# changelog

author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-1
changelog:
  - the 1.2.7 release
  - remove the ds-replication sub-package - there will be a new package for it
  - remove the selinux policy - dirsrv policy will be provided by the base OS


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Errata Patches in patch files
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - bugs fixed in released code
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.5.a3
changelog:
  - Bug 676598 - 389-ds-base multilib: file conflicts
  - split off libs into a separate -libs package
  - remove old crufty fedora-ds stuff


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Resolves: Bug 680575 - Rebase 389-ds-base to pick the latest features and fixes 
  - Resolves: Bug 681720 - setup-ds-admin.pl - improve hostname validation
  - Resolves: Bug 681611 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Resolves: Bug 681550 - setup-ds-admin.pl --debug does not log to file
  - Resolves: Bug 681379 - ns-slapd segfaults if I have more than 100 DBs
  - Resolves: Bug 680290 - setup-ds.pl should set SuiteSpotGroup automatically
  - Resolves: Bug 681351 - crash in ldap-agent when using OpenLDAP
  - Resolves: Bug 681332 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Resolves: Bug 680305 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.7.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689908 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689895 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 689889 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 688730 - Exported tombstone cannot be imported correctly
  - Bug 684349 - slapd crashing when traffic replayed
  - Bug 682897 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - introduce the concept of the srcprerel - with rc2, we did not rebase
  - the source, we are still using the .rc1 source tarball, so we use
  - srcprerel of .rc1 but package pre-release is .rc2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
  - bump version to 1.2.8.rc4 - bump ds console version to 1.2.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693523 - Unable to change schema online
  - Bug 693520 - matching rules do not inherit from superior attribute type
  - Bug 693522 - nsMatchingRule does not work with multiple values
  - Bug 693519 - cannot use localized matching rules
  - Bug 693516 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-2
changelog:
  - added srcver because the version from the source is now
  - different than the source in the package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - Resolves: Bug 697663 - memory leak: entryusn value is leaked when an entry is deleted
  - Resolves: Bug 699458 - windows sync can lose old multi-valued attribute values when a new value is added
  - Resolves: Bug 700215 - ldclt core dumps
  - Resolves: Bug 700665 - Linked attributes callbacks access free'd pointers after close
  - Resolves: Bug 701057 - userpasswd not replicating


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-2
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-3
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - cannot use wildcard in ExclusiveArch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-4
changelog:
  - Resolves: Bug 705172 - 389-ds should only be supported and supplied in channels for i386 and x86_64 Server distributions - RHEL 6.1 0day Advisory
  - use ix86 macro instead of hardcoded i386 etc.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.4-1
changelog:
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 713317 - Cert renewal for attrcrypt and encchangelog
  - Bug 711266 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 712167 - ns-slapd segfaults using suffix referrals
  - Bug 709868 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 711516 - Support upgrade from Red Hat Directory Server
  - Bug 711241 - memory leak found by reliab12
  - Bug 711265 - Cannot disable SSLv3 and use TLS only
  - Bug 711513 - slapd stops responding


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.5-1
changelog:
  - Bug 718351 - Intensive updates on masters could break the consumer's cache
  - Bug 714298 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.6-1
changelog:
  - Bug 720452 - RDN with % can cause crashes or missing entries
  - Bug 720051 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 720458 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 720459 - Update sudo schema


author: Nathan Kinder <nkinder@redhat.com> - 1.2.8.7-1
changelog:
  - Bug 726136 - memberOf plug-in can deadlock when used with other plug-ins
  - Bug 725912 - Instance upgrade fails when upgrading 389-ds-base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 733443 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 734267 - upgradednformat failed to add RDN value - subtree and user account lockout policies implemented?
  - Bug 733434 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 733442 - Ignore an error 32 in this case since we're adding a new AutoMember definition
  - Bug 733440 - RFE: add option to allow server to start with an expired certificate


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.11-1
changelog:
  - Bug 739196 - Consolidate DS and DS replication bits in one package in RHEL 6.2
  - There were two patches in ds-replication for RHEL 6.2 that were added post
  - rebase - the two patches for 722292 - these are now in the 389-ds-base package
  - and have been cherry-picked to the RHEL-6 internal branch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.12-1
changelog:
  - Bug 742661 - allow resource limits to be set for paged searches
  -  independently of limits for other searches/operations
  - Bug 742381 - part2 - MOD operations with chained delete/add get
  -  back error 53 on backend config
  - Bug 742382 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
  - Bug 742381 - MOD operations with chained delete/add get back
  -  error 53 on backend config
  - Bug 739959 - Allow separate fractional attrs for incremental and total protocols


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.13-1
changelog:
  - Bug 742381 - part3 - MOD operations with chained delete/add get
  -  back error 53 on backend config


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.15-1
changelog:
  - Bug 752577 - crash when simple paged fails to send entry to client
  - Bug 757897 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 757898 - Fix Coverity (11104) Resource leak: ids_sasl_user_to_entry (slapd/saslbind.c)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.16-1
changelog:
  - Bug 759301 - Incorrect entryUSN index under high load in replicated environment
  - Bug 743979 - Add slapi_rwlock API and use POSIX rwlocks
  - WARNING - patches 0030 and 0031 remove and add back the file configure
  - this is necessary because the merge commit to "rebase" RHEL-6 to 1.2.9.6
  - seriously messed up configure - so in order to add the patch for 743979
  - which also touched configure, the file had to be removed and added back
  - also note that the commit for the RHEL-6 branch to remove configure does
  - not work - the way patch works, it has to match every line exactly in
  - order to remove the file, and because the merge commit messed things
  - up, it doesn't work
  - So, DO NOT TOUCH 0030-remove-configure-to-get-rid-of-merge-conflict.patch
  - BECAUSE IT IS HAND CRAFTED and not generated by git format-patch
  - if you must regenerate this file,
  - git format-patch ...args... to generate a file in patch format
  - remove all of the patch matches (all the lines beginning with -)
  - get the 1.2.9.6 version of configure from the source tarball
  - wc -l configure to get the number of lines in the file
  - sed 's/^/-/' configure >> thefile.patch
  - edit thefile.patch to have the right number of lines and have the
  - patch commands in the correct place
  - PROFIT!!!


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.1-1
changelog:
  - Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10
  - Resolves: Bug 790491 - 389 DS Segfaults during replica install in FreeIPA


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Resolves: Bug 766989 - Rebase 389-ds-base to 1.2.10
  - Resolves: Bug 796770 - crash when replicating orphaned tombstone entry


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-2
changelog:
  - Resolves: Bug 800215 - Certain CMP operations hang or cause ns-slapd to crash 
  - Resolves: Bug 800217 - fix valgrind reported issues


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-4
changelog:
  - Resolves: Bug 803930 - ipa not starting after upgade because of missing data
  - get rid of posttrans - move update code to post


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-5
changelog:
  - Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-6
changelog:
  - Resolves: Bug 811291 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - typo in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-9
changelog:
  - Resolves: Bug 815991 - crash in ldap_initialize with multiple threads
  -  previous fix was still crashing in ldclt


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-11
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - 1.2.10.2-10 was built from the private branch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-12
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  - Resolves: Bug 821542 - letters in object's cn get converted to lowercase when renaming object


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-14
changelog:
  - Resolves: Bug 819643 - Database RUV could mismatch the one in changelog under the stress
  -- patch 0015 fixes a small memleak in previous patch


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-16
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  - Resolves: Bug 830256 - Audit log - clear text password in user changes


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-17
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0019 fixes deref issue.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-18
changelog:
  - Resolves: Bug 830001 - unhashed#user#password visible after changing password
  -- patch 0020 disallows users' direct modify on unhashed#user#password


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.2-19
changelog:
  - Resolves: Bug 834096 - slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - Resolves: Bug 800051 Rebase 389-ds-base to 1.2.11
  - Resolves: Bug 742054 SASL/PLAIN binds do not work 
  - Resolves: Bug 742381 MOD operations with chained delete/add get back error 53 on backend config
  - Resolves: Bug 746642 [RFE] define pam_passthru service per subtree
  - Resolves: Bug 757836 logconv.pl restarts count on conn=0 instead of conn=1
  - Resolves: Bug 768084 [RFE] Allow automember to work on entries that have already been added
  - Resolves: Bug 782975 krbExtraData is being null modified and replicated on each ssh login
  - Resolves: Bug 803873 Sync with group attribute containing () fails
  - Resolves: Bug 818762 winsync should not delete entry that appears to be out of scope
  - Resolves: Bug 830001 unhashed#user#password visible after changing password [rhel-6.4]
  - Resolves: Bug 830256 Audit log - clear text password in user changes
  - Resolves: Bug 830331 ns-slapd exits/crashes if /var fills up
  - Resolves: Bug 830334 Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 830335 restore of replica ldif file on second master after deleting two records shows only 1 deletion
  - Resolves: Bug 830336 db deadlock return should not log error
  - Resolves: Bug 830337 usn + mmr = deletions are not replicated
  - Resolves: Bug 830338 Change DS to purge ticket from krb cache in case of authentication error
  - Resolves: Bug 830340 Make the CLEANALLRUV task one step
  - Resolves: Bug 830343 managed entry sometimes doesn't delete the managed entry
  - Resolves: Bug 830344 [RFE] Improve replication agreement status messages
  - Resolves: Bug 830346 ADD operations not in audit log
  - Resolves: Bug 830347 389 DS does not support multiple paging controls on a single connection
  - Resolves: Bug 830348 Slow shutdown when you have 100+ replication agreements
  - Resolves: Bug 830349 cannot use & in a sasl map search filter
  - Resolves: Bug 830353 valgrind reported memleaks and mem errors
  - Resolves: Bug 830355 [RFE] improve cleanruv functionality
  - Resolves: Bug 830356 coverity 12625-12629 - leaks, dead code, unchecked return
  - Resolves: Bug 832560 [abrt] 389-ds-base-1.2.10.6-1.fc16: slapi_attr_value_cmp: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Resolves: Bug 833202 transaction retries need to be cache aware
  - Resolves: Bug 833218 ldapmodify returns Operations error
  - Resolves: Bug 833222 memberOf attribute and plugin behaviour between sub-suffixes
  - Resolves: Bug 834046 [RFE] Add nsTLS1 attribute to schema and objectclass nsEncryptionConfig
  - Resolves: Bug 834047 Fine Grained Password policy: if passwordHistory is on, deleting the password fails.
  - Resolves: Bug 834049 [RFE] Add schema for DNA plugin
  - Resolves: Bug 834052 [RFE] limiting Directory Manager (nsslapd-rootdn) bind access by source host (e.g. 127.0.0.1)
  - Resolves: Bug 834053 [RFE] Plugins - ability to control behavior of modifyTimestamp/modifiersName
  - Resolves: Bug 834054 Should only update modifyTimestamp/modifiersName on MODIFY ops
  - Resolves: Bug 834056 Automembership plugin fails in a MMR setup, if data and config area mixed in the plugin configuration
  - Resolves: Bug 834057 ldap-agent crashes on start with signal SIGSEGV
  - Resolves: Bug 834058 [RFE] logconv.pl : use of getopts to parse commandline options
  - Resolves: Bug 834060 passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Resolves: Bug 834061 [RFE] RHDS: Implement SO_KEEPALIVE in network calls.
  - Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store
  - Resolves: Bug 834064 dnaNextValue gets incremented even if the user addition fails
  - Resolves: Bug 834065 Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Resolves: Bug 834074 [RFE] Disable replication agreements
  - Resolves: Bug 834075 logconv.pl reporting unindexed search with different search base than shown in access logs
  - Resolves: Bug 835238 Account Usability Control Not Working
  - Resolves: Bug 836386 slapi_ldap_bind() doesn't check bind results
  - Resolves: Bug 838706 referint modrdn not working if case is different
  - Resolves: Bug 840153 Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  - Resolves: Bug 841600 Referential integrity plug-in does not work when update interval is not zero
  - Resolves: Bug 842437 dna memleak reported by valgrind
  - Resolves: Bug 842438 Report during startup if nsslapd-cachememsize is too small
  - Resolves: Bug 842440 memberof performance enhancement
  - Resolves: Bug 842441 "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  - Resolves: Bug 847868 [RFE] support posix schema for user and group sync
  - Resolves: Bug 850683 nsds5ReplicaEnabled can be set with any invalid values.
  - Resolves: Bug 852087 [RFE] add attribute nsslapd-readonly so we can reference it in acis
  - Resolves: Bug 852088 server to server ssl client auth broken with latest openldap
  - Resolves: Bug 852839 variable dn should not be used in ldbm_back_delete


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Resolves: Bug 847868 [RFE] support posix schema for user and group sync
  -  fix upgrade issue with plugin config schema
  -  posix winsync has default plugin precedence of 25


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Resolves: Bug 852202 Ipa master system initiated more than a dozen simultaneous replication sessions, shut itself down and wiped out its db
  - Resolves: Bug 855438 CLEANALLRUV task gets stuck on winsync replication agreement


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Resolves: Bug 856657 dirsrv init script returns 0 even when few or all instances fail to start
  - Resolves: Bug 858580 389 prevents from adding a posixaccount with userpassword after schema reload


author: Noriko Hosoi<nhosoi@redhat.com> - 1.2.11.15-2
changelog:
  - Resolves: Bug 834063 [RFE] enable attribute that tracks when a password was last set on an entry in the LDAP store; Ticket #478 passwordTrackUpdateTime stops working with subtree password policies 
  - Resolves: Bug 847868 [RFE] support posix schema for user and group sync; Ticket #481 expand nested posix groups
  - Resolves: Bug 860772 Change on SLAPI_MODRDN_NEWSUPERIOR is not evaluated in acl 
  - Resolves: Bug 863576 Dirsrv deadlock locking up IPA
  - Resolves: Bug 864594 anonymous limits are being applied to directory manager


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-3
changelog:
  - Resolves: Bug 870158 - slapd entered to infinite loop during new index addition
  - Resolves: Bug 870162 - Cannot abandon simple paged result search
  - c970af0 Coverity defects
  - 1ac087a Fixing compiler warnings in the posix-winsync plugin
  - 2f960e4 Coverity defects
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes


author: Noriko Hosoi <nhoso@redhat.com> - 1.2.11.15-4
changelog:
  - Resolves: Bug 868841 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Resolves: Bug 868853 - Winsync: DS error logs report wrong version of Windows AD when winsync is configured.
  - Resolves: Bug 875862 - crash in DNA if no dnamagicregen is specified
  - Resolves: Bug 876694 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Resolves: Bug 876727 - Search with a complex filter including range search is slow
  - Ticket #495 - internalModifiersname not updated by DNA plugin (Bug 834053)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-6
changelog:
  - Resolves: Bug 880305 - spec file missing dependencies for x86_64 6ComputeNode
  -   use perl-Socket6 on RHEL6


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-7
changelog:
  - Resolves: Bug 830355 - [RFE] improve cleanruv functionality 
  - Resolves: Bug 876650 - Coverity revealed defects 
  - Ticket #20 - [RFE] Allow automember to work on entries that have already been added (Bug 768084)
  - Resolves: Bug 834074 - [RFE] Disable replication agreements
  - Resolves: Bug 878111 - ns-slapd segfaults if it cannot rename the logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-8
changelog:
  - Resolves: Bug 887855 - RootDN Access Control plugin is missing after upgrade from RHEL63 to RHEL64


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-10
changelog:
  - Resolves: Bug 889083 - For modifiersName/internalModifiersName feature, internalModifiersname is not working for DNA plugin


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-12
changelog:
  - Resolves: Bug 910581 - dse.ldif is 0 length after server kill or machine kill
  - Resolves: Bug 908861 - Error messages encountered when using POSIX winsync
  - Resolves: Bug 907985 - DNA: use event queue for config update only at the start up
  - Resolves: Bug 830334 - Invalid chaining config triggers a disk full error and shutdown
  - Resolves: Bug 906583 - DS returns error 20 when replacing values of a multi-valued attribute  (only when replication is enabled)
  - Resolves: Bug 906005 - Valgrind reports memleak in modify_update_last_modified_attr
  - Resolves: Bug 905825 - PamConfig schema not updated during upgrade
  - Resolves: Bug 913215 - ns-slapd segfaults while trying to delete a tombstone entry
  - Resolves: Bug 913229 - unauthenticated denial of service vulnerability in handling of LDAPv3 control data


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-13
changelog:
  bump version to 1.2.11.15-13
  - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)
  - Resolves: Bug 923502 - Coverity issue 13091
  - Resolves: Bug 923407 - Deadlock in DNA plug-in (ticket 634)
  - Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 923504 - crash in aci evaluation (ticket 628)
  - Resolves: Bug 928159 - unintended information exposure when anonymous access is set to rootdse (ticket 47308)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-14
changelog:
  - Resolves: Bug 921937 - ns-slapd crashes sporadically with segmentation fault in libslapd.so (ticket 627)
  - Resolves: Bug 923503 - cleanAllRUV task fails to cleanup config upon completion (ticket 623)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-18
changelog:
  - Bump version to 1.2.11.15-18
  - Resolves: Bug 970995 - DS not shutting down when disk monitoring threshold is reached to half. (Ticket 47385)
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold. (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-19
changelog:
  - Bump version to 1.2.11.15-19
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold(part 2). (ticket 47427)
  - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47741)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-19
changelog:
  - Bump version to 1.2.11.15-19
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 3). (ticket 47427)


author: Mark Reynolds <mreynolds@redhat.com> - 1.2.11.15-20
changelog:
  - Resolves: Bug 984970 - Overflow in nsslapd-disk-monitoring-threshold(part 5 limits not displayed correctly). (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-21
changelog:
  This patch is found broken and duplicated.  Getting rid of it in 1.2.11.15-22.
    commit 2b3a50d55707ffa281c922ec188850576b757934
    Author: Mark Reynolds <mreynolds@redhat.com>
    Date:   Tue Jul 23 10:28:45 2013 -0400
    Add patch 0049 for Tickets-47427-47441


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-22
changelog:
  - Bump version to 1.2.11.15-22
  - Resolves: Bug 923909 - 389-ds-base cannot handle Kerberos tickets with PAC (ticket 632)
  - Resolves: Bug 928159 - CVE-2013-1897 389-ds: unintended information exposure when rootdse is enabled
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47367)
  - Resolves: Bug 951616 - error syncing group if group member user is not synced (ticket 47327)
  - Resolves: Bug 953052 - DESC should not be empty as per RFC 2252 (ldapv3) (ticket 47376)
  - Resolves: Bug 957305 - DS instance crashes under a high load (ticket 47349)
  - Resolves: Bug 957864 - Simple paged results should support async search (ticket 47347)
  - Resolves: Bug 958522 - loading an entry from the database should use str2entry_fast (ticket 531)
  - Resolves: Bug 962885 - RHEL 6.2 to 6.4 ipa upgrade selinuxusermap data not replicating (ticket 47362)
  - Resolves: Bug 963234 - When integrating with Red Hat IDM/DS, an LDAP protocol error is thrown (ticket 47361)
  - Resolves: Bug 966781 - new ldap connections can block ldaps and ldapi connections (ticket 47359)
  - Resolves: Bug 968383 - Wrong error code return when using EXTERNAL SASL and untrusted certificate (ticket 580)
  - Resolves: Bug 968503 - flush_ber error sending back start_tls response will deadlock (ticket 47375)
  - Resolves: Bug 969210 - make listen backlog size configurable (ticket 47377)
  - Resolves: Bug 970995 - RHDS not shutting down when disk monitoring threshold is reached to half. (ticket 47385)
  - Resolves: Bug 971033 - connections attribute in cn=snmp,cn=monitor is counted twice (ticket 47383)
  - Resolves: Bug 971966 - 389 DS Replication failures due to Fractional updates (ticket 47386)
  - Resolves: Bug 972976 - ldbm errors when adding/modifying/deleting entries (ticket 47392)
  - Resolves: Bug 973583 - ns-slapd instance crashed with signal 11 SIGSEGV (ticket 47391)
  - Resolves: Bug 974361 - Account policy plugin fails to lock user when policy is created for individual users to lock based to createtimestamp. (ticket 47397)
  - Resolves: Bug 974719 - rhds90 crash on tombstone modrdn (ticket 47396)
  - Resolves: Bug 974875 - Attributes fail to be encrypted/decrypted properly when replicated (ticket 47393)
  - Resolves: Bug 975243 - DS9 still observes altStateAttrName as createTimestamp when attribute is removed from the account policy (ticket 47395)
  - Resolves: Bug 975250 - Changelog deadlock replication failures with DNA (ticket 47410)
  - Resolves: Bug 976546 - Attribute names are incorrect in search results (ticket 47402)
  - Resolves: Bug 979169 - allow setting db deadlock rejection policy (ticket 47409)
  - Resolves: Bug 979435 - Replication problem with add-delete requests on single-value (ticket 47424)
  - Resolves: Bug 979515 - CVE-2013-2219 Directory Server: ACLs inoperative in some search scenarios
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold (ticket 47427)
  - Resolves: Bug 983091 - Memory leak in 389-ds-base 1.2.11.15 (ticket 47428)
  - Resolves: Bug 986131 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative. (ticket 47435)
  - Resolves: Bug 986424 - fix recent compiler warnings (ticket 47378)
  - Resolves: Bug 986857 - Disk Monitoring not checking filesystem with logs (ticket 47441)
  - Resolves: Bug 987703 - memleaks in set_krb5_creds (ticket 47421)
  - Resolves: Bug 988562 - deadlock after adding and deleting entries (ticket 47449)
  - Resolves: Bug 989692 - Sorting with attributes in ldapsearch gives incorrect result (ticket 543)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-23
changelog:
  - Bump version to 1.2.11.15-23
  - Resolves: Bug 1000632 - CVE-2013-4283 389-ds-base: ns-slapd crash due to bogus DN
  - Resolves: Bug 1002260 - server fails to start after upgrade(schema error) (ticket 47318)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-24
changelog:
  - Bump version to 1.2.11.15-24
  - Resolves: Bug 982325 - Overflow in nsslapd-disk-monitoring-threshold; Changed CONFIG_INT to CONFIG_LONG for nsslapd-disk-monioring-threshold (ticket 47427)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-25
changelog:
  - Bump version to 1.2.11.15-25
  - Resolves: Bug 1006846 - 2Master replication with SASL/GSSAPI auth broken (ticket 47523)
  - Resolves: Bug 1007452 - Under specific values of nsDS5ReplicaName, replication may get broken or updates (ticket 47489)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-26
changelog:
  - Bump version to 1.2.11.15-26
  - Resolves: Bug 947583 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (ticket 47534)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-27
changelog:
  - Bump version to 1.2.11.15-27
  - Resolves: Bug 1013735 - CLEANALLRUV doesnt run across all replicas (ticket 47509)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-28
changelog:
  - Bump version to 1.2.11.15-28
  - Resolves: Bug 1016038 - Users from AD sub OU does not sync to IPA (ticket 47488)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-30
changelog:
  - Resolves: bug 1024977 CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-32
changelog:
  - Release 1.2.11.15-32
  - Resolves: bug 1074848 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-6.6] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-33
changelog:
  - Release 1.2.11.15-33
  - Resolves: bug 1044218 - fix memleak caused by 47347 (DS 47623)
  - Resolves: bug 1071707 - rhds91 389-ds-base-1.2.11.15-31.el6_5 crash on paged searches followed by simple srch (DS 47707)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-34
changelog:
  - Release 1.2.11.15-34
  - Resolves: bug 1109952 - memory leak in ldapsearch filter objectclass=* (DS 47780)
  - Resolves: bug 1109443 - Server hangs in cos_cache when adding a user entry (DS 47649)
  - Resolves: bug 1109333 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled. (DS 47793)
  - Resolves: bug 1109335 - Parent numsubordinate count can be incorrectly updated if an error occurs (DS 47782)
  - Resolves: bug 1109337 - Nested tombstones become orphaned after purge (DS 47767)
  - Resolves: bug 1109352 - Tombstone purging can crash the server if the backend is stopped/disabled (DS 47766)
  - Resolves: bug 1109356 - Coverity issue in 1.3.3 (DS 47740)
  - Resolves: bug 1109358 - A tombstone entry is deleted by ldapdelete (DS 47731)
  - Resolves: bug 1109361 - rsa_null_sha should not be enabled by default (DS 47637)
  - Resolves: bug 1109363 - valgrind - value mem leaks, uninit mem usage (DS 47455)
  - Resolves: bug 1109373 - provide default syntax plugin (DS 47369)
  - Resolves: bug 1109377 - Environment variables are not passed when DS is started via service (DS 47693)
  - Resolves: bug 1109379 - changelog iteration should ignore cleaned rids when getting the minCSN (DS 47627)
  - Resolves: bug 1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415)
  - Resolves: bug 1109384 - logconv.pl man page missing -m,-M,-B,-D (DS 47447)
  - Resolves: bug 1109387 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1028344 - Slow ldapmodify operation time for large quantities of multi-valued attribute values (DS 346)
  - Resolves: bug 985270  - [RFE] Add Password adminstrators to RHDS 9 as in http://directory.fedoraproject.org/wiki/Password_Administrator (DS 417, 458, 47522)
  - Resolves: bug 1070720 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 1095847 - CoS cache re-scanning severely impacts performance (DS 47762)
  - Resolves: bug 1103287 - logconv.pl memory continually grows (DS 47446)
  - Resolves: bug 1106917 - managed entry plugin fails to update member  pointer on modrdn operation (DS 47813)
  - Resolves: bug 1048987 - memory leak in ldapsearch filter objectclass=* (DS 47780)
  - Resolves: bug 1077895 - Memory leak with proxy auth control (DS 47743)
  - Resolves: bug 1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)
  - Resolves: bug 1083272 - RHEL6.6 389-ds-base slapd segfault during ipa-replica-instal (DS 47448)
  - Resolves: bug 1086454 - ACI warnings in error log (DS 47670)
  - Resolves: bug 1086889 - empty modify returns LDAP_INVALID_DN_SYNTAX (DS 47772)
  - Resolves: bug 1086901 - mem leak in do_bind when there is an error (DS 47773)
  - Resolves: bug 1086903 - mem leak in do_search - rawbase not freed upon certain error (DS 47774)
  - Resolves: bug 1086907 - Performing deletes during tombstone purging results in operation errors (DS 47771)
  - Resolves: bug 1088171 - 7-bit check plugin does not work for userpassword attribute (DS 47423)
  - Resolves: bug 1090176 - #481 breaks possibility to reassemble memberuid list (DS 47770)
  - Resolves: bug 1092097 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone (DS 47787)
  - Resolves: bug 1094277 - IPA Server Slow Performance, high CPU usage of ns-slapd (DS 47426)
  - Resolves: bug 1097002 - Problem with deletion while replicated (DS 47764)
  - Resolves: bug 1098653 - db2bak.pl error with changelogdb (DS 47804)
  - Resolves: bug 1103337 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..." (DS 47809)
  - Resolves: bug 1001037 - WinSync removes User must change password flag on the Window side (DS 47492)
  - Resolves: bug 1004876 - idlistscanlimit per index/type/value (DS 47504)
  - Resolves: bug 1008021 - Self entry access ACI not working properly (DS 47331)
  - Resolves: bug 1009122 - replication stops with excessive clock skew (DS 47516)
  - Resolves: bug 1012699 - DSUtil.pm needs to check $res variable (DS 422)
  - Resolves: bug 1013133 - logconv.pl - RFE - track bind info (DS 356)
  - Resolves: bug 1013134 - Improve memory management in logconv.pl (DS 419)
  - Resolves: bug 1013135 - logconv.pl tool removes the access logs contents if "-M" is is not correctly used (DS 471)
  - Resolves: bug 1013138 - logconv.pl should handle microsecond timing (DS 539)
  - Resolves: bug 1013140 - logconv.pl -m not working for all stats (DS 47336)
  - Resolves: bug 1013141 - logconv.pl missing stats for starttls, ldapi, and autobind (DS 611)
  - Resolves: bug 1013142 - logconv.pl -m time calculation is wrong (DS 47341)
  - Resolves: bug 1013152 - add etimes to per second/minute stats (DS 47348)
  - Resolves: bug 1013160 - Indexed search are logged with 'notes=U' in the access logs (DS 47354)
  - Resolves: bug 1013161 - improve logconv.pl performance with large access logs (DS 47387)
  - Resolves: bug 1013162 - logconv warning - Use of comma-less variable list is deprecated (DS 47461)
  - Resolves: bug 1013163 - logconv.pl uses /var/tmp for BDB temp files (DS 47501)
  - Resolves: bug 1013164 - Fix various issues with logconv.pl (DS 47520)
  - Resolves: bug 1013165 - logconv: some stats do not work across server restarts (DS 47533)
  - Resolves: bug 1014111 - [RFE - RHDS9] CLI report to monitor replication (DS 47538)
  - Resolves: bug 1014351 - Coverity fixes - 12023, 12024, and 12025 (DS 47540)
  - Resolves: bug 1016717 - memory leak in range searches (DS 47517)
  - Resolves: bug 1022500 - Winsync plugin segfault during incremental backoff (DS 47581)
  - Resolves: bug 1024337 - Overflow in nsslapd-disk-monitoring-threshold on i686 (DS 47638)
  - Resolves: bug 1026956 - 1.2.11.29 crash when removing entries from cache (DS 47577)
  - Resolves: bug 1027496 - Replication Failures related to skipped entries due to cleaned rids (DS 47585)
  - Resolves: bug 1031222 - hard coded limit of 64 masters in agreement and changelog code (DS 47587)
  - Resolves: bug 1032315 - attrcrypt fails to find unlocked key (DS 47596)
  - Resolves: bug 1032317 - entries with empty objectclass attribute value can be hidden (DS 47591)
  - Resolves: bug 1034265 - 7-bit check plugin not checking MODRDN operation (DS 47641)
  - Resolves: bug 1044106 - logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949 (DS 47550)
  - Resolves: bug 1044108 - logconv: -V does not produce unindexed search report (DS 47551)
  - Resolves: bug 1049029 - Windows Sync group issues (DS 47642)
  - Resolves: bug 1053232 - modify-delete userpassword (DS 47678)
  - Resolves: bug 1053766 - ldapdelete returns non-leaf entry error while trying to remove a leaf entry (DS 47736)
  - Resolves: bug 1057805 - Size returned by slapi_entry_size is not accurate (DS 47677)
  - Resolves: bug 1060385 - Logconv.pl with an empty access log gives lots of errors (DS 47713)
  - Resolves: bug 1062763 - single valued attribute replicated ADD does not work (DS 47692)
  - Resolves: bug 1070583 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 _ (DS 47729)
  - Resolves: bug 1073530 - Enrolling a host into IdM/IPA always takes two attempts (IPA 3377, DS 47704)
  - Resolves: bug 1074076 - e_uniqueid fails to set if an entry is a conflict entry (DS 47735)
  - Resolves: bug 1074305 - Under heavy stress, failure of turning a tombstone into glue (DS 47737)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-36
changelog:
  - Release 1.2.11.15-36
  - Resolves: bug 1088171 - revert - 7-bit check plugin does not work for userpassword attribute (DS 47423)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-37
changelog:
  - Release 1.2.11.15-37
  - Resolves: bug 1113606 - server restart wipes out index config if there is a default index (DS 47831)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47821)
  - Resolves: bug 1080185 - Creating a glue fails if one above level is a conflict or missing (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-38
changelog:
  - Release 1.2.11.15-38
  - Resolves: bug 1080185 - revert - Creating a glue fails if one above level is a conflict or missing (DS 47750;Patch233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-39
changelog:
  - Release 1.2.11.15-39
  - Resolves: #1123863
    EMBARGOED CVE-2014-3562 - unauthenticated information disclosure (Bug 1123477)
  - Resolves: #1123863
    High contention on computed attribute lock (DS 616)
  - Resolves: #1062763
    single valued attribute replicated ADD does not work (DS 47692)
  - Resolves: #1121596
    Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1014111
    Repl-monitor.pl ignores the provided connection parameters (DS 47862)
  - Resolves: #1115281
    New defects found in 389-ds-base-1.2.11 (DS 47863)
  - Resolves: #1112729
    paged results control is not working in some cases when we have a subsuffix. (DS 47824)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-40
changelog:
  - Release 1.2.11.15-40
  - Resolves: #1130252 - dirsrv not running with old openldap (DS 47875)
  - Resolves: #1103287 - logconv.pl memory continually grows (DS 47446)
  - Resolves: #1121596 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (DS 443)
  - Resolves: #1109381 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist (DS 415)
  - Resolves: #1128759 - Performance degradation with scope ONE after some load (DS 47874)
  - Resolves: #1127612 - Filter AND with only one clause should be optimized (DS 47872)
  - Resolves: #1014111 - repl-monitor fails to convert "*" to default values (DS 47862)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-42
changelog:
  - Release 1.2.11.15-42
  - Resolves: #1129660 - Adding users to user group throws Internal server error.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-43
changelog:
  - Release 1.2.11.15-43
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-44
changelog:
  - Release 1.2.11.15-44
  - Resolves: #1079098 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748) - Simple bind hangs after enabling password policy


