# changelog

author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-4
changelog:
  - Release 1.3.5.10-4
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat
  - Resolves: bug 1354660 - flow control in replication also blocks receiving results (DS 48767)
  - Resolves: bug 1356261 - Fixup tombstone task needs to set proper flag when updating (DS 48924)
  - Resolves: bug 1355760 - ns-slapd crashes during the deletion of backend (DS 48922)
  - Resolves: bug 1353629 - DS shuts down automatically if dnaThreshold is set to 0 in a MMR setup (DS 48916)
  - Resolves: bug 1355879 - nunc-stans: ns-slapd crashes during startup with SIGILL on AMD Opteron 280 (DS 48925)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-5
changelog:
  - Release 1.3.5.10-5
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48919)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-6
changelog:
  - Release 1.3.5.10-6
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48928)
  - Resolves: bug 1360447 - nsslapd-workingdir is empty when ns-slapd is started by systemd (DS 48939)
  - Resolves: bug 1360327 - remove-ds.pl deletes an instance even if wrong prefix was specified (DS 48934)
  - Resolves: bug 1349815 - DS logs have warning:ancestorid not indexed for all CS subsystems (DS 48940)
  - Resolves: bug 1329061 - 389-ds-base-1.3.4.0-29.el7_2 "hang" (DS 48882)
  - Resolves: bug 1360976 - EMBARGOED CVE-2016-5405 389-ds-base: Password verification vulnerable to timing attack
  - Resolves: bug 1361134 - When fine-grained policy is applied, a sub-tree has a priority over a user while changing password (DS 48943) 
  - Resolves: bug 1361321 - Duplicate collation entries (DS 48936)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1350799 - CVE-2016-4992 389-ds-base: Information disclosure via repeat


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-7
changelog:
  - Release 1.3.5.10-7
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1360976 - fixing a compiler warning


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-8
changelog:
  - Release 1.3.5.10-8
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48954)
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366561 - ns-accountstatus.pl giving error even "No such object (32)" (DS 48956)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-9
changelog:
  - Release 1.3.5.10-9
  - Resolves: bug 1364190 - Change example in /etc/sysconfig/dirsrv to use tcmalloc (DS 48950)
  - Resolves: bug 1366828 - audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled (DS 48958)
  - Resolves: bug 1368520 - Crash in import_wait_for_space_in_fifo() (DS 48960)
  - Resolves: bug 1368956 - man page of ns-accountstatus.pl shows redundant entries for -p port option
  - Resolves: bug 1369537 - passwordMinAge attribute doesn't limit the minimum age of the password (DS 48967)
  - Resolves: bug 1369570 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
  - Resolves: bug 1369425 - ACI behaves erratically (DS 48972)
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)
  - Resolves: bug 1371283 - Server Side Sorting crashes the server. (DS 48970)
  - Resolves: bug 1371284 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-10
changelog:
  - Release 1.3.5.10-10
  - Resolves: bug 1370300 - set proper update status to replication agreement in case of failure (DS 48957)
  - Resolves: bug 1209094 - Allow logging of rejected changes (DS 48969)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-11
changelog:
  - Release 1.3.5.10-11
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-12
changelog:
  - Release 1.3.5.10-12
  - Resolves: bug 1384785 - Replica install fails with old IPA master sometimes during replication process (DS 48992)
  - Resolves: bug 1388501 - 389-ds-base is missing runtime dependency - bind-utils (DS 48328)
  - Resolves: bug 1388581 - Replication stops working only when fips mode is set to true (DS 48909)
  - Resolves: bug 1390342 - ns-accountstatus.pl shows wrong status for accounts inactivated by Account policy plugin (DS 49014)
  - Resolves: bug 1390343 - trace args debug logging must be more restrictive (DS 49009)


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-9
changelog:
  - The template scripts needed to use @libdir@ instead of hardcoding
  - /usr/lib
  - Use make DESTDIR=$RPM_BUILD_ROOT install instead of % makeinstall
  - do the actual build in a "built" subdirectory, until we remove
  - the old script templates


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-15
changelog:
  - Touch all of the ldap/admin/src/scripts/*.in files so that they
  - will be newer than their corresponding script template files, so
  - that make will rebuild them.


author: Rich Megginson <rmeggins@redhat.com> - 1.0.99-16
changelog:
  - Fixed the problem where the server would crash upon shutdown in dblayer
  - due to a race condition among the database housekeeping threads
  - Fix a problem with normalized absolute paths for db directories


author: Dennis Gilmore <dennis@ausil.us> - 1.1-0.1.cvs20070108
changelog:
  - update to a cvs snapshot
  - fedorafy the spec 
  - create -devel subpackage
  - apply a patch to use mozldap not mozldap6
  - apply a patch to allow --prefix to work correctly


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.el4.cvs20070119
changelog:
  - Changed version to 1.1.0 and added Release 1.el4.cvs20070119
  - merged in changes from Fedora Extras candidate spec file


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-6.el4.20070125
changelog:
  - Move the plugin *.so files into the main package instead of the devel
  - package because they are loaded directly by name via dlopen


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-8.el4.20070125
changelog:
  - added logconv.pl
  - added slapi-plugin.h to devel package
  - added explicit dirs for /var/log/fedora-ds et. al.


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070213
changelog:
  - More cleanup suggested by Dennis Gilmore
  - This is the fedora extras candidate based on cvs tag FedoraDirSvr110a1


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070223
changelog:
  - Renamed package to fedora-ds-base, but keep names of paths/files/services the same
  - use the shortname macro (fedora-ds) for names of paths, files, and services instead
  - of name, so that way we can continue to use e.g. /etc/fedora-ds instead of /etc/fedora-ds-base
  - updated to latest sources


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.1.20070320
changelog:
  - update to latest sources
  - added migrateTo11 to allow migrating instances from 1.0.x to 1.1
  - ldapi support
  - fixed pam passthru plugin ENTRY method


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-0.3.20070720
changelog:
  - Added Requires for perldap, cyrus sasl plugins
  - Removed template-migrate* files
  - Added perl module directory
  - Removed install.inf - setup-ds.pl can now easily generate one


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-1.2
changelog:
  - fix build breakage due to open()
  - mock could not find BuildRequires: db4-devel >= 4.2.52
  - mock works if >= version is removed - it correctly finds db4.6


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-2.0
changelog:
  - This is the beta2 release
  - new file added to package - /etc/sysconfig/dirsrv - for setting
  - daemon environment as is usual in other linux daemons


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0-4
changelog:
  - This is the GA release of Fedora DS 1.1
  - Removed version numbers for BuildRequires and Requires
  - Added full URL to source tarball


author: Rich Megginson <rmeggins@redhat.com> - 1.1.0.1-1
changelog:
  - Resolves bug 434403 - GCC 4.3 build fails
  - Rolled new source tarball which includes Nathan's fix for the struct ucred
  - NOTE: Change version back to 1.1.1 for next release
  - this release was pulled from CVS tag FedoraDirSvr110_gcc43


author: Tom "spot" Callaway <tcallawa@redhat.com> - 1.1.0.1-3
changelog:
  - add patch to allow server to work with NSS 3.11.99 and later
  - do NSS_Init after fork but before detaching from console


author: Rich Megginson <rmeggins@redhat.com> - 1.1.2-1
changelog:
  - This is the 1.1.2 release.  The bugs fixed can be found here
  - https://bugzilla.redhat.com/showdependencytree.cgi?id=452721
  - Added winsync-plugin.h to the devel subpackage


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-1
changelog:
  - new release 1.2.0
  - Made devel package depend on mozldap-devel
  - only create run dir if it does not exist
  - CVS tag: FedoraDirSvr_1_2_0_RC1 FedoraDirSvr_1_2_0_RC1_20090330


author: Rich Megginson <rmeggins@redhat.com> - 1.2.0-4
changelog:
  - final release 1.2.0
  - Resolves: bug 475338 - LOG: the intenal type of maxlogsize, maxdiskspace and minfreespace should be 64-bit integer
  - Resolves: bug 496836 - SNMP ldap-agent on Solaris: Unable to open semaphore for server: 389
  - CVS tag: FedoraDirSvr_1_2_0 FedoraDirSvr_1_2_0_20090428


author: Rich Megginson <rmeggins@redhat.com> - 1.2.1-1
changelog:
  - change name to 389
  - change version to 1.2.1
  - added initial support for numeric string syntax
  - added initial support for syntax validation
  - added initial support for paged results including sorting


author: Rich Megginson <rmeggins@redhat.com> - 1.2.2-1
changelog:
  - backed out - added template-initconfig to %files - this change is for the next major release
  - bump version to 1.2.2
  - fix reopened 509472 db2index all does not reindex all the db backends correctly
  - fix 518520 -  pre hashed salted passwords do not work
  - see https://bugzilla.redhat.com/show_bug.cgi?id=518519 for the list of
  - bugs fixed in 1.2.2


author: Rich Megginson <rmeggins@redhat.com> - 1.2.3-1
changelog:
  - 1.2.3 release
  - added template-initconfig to %files
  - %posttrans now runs update to update the server instances
  - servers are shutdown, then restarted if running before install
  - scriptlets mostly use lua now to pass data among scriptlet phases


author: Rich Megginson <rmeggins@redhat.com> - 1.2.4-1
changelog:
  - 1.2.4 release
  - resolves bug 221905 - added support for Salted MD5 (SMD5) passwords - primarily for migration
  - resolves bug 529258 - Make upgrade remove obsolete schema from 99user.ldif


author: Nathan Kinder <nkinder@redhat.com> - 1.2.6-0.4.a3
changelog:
  - 1.2.6.a3 release
  - add managed entries plug-in
  - many bug fixes
  - moved selinux subpackage into base package


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.8.rc3
changelog:
  - 1.2.6 release candidate 3
  - git tag 389-ds-base-1.2.6.rc3
  - Bug 603942 - null deref in _ger_parse_control() for subjectdn
  - 609256  - Selinux: pwdhash fails if called via Admin Server CGI
  - 578296  - Attribute type entrydn needs to be added when subtree rename switch is on
  - 605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
  - 606920 - anonymous resource limit - nstimelimit - also applied to "cn=directory manager"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.9.rc3
changelog:
  - make selinux-devel explicit Require the base package in order
  - to comply with Fedora Licensing Guidelines


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.10.rc6
changelog:
  - 1.2.6 release candidate 6
  - git tag 389-ds-base-1.2.6.rc6
  - Bug 617013 - repl-monitor.pl use cpu upto 90%
  - Bug 616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
  - Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
  - Bug 613833 - Allow dirsrv_t to bind to rpc ports
  - Bug 612242 - membership change on DS does not show on AD
  - Bug 617629 - Missing aliases in new schema files
  - Bug 619595 - Upgrading sub suffix under non-normalized suffix disappears
  - Bug 616608 - SIGBUS in RDN index reads on platforms with strict alignments
  - Bug 617862 - Replication: Unable to delete tombstone errors
  - Bug 594745 - Get rid of dirsrv_lib_t label


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6-0.11.rc7
changelog:
  - 1.2.6 release candidate 7
  - git tag 389-ds-base-1.2.6.rc7
  - Bug 621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6


author: Rich Megginson <rmeggins@redhat.com> - 1.2.6.1-1
changelog:
  - This is the 1.2.6.1 release - git tag 389-ds-base-1.2.6.1
  - Bug 634561 - Server crushes when using Windows Sync Agreement
  - Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
  - Bug 612264 - ACI issue with (targetattr='userPassword')
  - Bug 606920 - anonymous resource limit- nstimelimit - also applied to "cn=directory manager"
  - Bug 631862 - crash - delete entries not in cache + referint


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.2.a2
changelog:
  - 1.2.7.a2 release - a1 was the OpenLDAP testday release
  - git tag 389-ds-base-1.2.7.a2
  - added openldap support on platforms that use openldap with moznss
  - for crypto (F-14 and later)
  - many bug fixes
  - Account Policy Plugin (keep track of last login, disable old accounts)


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.3.a3
changelog:
  - 1.2.7.a3 release - a2 was never released
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Bug 629681 - Retro Changelog trimming does not behave as expected
  - Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
  -              are not upgraded in the server instance schema dir


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.4.a3
changelog:
  - 1.2.7.a3 release - a2 was never released - this is a rebuild to pick up
  - Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
  - Adding the ancestorid fix code to ##upgradednformat.pl.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.5.a4
changelog:
  - 1.2.7.a4 release - git tag 389-ds-base-1.2.7.a4
  - Bug 647932 - multiple memberOf configuration adding memberOf where there is 
  no member
  - Bug 491733 - dbtest crashes
  - Bug 606545 - core schema should include numSubordinates
  - Bug 638773 - permissions too loose on pid and lock files
  - Bug 189985 - Improve attribute uniqueness error message
  - Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operat
  ions
  - Bug 619633 - Make attribute uniqueness obey requiredObjectClass


