiuio: fix dhcpv6 transaction-id mismatch error
   - iscsiuio: serialize xmit_mutex lock to prevent iscsiuio seg fault


author: Edward Leung <edward.leung@oracle.com> - 6.2.0.873-27.0.1
changelog:
  iscsiuio: Add QLogic Vendor ID to support newer NX2 HBAs [Orabug: 22302999] (Manjunath Govindashetty)
  - Align log buffers for non-x86 arch (Dave Kleikamp) [orabug 19383793] (Todd Vierling)
  - comment patch 111,112
  - Include patches from QLogic [bug 17260235] (Guangyu Sun)
  - Include useful patches from upstream [bug 16658181] (Guangyu Sun)
  - Rename iscsi-initiator-utils-use-red-hat-for-name.patch to
  iscsi-initiator-utils-use-oracle-for-name.patch and use com.oracle
  in prefix [bug 10625276]


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-27
changelog:
  - 1170750 apply "Set non negotiated params early" from upstream
    to fix SendTargets discovery over iSER with some targets


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1294965 iscsiuio match based on driver to support new hardware without
    adding PCI IDs (still need IDs added to kernel)
  - bnx2i pass through ping support


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-15
changelog:
  - 1125984 iscsistart vlan support
  - 906242 fix segfault from unexpected netlink event during driver load
  - 1181463 iscsiuio update


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - 1054587 iscsiuio update
  - 1053374 upstream backports to support new driver features
  - 1052361 IPC sockaddr compat to communicate with older iscsid on upgrade
  - 1076344 fix handling of multiple oustanding async events


author: Andy Grover <agrover@redhat.com> - 6.2.0.873-6
changelog:
  - Update bnx2i-vlan-boot-support.patch to check session != NULL
    before calling iscsi_sysfs_read_iface


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-3
changelog:
  - 831003 boot over VLAN support patches
  - 916007 replace iscsiuio with code merged upstream 0.7.8.1b
  - 884427 fix for db errors when vdsm creates static entries for
           target portals already setup through discovery
  - 983553 run target refresh in parallel so unreachable doesn't block others


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - Sync with upstream 2.0.873
  - 854776 Bring up network interface for iSCSI boot with bnx2i
  - 811428 make version string reported by iscsiadm match RPM version
  - fix iscsid segfault during qla4xxx login


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.40
changelog:
  - 738192 Fix regression added when handling 738192 where unknown params
    messages got logged by mistake.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.37
changelog:
  - 805467 Have iscsistart/iscsiadm bring up offload net interface.
  - 796574 Fix port handling when hostnames are used for portals.
  - 739843 Fix default iface setup handling.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.36
changelog:
  - 740054 sync iscsiuio to 0.7.2.1
  - 790609 Add ping and host chap support to iscsiadm
  - 636013 scalability testing.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.31
changelog:
  - 749051 Sync iscsiuio to iscsiuio-0.7.0.14g to fix boot hang
    when connection is lost during startup.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.28
changelog:
  - 736116 (again) fix aligment for iface nl msgs.
  - Fix iscsid restart issue when using qla4xxx boot.
  - Fix ipv6 boot when using ibft.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.25
changelog:
  - 732912 Fix return value/msg when iscsiadm fails to log into target
  - 696808 Update iscsiuio to v0.7.0.14.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.23
changelog:
  - 696808 Sync brcm/uio to v0.7.0.8.
  - 715434 Fix iscsiadm command line help discoverydb/discovery2 description.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.21
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code [patch from .14 got dropped
  due to mismerge].


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.20
changelog:
  - 696267 Create a offloaded session if the iscsi_host MAC and ibft
  MAC match. This enables support for Broadcoms hba boot mode.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.18
changelog:
  - fix iscsiadm exit code when iscsid is not running and the
  discovery command is run.
  - 689359 Fix uIP when using DCB for FCoE
  - 691902 Fix iscsiadm SendTargets offload support when the PDU's data len
  is 8K.


author: Mike Christie <mcrhsit@redhat.com> 6.2.0.872.17
changelog:
  - 634021 Fix in .14 added regression during iscsi startup that prevented
  sessions from getting created.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.16
changelog:
  - 529443 fwparam_sysfs: fix pathname manipulation error in
    fwparam_sysfs_boot_info.
  - 529443 Make libiscsi nodes remember the interface they connect through.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.14
changelog:
  - 593269 iscsi was built against libcrypto, but was not using the code
  so this disabled the building of that code.
  - 599539 document brcm_iscsiuio options in man page.
  - 599542 document iscsiadm host mode hostno argument.
  - 631821 iscsi discovery was not incrementing ITT when multiple text
  commands were sent. This prevented discovery from finding all targets.
  - 634021 iscsi init script did not shutdown all sessions during system
  shutdown/reboot causing the host to hang.
  - 658428 iscsi init script should not shutdown sessions when root is
  using them and should not fail startup on all iscsiadm login failures.
  - 635899 sync brcm_iscsiuio to 0.6.2.13 to add support for IPv6, VLAN,
  57711E, and 57712 hardware.
  - 640115 fix hang caused due to race in ISCSI_ERR_INVALID_HOST handling.
  - 640340 fix iscsiadm exit codes.
  - 624437 support hostnames in node mode.