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-45
changelog:
  - Release 1.2.11.15-45
  - Resolves: #1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (#47885)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-49
changelog:
  - Release 1.2.11.15-49
  - Resolves: #1168150 - CVE-2014-8105: information disclosure through 'cn=changelog' subtree
  - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915)
  - Resolves: #1136882 - default nsslapd-sasl-max-buffer-size should be 2MB (DS 47457)
  - Resolves: #1161909 - ACI's are replaced by "ACI_ALL" after editing goup of ACI's including invalid one (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-50
changelog:
  - Release 1.2.11.15-50
  - Resolves: #1130990 - Problem with single value attribute MMR replication (DS 47915, DS 569)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-51
changelog:
  - Release 1.2.11.15-51
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)
  - Resolves: #1171308 - Don't add unhashed password mod if we don't have an unhashed value (DS 47752)
  - Resolves: #1167976 - memberof skip nested groups breaks the plugin (DS 47963)
  - Resolves: #1185025 - ldclt needs to support SSL Version range (DS 47996)
  - Resolves: #1183820 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: #1155569 - nsslapd-db-locks modify not taking into account. (DS 47934)
  - Resolves: #1145072 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: #1144092 - During schema reload sometimes the search  returns no results (DS 47973)
  - Resolves: #1145374 - WinSync - manual replica refresh removes AD-only member values from DS and AD in groups (DS 47884)
  - Resolves: #1193243 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV (DS 47659)
  - Resolves: #1150368 - provide enabled ciphers as search result (DS 47880)
  - Resolves: #1153739 - Add SSL/TLS version info to the access log (DS 47945)
  - Resolves: #1118285 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928)
  - Resolves: #1193241 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: #1179763 - COS cache doesn't properly mark vattr cache as  invalid when there are multiple suffixes (DS 47981)
  - Resolves: #1175868 - Incorrect assumption in ndn cache (DS 547)
  - Resolves: #1159124 - perl scripts not returning expected error code (DS 47962)
  - Resolves: #1115960 - Nested COS definitions can be incorrectly  processed (DS 47980)
  - Resolves: #1175868 - Backport of Normalized DN Cache (DS 408)
  - Resolves: #1174892 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)
  - Resolves: #1174892 - Need to refresh cache entry after called betxn postop plugins (DS 47750)
  - Resolves: #1193235 - Fix coverity issues (2014/12/16) (DS 47965)
  - Resolves: #1193235 - Fix coverity issues (2014/11/24) (DS 47965)
  - Resolves: #1169974 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: #1169975 - Fix coverity issue (DS 47969)
  - Resolves: #1169975 - COS memory leak when rebuilding the cache (DS 47969)
  - Resolves: #1170706 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: #1167976 - skip nested groups breaks memberof fixup task (DS 47963)
  - Resolves: #1167976 - RFE - memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: #1171357 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: #1162704 - Memory leak in password admin if the admin entry does not exist (DS 47958)
  - Resolves: #1162704 - PasswordAdminDN attribute is not properly returned to client (DS 47952)
  - Resolves: #1145379 - Fix backport issue to 1.2.11 (DS 47900)
  - Resolves: #1145379 - Server fails to start if password admin is set (DS 47900)
  - Resolves: #1145379 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: #1141735 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24 (DS 47907)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-52
changelog:
  - Release 1.2.11.15-52
  - Resolves: #1193235 - Fix coverity issues and compiler warnings - 2014/12/16, 2014/11/24, 2015/2/18 (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-53
changelog:
  - Release 1.2.11.15-53
  - Resolves: #1202502 - memory leak in new_passwdPolicy (1.2.11 only) (DS 48135)
  - Resolves: #1202062 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-54
changelog:
  - Release 1.2.11.15-54
  - Resolves: #1207983 - disable writing unhashed#user#password to changelog (DS 561)
  - Resolves: #1207024 - IPA Replicate creation fails with error "Update failed! Status: [10 Total update abortedLDAP error: Referral]" (DS 47942)
  - Resolves: #1211077 - nsslapd-ndn-cache-enabled returns 1 or 0 instead of "on" or "off" (DS 408)
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1210996 - Disable SSL v3, by default [389-ds-base-1.2.11 only] (DS 47928)
  - Resolves: #1214074 - Need a way to abort a cleanallruv abort task (DS 48154)
  - Resolves: #1212657 - Password is not correctly passed to perl command line tools if it contains shell special characters. (DS 48143)
  - Resolves: #1218341 - ns-slapd crash related to paged results (DS 48146)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-55
changelog:
  - Release 1.2.11.15-55
  - Resolves: #1118285 - Lowering the log level of "Configured SSL version range" message (1.2.11 only) (DS 48180)
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1219208 - Remove cleanAllRUV task limit of 4 (DS 48158)
  - Resolves: #1219218 - Improve CleanAllRUV logging (DS 48151)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-57
changelog:
  - Release 1.2.11.15-57
  - Resolves: #1223068 - ldapdelete fails with -r option to delete a sub suffix (DS 48146)
  - Resolves: #1219990 - bind on db chained to AD returns err=32 (DS 48183)
  - Resolves: #1219208 - cleanAllRUV task limit not being enforced correctly (DS 48158)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-58
changelog:
  - Release 1.2.11.15-58
  - Resolves: #1223068 - Regression introduced by the simple paged results fixes. (DS 48146)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-59
changelog:
  - Release 1.2.11.15-59
  - Resolves: #1211006 - start/stop/restart-dirsrv utilities should ignore admin-serv directory (DS 48148)
  - Resolves: #1203338 - ns-slapd double free or corruption crash (DS 48149)
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-60
changelog:
  - Release 1.2.11.15-60
  - Resolves: #1228402 - Individual abandoned simple paged results request has no chance to be cleaned up (DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-62
changelog:
  - Release 1.2.11.15-62
  - Resolves: #1260004 - regression - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-63
changelog:
  - Release 1.2.11.15-63
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-64
changelog:
  -Release 1.2.11.15-64
  - Resolves: #1268204 - ns-slapd crashing frequently cause is unknown (DS 48192)
  - Resolves: #1268772 - pagedresults - when timed out, search results could have been already freed. (DS 48299)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-65
changelog:
  -Release 1.2.11.15-65
  - Resolves: #1265972 - Fractional replication evaluates several times the same CSN (DS 48266)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-66
changelog:
  -Release 1.2.11.15-66
  - Resolves: #1272327 - CleanAllRUV should completely clean changelog (DS 48208)
  - Resolves: #1273132 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-68
changelog:
  -Release 1.2.11.15-68
  - Resolves: #1278696 - SimplePagedResults -- abandon could happen between the abandon check and sending results -- Fixing a regression introduced in 1.2.11.15-68 (DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-69
changelog:
  -Release 1.2.11.15-69
  - Resolves: #1289844 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same modify operation (DS 48370)
  - Resolves: #1290722 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-70
changelog:
  -Release 1.2.11.15-70
  - Resolves: #1298095 - 1.2.11.15-68.el6_7 ns-slapd crash in ipa context - c_mutex lock memory corruption and self locks (DS 48406, revert DS 48338)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-71
changelog:
  -Release 1.2.11.15-71
  - Resolves: #1306572 - slapd process crashes on entry modification (DS 47964)
  - Resolves: #1309962 - keep alive entries can break replication (DS 48445)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.11.15-72
changelog:
  -Release 1.2.11.15-72
  - Resolves: #1314241 - Double free while adding entries (DS 48287)
  - Resolves: #1314729 - change severity of some messages related to "keep alive" entries (DS 48420)


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
changelog:
  Resolves: #609595
  - Fix to read connection configuration from stdin, so no conf file is stored now
  - Fix to read Xauth user password from stdin
  - Fix to delete the secret file as soon as read by Openswan
  - Fixed the issue of world readable conf and secret files
  - Modifed GUI to remove unused configuration boxes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-3.20100411git
changelog:
  Resolves: #609595
  - Due to changes in NMVpnPluginUiInterface struct in NM, import and export
    fields had to be changed to import_from_file and export_to_file, respectively
  - Rebuilding as build was failing due to the above changes


author: Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-5.20100411git
changelog:
  Resolves: #617016
  - Support for reading phase1 and phase2 algorithms through GUI
  - Fixed chanelog to reference correct bz 617016, and bumped release number.


author: Paul Wouters <pwouters@redhat.com> - 0.8.0-9
changelog:
  Resolves: #1267394
  - Add libreswan softlinks for nm helper to support libreswan dropin
  - Support for libreswan env vars PLUTO_PEER_DNS_INFO, PLUTO_PEER_DOMAIN_INFO and libreswan_reason


author: Sam Lantinga <slouken@devolution.com>
changelog:
  - Re-integrated spec file into SDL distribution
  - 'name' and 'version' come from configure 
  - Some of the documentation is devel specific
  - Removed SMP support from %build - it doesn't work with libtool anyway


author: Tim Powers <timp@redhat.com>
changelog:
  - applied patch from Hans de Goede <hans@highrise.nl> for fullscreen toggling.
  - using  --enable-video-x11-dgamouse since it smoothes the mouse some.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - output same libraries for sdl-config whether --libs or --static-libs 
    selected.  Fixes compilation of most SDL programs.
  - properly packaged new HTML documentation


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-2
changelog:
  - Rebuild with new aRts, require arts-devel rather than kdelibs-sound-devel
  - Temporarily exclude alpha (compiler bugs)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.3-5
changelog:
  - dlopen() aRts and esd rather than linking directly to them.
  - make sure aRts and esd are actually used if they're running.


author: Thomas Woerner <twoerner@redhat.com> 1.2.6-2
changelog:
  - removed rpath
  - using O3 instead of O2, now (SDL_RLEaccel.c compile error)
  - added BuildRequires for nasm


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-1
changelog:
  - new version 1.2.10
  - dropped the following patches because they are not needed anymore:
    ppc_modes, gcc4, yuv_mmx_gcc4 and no_exec_stack
  - new pagesize patch (drop PAGE_SIZE, use sysconf(_SC_PAGESIZE) instead)


author: Christopher Stone <chris.stone@gmail.com> 1.2.10-4
changelog:
  - added missing (build) requires for libXt libXrender libXrandr
  - remove %makeinstall macro (bad practice)
  - use %{buildroot} macro consistantly


author: Thomas Woerner <twoerner@redhat.com> 1.2.10-6
changelog:
  - dropped libXt build requires, because libSDL does not need libXt at all - 
    this was an autofoo bug (fixed already)
  - fixed multilib devel conflicts (#192749)
  - added buidrequires for imake: AC_PATH_X needs imake currently


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-1
changelog:
  - new version 1.2.11
  - fixed man page SDL_ListModes (rhbz#208212)
  - fixed spurious esound, audiofile dependencies (rhbz#217389)
    Thanks to Ville Skyttä for the patch
  - dropped requirements for imake and libXt-devel (rhbz#226402)
  - made nasm arch %{ix86} only (rhbz#226402)
  - dropped O3 from options (rhbz#226402)
  - dropped tagname environment variable (rhbz#226402)


author: Thomas Woerner <twoerner@redhat.com> 1.2.12-1
changelog:
  - new version 1.2.12
    fixes TEXTRELs (rhbz#179407)
  - added arm support (rhbz#245411)
    Thanks to Lennert Buytenhek for the patch
  - added alpha support (rhbz#246463)
    Thanks to Oliver Falk for the patch
  - disabled yasm for SDL (rhbz#234823)
    Thanks to Nikolay Ulyanitsky for the patch


author: Warren Togami <wtogami@redhat.com> 1.2.12-4
changelog:
  - Build with --enable-pulseaudio-shared for testing purposes (#343911)
    It is known to not work in some cases, so not enabled by default.
  - Move pulseaudio enabler hack from SDL_mixer (#426275)
  - Make pulseaudio enabler hack conditional.  It will only attempt to use it if
    alsa-plugins-pulseaudio is installed.


author: Warren Togami <wtogami@redhat.com> 1.2.12-5
changelog:
  - correct stupid mistake that broke SDL-devel
    RPM should error out if a SourceX is defined twice...


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-1
changelog:
  - new version 1.2.13
    - fixes i810 video overlay problem (rhbz#310841)
    - fixes c++ style comments in header files (rhbz#426475)
  - review fixes: spec file cleanup, dropped static libs (rhbz#226402)
  - fixed pulseaudio hack scripts from Warren for multilib systems (rhbz#426579)
  - fixed pulseaudio detection in configure to enable dynamic use of pulseaudio
    libraries


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-6
changelog:
  - dropped pulseaudio hack (rhbz#448270)
  - pulseaudio is now used by default
  - simplified spec file for new architecture support (rhbz#433618)


author: Hans de Goede <hdegoede@redhat.com> 1.2.13-7
changelog:
  - Rewrite pulseaudio support to stop the crackle crackle with the
    new glitch free pulseaudio, this also gives us much better latency,
    as good as with directly using alsa (rh 474745, sdl 698)
  - Workaround an obscure bug in the inline-asm revcpy function (by disabling it) 
    This fixes Ri-li crashing on i386 (rh 484121, rh 484362, sdl 699)


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-11
changelog:
  - removed joyos2.h from source archive, because of licensing issues
    Resolves: rhbz#537918
    Related: rhbz#543948


author: Thomas Woerner <twoerner@redhat.com> 1.2.13-13
changelog:
  - added repackage.sh script to remove joyos2,h and symbian.zip (really)
  - added comment about riva_mmio.h license


author: Thomas Woerner <twoerner@redhat.com> 1.2.14-1
changelog:
  - rebase to 1.2.14
  - fixed build for libtool 2.2.6 and newer
  - fix from Josh Boyer <jwboyer@gmail.com>:
    - disable ps3 video support that was added in 2.14.  It fails to
      build on ppc/ppc64


author: Petr Pisar <ppisar@redhat.com> - 1.2.14-3
changelog:
  - Fix left button press event in windowed mode (sdl894, Resolves: #640682)
  - Remove invalid configure arguments (Resolves: #640687)
  - Kernel joystick structure has grown in unknown 2.6 Linux version (sdl900,
    Resolves: #640694)
  - Do not call memcpy() on overlapping areas (sdl1090, Resolves: #678569)
  - Don't block SDL_WM_GrabInput() if window is not viewable (sdl1155,
    Resolves: #733605)


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added signal handling patch from Dean Gaudet <dgaudet@arctic.org> that
    is based on a change made in bash 2.0.  Should fix some early exit
    problems with suspends and fg.


author: Ian Macdonald <ianmacd@xs4all.nl>
changelog:
  - upgraded to version 2.02
  - Alpha, MIPS & Sparc patches removed due to lack of test platforms
  - glibc & signal patches no longer required
  - added documentation subpackage (doc)


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - add some collected patches for bash2
  - change it over to be the main bash package
  - install man-pages root:root
  - obsolete bash2, bash2-doc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04beta5
  - adapt patches
  - Fix up bashrc
  - Don't put in bashrc1, this should be done by the bash1 package
  - use install -c instead of plain install to work on *BSD
  - remove the collected patches - they're now in the base version.
  - make compressed man pages optional


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 2.04 final
  - remove the echo, pwd, test and kill man pages from the package,
    we're getting them from sh-utils


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-1
changelog:
  - Update to 2.05
  - Change PROMPT_COMMAND in bashrc for xterms
    to something less space consuming (#24159)
  - Provide plugs for alternate prompt commands (#30634), but don't
    default to them


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-2
changelog:
  - bash comes with its own copy of readline... Add the patches we're
    applying in the readline package.


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05-5
changelog:
  - Don't set BASH_ENV in .bash_profile, it causes .bashrc to be sourced
    twice in interactive non-login shells.
  - s/Copyright/License/


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.05a-9
changelog:
  - Add patch from Ulrich Drepper to get better error messages when trying
    to launch an application with a bad ELF interpreter (e.g. libc5 ld.so)
    (#60870)


author: Tim Waugh <twaugh@redhat.com> 2.05b-4
changelog:
  - Fix history substitution modifiers in UTF-8 (bug #70294, bug #71186).
  - Fix ADVANCE_CHAR at end of string (bug #70819).
  - docs: CWRU/POSIX.NOTES no longer exists, but ship POSIX.


author: Tim Waugh <twaugh@redhat.com> 2.05b-6
changelog:
  - Add the (4) patches from ftp.gnu.org (bug #75888, bug #72512).
  - Ship '.' man page, which doesn't get picked up by glob.
  - Don't install files not shipped when building.
  - Locale shell variables fix (bug #74701).


author: Tim Waugh <twaugh@redhat.com> 2.05b-23
changelog:
  - Fix a warning message (bug #79629).
  - Don't remove generated source during build, for debuginfo package.
  - Don't build with AFS support (bug #86514).


author: Tim Waugh <twaugh@redhat.com> 3.0-2
changelog:
  - Fixed brace expansion (bug #129128).
  - Build with AFS support again, since bug #86514 seems fixed upstream
    (bug #129094).


author: Tim Waugh <twaugh@redhat.com> 3.0-5
changelog:
  - Make trap usage string show POSIX usage (bug #128938).
  - Updated ${x[@]:1} expansion fix from bug-bash list.
  - Updated patch to fix unset array crash (from bug-bash list).


author: Tim Waugh <twaugh@redhat.com> 3.0-13
changelog:
  - Check for EINVAL from waitpid() and avoid WCONTINUED in that case.
  - Fixed jobs4 test.
  - Applied experimental upstream patch for trap compatibility.
  - Re-make documentation to reflect source changes.


author: Tim Waugh <twaugh@redhat.com> 3.0-21
changelog:
  - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - Added code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (bug #115493).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed AFS support for output redirection, so that the correct errors
    are reported for other filesystems (bug #155373).


author: Tim Waugh <twaugh@redhat.com> 3.0-36
changelog:
  - Added Url: tag (bug #172770).
  - Do not explicitly gzip info pages (bug #172770).
  - Fix permissions on bashbug (bug #172770).


author: Tim Waugh <twaugh@redhat.com> 3.0-40
changelog:
  - Fix read memleak when reading from non-blocking fd (bug #173283).
  - Missed another loop for improved sighandler patch (bug #169231).


author: Tim Waugh <twaugh@redhat.com> 3.1-1
changelog:
  - 3.1.
  - No longer need ia64, utf8, multibyteifs, jobs, sigpipe,
    read-e-segfault, manpage, crash, pwd, afs, subshell patches.
  - Remove wrap patch for now.
  - Use upstream patch to fix arrays.


author: Tim Waugh <twaugh@redhat.com> 3.1-2
changelog:
  - No longer need loadables, mbinc or shellfunc patches.
  - Use literal single-quote in bash man page where appropriate (bug #177051).


author: Tim Waugh <twaugh@redhat.com> 3.2-1
changelog:
  - Build requires autoconf and gettext.
  - 3.2.  No longer need aq, login, ulimit, sighandler or read-memleak
    patches.


author: Tim Waugh <twaugh@redhat.com> 3.2-5
changelog:
  - Added triggers for install-info (bug #225609).
  - Use full path to utilities in scriptlets (bug #225609).
  - Fix missing sh-bangs in example scripts (bug #225609).
  - Post requires ncurses (bug #224567).
  - Removed Prefix tag (bug #225609).
  - Fixed BuildRoot tag (bug #225609).
  - Removed trailing full-stop from summary (bug #225609).
  - Spec file is now UTF-8 (bug #225609).
  - Removed obsolete Obsoletes (bug #225609).
  - Moved 'make check' to new 'check' section (bug #225609).
  - Removed uses of RPM_SOURCE_DIR (bug #225609).
  - Fixed macros in changelog (bug #225609).
  - Changed tabs to spaces (bug #225609).


author: Tim Waugh <twaugh@redhat.com> 3.2-7
changelog:
  - Reinstated this change:
    - Post requires ncurses (bug #224567).
  - Reverted this change:
    - Added triggers for install-info (bug #225609).


author: Pete Graner <pgraner@redhat.com> - 3.2-15
changelog:
  - Update to the Improve bash $RANDOM pseudo RNG (bug #234906) 
    now works with subshells and make $RANDOM on demand thus reducing the 
    amount of AVCs thrown.


author: Pete Graner <pgraner@redhat.com> - 3.2-17
changelog:
  - Added bash32-018 upstream official patch
  - Added bash32-020 upstream official patch
  - Added bash32-019 upstream official patch


author: Pete Graner <pgraner@redhat.com> - 3.2-18
changelog:
  - Added bash32-021 upstream official patch
  - Added bash32-025 upstream official patch
  - Added bash32-024 upstream official patch
  - Added bash32-023 upstream official patch
  - Added bash32-022 upstream official patch


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-19
changelog:
  - fix cursor position when prompt has one invisible character (#358231)
  - dropped examples/loadables/ from docs, since it wasn't possible to build them
    anyway (#174380)
  - fix #286861: Wrong input confuses bash's arithmetic unit permanently
  - fix #344411: $RANDOM stays the same when job executed in the background


author: Tomas Janousek <tjanouse@redhat.com> - 3.2-20
changelog:
  - Added bash32-026 upstream official patch
  - Added bash32-027 upstream official patch (#249987)
  - Added bash32-028 upstream official patch
  - Added bash32-029 upstream official patch (#286861)
  - Added bash32-030 upstream official patch
  - Added bash32-031 upstream official patch (#358231)
  - Added bash32-032 upstream official patch
  - Added bash32-033 upstream official patch
  - Fix insert command repeating in vi mode (#190350)


author: Roman Rakus <rrakus@redhat.com> - 3.2-28
changelog:
  - Removing Requires for mktemp and ncurses, which cause
    dependencing loop
  - Enabling #define SSH_SOURCE_BASHRC, because ssh changed.
    Resolves: #458839
  - Catch signals right after calling execve()
    Resolves: #455548


author: Jesse Keating <jkeating@redhat.com> - 3.2-29
changelog:
  - Add the Requires(post) back for ncurses-libs, so that rpm knows
    where to break the loop.  The post actually does require the curses
    libs for the sh calls.  Could consider doing this in LUA and not have
    any external deps.


author: Roman Rakus rrakus@redhat.com 4.1.2-1
changelog:
  - rebase to 4.1
  - Patch level 2
    Resolves #542692
  - Include COPYING in bash base rpm
    Resolves #553250


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-4
changelog:
  - don't segfault when trying to bind int variable to array
    with bad array subsrcipt
    Resolves: #618289


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-5
changelog:
  - Builtins like echo and printf won't report errors
    when output does not succeed due to EPIPE
    Resolves: #664468


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-12
changelog:
  - Update info about trap in man page
    Resolves: #799958
  - Enable system-wide bash_logout
    Resolves: #677439
  - instead of setting the signal handler to SIG_IGN while installing
    the new trap handler, block the signal and unblock it after the new handler
    is installed
    Resolves: #695656


author: Roman Rakus <rrakus@redhat.com> - 4.1.2-15
changelog:
  - Fixed a bug that caused trap handlers to be executed recursively,
    corrupting internal data structures.
    Resolves: #964687


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.12.rc1
changelog:
  - initscript LSB related fixes (#523435)
  - revert the "DEBUG" feature (#510283), it causes too many problems (#545128)


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P1
changelog:
  - fix occassional crash on keytable.c:286 (#554316)
  - active query might be destroyed in resume_dslookup() which triggered REQUIRE
    failure (#507429)


author: Adam Tkac <atkac redhat com> 32:9.7.2-1.P3
changelog:
  - update to 9.7.2-P3 (#623122)
  - patch bind97-managed-keyfile.patch replaced by bind97-compat-keysdir.patch
  - patches merged
    - bind97-rh554316.patch
    - bind97-rh576906.patch


author: Adam Tkac <atkac redhat com> 32:9.7.2-2.P3
changelog:
  - host utility now honors "attempts", "timeout" and "debug" options in
    resolv.conf (#622764)
  - initscript should kill only the "correct" named process (#622785)
  - attempt to reconnect to PostgreSQL during each query if the initial
    connection failed (#623190)


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P3
changelog:
  - use same atomic operations on both ppc and ppc64 (#623638)
  - add new option DISABLE_ZONE_CHECKING to sysconfig/named (#623673)
  - document dig exit codes
  - add Requires: bind-libs to bind subpkgs
  - remove statement about system-config-bind from named.8 manpage (#660676)


author: Adam Tkac <atkac redhat com> 32:9.7.2-4.P3
changelog:
  - solve conflict between i686 and x86_64 bind-devel packages (#658045)
  - fix "service named status" when used with named-sdb
  - fix "krb5-self" update-policy rule processing (#664401)
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.2-7.P3
changelog:
  - improve host/dig resolv.conf parser (#rh669163)
  - improve internal test suite
  - don't mention that HMAC-MD5 is the only one TSIG algorighm
    in nsupdate manpage
  - initscript: sybsys name is always named, not named-sdb


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3 (CVE-2011-0414)
  - patches merged
    - bind97-gsstsig.patch
    - bind97-rh664401.patch
    - bind97-rh623638.patch


author: Adam Tkac <atkac redhat com> 32:9.7.3-6.P3
changelog:
  - load/unload dyndb plugins on appropriate places to avoid crashes (#725577)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)
  - nsupdate returned zero when target zone didn't exist (#700097)
  - readd configtest target to initscript
  - print "the working directory is not writable" as debug message
  - fix some Coverity warnings


author: Adam Tkac <atkac redhat com> 32:9.7.3-9.P3
changelog:
  - fix race condition in resolver.c:validated()
  - improve error handling in zone.c:zone_refreshkeys() to avoid
    hang during shutdown