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7-0.6.a5
changelog:
  - 1.2.7.a5 release - git tag 389-ds-base-1.2.7.a5
  - Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-ref
  erral)
  - Bug 635009 - Add one-way AD sync capability
  - Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
  - put replication config entries in separate file
  - Bug 567282 - server can not abandon searchRequest of "simple paged results"
  - Bug 329751 - "nested" filtered roles searches candidates more than needed
  - Bug 521088 - DNA should check ACLs before getting a value from the range


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.1-1
changelog:
  - 1.2.7.1 release - git tag 389-ds-base-1.2.7.1
  - Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
  - Bug 656392 - Remove calls to ber_err_print()
  - Bug 625950 - hash nsslapd-rootpw changes in audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.2-1
changelog:
  - 1.2.7.2 release - git tag 389-ds-base-1.2.7.2
  - Bug 659456 - Incorrect usage of ber_printf() in winsync code
  - Bug 658309 - Process escaped characters in managed entry mappings
  - Bug 197886 - Initialize return value for UUID generation code
  - Bug 658312 - Allow mapped attribute types to be quoted
  - Bug 197886 - Avoid overflow of UUID generator


author: Rich Megginson <rmeggins@redhat.com> - 1.2.7.3-1
changelog:
  - 1.2.7.3 release - git tag 389-ds-base-1.2.7.3
  - Bug 658312 - Invalid free in Managed Entry plug-in
  - Bug 641944 - Don't normalize non-DN RDN values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.2.a2
changelog:
  - 1.2.8.a2 release - git tag 389-ds-base-1.2.8.a2
  - Bug 674430 - Improve error messages for attribute uniqueness
  - Bug 616213 - insufficient stack size for HP-UX on PA-RISC
  - Bug 615052 - intrinsics and 64-bit atomics code fails to compile
  -    on PA-RISC
  - Bug 151705 - Need to update Console Cipher Preferences with new ciphers
  - Bug 668862 - init scripts return wrong error code
  - Bug 670616 - Allow SSF to be set for local (ldapi) connections
  - Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the 
  -    log output to the text file
  - Bug 668619 - slapd stops responding
  - Bug 624547 - attrcrypt should query the given slot/token for
  -    supported ciphers
  - Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any 
  -    error message in logs


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.3.a3
changelog:
  - 1.2.8.a3 release - git tag 389-ds-base-1.2.8.a3
  - Bug 675320 - empty modify operation with repl on or lastmod off will crash server
  - Bug 675265 - preventryusn gets added to entries on a failed delete
  - Bug 677774 - added support for tmpfiles.d
  - Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result search
  es
  - Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
  - Bug 671199 - Don't allow other to write to rundir
  - Bug 678646 - Ignore tombstone operations in managed entry plug-in
  - Bug 676053 - export task followed by import task causes cache assertion
  - Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
  - Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
  - Bug 676689 - crash while adding a new user to be synced to windows
  - Bug 604881 - admin server log files have incorrect permissions/ownerships
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - Bug 675853 - dirsrv crash segfault in need_new_pw()


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.4.a3
changelog:
  - do not create /var/run/dirsrv - setup will create it instead
  - remove the fedora-ds initscript upgrade stuff - we do not support that anymore
  - convert the remaining lua stuff to plain old shell script


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.6.rc1
changelog:
  - 389-ds-base-1.2.8 release candidate 1 - git tag 389-ds-base-1.2.8.rc1
  - Bug 518890 - setup-ds-admin.pl - improve hostname validation
  - Bug 681015 - RFE: allow fine grained password policy duration attributes in 
  -     days, hours, minutes, as well
  - Bug 514190 - setup-ds-admin.pl --debug does not log to file
  - Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
  - Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
  - Bug 674852 - crash in ldap-agent when using OpenLDAP
  - Bug 679978 - modifying attr value crashes the server, which is supposed to
  -     be indexed as substring type, but has octetstring syntax
  - Bug 676655 - winsync stops working after server restart
  - Bug 677705 - ds-logpipe.py script is failing to validate "-s" and
  -     "--serverpid" options with "-t".
  - Bug 625424 - repl-monitor.pl doesn't work in hub node


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.8.rc2
changelog:
  - 389-ds-base-1.2.8 release candidate 2 - git tag 389-ds-base-1.2.8.rc2
  - Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
  - Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
  - Bug 681015 - RFE: allow fine grained password policy duration attributes
  -              in days, hours, minutes, as well
  - Bug 684996 - Exported tombstone cannot be imported correctly
  - Bug 683250 - slapd crashing when traffic replayed
  - Bug 668909 - Can't modify replication agreement in some cases
  - Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
  - Bug 644784 - Memory leak in "testbind.c" plugin
  - Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.9.rc4
changelog:
  - 389-ds-base-1.2.8.rc4
  - Bug 668385 - DS pipe log script is executed as many times as the dirsrv serv
  ice is restarted
  - 389-ds-base-1.2.8.rc3
  - Bug 690955 - Mrclone fails due to the replica generation id mismatch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8-0.10.rc5
changelog:
  - 389-ds-base-1.2.8.rc5
  - Bug 692469 - Replica install fails after step for "enable GSSAPI for replication"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.0-1
changelog:
  - 389-ds-base-1.2.8.0
  - Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
  - Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
  - Bug 693466 - Unable to change schema online
  - Bug 693503 - matching rules do not inherit from superior attribute type
  - Bug 693455 - nsMatchingRule does not work with multiple values
  - Bug 693451 - cannot use localized matching rules
  - Bug 692331 - Segfault on index update during full replication push on 1.2.7.5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.2-1
changelog:
  - 389-ds-base-1.2.8.2
  - Bug 696407 - If an entry with a mixed case RDN is turned to be
  -    a tombstone, it fails to assemble DN from entryrdn


author: Rich Megginson <rmeggins@redhat.com> - 1.2.8.3-1
changelog:
  - 389-ds-base-1.2.8.3
  - Bug 700145 - userpasswd not replicating
  - Bug 700557 - Linked attrs callbacks access free'd pointers after close
  - Bug 694336 - Group sync hangs Windows initial Sync
  - Bug 700215 - ldclt core dumps
  - Bug 695779 - windows sync can lose old values when a new value is added
  - Bug 697027 - 12 - minor memory leaks found by Valgrind + TET


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9-0.2.a2
changelog:
  - 389-ds-base-1.2.9.a2
  - look for separate openldap ldif library
  - Split automember regex rules into separate entries
  - writing Inf file shows SchemaFile = ARRAY(0xhexnum)
  - add support for ldif files with changetype: add
  - Bug 716980 - winsync uses old AD entry if new one not found
  - Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
  - bump console version to 1.2.6
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica
  - Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
  - Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  - Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
  - Bug 711906 - ns-slapd segfaults using suffix referrals
  - Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
  - Bug 710377 - Import with chain-on-update crashes ns-slapd
  - Bug 709826 - Memory leak: when extra referrals configured


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.0-1
changelog:
  - Bug 720059 - RDN with % can cause crashes or missing entries
  - Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
  - Bug 691313 - Need TLS/SSL error messages in repl status and errors log
  - Bug 712855 - Directory Server 8.2 logs "Netscape Portable Runtime error -5961 (TCP connection reset by peer.)" to error log whereas Directory Server 8.1 did not
  - Bug 713209 - Update sudo schema
  - Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
  - Bug 718303 - Intensive updates on masters could break the consumer's cache
  - Bug 711679 - unresponsive LDAP service when deleting vlv on replica


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-1
changelog:
  - Bug 663752 - Cert renewal for attrcrypt and encchangelog
  -   this was "re-fixed" due to a deadlock condition with cl2ldif task cancel
  - Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
  - Bug 725743 - Make memberOf use PRMonitor for it's operation lock
  - Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.1-2
changelog:
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed to use configure test for GCC provided 64-bit atomic functions


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.3-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  previous patch broke build on el5


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.4-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.5-1
changelog:
  - Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
  -  Fix another coverity NULL deref in previous patch


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.6-1
changelog:
  - Bug 728510 - Run dirsync after sending updates to AD
  - Bug 729717 - Fatal error messages when syncing deletes from AD
  - Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
  - Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
  - Bug 723937 - Slapi_Counter API broken on  32-bit F15
  -   fixed again - separate tests for atomic ops and atomic bool cas


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.7-1
changelog:
  - Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
  - Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
  - Bug 732541 - Ignore error 32 when adding automember config
  - Bug 728592 - Allow ns-slapd to start with an invalid server cert


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.8-1
changelog:
  - Bug 732153 - subtree and user account lockout policies implemented?
  - Bug 722292 - Entries in DS are not updated properly when using WinSync API


author: Rich Megginson <rmeggins@redhat.com> - 1.2.9.9-1
changelog:
  - Bug 735121 - simple paged search + ip/dns based ACI hangs server
  - Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
  - Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
  - Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.a2-0.2
changelog:
  - Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
  - Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
  - Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.4.a4
changelog:
  - Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
  - 1d2f5a0 make memberof transaction aware and able to be a betxnpostoperation plug in
  - b6d3ba7 pass the plugin config entry to the plugin init function
  - 28f7bfb set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
  - Bug 743966 - Compiler warnings in account usability plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.5.a5
changelog:
  - Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
  - Bug 750625 750624 750622 744946 Coverity issues
  - Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
  - Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - f639711 Reduce the number of DN normalization
  - c06a8fa Keep unhashed password psuedo-attribute in the adding entry
  - Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
  - 8d3b921 Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
  - d316a67 Change referential integrity to be a betxnpostoperation plugin


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.6.a6
changelog:
  - Bug 755725 - 389 programs linked against openldap crash during shutdown
  - Bug 755754 - Unable to start dirsrv service using systemd
  - Bug 745259 - Incorrect entryUSN index under high load in replicated environment
  - d439e3a use slapi_hexchar2int and slapi_str_to_u8 everywhere
  - 5910551 csn_init_as_string should not use sscanf
  - b53ba00 reduce calls to csn_as_string and slapi_log_error
  - c897267 fix member variable name error in slapi_uniqueIDFormat
  - 66808e5 uniqueid formatting - use slapi_u8_to_hex instead of sprintf
  - 580a875 csn_as_string - use slapi_uN_to_hex instead of sprintf
  - Bug 751645 - crash when simple paged fails to send entry to client
  - Bug 752155 - Use restorecon after creating init script lock file


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.7.a7
changelog:
  - Ticket #262 - pid file not removed with systemd
  - Ticket #50 - server should not call a plugin after the plugin close function is called
  - Ticket #18 - Data inconsitency during replication
  - Ticket #49 - better handling for server shutdown while long running tasks are active
  - Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
  - Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
  - Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
  - 6aaeb77 add a hack to disable sasl hostname canonicalization
  - Ticket 168 - minssf should not apply to rootdse
  - Ticket #177 - logconv.pl doesn't detect restarts
  - Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
  - Ticket 75 - Unconfigure plugin opperations are being called.
  - Ticket 26 - Please support setting defaultNamingContext in the rootdse.
  - Ticket #71 - unable to delete managed entry config
  - Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
  - Ticket #256 - debug build assertion in ACL_EvalDestroy()
  - Ticket #4 - bak2db gets stuck in infinite loop
  - Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
  - Ticket #3: acl cache overflown problem
  - Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
  - Ticket 2 - If node entries are tombstone'd, subordinate entries fail to get the full DN.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.8.a7
changelog:
  - fixes for systemd - remove .pid files after shutting down servers
  - Ticket #263 - add systemd include directive
  - Ticket #264 - upgrade needs better check for "server is running"


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10-0.10.rc1
changelog:
  - ad9dd30 coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
  - Ticket #281 - TLS not working with latest openldap
  - Ticket #280 - extensible binary filters do not work
  - Ticket #279 - filter normalization does not use matching rules
  - Trac Ticket #275 - Invalid read reported by valgrind
  - Ticket #277 - cannot set repl referrals or state
  - Ticket #278 - Schema replication update failed: Invalid syntax
  - Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
  - Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
  - Ticket #87 - Manpages fixes
  - c493fb4 fix a couple of minor coverity issues
  - Ticket #55 - Limit of 1024 characters for nsMatchingRule
  - Trac Ticket #274 - Reindexing entryrdn fails if ancestors are also tombstoned
  - Ticket #6 - protocol error from proxied auth operation
  - Ticket #38 - nisDomain schema is incorrect
  - Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
  - Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
  - Ticket #22 - RFE: Support sendmail LDAP routing schema
  - Ticket #161 - Review and address latest Coverity issues
  - Ticket #140 - incorrect memset parameters
  - Trac Ticket 35 - Log not clear enough on schema errors
  - Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
  - Trac Ticket #52 - FQDN set to nsslapd-listenhost makes the server start fail if IPv4-mapped-IPv6 address is given