author: Ales Kozumplik <akozumpl@redhat.com> 6.2.0.872.12
changelog:
  - 442980 partial offload boot: Remove the OFFLOAD_BOOT_SUPPORTED ifdef. This
    effectively makes OFFLOAD_BOOT_SUPPORTED always enabled.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.10
changelog:
  - 605663 Log message when iface binding, and doc rp_filter settings
    needed for iface binding.

  p* Mon Aug 5 2010 Mike Christie <mchristi@redhat.com> 6.2.0.872.9
  - 614035 Make iscsi status print session info.
  - Fix uip vlan and 10 gig bugs.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.6
changelog:
  - 602899 Add discovery db support.
  - 595591 Sync brcm_iscsiuio to 0.5.15.
  - 589256 Do not log success message and return ENODEV
  - 601434 Fix iscsiadm handling of non-default port


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.5
changelog:
  - 602286 No need to compile iscsistart as static. This also fixes
    the segfault when hostnames are passed in for the portal ip.


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.4
changelog:
  - 590580 libiscsi get_firmware_foo does not work without first creating a
    libiscsi context
  - 588931 Fix uip and iscsid initialization race
  - 570664 Add basic vlan support for bnx2i's brcm uip daemon
  - 589761 Fix multiple init script bugs: rh_status does not detect offload,
    start/stop does not work due to iscsiadm output being directed to stderr,
    discovery daemon does not get auto started/stopped, iscsid restart does
    not restart daemon if force-start was used.
  - 585649 Fix iscsid "-eq: unary operator expected" bug.


author: Mike Christie <mchristi@redhat.com> 6.2.0.871.1.1-2
changelog:
  - 556985 Fix up init.d iscsid script to remove offload modules and
    load be2iscsi.
  - Enable s390/s390x


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-9
changelog:
  - Don't crash when asked to parse the ppc firmware table more then
    once (which can be done from libiscsi) (#491363)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-7
changelog:
  - libiscsi: use fwparam_ibft_sysfs() instead of fw_get_entry(), as
    the latter causes stack corruption (workaround #490515)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-4
changelog:
  - Fix libiscsi.discover_sendtargets python method to accept None as valid
    authinfo argument (#485217)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-0.2.rc1
changelog:
  - Add force-start iscsid initscript option and use that in "patch to make
    iscsiadm start iscsid when needed" so that iscsid will actual be started
    even if there are no iscsi disks configured yet (rh 470437)
  - Do not start iscsid when not running when iscsiadm -k 0 gets executed
    (rh 470438)


author: Hans de Goede <hdegoede@redhat.com> 6.2.0.870-0.1.rc1
changelog:
  - Rewrite SysV initscripts, fixes rh 441290, 246960, 282001, 436175, 430791
  - Add patch to make iscsiadm complain and exit when run as user instead
    of hang spinning for the database lock
  - Add patch to make iscsiadm start iscsid when needed (rh 436175 related)
  - Don't start iscsi service when network not yet up (in case of using NM)
    add NM dispatcher script to start iscsi service once network is up


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.6
changelog:
  - Rebase to RHEL5 to bring in bug fixes.
  - 437522 iscsi startup does not need to modify with network startup.
  - 436175 Check for running sessions when stopping service.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.2
changelog:
  - Rebase to upstream's bug fix release.
  - Revert init script startup changes from 225915 which reviewers did
   not like.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.754-0.0
changelog:
  - Rebase to upstream.
  - Add back --map functionality but in session mode to match RHEL5 fixes
  - Break up iscsi init script into two, so iscsid can be started early for root


author: Mike Christie <mchristie@redhat.com> - 6.2.0.747-0.0
changelog:
  - Fix several bugs in actor.c (iscsi scheduling). This should result
  - in better dm-multipath intergation and fix bugs where time outs
  - or requests were missed or dropped.
  - Set default noop timeout correctly.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.6
changelog:
  - BZ 209523 make sure the network is not going to get shutdown so
  iscsi devices (include iscsi root and dm/md over iscsi) get syncd.
  - BZ 209415 have package create iscsi var dirs


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.2
changelog:
  - BZ 208050 - change default initiator name to reflect redhat
  - Move pid from /etc/iscsi to /var/run/iscsid.pid


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.1
changelog:
  - Add compat with FC kernel so iscsid will pass startup checks and run.
  - Fix bug when using hw iscsi and software iscsi and iscsid is restarted.
  - Fix session matching bug when hw and software iscsi is both running


author: Mike Christie <mchristie@redhat.com> - 6.1.1.685
changelog:
  - Rebase to upstream to bring in many bug fixes and rm db.
  - iscsi uses /etc/iscsi instead of just etc now


author: Mike Christie <mchristie@redhat.com> - 6.1.1.645
changelog:
  - update to upstream 1.1.645
  - Note DB and interface changed so you must update kernel, tools and DB


author: Mike Christie <mchristi@redhat.com> - 6.0.5.595-2
changelog:
  - add PatM's statics.c file. This is needed for boot since 
    there is no getpwuid static available at that time.


author: Jeremy Katz <katzj@redhat.com> - 6.0.5.595-1
changelog:
  - ensure that we respect %{optflags}
  - cleaned up initscript to make use of standard functions, return right 
    values and start by default
  - build iscsistart as a static binary for use in initrds


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to svn rev 595 to fix several bugs
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