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.1.rc1
changelog:
  - update to 9.8.2rc1
  - patches merged
    - bind97-rh754398.patch
    - bind97-rh700097.patch
    - bind97-rh734502.patch
    - bind97-rh746694-1.patch
    - bind97-rh746694-2.patch
    - bind97-rh739406-1.patch
    - bind97-rh739406-2.patch
  - ship DNSKEY for root zone in default configuration


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.2.rc1
changelog:
  - harden dns_zone_setmasterswithkeys() to avoid INSIST failures
  - build with '--enable-fixed-rrset'
  - fix potential memory leak in code which processes rndc authentication
    (#749582)
  - generate rndc.key during `service named start` (#768798)
  - nslookup: improve handling of AA responses with recursion off
  - removed obsolete bind97-rh714049.patch patch


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.3.rc1
changelog:
  - decrease severity of various errors related to outside DNS environment
    (#788870)
  - fixed various bind-chroot packaging errors (#789886)
  - use portreserve to reserve rndc control port (#790682)


author: Adam Tkac <atkac redhat com> 32:9.8.2-0.9.rc1
changelog:
  - fix race condition in the resolver module
  - nslookup: return non-zero exit code when fail to get answer (#816164)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.25.rc1
changelog:
  - configure with --enable-filter-aaaa to enable use of filter-aaaa-on-v4 option (#1025008)
  - Fix race condition when destroying a resolver fetch object (#993612)
  - Fix the RRL functionality to include referrals-per-second and nodata-per-second options (#1036700)
  - Fix segfault on SERVFAIL to NXDOMAIN failover (#919545)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.26.rc1
changelog:
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#846065)
  - Fix initscript to return correct exit value when calling checkconfig/configtest/check/test (#848033)
  - Don't (un)mount chroot filesystem when running initscript command configtest with running server (#851123)
  - Fix zone2sqlite tool to accept zones containing "." or "-" or starting with a digit (#919414)
  - Fix initscript not to mount chroot filesystem is named is already running (#948743)
  - Fix initscript to check if the PID in PID-file is really s PID of running named server (#980632)
  - Correct the installed documentation ownership (#1051283)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.27.rc1
changelog:
  - Fix segmentation fault in nsupdate when -r option is used (#1064045)
  - Fix race condition on send buffer in host tool when sending UDP query (#1008827)
  - Allow authentication using TSIG in allow-notify configuration statement (#1044545)
  - Fix SELinux context of /var/named/chroot/etc/localtime (#902431)
  - Include updated named.ca file with root server addresses (#917356)
  - Don't generate rndc.key if there is rndc.conf on start-up (#997743)
  - Fix dig man page regarding how to disable IDN (#1023045)
  - Handle ICMP Destination unreachable (Protocol unreachable) response (#1066876)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.28.rc1
changelog:
  - Add support for TLSA resource records (#956685)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1092035)


author: Tomas Hozza <thozza@redhat.com> 32:9.8.2-0.31.rc1
changelog:
  - Fix RRL slip behavior when set to 1 (#1112356)
  - Fix issue causing bind to hang after reload if using DYNDB (#1142152)


author: Pavel Šimerda <psimerda@redhat.com> - 32:9.8.2-0.37.rc1
changelog:
  - Resolves: 1215687 - DNS resolution failure in high load environment with
    SERVFAIL and "out of memory/success" in the log


author: Joe Orton <jorton@redhat.com> 2008-2
changelog:
  - add (but don't use) mkcabundle.pl
  - tweak description
  - use /usr/bin/keytool directly; BR java-openjdk


author: Joe Orton <jorton@redhat.com> - 2010-2
changelog:
  - fix Java cacert database generation: use Subject rather than Issuer
    for alias name; add diagnostics; fix some alias names.


author: Joe Orton <jorton@redhat.com> - 2010-3
changelog:
  - update to certdata.txt r1.58
  - add /etc/pki/tls/certs/ca-bundle.trust.crt using 'TRUSTED CERTICATE' format
  - exclude ECC certs from the Java cacerts database
  - catch keytool failures
  - fail parsing certdata.txt on finding untrusted but not blacklisted cert


author: Joe Orton <jorton@redhat.com> - 2010.63-4
changelog:
  - fix inclusion of code-signing-only certs in .trust.crt
  - exclude blacklisted root from java keystore too
  - remove trust from DigiNotar root (#734678)


author: Kai Engert <kaie@redhat.com> - 2012.87-65.0
changelog:
  - Major rework introducing the SharedSystemCertificates feature, 
    disabled by default.
  - Require the p11-kit package that contains tools to automatically create
    other file format bundles.
  - Added a update-ca-trust script which can be used to enable the
    new system and to regenerate the merged trust output.
  - Refer to the various README files that have been added for more detailed
    explanation of the new system.
  - No longer require rsc for building. Remove use of rcs/ident.
  - Update source URLs and comments, add source file for version information.
  - Add explanation for the future version numbering scheme,
    because the old numbering scheme assumed upstream using cvs,
    which is no longer true, and therefore can no longer be used.


author: Kai Engert <kaie@redhat.com> - 2012.87-65.3
changelog:
  - added a manual page and related build requirements
  - updated copyright sections in scripts
  - enhance update-ca-trust script


author: Kai Engert <kaie@redhat.com> - 2012.87-65.4
changelog:
  - attempt to handle unsupported downgrades, where the admin has enabled
    legacy support, but downgrades to an old package that is incompatible
    provide the new feature.
  - move manual page to the man8 section (system administration commands)
  - simplify the README files now that we have a manual page


author: Kai Engert <kaie@redhat.com> - 2012.87-65.7
changelog:
  - ExcludeArch/ExclusiveArch doesn't work to enforce a build host
  - Added comment that explains the special build requirements.
  - Added a comment suggesting to keep the release number below the 
    ones used on RHEL 7.
  - Fixed permissions of /etc/pki/java (thanks to stefw)


author: Kai Engert <kaie@redhat.com> - 2014.1.98-65.2
changelog:
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate (rhbz#1138230).
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key.


author: Kai Engert <kaie@redhat.com> - 2015.2.3-65.1
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com> 1.3.31-1
changelog:
  - fix man page (#220558, <esr@thyrus.com>)
  - add some more verbiage in alternatives man page (#221089)
  - don't print usage message on a nonexstent service (#226804)


author: Bill Nottingham <notting@redhat.com> 1.3.33-1
changelog:
  - various changes from review - support alternate %{_sbindir}, fix
    summaries, add version to requires, assorted other bits


author: Bill Nottingham <notting@redhat.com> 1.3.34-1
changelog:
  - translation updates: as, bg, bn_IN, bs, ca, de, fr, hi, hu, id, ja,
    ka, ml, ms, nb, or, sk, sl
  - add resetpriorities to the man page (#197399)


author: Bill Nottingham <notting@redhat.com> 1.3.40-1
changelog:
  - fix some overflows. (#176944)
  - add --type parameter to specify either xinetd or sysv services.
    (#467863, <mschmidt@redhat.com>
  - do a permissions check before add/remove/on/off/resetpriorities. (#450254)
  - parse Short-Description correctly (#441813, <peter_e@gmx.net>)


author: Bill Nottingham <notting@redhat.com> 1.3.42-1
changelog:
  - further LSB fixes (#474223)
  - throw errors on various malformed init scripts (#481198)
  - man page updates re: LSB (#487979)
  - translation updates: mai, gu, pt_BR, ro, ca, pa, sr, fr, hu


author: Bill Nottingham <notting@redhat.com> 1.3.44-1
changelog:
  - alternatives: update symlinks if they exist on installation (#104940)
  - alternatives: clarify error messages with more context (#441443)
  - alternatives: fix removal of manual links (#525021, <dtardon@redhat.com>)
  - translation updates: ml, mr, pl, ta, uk


author: Bill Nottingham <notting@redhat.com> 1.3.45-1
changelog:
  - add support for Should-Start, Should-Stop (#98470, <iarnell@gmail.com>)
  - ntsysv: don't drop initscripts with '.' in the name (#556751)
  - translation updates: el, id


author: Bill Nottingham <notting@redhat.com> 1.3.49.1-1
changelog:
  - backport LSB fixes from head
  - fixes: #693202/#771455, #649227/#771452, #750446/#771454, #701573/#771741, #696305 (<jbastian@redhat.com>)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.01-2
changelog:
  - Drop BR on openais as it is pulled by openais-devel.
  - Change postun section to use -p /sbin/ldconfig.
  - Fix rgmanager Requires.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.02-2
changelog:
  - disable parallel build (broken upstream)
  - build requires higher openais (fix ppc64 build failure)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.02-3
changelog:
  - New kernel-headers has what we need release.
  - Drop BR on kernel-devel.
  - Drop cluster-dlmheaders.patch.
  - Drop --kernel_* from configure invokation.
  - Cleanup a few comments in the spec file.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.03-1
changelog:
  - New upstream release
  - cman Requires telnet and ssh client
  - drops some tree fix up bits that are now upstream


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.04-1
changelog:
  - New upstream release
  - Update license tags after major upstream cleanup (note: rgmanager
    includes a shell script that is shipped under OSL 2.1 license).
  - Update inclusion of documents to reflect updated COPYRIGHT file
    from upstream.
  - Add documentation to different packages.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.05-1
changelog:
  - New upstream release
  - Update licence tags again after upstream relicensing to kill OSL 2.1.
  - Add 2 commodity packages (gfs-utils and gnbd-utils). They both
    require external kernel modules but at least userland will stay
    automatically in sync for our users.
  - BR openais 0.84 for new logsys symbols (and requires for runtime).
  - Update build section to enable gfs-utils and gnbd-utils.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.06-1
changelog:
  - New upstream release.
  - BR on new openais for logging features.
  - drop local logrotate snippet in favour of upstream one.
  - cman Requires: PyOpenSSL for telnet_ssl wrapper.
  - cman Requires: pexpect and net-snmp-utils for fence agents.
    Thanks to sendro on IRC for spotting the issue.
  - Another cleanup round for docs


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.07-1
changelog:
  - New upstream release.
  - Add patch to build against new headers (already part of upstream next release)
  - BR on perl(ExtUtils::MakeMaker) to build perl bindings
  - Fix logrotate install from upstream
  - Add "clean up after perl bindings" snippet
  - Update Requires for perl bindings
  - Properly split man3 man pages


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.08-1
changelog:
  - New upstream release.
  - Drop local patch that's part of upstream.
  - Tight BR and Requires for openais to a very specific version.
  - cman Requires ricci as new default config distribution system.
    (ricci changes will land soon but in the meantime this is done our side)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.10-1
changelog:
  - New upstream release.
  - Build against new corosync and openais.
  - specfile cleanup: rename buildxen to buildvirt.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.10-2
changelog:
  - Retag release.
  - New upstream release.
  - Build against new corosync and openais.
  - specfile cleanup: rename buildxen to buildvirt.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.10-3
changelog:
  - The "CVS HATES ME" release.
  - New upstream release.
  - Build against new corosync and openais.
  - specfile cleanup: rename buildxen to buildvirt.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.10-4
changelog:
  - Split libcman.so* from cman and cman-devel into  cmanlib and cmanlib-devel
    to break a very annoying circular dependency.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.11-1
changelog:
  - new upstream release.
  - drop obsoleted patches.
  - include very important gfs1 bug fix.
  - include fix for fence_egenera (CVE-2008-4192).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.99.13-1
changelog:
  - New upstream release.
  - Drop gnbd* packages that are now a separate project.
  - Tight dependencies with corosync/openais.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-5.alpha4
changelog:
  - New upstream release.
  - Fix directory ownership #483330.
  - Add support pkgconfig to devel package.
  - Total libraries cleanup:
    - split libraries out of cman into clusterlib.
    - merge cmanlib into clusterlib.
    - rename cman-devel into clusterlib-devel.
    - merge cmanlib-devel into clusterlib-devel.
  - Comply with multiarch requirements (libraries).
  - Relax BuildRequires and Requires around corosync and openais.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-7.alpha4
changelog:
  - Update to latest stable3 code from git (e3a9ac674fa0ff025e833dcfbc8575cada369843)
  - Fix Provides: version.
  - Update corosync/openais BuildRequires and Requires


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-11.alpha5
changelog:
  - Stop building fence and resource agents.
  - cman now Requires: fence-agents.
  - rgmanager now Requires: resource-agents.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-12.alpha6
changelog:
  - New upstream release.
  - Add missing LICENCE and COPYRIGHT files from clusterlib-devel.
  - Add patch to fix build failure (already upstream).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-14.alpha7
changelog:
  - New upstream release.
  - Update corosync/openais BuildRequires and Requires.
  - Fix gfs-utils and cman man page overlapping files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-15.rc1
changelog:
  - New upstream release.
  - Update corosync/openais BuildRequires and Requires.
  - Drop --corosynclibdir from configure. Libs are now in standard path.
  - Update BuildRoot usage to preferred versions/names
  - Drop qdisk init script. Now merged in cman init from upstream.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-16.rc2
changelog:
  - New upstream release + git94df30ca63e49afb1e8aeede65df8a3e5bcd0970
  - spec file updates:
    * BuildRequires / Requires: latest corosync and openais
    * Update configure invokation
    * Cleanup tree fix up bits that are now upstream
    * Ship cluster.rng
    * Move fsck/mkfs gfs/gfs2 binaries in /sbin to be FHS compliant


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-17.rc2
changelog:
  - Update from git up to 779dd3c23ca6c56f5b3f7a8a7831bae775c85201
  - spec file updates:
    * Drop BuildRequires on libvolume_id-devel that's now obsoleted
    * gfs*-utils now Requires: file
    * Add temporary patch to get rid of volume_id references in the code


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-18.rc3
changelog:
  - New upstream release
  - spec file updates:
    * Drop local patches.
    * Update BuildRequires and Requires: on newer corosync/openais.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-19.rc4
changelog:
  - New upstream release
  - spec file updates:
    * cman subpackage: avoid unnecessary calls to ldconfig
    * rgmanager subpackage: drop unrequired Requires: that belong to ras
    * BuildRequires and Requires corosync/openais 1.0.0.rc1


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-20
changelog:
  - New upstream release
  - spec file updates:
    * Update copyright header
    * final release.. undefine alphatag
    * BuildRequires and Requires corosync/openais 1.0.0-1 final.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.3-1
changelog:
  - New upstream release
  - spec file updates:
    * drop cp_workaround patch
    * stop shipping rgmanager from cluster
    * move dlm udev rules in clusterlib where they belong
    * enable pacemaker components build
    * ship 2 new rpms: dlm-pcmk and gfs-pcmk for pacemaker integration


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New upstream release
  - spec file update:
    * use global instead of define
    * use new Source0 url
    * use cluster macro more aggressively
    * bump Requires on fence-agents
    * ship var/run/cluster and var/lib/cluster


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.7-2
changelog:
  - Drop ldapconfig loader support (PM-disable-ldap-loader-support.patch)
  - Drop notifyd support (PM-disable-notifyd-support.patch)
  - Support only xmlconfig loader (PM-support-only-xmlconfig-loader.patch)
  - Disable support for perl bindings


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.7-3
changelog:
  - Add workaround for corosync IPC shutdown issue (cman-init-workaround-bz547813.patch)
  - Related: rhbz#547813


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - new upstream release:
    Resolves: rhbz#566784, rhbz#555047, rhbz#556603, rhbz#561862
    Resolves: rhbz#565907, rhbz#568446, rhbz#564471, rhbz#561416
    Resolves: rhbz#553383
  - upstream rebase and patch cleanup
    Resolves: rhbz#557348
  - gfs2: make use of exported device topology
    (gfs2_exported_dev_topology)
    Resolves: rhbz#519491
  - spec file update:
    * cman should Requires fence-virt directly
    * merge changelog from Fedora
    * re-enable cmannotifyd support and ship doc/template


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-2
changelog:
  - Fix gfs2_quota hadle of boundary conditions
    (gfs2_fix_quota_boundary.patch)
    Resolves: rhbz#570525
  - Fix gfs_controld dm suspend event handling
    (gfs_controld_dm_suspend.patch)
    Resolves: rhbz#571806


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-4
changelog:
  - Fix weakness in clusterid generation by using non-crypto hashing.
    part1-3 are he upstream generic implemetation.
    part4 turns it on specifically for RHEL-6 as the change breaks
    micro rolling upgrades.
    (cman_use_hashed_cluster_id_part1.patch)
    (cman_use_hashed_cluster_id_part2.patch)
    (cman_use_hashed_cluster_id_part3.patch)
    (cman_use_hashed_cluster_id_part4.patch)
    Resolves: rhbz#574886
  - Add plock debug buffer.
    (dlm_separate_plock_debug_buffer_part1.patch)
    (dlm_separate_plock_debug_buffer_part2.patch)
    Resolves: rhbz#576322
  - Add more fs_notified debugging
    (dlm_controld_add_more_fs_notified_debugging.patch)
    Resolves: rhbz#576335
  - dlm_controld/gfs_controld: avoid full plock unlock when no
    resource exists
    (controld_avoid_full_plock_unlock.patch)
    Resolves: rhbz#575103


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-5
changelog:
  - Fix ccs_tool man page
    (fix_ccs_tool_man_page.patch)
    Resolves: rhbz#577874
  - dlm_controld: add plock checkpoint signatures
    (dlm_controld_add_plock_checkpoint_signatures.patch)
    Resolves: rhbz#578625
  - dlm_controld: set last_plock_time for ownership operations
    (dlm_controld_set_last_plock_time_for_ownership_ops.patch)
    (gfs_controld_set_last_plock_time_for_ownership_ops.patch)
    Resolves: rhbz#578626
  - dlm_controld: don't skip unlinking checkpoint
    (dlm_controld_do_not_skip_unlinking_checkpoint.patch)
    Resolves: rhbz#578628
  - gfs2_convert segfaults when converting fs of blocksize 512 bytes
    (gfs2_convert_fix_segfault_with_512bytes_bs.patch)
    Resolves: rhbz#579621
  - gfs2_convert uses too much memory for jdata conversion
    (gfs2_convert_uses_too_much_memory_for_jdata_conversion.patch)
    Resolves: rhbz#579623
  - Fix conversion of gfs1 CDPNs
    (gfs2_convert_fix_conversion_of_gfs1_cdpns.patch)
    Resolves: rhbz#579625
  - gfs2_convert: Doesn't convert indirectly-pointed eattrs correctly
    (gfs2_convert_does_not_convert_eattrs_correctly.patch)
    Resolves: rhbz#579626


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * refresh patches with official SHA1 git commits from RHEL6
      upstream branch:
      - disable_ldap_loader_support.patch
      - support_only_xmlconfig_loader.patch
      - disable_fence_xvmd_support.patch
    * rename cman_use_hashed_cluster_id_part4.patch to
      cman_use_hash_cluster_id_by_default.patch.
    * Addresses the following issues:
      from 3.0.11 release:
    Resolves: rhbz#581047, rhbz#576330, rhbz#582017, rhbz#583945
    Resolves: rhbz#581038
      from 3.0.12 release:
    Resolves: rhbz#589823, rhbz#586100, rhbz#585083, rhbz#587079
    Resolves: rhbz#590000
    * Rebase:
    Resolves: rhbz#582322
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590980
  - cman should only load OpenAIS checkpoint service by default
    (cman_only_load_ckpt_service_by_default.patch)
    Resolves: rhbz#568407


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-2
changelog:
  - Fix cman init script stop action to wait for corosync daemon to shutdown
    (cman_init_wait_for_corosync_shutdown.patch)
    Resolves: rhbz#592103
  - fenced: use cpg ringid
    (fenced_use_cpg_ringid.patch)
    Update Requires/BuildRequires on corosync + cpg ringid patch.
    Resolves: rhbz#584140
  - fix changelog entries from 3.0.12-1 (missing bugzilla entries)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-3
changelog:
  - Fix dlm_controld wrong fencing time comparison
    (dlm_controld_wrong_fencing_time_comparison.patch)
    Resolves: rhbz#594511
  - Fix ccs_tool create -n
    (fix_ccs_tool_create.patch)
    Resolves: rhbz#594626


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-4
changelog:
  - cman: fix quorum recalculation when a node is externally killed
    (cman_fix_quorum_recalculation.patch)
    Resolves: rhbz#596046
  - rpmdiff automatic test tool found 2 issues:
    * add missing man pages for cman_notify, dlm_controld.pcmk and
      gfs_controld.pcmk, and update the spec file to ship them
      in the correct subpackages.
    (add_missing_man_pages.patch)
    * cman, dlm-pcmk, gfs-pcmk should have a tigher Requires on cluster
      libraries.
    Resolves: rhbz#594111


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-5
changelog:
  - Fix dlm_controld wrong fencing time comparison (part2):
    Rename dlm_controld_wrong_fencing_time_comparison.patch to
    dlm_controld_wrong_fencing_time_comparison_part1.patch
    Add dlm_controld_wrong_fencing_time_comparison_part2.patch
    Resolves: rhbz#594511


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-6
changelog:
  - Fix device name and mount point in utils
    (gfs2_fix_device_name_and_mount_point_in_utils.patch)
    Resolves: rhbz#597002


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-7
changelog:
  - Ensure cman recalculates quorum on configuration reload
    (cman_recalculate_expected_votes_on_config_reload.patch)
    Resolves: rhbz#606989


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-8
changelog:
  - Add missing components to cluster schema
    (config_add_missing_resource_docs_to_schema.patch)
  - Clean up recursion in cluster schema
    (config_clean_up_recursion_in_schema.patch)
    Resolves: rhbz#604298


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-9
changelog:
  - Update gfs2_convert man page
    (gfs2_convert_manpage_update.patch)
    Resolves: rhbz#601315
  - Don't return 0 if gfs2_edit restoremeta fails
    (gfs2_edit_restoremeta_should_not_return_0_on_failure.patch)
    Resolves: rhbz#607321
  - Fix fsck.gfs2 unaligned access on ia64
    (fsck_gfs2_unaligned_access_on_ia64.patch)
    Resolves: rhbz#608154


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-10
changelog:
  - Add cman_tool version -S to man page
    (cman_tool_config_reload_man_page.patch)
    Resolves: rhbz#609978
  - Fix cman init script to be more LSB compliant
    (cman_init_lsb_compliant.patch)
    Resolves: rhbz#612097


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-11
changelog:
  - Add /etc/sysconfig/cman example file with extensive documentation
    of options that can be passed to the init script.
    (cman_sysconfig_part1.patch from upstream)
    (cman_sysconfig_part2.patch rhel6 specific)
    Resolves: rhbz#606368


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-12
changelog:
  - Fix gfs2 init script to be more LSB compliant
    (gfs2_init_lsb_compliant.patch)
    Resolves: rhbz#553383


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-13
changelog:
  - Add autogenerated cluster_conf.html
    (doc_autogen_cluster_conf_html_part1.patch)
    (doc_autogen_cluster_conf_html_part2.patch)
    Resolves: rhbz#593015
  - Update relax ng schema
    (config_update_schema.patch)
    Related: rhbz#595547, rhbz#593015
  - Fix patch file naming
    Related: rhbz#553383, rhbz#606368, rhbz#609978, rhbz#612097


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-14
changelog:
  - cman: Recalculate quorum on config change
    (recalculate_quorum_on_config_change.patch)
    Resolves: rhbz#606989
  - config: Add tomcat-6 resource agent to schema
    (add_tomcat_6_resource_agent_to_schema.patch)
    doc: Add tomcat-6 to cluster_conf.html
    (add_tomcat_6_to_cluster_conf_html.patch)
    Resolves: rhbz#614127
  - config: Add missing cman_label
    (add_missing_cman_label.patch)
    config: Add doc for cman_label attribute
    (add_doc_for_cman_label_attribute.patch)
    Resolves: rhbz#615509
  - config: Allow multiple logging_daemon tags
    (allow_multiple_logging_daemon_tags.patch)
    Resolves: rhbz#614961
  - cman config: copy all logging objects to the top level tree
    (config_copy_all_logging_objects_to_the_top_level_tree.patch)
    Resolves: rhbz#615202


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-15
changelog:
  - cman: Recalculate quorum on quorum device vote changes
    (cman_recalculate_quorum_on_quorum_device_vote_changes.patch)
    Resolves: rhbz#606989


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-16
changelog:
  - cman: Check for new configs only once per second to avoid 100% cpu spin
    (cman_check_config_only_once_per_sec.patch)
    Resolves: rhbz#616222


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-17
changelog:
  - cman init: allow startup options to fenced
    (cman_init_allow_startup_options_to_fenced.patch)
    Resolves: rhbz#617566


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - Fix several issues related to cluster config reload operation
    including checks that would allow the config to be downgraded
    and extra spurious config reload notifications.
    (cman_config_reload_fix_part1.patch)
    (cman_config_reload_fix_part2.patch)
    (cman_config_reload_fix_part3.patch)
    (cman_config_reload_fix_part4.patch)
    (cman_config_reload_fix_part5.patch)
    (cman_config_reload_fix_part6.patch)
    Resolves: rhbz#617161, rhbz#617163
  - Fix logging configuration reload operations
    (cman_preconfig_handle_logging_reload_operation_part1.patch)
    (cman_preconfig_handle_logging_reload_operation_part2.patch)
    Resolves: rhbz#615202


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-19
changelog:
  - dlm_controld/gfs_controld: make default plock_ownership 0
    Use the simpler, safer, and more reliable option as default.
    (controld_make_default_plock_ownership_0.patch)
    Resolves: rhbz#618303
  - dlm_controld: fix plock checkpoint signatures
    (dlm_controld_fix_plock_checkpoint_signatures.patch)
    Resolves: rhbz#618806
  - dlm_controld: fix plock owner in checkpoints
    (dlm_controld_fix_plock_owner_in_checkpoints.patch)
    Resolves: rhbz#618814
  - cman: fix consensus calculation
    Bump Requires: corosync to 1.2.3-17 to guarantee that corosync
    is at the minimal version for this fix to work.
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#618534


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-20
changelog:
  - Fix regression in "Fix fsck.gfs2 unaligned access on ia64" that
    affects all 32bit systems.
    Rename fsck_gfs2_unaligned_access_on_ia64.patch to
    fsck_gfs2_unaligned_access_on_ia64_part1.patch
    (fsck_gfs2_unaligned_access_on_ia64_part2.patch)
    Resolves: rhbz#608154


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-21
changelog:
  - cman: do not propagate old configurations around
    (cman_do_not_propagate_old_configurations_around.patch)
    cman: Clarify man page on config distribution
    (cman_clarify_man_page_on_config_distribution.patch)
    Resolves: rhbz#619680


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-22
changelog:
  - gfs2-utils: mkfs can't fsync device with 32MB RGs
    (gfs2_utils_mkfs_can_t_fsync_device_with_32mb_rgs.patch)
    Resolves: rhbz#622844


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-23
changelog:
  - gfs2-utils: fsck.gfs2 deletes directories if they get too big
    (gfs2_fsck_do_not_delete_directories_if_they_get_too_big.patch)
    Resolves: rhbz#624691


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-24
changelog:
  - GFS2: fsck.gfs2 seems to process large files twice
    (fsck_gfs2_seems_to_process_large_files_twice.patch)
    Resolves: rhbz#621313
  - fsck.gfs2 segfaults if journals are missing
    (fsck_gfs2_segfaults_if_journals_are_missing.patch)
    Resolves: rhbz#622576
  - fsck.gfs2 truncates directories with more than 100,000 entries
    (fsck_gfs2_truncates_directories_with_more_than_100,000_entries.patch)
    Resolves: rhbz#628013
  - Updating /proc/mounts and /etc/mtab with mount args for GFS2 fs
    (updating_proc_mounts_and_etc_mtab_with_mount_args_for_gfs2_fs.patch)
    Resolves: rhbz#632595
  - cman init: fix "stop remove" operation
    (cman_init_fix_stop_remove_operation.patch)
    cman: Calculate expected_votes correctly after leave remove
    (cman_calculate_expected_votes_correctly_after_leave_remove.patch)
    Resolves: rhbz#634718
  - gfs2_convert: gfs2_convert doesn't resume after interrupted conversion
    (gfs2_convert_doesn_t_resume_after_interrupted_conversion.patch)
    Resolves: rhbz#637913
  - cman: fix startup race condition when configs are different across nodes
    (cman_fix_startup_race_condition_when_configs_are_different_across_nodes.patch)
    Resolves: rhbz#639018