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.0-1
changelog:
  - Ticket 284 - Remove unnecessary SNMP MIB files
  - Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
  - Ticket 175 - logconv.pl improvements


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.2-1
changelog:
  - Trac Ticket #298 - crash when replicating orphaned tombstone entry
  - Ticket #281 - TLS not working with latest openldap
  - Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
  - Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse


author: Rich Megginson <rmeggins@redhat.com> - 1.2.10.3-1
changelog:
  - b05139b memleak in normalize_mods2bvals
  - c0eea24 memleak in mep_parse_config_entry
  - 90bc9eb handle null smods
  - Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
  - Ticket #306 - void function cannot return value
  - ticket 304 - Fix kernel version checking in dsktune


author: Noriko Hosoi <nhosoi@redhat.com> - 1.2.10.4-4
changelog:
  - Ticket #46 - (revised) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #66 - 389-ds-base spec file does not have a BuildRequires on gcc-c++


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11-0.1.a1
changelog:
  - 453eb97 schema def must have DESC '' - close paren must be preceded by space
  - Trac Ticket #46 - (additional) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #331 - transaction errors with db 4.3 and db 4.2
  - Ticket #261 - Add Solaris i386
  - Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
  - Ticket #324 - Sync with group attribute containing () fails
  - Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
  - 77cacd9 coverity 12606 Logically dead code
  - Trac Ticket #303 - make DNA range requests work with transactions
  - Ticket #320 - allow most plugins to be betxn plugins
  - Ticket #24 - Add nsTLS1 to the DS schema
  - Ticket #271 - Slow shutdown when you have 100+ replication agreements
  - TIcket #285 - compilation fixes for '--format-security'
  - Ticket 211 - Avoid preop range requests non-DNA operations
  - Ticket #271 - replication code cleanup
  - Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
  - Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
  - Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
  - 6f8680a coverity 12563 Read from pointer after free (fix 2)
  - e6a9b22 coverity 12563 Read from pointer after free
  - 245d494 Config changes fail because of unknown attribute "internalModifiersname"
  - Ticket #191  - Implement SO_KEEPALIVE in network calls
  - Ticket #289 - allow betxn plugin config changes
  - 93adf5f destroy the entry cache and dn cache in the dse post op delete callback
  - e2532d8 init txn thread private data for all database modes
  - Ticket #291 - cannot use & in a sasl map search filter
  - 6bf6e79 Schema Reload crash fix
  - 60b2d12 Fixing compiler warnings
  - Trac Ticket #260 - 389 DS does not support multiple paging controls on a single connection
  - Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
  - fdcc256 Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
  - Ticket #306 - void function cannot return value
  - ticket 181 - Allow PAM passthru plug-in to have multiple config entries
  - ticket 211 - Use of uninitialized variables in ldbm_back_modify()
  - Ticket #74 - Add schema for DNA plugin (RFE)
  - Ticket #301 - implement transaction support using thread local storage
  - Ticket #211 - dnaNextValue gets incremented even if the user addition fails
  - 144af59 coverity uninit var and resource leak
  - Trac Ticket #34 - remove-ds.pl does not remove everything
  - Trac Ticket #169 - allow 389 to use db5
  - bc78101 fix compiler warning in acct policy plugin
  - Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
  - Trac Ticket #27 - SASL/PLAIN binds do not work
  - Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFYops
  - Ticket #17 - new replication optimizations


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.1-1
changelog:
  - f227f11 Suppress alert on unavailable port with forced setup
  - Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
  - Ticket #351 - use betxn plugins by default
  - Trac Ticket #345 - db deadlock return should not log error
  - Ticket #348 - crash in ldap_initialize with multiple threads
  - Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
  - Ticket #207 - [RFE] enable attribute that tracks when a password was last set
  - Ticket #216 - RFE - Disable replication agreements
  - Ticket #337 - RFE - Improve CLEANRUV functionality
  - Ticket #326 - MemberOf plugin should work on all backends
  - Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
  - Ticket #347 - IPA dirsvr seg-fault during system longevity test
  - Trac Ticket #310 - Avoid calling escape_string() for logged DNs
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #183 - passwordMaxFailure should lockout password one sooner
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - Ticket #325 - logconv.pl : use of getopts to parse command line options
  - Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
  - 554e29d Coverity Fixes
  - Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
  - Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
  - Ticket #315 - small fix to libglobs
  - Ticket #315 - ns-slapd exits/crashes if /var fills up
  - Ticket #20 - Allow automember to work on entries that have already been added
  - Trac Ticket #45 - Fine Grained Password policy: if passwordHistory is on, deleting the password fails.


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.2-1
changelog:
  - Ticket #351 - use betxn plugins by default
  -   revert - make no plugins betxn by default - too great a risk
  -   for deadlocks until we can test this better
  - Ticket #348 - crash in ldap_initialize with multiple threads
  -   fixes PR_Init problem in ldclt


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.4-1
changelog:
  - Ticket #360 - ldapmodify returns Operations error
  - Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
  - Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
  - Ticket #361: Bad DNs in ACIs can segfault ns-slapd
  - Trac Ticket #338 - letters in object's cn get converted to lowercase when renaming object
  - Ticket #337 - Improve CLEANRUV task


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.5-1
changelog:
  - Ticket #387 - managed entry sometimes doesn't delete the managed entry
  - 5903815 improve txn test index handling
  - Ticket #360 - ldapmodify returns Operations error - fix delete caching
  - bcfa9e3 Coverity Fix for CLEANALLRUV
  - Trac Ticket #335 - transaction retries need to be cache aware
  - Ticket #389 - ADD operations not in audit log
  - 44cdc84 fix coverity issues with uninit vals, no return checking
  - Ticket 368 - Make the cleanAllRUV task one step
  - Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.6-1
changelog:
  - Ticket #378 - audit log does not log unhashed password: enabled, by default.
  - Ticket #378 - unhashed#user#password visible after changing password
  - Ticket #365 - passwords in clear text in the audit log


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.7-2
changelog:
  - Ticket 378 - unhashed#user#password visible after changing password
  -  fix func declaration from previous patch
  - Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.8-1
changelog:
  ddcf669 bump version to 1.2.11.8 for offical release
  Ticket #425 - support multiple winsync plugins
  Ticket 403 - cleanallruv coverity fixes
  Ticket 407 - memory leak in dna plugin
  Ticket 403 - CLEANALLRUV feature
  Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
  3168f04 Coverity defects
  5ff0a02 COVERITY FIXES
  Ticket #388 - Improve replication agreement status messages
  0760116 Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
  Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
  Ticket #409 - Report during startup if nsslapd-cachememsize is too small
  Ticket #412 - memberof performance enhancement
  12813: Uninitialized pointer read string_values2keys
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
  Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
  Ticket #405 - referint modrdn not working if case is different
  Ticket 399 - slapi_ldap_bind() doesn't check bind results


author: Mark Reynolds <mareynol@redhat.com> - 1.2.11.11-1
changelog:
  6c0778f bumped version to 1.2.11.11
  Ticket 429 - added nsslapd-readonly to DS schema
  Ticket 403 - fix CLEANALLRUV regression from last commit
  Trac Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.12-1
changelog:
  - 8e5087a Coverity defects - 13089: Dereference after null check ldbm_back_delete
  - Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
  - ba1f5b2 fix coverity resource leak in windows_plugin_add
  - e3e81db Simplify program flow: change while loops to for
  - a0d5dc0 Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
  - 0808f7e Simplify program flow: make adduids/moduids/deluids action blocks all similar
  - 77eb760 Simplify program flow: eliminate unnecessary continue
  - c9e9db7 Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
  - a4ca0cc Change "return"s in modGroupMembership to "break"s to avoid leaking
  - d49035c Factorize into new isPosixGroup function
  - 3b61c03 coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
  - 33ce2a9 fix mem leaks with parent dn log message, setting winsync windows domain
  - Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
  - Ticket #355 - winsync should not delete entry that appears to be out of scope
  - Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
  - 487932d coverity - mbo dead code - winsync leaks, deadcode, null check, test code
  - 2734a71 CLEANALLRUV coverity fixes
  - Ticket #426 - support posix schema for user and group sync
  - Ticket #430 - server to server ssl client auth broken with latest openldap


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.13-1
changelog:
  - Ticket #426 - support posix schema for user and group sync
  -   1) plugin config ldif must contain pluginid, etc. during upgrade or it
  -      will fail due to schema errors
  -   2) posix winsync should have a lower precedence (25) than the default (50)
  -      so that it will be run first
  -   3) posix winsync should support the Winsync API v3 - the v2 functions are
  -      just stubs for now - but the precedence cb is active


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.14-1
changelog:
  - Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
  - Ticket 386 - large memory growth with ldapmodify(heap fragmentation)
  -  this patch doesn't fix the bug - it allows us to experiment with
  -  different values of mxfast
  - Ticket #374 - consumer can go into total update mode for no reason


author: Rich Megginson <rmeggins@redhat.com> - 1.2.11.15-1
changelog:
  - Trac Ticket #470 - 389 prevents from adding a posixaccount with userpassword after schema reload
  - Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
  - Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
  - Ticket 473 - change VERSION.sh to have console version be major.minor
  - Ticket 475 - Root DN Access Control - improve value checking for config
  - Trac Ticket #466 - entry_apply_mod - ADD: Failed to set unhashed#user#password to extension
  - Ticket 474 - Root DN Access Control - days allowed not working correctly
  - Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
  - 0b79915 fix compiler warnings in ticket 374 code
  - Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope


author: Mark Reynolds <mareynol@redhat.com> - 1.3.0.a1-1
changelog:
  Ticket #28 	MOD operations with chained delete/add get back error 53 on backend config
  Ticket #173 	ds-logpipe.py script's man page and script help should be updated for -t option.
  Ticket #196 	RFE: Interpret IPV6 addresses for ACIs, replication, and chaining 
  Ticket #218 	RFE - Make RIP working with Replicated Entries 
  Ticket #328 	make sure all internal search filters are properly escaped 
  Ticket #329 	389-admin build fails on F-18 with new apache 	
  Ticket #344 	deadlock in replica_write_ruv
  Ticket #351 	use betxn plugins by default
  Ticket #352 	make cos, roles, views betxn aware 
  Ticket #356 	logconv.pl - RFE - track bind info
  Ticket #365 	Audit log - clear text password in user changes 
  Ticket #370 	Opening merge qualifier CoS entry using RHDS console changes the entry. 
  Ticket #372 	Setting nsslapd-listenhost or nsslapd-securelistenhost breaks ACI processing 	
  Ticket #386 	Overconsumption of memory with large cachememsize and heavy use of ldapmodify 	
  Ticket #402 	unhashedTicket #userTicket #password in entry extension 	
  Ticket #408 	Create a normalized dn cache 	
  Ticket #453 	db2index with -tattrname:type,type fails 	
  Ticket #461 	fix build problem with mozldap c sdk 	
  Ticket #462 	add test for include file mntent.h 	
  Ticket #463 	different parameters of getmntent in Solaris


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.1.rc1
changelog:
  - bump version to 1.3.0.rc1
  - Ticket #322 - Create DOAP description for the 389 Directory Server project
  - Trac Ticket #499 - Handling URP results is not corrrect
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 456 - improve entry cache sizing
  - Trac Ticket #531 - loading an entry from the database should use str2entry_f
  - Trac Ticket #536 - Clean up compiler warnings for 1.3
  - Trac Ticket #531 - loading an entry from the database should use str2entry_fast
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Ticket 527 - ns-slapd segfaults if it cannot rename the logs
  - Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
  - Ticket 216 - disable replication agreements
  - Ticket 518 - dse.ldif is 0 length after server kill or machine kill
  - Ticket 393 - Change in winSyncInterval does not take immediate effect
  - Ticket 20 - Allow automember to work on entries that have already been added
  - Coverity Fixes
  - Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
  - Ticket 337 - improve CLEANRUV functionality
  - Fix for ticket 504
  - Ticket 394 - modify-delete userpassword
  - minor fixes for bdb 4.2/4.3 and mozldap
  - Trac Ticket #276 - Multiple threads simultaneously working on connection's private buffer causes ns-slapd to abort
  - Fix for ticket 465: cn=monitor showing stats for other db instances
  - Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
  - Fix for ticket 510 Avoid creating an attribute just to determine the syntax for a type, look up the syntax directly by type
  - Coverity defect: Resource leak 13110
  - Ticket 517 - crash in DNA if no dnaMagicRegen is specified
  - Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
  - Trac Ticket #519 - Search with a complex filter including range search is slow
  - Trac Ticket #500 - Newly created users with organizationalPerson objectClass fails to sync from AD to DS with missing attribute error
  - Trac Ticket #311 - IP lookup failing with multiple DNS entries
  - Trac Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
  - Trac Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
  - Ticket #503 - Improve AD version in winsync log message
  - Trac Ticket #190 - Un-resolvable server in replication agreement produces unclear error message
  - Coverity fixes
  - Trac Ticket #391 - Slapd crashes when deleting backends while operations are still in progress
  - Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
  - Trac Ticket #498 - Cannot abaondon simple paged result search
  - Coverity defects
  - Trac Ticket #494 - slapd entered to infinite loop during new index addition
  - Fixing compiler warnings in the posix-winsync plugin
  - Coverity defects
  - Ticket 147 - Internal Password Policy usage very inefficient
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
  - Ticket 495 - internalModifiersname not updated by DNA plugin
  - Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
  - Ticket 486 - nsslapd-enablePlugin should not be multivalued
  - Ticket 488 - Doc: DS error log messages with typo
  - Trac Ticket #451 - Allow db2ldif to be quiet
  - Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
  - Ticket #481 - expand nested posix groups
  - Trac Ticket #455 - Insufficient rights to unhashed#user#password when user deletes his password
  - Ticket #446 - anonymous limits are being applied to directory manager


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.2.rc2
changelog:
  - bump version to 1.3.0.rc2
  - Trac Ticket #497 - Escaped character cannot be used in the substring search filter
  - Ticket 509 - lock-free access to be->be_suffixlock
  - Trac Ticket #522 - betxn: upgrade is not implemented yet


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0-0.3.rc3
changelog:
  - bump version to 1.3.0.rc3
  - Ticket 549 - DNA plugin no longer reports additional info when range is depleted
  - Ticket 541 - need to set plugin as off in ldif template
  - Ticket 541 - RootDN Access Control plugin is missing after upgrade


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.3-1
changelog:
  - bump version to 1.3.0.3
  - Ticket #584 - Existence of an entry is not checked when its password is to be deleted
  - Ticket 562 - Crash when deleting suffix


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.0.4-1
changelog:
  - e53d691 bump version to 1.3.0.4
  - Bug 912964 - CVE-2013-0312 389-ds: unauthenticated denial of service vulnerability in handling of LDAPv3 control data
  - Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
  - Ticket 490 - Slow role performance when using a lot of roles
  - Ticket 590 - ns-slapd segfaults while trying to delete a tombstone entry


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.0.5-1
changelog:
  - bump version to 1.3.0.5
  - Ticket 47308 - unintended information exposure when anonymous access is set to rootdse
  - Ticket 628 - crash in aci evaluation
  - Ticket 627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
  - Ticket 634 - Deadlock in DNA plug-in Ticket #576 - DNA: use event queue for config update only at the start up
  - Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
  - Ticket 623 - cleanAllRUV task fails to cleanup config upon completion


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.0-1
changelog:
  - bump version to 1.3.1.0
  - Ticket 332 - Command line perl scripts should attempt most secure connection type first
  - Ticket 342 - better error message when cache overflows
  - Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Ticket 419 - logconv.pl - improve memory management
  - Ticket 422 - 389-ds-base - Can't call method "getText"
  - Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
  - Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
  - Ticket 487 - Possible to add invalid attribute values to PAM PTA plugin configuration
  - Ticket 502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
  - Ticket 505 - use lock-free access name2asi and oid2asi tables (additional)
  - Ticket 508 - lock-free access to FrontendConfig structure
  - Ticket 511 - allow turning off vattr lookup in search entry return
  - Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
  - Ticket 528 - RFE - get rid of instance specific scripts
  - Ticket 529 - dn normalization must handle multiple space characters in attributes
  - Ticket 532 - RUV is not getting updated for both Master and consumer
  - Ticket 533 - only scan for attributes to decrypt if there are encrypted attrs configured
  - Ticket 534 - RFE: Add SASL mappings fallback
  - Ticket 537 - Improvement of range search
  - Ticket 539 - logconv.pl should handle microsecond timing
  - Ticket 543 - Sorting with attributes in ldapsearch gives incorrect result
  - Ticket 545 - Segfault during initial LDIF import: str2entry_dupcheck()
  - Ticket 547 - Incorrect assumption in ndn cache
  - Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
  - Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
  - Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
  - Ticket 558 - Replication - make timeout for protocol shutdown configurable
  - Ticket 561 - disable writing unhashed#user#password to changelog
  - Ticket 563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
  - Ticket 565 - turbo mode and replication - allow disable of turbo mode
  - Ticket 571 - server does not accept 0 length LDAP Control sequence
  - Ticket 574 - problems with dbcachesize disk space calculation
  - Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
  - Ticket 585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
  - Ticket 587 - Replication error messages in the DS error logs
  - Ticket 588 - Create MAN pages for command line scripts
  - Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
  - Ticket 603 - A logic error in str2simple
  - Ticket 604 - Required attribute not checked during search operation
  - Ticket 608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
  - Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
  - Ticket 612 - improve dbgen rdn generation, output
  - Ticket 613 - ldclt: add timestamp, interval, nozeropad, other improvements
  - Ticket 616 - High contention on computed attribute lock
  - Ticket 618 - Crash at shutdown while stopping replica agreements
  - Ticket 620 - Better logging of error messages for 389-ds-base
  - Ticket 621 - modify operations without values need to be written to the changelog
  - Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
  - Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
  - Ticket 633 - allow nsslapd-nagle to be disabled, and also tcp cork
  - Ticket 47299 - allow cmdline scripts to work with non-root user
  - Ticket 47302 - get rid of sbindir start/stop/restart slapd scripts
  - Ticket 47303 - start/stop/restart dirsrv scripts should report and error if no instances
  - Ticket 47304 - reinitialization of a master with a disabled agreement hangs
  - Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
  - Ticket 47312 - replace PR_GetFileInfo with PR_GetFileInfo64
  - Ticket 47315 - filter option in fixup-memberof requires more clarification
  - Ticket 47325 - Crash at shutdown on a replica aggrement
  - Ticket 47330 - changelog db extension / upgrade is obsolete
  - Ticket 47336 - logconv.pl -m not working for all stats
  - Ticket 47341 - logconv.pl -m time calculation is wrong
  - Ticket 47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
  - Ticket 47347 - Simple paged results should support async search
  - Ticket 47348 - add etimes to per second/minute stats
  - Ticket 47349 - DS instance crashes under a high load


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.1-1
changelog:
  - bump version to 1.3.1.1
  - Ticket 402 - nhashed#user#password in entry extension
  - Ticket 511 - Revision - allow turning off vattr lookup in search entry return
  - Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
  - Ticket 47327 - error syncing group if group member user is not synced
  - Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
  - Ticket 47359 - new ldap connections can block ldaps and ldapi connections
  - Ticket 47362 - ipa upgrade selinuxusermap data not replicating
  - Ticket 47375 - flush_ber error sending back start_tls response will deadlock
  - Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
  - Ticket 47377 - make listen backlog size configurable
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
  - Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
  - Coverity Fixes (part 1)
  - Coverity Fixes (Part 2)
  - Coverity Fixes (Part 3)
  - Coverity Fixes (Part 4)
  - Coverity Fixes (Part 5)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.2-1
changelog:
  - bump version to 1.3.1.2
  - Ticket 47391 - deleting and adding userpassword fails to update the password
  - Coverity Fixes (Part 7)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.3-1
changelog:
  - bump version to 1.3.1.3
  - Ticket 47374 - flush.pl is not included in perl5
  - Ticket 47391 - deleting and adding userpassword fails to update the password (additional fix)
  - Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
  - Ticket 47395 47397 - v2 correct behaviour of account policy if only stateattr is configured or no alternate attr is configured
  - Ticket 47396 - crash on modrdn of tombstone
  - Ticket 47400 - MMR stress test with dna enabled causes a deadlock
  - Ticket 47409 - allow setting db deadlock rejection policy
  - Ticket 47419 - Unhashed userpassword can accidentally get removed from mods
  - Ticket 47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.4-1
changelog:
  - bump version to 1.3.1.4
  - Ticket 47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negat
  - Ticket 47424 - Replication problem with add-delete requests on single-valued attributes
  - Ticket 47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
  - Ticket 47421 - memory leaks in set_krb5_creds
  - Ticket 346 - version 4 Slow ldapmodify operation time for large quantities of multi-valued attribute v
  - Ticket 47369  version2 - provide default syntax plugin
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47339 - RHDS denies MODRDN access if ACI list contains any DENY rule
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47428 - Memory leak in 389-ds-base 1.2.11.15
  - Ticket 47392 - ldbm errors when adding/modifying/deleting entries
  - Ticket 47385 - Disk Monitoring is not triggered as expected.
  - Ticket 47410 - changelog db deadlocks with DNA and replication


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.5-1
changelog:
  - bump version to 1.3.1.5
  - Ticket 47456 - delete present values should append values to deleted values
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
  - Ticket 47440 - Fix runtime errors caused by last patch.
  - Ticket 47440 - Fix compilation warnings and header files
  - Ticket 47405 - CVE-2013-2219 ACLs inoperative in some search scenarios
  - Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
  - Ticket 47378 - fix recent compiler warnings
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
  - Ticket 47449 - deadlock after adding and deleting entries
  - Ticket 47441 - Disk Monitoring not checking filesystem with logs
  - Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-1
changelog:
  - bump version to 1.3.1.6
  - Ticket 47455 - valgrind - value mem leaks, uninit mem usage
  - fix coverity 11915 - dead code - introduced with fix for ticket 346
  - fix coverity 11895 - null deref - caused by fix to ticket 47392
  - fix compiler warning in posix winsync code for posix_group_del_memberuid_callback
  - Fix compiler warnings for Ticket 47395 and 47397
  - fix compiler warning (cherry picked from commit 904416f4631d842a105851b4a9931ae17822a107)
  - Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
  - fix compiler warnings
  - Fix compiler warning (cherry picked from commit ec6ebc0b0f085a82041d993ab2450a3922ef5502)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-2
changelog:
  - bump version to 1.3.1.6-2
  - Resolves Bug 1000633 - ns-slapd crash due to bogus DN
  - Ticket #47488 - Users from AD sub OU does not sync to IPA


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-3
changelog:
  - Ticket #47455 - valgrind - value mem leaks, uninit mem usage
  - Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-4
changelog:
  - bump version to 1.3.1.6-4
  - Resolves Bug 1007988 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing (Ticket 47489)
  - Resolves Bug 853931 - Allow macro aci keywords to be case-insensitive (Ticket 449)
  - Resolves Bug 1006563 - automember rebuild task not working as expected (Ticket 47507)


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-5
changelog:
  - Resolves: bug 1013896 - logconv.pl - Use of comma-less variable list is deprecated
  - Resolves: bug 1008256 - backend txn plugin fixup tasks should be done in a txn
  - Resolves: bug 1013738 - CLEANALLRUV doesnt run across all replicas
  - Resolves: bug 1011220 - PassSync removes User must change password flag on the Windows side
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  - Resolves: bug 1012125 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
  - Resolves: bug 1013063 - RUV tombstone search with scope "one" doesn`t work
  - Resolves: bug 1013893 - Indexed search are logged with 'notes=U' in the access logs
  - Resolves: bug 1013894 - improve logconv.pl performance with large access logs
  - Resolves: bug 1013898 - Fix various issues with logconv.pl
  - Resolves: bug 1013897 - logconv.pl uses /var/tmp for BDB temp files
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  - Resolves: bug 1014354 - Coverity fixes - 12023, 12024, and 12025


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-6
changelog:
  - Resolves: bug 1013900 - logconv: some stats do not work across server restarts
  -  previous patch introduced regressions
  -  fixed by c2eced0 ticket #47550 and e2a880b Ticket #47550 and 8b10f83 Ticket #47551
  - Resolves: bug 1008610 - tmpfiles.d references /var/lock when they should reference /run/lock
  -  previous patch not complete, fixed by a11be5c Ticket 47513
  - Resolves: bug 1016749 - DS crashes when "cn=Directory Manager" is changing it's password
  -  cherry picked upstream f786600 Ticket 47329 and b67e230 Coverity Fixes
  - Resolves: bug 1015252 locale "nl" not supported by collation plugin
  - Resolves: bug 1016317 Need to update supported locales
  - Resolves: bug 1016722 memory leak in range searches


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-7
changelog:
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  - Resolves: bug 1018914 fixup memberof task does not work: task entry not added


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-8
changelog:
  - release 1.3.1.6-8
  - Resolves: bug 971111 - DNA plugin failed to fetch replication agreement 
  - Resolves: bug 1026931 - 1.2.11.29 crash when removing entries from cache


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-9
changelog:
  - release 1.3.1.6-9
  - Resolves: bug 1028440 - Winsync replica initialization and incremental updates from DS to AD fails on RHEL
  - Resolves: bug 1027502 - Replication Failures related to skipped entries due to cleaned rids
  - Resolves: bug 1027047 - Winsync plugin segfault during incremental backoff