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-25
changelog:
  - dlm_controld: fix plock owner syncing
    (dlm_controld_fix_plock_owner_syncing.patch)
    Resolves: rhbz#617306
  - dlm_controld: fix plock signature in stored message
    (dlm_controld_fix_plock_signature_in_stored_message.patch)
    Resolves: rhbz#623816
  - dlm_controld: ignore plocks until checkpoint time
    (dlm_controld_ignore_plocks_until_checkpoint_time.patch)
    Resolves: rhbz#623810
  - gfs_controld: fix plock owner syncing
    (gfs_controld_fix_plock_owner_syncing.patch)
    Resolves: rhbz#617306
  - fenced: use post_join_delay after cluster join
    (fenced_use_post_join_delay_after_cluster_join.patch)
    Resolves: rhbz#624844
  - gfs2_edit enhancements:
    * gfs2_edit: better printing of directory leaf information
      (gfs2_edit_better_printing_of_dir_leaf_information.patch)
    * gfs2_edit: print hex numbers in lower-case
      (gfs2_edit_print_hex_numbers_in_lower_case.patch)
    * gfs2_edit: negative block numbers don't jump a negative amount
      (gfs2_edit_negative_block_numbers_dont_jump_a_negative_amount.patch)
    * gfs2_edit: tiny (stuffed) files had user data saved with savemeta
      (gfs2_edit_tiny_files_had_user_data_saved_with_savemeta.patch)
    * gfs2_edit: give meaningful feedback for savemeta and restoremeta
      (gfs2_edit_give_meaningful_feedback_for_savemeta_and_restoremeta.patch)
    * gfs2_edit: Fix memory leak in savemeta option
      (gfs2_edit_fix_memory_leak_in_savemeta_option.patch)
    * gfs2_edit: Split extended display functions into extended.c
      (gfs2_edit_split_extended_display_functions_into_extended_c.patch)
    * gfs2_edit: Move more functions to extended.c
      (gfs2_edit_move_more_functions_to_extended_c.patch)
    * gfs2_edit: Extend individual field printing/editing
      (gfs2_edit_extend_individual_field_printing_editing.patch)
    * gfs2_edit: fix page down on rindex
      (gfs2_edit_fix_page_down_on_rindex.patch)
    * gfs2_edit: print field names in right column
      (gfs2_edit_print_field_names_in_right_column.patch)
    * gfs2_edit: display block allocation on rgrps and bitmaps
      (gfs2_edit_display_block_allocation_on_rgrps_and_bitmaps.patch)
    * gfs2_edit: fix extended.h to not double-include
      (gfs2_edit_fix_extended_h_to_not_double_include.patch)
    Resolves: rhbz#634623
  - gfs2_convert: corrupts file system when directory has di_height 3
    (gfs2_convert_corrupts_file_system_when_directory_has_di_height_3.patch)
    Resolves: rhbz#630005


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-26
changelog:
  - Drop dlm-pcmk and gfs-pcmk variants of dlm_controld and gfs_controld
    that are now replaced by pacemaker + cman support.
    Resolves: rhbz#649021


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-27
changelog:
  - gfs_controld: fix plock owner in unmount
    (gfs_controld_fix_plock_owner_in_umount.patch)
    Resolves: rhbz#624822
  - mkfs.gfs2 should support discard request generation
    (gfs2_mkfs_should_support_discard_request_generation.patch)
    Resolves: rhbz#656956
  - ccs_tool: completely remove references to update/upgrades
    (ccs_tool_man_page_shows_removed_update_upgrade_subcommands.patch)
    Resolves: rhbz#577874
  - cman: allow users to configure transport method
    (cman_does_not_allow_user_to_select_transport_mechanism.patch)
    Resolves: rhbz#657041
  - cman_tool: display meaningful translation of corosync exit code
    (cman_tool_display_meaningful_translation_of_corosync_exit_codes.patch)
    Resolves: rhbz#617247
  - cman_tool: handle "another instance running" error code
    (cman_tool_handle_another_instance_is_running_error_code.patch)
    Related: rhbz#617247, rhbz#617234
  - cman init: check if corosync is already running
    (cman_init_check_if_corosync_is_running.patch)
  - cman: handle INT and TERM signals correctly
    (cman_handle_int_and_term_signals_correctly.patch)
    Resolves: rhbz#617234
  - cman init: add support for "nocluster" kernel cmdline to not start at boot
    (cman_init_add_support_for_nocluster_kernel_cmdline.patch)
    Resolves: rhbz#563901
  - cman: Make qdiskd exit if removed from configuration
    (cman_make_qdiskd_exit_if_removed_from_config.patch)
    Resolves: rhbz#620679
  - cman: Update cman_tool version section in man page
    (cman_update_cman_tool_version_section_in_man_page.patch)
    Resolves: rhbz#619874
  - config: Add missing qdiskd options
    (config_add_missing_qdiskd_options.patch)
    Resolves: rhbz#645830
  - qdisk: Assume 1 vote if not specified in cluster.conf
    (qdiskd_should_assume_1_vote_if_not_specified.patch)
    Resolves: rhbz#663433
  - config: Fix broken fence_egenera options
    (fence_egenera_add_missing_options_in_cluster_rng.patch)
    Resolves: rhbz#629017
  - cman: Make qdiskd heuristics time out
    (cman_make_qdisk_heuristics_time_out.patch)
    Resolves: rhbz#636243


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-28
changelog:
  - cman init: do not include wrong default file
    (cman_init_do_not_include_wrong_default_config_file.patch)
    Resolves: rhbz#669340


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-29
changelog:
  - ccs_tool: deprecate editing capabilities
    (ccs_tool_deprecate_editing_capabilities.patch)
    Resolves: rhbz#614885


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-30
changelog:
  - mkfs.gfs2 segfaults with 18.55TB and -b512
    (gfs2_mkfs_segfaults_with_18.55T_and_b512.patch)
    Resolves: rhbz#624535
  - fsck.gfs2: reports master/root dinodes as unused and fixes the bitmap
    (gfs2_fsck_reports_master_root_dinodes_as_unused_and_fixes_bitmap.patch)
    Resolves: rhbz#663037


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-31
changelog:
  - fsck.gfs2: can't repair rgrps resulting from gfs_grow->gfs2_convert
    (fsck_gfs2_cannot_repair_rgrps_resulting_from_gfs_grow_plus_gfs2_convert.patch)
    Resolves: rhbz#576640
  - qdisk: Informational syslog message indicating label overrides device
    (qdiskd_info_syslog_msg_when_lavel_overriders_device.patch)
    Resolves: rhbz#635413
  - Integrate watchdog with cluster to reboot nodes under specific heuristics
    (cman_add_checkquorum_script_for_self_fencing_part1.patch)
    (cman_add_checkquorum_script_for_self_fencing_part2.patch)
    Resolves: rhbz#560700


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-32
changelog:
  - gfs2_edit enhancements:
    * gfs2_edit: handle corrupt file systems better
      (gfs2_edit_handle_corrupt_filesystems_better.patch)
    * gfs2_edit: print large block numbers better
      (gfs2_edit_print_large_block_numbers_better.patch)
    * gfs2_edit: has problems printing gfs1 journals
      (gfs2_edit_has_problems_printing_gfs1_journals.patch)
    * gfs2_edit: add -d option for printing journal details
      (gfs2_edit_add_d_option_for_printing_journal_details.patch)
    * gfs2_edit: Fix error message on blockalloc when outside bitmap
      (gfs2_edit_fix_error_message_blockalloc_when_outside_bitmap.patch)
    * gfs2_edit: fix careless compiler warning
      (gfs2_edit_fix_careless_compiler_warning.patch)
    * gfs2_edit: Fix bitmap editing function
      (gfs2_edit_fix_bitmap_editing_function.patch)
    * gfs2_edit: fix segfault in set_bitmap when block is in rgrp
      (gfs2_edit_fix_segfault_in_set_bitmap_when_block_is_rgrp.patch)
    Resolves: rhbz#674843
  - fenced: emit dbus signals to be handled by foghorn package for SNMP traps
    (fenced_send_dbus_signals_when_node_is_fenced.patch)
    (fenced_update_fenced_man_page_with_q_option.patch)
    (build_allow_dbus_notification_code_to_be_disabled.patch)
    Resolves: rhbz#592964
  - config: Update relax ng schema 
    (config_update_schema_2.patch)
  - doc: Update cluster_conf.html to match schema
    (doc_update_cluster_conf_html.patch)
    Resolves: rhbz#618705


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-33
changelog:
  - qdiskd: Fix auto-vote calculation loop
    (qdiskd_fix_auto_vote_calculation_loop.patch)
    Resolves: rhbz#663433


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-34
changelog:
  - fenced: don't ignore victim_done messages for reduced victims
    (fenced_do_not_ignore_victim_done_messages_for_reduced_victims.patch)
    Resolves: rhbz#678704


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-35
changelog:
  - config_xml: stop leaking memory on config reload
    (config_stop_leaking_memory_on_config_reload.patch)
    Resolves: rhbz#680155


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-36
changelog:
  - Fix race condition at startup that affects dlm based applications
    (dlm_controld_always_return_error_if_daemon_is_not_ready_to_operate.patch)
    (cman_init_wait_for_dlm_controld_to_be_fully_operational_before_proceeding.patch)
    Resolves: rhbz#595725


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-37
changelog:
  - cman-preconfig: allow cman to configure corosync multicast ttl
    (cman_preconfig_allow_cman_to_configure_multicast_ttl.patch)
    Resolves: rhbz#684020


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-38
changelog:
  - qdiskd: Fix bad timer check
    (qdiskd_fix_bad_timer_check.patch)
    Resolves: rhbz#688154
  - cman init: increase the default timeout waiting for quorum
    (cman_init_increase_default_timeout_waiting_for_quorum.patch)
    Resolves: rhbz#688201


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-39
changelog:
  - config: Add DRBD 0.8.3 metadata back to schema
    (add_drbd_0_8_3_metadata_back_to_schema.patch)
    Resolves: rhbz#680172


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-40
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-41
changelog:
  - gfs2_convert: exits with success without doing anything
    (gfs2_convert_exists_with_success_without_doing_anything_part2.patch)
    Resolves: rhbz#688734


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-1
changelog:
  - Rebase package on top of new upstream
  - spec file update:
    * update spec file copyright date
    * drop all patches
    * update and clean configure and build section.
    Resolves: rhbz#707115


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-2
changelog:
  - Reported UUID from 'gfs2_edit -p sb' should be lower-case
    (gfs2_reported_uuid_should_be_lowercase.patch)
    Resolves: rhbz#694823
  - gfs2_edit savemeta doesn't save all leaf blocks for large dirs
    (gfs2_edit_savemeta_does_not_save_all_leaf_blocks_for_large_dirs.patch)
    Resolves: rhbz#679566
  - gfs2_grow: fix growing of full filesystems
    (gfs2_grow_fix_growing_of_full_filesystem.patch)
    Resolves: rhbz#707091
  - dlm_controld: clear waiting plocks for closed files
    (dlm_controld_clear_waiting_plocks_for_closed_files.patch)
    Resolves: rhbz#678585
  - fsck.gfs2: segfault in pass1b
    (gfs2_fsck_segfault_in_pass1b.patch)
    Resolves: rhbz#679080
  - gfs2_edit: Add compression to savemeta and restoremeta
    (gfs2_edit_add_compression_to_savemeta_and_restoremeta.patch)
    (add BuildRequires: zlib-devel)
    Resolves: rhbz#702313
  - cman_tool: fix typo in man page
    (cman_tool_fix_typo_in_man_page.patch)
    Resolves: rhbz#691400


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-3
changelog:
  - gfs2_edit: Fix savemeta compression for older zlibs
    (gfs2_edit_fix_savemeta_compression_for_older_zlibs.patch)
    Resolves: rhbz#702313


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-4
changelog:
  - fsck.gfs2 only rebuilds one missing journal at a time
    (gfs2_fsck_only_rebuilds_one_missing_journal_at_a_time.patch)
    Resolves: rhbz#683104
  - cman: fix ttl default if no value is specified
    (cman_fix_ttl_default_if_no_value_is_specified.patch)
    Resolves: rhbz#713977


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-6
changelog:
  - ccs: add dynamic relaxng schema generation
  - spec file update:
    * Add Requires: /usr/bin/xsltproc
    * Bump Requires: for fence-agents and fence-virt
    * Obsolets resource-agents that do not provide xsl/relaxng infrastructure
    * ship /usr/share/cluster/relaxng
    Resolves: rhbz#680930


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-7
changelog:
  - mkfs.gfs2: Handle gfs2 creation on regular files
    Resolves: rhbz#720668
  - mount.gfs2: gfs2 mounts doubled up in mtab
    Resolves: rhbz#706141
  - tunegfs2: Ensure we don't try to open a null device
    Resolves: rhbz#719124
  - tunegfs2: Fix usage message
    Resolves: rhbz#719126
  - tunegfs2: Fix label/locktable setting code
    Resolves: rhbz#719135


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-9
changelog:
  - cman: print error if clustername is too long or not configured at all
    Resolves: rhbz#728230
  - config: fix escaping of xml special characters
    Resolves: rhbz#726065


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-19
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#735906
  - cman: default to 2 different mcast addresses in RRP mode and set
    rrp_problem_count_threshold
    cman now requires corosync > 1.4.1-3 for RRP operations
    Resolves: rhbz#735912
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#735917


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-24
changelog:
  - fsck.gfs2: add ability to fix GFS (gfs1) file systems (66 patches)
    Resolves: rhbz#675723
  - libgfs2: Don't count sentinel dirent as an entry
    Resolves: rhbz#745161
  - mkfs.gfs2: Improve error messages
    Resolves: rhbz#769400


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-25
changelog:
  - gfs_controld: don't ignore dlmc_fs_register error
    Resolves: rhbz#753300
  - gfs2_edit savemeta: crosswrite four patches from upstream (4 patches)
    Resolves: rhbz#749864
  - gfs2_utils: gfs2_grow fails to grow a filesystem with less than 3 RGs
    Resolves: rhbz#742595
  - gfs2_utils: Improve error messages
    Resolves: rhbz#742293


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-26
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - config: make altname validation position indipendent
    Resolves: rhbz#740552
  - config: drastically improve cman RRP configuration handling
    Resolves: rhbz#733298
  - cman: Improve quorum timer handling how quorum timers work
    Resolves: rhbz#759603
  - qdiskd: Make multipath issues go away
    Resolves: rhbz#678372


author: Lon Hohberger <lhh@redhat.com> - 3.0.12.1-27
changelog:
  - fenced: fix handling of startup partition merge
    dlm_controld: fix handling of startup partition merge
    Resolves: rhbz#750314


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-30
changelog:
  - config: update relax ng schema to include totem miss_count_const
    Resolves: rhbz#804938
  - cman init: fix start sequence error handling
    Resolves: rhbz#806002


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-32
changelog:
  - Fix qdisk(5) man page example
    Resolves: rhbz#745538
  - cman notifyd: deliver cluster status on startup
    Resolves: rhbz#819787


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-33
changelog:
  - qdiskd: allow master to failover quickly when using master_wins
    Resolves: rhbz#814807
  - config: Fix typo in schema
    Resolves: rhbz#785866
  - cman-preconfig: allow host aliases as valid cluster nodenames
    Resolves: rhbz#786118
  - cman: fix data copy and memory leak when reloading config
    Resolves: rhbz#839241
  - cman init: allow sysconfig/cman to pass options to dlm_controld
    Resolves: rhbz#821016
  - cman init: allow dlm hash table sizes to be tunable at startup
    Resolves: rhbz#842370
  - qdiskd: restrict master_wins to 2 node cluster
    Resolves: rhbz#838047
  - fenced: fix log file mode
    Resolves: rhbz#845341


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-35
changelog:
  - config: use new corosync confdb api to remove string lenght limit
    Resolves: rhbz#847234
  - Update requirements on newer corosync
    Related: rhbz#847234


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12.1-43
changelog:
  - cman init: make sure we start after fence_sanlockd and warn users
  - checkquorum.wdmd: add integration script with wdmd
    (requires wdmd >= 2.6)
    Resolves: rhbz#509056


author: Bob Peterson <rpeterso@redhat.com> - 3.0.12.1-48
changelog:
  - After converting a GFS1 file system with gfs2_convert errors were detected with fsck.gfs2
    Resolves: rhbz#888053


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-50
changelog:
  - gfs2_grow: report bad return codes on error
    Resolves: rhbz#886585
  - fsck.gfs2: fix misplaced directory leaf blocks (50 patches)
    Resolves: rhbz#902920


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-52
changelog:
  - fsck.gfs2: Handle multiple occurrences of one leaf in a directory hash table (6 patches)
    Resolves: rhbz#984085
  - fsck.gfs2: Don't rely on cluster.conf when rebuilding sb
    resolves: rhbz#985796


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-53
changelog:
  - ccs_tool: Fix example fence device in "ccs_tool create" help
    Resolves: rhbz#871603
  - libccs: don't use uninitialized value in xpathlite
    Resolves: rhbz#874538
  - qdiskd: change log level for an error message
    Resolves: rhbz#888318
  - fenced/dlm_controld/gfs_controld: use cluster_dead for corosync connections
    Resolves: rhbz#888857
  - gfs_controld: avoid mismatching messages with old cgs
    Resolves: rhbz#889564
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers brief network out
    Resolves: rhbz#893925
  - config: fix cluster.conf man page to reflect correct syslog_facility default
    Resolves: rhbz#896191
  - qdiskd: Do not count missed updates from offline nodes
    Resolves: rhbz#920358
  - cman: create and destroy lockfile on restart
    Resolves: rhbz#982670


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-55
changelog:
  - Remove .patch from some patch tmp file names
  - gfs2_edit: Fix bug and add functions from upstream (6 patches)
    Resolves: rhbz#987508


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-57
changelog:
  - gfs2_tool: Update /etc/mtab with metafs mounts, handle interrupts (3 patches)
    Resolves: rhbz#996233


author: Chrissie Caulfield <ccaulfie@redhat.com> - 3.0.12.1-60
changelog:
  - fenced: keep manual ACk fifo open for longer and also make fenced_external()
    write to it.
    Resolves: rhbz#1059269


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-61
changelog:
  - libgfs2: Fix up remove_mtab_entry
    Resolves: rhbz#1059853
  - fsck.gfs2: Check and repair per_node contents such as quota_changeX
    Resolves: rhbz#1062742
  - libgfs2: patch to update gfs1 superblock correctly
  - gfs2-utils: check and fix bad dinode pointers in gfs1 sb
    Resolves: rhbz#1053668


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-63
changelog:
  - gfs2_edit: Add a savemeta file metadata header
  - gfs2_edit: Fix loop arithmetic in restore_data
  - gfs2_edit: Ensure all leaf blocks in per_node are saved
  - gfs2_edit: Reinstate a check for system dinodes
    Resolves: rhbz#1081523


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-64
changelog:
  - qdisk: Check cman_wait() return value and report errors
    Resolves: rhbz#979313
  - libccs: Read daemon logging attributes correctly
    Resolves: rhbz#980575
  - qdisk: Quorum init complete after tko_up cycles, not tko
    Resolves: rhbz#1029210
  - config: Fix typos and phrasing in defaults file
    Resolves: rhbz#1035929
  - ccs_tool: Fix crash using --verbose
    Resolves: rhbz#1074551
  - manpage: Mention cluster.conf.html schema in man page
    Resolves: rhbz#981043
  - fenced: Remove mention of skip_undefined feature as it is not supported
    Resolves: rhbz#994234


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-67
changelog:
  - dlm_controld: Adjust fence time comparison
    Resolves: #rhbz843160
  - man: update fence_node options
    Resolves: #rhbz886016
  - fenced: Wait for ringid
    gfs_controld: Fix first recovery case
    Resolves: #rhbz982305


author: Andrew Price <anprice@redhat.com> - 3.0.12.1-69
changelog:
  - fsck.gfs2: fix broken i_goal values in inodes
  - gfs2_convert: use correct i_goal values instead of zeros for inodes
  - fsck.gfs2: Reprocess nodes if anything changed - addendum 1 of 2
  - fsck.gfs2: addendum to fix broken i_goal values in inodes - addendum 2 of 2
    Resolves: rhbz#1149516


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-72
changelog:
  - xml: ccs_update_schema: be verbose about extraction fail
    Resolves rhbz#1087286
  - qdiskd: warn if no heuristics defied for >2 node clusters
    Resolves: rhbz#1095418
  - *_controld: better logging if receive_start fails
    Resolves: rhbz#1095657
  - qdiskd: Enable master_wins if votes=1
    Resolves: rbhz#1099223
  - cman: fix cman.5 man page to indicate only 1 altname is allowed
    Resolves: rhbz#1111500
  - cman: Slight fix to message issued for invalid two_node clusters
    Resolves: rhbz#1142947


author: Christine Caulfield <ccaulfie@redhat.com> - 3.0.12.1-73.1
changelog:
  - gfs_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1234443
  - dlm_controld: Retry uevent recv() and reconnect uevent socket on error
    Resolves: rhbz#1233535


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-1mdk
changelog:
  - initial release (merge fileutils, sh-utils & textutils)
  - obsoletes/provides: sh-utils/fileutils/textutils
  - fileutils stuff go in 1xx range
  - sh-utils stuff go in 7xx range
  - textutils stuff go in 5xx range
  - drop obsoletes patches 1, 2, 10 (somes files're gone but we didn't ship
    most of them)
  - rediff patches 103, 105, 111, 113, 180, 706
  - temporary disable patch 3 & 4
  - fix fileutils url


author: Thierry Vignaud <tvignaud@mandrakesoft.com> 4.5.2-2mdk
changelog:
  - fix build
  - don't chmode two times su
  - build with large file support
  - fix description
  - various spec cleanups
  - fix chroot installation
  - fix missing /bin/env
  - add old fileutils, sh-utils & textutils ChangeLogs


author: Tim Waugh <twaugh@redhat.com> 4.5.3-3
changelog:
  - Adapted for Red Hat Linux.
  - Self-host for help2man.
  - Don't ship readlink just yet (maybe later).
  - Merge patches from fileutils and sh-utils (textutils ones are already
    merged it seems).
  - Keep the binaries where the used to be (in particular, id and stat).


author: Tim Waugh <twaugh@redhat.com> 4.5.3-4
changelog:
  - Fix scriplets.
  - Fix i18n patch so it doesn't break uniq.
  - Fix several other patches to either make the test suite pass or
    not run the relevant tests.
  - Run 'make check'.
  - Fix file list.


author: Tim Waugh <twaugh@redhat.com> 4.5.10-1
changelog:
  - 4.5.10.
  - Update lug, touch_errno, acl, utmp, printf-ll, i18n, test-bugs patches.
  - Drop fr_fix, LC_TIME, preserve, regex patches.


author: Tim Waugh <twaugh@redhat.com> 5.0-5
changelog:
  - Both kon and kterm support colours (bug #83701).
  - Fix 'ls -l' alignment in zh_CN locale (bug #88346).


author: Tim Waugh <twaugh@redhat.com> 5.0-12
changelog:
  - Don't run 'make check' for this build (build environment problem).
  - Another uninitialized variable in i18n (from bug #98683).


author: Tim Waugh <twaugh@redhat.com> 5.0-13
changelog:
  - Made su use pam again (oops).
  - Fixed another i18n bug causing sort --month-sort to fail.
  - Don't run dubious stty test, since it fails when backgrounded
    (bug #102033).
  - Re-enable make check.


author: Tim Waugh <twaugh@redhat.com> 5.0-20
changelog:
  - Restrict ACL support to only those programs needing it (bug #106141).
  - Fix default PATH for LSB (bug #102567).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Stop 'sort -g' leaking memory (i18n patch bug #115620).
  - Don't ship kill, since util-linux already does.
  - Tidy AFS patch.


author: Tim Waugh <twaugh@redhat.com> 5.2.0-6
changelog:
  - Apply Paul Eggert's chown patch (bug #116536).
  - Merged chdir patch into pam patch where it belongs.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-9
changelog:
  - Mention pam in the info for su (bug #122592).
  - Remove wheel group rant again (bug #122886).
  - Change default behaviour for chgrp/chown (bug #123263).  Patch from
    upstream.


author: Tim Waugh <twaugh@redhat.com> 5.2.1-19
changelog:
  - Added 'gnome' TERM to DIR_COLORS (bug #129112).
  - Worked around a bash bug #129128.
  - Fixed an i18n patch bug in cut (bug #129114).


author: Tim Waugh <twaugh@redhat.com> 5.2.1-21
changelog:
  - Apply upstream patch to fix 'cp -a' onto multiply-linked files (bug #128874).
  - SELinux patch fix: don't error out if lgetfilecon() returns ENODATA.


author: Dan Walsh <dwalsh@redhat.com> 5.2.1-53
changelog:
  - Allow id to run even when SELinux security context can not be run
  - Change chcon to use raw functions.


author: Tim Waugh <twaugh@redhat.com> 5.92-0.1
changelog:
  - 5.92.
  - No longer need afs, dircolors, utmp, gcc4, brokentest, dateseconds,
    chown, rmaccess, copy, stale-utmp, no-sign-extend, fchown patches.
  - Updated acl, dateman, pam, langinfo, i18n, getgrouplist, selinux patches.
  - Dropped printf-ll, allow_old_options, jday, zh_CN patches.
  - NOTE: i18n patch not ported for sort(1) yet.


author: Tim Waugh <twaugh@redhat.com> 5.93-2
changelog:
  - Call setsid() in su under some circumstances (bug #173008).
  - Prevent runuser operating when setuid (bug #173113).


author: Tim Waugh <twaugh@redhat.com> 5.93-4
changelog:
  - Rebuild to pick up new glibc *at functions.
  - Apply runuser PAM patch from bug #173807.  Ship runuser PAM file.


author: Dan Walsh <dwalsh@redhat.com> 5.93-6
changelog:
  - Remove pam_selinux.so from su.pamd, not needed for targeted and Strict/MLS 
    will have to newrole before using.


author: Tim Waugh <twaugh@redhat.com> 5.96-4
changelog:
  - Include new hashes (bug #196369).  Patch from upstream.
  - Build at -O1 on s390 for the moment (bug #196369).


author: David Howells <dhowells@redhat.com> 5.97-4
changelog:
  - split the PAM scripts for "su -l"/"runuser -l" from that of normal "su" and
    "runuser" (#198639)
  - add keyinit instructions to PAM scripts


author: Tim Waugh <twaugh@redhat.com> 5.97-6
changelog:
  - Added runuser '-g' and '-G' options (bug #199344).
  - Added su '--session-command' option (bug #199066).


author: Tim Waugh <twaugh@redhat.com> 5.97-10
changelog:
  - Ignore 'cifs' filesystems for 'df -l' (bug #183703).
  - Include -g/-G in runuser man page (part of bug #199344).
  - Corrected runuser man page (bug #200620).


author: Tim Waugh <twaugh@redhat.com> 5.97-15
changelog:
  - Fixed stat's 'C' format specifier (bug #216676).
  - Misleading 'id -Z root' error message (bug #211089).


author: Tim Waugh <twaugh@redhat.com> 6.7-1
changelog:
  - 6.7.  No longer need sort-compatibility, rename, newhashes, timestyle,
    acl, df-cifs, afs or autoconf patches.


author: Tim Waugh <twaugh@redhat.com> 6.7-4
changelog:
  - Ship COPYING file (bug #225655).
  - Use datadir and infodir macros in %pre scriptlet (bug #225655).
  - Use spaces not tabs (bug #225655).
  - Fixed build root.
  - Change prereq to requires (bug #225655).
  - Explicitly version some obsoletes tags (bug #225655).
  - Removed obsolete pl translation fix.


author: Tim Waugh <twaugh@redhat.com> 6.7-5
changelog:
  - Removed unnecessary stuff in pre scriptlet (bug #225655).
  - Prefix sources with 'coreutils-' (bug #225655).
  - Avoid %makeinstall (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-7
changelog:
  - Better Obsoletes/Provides versioning (bug #225655).
  - Use better defattr (bug #225655).
  - Be info file compression tolerant (bug #225655).
  - Moved changelog compression to %install (bug #225655).
  - Prevent upstream changes being masked (bug #225655).
  - Added a comment (bug #225655).
  - Use install -p for non-compiled files (bug #225655).
  - Use sysconfdir macro for /etc (bug #225655).
  - Use Requires(pre) etc for install-info (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-8
changelog:
  - Don't mark profile scripts as config files (bug #225655).
  - Avoid extra directory separators (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.7-9
changelog:
  - Use sed instead of perl for text replacement (bug #225655).
  - Use install-info scriptlets from the guidelines (bug #225655).


author: Tim Waugh <twaugh@redhat.com> 6.9-3
changelog:
  - Fixed 'ls -x' output (bug #240298).
  - Disambiguate futimens() from the glibc implementation (bug #242321).