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-10
changelog:
  - release 1.3.1.6-10
  - Resolves: bug 1018893 DS91: ns-slapd stuck in DS_Sleep
  -     had to revert earlier change - does not work and breaks ipa


author: Rich Megginson <rmeggins@redhat.com> - 1.3.1.6-11
changelog:
  - Resolves: bug 1024979 - CVE-2013-4485 389-ds-base: DoS due to improper handling of ger attr searches


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-12
changelog:
  - release 1.3.1.6-12
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute (Ticket 47620)
  - Resolves: bug 1034898 - automember plugin task memory leaks (Ticket 47592)
  - Resolves: bug 1034451 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms (Ticket 47614)
  - Resolves: bug 1032318 - entries with empty objectclass attribute value can be hidden (Ticket 47591)
  - Resolves: bug 1032316 - attrcrypt fails to find unlocked key (Ticket 47596)
  - Resolves: bug 1031227 - Reduce lock scope in retro changelog plug-in (Ticket 47599)
  - Resolves: bug 1031226 - Convert ldbm_back_seq code to be transaction aware (Ticket 47598)
  - Resolves: bug 1031225 - Convert retro changelog plug-in to betxn (Ticket 47597)
  - Resolves: bug 1031223 - hard coded limit of 64 masters in agreement and changelog code (Ticket 47587)
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1035824 - Automember betxnpreoperation - transaction not aborted when group entry does not exist (Ticket 47622)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-14
changelog:
  - release 1.3.1.6-14
  - Resolves: bug 853355 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs (Ticket 447) 
  - Resolves: bug 1034739 - Impossible to configure nsslapd-allowed-sasl-mechanisms (Ticket 47613)
  - Resolves: bug 1038639 - 389-ds rejects nsds5ReplicaProtocolTimeout attribut; Fix logically dead code; Fix dereferenced NULL pointer in agmtlist_modify_callback(); Fix missing left brackete (Ticket 47620)
  - Resolves: bug 1042855 - nsds5ReplicaProtocolTimeout attribute is not validated when added to replication agreement; Config value validation improvement (Ticket 47620)
  - Resolves: bug 918717 - server does not accept 0 length LDAP Control sequence (Ticket 571)
  - Resolves: bug 1034902 - replica init/bulk import errors should be more verbose (Ticket 47606)
  - Resolves: bug 1044219 - fix memleak caused by 47347 (Ticket 47623)
  - Resolves: bug 1049522 - Crash after replica is installed; Fix cherry-pick error for 1.3.2 and 1.3.1 (Ticket 47620)
  - Resolves: bug 1049568 - changelog iteration should ignore cleaned rids when getting the minCSN (Ticket 47627)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-15
changelog:
  - release 1.3.1.6-15
  - Resolves: bug 918702 -  better error message when cache overflows (Ticket 342)
  - Resolves: bug 1009679 - replication stops with excessive clock skew (Ticket 47516)
  - Resolves: bug 1042855 - Unable to delete protocol timeout attribute (Ticket 47620)
  - Resolves: bug 918694 - Fix crash when disabling/enabling the setting (Ticket 408)
  - Resolves: bug 853355 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read (Ticket 47660)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-17
changelog:
  - release 1.3.1.6-17
  - Resolves: bug 853106 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error (Ticket 443)
  - Resolves: bug 1049525 - Server hangs in cos_cache when adding a user entry (Ticket 47649)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-18
changelog:
  - release 1.3.1.6-18
  - Resolves: bug 838656 - logconv.pl tool removes the access logs contents if "-M" is not correctly used (Ticket 471)
  - Resolves: bug 922538 - improve dbgen rdn generation, output (Ticket 47374)
  - Resolves: bug 970750 - flush.pl is not included in perl5 (Ticket 47374)
  - Resolves: bug 1013898 - Fix various issues with logconv.pl (Ticket 471)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-19
changelog:
  - release 1.3.1.6-19
  - Resolves: bug 1065971 - Enrolling a host into IdM/IPA always takes two attempts (Ticket 47704)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-20
changelog:
  - release 1.3.1.6-20
  - Resolves: bug 1065242 - 389-ds-base, conflict occurs at yum installation if multilib_policy=all. (Ticket 47709)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-21
changelog:
  - release 1.3.1.6-21
  - Resolves: bug 918694 - Fix covscan defect FORWARD_NULL (Ticket 408)
  - Resolves: bug 918717 - Fix covscan defect COMPILER WARNINGS (Ticket 571)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-22
changelog:
  - release 1.3.1.6-22
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
changelog:
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind) (Added 0095-Ticket-47739-directory-server-is-insecurely-misinter.patch)

    Tue Mar 11 2014 Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-23
  - release 1.3.1.6-22
  - Resolves: bug 1074850 - EMBARGOED CVE-2014-0132 389-ds-base: 389-ds: flaw in parsing authzid can lead to privilege escalation [rhel-7.0] (Ticket 47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-24
changelog:
  - release 1.3.1.6-24
  - Resolves: bug 1074084 - e_uniqueid fails to set if an entry is a conflict entry (Ticket 47735); regression - sub-type length in attribute type was mistakenly subtracted.


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.1.6-26
changelog:
  - release 1.3.1.6-26
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution (Ticket 346)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-1
changelog:
  - release 1.3.3.1-1
  - Resolves: bug 746646 - RFE: easy way to configure which users and groups to sync with winsync
  - Resolves: bug 881372 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
  - Resolves: bug 920597 - Possible to add invalid ACI value
  - Resolves: bug 921162 - Possible to add nonexistent target to ACI
  - Resolves: bug 923799 - if nsslapd-cachememsize set to the number larger than the RAM available, should result in proper error message.
  - Resolves: bug 924937 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
  - Resolves: bug 951754 - Self entry access ACI not working properly
  - Resolves: bug 952517 - Dirsrv instance failed to start with Segmentation fault (core dump) after modifying 7-bit check plugin
  - Resolves: bug 952682 - nsslapd-db-transaction-batch-val turns to -1
  - Resolves: bug 966443 - Plugin library path validation
  - Resolves: bug 975176 - Non-directory manager can change the individual userPassword's storage scheme
  - Resolves: bug 979465 - IPA replica's - "SASL encrypted packet length exceeds maximum allowed limit"
  - Resolves: bug 982597 - Some attributes in cn=config should not be multivalued
  - Resolves: bug 987009 - 389-ds-base - shebang with /usr/bin/env
  - Resolves: bug 994690 - RFE: Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart
  - Resolves: bug 1012991 - errorlog-level 16384 is listed as 0 in cn=config
  - Resolves: bug 1013736 - Enabling/Disabling DNA plug-in throws "ldap_modify: Server Unwilling to Perform (53)" error
  - Resolves: bug 1014380 - setup-ds.pl doesn't lookup the "root" group correctly
  - Resolves: bug 1020459 - rsa_null_sha should not be enabled by default
  - Resolves: bug 1024541 - start dirsrv after ntpd
  - Resolves: bug 1029959 - Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry
  - Resolves: bug 1031216 - add dbmon.sh
  - Resolves: bug 1044133 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
  - Resolves: bug 1044134 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
  - Resolves: bug 1044135 - make connection buffer size adjustable
  - Resolves: bug 1044137 - posix winsync should support ADD user/group entries from DS to AD
  - Resolves: bug 1044138 - mep_pre_op: Unable to fetch origin entry
  - Resolves: bug 1044139 - [RFE] Support RFC 4527 Read Entry Controls
  - Resolves: bug 1044140 - Allow search to look up 'in memory RUV'
  - Resolves: bug 1044141 - MMR stress test with dna enabled causes a deadlock
  - Resolves: bug 1044142 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
  - Resolves: bug 1044143 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
  - Resolves: bug 1044144 - resurrected entry is not correctly indexed
  - Resolves: bug 1044146 - Add a warning message when a connection hits the max number of threads
  - Resolves: bug 1044147 - 7-bit check plugin does not work for userpassword attribute
  - Resolves: bug 1044148 - The backend name provided to bak2db is not validated
  - Resolves: bug 1044149 - Winsync should support range retrieval
  - Resolves: bug 1044150 - 7-bit checking is not necessary for userPassword
  - Resolves: bug 1044151 - With SeLinux, ports can be labelled per range. setup-ds.pl or setup-ds-admin.pl fail to detect already ranged labelled ports
  - Resolves: bug 1044152 - ChainOnUpdate: "cn=directory manager" can modify userRoot on consumer without changes being chained or replicated. Directory integrity compromised.
  - Resolves: bug 1044153 - mods optimizer
  - Resolves: bug 1044154 - multi master replication allows schema violation
  - Resolves: bug 1044156 - DS crashes with some 7-bit check plugin configurations
  - Resolves: bug 1044157 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
  - Resolves: bug 1044159 - [RFE] Support 'Content Synchronization Operation' (SyncRepl) - RFC 4533
  - Resolves: bug 1044160 - remove-ds.pl should remove /var/lock/dirsrv
  - Resolves: bug 1044162 - enhance retro changelog
  - Resolves: bug 1044163 - updates to ruv entry are written to retro changelog
  - Resolves: bug 1044164 - Password administrators should be able to violate password policy
  - Resolves: bug 1044168 - Schema replication between DS versions may overwrite newer base schema
  - Resolves: bug 1044169 - ACIs do not allow attribute subtypes in targetattr keyword
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable
  - Resolves: bug 1044171 - Allow referential integrity suffixes to be configurable
  - Resolves: bug 1044172 - Plugin library path validation prevents intentional loading of out-of-tree modules
  - Resolves: bug 1044173 - make referential integrity configuration more flexible
  - Resolves: bug 1044177 - allow configuring changelog trim interval
  - Resolves: bug 1044179 - objectclass may, must lists skip rest of objectclass once first is found in sup
  - Resolves: bug 1044180 - memberOf on a user is converted to lowercase
  - Resolves: bug 1044181 - report unindexed internal searches
  - Resolves: bug 1044183 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
  - Resolves: bug 1044185 - dbscan on entryrdn should show all matching values
  - Resolves: bug 1044187 - logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
  - Resolves: bug 1044188 - Recognize compressed log files
  - Resolves: bug 1044191 - support TLSv1.1 and TLSv1.2, if supported by NSS
  - Resolves: bug 1044193 - default nsslapd-sasl-max-buffer-size should be 2MB
  - Resolves: bug 1044194 - Complex filter in a search request doen't work as expected.
  - Resolves: bug 1044196 - Automember plug-in should treat MODRDN operations as ADD operations
  - Resolves: bug 1044198 - Replication of the schema may overwrite consumer 'attributetypes' even if consumer definition is a superset
  - Resolves: bug 1044202 - db2bak.pl issue when specifying non-default directory
  - Resolves: bug 1044203 - Allow referint plugin to use an alternate config area
  - Resolves: bug 1044205 - Allow memberOf to use an alternate config area
  - Resolves: bug 1044210 - idl switch does not work
  - Resolves: bug 1044211 - make old-idl tunable
  - Resolves: bug 1044212 - IDL-style can become mismatched during partial restoration
  - Resolves: bug 1044213 - backend performance - introduce optimization levels
  - Resolves: bug 1044215 - using transaction batchval violates durability
  - Resolves: bug 1044216 - examine replication code to reduce amount of stored state information
  - Resolves: bug 1048980 - 7-bit check plugin not checking MODRDN operation
  - Resolves: bug 1049030 - Windows Sync group issues
  - Resolves: bug 1052751 - Page control does not work if effective rights control is specified
  - Resolves: bug 1052754 - Allow nsDS5ReplicaBindDN to be a group DN
  - Resolves: bug 1057803 - logconv errors when search has invalid bind dn
  - Resolves: bug 1060032 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
  - Resolves: bug 1061060 - betxn: retro changelog broken after cancelled transaction
  - Resolves: bug 1061572 - improve dbgen rdn generation, output and man page.
  - Resolves: bug 1063990 - single valued attribute replicated ADD does not work
  - Resolves: bug 1064006 - Size returned by slapi_entry_size is not accurate
  - Resolves: bug 1064986 - Replication retry time attributes cannot be added
  - Resolves: bug 1067090 - Missing warning for invalid replica backoff configuration
  - Resolves: bug 1072032 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
  - Resolves: bug 1074306 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
  - Resolves: bug 1074447 - Part of DNA shared configuration is deleted after server restart
  - Resolves: bug 1076729 - Continuous add/delete of an entry in MMR setup causes entryrdn-index conflict
  - Resolves: bug 1077884 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
  - Resolves: bug 1077897 - Memory leak with proxy auth control
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing
  - Resolves: bug 1082967 - attribute uniqueness plugin fails when set as a chaining component
  - Resolves: bug 1085011 - Directory Server crash reported from reliab15 execution
  - Resolves: bug 1086890 - empty modify returns LDAP_INVALID_DN_SYNTAX
  - Resolves: bug 1086902 - mem leak in do_bind when there is an error
  - Resolves: bug 1086904 - mem leak in do_search - rawbase not freed upon certain errors
  - Resolves: bug 1086908 - Performing deletes during tombstone purging results in operation errors
  - Resolves: bug 1090178 - #481 breaks possibility to reassemble memberuid list
  - Resolves: bug 1092099 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
  - Resolves: bug 1092342 - nsslapd-ndn-cache-max-size accepts any invalid value.
  - Resolves: bug 1092648 - Negative value of nsSaslMapPriority is not reset to lowest priority
  - Resolves: bug 1097004 - Problem with deletion while replicated
  - Resolves: bug 1098654 - db2bak.pl error with changelogdb
  - Resolves: bug 1099654 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
  - Resolves: bug 1108405 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
  - Resolves: bug 1108407 - managed entry plugin fails to update managed entry pointer on modrdn operation
  - Resolves: bug 1108865 - memory leak in ldapsearch filter objectclass=*
  - Resolves: bug 1108870 - ACI warnings in error log
  - Resolves: bug 1108872 - Logconv.pl with an empty access log gives lots of errors
  - Resolves: bug 1108874 - logconv.pl memory continually grows
  - Resolves: bug 1108881 - rsearch filter error on any search filter
  - Resolves: bug 1108895 - [RFE - RHDS9] CLI report to monitor replication
  - Resolves: bug 1108902 - rhds91 389-ds-base-1.2.11.15-31.el6_5.x86_64 crash in db4 __dbc_get_pp env = 0x0 ?
  - Resolves: bug 1108909 - single valued attribute replicated ADD does not work
  - Resolves: bug 1109334 - 389 Server crashes if uniqueMember is invalid syntax and memberOf plugin is enabled.
  - Resolves: bug 1109336 - Parent numsubordinate count can be incorrectly updated if an error occurs
  - Resolves: bug 1109339 - Nested tombstones become orphaned after purge
  - Resolves: bug 1109354 - Tombstone purging can crash the server if the backend is stopped/disabled
  - Resolves: bug 1109357 - Coverity issue in 1.3.3
  - Resolves: bug 1109364 - valgrind - value mem leaks, uninit mem usage
  - Resolves: bug 1109375 - provide default syntax plugin
  - Resolves: bug 1109378 - Environment variables are not passed when DS is started via service
  - Resolves: bug 1111364 - Updating winsync one-way sync does not affect the behaviour dynamically
  - Resolves: bug 1112824 - Broken dereference control with the FreeIPA 4.0 ACIs
  - Resolves: bug 1113605 - server restart wipes out index config if there is a default index
  - Resolves: bug 1115177 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
  - Resolves: bug 1117021 - Server deadlock if online import started while server is under load
  - Resolves: bug 1117975 - paged results control is not working in some cases when we have a subsuffix.
  - Resolves: bug 1117979 - harden the list of ciphers available by default
  - Resolves: bug 1117981 - Fix various typos in manpages & code
  - Resolves: bug 1117982 - Fix hyphens used as minus signed and other manpage mistakes
  - Resolves: bug 1118002 - server crashes deleting a replication agreement
  - Resolves: bug 1118006 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
  - Resolves: bug 1118007 - [RFE] Make it possible for privileges to be provided to an admin user to import an LDIF file containing hashed passwords
  - Resolves: bug 1118014 - Enhance ACIs to have more control over MODRDN operations
  - Resolves: bug 1118021 - Return all attributes in rootdse without explicit request
  - Resolves: bug 1118025 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
  - Resolves: bug 1118032 - Schema Replication Issue
  - Resolves: bug 1118034 - 389 DS Server crashes and dies while handles paged searches from clients
  - Resolves: bug 1118043 - Failed deletion of aci: no such attribute
  - Resolves: bug 1118048 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
  - Resolves: bug 1118051 - Add switch to disable pre-hashed password checking
  - Resolves: bug 1118054 - Make ldbm_back_seq independently support transactions
  - Resolves: bug 1118055 - Add operations rejected by betxn plugins remain in cache
  - Resolves: bug 1118057 - online import crashes server if using verbose error logging
  - Resolves: bug 1118059 - add fixup-memberuid.pl script
  - Resolves: bug 1118060 - winsync plugin modify is broken
  - Resolves: bug 1118066 - memberof scope: allow to exclude subtrees
  - Resolves: bug 1118069 - 389-ds production segfault: __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:144
  - Resolves: bug 1118074_DELETE_FN - plugin returned error" messages
  - Resolves: bug 1118076 - ds logs many "Operation error fetching Null DN" messages
  - Resolves: bug 1118077 - Improve import logging and abort handling
  - Resolves: bug 1118079 - Multi master replication initialization incomplete after restore of one master
  - Resolves: bug 1118080 - Don't add unhashed password mod if we don't have an unhashed value
  - Resolves: bug 1118081 - Investigate betxn plugins to ensure they return the correct error code
  - Resolves: bug 1118082 - The error result text message should be obtained just prior to sending result
  - Resolves: bug 1123865 - CVE-2014-3562 389-ds-base: 389-ds: unauthenticated information disclosure [rhel-7.1]