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-10
changelog:
  - modified coreutils-i18n.patch because of sort -R in
    a non C locales(fix by Andreas Schwab) (#249315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-12
changelog:
  - added some upstream supported dircolors TERMs(#239266)
  - fixed du output for unaccesible dirs(#250089)
  - a bit of upstream tunning for symlinks


author: Ondrej Vasik <ovasik@redhat.com> - 6.9-17
changelog:
  - added several missing colored TERMs(including rxvt-unicode,
    screen-256color and xterm-256color) to DIR_COLORS and
    DIR_COLORS.xterm(#239266)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-1
changelog:
  - New upstream release(changed %prep because of lack of lzma
    support in %setup macro)
  - License GPLv3+
  - removed patches cp-i-u,du-ls-upstream,statsecuritycontext,
    futimens,getdateYYYYMMDD,ls-x
  - modified patches to be compilable after upstream changes
  - selinux patch reworked to have backward compatibility with
    F8(cp,ls and stat behaviour differ from upstream in SELinux
    options)
  - su-l/runuser-l pam file usage a bit documented(#368721)
  - more TERMs for DIR_COLORS, added colors for audio files,
    more image/compress file types(taken from upstream 
    dircolors.hin)
  - new file DIR_COLORS.256color which takes advantage from 
    256color term types-not really used yet(#429121)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-3
changelog:
  - fix unability of echo to display certain strings(added --
    separator, #431005)
  - do not require only one long_opt for certain commands 
    e.g. sleep, yes - but use first usable (#431005)
  - do not override userspecified LS_COLORS variable, but
    use it for colored ls(#430827)
  - discard errors from dircolors to /dev/null + some tuning 
    of lscolor sh/csh scripts(#430823)
  - do not consider files with SELinux security context as
    files having ACL in ls long format(#430779)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-5
changelog:
  - enabled 256-color support in colorls shell scripts(#429121)
  - fixed syntax error in csh script(#431315)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-8
changelog:
  - use default security context in install - broken by 
    coreutils-6.10 update(#319231)
  - some sh/csh scripts optimalizations(by ville.skytta@iki.fi,
    - #433189, #433190)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-13
changelog:
  - disable echo option separator behavior(added by #431005,
    request for removal #437653 + upstream)
  - temporarily disabled longoptions change until full 
    clarification upstreamery (#431005)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-15
changelog:
  - covered correct handling for some test conditions failures
    e.g. root build+selinux active and not running mcstrans(d)
    or selinux enforcing (#436717)


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-16
changelog:
  - keep LS_COLORS when USER_LS_COLORS defined
  - someupstream fixes:
  - mkdir -Z invalid-selinux-context dir no longer segfaults
  - ptx with odd number of backslashes no longer leads to buffer
    overflow
  - paste -d'\' file" no longer ovveruns memory


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-17
changelog:
  - better workaround of glibc getoptc change(factor test)
  - don't segfault mknod, mkfifo with invalid-selinux-context


author: Ondrej Vasik <ovasik@redhat.com> - 6.10-18
changelog:
  - fix colorls.sh syntax with Zsh (#440652)
  - mention that cp -a includes -c option + mention cp -c 
    option in manpages (#440056)
  - fix typo in runuser manpages (#439410)


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-2
changelog:
  - Do not show misleading scontext in id command when user
    is specified (#443485)
  - Avoid possible test failures on non-english locales


author: Ondrej Vasik <ovasik@redhat.com> - 6.11-3
changelog:
  - added arch utility (from util-linux-ng)
  - do not show executable file types without executable bit
    in colored ls as executable


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-2
changelog:
  - workaround for strange koji failures(#449910,#442352)
  - fixed ls -ZC segfault(#449866, introduced by 6.10-1 
    SELinux patch reworking)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-3
changelog:
  - workaround for koji failures(#449910, #442352) now 
    preserves timestamps correctly - fallback to supported
    functions, added test case
  - runuser binary is no longer doubled in /usr/bin/runuser


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-5
changelog:
  - fix authors for basename and echo
  - fix who info pages, print last runlevel only for printable
    chars


author: Kamil Dudka <kdudka@redhat.com> - 6.12-7
changelog:
  - dd: iflag=fullblock now read full blocks if possible
    (#431997, #449263)
  - ls: --color now highlights files with capabilities (#449985)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-10
changelog:
  - seq should no longer fail to display final number of some
    float usages of seq with utf8 locales(#463556)


author: Jarod Wilson <jarod@redhat.com> - 6.12-12
changelog:
  - fix up potential test failures when building in certain
    slightly quirky environments (part of bz#442352)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-13
changelog:
  - remove unimplemented (never accepted by upstream) option
    for chcon changes only. Removed from help and man.
  - remove ugly lzma hack as lzma is now supported by setup
    macro


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-14
changelog:
  - cp -Z now correctly separated in man page (#466646)
  - cp -Z works again (#466653)
  - make preservation of SELinux CTX non-mandatory for
    preserve=all cp option


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-15
changelog:
  - fix several date issues(e.g. countable dayshifts, ignoring
    some cases of relative offset, locales conversions...)
  - clarify ls exit statuses documentation (#446294)


author: Ondrej Vasik <ovasik@redhat.com> - 6.12-16
changelog:
  - make possible to disable capability in ls due to
    performance impact when not cached(#467508)
  - do not patch generated manpages - generate them at build
    time
  - do not mistakenly display -g and -G runuser option in su
    --help output


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-1
changelog:
  - new upstream release
  - modification/removal of related patches
  - use automake 1.10.1 instead of 1.10a
  - temporarily skip df --total tests (failures),
    timeout-paramaters (failure on ppc64)


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-2
changelog:
  - added requirements for util-linux-ng >= 2.14
    because of file conflict in update from F-8/F-9(#472445)
  - some sed cleanup, df totaltests patch changes (not working
    correctly yet :( )


author: Ondrej Vasik <ovasik@redhat.com> - 7.0-4
changelog:
  - fixed syntax error w/ "expr" command using negative
    string/integer as first (i.e expr -125) - due to
    complexity of changes used diff against upstream git-head
    (#474434)
  - enable total-awk test again (and skip it when df not working)


author: Ondrej Vasik <ovasik@redhat.com> - 7.1-1
changelog:
  - New upstream release 7.1 (temporarily using tar.gz tarball
    as there are no xz utils in Fedora), removed applied
    patches, amended patches and LS_COLORS files


author: Ondrej Vasik <ovasik@redhat.com> 7.1-2
changelog:
  - workaround libcap issue with broken headers (#483548)
  - fix gnulib testsuite failure (4x77 (skip) is not
    77(skip) ;) )


author: Ondrej Vasik <ovasik@redhat.com> 7.1-7
changelog:
  - do not ship /etc/DIR_COLORS.xterm - as many terminals
    use TERM xterm and black background as default - making
    ls color output unreadable
  - shipping /etc/DIR_COLORS.lightbgcolor instead of it for
    light(white/gray) backgrounds
  - try to preserve xattrs in cp -a when possible


author: Ondrej Vasik <ovasik@redhat.com> 7.2-1
changelog:
  - New upstream bugfix release 7.2
  - removed applied patches
  - temporarily disable strverscmp failing gnulib test


author: Kamil Dudka <kdudka@redhat.com> - 7.4-5
changelog:
  - ls -1U with two or more arguments (or with -R or -s) works properly again
  - install runs faster again with SELinux enabled (#479502)


author: Ondrej Vasik <ovasik@redhat.com> - 7.4-6
changelog:
  - do process install-info only with info files present(#515970)
  - BuildRequires for xz, use xz tarball


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-1
changelog:
  - New upstream release 7.5, remove already applied patches,
    defuzz few others, xz in default set(by dependencies),
    so no explicit br required
  - skip two new tests on system with insufficient utimensat
    support(e.g. koji)
  - libstdbuf.so in separate coreutils-libs subpackage
  - update /etc/DIRCOLORS*


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-2
changelog:
  - Better fix than workaround the koji insufficient utimensat
    support issue to prevent failures in other packages


author: Ondrej Vasik <ovasik@redhat.com> - 7.5-4
changelog:
  - fixed regression where df -l <device> as regular user
    cause "Permission denied" (#520630, introduced by fix for
    rhbz #497830)


author: Ondrej Vasik <ovasik@redhat.com> - 7.6-6
changelog:
  - ls -LR exits with status 2, not 0, when it encounters
    a cycle(#525402)
  - ls: print "?", not "0" as inode of dereferenced dangling
    symlink(#525400)
  - call the install-info on .gz info files


author: Ondrej Vasik <ovasik@redhat.com> - 8.1-1
changelog:
  - new upstream release 8.1
  - fix build under koji (no test failures with underlying
    RHEL-5 XEN kernel due to unsearchable path and lack of
    futimens functionality)


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-1
changelog:
  - new upstream release 8.2
  - removed applied patches, temporarily do not run dup_cloexec()
    dependent gnulib tests failing in koji
  - do not use bold attribute in 256-colors dircolor
  - CVE-2009-4135 coreutils: Unsafe temporary directory use
    in "distcheck" rule(#546705)


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-2
changelog:
  - Sanity changes(#548421):
    - use grep instead of deprecated egrep in colorls.sh script
    - remove unnecessary versioned requires
    - remove non-upstream hack for uname -p
    - add dtrdsr patch from RHEL-5 to prevent regression


author: Ondrej Vasik <ovasik@redhat.com> - 8.2-3
changelog:
  - require gmp-devel/gmp for large numbers support
  - fix misc/selinux root-only test
  - bring back uname -p/-i functionality except of the
    athlon hack
  - comment patches


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-4
changelog:
  - fix exit status of terminated child processes in su with
    pam(#563852)
  - do not depend on selinux patch application in
    _require_selinux tests


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-7
changelog:
  - doublequote LS_COLORS in colorls.*sh scripts to speedup
    shell start(#586949)
  - update /etc/DIR_COLORS* files
  - move readlink from /usr/bin to bin, keep symlink in
    /usr/bin(#586948)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-10
changelog:
  - compile coreutils su with RELRO and PIE again(#630017)
  - document rare usefulness of tail options --sleep-interval
    and --max-unchanged-stats with inotify support(#662900)
  - fix double free error in tac for input line longer
    than 16KiB(#628212)
  - fix segfault in sort if LC_TIME differs from the rest
    of locales(#649224)
  - fix support for DTR/DSR control flow in stty(#598631)
  - clarify mkdir --mode behaviour in info documentation
    (#609262)
  - inform about dropped ninth bit of 3-digit octal values in byte
    representations in info documentation(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-11
changelog:
  - adjust the wording in the octal value byte representation
    documentation to match with upstream(#660033)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-12
changelog:
  - document that dd's iflag=fulblock prevents dd's oflag=direct
   automatic turn off when reading via pipe(#614605)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-14
changelog:
  - tweak documentation of tail --sleep-interval (#725618)
  - prevent build failure on system with mock>=1.1.9 (#691292)
  - su: fix shell suspend in tcsh (#703712)
  - ls: use acl_extended_file_nofollow() to prevent unnecessary
    autofs mounts(#720325)
  - fix cp -Z functionality if the destination exists(#715557)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-17
changelog:
  - fix memory leak in ls -l (#751974)
  - document difference between ls -lZ and ls -Zl (#771843)
  - fix various i18n patch related issues in pr (#772172)
  - df should display target device information when
    a symbolic link is specified as a parameter(#766461)
  - su no longer hangs when a program set itself to ignore
    SIG_CHLD signal, and fork a child to exec su(#754029)
  - stat recognizes few new filesystems, tail -f recognizes
    FhGFS and GPFS as remote (disables inotify) (#769874)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-20
changelog:
  - revert to polling for unknown filesystems, update
    known fs for tail and stat based on coreutils-8.21 (#827199)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-21
changelog:
  - fix parsing of field regression in sort command
    (introduced between RHEL5 and RHEL6 upstream) (#956143)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-22
changelog:
  - wait for su child to prevent errorneous execution of some
    commands (#749679)
  - correct return values after signal termination (#889531)
    and propagation of child core dump info (#747592)
  - dd now accepts 'status=none' to suppress all
    informational output(#965654)
  - cut --output-delimiter option was ignored for multibyte
    locales (#867984)
  - remove redundant setpwent() and setgrent () syscalls
    from stat -U/-G to improve NIS performance (#911206)
  - date: deal correctly with invalid input with special
    characters (#960160)
  - dd: provide support for the conv=sparse (#908980)
  - su/runuser: clarify which envvars are preserved/initialized
    in -p/-m and -l help/man documentation (#967623)
  - du: properly detect bindmounts (#836557)
  - df: fix alignment of columns (#842040)
  - id,groups: fix correct group printing (#816708)
  - mv : replace empty directories in cross file
    system move (#980061)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-25
changelog:
  - pr -n no longer crashes when passed values >= 32.
    Also line numbers are consistently padded with spaces,
    rather than with zeros for certain widths. (#997537)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-29
changelog:
  - CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
    segmentation faults in sort, uniq and join(#1015019)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-33
changelog:
  - su: don't terminate parent process upon SIGTERM(#1063887)
  - tail: do not show "reverting to polling" warning when not
    necessary (#1046818)
  - chcon: document default behaviour for symlink (#1064621)
  - fix dd sparse test failure on XFS (#1075679)


author: Ondrej Vasik <ovasik@redhat.com> - 8.4-34
changelog:
  - tail: disable inotify in --follow for vxfs (#1104244)
  - df: dereference symlinks to disk device nodes (#812449)
  - dd: add support for count_bytes iflag (#1098078)


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.4
changelog:
  - First attempt at addressing the GCC 4.3 build, which failed on x86_64
    because ptrace-abi.h (included by ptrace.h) uses the "u32" typedef,
    which relies on <asm/types.h>, and include/asm-x86_64/types.h
    does not not typedef u32 as done in include/asm-x86/types.h.


author: Dave Anderson <anderson@redhat.com> - 4.0-6.0.5
changelog:
  - Second attempt at addressing the GCC 4.3 build, which failed due
    to additional ptrace.h includes in the lkcd vmdump header files.


author: Dave Anderson <anderson@redhat.com> - 4.0-7.7.1
changelog:
  - Updates to this file per crash merge review
  - Update to upstream version 4.0-7.7.  Full changelog viewable in:
      http://people.redhat.com/anderson/crash.changelog.html


author: Lubomir Rintel <lkundrak@v3.sk> - 4.0.8.11-1
changelog:
  - Update to later upstream release
  - Fix abuse of Revision tag

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild


author: Dave Anderson <anderson@redhat.com> - 4.0.9-1
changelog:
  - Update to upstream release, which allows the removal of the 
    Revision tag workaround, the crash-4.0-8.11-dwarf3.patch and 
    the crash-4.0-8.11-optflags.patch


author: Dave Anderson <anderson@redhat.com> - 5.0.0-1.el6
changelog:
  - Rebased package to upstream version 5.0.0.
    Resolves: rhbz#528189
  - Increment the built-in NR_CPUS value for x86_64 from 512 to 4096.
    Resolves: rhbz#513156
  - Fix for the "bt" command on 2.6.29 and later x86_64 kernels to
    always recognize and display BUG()-induced exception frames.
    Resolves: rhbz#548789
  - Fix for the "mount" command on 2.6.32 and later kernels.
    Resolves: rhbz#548791
  - Fix for segmentation violation when running the "ps -r" command
    option on 2.6.25 or later kernels.
    Resolves: rhbz#549243
  - Fix for 2.6.31 or later x86_64 CONFIG_NEED_MULTIPLE_NODES kernels
    running on systems that have multiple NUMA nodes.  By default, those
    kernels use the "page" (or "lpage") percpu memory allocators, which 
    utilize vmalloc space for percpu memory.
    Resolves: rhbz#540772


author: Dave Anderson <anderson@redhat.com> - 5.0.0-2.el6
changelog:
  - Eliminate invocation-time "input string too large" error messages
    when analyzing 32-bit x86 RHEL5 kernels.
    Resolves: rhbz#554477
  - Fix to run with early RHEL6 kernels with glibc less than 2.11
    by forcing the use of the builtin mkstemps() function. 
    Resolves: rhbz#554493


author: Dave Anderson <anderson@redhat.com> - 5.0.0-3.el6
changelog:
  - Update swap-handling functionality to recognize the new swap_info
    array type and swap_info_struct structure changes introduced into 
    the 2.6.32-4.el6 kernel.
    Resolves: rhbz#555379


author: Dave Anderson <anderson@redhat.com> - 5.0.0-4.el6
changelog:
  - Fix for x86, s390, s390x (and ia64) architectures to set the system
    cpu count equal to the highest cpu online plus one.  Without the
    patch, those architectures would use the number of online cpus as
    the system's total cpu count, which would be misleading when any
    offline cpu number was less than the highest online cpu number.
    Resolves: rhbz#559262
  - Fix to recognize the symbol type change of per-cpu variables from
    'd' or 'D' to 'V' in 2.6.32 kernels.
    Resolves: rhbz#559251


author: Dave Anderson <anderson@redhat.com> - 5.0.0-5.el6
changelog:
  - Fix for the "struct" and "union" commands when passed an address that
    is in a valid kernel virtual address region but is either unmapped or
    non-existent.  Without the patch, the following three error messages
    are displayed:
      struct <name> struct: invalid kernel virtual address: <kernel-address>  type: "gdb_readmem_callback"
      gdb called without error_hook: Cannot access memory at address <kernel-address>
      *** glibc detected *** crash: double free or corruption (!prev): <crash-address> ***
    followed by a backtrace and the crash utility memory map.  The session
    aborts at that point.  With the fix, the commands will fail gracefully
    after displaying error messages reporting that the kernel virtual
    address cannot be accessed.
    Resolves: rhbz#561048


author: Dave Anderson <anderson@redhat.com> - 5.0.0-6.el6
changelog:
  - Fix for a gdb-7.0 regression that caused line numbers to fail with
    x86 (32-bit) base kernel text addresses. 
    Resolves: rhbz#562948


author: Dave Anderson <anderson@redhat.com> - 5.0.0-7.el6
changelog:
  - Fix for very large xendump core files whose ELF sections are located
    beyond a file offset of 4GB.
    Resolves: rhbz#563542
  - Additional fix for the "bt" command when run on offline s390/s390x 
    "swapper" idle tasks.
    Resolves: rhbz#559262


author: Dave Anderson <anderson@redhat.com> - 5.0.0-8.el6
changelog:
  - Add "bt" support for x86_64 kernels configured with CONFIG_FRAME_POINTER.
    Resolves: rhbz#570909
  - Fix to handle the loss of /dev/tty, such as when the network connection 
    hosting a crash session is killed.
    Resolves: rhbz#571782


author: Dave Anderson <anderson@redhat.com> - 5.0.0-9.el6
changelog:
  - Fix for incorrect module symbol value recalculation/modification 
    done by "mod -[sS]" command.
    Resolves: rhbz#575144


author: Dave Anderson <anderson@redhat.com> - 5.0.0-10.el6
changelog:
  - Fix for "irq: invalid structure member offset: irqaction_mask" error
    generated by "irq" command.
    Resolves: rhbz#575668
  - Fix for session abort cause by "bt -e" on x86.
    Resolves: rhbz#575673
  - Fix for reading dumpfiles generated by snap extension modules on 
    systems with single PT_LOAD segment that starts at a non-zero address.
    Resolves: rhbz#575804


author: Dave Anderson <anderson@redhat.com> - 5.0.0-11.el6
changelog:
  - Fix for potential "double free or corruption" glibc abort when 
    running "kmem -s" command on CONFIG_SLAB-configured RHEL6 kernels.
    Resolves: rhbz#576117
  - Implemented support to recognize an IBM-proposed kernel patch for
    ppc64 CONFIG_SPARSEMEM_VMEMMAP kernels that will store vmemmap page
    mapping information, (re-)enabling the crash utility to be able to
    access kernel page structures.
    Resolves: rhbz#546175
    Resolves: rhbz#546527
  - Fix for "swap" and "kmem -i" commands on big-endian ppc64 machines
    to account for size change of the swap_info_struct.flags member.
    Resolves: rhbz#577969


author: Dave Anderson <anderson@redhat.com> - 5.0.0-13.el6
changelog:
  - Update to support the re-worked IBM kernel patch for ppc64 
    CONFIG_SPARSEMEM_VMEMMAP kernels that will store vmemmap page
    mapping information, (re-)enabling the crash utility to be able
    to access kernel page structures.
    Resolves: rhbz#546175
    Resolves: rhbz#546527


author: Dave Anderson <anderson@redhat.com> - 5.0.0-14.el6
changelog:
  - Fix for "cannot resolve stack trace" errors when a non-panicking
    active task is interrupted by the shutdown NMI either while it is
    creating the pt_regs exception frame, or just after the exception
    frame has been created but before the system call handler is called.
    Resolves: rhbz#588337
  - Fix display of ppc64 processor speed at session invocation, and by the
    "sys" and "mach" commands.
    Resolves: rhbz#588353
  - Change the ppc64 cpu count displayed by the initial system banner
    and by the "sys" and "mach" commands to be the number of cpus online.
    Resolves: rhbz#587760


author: Dave Anderson <anderson@redhat.com> - 5.0.0-15.el6
changelog:
  - Fix for an incorrect calculation of the physical base address from
    a xendump of a fully-virtualized x86_64 RHEL6 guest kernel.
    Resolves: rhbz#593107
  - Fix for an incorrect calculation of the physical base address from
    a kvmdump of an x86_64 kernel that has a "_text" virtual address 
    higher than __START_KERNEL_map.
    Resolves: rhbz#593285


author: Dave Anderson <anderson@redhat.com> - 5.0.0-17.el6
changelog:
  - Fix for x86 "bt" command when a crash is generated by a kernel module's
    init_module() function.
    Resolves: rhbz#596904
  - Correct the error message for "dev -p" command.
    Resolves: rhbz#598716
  - Fix to recognize new block and kvmclock devices in the qemu KVM dumpfile.
    Resolves: rhbz#597187


author: Dave Anderson <anderson@redhat.com> - 5.0.0-18.el6
changelog:
  - Fix for segmentation violation when "mach -m" is run on an x86 machine
    which has a BIOS-provided e820 map that contains an EFI-related memory
    type of E820_UNUSABLE.
    Resolves: rhbz#601128


author: Dave Anderson <anderson@redhat.com> - 5.0.0-20.el6
changelog:
  - Fix for x86_64 "bt" if kdump NMI occurs while in system_call but 
    prior to switching from per-thread user stack to kernel stack.
    Resolves: rhbz#608173
  - Fix for x86 "bt" to recognize all kernel entry-points without having
    to hardwire their symbol names.
    Resolves: rhbz#608718


author: Dave Anderson <anderson@redhat.com> - 5.0.0-21.el6
changelog:
  - Implement support for x86 and x86_64 RHEL6 xen/pvops kernels, both live
    and xendumps.
    Resolves: rhbz#608779


author: Dave Anderson <anderson@redhat.com> - 5.0.0-23.el6
changelog:
  - Additional support for QEMU/savevm ram device version 4 to only use
    "pc.ram" segments and to handle the 512MB I/O hole at e0000000.
    Resolves: rhbz#619758


author: Dave Anderson <anderson@redhat.com> - 5.1.1-1.el6
changelog:
  - Add support for s390x ELF dumpfile format.  
    Resolves: rhbz#633449
  - Add support for s390x compressed/filtered dumpfiles generated by 
    makedumpfile.
    Resolves: rhbz#637197
  - Fix for the "bt" command with 2.6.27 and later x86_64 kernels to
    prevent the possible display of a an invalid "vgettimeofday" frame
    above the topmost "system_call_fastpath" frame, followed by two
    read errors indicating "bt: read error: kernel virtual address:
    ffffffffff600000  type: gdb_readmem_callback".
    Resolves: rhbz#637735
  - Save the per-cpu register contents stored in the "cpu" devices of 
    x86_64 KVM dumpfiles, and use their contents for x86_64 backtrace RSP
    and RIP hooks in the case of KVM "live dumps" where the guest system 
    was not in a crashed state when the "virsh dump" operation was done
    on the KVM host.  If an active task was running in user space when 
    a live dump was taken, that will be indicated by the "bt" output, 
    along with the user-space register contents.  The x86_64 register set 
    saved for each cpu may be displayed with the "help -[D|n]" command.
  - Fix for the x86_64 "bt" command to more correctly find the starting
    backtrace RIP and RSP hooks in KVM dumpfiles.  Without the patch,
    backtraces that should start in the interrupt or exception stacks
    were not being detected correctly.
    Resolves: rhbz#649050
  - Fix to utilize the correct "cpu" device format in x86 KVM dumpfiles
    Without the patch, the x86 registers were read in a 32-bit format, 
    which is only true if the host machine was running a 32-bit kernel.
    With the patch, the format defaults to the 64-bit format, and is
    switched to the 32-bit format if it can be determined that the host
    machine was running a 32-bit kernel.
  - Save the per-cpu register contents stored in the "cpu" devices of
    x86 KVM dumpfiles, and use their contents for x86 backtrace ESP and
    EIP hooks in the case of KVM "live dumps", i.e., where the guest
    system was not in a crashed state when the "virsh dump" operation
    was done on the KVM host.  If an active task was running in user
    space when a live dump was taken, that will be indicated by the
    "bt" output, along with the user-space register contents.  The saved
    x86 register set for each cpu may also be displayed with the
    "help -[D|n]" command.
  - Fix for the x86 "bt" command to correctly find the starting backtrace
    EIP and ESP hooks for the active tasks in KVM dumpfiles where the
    kernel had crashed.
    Resolves: rhbz#649051
  - Fix for the cpu count determination in crashed x86 KVM dumpfiles, 
    where the non-crashing cpus are marked offline in the kernel's
    cpu_online_mask by smp_stop_cpu().  Depending upon the cpu number
    of the crashing task, the cpu count may be set to a value that is
    less than the number of present cpus.
  - Change to the manner in which the cpu count is determined for x86_64
    kernels.  SLES11 2.6.32 kernels delay the call to crash_kexec() until
    after smp_send_stop() is called by panic(), and so the cpu_online_map
    cannot be used for determining the cpu count.  With the patch, the
    cpu_present_map is used.
    Resolves: rhbz#649053
  - Rebase to upstream version 5.1.1.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.1-2.el6
changelog:
  - Fix for x86 "bt" command to account for movement of ia32_sysenter_target()
    assembly function to a separate text section, and for the failure to
    resolve the backtrace of a non-active swapper task.
    Resolves: rhbz#682129
  - Upstream equivalency with 5.1.3 patch.
    Resolves: rhbz#649070


author: Dave Anderson <anderson@redhat.com> - 5.1.7-1.el6
changelog:
  - Fix for "kmem -[sS]" if NUMA node 0 has no memory associated with it.
    Resolves: rhbz#716931
  - Fix for the x86_64 "bt" command stack transition error when a non-crashing
    CPU receives a NMI immediately after receiving an interrupt from another 
    source. 
    Resolves: rhbz#712214
  - Fix for the handling of x86_64 compressed kdump dumpfiles where
    the crashing system contains more than 454 cpus.
    Resolves: rhbz#705142
  - Added a new "--osrelease <dumpfile>" command line option that
    displays the OSRELEASE vmcoreinfo string from a kdump dumpfile.
    Resolves: rhbz#703467
  - Update to the crash(8) man page and the associated "crash -h" output.
    Resolves: rhbz#695413
  - Rebase to upstream version 5.1.7.
    Resolves: rhbz#710193


author: Dave Anderson <anderson@redhat.com> - 6.0.3-1.el6
changelog:
  - Support sadump dumpfile formats for Fujitsu Stand Alone Dump facility.
    Resolves: rhbz#736884
  - Support s390x ELF-kdump and s390x compressed-kdump dumpfiles.
    Resolves: rhbz#738865 
  - Display an early warning message if any part of the kernel has been 
    erased/filtered by the makedumpfile facility.
    Resolves: rhbz#739096
  - Fix for the "runq" command for kernels that are configured with
    CONFIG_FAIR_GROUP_SCHED.
    Resolves: rhbz#754291
  - Fix for the x86_64 "bt" command to handle a recursive entry into
    the NMI exception stack.
    Resolves: rhbz#768189
  - Fix for an x86_64 "bt" command segmentation violation if the number
    of ELF_PRSTATUS notes in a compressed-kdump do not match the number
    of cpus running when the system crashed.
    Resolves: rhbz#782837 
  - Rebase to upstream version 6.0.3.
    Resolves: rhbz#767257


author: Dave Anderson <anderson@redhat.com> - 6.0.4-2.el6
changelog:
  - Fix s390x "vm -p" to properly handle swapped-out and unmapped
    user pages.
  - Fix s390x "bt -[tT]" on a live system.
    Resolves: rhbz#817247
    Resolves: rhbz#817248


author: Dave Anderson <anderson@redhat.com> - 6.0.9-1.el6
changelog:
  - Fix for "crash: cannot resolve: xtime" session invocation failure.
    Resolves: rhbz#843093
  - Enhance "struct" command to accept -o option with an address argument.
    Resolves: rhbz#834260
  - Rebase to upstream version 6.0.9.
  - Support for compressed/filtered ppc64 firmware-assisted dump (fadump).
    Resolves: rhbz#840051


author: Dave Anderson <anderson@redhat.com> - 6.1.0-4.el6
changelog:
  - Compressed kdump 46-bit physical memory support
    Resolves: rhbz#1006622
  - Fix incorrect backtrace for dumps taken with "virsh dump --memory-only"
    Resolves: rhbz#1017930
  - Fix cpu number display on systems with more than 254 cpus
    Resolves: rhbz#1019483


author: Dave Anderson <anderson@redhat.com> - 7.1.0-2.el6
changelog:
  - Support new sadump format that can represent more than 16 TB physical memory space
    Resolves: rhbz#1195596


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6
changelog:
  - Fortify the error handling of task gathering from the pid_hash[]
    chains during session initialization to prevent an endless loop if
    data structures have been corrupted.
    Resolves: rhbz#1208557


author: Dave Anderson <anderson@redhat.com> - 7.1.0-3.el6_7
changelog:
  - crash fails to read or wrongly reads some parts of memory in sadump vmcore format
    Resolves: rhbz#1284762


author: Tomas Mraz <tmraz@redhat.com> - 1.1-3
changelog:
  - fix setting keycreate context
  - unify logging a bit
  - cleanup some warnings and fix a typo in TZ code
  - 450993 improve and fix inotify support


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.1-1
changelog:
  - update to 1.4.1
  - create and own /var/spool/anacron/cron.{daily,weekly,monthly} to
   remove false warning about non existent files
  - Resolves: 517398


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.3-5
changelog:
  - add ISC license
  - apply small fixes: anacrontab man page is more readable and
    values from /etc/security/pam_env.conf are used.
  - Related: rhzb#543948


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-2
changelog:
  - remove patches because they were included in new release.
  - 584006 lsb compliance
  - upload correct source
  - Resolves: bz#584006


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-3
changelog:
  - 624043 selinux issue done by leaking file decriptor
  - crontab has wrong permission 676081 & fix in files section 6755->4755
  - 615107 echos twice OK in init script
  - 677364 common criteria - freeing, cleaning code
  - 676040 add relro and PIE into compiler flags
  - Resolves: rhbz#624043, rhbz#676081, rhbz#615107, rhbz#677364, rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-4
changelog:
  - 675077 anacron runs hourly instead of daily=>wrong option in bash script
  - fix common criteria patch 677364
  - Resolves: rhbz#675077


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-6
changelog:
  - apply relro (CFLAGS&DFLAGS) in specfile, because in configure we
   need to call autoreconf.
  - Resolve: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-7
changelog:
  - switch off --enable-pie, because it's overloaded with flags in spec
  - added RPM_OPT_FLAGS into CFLAGS
  - Related: rhbz#676040


author: Marcela Mašláňová <mmaslano@redhat.com> - 1.4.4-9
changelog:
  - during spring DST change are jobs executed 61 times if they are set
    for 2:00 or 3:00 am.
  - 995089 - incorrectly running jobs when time difference is negative
  - cronie doesn't drop privileges before popen
  - adoptions at the crontab orphanage needed
  - config file permissions are world readable
  - 733697 - Service restart needlessly reports failure
  - 743473 - Confusing comments in /etc/cron.hourly/0anacron
  - 887859 - Incorrect example in anacrontab manpage
  - 990710 - cron disallows setting PATH via PAM
  - 985893 - do not use putenv
  - 985888 - cronie drops $LANG and never passes it on to jobs run
  - 829910 - random prefix in crontables for running jobs
  - 922829 - crond generating invalid emails 
  - 919440 - prevent new crond process when already running 
  - Resolves: rhbz#821046, rhbz#697485, rhbz#738232, rhbz#706979, rhbz#733697
  - Resolves: rhbz#743473, rhbz#887859, rhbz#990710, rhbz#985893, rhbz#985888
  - Resolves: rhbz#829910, rhbz#922829, rhbz#995089, rhbz#919440


author: Tomáš Mráz <tmraz@redhat.com> - 1.4.4-14
changelog:
  - fix segfault on null dereference in anacron (#1031383)
  - do not remove daemon pid file in the child process
  - add log message about crond shutdown (#1108384)
  - add log message when getpwnam fails


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add 3.0.55.1 alignment patch.
  - add --enable-posixmutexes (linux threads has not pthread_*attr_setpshared).
  - add --enable-tcl (needed -lpthreads).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - disable --enable-test --enable-debug_rop --enable-debug_wop.
  - disable --enable-posixmutexes --enable-tcl as well, to avoid glibc-2.1.3
    problems.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.1.14.
  - create db3-utils sub-package to hide tcl dependency, enable tcl Yet Again.
  - FHS packaging.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - summaries from specspo.
  - all of libdb_tcl* (including symlinks) in db3-utils, should be db3->tcl?


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove redundant strip of libnss_db* that is nuking symbols.
  - change location in /usr/lib/libdb-3.1.la to point to /lib (#16776).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rather than hack *.la (see below), create /usr/lib/libdb-3.1.so symlink.
  - turn off --enable-diagnostic for performance.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't build with --enable-diagnostic.
  - add build prereq on tcl.
  - default value for %_lib macro if not found.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix dangling docs symlinks
  - fix dangling doc HREFs (#33328)
  - apply the two patches listed at http://www.sleepycat.com/update/3.2.9/patch.3.2.9.html


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-3
changelog:
  - remove relocatability stuffs
  - swallow a local copy of db1 and build db185_dump statically with it, to
    remove the build dependency and simplify bootstrapping new arches


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - re-enable db.h symlink creation, db_util names, and db[23]-devel obsoletes.
  - make sure that -ldb is functional.


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-19
changelog:
  - rebuild to use link the shared object with the same libraries we use
    for the bundled utils, should pull in libpthread when needed
  - move libdb.so from /%{_lib} to %{_libdir} where the linker can find it


author: Nalin Dahyabhai <nalin@redhat.com> 4.0.14-20
changelog:
  - add dynamic libdb-4.0.so link back to %{_libdir} so that dynamically
    linking with -ldb-4.0 will work again


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-2
changelog:
  - change configure to only warn if JNI includes aren't found, assuming that
    the C compiler can find them
  - remove build requirement on jdkgcj -- gcj is sufficient


author: Jeff Johnson <jbj@redhat.com> 4.1.25-6
changelog:
  - build with libtool-1.5, which can't recognize the .so in libfoo*.so atm.
  - whack out libtool predep_objects wonkiness.


author: Jeff Johnson <jbj@jbj.org> 4.2.42-0.1
changelog:
  - update to 4.2.42.
  - build in build_unix subdir.
  - eliminate --enable-dump185, db_dump185.c no longer compiles for libdb*.
  - create db4-tcl sub-pkg to isolate libtcl dependencies.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build both with and without support for shared mutex locks, which require NPTL
  - make behavior wrt where we put libdb the same for all OSs
  - revert changes making tcl optional - nesting %if tcl and %ifarch nptl
    doesn't work
  - fix dangling HREFs in utility docs (pointed to main docs dir, while they're
    actually in the -utils docs dir)
  - run ldconfig when installing/removing the -utils subpackage, as it contains
    shared libraries


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-13
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com> 4.1.25-14
changelog:
  - symlink from %{_libdir}/tls/libdb-4.1.so to the copy in /%{_lib}/tls, so
    that the run-time linker can find the right copy for of apps which use an
    RPATH to point at %{_libdir}/libdb-4.1.so


author: Jeff Johnson <jbj@jbj.org> 4.2.52-4
changelog:
  - remove dangling symlinks (#123721 et al).
  - remove db_cxx.so and db_tcl.so symlinks, versioned equivs exist.
  - apply 2 patches from sleepycat.
  - resurrect db4-java using sun jvm-1.4.2.
  - cripple autoconf sufficiently to build db4-java with gcj, without jvm.
  - check javac first, gcj34 next, then gcj-ssa, finally gcj.
  - add ed build dependency (#125180).


author: Nalin Dahyabhai <nalin@redhat.com> 4.2.52-6
changelog:
  - on %{ix86} systems, make the availability of an NPTL-requiring libdb match
    the availability of an NPTL libpthread in glibc > 2.3.3-48
  - run ldconfig in db4-java's %post/%postun
  - when building java support, assume that libgcj is equivalent enough to 1.3


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-2
changelog:
  - don't package /usr/share/doc/images in the main db4 package
    and move it to db4-devel (#33328)
  - make db4 LFS capable (#33849)
  - move db4-devel, db4-tcl, db4-java to Development/Libraries
    group instead of System Environment/Libraries (#54320)
  - BuildPrereq -> BuildRequires
  - don't use RPM_SOURCE_DIR
  - Obsoletes db3, db2


author: Jindrich Novy <jnovy@redhat.com> 4.3.29-7.fc6
changelog:
  - fix memleak caused by SET_TXN macro in xa_db.c, when opening
    database created with DB_XA_CREATE flag (#204920)


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-1
changelog:
  - update to db-4.5.20 (#198038)
  - fix BuildRoot
  - drop .64bit patch
  - patch/source URLs now point to correct location


author: Jindrich Novy <jnovy@redhat.com> 4.5.20-2
changelog:
  - sync db4 and compat-db licenses to BSD-style as the result of
    consultation with legal department
  - fix some rpmlint warnings


author: Jindrich Novy <jnovy@redhat.com> 4.6.18-1
changelog:
  - update to 4.6.18
  - drop upstream patches for 4.5.20 and gcj patch
  - remove nptl-abi-note.S, useless as we are definitely
    running kernel >= 2.4.20 (#245416)
  - move C++ stuff to subpackages to reduce dependency bloat (#220484)
  - package db_codegen
  - correct open() calls so that new db4 compiles with the new glibc


author: Jindrich Novy <jnovy@redhat.com> 4.6.21-5
changelog:
  - add upstream patch to fix a race condition between checkpoint
    and DB->close which can result in the checkpoint thread self-deadlocking


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-1
changelog:
  - update to 4.7.25 (#449735)
  - package static java library only if listed in java_arches
  - move to java-1.6.0-openjdk
  - fix tcl library path
  - drop glibc patch, no more needed


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-7
changelog:
  - remove s390 and s390x from java_arches (#474061)
  - BR: tcl-devel for the tclConfig.sh change (#474062)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-8
changelog:
  - DB_ENV->lock_get may self deadlock if user defined locks
    are used and there is only one lock partition defined
    (upstream bz#16415)
  - fix for dd segfaults (upstream bz#16541)
  - reorder patches


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-12
changelog:
  - fix for Java API __repmgr_send crash where eid=SELF_EID,
    don't update master_id so soon after election (upstream bz#16299)


author: Jindrich Novy <jnovy@redhat.com> 4.7.25-15
changelog:
  - apply backported patch from 4.8.26 to fix dbverify (#563610, #472131)
    (patch backported by Noriko Hosoi)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Daniel Veillard <veillard@redhat.com> - 2.48-5
changelog:
  - suppress the no address DHCP warning from logs (rhbz#704073)
  - fixes various small problems in the initscript (rhbz#584009)


author: Jiri Denemark <jdenemar@redhat.com> - 2.48-7
changelog:
  - Fix lease-change script (rhbz#815819)
  - Check tftp-root exists and is accessible at startup (rhbz#824214)


author: Tomas Hozza <thozza@redhat.com> - 2.48-10
changelog:
  - Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
   - the option --bind-dynamic was not set correctly when used


author: Tomas Hozza <thozza@redhat.com> - 2.48-11
changelog:
  - Revert previous changes because of many problems with --bind-dynamic option backport.
  - Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
  - Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to %{_datadir}/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Tomas Janousek <tjanouse@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216508, CVE-2006-5973)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.0-11.7
changelog:
  - specfile merge from 145241 branch
      - new sql split patch
      - support for not building all sql modules
      - split sql libraries to separate packages


author: Dan Horak <dan[at]danny.cz> - 1:1.0.13-8
changelog:
  - update scriptlets to follow UsersAndGroups guideline
  - remove support for upgrading from version < 1.0 from scriptlets
  - Resolves: #448095


author: Dan Horak <dan[at]danny.cz> - 1:1.0.14-1
changelog:
  - update to upstream version 1.0.14
  - remove setcred patch (use of setcred must be explictly enabled in config)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.0-1
changelog:
  - update to upstream version 1.1.0
  - update sieve plugin to 1.1.5
  - remove unnecessary patches
  - enable ldap and gssapi plugins
  - change ownership of dovecot.conf (Resolves: #452088)


author: Dan Horak <dan[at]danny.cz> - 1:1.1.2-1
changelog:
  - update to upstream version 1.1.2
  - final solution for #445200 (add /etc/sysconfig/dovecot for start-up options)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.6-1
changelog:
  - update to upstream version 1.1.6
  - change permissions of deliver and dovecot.conf to prevent possible password exposure


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.7-2
changelog:
  - revert changes from 1:1.1.6-2 and 1:1.1.6-1
  - password can be stored in different file readable only for root 
    via !include_try directive


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.1.11-1
changelog:
  - updated to 1.1.11
  - IMAP: PERMANENTFLAGS list didn't contain \*, causing some clients
    not to save keywords.
  - auth: Using "username" or "domain" passdb fields caused problems
    with cache and blocking passdbs in v1.1.8 .. v1.1.10.   
  - userdb prefetch + blocking passdbs was broken with non-plaintext
    auth in v1.1.8 .. v1.1.10.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.1-1
changelog:
  - updated to 1.2.1
  - GSSAPI authentication is fixed (#506782)
  - logins now fail if home directory path is relative, because it was 
    not working correctly and never was expected to work
  - sieve and managesieve update


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.2-1.20090728snap
changelog:
  - updated to post 1.2.2 snapshot (including post release GSSAPI fix)
  - Fixed "corrupted index cache file" errors
  - IMAP: FETCH X-* parameters weren't working.
  - Maildir++ quota: Quota was sometimes updated wrong
  - Dovecot master process could hang if it received signals too rapidly


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.3-1
changelog:
  - updated: dovecot 1.2.3, managesieve 0.11.8, sieve 0.1.11
  - Mailbox names with control characters can't be created anymore.
    Existing mailboxes can still be accessed though.
  - Allow namespace prefix to be opened as mailbox, if a mailbox
    already exists in the root dir.
  - Maildir: dovecot-uidlist was being recreated every time a mailbox
    was accessed, even if nothing changed.
  - listescape plugin was somewhat broken
  - ldap: Fixed hang when >128 requests were sent at once.
  - fts_squat: Fixed crashing when searching virtual mailbox.
  - imap: Fixed THREAD .. INTHREAD crashing.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.4-1
changelog:
  - updated: dovecot 1.2.4, managesieve 0.11.9, sieve 0.1.12
  - fixed a crash in index file handling
  - fixed a crash in saving messages where message contained a CR
    character that wasn't followed by LF
  - fixed a crash when listing shared namespace prefix
  - sieve: implemented the new date extension. This allows matching
    against date values in header fields and the current date at
    the time of script evaluation
  - managesieve: reintroduced ability to abort SASL with "*" response


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.5-1
changelog:
  - updated to dovecot 1.2.5
  - Authentication: DIGEST-MD5 and RPA mechanisms no longer require
    user's login realm to be listed in auth_realms. It only made
    configuration more difficult without really providing extra security.
  - zlib plugin: Don't allow clients to save compressed data directly.
    This prevents users from exploiting (most of the) potential security
    holes in zlib/bzlib.
  - fix index file handling that could have caused an assert-crash
  - IMAP: Fixes to QRESYNC extension.
  - deliver: Don't send rejects to any messages that have Auto-Submitted
    header. This avoids emails loops.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-1
changelog:
  - dovecot updated to 1.2.6
  - Added authtest utility for doing passdb and userdb lookups.
  - login: ssl_security string now also shows the used compression.
  - quota: Don't crash with non-Maildir++ quota backend.
  - imap proxy: Fixed crashing with some specific password characters.
  - fixed broken dovecot --exec-mail.
  - Avoid assert-crashing when two processes try to create index at the
    same time.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.6-3
changelog:
  - sieve updated to 0.1.13 which brings these changes:
  - Body extension: implemented proper handling of the :raw transform
    and added various new tests to the test suite. However, :content
    "multipart" and :content "message/rfc822" are still not working.
  - Fixed race condition occuring when multiple instances are saving the
    same binary (patch by Timo Sirainen).
  - Body extension: don't give SKIP_BODY_BLOCK flag to message parser,
    we want the body!
  - Fixed bugs in multiscript support; subsequent keep actions were not
    always merged correctly and implicit side effects were not always
    handled correctly.
  - Fixed a segfault bug in the sieve-test tool occuring when compile
    fails.
  - Fixed segfault bug in action procesing. It was triggered while
    merging side effects in duplicate actions.
  - Fixed bug in the Sieve plugin that caused it to try to stat() a NULL
    path, yielding a 'Bad address' error.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.7-1
changelog:
  - updated to dovecot 1.2.7
  - add man pages
  - IMAP: IDLE now sends "Still here" notifications to same user's
    connections at the same time. This hopefully reduces power usage
    of some mobile clients that use multiple IDLEing connections.
  - IMAP: If imap_capability is set, show it in the login banner.
  - IMAP: Implemented SORT=DISPLAY extension.
  - Login process creation could have sometimes failed with epoll_ctl()
    errors or without epoll probably some other strange things could
    have happened.
  - Maildir: Fixed some performance issues
  - Maildir: Fixed crash when using a lot of keywords.
  - Several fixes to QRESYNC extension and modseq handling
  - mbox: Make sure failed saves get rolled back with NFS.
  - dbox: Several fixes.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-1
changelog:
  - sieve updated to 0.1.14
  - managesieve updated to 0.11.10 
  - updated to 1.2.9
  - maildir: When saving, filenames now always contain ,S=<size>.
    Previously this was done only when quota plugin was loaded. It's
    required for zlib plugin and may be useful for other things too.
  - maildir: v1.2.7 and v1.2.8 caused assert-crashes in
    maildir_uidlist_records_drop_expunges()
  - maildir_copy_preserve_filename=yes could have caused crashes.
  - Maildir++ quota: % limits weren't updated when limits were read
    from maildirsize.
  - virtual: v1.2.8 didn't fully fix the "lots of mailboxes" bug
  - virtual: Fixed updating virtual mailbox based on flag changes.
  - fts-squat: Fixed searching multi-byte characters.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-3
changelog:
  - simplify packaging
  - merged dovecot-sieve and dovecot-managesieve into dovecot-pigeonhole
  - merged dovecot-sqlite, dovecot-gssapi and dovecot-ldap into dovecot


author: Michal Hlavinka <mhlavink@redhat.com> - 1:1.2.9-4
changelog:
  - mbox, dbox, cydir: Make sure mail root directory is created with 0700
    permissions
  - mbox: Message header reading was unnecessarily slow. Fetching a
    huge header could have resulted in Dovecot eating a lot of CPU.
    Also searching messages was much slower than necessary
  - resolves: #572276


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.6.beta6.20100515
changelog:
  - use reserved uid and gid for dovecot user and group
  - create /var/run/dovecot/empty in advance in rpm


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0-0.8.beta6.20100630
changelog:
  - dovecot and pigeonhole updated
  - moved disable_plaintext_auth to 10-auth.conf
  - moved ACL and quota settings to a separate .conf files


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.8-1
changelog:
  - dovecot updated to 2.0.8 (fixes #654226), pigeonhole updated to 0.2.2
  - IMAP: Fixed SELECT QRESYNC not to crash on mailbox close if a lot of changes were being sent. 
  - Fixed leaking fds when writing to dovecot.mailbox.log.
  - Fixed rare dovecot.index.cache corruption
  - zlib: Fixed several crashes, which mainly showed up with mbox.
  - acl: Fixed crashing when sometimes listing shared mailboxes via dict proxy.
  - mdbox: Fixed potential assert-crash when saving multiple messages
    in one transaction
  - dsync: a lot of fixes
  - fixed lda + sieve crash


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-1
changelog:
  - dovecot updated to 2.0.9
  - fixed a high system CPU usage / high context switch count performance problem
  - lda: Fixed a crash when trying to send "out of quota" reply


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-5
changelog:
  - script-login did not drop privileges correctly (#709095)
  - fix directory traversal due to not obeying chroot directive (#709097)
  - check proxy destination host against SSL certificate name (#754980)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-11
changelog:
  - mention it in config file, that we disabled SSLv2 and SSLv3
    by default (#1153041)
  - add ssl_protocols configuation option and disable SSLv2 and SSLv3
    by default (#1153041)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.0.9-17
changelog:
  - fix race condition when creating INBOX (#1184865)
  - close stderr if it's not used for logging (#730746)
  - login proxy should not fail connection if CRL isn't found for some certificate (#813957)
  - fix crash in list-status (#961466)
  - installation of dovecot hangs if there is no /dev/urandom (#1026790)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-1.alpha4
changelog:
  - New upstream release.
  - Fix datadir/fence directory ownership.
  - Update BuildRequires: to reflect changes in corosync/openais/cluster
    library split.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-2.alpha4
changelog:
  - Add comments on how to build this package.
  - Update build depends on new corosynclib and openaislib.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-9.beta1
changelog:
  - Fix arch check for virt support.
  - Drop unrequired BuildRequires.
  - Drop unrequired Requires: on perl.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-10.rc1
changelog:
  - New upstream release.
  - Cleanup BuildRequires to avoid to pull in tons of stuff when it's not
    required.
  - Update BuildRoot usage to preferred versions/names.
  - Stop shipping powermib. Those are not required for operations anymore.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-11.rc2
changelog:
  - New upstream release + git94df30ca63e49afb1e8aeede65df8a3e5bcd0970
  - spec file updates:
    * BuildRequires / Requires: latest corosync and openais
    * Build fence_xvm unconditionally now that libvirt is everywhere
    * Drop telnet_ssl wrapper in favour of nss version


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-12.rc3
changelog:
  - New upstream release.
  - spec file updates:
    * BuildRequires / Requires: latest corosync and openais


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.0-13.rc4
changelog:
  - New upstream release.
  - spec file updates:
    * BuildRequires / Requires: latest corosync and openais
    * Drop --enable_virt. Now default upstream


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.5-2.git0a6184070
changelog:
  - Drop fence_xvm from upstream (fence_head.diff)
  - spec file updates:
    * Drop unrequired comments
    * Readd alpha tag and clean it's usage around
    * Requires: fence-virt in sufficient version to provide fence_xvm


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.6-1
changelog:
  - New upstream release (drop fence_head.diff)
  - spec file updates:
    * use new Source0 url
    * use file based Requires for ipmitools (rhbz: 545237)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-1
changelog:
  - new upstream release:
    Resolves: rhbz#557349, rhbz#564471
  - spec file update:
    * update spec file copyright date
    * use bz2 tarball
    * bump minimum requirements for corosync/openais
    * fence-agents should not Requires fence-virt directly
    * stop shipping fence_xvmd


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-2
changelog:
  - Add workaround to broken snmp return codes
    (workaround_broken_snmp_return_codes.patch)
    Resolves: rhbz#574027


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.9-3
changelog:
  - Remove 'ipport' option from WTI fence agent
    (remove_ipport_option_from_wti_fence_agent.patch)
    Resolves: rhbz#579059


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-1
changelog:
  - Rebase on top of new upstream bug fix only release:
    * drop all bug fix patches.
    * Addresses the follwing issues:
      from 3.0.11 release:
    Resolves: rhbz#583019, rhbz#583017, rhbz#583948, rhbz#584003
    * Rebase:
    Resolves: rhbz#582351
  - Stop build on ppc and ppc64.
    Resolves: rhbz#590985
  - Update list of supported agents.


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-2
changelog:
  - Add direct support for WTI VMR
    (add_direct_support_for_wti_vmr.patch)
    Resolves: rhbz#578617
  - Fix changelog for 3.0.12-1 release (add missing bugzilla entries)


author: Marek Grac <mgrac@redhat.com> - 3.0.12-3
changelog:
  - Add support for non-default TCP ports for WTI fence agent
    (add_ipport_to_wti.patch)
  - Resolves: rhbz#579059


author: Marek Grac <mgrac@redhat.com> - 3.0.12-4
changelog:
  - fence_apc fails for some port numbers
    (fence_apc_fails_for_some_port_numbers.patch)
  - Resolves: rhbz#606297


author: Lon Hohberger <lhh@redhat.com> - 3.0.12-6
changelog:
  - Don't truncate fence_scsi log files
    (fence_scsi_do_not_truncate_log_file.patch)
    Resolves: rhbz#608887


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-7
changelog:
  - fence_rsb: Raise exceptions not strings with python 2.6
    (fence_rsb_raise_exceptions.patch)
    Resolves: rhbz#612941
  - fence_ilo: will throw exception if user does not have power priviledges
    (fence_ilo_will_throw_exception_if_user_has_no_power_privs.patch)
    Resolves: rhbz#615255
  - fence agents support clean up:
    drop support for baytech, brocade, mcdata, rackswitch and bullpap
    deprecate rsa and sanbox2
    rename ibmblade to bladecenter_snmp and add compatibility symlink
    (fence_rename_ibmblade_to_bladecenter_snmp_part1.patch)
    (fence_rename_ibmblade_to_bladecenter_snmp_part2.patch)
    Resolves: rhbz#616559
  - spec file changelog cleanup for older releases
  - rename Patch0 to be consistent with the others


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-8
changelog:
  - Fix syntax error in code that opens logfile.
    (fix_syntax_error_in_code_that_opens_logfile.patch)
    Resolves: rhbz#608887


author: Marek Grac <mgrac@redhat.com> - 3.0.12-9
changelog:
  - Provide fence-rhev agent that uses the RHEV REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595383


author: Marek Grac <mgrac@redhat.com> - 3.0.12-10
changelog:
  - Support for ilo3 devices using fence_ipmilan
    (fence-agents-Add-power_wait-to-fence_ipmilan.patch)
    Resolves: rhbz#642671


author: Marek Grac <mgrac@redhat.com> - 3.0.12-11
changelog:
  - fence_drac5: make "port" a synonym of "module_name" for drac5
    (fence_drac5-make-port-a-synonym-of-module_name-for-d.patch)
    Resolves: rhbz#619096
  - fencing: Not all parameters appear in metadata
    (fencing-Not-all-parameters-appear-in-metadata-1-2.patch)
    (fencing-Not-all-parameters-appear-in-metadata-2-2.patch)
    Resolves: rhbz#618703
  - fence_egenera: Missing -u / user in manual page
    (fence_egenera-Missing-u-user-in-manual-page.patch)
    Resolves: rhbz#635824
  - fence_cisco_ucs: New fence agent for Cisco UCS
    (fence_cisco_ucs-New-fence-agent-for-Cisco-UCS.patch)
    Resolves: rhbz#580492
  - fencing: Method to cause one node to delay fencing
    (fencing-Method-to-cause-one-node-to-delay-fencing.patch)
    (fencing-Method-to-cause-one-node-to-delay-fencing-2.patch)
    (fencing-Method-to-cause-one-node-to-delay-fencing-dr.patch)
    (fencing-Method-to-cause-one-node-to-delay-fencing-ip.patch)
    Resolves: rhbz#614046


author: Marek Grac <mgrac@redhat.com> - 3.0.12-12
changelog:
  - Add "diag" option to fence_ipmilan to support ipmi chassis power diag option
    (fence_ipmilan-Add-diag-option-to-support-ipmitoo.patch)
    Resolves: rhbz#655764
  - Fix manual page to describe usage of fence_ipmi with ilo3 
    (fence_ipmilan-Fix-manual-page-to-describe-usage-wit.patch)
    Resolves: rhbz#648892
  - Metadata (man pages) generation does not take different sorts of action
    (library-Metadata-are-not-correct-if-agent-does-not.patch)
    Resolves: rhbz#623266


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-13
changelog:
  - fence_scsi: need stricter regular expression when looking for specific keys
    (fence_scsi_fix_regular_expression_for_grep.patch)
    Resolves: rhbz#670910
  - fence_scsi: unfencing fails when device reports "unit attention"
    (fence_scsi_always_do_sg_turs_before_registration.patch)
    (fence_scsi_always_do_sg_turs_on_dm_mp_devices.patch)
    Resolves: rhbz#640343
  - fence_scsi: verify that actions were successful
    (fence_scsi_verify_that_on_off_actions_succeed.patch)
    Resolves: rhbz#644385
  - fence_scsi: identify dm-multipath devices correctly
    (fence_scsi_identify_dm_multipath_devices_correctly.patch)
    Resolves: rhbz#644389
  - fence_scsi: properly log errors for all commands
    (fence_scsi_properly_log_errors_for_all_commands.patch)
    Resolves: rhbz#672597


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-17
changelog:
  - Allow fence_scsi to use any valid hexadecimal key
    (fence_scsi_allow_use_of_any_valid_hexadecimal_key.patch)
  - fence_scsi: grep for keys should be case insensitive
    (fence_scsi_grep_for_keys_should_be_case_insensitive.patch)
    Resolves: rhbz#653504


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.0.12-18
changelog:
  - fence_wti: Unable to parse output when split into several screens
    (fence_wti_unable_to_parse_output_when_split_into_several_screens_part1.patch)
    (fence_wti_unable_to_parse_output_when_split_into_several_screens_part2.patch)
    Resolves: rhbz#678522


author: Marek Grac <mgrac@redhat.com> - 3.0.12-20
changelog:
  - fencing: Accept other values for yes (on, true)
    (fence-agents-Accept-other-values-for-true.patch)
    Resolves: rhbz#679502


author: Marek Grac <mgrac@redhat.com> - 3.0.12-21
changelog:
  - fence_rhevm: Update URL for RHEV-M REST API
    (fence_rhevm-Update-URL-to-RHEV-M-REST-API.patch)
    Resolves: rhbz#681674


author: Marek Grac <mgrac@redhat.com> - 3.0.12-22
changelog:
  - fence_cisco_ucs: Add support for sub-organizations
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678904


author: Lon Hohberger <lhh@redhat.com> - Version: 3.0.12-23
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Resolves: rhbz#655764


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.4-1
changelog:
  - Rebase package on top of new upstream
  - spec file update:
    * update spec file copyright date
    * update upstream URL
    * drop all patches
    * update list of fence_agents (ibmblade listed twice, bladecenter_snmp deprecated)
    * drop libxml2-devel libvirt-devel clusterlib-devel corosynclib-devel and
      openaislib-devel from BuildRequires
    * make ready to enable fence_vmware_soap
    * update and clean configure and build section.
    * create bladecenter_snmp compat symlink at rpm install time
    * update file list to include scsi_check script
    Resolves: rhbz#707123
  - Integrate watchdog with cluster to reboot nodes when scsi fencing has occurred
    (imported directly from new upstream)
    Resolves: rhbz#673575
  - fence_ipmilan returns incorrect status on monitor op if chassis is powered off
    (imported directly from new upstream)
    Resolves: rhbz#693428
  - fence_rsa: fix AttributeError: 'NoneType' object has no attribute 'group'
    (imported directly from new upstream)
    Resolves: rhbz#678019