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-2
changelog:
  - release 1.3.3.1-2
  - Resolves: bug 1079099 - Simultaneous adding a user and binding as the user could fail in the password policy check (DS 47748)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47834)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.1 (DS 47890)
  - Resolves: bug 1112702 - Broken dereference control with the FreeIPA 4.0 ACIs (DS 47885 - deref plugin should not return references with noc access rights)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (DS 47838, DS 47895)
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing (DS 47889 - DS crashed during ipa-server-install on test_ava_filter)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-4
changelog:
  - release 1.3.3.1-4
  - Resolves: bug 1080186 - Creating a glue fails if one above level is a conflict or missing  (DS 47750)
  - Resolves: bug 1145846 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server (DS 47908)
  - Resolves: bug 1117979 - harden the list of ciphers available by default (phase 2) (DS 47838)
                          - provide enabled ciphers as search result (DS 47880)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-6
changelog:
  - release 1.3.3.1-6
  - Resolves: bug 1151287 - dynamically added macro aci is not evaluated on the fly (DS 47922)
  - Resolves: bug 1080186 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten (DS 47897)
  - Resolves: bug 1150694 - Encoding of SearchResultEntry is missing tag (DS 47920)
  - Resolves: bug 1150695 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails. (DS 47919)
  - Resolves: bug 1139882 - Fix remaining compiler warnings (DS 47892)
  - Resolves: bug 1150206 - result of dna_dn_is_shared_config is incorrectly used (DS 47918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-8
changelog:
  - release 1.3.3.1-8
  - Resolves: bug 1156607 - Crash in entry_add_present_values_wsi_multi_valued (DS 47937)
  - Resolves: bug 1153737 - Disable SSL v3, by default (DS 47928, DS 47945, DS 47948)
  - Resolves: bug 1158804 - Malformed cookie for LDAP Sync makes DS crash (DS 47939)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-9
changelog:
  - release 1.3.3.1-9
  - Resolves: bug 1153737 - Disable SSL v3, by default. (DS 47928)
  - Resolves: bug 1163461 - Should not check aci syntax when deleting an aci (DS 47953)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-10
changelog:
  - release 1.3.3.1-10
  - Resolves: bug 1172731 - CVE-2014-8112 password hashing bypassed when "nsslapd-unhashed-pw-switch" is set to off 
  - Resolves: bug 1166265 - DS hangs during online total update (DS 47942)
  - Resolves: bug 1168151 - CVE-2014-8105 information disclosure through 'cn=changelog' subtree
  - Resolves: bug 1044170 - Allow memberOf suffixes to be configurable (DS 47526)
  - Resolves: bug 1171356 - Bind DN tracking unable to write to internalModifiersName without special permissions (DS 47950)
  - Resolves: bug 1153737 - logconv.pl -- support parsing/showing/reporting different protocol versions (DS 47949)
  - Resolves: bug 1171355 - start dirsrv after chrony on RHEL7 and Fedora (DS 47947)
  - Resolves: bug 1170707 - cos_cache_build_definition_list does not stop during server shutdown (DS 47967)
  - Resolves: bug 1170708 - COS memory leak when rebuilding the cache (DS - Ticket 47969)
  - Resolves: bug 1170709 - Account lockout attributes incorrectly updated after failed SASL Bind (DS 47970)
  - Resolves: bug 1166260 - cookie_change_info returns random negative number if there was no change in a tree (DS 47960)
  - Resolves: bug 1012991 - Error log levels not displayed correctly (DS 47636)
  - Resolves: bug 1108881 - rsearch filter error on any search filter (DS 47722)
  - Resolves: bug 994690  - Allow dynamically adding/enabling/disabling/removing plugins without requiring a server restart (DS 47451)
  - Resolves: bug 1162997 - Running a plugin task can crash the server (DS 47451)
  - Resolves: bug 1166252 - RHEL7.1 ns-slapd segfault when ipa-replica-install restarts (DS 47451)
  - Resolves: bug 1172597 - Crash if setting invalid plugin config area for MemberOf Plugin (DS 47525)
  - Resolves: bug 1139882 - coverity defects found in 1.3.3.x (DS 47965)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-11
changelog:
  - release 1.3.3.1-11
  - Resolves: bug 1080186 - During delete operation do not refresh cache entry if it is a tombstone (DS 47750)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-12
changelog:
  - release 1.3.3.1-12
  - Resolves: bug 1182477 - Windows Sync accidentally cleared raw_entry (DS 47989)
  - Resolves: bug 1180325 - upgrade script fails if /etc and /var are on different file systems (DS 47991 )
  - Resolves: bug 1183655 - Schema learning mechanism, in replication, unable to extend an existing definition (DS 47988)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-14
changelog:
  - release 1.3.3.1-14
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
              Fixes spec file to make sure all the server instances are stopped before upgrade
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-16
changelog:
  - release 1.3.3.1-16
  - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-17
changelog:
  - release 1.3.3.1-17
  - Resolves: bug 1226510 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane (DS 48190)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-18
changelog:
  - release 1.3.3.1-18
  - Resolves: bug 1228823 - async simple paged results issue (DS 48146, DS 48192)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.3.1-19
changelog:
  - release 1.3.3.1-19
  - Resolves: bug 1230996 - nsSSL3Ciphers preference not enforced server side (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-1
changelog:
  - Release 1.3.4.0-1 (rebase)
  - Enable nunc-stans for x86_64.
  - Resolves: bug 1034325 - Linked attributes betxnpreoperation - transaction not aborted when linked entry does not exit (DS 47640)
  - Resolves: bug 1052755 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute (DS 47669)
  - Resolves: bug 1096409 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown (DS 47801)
  - Resolves: bug 1145378 - Adding an entry with an invalid password as rootDN is incorrectly rejected (DS 47900)
  - Resolves: bug 1145382 - Bad manipulation of passwordhistory (DS 47905)
  - Resolves: bug 1154147 - Uniqueness plugin: should allow to exclude some subtrees from its scope (DS 47927)
  - Resolves: bug 1171358 - Make ReplicaWaitForAsyncResults configurable (DS 47957)
  - Resolves: bug 1171663 - MODDN fails when entry doesn't have memberOf attribute and new DN is in the scope of memberOfExcludeSubtree (DS 47526)
  - Resolves: bug 1174457 - [RFE] memberOf - add option to skip nested group lookups during delete operations (DS 47963)
  - Resolves: bug 1178640 - db2bak.pl man page should be improved. (DS 48008)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)
  - Resolves: bug 1180331 - Local Password Policies for Nested OU's not honoured (DS 47980)
  - Resolves: bug 1180776 - nsslapd-db-locks modify not taking into account (DS 47934)
  - Resolves: bug 1181341 - nsslapd-changelogtrim-interval and nsslapd-changelogcompactdb-interval are not validated (DS 47617)
  - Resolves: bug 1185882 - ns-activate.pl fails to activate account if it was disabled on AD (DS 48001)
  - Resolves: bug 1186548 - ns-slapd crash in shutdown phase (DS 48005)
  - Resolves: bug 1189154 - DNS errors after IPA upgrade due to broken ReplSync (DS 48030)
  - Resolves: bug 1206309 - winsync sets AccountUserControl in AD to 544 (DS 47723)
  - Resolves: bug 1210845 - slapd crashes during Dogtag clone reinstallation (DS 47966)
  - Resolves: bug 1210850 - add an option '-u' to dbgen.pl for adding group entries with (DS 48025)
  - Resolves: bug 1210852 - aci with wildcard and macro not correctly evaluated (DS 48141)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-2
changelog:
  - release 1.3.4.0-2
  - Resolves: bug 1235060 - Fix coverity issues 
  - Resolves: bug 1235387 - Slow replication when deleting large quantities of multi-valued attributes (DS 48195)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-3
changelog:
  - release 1.3.4.0-3
  - Resolves: bug 1228823 - async simple paged results issue (DS 48192)
  - Resolves: bug 1237325 - reindex off-line twice could provoke index corruption (DS 48212)
  - Resolves: bug 1238790 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value (DS 48214)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-4
changelog:
  - release 1.3.4.0-4
  - Resolves: bug 1240404 - setup-ds.pl does not log invalid --file path errors the same (DS 48119)
  - Resolves: bug 1240406 - setup -u stops after first failure (DS 47878)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-6
changelog:
  - release 1.3.4.0-6
  - Resolves: bug 1240845 - cleanallruv should completely clean changelog (DS 48208)
  - Resolves: bug 1095603 - Any negative LDAP error code number reported as Illegal error by ldclt. (DS 47799)
  - Resolves: bug 1168675 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie (DS 48013)
  - Resolves: bug 1241723 - cleanAllRUV hangs shutdown if not all of the replicas are online (DS 48217)
  - Resolves: bug 1241497 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement (DS 48216)
  - Resolves: bug 1240404 - Silent install needs to properly exit when INF file is missing (DS 48119)
  - Resolves: bug 1240406 - Remove warning suppression in 1.3.4 (DS 47878)
  - Resolves: bug 1242683 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute (DS 48223)
  - Resolves: bug 1160243 - logconv.pl - validate start and end time args (DS 47910)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1230996 - CI test: fixing test cases for ticket 48194 (DS 48194)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-7
changelog:
  - release 1.3.4.0-7
  - Resolves: bug 1235060 - Fix coverity issues - 07/14/2015 (DS 48203)
  - Resolves: bug 1242531 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-8
changelog:
  - release 1.3.4.0-8
  - Resolves: bug 1160243 - [RFE] allow logconv.pl -S/-E switches to work even when exact/same timestamps are not present in access log file (DS 47910)
  - Resolves: bug 1172037 - winsync range retrieval gets only 5000 values upon initialization (DS 48010)
  - Resolves: bug 1242531 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files (DS 48224)
  - Resolves: bug 1243950 - When starting a replica agreement a deadlock can occur with an op updating nsuniqueid index (DS 48179)
  - Resolves: bug 1243970 -  In MMR, double free coould occur under some special condition (DS 48226)
  - Resolves: bug 1244926 - Crash while triming the retro changelog (DS 48206)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-9
changelog:
  - release 1.3.4.0-9
  - Resolves: bug 1240876 - verify_db.pl doesn't verify DB specified by -a option. (DS 48215)
  - Resolves: bug 1245235 - winsync lastlogon attribute not syncing between IPA & Windows 2008. (DS 48232)
  - Resolves: bug 1245519 - Deadlock with retrochangelog, memberof plugin (DS 47931)
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1247811 - logconv autobind handling regression caused by 47446 (DS 48231)
  - Resolves: bug 1250177 - Investigate betxn plugins to ensure they return the correct error code (DS 47810)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-11
changelog:
  - release 1.3.4.0-11
  - Resolves: bug 1249784 - ipa-dnskeysyncd unhandled exception on named-pkcs11 start (DS 48249)
  - Resolves: bug 1252082 - removing chaining database links trigger valgrind read error (DS 47686)
  - Resolves: bug 1252207 - bashisms in 389-ds-base admin scripts (DS 47511)
  - Resolves: bug 1252533 - Man pages and help for remove-ds.pl doesn't display "-a" option (DS 48245)
  - Resolves: bug 1252781 - Slapd crashes reported from latest builds (DS 48250)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-12
changelog:
  - release 1.3.4.0-12
  - Resolves: bug 1252133 - replica upgrade failed in starting dirsrv service (DS 48243)
  - Resolves: bug 1254344 - Server crashes in ACL_LasFindFlush during shutdown if ACIs contain IP addresss restrictions (DS 48233)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-14
changelog:
  - release 1.3.4.0-14
  - Resolves: bug 1246389 - wrong password check if passwordInHistory is decreased. (DS 48228)
  - Resolves: bug 1255851 - Shell CLI fails with usage errors if an argument containing white spaces is given (DS 48254)
  - Resolves: bug 1256938 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax (DS 47757)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-15
changelog:
  - release 1.3.4.0-15
  - Resolves: bug 1258996 - Complex filter in a search request doen't work as expected. (regression) (DS 48265)
  - Resolves: bug 1179370 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes (DS 47981)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-16
changelog:
  - release 1.3.4.0-16
  - Resolves: bug 1243970 - In MMR, double free coould occur under some special condition (DS 48276, DS 48226)
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266)
  - Resolves: bug 1241723 - cleanallruv - fix regression with server shutdown (DS 48217)
  - Resolves: bug 1264224 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in (DS 48188)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-17
changelog:
  - release 1.3.4.0-17
  - Resolves: bug 1259949 - A backport error (coverity -- unused variable 'init_retry')