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 3.1.5-1
changelog:
  - Rebase package on top of new upstream
    * ship xsl and rng files required to build relaxng schema
  - spec file update:
    add %post to generate new relaxng schema
    Resolves: rhbz#707123
  - Add Requires: pyOpenSSL for fence_ilo
    Resolves: rhbz#718207
  - Fix fence_drac5 list operation with Dell DRAC CMC
    (imported directly from new upstream)
    Resolves: rhbz#718196
  - fence_bladecenter --missing_as_off reboot action fails on missing blade
    (imported directly from new upstream)
    Resolves: rhbz#708052


author: Marek Grac <mgrac@redhat.com> - 3.1.5-7
changelog:
  - fence_rhevm needs to change "UP" status to "up" state 
      as the REST-API has changed
    Resolves: rhbz#731166


author: Marek Grac <mgrac@redhat.com> - 3.1.5-9
changelog:
  - fence_ipmilan exposes user password on verbose mod
    Resolves: rhbz#732372
  - fence_ipmilan should honor ipmilan's -L option (privileges)
    Resolves: rhbz#726571


author: Marek Grac <mgrac@redhat.com> - 3.1.5-10
changelog:
  - fence_kdump: Newly detected Coverity defect (null dereference)
    Resolves: rhbz#734429
  - fence_scsi: fix scsi unfencing to allow simultaneous unfences
    Resolves: rhbz#738384


author: Marek Grac <mgrac@redhat.com> - 3.1.5-11
changelog:
  - fence_ipmilan: Parsing args for password script
    Resolves: rhbz#740484
  - fence_rsb: Porting RSB fence agent to fencing library (ssh support added)
    Resolves: rhbz#742003
  - fence_rhevm: Incorrect power status detection
    Resolves: rhbz#769681
  - fence_vmware_soap: Support for alias names as ports
    Resolves: rhbz#771211
  - fence_ipmilan: Possible buffer overflow
    Resolves: rhbz#771936
  - fence_vmware_soap: Support for more than 100 virtual machines
    Resolves: rhbz#772597


author: Marek Grac <mgrac@redhat.com> - 3.1.5-12
changelog:
  - fence_ipmilan: doesn't respect power_wait option for power off
    Resolves: rhbz#787706
  - fencing: Missing password is not reported properly
    Resolves: rhbz#785091
  - fencing: fence_<agent> metadata behaviour and docs 
    Resolves: rhbz#714841


author: Marek Grac <mgrac@redhat.com> - 3.1.5-16
changelog:
  - fence agents: attribute unique in XML metadata should be set 0
    Resolves: rhbz#806883
  - fence_ipmilan: Typo
    Resolves: rhbz#806912
  - fence_ipmilan: Return code can be invalid with -M cycle
    Resolves: rhbz#806897


author: Marek Grac <mgrac@redhat.com> - 3.0.15-20
changelog:
  - fence_ipdu: New fence agent for IBM iPDU
    Resolves: rhbz#740869
  - fence_hpblade: New fence agent for HP blades
    Resolves: rhbz#818337
  - Add fence symlinks for most used fence agents
    Resolves: rhbz#800650
  - Fix unique attributes in XML output
    Resolves: rhbz#822507
  - Automatic detection of EOL in telnet sessions
    Resolves: rhbz#823430


author: Marek Grac <mgrac@redhat.com> - 3.0.15-21
changelog:
  - fence_vmware_soap: Faster fencing and fix issue with VM without valid UUID
    Resolves: rhbz#769798
  - fence_rhevm: Support new RHEV-M API
    Resolves: rhbz#863568


author: Marek Grac <mgrac@redhat.com> - 3.0.15-26
changelog:
  - fence_drac5: fix regression caused by missing detection of EOL
    Resolves: rhbz#905478
  - fence_vmware_soap: fix traceback when hostname cannot be resolved
    Resolves: rhbz#902404


author: Marek Grac <mgrac@redhat.com> - 3.0.15-27
changelog:
  - fence_ipmilan: Fix manual page to mention HP iLO3, iLO4
    Resolves: rhbz#872308
  - fence_cisco_ucs: Respect "delay" option
    Resolves: rhbz#896603
  - fence_scsi: Add "unfence" operation to manual page
    Resolves: rhbz#887349


author: Marek Grac <mgrac@redhat.com> - 3.0.15-28
changelog:
  - fence_scsi: Add delay option
    Resolves: rhbz#912773
  - fence_apc: Add support for firmware 5.x
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-29
changelog:
  - remove static parts from cluster schema templates
    Resolves: rhbz#917675
  - fence_cisco_ucs: agent did not respect login_timeout
    Resolves: rhbz#978325
  - fence_cisco_ucs: agent fail with traceback when hostname cannot be resolved
    Resolves: rhbz#978326
  - fencing: Validation if password/password_script or identity file is used was not processed
    Resolves: rhbz#959490
  - fence_scsi: support unfence action in pacemaker cluster
    Resolves: rhbz#978328


author: Marek Grac <mgrac@redhat.com> - 3.0.15-33
changelog:
  - fence_scsi: Fix error in XML metadata
    Resolves: rhbz#994186
  - fence_scsi: Add documention of "delay" into manual pages
    Resolves: rhbz#912773
  - fencing: Improve detection of EOL during login
    Resolves: rhbz#886614


author: Marek Grac <mgrac@redhat.com> - 3.0.15-34
changelog:
  - fence_cisco_ucs: Respect login timeout
    Resolves: rhbz#978325
  - fence_bladecenter: Telnet login failure
    Resolves: rhbz#997416


author: Marek Grac <mgrac@redhat.com> - 3.0.15-35
changelog:
  - fence_vmware_soap: Fix symlink vulnerability caused by python-suds temp directory
    Resolves: rhbz#1014000


author: Marek Grac <mgrac@redhat.com> - 3.0.15-40
changelog:
  - fencing: Add option --ssh-options
    Resolves: rhbz#1069618
  - fence_vmware_soap: python exception when user does not have privileges
    Resolves: rhbz#1018263
  - fence_wti: Add support for delay
    Resolves: rhbz#1079291
  - fence_ilo: Unable to enter password with "
    Resolves: rhbz#990537
  - fencing: Fence agent uses key authentication when it should use password
    Resolves: rhbz#1048842


author: Marek Grac <mgrac@redhat.com> - 3.0.15-41
changelog:
  - fence_brocade ported to fencing library
    Resolves: rhbz#641632 rhbz#642232 rhbz#841556
  - fence_rsb fails to power devices on with certain firmwares
    Resolves: rhbz#1110428


author: Marek Grac <mgrac@redhat.com> - 3.0.15-43
changelog:
  - fix quoes in fence_ilo
    Resolves: rhbz#990537
  - fix delay support for agents without off/reboot
    Resolves: rhbz#641632


author: Marek Grac <mgrac@redhat.com> - 3.0.15-44
changelog:
  - fence_brocade: fix default action
    Resolves: rhbz#1114559
  - fence_brocade: add support for list to allow monitor
    Resolves: rhbz#1114528


author: Marek Grac <mgrac@redhat.com> - 4.0.15-4
changelog:
  - fence_ilo_moonshot: New fence agent for HP Moonshot
    Resolves: rhbz#1099551
  - fence_mpath: New fence agent for multipath devices
    Resolves: rhbz#1118008


author: Marek Grac <mgrac@redhat.com> - 4.0.15-5
changelog:
  - fence_ilo_ssh: New fence agent
    Resolves: rhbz#1111482
  - fence_kdump: Update metadata for 'monitor'
    Resolves: rhbz#1094515


author: Marek Grac <mgrac@redhat.com> - 4.0.15-7
changelog:
  - fence_scsi: remove new pythonic version
  - fence_ipmilan: unset default cipher
  - fence_ilo2: add options --tls1.0
  - fence_bladecenter: fix login process
    Resolves: rhbz#1049805


author: Marek Grac <mgrac@redhat.com> - 4.0.15-8.1
changelog:
  - fence_ipmilan no longer understands -i
    Resolves: rhbz#1254046
  - fence_ipmilan no longer understands 'timeout'
    Resolves: rhbz#1254700
  - fence_ilo: Improve negotiation of TLS protocol
    Resolves: rhbz#1256902
  - fence_rsa: Login process over telnet is not working
    Resolves: rhbz#1247062
  - fence_mpath: lose scsi keys after restart
    Resolves: rhbz#1254183


author: Martin Stransky <stransky@redhat.com> - 10.0.8-2
changelog:
  - Fixed rhbz#865284 - add the storage.nfs_filesystem
    config key to property list
  - disable OOP for wrapped plugins (nspluginwrapper)


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Jan Horak <jhorak@redhat.com> - 31.3.0-6
changelog:
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries
  - Fixed problems with dictionaries (mozbz#1097550)


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010711mdk
changelog:
  - initial release.
  - Deleted the obsolete drivers "stp", "cZ11", and "hpdj".
  - Patch applied which flushes the memory cache regularly, otherwise
    foomatic-configure would hang when the Foomatic data of GIMP-Print is
    installed.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010713mdk
changelog:
  - Many bugfixes in "foomatic-printjob".
  - "foomatic-configure" adds the Foomatic config file directory automatically
    to the search paths of PDQ.
  - Printing a help page under PDQ was broken.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010714mdk
changelog:
  - Included the cupsomatic filter script
  - When a queue is set up, default options can be set now
  - Help messages of foomatic-configure and foomatic-printjob cleaned up.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010717mdk
changelog:
  - Added job listing/removal/manipulation and queue control to
    foomatic-printjob
  - Support for printing multiple copies with PDQ


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010825.1
changelog:
  - did a fresh database pull, which contains the old japanese printers as well.
  - removed japanese hack.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010828.1
changelog:
  - WOW! The latest foomatic uses Till Kamppeter's C based combo compiler.
  - It is now fast enough that there is no real benifit to precompiling.
  - NOTE: this forces the package to stop being noarched.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010905.1
changelog:
  - upgraded to latest foomatic, we now have fast overview generation!
  - this means that there is no prebuilt overview file.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.4
changelog:
  - grumble. Some drivers use inline perl scripts, and need the 'use utf8;'
  - pragma. Without it, they break on _some_ of their options.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.5
changelog:
  - changed the patch to use the -Mutf8 command line option,
  - and to restart the printserver, after rebuilding the settings.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011205.1
changelog:
  - respin to pull in latest foomatic database, fixes:
    - droping half of a large job
    - -Mutf8 added to the upstream filters
    - miscelaneous printer db updates


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.1
changelog:
  - respin to pull in latest foomatic database, fixes:
    - properly use the cache in relation to foomatic-combo-xml's output
    - fix _some_ of the quoting issues with calling foomatic-combo-xml


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.2
changelog:
  - fix the rest of the quoting issues with foomatic-combo-xml with the patch
  - foomatic-1.1-20011217-quotes.patch. This has been sent upstream.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20011218.2
changelog:
  - REALLY fix PCL fixup code (bug #55909, others).
  - PreReq fileutils, initscripts (bug #56984).
  - Fix prepends in lpdomatic (bug #57371).
  - Run foomatic-cleanupdrivers during install, to remove driver entries
    with no command line.
  - Put lpdomatic in /usr/sbin again.
  - Fix foomatic-gswrapper's file descriptor manipulations (bug #56871).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020124.1
changelog:
  - Update to CVS.
  - Updated Omni printers to those in Omni 0.5.1.
  - Updated patches: prepend, fd3.
  - Patches no longer needed: utf8, lpdomatic.
  - Added gimp-print (formerly stp) foomatic db info, and removed the old
    stp.xml file.
  - Conflict with ghostscript if it doesn't have gimp-print-4.2.0 yet.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020129.1
changelog:
  - Update to CVS.
  - Patches no longer needed: prepend, fd3.
  - Use RPM_OPT_FLAGS.
  - Allow non-root users to use foomatic-datafile (bug #58956).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020130.1
changelog:
  - Update to CVS.
  - No longer need the cachedir patch.
  - Fix config file path.
  - Look in /usr/local/bin last, not first, in lpdomatic (bug #57915).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.0.1
changelog:
  - Update to CVS.
  - Updated requirements.
  - Updated path and libdir patches.
  - Drop hpijs 1.0.2 patch.
  - foomatic-datafile has moved to %{_bindir}.
  - Update gimp-print data to 4.2.1.
  - Update Omni printer data to 0.6.1.


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.2
changelog:
  - Fix release number.
  - Drop gen-ppds from the file manifest---use foomatic-compiledb instead
    (bug #63622).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.3
changelog:
  - Remove explicit perl-Storable dependency; it should be perl(Storable),
    and that is picked up automatically.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need 67973, 970c patches.
  - Remove cups-drivers-* packages (no longer needed).
  - Remove files not shipped.  Ship filter.conf.
  - Conditionally restart cups.
  - Use libdir.
  - Don't put things in site_perl; use vendor_perl instead (bug #73528).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-11
changelog:
  - Add autodetect info for HP DeskJet 656C.  It doesn't really do
    IEEE 1284 IDs, but since it's a USB device we can figure out its
    manufacturer and model anyway.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-0.beta2.1
changelog:
  - 3.0.0beta2.
  - Updated path patch.
  - No longer need FOOMATIC_LIBDIR, generic PS, ids, postscript-duplex,
    hpijs13, psc2210, duplex184 patches.
  - Add hpijs support back in.
  - Fix up references to old printer IDs.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-5
changelog:
  - Add some Dell printers.
  - Updated foomatic-db to 20030603.
  - Updated missing UPP list for ghostscript 7.07.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-10
changelog:
  - Updated db to 20031105.
  - Drop filters path patch.
  - Updated fontpath patch, both libdir patches.
  - Updated engine and filters to 3.0-20031105.
  - Updated hpijs db to 1.4-1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-12
changelog:
  - Undo over-zealous percent escaping in PostScript.xml
  - Build requires libxml2-devel (bug #110589).
  - Use relative, not absolute, symlink for CUPS filter.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-14
changelog:
  - Updated db to 20031217.
  - Updated engine to 20031217.
  - Updated hpijs to 1.5-20031217.
  - Use relative symlinks.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-18
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Explicitly state conflict with hpijs < 1.5.
  - Make foomatic-ppdfile accept '-t type' like foomatic-datafile used to.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-19
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - No longer need symlink patch.
  - Updated fontpath patch.
  - Updated engine to 20040112.
  - Updated db to 20040112.
  - Updated gimp-print data to 4.2.6.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-21
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Revert Omni update temporarily.
  - Downgrade engine to 20031217 to stick to the stable branch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-23
changelog:
  - Fix up HP Color Inkjet CP1700 support.
  - Remove PrintoutMode option from gimp-print driver to avoid breaking it.
  - Update filters to 3.0.1rc3.
  - Update engine to 3.0.1rc2
  - No long need symlink patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.1-1
changelog:
  - Upgrade db to 20040219.
  - Upgrade hpijs to 1.5-20040219.
  - Upgrade engine to 3.0.1.
  - Upgrade filters to 3.0.1.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-1
changelog:
  - Updated filters to 3.0.2.
  - Updated db-engine to 3.0.2.
  - No longer need Omni PageSize patch or lvalue patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-2
changelog:
  - Use gimp-print driver for HP 2000C (bug #133647).
  - Add autodetect information for Lexmark Z52 (bug #135178).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-4
changelog:
  - Add autodetect information for HP Business InkJet 1100 (bug #139258).
  - Add autodetect information for Epson Stylus Photo 790 (bug #139266).
  - Add autodetect information for HP DJ 3820 (bug #139271).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-5
changelog:
  - Ship data as non-executable (bug #139271).
  - Corrected autodetect information for HP Business InkJet 1100 (bug #139258).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-6
changelog:
  - Add autodetect information for HP LaserJet 8150 (bug #139683).
  - Add autodetect information for Epson Stylus Color 777 (bug #139629).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-9
changelog:
  - Updated db to 20041124.
  - Updated hpijs-db to 1.5-20041124.
  - No longer need HP DJ 6122 patch.
  - No longer need ieee1284 patch.
  - Updated Omni-printers to 0.9.2.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-10
changelog:
  - Added IEEE 1284 information for HP-Color_Inkjet_Printer_CP1700 (bug #141594).
  - Added IEEE 1284 information for Samsung-ML-1710 (bug #141163).
  - Added IEEE 1284 information for HP-OfficeJet_G95 (bug #141057).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Added IEEE 1284 information for Okidata Okipage 6ex (bug #143964).
  - Added IEEE 1284 information for Epson Stylus Photo R300 (bug #143939).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Corrected IEEE 1284 information for HP DeskJet 6540 (bug #147288).
  - Added IEEE 1284 information for Epson Stylus C82 (bug #147230).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix Postscript driver (bug #151645).
  - Add IEEE 1284 ID for HP DeskJet 5150 (bug #154518).
  - Add IEEE 1284 ID for HP LaserJet 2420 (bug #114191).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add IEEE 1284 ID for Epson Stylus Photo 915 (bug #160030).
  - Add IEEE 1284 ID for Ricoh Aficio 2228C PS (bug #160036).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-24
changelog:
  - Updated db to 3.0-20050804.
  - No longer need hplj5 patch.
  - Conflicts with system-config-printer before the parser bug was fixed.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-25
changelog:
  - Add IEEE 1284 ID for HP LaserJet 4200 (bug #166638).
  - Add IEEE 1284 ID for HP LaserJet 5000 (bug #167154).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-28
changelog:
  - Remove explicit perl module package dependencies.  These should be
    picked up by the RPM during the build process automatically anyway.
    Fixes bug #167997.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-29
changelog:
  - Updated db-engine to 3.0-20051209.
  - Updated db-hpijs to 1.5-20051209.
  - Updated filters to 3.0-20051209.  No longer need rip-cvs patch.
  - Updated db to 3.0-20051209.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-32
changelog:
  - Fix foomatic-cleanupdrivers.
  - Updated db-engine to 3.0-20060117.
  - Handle PPDs with default option values of '0'.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38
changelog:
  - Change a2ps requirement to mpage.
  - Make CUPS driver work with drivers containing '-' in their names
    (bug #201398).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-39
changelog:
  - Updated db-engine to 3.0-20061031.
  - Updated db to 3.0-20061031.
  - Remove references to foo2zjs and foo2oak (bug #208851).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-43
changelog:
  - Updated db to 3.0-20070105 (bug #214037, bug #191661, bug #198999,
    bug #191504, bug #187387, bug #188762, bug #170373, bug #221121,
    bug #214801).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-48
changelog:
  - Updated db to 3.0-20070614.
  - Updated db-engine to 3.0-20070614.
  - Updated db-hpijs to 20070614.
  - Updated filters to 3.0-20070614.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-49
changelog:
  - Safe default margins for PPDs (bug #244161).
  - Added missing IEEE 1284 ID for HP Photosmart 380 (bug #241352).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-50
changelog:
  - Removed references to unshipped drivers:
    * drv_x125
    * ml85p
    * pbm2lxwl
    * pbmtozjs
    * bjc800j


author: Tim Waugh <twaugh@redhat.com> 3.0.2-51
changelog:
  - Build requires perl(ExtUtils::MakeMaker).
  - Updated filters to 3.0-20070919.
  - Updated db to 20070919.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-53
changelog:
  - Updated db-hpijs to 20071218.
  - Updated db to 3.0-20071218.
  - Updated db-engine to 3.0-20071218.
  - Updated filters to 3.0-20071218 (bug #416881).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-56
changelog:
  - Updated filters to 3.0-20080211.
  - Updated db-hpijs to 20080211.
  - Updated db-engine to 3.0-20080211.
  - Updated db to 3.0-20080211.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-61
changelog:
  - Updated db-hpijs to 20080710.
  - Updated db to 20080710.
  - Updated filters to 3.0-20080710.
  - Updated db-engine to 3.0-20080710.
  - Ship a defaultspooler file to avoid the need for spooler
    auto-detection (bug #454684).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-65
changelog:
  - Removed ampathxml and xml-cflags patches.
  - Updated db-hpijs to 20080904.
  - Updated db to 20080904.
  - Updated filters to 3.0-20080904.
  - Updated db-engine to 3.0-20080904.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-68
changelog:
  - Updated db-hpijs to 20081124.
  - Updated db to 20081124.
  - Updated filters to 3.0-20081124.
  - Updated db-engine to 3.0-20081124.
  - Better build root.
  - Fixed summary.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-69
changelog:
  - Updated db-hpijs to 20090110.
  - Updated db to 20090110.
  - Updated filters to 3.0-20090110.
  - Updated db-engine to 3.0-20090110.


author: Tim Waugh <twaugh@redhat.com> 4.0.2-1
changelog:
  - Updated db-engine to 4.0.2 (bug #503188).
  - Updated foomatic-filters to 4.0.2 (bug #496521).
  - Updated db-hpijs to 20090701.
  - Updated db to 4.0-20090702.
  - This package obsoletes oki4linux (bug #491489).
  - Don't ship ChangeLog/README/USAGE for each of the 4 packages as it
    comes to more than 1MB (bug #492449).
  - Don't use mktemp in foomatic-rip.


author: Tim Waugh <twaugh@redhat.com> 4.0.2-5
changelog:
  - Use stcolor driver for Epson Stylus Color 200 (bug #513676).
  - Don't ship 3-distribution symlink as CUPS already searches
    /usr/share/ppd (bug #514244).
  - Remove non-PPD files from PPD directory (bug #514242).


author: Tim Waugh <twaugh@redhat.com> - 4.0.3-10
changelog:
  - Removed old explicit provides for perl(Foomatic::GrovePath).
  - Fixed macro in changelog.
  - Avoid mixed spaces and tabs.
  - Ship COPYING files.
  - Added comments for sources.
  - Use Requires not PreReq (bug #225768).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-1
changelog:
  - Updated to 4.0.4 (bug #570234).  No longer buildrequires
    ghostscript-devel (but requires ghostscript) or
    foomatic-filters-int-options patch.


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2964, bug #727016).


author: Tim Waugh <twaugh@redhat.com> - 4.0.4-3
changelog:
  - Too few arguments for format in a debugging string (bug #726385).
  - Fixed perl installation locations for build (bug #661770).


author: Jiri Popelka <jpopelka@redhat.com> - 4.0.4-5
changelog:
  - Also consider back tick and semicolon as illegal shell escape characters.
  - CVE-2015-8327, CVE-2015-8560


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Karsten Hopp <karsten@redhat.com> 1.1.3-3
changelog:
  - remove trailing dot from summary
  - fix buildroot
  - fix post/postun/preun requirements
  - use rpm macros


author: Thomas Woerner <twoerner@redhat.com> 1.1.5-1
changelog:
  - new version 1.1.5
    - no /etc/raddb/otppasswd.sample anymore
    - build is pie by default, dropped pie patch
  - fixed build requirement for perl (perl-devel)


author: Thomas Woerner <twoerner@redhat.com> 1.1.6-2
changelog:
  - radiusd expects /etc/raddb to not be world readable or writable
    /etc/raddb now belongs to radiusd, post script sets permissions


author: Thomas Woerner <twoerner@redhat.com> 1.1.7-1
changelog:
  - new versin 1.1.7
  - install snmp MIB files
  - dropped LDAP_DEPRECATED flag, it is upstream
  - marked config files for sub packages as config (rhbz#240400)
  - moved db files to /var/lib/raddb (rhbz#199082)


author: <jdennis@redhat.com> - 1.1.7-3.3.ipa
changelog:
  - add support in rlm_ldap for reading clients from ldap
  - fix TLS parameter controling if a cert which fails to validate
    will be accepted (i.e. self-signed),
    rlm_ldap config parameter=tls_require_cert
    ldap LDAP_OPT_X_TLS_REQUIRE_CERT parameter was being passed to
    ldap_set_option() when it should have been ldap_int_tls_config()


author: John Dennis <jdennis@redhat.com> - 2.0.3-1
changelog:
  - Upgrade to current upstream 2.0.3 release
  - Many thanks to Enrico Scholz for his spec file suggestions incorporated here
  - Resolve: bug #438665: Contains files owned by buildsystem
  - Add dialupadmin-mysql, dialupadmin-postgresql, dialupadmin-ldap subpackages
    to further partition external dependencies.
  - Clean up some unnecessary requires dependencies
  - Add versioned requires between subpackages


author: John Dennis <jdennis@redhat.com> - 2.0.3-2
changelog:
  - remove support for radrelay, it's different now
  - turn off default inclusion of SQL config files in radiusd.conf since SQL
    is an optional RPM install
  - remove mssql config files


author: John Dennis <jdennis@redhat.com> - 2.0.4-1
changelog:
  - upgrade to latest upstream, see Changelog for details
  - resolves: bug #447545: freeradius missing /etc/raddb/sites-available/inner-tunnel


author: John Dennis <jdennis@redhat.com> - 2.0.5-1
changelog:
  - upgrade to latest upstream, see Changelog for details,
    upstream now has more complete fix for bug #447545, local patch removed


author: John Dennis <jdennis@redhat.com> - 2.0.5-2
changelog:
  - Resolves: bug #453761: FreeRADIUS %post should not include chown -R
    specify file attributes for /etc/raddb/ldap.attrmap
    fix consistent use of tabs/spaces (rpmlint warning)


author: John Dennis <jdennis@redhat.com> - 2.1.1-1
changelog:
  - Resolves: bug #464119 bootstrap code could not create initial certs in /etc/raddb/certs because
    permissions were 750, radiusd running as euid radiusd could not write there, permissions now 770


author: John Dennis <jdennis@redhat.com> - 2.1.1-3
changelog:
  - make spec file buildable on RHEL5.2 by making perl-devel a fedora only dependency.
  - remove diaupadmin packages, it's not well supported and there are problems with it.


author: John Dennis <jdennis@redhat.com> - 2.1.1-8
changelog:
  - add --with-system-libtool to configure as a workaround for
  undefined reference to lt__PROGRAM__LTX_preloaded_symbols


author: John Dennis <jdennis@redhat.com> - 2.1.3-1
changelog:
  - upgrade to latest upstream release, upstream summary follows:
    The focus of this release is stability.
    Feature Improvements:
      * Allow running with "user=radiusd" and binding to secure sockets.
      * Start sending Status-Server "are you alive" messages earlier, which
        helps with proxying multiple realms to a home server.
      * Removed thread pool code from rlm_perl.  It's not necessary.
      * Added example Perl configuration to raddb/modules/perl
      * Force OpenSSL to support certificates with SHA256. This seems to be
        necessary for WiMAX certs.
    Bug fixes:
      * Fix Debian patch to allow it to build.
      * Fix potential NULL dereference in debugging mode on certain
        platforms for TTLS and PEAP inner tunnels.
      * Fix uninitialized memory in handling of vendor definitions
      * Fix parsing of quoted (but non-string) attributes in the "users" file.
      * Initialize uknown NAS IP to 255.255.255.255, rather than 0.0.0.0
      * use SUN_LEN in control socket, to avoid truncation on some platforms.
      * Correct internal handling of "debug condition" to prevent it from
        being over-written.
      * Check return code of regcomp in "unlang", so that invalid regular
        expressions are caught rather than mishandled.
      * Make rlm_sql use <ltdl.h>.  Addresses bug #610.
      * Document list "type = status" better.  Closes bug #580.
      * Set "default days" for certificates, because OpenSSL won't do it.
        This closes bug #615.
      * Reference correct list in example raddb/modules/ldap. Closes #596.
      * Increase default schema size for Acct-Session-Id to 64. Closes #540.
      * Fix use of temporary files in dialup-admin.  Closes #605 and
        addresses CVE-2008-4474.
      * Addressed a number of minor issues found by Coverity.
      * Added DHCP option 150 to the dictionary.  Closes #618.


author: John Dennis <jdennis@redhat.com> - 2.1.6-1
changelog:
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * radclient exits with 0 on successful (accept / ack), and 1
        otherwise (no response / reject)
      * Added support for %{sql:UPDATE ..}, and insert/delete
        Patch from Arran Cudbard-Bell
      * Added sample "do not respond" policy.  See raddb/policy.conf
        and raddb/sites-available/do_not_respond
      * Cleanups to Suse spec file from Norbert Wegener
      * New VSAs for Juniper from Bjorn Mork
      * Include more RFC dictionaries in the default install
      * More documentation for the WiMAX module
      * Added "chase_referrals" and "rebind" configuration to rlm_ldap.
        This helps with Active Directory.  See raddb/modules/ldap
      * Don't load pre/post-proxy if proxying is disabled.
      * Added %{md5:...}, which returns MD5 hash in hex.
      * Added configurable "retry_interval" and "poll_interval"
        for "detail" listeners.
      * Added "delete_mppe_keys" configuration option to rlm_wimax.
        Apparently some WiMAX clients misbehave when they see those keys.
      * Added experimental rlm_ruby from
        http://github.com/Antti/freeradius-server/tree/master
      * Add Tunnel attributes to ldap.attrmap
      * Enable virtual servers to be reloaded on HUP.  For now, only
        the "authorize", "authenticate", etc. processing sections are
        reloaded.  Clients and "listen" sections are NOT reloaded.
      * Updated "radwatch" script to be more robust.  See scripts/radwatch
      * Added certificate compatibility notes in raddb/certs/README,
        for compatibility with different operating systems. (i.e. Windows)
      * Permit multiple "-e" in radmin.
      * Add support for originating CoA-Request and Disconnect-Request.
        See raddb/sites-available/originate-coa.
      * Added "lifetime" and "max_queries" to raddb/sql.conf.
        This helps address the problem of hung SQL sockets.
      * Allow packets to be injected via radmin.  See "inject help"
        in radmin.
      * Answer VMPS reconfirmation request.  Patch from Hermann Lauer.
      * Sample logrotate script in scripts/logrotate.freeradius
      * Add configurable poll interval for "detail" listeners
      * New "raddebug" command.  This prints debugging information from
        a running server.  See "man raddebug.
      * Add "require_message_authenticator" configuration to home_server
        configuration.  This makes the server add Message-Authenticator
        to all outgoing Access-Request packets.
      * Added smsotp module, as contributed by Siemens.
      * Enabled the administration socket in the default install.
        See raddb/sites-available/control-socket, and "man radmin"
      * Handle duplicate clients, such as with replicated or
        load-balanced SQL servers and "readclients = yes"
    Bug fixes
      * Minor changes to allow building without VQP.
      * Minor fixes from John Center
      * Fixed raddebug example
      * Don't crash when deleting attributes via unlang
      * Be friendlier to very fast clients
      * Updated the "detail" listener so that it only polls once,
        and not many times in a row, leaking memory each time...
      * Update comparison for Packet-Src-IP-Address (etc.) so that
        the operators other than '==' work.
      * Did autoconf magic to work around weird libtool bug
      * Make rlm_perl keep tags for tagged attributes in more situations
      * Update UID checking for radmin
      * Added "include_length" field for TTLS.  It's needed for RFC
        compliance, but not (apparently) for interoperability.
      * Clean up control sockets when they are closed, so that we don't
        leak memory.
      * Define SUN_LEN for systems that don't have it.
      * Correct some boundary conditions in the conditional checker ("if")
        in "unlang".  Bug noted by Arran Cudbard-Bell.
      * Work around minor building issues in gmake.  This should only
        have affected developers.
      * Change how we manage unprivileged user/group, so that we do not
        create control sockets owned by root.
      * Fixed more minor issues found by Coverity.
      * Allow raddb/certs/bootstrap to run when there is no "make"
        command installed.
      * In radiusd.conf, run_dir depends on the name of the program,
        and isn't hard-coded to "..../radiusd"
      * Check for EOF in more places in the "detail" file reader.
      * Added Freeswitch dictionary.
      * Chop ethernet frames in VMPS, rather than droppping packets.
      * Fix EAP-TLS bug.  Patch from Arnaud Ebalard
      * Don't lose string for regex-compares in the "users" file.
      * Expose more functions in rlm_sql to rlm_sqlippool, which
        helps on systems where RTLD_GLOBAL is off.
      * Fix typos in MySQL schemas for ippools.
      * Remove macro that was causing build issues on some platforms.
      * Fixed issues with dead home servers.  Bug noted by Chris Moules.
      * Fixed "access after free" with some dynamic clients.