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-18
changelog:
  - release 1.3.4.0-18
  - Resolves: bug 1259949 - Fractional replication evaluates several times the same CSN (DS 48266, DS 48284)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.4.0-19
changelog:
  - release 1.3.4.0-19
  - Resolves: bug 1228823 - async simple paged results issue (DS 48299, DS 48192)
  - Resolves: bug 1266944 - ns-slapd crash during ipa-replica-manage del (DS 48298)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.2-1
changelog:
  - release 1.3.5.2-1
  - Resolves: bug 1270020 - Rebase 389-ds-base to 1.3.5 in RHEL-7.3 
  - Resolves: bug 1288229 - many attrlist_replace errors in connection with cleanallruv (DS 48283)
  - Resolves: bug 1315893 - License tag does not match actual license of code (DS 48757)
  - Resolves: bug 1320715 - DES to AES password conversion fails if a backend is empty (DS 48777)
  - Resolves: bug 190862  - [RFE] Default password syntax settings don't work with fine-grained policies (DS 142)
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 548)
  - Resolves: bug 1143066 - The dirsrv user/group should be created in rpm %pre, and ideally with fixed uid/gid (DS 48285)
  - Resolves: bug 1153758 - [RFE] Support SASL/GSSAPI when ns-slapd is behind a load-balancer (DS 48332)
  - Resolves: bug 1160902 - search, matching rules and filter error "unsupported type 0xA9" (DS 48016)
  - Resolves: bug 1186512 - High memory fragmentation observed in ns-slapd; OOM-Killer invoked (DS 48377, 48129)
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1209094 - [RFE] Allow logging of rejected changes (DS 48145, 48280)
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1210842 - [RFE] Add PIDFile option to systemd service file (DS 47951)
  - Resolves: bug 1223510 - [RFE] it could be nice to have nsslapd-maxbersize default to bigger than 2Mb (DS 48326)
  - Resolves: bug 1229799 - ldclt-bin killed by SIGSEGV (DS 48289)
  - Resolves: bug 1249908 - No validation check for the value for nsslapd-db-locks. (DS 48244)
  - Resolves: bug 1254887 - No man page entry for - option '-u' of dbgen.pl for adding group entries with uniquemembers (DS 48290)
  - Resolves: bug 1255557 - db2index creates index entry from deleted records (DS 48252)
  - Resolves: bug 1258610 - total update request must not be lost (DS 48255)
  - Resolves: bug 1258611 - dna plugin needs to handle binddn groups for authorization (DS 48258)
  - Resolves: bug 1259624 - [RFE] Provide a utility to detect accounts locked due to inactivity (DS 48269)
  - Resolves: bug 1259950 - Add config setting to MemberOf Plugin to add required objectclass got memberOf attribute (DS 48267)
  - Resolves: bug 1266510 - Linked Attributes plug-in - wrong behaviour when adding valid and broken links (DS 48295)
  - Resolves: bug 1266532 - Linked Attributes plug-in - won't update links after MODRDN operation (DS 48294)
  - Resolves: bug 1267750 - pagedresults - when timed out, search results could have been already freed. (DS 48299)
  - Resolves: bug 1269378 - ds-logpipe.py with wrong arguments - python exception in the output (DS 48302)
  - Resolves: bug 1271330 - nunc-stans: Attempt to release connection that is not acquired (DS 48311)
  - Resolves: bug 1272677 - nunc stans: ns-slapd killed by SIGTERM
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT
  - Resolves: bug 1273142 - crash in Managed Entry plugin (DS 48312)
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1273550 - Deadlock between two MODs on the same entry between entry cache and backend lock (DS 47978)
  - Resolves: bug 1273555 - deadlock in mep delete post op (DS 47976)
  - Resolves: bug 1273584 - lower password history minimum to 1 (DS 48394)
  - Resolves: bug 1275763 - [RFE] add setup-ds.pl option to disable instance specific scripts (DS 47840)
  - Resolves: bug 1276072 - [RFE] Allow RHDS to be setup using a DNS CNAME alias for General.FullMachineName (DS 48328)
  - Resolves: bug 1278567 - SimplePagedResults -- abandon could happen between the abandon check and sending results (DS 48338)
  - Resolves: bug 1278584 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well. (DS 48339)
  - Resolves: bug 1278755 - deadlock on connection mutex (DS 48341)
  - Resolves: bug 1278987 - Cannot upgrade a consumer to supplier in a multimaster environment (DS 48325)
  - Resolves: bug 1280123 - acl - regression - trailing ', (comma)' in macro matched value is not removed. (DS 48344)
  - Resolves: bug 1290111 - [RFE] Support for rfc3673 '+' to return operational attributes (DS 48363)
  - Resolves: bug 1290141 - With exhausted range, part of DNA shared configuration is deleted after server restart (DS 48362)
  - Resolves: bug 1290242 - SimplePagedResults -- in the search error case, simple paged results slot was not released. (DS 48375)
  - Resolves: bug 1290600 - The 'eq' index does not get updated properly when deleting and re-adding attributes in the same ldapmodify operation (DS 48370)
  - Resolves: bug 1295947 - 389-ds hanging after a few minutes of operation (DS 48406, revert 48338)
  - Resolves: bug 1296310 - ldclt - segmentation fault error while binding (DS 48400)
  - Resolves: bug 1299758 - CVE-2016-0741 389-ds-base: Worker threads do not detect abnormally closed connections causing DoS [rhel-7.3]
  - Resolves: bug 1301097 - logconv.pl displays negative operation speeds (DS 48446)
  - Resolves: bug 1302823 - Crash in slapi_get_object_extension (DS 48536)
  - Resolves: bug 1303641 - heap corruption at schema replication. (DS 48492)
  - Resolves: bug 1307151 - keep alive entries can break replication (DS 48445)
  - Resolves: bug 1310848 - Supplier can skip a failing update, although it should retry. (DS 47788)
  - Resolves: bug 1314557 - change severity of some messages related to "keep alive" enties (DS 48420)
  - Resolves: bug 1316580 - dirsrv service doesn't ask for pin when pin.txt is missing (DS 48450)
  - Resolves: bug 1316742 - no plugin calls in tombstone purging (DS 48759)
  - Resolves: bug 1319329 - [RFE] add nsslapd-auditlog-logging-enabled: off to template-dse.ldif (DS 48145)
  - Resolves: bug 1320295 - If nsSSL3 is on, even if SSL v3 is not really enabled, a confusing message is logged. (DS 48775)
  - Resolves: bug 1326520 - db2index uses a buffer size derived from dbcachesize (DS 48383)
  - Resolves: bug 1328936 - objectclass values could be dropped on the consumer (DS 48799)
  - Resolves: bug 1287475 - [RFE] response control for password age should be sent by default by RHDS (DS 48369)
  - Resolves: bug 1331343 - Paged results search returns the blank list of entries (DS 48808)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.3-1
changelog:
  - release 1.3.5.3-1
  - Resolves: bug 1209128 - [RFE] Add a utility to get the status of Directory Server instances (DS 48144)
  - Resolves: bug 1332533 - ns-accountstatus.pl gives error message on execution along with results. (DS 48815)
  - Resolves: bug 1332709 - password history is not updated when an admin resets the password (DS 48813)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48822)
  - Resolves: bug 1333515 - Enable DS to offer weaker DH params in NSS  (DS 48798)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.4-1
changelog:
  - release 1.3.5.4-1
  - Resolves: bug 1334455 - db2ldif is not taking into account multiple suffixes or backends (DS 48828)
  - Resolves: bug 1241563 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
  - Resolves: bug 1335618 - Server ram sanity checks work in isolation (DS 48617)
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48837)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.5-1
changelog:
  - Release 1.3.5.5-1
  - Resolves: bug 1018944 - [RFE] Enhance password change tracking (DS 48833)
  - Resolves: bug 1344414 - [RFE] adding pre/post extop ability (DS 48880)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1257568 - /usr/lib64/dirsrv/libnunc-stans.so is owned by both -libs and -devel (DS 48404)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1342609 - At startup DES to AES password conversion causes timeout in start script (DS 48862)
  - Resolves: bug 1316328 - search returns no entry when OR filter component contains non readable attribute (DS 48275)
  - Resolves: bug 1280456 - setup-ds should detect if port is already defined (DS 48336)
  - Resolves: bug 1312557 - dirsrv service fails to start when nsslapd-listenhost is configured (DS 48747)
  - Resolves: bug 1326077 - Page result search should return empty cookie if there is no returned entry (DS 48752)
  - Resolves: bug 1340307 - Running db2index with no options breaks replication (DS 48854)
  - Resolves: bug 1337195 - Regression introduced in matching rules by DS 48746 (DS 48844)
  - Resolves: bug 1335492 - Modifier's name is not recorded in the audit log with modrdn and moddn operations (DS 48834)
  - Resolves: bug 1316741 - ldctl should support -H with ldap uris (DS 48754)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.6-1
changelog:
  - Release 1.3.5.6-1
  - Resolves: bug 1273549 - [RFE] Improve timestamp resolution in logs (DS 47982)
  - Resolves: bug 1321124 - Replication changelog can incorrectly skip over updates (DS 48766, DS 48636)
  - Resolves: bug 1233926 - "matching rules" in ACI's "bind rules not fully evaluated (DS 48234)
  - Resolves: bug 1346165 - 389-ds-base-1.3.5.5-1.el7.x86_64 requires policycoreutils-py