  - fix packaging bug, some directories missing execute permission
    /etc/raddb/dictionary now readable by all.


author: John Dennis <jdennis@redhat.com> - 2.1.7-1
changelog:
  - enable building of the rlm_wimax module
  - pcap wire analysis support is enabled and available in utils subpackage
  - Resolves bug #523053 radtest manpage in wrong package
  - update to latest upstream release, from upstream Changelog:
    Feature improvements
      * Full support for CoA and Disconnect packets as per RFC 3576
        and RFC 5176.  Both receiving and proxying CoA is supported.
      * Added "src_ipaddr" configuration to "home_server".  See
        proxy.conf for details.
      * radsniff now accepts -I, to read from a filename instead of
        a device.
      * radsniff also prints matching requests and any responses to those
        requests when '-r' is used.
      * Added example of attr_filter for Access-Challenge packets
      * Added support for udpfromto in DHCP code
      * radmin can now selectively mark modules alive/dead.
        See "set module state".
      * Added customizable messages on login success/fail.
        See msg_goodpass && msg_badpass in log{} section of radiusd.conf
      * Document "chase_referrals" and "rebind" in raddb/modules/ldap
      * Preliminary implementation of DHCP relay.
      * Made thread pool section optional.  If it doesn't exist,
        the server will run single-threaded.
      * Added sample radrelay.conf for people upgrading from 1.x
      * Made proxying more stable by failing over, rather than
        rejecting the first request.  See "response_window" in proxy.conf
      * Allow home_server_pools to exist without realms.
      * Add dictionary.iea (closes bug #7)
      * Added support for RFC 5580
      * Added experimental sql_freetds module from Gabriel Blanchard.
      * Updated dictionary.foundry
      * Added sample configuration for MySQL cluster in raddb/sql/ndb
        See the README file for explanations.
    Bug fixes
      * Fixed corner case where proxied packets could have extra
        character in User-Password attribute.  Fix from Niko Tyni.
      * Extended size of "attribute" field in SQL to 64.
      * Fixes to ruby module to be more careful about when it builds.
      * Updated Perl module "configure" script to check for broken
        Perl installations.
      * Fix "status_check = none".  It would still send packets
        in some cases.
      * Set recursive flag on the proxy mutex, which enables safer
        cleanup on some platforms.
      * Copy the EAP username verbatim, rather than escaping it.
      * Update handling so that robust-proxy-accounting works when
        all home servers are down for extended periods of time.
      * Look for DHCP option 53 anywhere in the packet, not just
        at the start.
      * Fix processing of proxy fail handler with virtual servers.
      * DHCP code now prints out correct src/dst IP addresses
        when sending packets.
      * Removed requirement for DHCP to have clients
      * Fixed handling of DHCP packets with message-type buried in the packet
      * Fixed corner case with negation in unlang.
      * Minor fixes to default MySQL & PostgreSQL schemas
      * Suppress MSCHAP complaints in debugging mode.
      * Fix SQL module for multiple instance, and possible crash on HUP
      * Fix permissions for radius.log for sites that change user/group,
        but which don't create the file before starting radiusd.
      * Fix double counting of packets when proxying
      * Make %l work
      * Fix pthread keys in rlm_perl
      * Log reasons for EAP failure (closes bug #8)
      * Load home servers and pools that aren't referenced from a realm.
      * Handle return codes from virtual attributes in "unlang"
        (e.g. LDAP-Group).  This makes "!(expr)" work for them.
      * Enable VMPS to see contents of virtual server again
      * Fix WiMAX module to be consistent with examples.  (closes bug #10)
      * Fixed crash with policies dependent on NAS-Port comparisons
      * Allowed vendor IDs to be be higher than 32767.
      * Fix crash on startup with certain regexes in "hints" file.
      * Fix crash in attr_filter module when packets don't exist
      * Allow detail file reader to be faster when "load_factor = 100"
      * Add work-around for build failures with errors related to
        lt__PROGRAM__LTX_preloaded_symbols.  libltdl / libtool are horrible.
      * Made ldap module "rebind" option aware of older, incompatible
        versions of OpenLDAP.
      * Check value of Fall-Through in attr_filter module.


author: John Dennis <jdennis@redhat.com> - 2.1.7-3
changelog:
  - bug #522111 non-conformant initscript
    also change permission of /var/run/radiusd from 0700 to 0755
    so that "service radiusd status" can be run as non-root


author: John Dennis <jdennis@redhat.com> - 2.1.7-6
changelog:
  - more spec file clean up from review comments
  - remove freeradius-libs subpackage, move libfreeradius-eap and
    libfreeradius-radius into the main package
  - fix subpackage requires, change from freeradius-libs to main package
  - fix description of the devel subpackage, remove referene to non-shipped libs
  - remove execute permissions on src files included in debuginfo
  - remove unnecessary use of ldconfig
  - since all sub-packages now require main package remove user creation for sub-packages
  - also include the LGPL library license file in addition to the GPL license file
  - fix BuildRequires for perl so it's compatible with both Fedora, RHEL5 and RHEL6


author: John Dennis <jdennis@redhat.com> - 2.1.7-7
changelog:
  - Remove devel subpackage. It doesn't make much sense to have a devel package since
    we don't ship libraries and it produces multilib conflicts.


author: John Dennis <jdennis@redhat.com> - 2.1.8-1
changelog:
  - update to latest upstream
    Feature improvements
    * Print more descriptive error message for too many EAP sessions.
      This gives hints on what to do when "failed to store handler"
    * Commands received from radmin are now printed on stdout when
      in debugging mode.
    * Allow accounting packets to be written to a detail file, even
      if they were read from a different detail file.
    * Added OpenSSL license exception (src/LICENSE.openssl)

    Bug fixes
    * DHCP sockets can now set the broadcast flag before binding to a
      socket.  You need to set "broadcast = yes" in the DHCP listener.
    * Be more restrictive on string parsing in the config files
    * Fix password length in scripts/create-users.pl
    * Be more flexible about parsing the detail file.  This allows
      it to read files where the attributes have been edited.
    * Ensure that requests read from the detail file are cleaned up
      (i.e. don't leak) if they are proxied without a response.
    * Write the PID file after opening sockets, not before
      (closes bug #29)
    * Proxying large numbers of packets no longer gives error
      "unable to open proxy socket".
    * Avoid mutex locks in libc after fork
    * Retry packet from detail file if there was no response.
    * Allow old-style dictionary formats, where the vendor name is the
      last field in an ATTRIBUTE definition.
    * Removed all recursive use of mutexes.  Some systems just don't
      support this.
    * Allow !* to work as documented.
    * make templates work (see templates.conf)
    * Enabled "allow_core_dumps" to work again
    * Print better errors when reading invalid dictionaries
    * Sign client certificates with CA, rather than server certs.
    * Fix potential crash in rlm_passwd when file was closed
    * Fixed corner cases in conditional dynamic expansion.
    * Use InnoDB for MySQL IP Pools, to gain transactional support
    * Apply patch to libltdl for CVE-2009-3736.
    * Fixed a few issues found by LLVM's static checker
    * Keep track of "bad authenticators" for accounting packets
    * Keep track of "dropped packets" for auth/acct packets
    * Synced the "debian" directory with upstream
    * Made "unlang" use unsigned 32-bit integers, to match the
      dictionaries.


author: John Dennis <jdennis@redhat.com> - 2.1.8-2
changelog:
  - bug #526559 initial install should run bootstrap to create certificates
    running radiusd in debug mode to generate inital temporary certificates
    is no longer necessary, the /etc/raddb/certs/bootstrap is invoked on initial
    rpm install (not upgrade) if there is no existing /etc/raddb/certs/server.pem file
  - bug #528493 use sha1 algorithm instead of md5 during cert generation
    the certificate configuration (/etc/raddb/certs/{ca,server,client}.cnf) files
    were modifed to use sha1 instead of md5 and the validity reduced from 1 year to 2 months


author: John Dennis <jdennis@redhat.com> - 2.1.9-1
changelog:
  - update to latest upstream, mainly bug fix release
  - Resolves: bug #584101
    Feature improvements
    * Add radmin command "stats detail <file>" to see what
      is going on inside of a detail file reader.
    * Added documentation for CoA.  See raddb/sites-available/coa
    * Add sub-option support for Option 82.  See dictionary.dhcp
    * Add "server" field to default SQL NAS table, and documented it.

    Bug fixes
    * Reset "received ping" counter for Status-Server checks.  In some
      corner cases it was not getting reset.
    * Handle large VMPS attributes.
    * Count accounting responses from a home server in SNMP / statistics
      code.
    * Set EAP-Session-Resumed = Yes, not "No" when session is resumed.
    * radmin packet counter statistics are now unsigned, for numbers
      2^31..2^32.  After that they roll over to zero.
    * Be more careful about expanding data in PAP and MS-CHAP modules.
      This prevents login failures when passwords contain '{'.
    * Clean up zombie children if there were many "exec" modules being
      run for one packet, all with "wait = no".
    * re-open log file after HUP.  Closes bug #63.
    * Fix "no response to proxied packet" complaint for Coa / Disconnect
      packets.  It shouldn't ignore replies to packets it sent.
    * Calculate IPv6 netmasks correctly.  Closes bug #69.
    * Fix SQL module to re-open sockets if they unexpectedly close.
    * Track scope for IPv6 addresses.  This lets us use link-local
      addresses properly.  Closes bug #70.
    * Updated Makefiles to no longer use the shell for recursing into
      subdirs.  "make -j 2" should now work.
    * Updated raddb/sql/mysql/ippool.conf to use "= NULL".  Closes
      bug #75.
    * Updated Makefiles so that "make reconfig" no longer uses the shell
      for recursing into subdirs, and re-builds all "configure" files.
    * Used above method to regenerate all configure scripts.
      Closes bug #34.
    * Updated SQL module to allow "server" field of "nas" table
      to be blank: "".  This means the same as it being NULL.
    * Fixed regex realm example.  Create Realm attribute with value
      of realm from User-Name, not from regex.  Closes bug #40.
    * If processing a DHCP Discover returns "fail / reject", ignore
      the packet rather than sending a NAK.
    * Allow '%' to be escaped in sqlcounter module.
    * Fix typo internal hash table.
    * For PEAP and TTLS, the tunneled reply is added to the reply,
      rather than integrated via the operators.  This allows multiple
      VSAs to be added, where they would previously be discarded.
    * Make request number unsigned.  This changes nothing other than
      the debug output when the server receives more than 2^31 packets.
    * Don't block when reading child output in 'exec wait'.  This means
      that blocked children get killed, instead of blocking the server.
    * Enabled building without any proxy functionality
    * radclient now prefers IPv4, to match the default server config.
    * Print useful error when a realm regex is invalid
    * relaxed rules for preprocess module "with_cisco_vsa_hack".  The
      attributes can now be integer, ipaddr, etc.  (i.e. non-string)
    * Allow rlm_ldap to build if ldap_set_rebind_proc() has only
      2 arguments.
    * Update configure script for rlm_python to avoid dynamic linking
      problems on some platforms.
    * Work-around for bug #35
    * Do suid to "user" when running in debug mode as root
    * Make "allow_core_dumps" work in more situations.
    * In detail file reader, treat bad records as EOF.
      This allows it to continue working when the disk is full.
    * Fix Oracle default accounting queries to work when there are no
      gigawords attributes.  Other databases already had the fix.
    * Fix rlm_sql to show when it opens and closes sockets.  It already
      says when it cannot connect, so it should say when it can connect.
    * "chmod -x" for a few C source files.
    * Pull update spec files, etc. from RedHat into the redhat/ directory.
    * Allow spaces when parsing integer values.  This helps people who
      put "too much" into an SQL value field.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.1.9-3
changelog:
  - Resolves: bug #629951
    override LINK_MODE at compile-time to add -pie to linker flags, so that
    radiusd will be built as a PIE


author: John Dennis <jdennis@redhat.com> - 2.1.10-1
changelog:
  - Upgrade to latest upstream release
    Feature improvements
    * Install the "radcrypt" program.
    * Enable radclient to send requests containing MS-CHAPv1
      Send packets with: MS-CHAP-Password = "password".  It will
      be automatically converted to the correct MS-CHAP attributes.
    * Added "-t" command-line option to radtest.  You can use "-t pap",
     "-t chap", "-t mschap", or "-t eap-md5".  The default is "-t pap"
    * Make the "inner-tunnel" virtual server listen on 127.0.0.1:18120
      This change and the previous one makes PEAP testing much easier.
    * Added more documentation and examples for the "passwd" module.
    * Added dictionaries for RFC 5607 and RFC 5904.
    * Added note in proxy.conf that we recommend setting
      "require_message_authenticator = yes" for all home servers.
    * Added example of second "files" configuration, with documentation.
      This shows how and where to use two instances of a module.
    * Updated radsniff to have it write pcap files, too.  See '-w'.
    * Print out large WARNING message if we send an Access-Challenge
      for EAP, and receive no follow-up messages from the client.
    * Added Cached-Session-Policy for EAP session resumption.  See
      raddb/eap.conf.
    * Added support for TLS-Cert-* attributes. For details, see
      raddb/sites-available/default, "post-auth" section.
    * Added sample raddb/modules/{opendirectory,dynamic_clients}
    * Updated Cisco and Huawei, HP, Redback, and ERX dictionaries.
    * Added RFCs 5607, 5904, and 5997.
    * For EAP-TLS, client certificates can now be validated using an
      external command.  See eap.conf, "validate" subsection of "tls".
    * Made rlm_pap aware of {nthash} prefix, for compatibility with
      legacy RADIUS systems.
    * Add Module-Failure-Message for mschap module (ntlm_auth)
    * made rlm_sql_sqlite database configurable.  Use "filename"
      in sql{} section.
    * Added %{tolower: ...string ... }, which returns the lowercase
      version of the string.  Also added %{toupper: ... } for uppercase.

    Bug fixes
    * Fix endless loop when there are multiple sub-options for
      DHCP option 82.
    * More debug output when sending / receiving DHCP packets.
    * EAP-MSCHAPv2 should return the MPPE keys when used outside
      of a TLS tunnel.  This is needed for IKE.
    * Added SSL "no ticket" option to prevent SSL from creating sessions
      without IDs.  We need the IDs, so this option should be set.
    * Fix proxying of packets from inside a TTLS/PEAP tunnel.
      Closes bug #25.
    * Allow IPv6 address attributes to be created from domain names
      Closes bug #82.
    * Set the string length to the correct value when parsing double
      quotes.  Closes bug #88.
    * No longer look users up in /etc/passwd in the default configuration.
      This can be reverted by enabling "unix" in the "authorize" section.
    * More #ifdef's to enable building on systems without certain
      features.
    * Fixed SQL-Group comparison to register only if the group
      query is defined.
    * Fixed SQL-Group comparison to register <instance>-SQL-Group,
      just like rlm_ldap.  This lets you have multiple SQL group checks.
    * Fix scanning of octal numbers in "unlang".  Closes bug #89.
    * Be less aggressive about freeing "stuck" requests.  Closes bug #35.
    * Fix example in "originate-coa" to refer to the correct packet.
    * Change default timeout for dynamic clients to 1 hour, not 1 day.
    * Allow passwd module to map IP addresses, too.
    * Allow passwd module to be used for CoA packets
    * Put boot filename into DHCP header when DHCP-Boot-Filename
      is specified.
    * raddb/certs/Makefile no longer has certs depend on index.txt and
       serial.  Closes bug #64.
    * Ignore NULL errorcode in PostgreSQL client.  Closes bug #39
    * Made Exec-Program and Exec-Program-Wait work in accounting
      section again.  See sites-available/default.
    * Fix long-standing memory leak in esoteric conditions.  Found
      by Jerry Nichols.
    * Added "Password-With-Header == userPassword" to raddb/ldap.attrmap
      This will automatically convert more passwords.
    * Updated rlm_pap to decode Password-With-Header, if it was base64
      encoded, and to treat the contents as potentially binary data.
    * Fix Novell eDir code to use the right function parameters.
      Closes bug #86.
    * Allow spaces to be escaped when executing external programs.
      Closes bug #93.
    * Be less restrictive about checking permissions on control socket.
      If we're root, allow connecting to a non-root socket.
    * Remove control socket on normal server exit.  If the server isn't
      running, the control socket should not exist.
    * Use MS-CHAP-User-Name as Name field from EAP-MSCHAPv2 for MS-CHAP
      calculations.  It *MAY* be different (upper / lower case) from
      the User-Name attribute.  Closes bug #17.
    * If the EAP-TLS methods have problems, more SSL errors are now
      available in the Module-Failure-Message attribute.
    * Update Oracle configure scripts.  Closes bug #57.
    * Added text to DESC fields of doc/examples/openldap.schema
    * Updated more documentation to use "Restructured Text" format.
      Thanks to James Lockie.
    * Fixed typos in raddb/sql/mssql/dialup.conf.  Closes bug #11.
    * Return error for potential proxy loops when using "-XC"
    * Produce better error messages when slow databases block
      the server.
    * Added notes on DHCP broadcast packets for FreeBSD.
    * Fixed crash when parsing some date strings.  Closes bug #98
    * Improperly formatted Attributes are now printed as "Attr-##".
      If they are not correct, they should not use the dictionary name.
    * Fix rlm_digest to be check the format of the Digest attributes,
      and return "noop" rather than "fail" if they're not right.
    * Enable "digest" in raddb/sites-available/default.  This change
      enables digest authentication to work "out of the box".
    * Be less aggressive about marking home servers as zombie.
      If they are responding to some packets, they are still alive.
    * Added Packet-Transmit-Counter, to track detail file retransmits.
      Closes bug #13.
    * Added configure check for lt_dladvise_init().  If it exists, then
      using it solves some issues related to libraries loading libraries.
    * Added indexes to the MySQL IP Pool schema.
    * Print WARNING message if too many attributes are put into a packet.
    * Include dhcp test client (not built by default)
    * Added checks for LDAP constraint violation.  Closes bug #18.
    * Change default raddebug timeout to 60 seconds.
    * Made error / warning messages more consistent.
    * Correct back-slash handling in variable expansion.  Closes bug #46.
      You SHOULD check your configuration for backslash expansion!
    * Fix typo in "configure" script (--enable-libltdl-install)
    * Use local libltdl in more situations.  This helps to avoid
      compile issues complaining about lt__PROGRAM__LTX_preloaded_symbols.
    * Fix hang on startup when multiple home servers were defined
      with "src_ipaddr" field.
    * Fix 32/64 bit issue in rlm_ldap.  Closes bug #105.
    * If the first "listen" section defines 127.0.0.1, don't use that
      as a source IP for proxying.  It won't work.
    * When Proxy-To-Realm is set to a non-existent realm, the EAP module
      should handle the request, rather than expecting it to be proxied.
    * Fix IPv4 issues with udpfromto.  Closes bug #110.
    * Clean up child processes of raddebug.  Closes bugs #108 and #109
    * retry OTP if the OTP daemon fails.  Closes bug #58.
    * Multiple calls to ber_printf seem to work better.  Closes #106.
    * Fix "unlang" so that "attribute not found" is treated as a "false"
      comparison, rather than a syntax error in the configuration.
    * Fix issue with "Group" attribute.


author: John Dennis <jdennis@redhat.com> - 2.1.10-3
changelog:
  - Resolves: #644100, Rebase to current release
  - Fix 666589 - removing freeradius from system does not delete the user "radiusd"
    fix scriptlet argument testing, simplify always exiting with zero


author: John Dennis <jdennis@redhat.com> - 2.1.10-5
changelog:
  - Resolves: #689045 Using rlm_perl cause radiusd failed to start
    Fix configure typo which caused lt_dladvise_* functions to be skipped.
    run autogen.sh because HAVE_LT_DLADVISE_INIT isn't in src/main/autogen.h
    Implemented by: freeradius-lt-dladvise.patch


author: John Dennis <jdennis@redhat.com> - 2.1.12-1
changelog:
  - Upgrade to latest upstream release: 2.1.12
    resolves: bug#736878 Rebase to latest upstream
    resolves: bug#705723 logrotate script does not reload running daemon
    resolves: bug#787116 radtest PPPhint option not parsed correctly
    resolves: bug#700870 freeradius not compiled with --with-udpfromto
    resolves: bug#753764 shadow password expiration does not work
    resolves: bug#712803 radtest script is not working with eap-md5 option
    resolves: bug#690756 errors in raddb/sql/postgresql/admin.sql template


author: John Dennis <jdennis@redhat.com> - 2.1.12-4
changelog:
  - resolves: bug#855317
    CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
    certain expiration date fields of a certificate during x509 certificate
    validation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-5
changelog:
  - Add support for microsecond precision of home server's response_window
    option, client's response_window option with the same precision and home
    server's response_timeouts option, backported from v3.0.x.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.1.12-6
changelog:
  - Fix missing braces around a condition branch in client response_window
    patch.
  - Resolves: bug#1107843


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-1
changelog:
  - Upgrade to the latest upstream release v2.2.6
    Resolves: Bug#921563  raddebug not working correctly
    Resolves: Bug#921567  raddebug -t 0 exists immediately
    Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                          windows user credentials
    Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
    Resolves: Bug#1135439 Default message digest defaults to sha1
    Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                          fault
    Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
  - Remove radutmp rotation
    Resolves: Bug#904578  radutmp should not rotate
  - Check for start_servers not exceeding max_servers
    Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                          than max_servers


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-4
changelog:
  - Move OpenSSL init out of version check
    Resolves: Bug#1189394 radiusd segfaults after update
  - Comment-out ippool-dhcp.conf inclusion
    Resolves: Bug#1189386 radiusd fails to start after 'clean' installation


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-5
changelog:
  - Fix EAP client authentication with TLS 1.2
    Resolves: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Nikolai Kondrashov <Nikolai.Kondrashov@redhat.com> - 2.2.6-6
changelog:
  - Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
    Related: Bug#1254176 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2


author: Trond Eivind Glomsrod <teg@redhat.com>
changelog:
  - /usr/bin/gawk can't point at gawk - infinite symlink
  - /usr/bin/awk can't point at gawk - infinite symlink


author: Elliot Lee <sopwith@redhat.com> 3.1.1-7
changelog:
  - Add gawk-3.1.1-ngroups.patch, because NGROUPS_MAX comes from 
  sys/param.h, and awk.h changes behaviour depending on whether NGROUPS_MAX 
  is defined or not. (For ppc64)


author: Karel Zak <kzak@redhat.com> 3.1.4-2
changelog:
  - add dfacache.patch for fix LC_ALL=de_DE.UTF-8 ./gawk '/^[ \t]/ { print }',
    (by Aharon Robbins), #135210, #131498
  - add flonum.patch for "improved" handling of non-numeric constants,
    second version of patch (by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00046.html
  - add nextc.patch (by Andreas Schwab)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-09/msg00093.html
  - add uplow.patch for fix the wide char handling (by Stepan Kasal)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2004-10/msg00099.html


author: Karel Zak <kzak@redhat.com> 3.1.5-4
changelog:
  - fix off-by-one error in assignment of sentinel value at 
    end of FIELDWIDTHS array. (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.5-5
changelog:
  - fix "gawk -v BINMODE=1" (patch by Aharon Robbins)
  - fix conversion from large number to string (patch by Aharon Robbins)


author: Karel Zak <kzak@redhat.com> 3.1.5-9
changelog:
  - fix numeric conversion problem (patch by Aharon Robbins)
    http://lists.gnu.org/archive/html/bug-gnu-utils/2006-07/msg00004.html


author: Karel Zak <kzak@redhat.com> 3.1.5-15
changelog:
  - fix #225777 - clean up spec file according to Fedora Merge Review
    suggestions (thanks to Dan Horak and Patrice Dumas)


author: Stepan Kasal <skasal@redhat.com> - 3.1.5-16
changelog:
  - Add gawk-3.1.5-quote-sticky.patch
  - Resolves: #299551
  - Add gawk-3.1.5-test-lc_num1.patch, a test for that bug.
  - BuldRequire autoconf and automake, for the test patch.
  - Add coment explaining why bison is buildrequired.
  - Remove BuildRequire: flex.


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-1
changelog:
  - new upstream version
  - drop Patch1: gawk-3.1.3-getpgrp_void.patch, it seems to be a workaround
    for a bug in gcc that seemed to exist at Fedora Core 1 times, see #114246
  - drop patches 2-13, they have been integrated upstream


author: Stepan Kasal <skasal@redhat.com> - 3.1.6-4
changelog:
  - remove the versioned binaries even if the version is modified by the
    snapshot patch, modify the file list to check this (#476166)
  - update the snapshot patch, dropping the upstreamed
    gawk-3.1.5-test-lc_num1.patch


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.1.7-7
changelog:
  - Fix double free in free_wstr (#648906)
  - Prevent overflows by increasing YYMAXDEPTH and YYSTACKSIZE
    byacc/bison parameters (#743343)
  - Preserve argv by copying the strings (#740673)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 3.1.7-10.el6_7.2
changelog:
  - Man & info pages fixed to describe the '--posix' usage correctly,
    as discussed in #1271443 (comments #1 and #2)


author: Marek Kasik <mkasik@redhat.com> - 2.24.1-2
changelog:
  - Import gdk-pixbuf2 package from F16
  - Disable introspection
  - Add update-gdk-pixbuf-loaders
  - Resolves: #1103734


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Adam Tkac <atkac redhat com> - 1.7.1-1
changelog:
  - update to 1.7.1 (#585990)
  - Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
  - Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
  - Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
  - Include gitweb/INSTALL file as documentation [Todd Zullinger]
  - Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
  - Install missing gitweb.js (#558740) [Todd Zullinger]
  - Only BR perl(Error) [Todd Zullinger]
  - Use config.mak to set build options [Todd Zullinger]
  - Disable building of unused python remote helper libs [Todd Zullinger]
  - Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros
  - Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib64/tls/librt*so* and /lib64/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib64/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib64/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib64/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib64/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib64/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib64/obsolete/linuxthreads/
    and NPTL libraries to /lib64.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib64/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib64/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on athlon sparcv9v sparc64v alphaev6,
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