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.7-1
changelog:
  - Release 1.3.5.7-1
  - Resolves: bug 1196282 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*) (DS 48109)
  - Resolves: bug 1303794 - Import readNSState.py from RichM's repo (DS 48449)
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)
  - Resolves: bug 1338872 - Wrong result code display in audit-failure log (DS 48892)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1347407 - By default aci can be read by anonymous (DS 48354)
  - Resolves: bug 1347412 - cn=SNMP,cn=config entry can be read by anonymous (DS 48893)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.8-1
changelog:
  - Release 1.3.5.8-1
  - Resolves: bug 1290101 - proxyauth support does not work when bound as directory  manager (DS 48366)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.9-1
changelog:
  - Release 1.3.5.9-1
  - Resolves: bug 1349571 - Improve MMR replication convergence (DS 48636)
  - Resolves: bug 1304682 - "stale" automember rule (associated to a removed group) causes discrepancies in the database (DS 48637)
  - Resolves: bug 1314956 - moving an entry cause next on-line init to skip entry has no parent, ending at line 0 of file "(bulk import)" (DS 48755)
  - Resolves: bug 1316731 - syncrepl search returning error 329; plugin sending a bad error code (DS 48904)
  - Resolves: bug 1346741 - ns-slapd crashes during the shutdown after adding attribute with a matching rule  (DS 48891)
  - Resolves: bug 1349577 - Values of dbcachetries/dbcachehits in cn=monitor could overflow. (DS 48899)
  - Resolves: bug 1272682 - nunc-stans: ns-slapd killed by SIGABRT (DS 48898)
  - Resolves: bug 1346043 - repl-monitor displays colors incorrectly for the time lag > 60 min (DS 47538)
  - Resolves: bug 1350632 - ns-slapd shutdown crashes if pwdstorageschema name is from stack. (DS 48902)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-1
changelog:
  - Release 1.3.5.10-1
  - Resolves: bug 1333184 - (389-ds-base-1.3.5) Fixing coverity issues. (DS 48905)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-2
changelog:
  - Release 1.3.5.10-2
  - Resolves: bug 1353714 - If a cipher is disabled do not attempt to look it up (DS 48743)
  - Resolves: bug 1353592 - Setup-ds.pl --update fails - regression (DS 48755)
  - Resolves: bug 1353544 - db2bak.pl task enters infinitive loop when bak fs is almost full (DS 48914)
  - Resolves: bug 1354374 - Upgrade to 389-ds-base >= 1.3.5.5 doesn't install 389-ds-base-snmp (DS 48918)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-13
changelog:
  - Release 1.3.5.10-13
  - Resolves: bug 1402030 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted (DS 48133)
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 49020)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-15
changelog:
  - Release 1.3.5.10-15
  - Resolves: bug 1402325 - do not treat missing csn as fatal (DS 48964)
  - Resolves: bug 1410080 - incompatible nsEncryptionConfig object definition prevents RHEL 7->6 schema replication (DS 49074)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-16
changelog:
  - Release 1.3.5.10-16
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)
  - Resolves: bug 1414678 - deadlock on cos cache rebuild (DS 49079)
  - Resolves: bug 1414679 - Release 1.3.5 may allow expired accounts access to systems (DS 49080, DS 49082)
  - Resolves: bug 1416368 - Aborted operation can leave RUV in incorrect state (DS 49008)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.3.5.10-17
changelog:
  - Release 1.3.5.10-17
  - Resolves: bug 1414677 - (un)register/migration/remove may fail if there is no suffix (DS 49016)


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-19
changelog:
  - Release 1.3.5.10-19
  - Resolves: bug 1429495 - ns-slapd dies under heavy load 
  - Resolves: bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-20
changelog:
  - Bump version to 1.3.5.10-20
  - Resolves: bug 1437005 - CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages


author: Mark Reynolds <mreynolds@redhat.com> - 1.3.5.10-21
changelog:
  - Bump verison to 1.3.5.10-21
  - Resolves: Bug 1440654 - Possible deadlock while installing an ipa replica
  - Resolves: Bug 1445178 - Silent install localhost issue
  - Resolves: Bug 1445177 - retrocl crash at shutdown
  - Resolves: Bug 1445176 - case sensitivity in acl


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-5
changelog:
  - libnm,nmtui: fix handling empty cloned-mac-address property (rh#1372799)
  - ibft: grant required CAP_SYS_ADMIN capabilities (rh#1371201)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-7
changelog:
  - wifi: another fix activation failure due to error changing MAC address (rh#1371623, rh#1374023)
  - dhcp: fix race condition that may cause lost lease events and DHCP timeouts (rh#1373276)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-8
changelog:
  - libnm: fix crash in nm_vpn_plugin_info_list_get_service_types() (rh#1374526)
  - device: wait for MAC address change before setting up interface (rh#1371623, rh#1374023)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-9
changelog:
  - clients: handle secret requests only for current connection (rh#1351272)
  - device: fix crash reapplying connection to slave devices (rh#1376784)
  - cli: fix autocompletion after ifname (rh#1375933)


author: Dan Williams <dcbw@redhat.com> 0.2-4
changelog:
  - Update from CVS
  - Improvements:
  	o Better link checking on wireless cards
  	o Panel applet now a Notification Area icon
  	o Static IP configuration support


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041029
changelog:
  - #rh134893# NetworkManagerInfo and the panel-icon life-cycle
  - #rh134895# Status icon should hide when in Wired-only mode
  - #rh134896# Icon code needs rewrite
  - #rh134897# "Other Networks..." dialog needs implementing
  - #rh135055# Menu highlights incorrectly in NM
  - #rh135648# segfault with cipsec0
  - #rh135722# NetworkManager will not allow zaurus to sync via usb0
  - #rh135999# NetworkManager-0.3.1 will not connect to 128 wep
  - #rh136866# applet needs tooltips
  - #rh137047# lots of applets, yay!
  - #rh137341# Network Manager dies after disconnecting from wired network second time
  - Better checking for wireless devices
  - Fix some memleaks
  - Fix issues with dhclient declining an offered address
  - Fix an activation thread deadlock
  - More accurately detect "Other wireless networks" that are encrypted
  - Don't bring devices down as much, won't hotplug-spam as much anymore
  	about firmware
  - Add a "network not found" dialog when the user chooses a network that could
  	not be connected to


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041115
changelog:
  - Update to CVS
  - Much better link detection, works with Open System authentication
  - Blacklist wireless cards rather than whitelisting them


author: <dcbw@redhat.com> - 0.3.2-3.cvs20041117
changelog:
  - Update to CVS
  - Fixes to link detection
  - Better detection of non-ESSID-broadcasting access points
  - Don't dialog-spam the user if a connection fails


author: <dcbw@redhat.com> - 0.3.2-4.3.cvs20041208
changelog:
  - Update to CVS
  - Updates to link detection, DHCP code
  - Remove NMLaunchHelper so we start up faster and don't
  	block for a connection.  This means services that depend
  	on the network may fail if they start right after NM
  - Make sure DHCP renew/rebinding works


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050112
changelog:
  - Update to latest CVS
  - Fixes to DHCP code
  - Link-Local (ZeroConf/Rendezvous) support
  - Use bind in "caching-nameserver" mode to work around stupidity
  	in glibc's resolver library not recognizing resolv.conf changes
  - #rh144818# Clean up the specfile (Patch from Matthias Saou)
  - Ad-Hoc mode support with Link-Local addressing only (for now)
  - Fixes for device activation race conditions
  - Wireless scanning in separate thread


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050118
changelog:
  - Fix issue where NM wouldn't recognize that access points were
  	encrypted, and then would try to connect without encryption
  - Refine packaging to put client library in separate package
  - Remove bind+caching-nameserver dep for FC-3, use 'nscd -i hosts'
  	instead.  DNS queries may timeout now right after device
  	activation due to this change.


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050124
changelog:
  - Update to latest CVS
  - Make sure we start as late as possible so that we ensure dbus & HAL
  	are already around
  - Fix race in initial device activation


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050202
changelog:
  - Display wireless network name in applet tooltip
  - Hopefully fix double-default-route problem
  - Write out valid resolv.conf when we exit
  - Make multi-domain search options work
  - Rework signal strength code to be WEXT conformant, if strength is
  	still wierd then its 95% surely a driver problem
  - Fix annoying instances of suddenly dropping and reactivating a
  	wireless device (Cisco cards were worst offenders here)
  - Fix some instances of NetworkManager not remembering your WEP key
  - Fix some races between NetworkManager and NetworkManagerInfo where
  	NetworkManager wouldn't recognize changes in the allowed list
  - Don't shove Ad-Hoc Access Point MAC addresses into GConf


author: Dan Williams <dcbw@redhat.com> 0.3.3-2.cvs20050214
changelog:
  - Never automatically choose a device that doesn't support carrier detection
  - Add right-click menu to applet, can now "Pause/Resume" scanning through it
  - Fix DHCP Renew/Rebind timeouts
  - Fix frequency cycling problem on some cards, even when scanning was off
  - Play better with IPv6
  - Don't send kernel version in DHCP packets, and ensure DHCP packets are at
  	least 300 bytes in length to work around broken router
  - New DHCP options D-BUS API by Dan Reed
  - Handle multiple domain search options in DHCP responses


author: Dan Williams <dcbw@redhat.com> - 0.4-9.cvs20050404
changelog:
  - Fix some memory leaks (Tom Parker)
  - Join to threads rather than spinning for their completion (Tom Parker)
  - Fix misuse of a g_assert() (Colin Walters)
  - Fix return checking of an ioctl() (Bill Moss)
  - Better detection and matching of hidden access points (Bill Moss)
  - Don't use varargs, and therefore don't crash on PPC (Peter Jones)


author: Dan Williams <dcbw@redhat.com> - 0.4-12.cvs20050404
changelog:
  - Enable OK button correctly in Passphrase and Other Networks dialogs when
  	using ASCII or Hex WEP keys


author: Dan Williams <dcbw@redhat.com> - 0.4-31.cvs20050616
changelog:
  - Update to latest CVS
  	o Clean up wording in Wireless Network Discovery menu
  	o Robert Love's applet beautify patch


author: Dan Williams <dcbw@redhat.com> - 0.4-32.cvs20050617
changelog:
  - Update to latest CVS
  	o VPN connection import/export capability
  	o Fix up some menu item names
  - Move nm-vpn-properties.glade to the gnome subpackage


author: David Zeuthen <davidz@redhat.com> - 0.4-33.cvs20050629
changelog:
  - Update to latest CVS to get latest VPN interface settings to satisfy
    BuildReq for NetworkManager-vpnc in Fedora Extras Development
  - Latest CVS also contains various bug- and UI-fixes


author: Dan Williams <dcbw@redhat.com> - 0.4-35.cvs20050811
changelog:
  - Update to latest CVS
  	o Use DHCP server address as gateway address if the DHCP server doesn't give
  		us a gateway address #rh165698#
  	o Fixes to the applet (Robert Love)
  	o Better caching of information in the applet (Bill Moss)
  	o Generate automatic suggested Ad-Hoc network name from machine's hostname
  		(Robert Love)
  	o Update all network information on successfull connect, not just 
  		authentication method


author: Dan Williams <dcbw@redhat.com> - 0.4.1-4.cvs20051009
changelog:
  - Update to latest CVS
  	o Integrate connection progress with applet icon (Chris Aillon)
  	o More information in "Connection Information" dialog (Robert Love)
  	o Shorten time taken to sleep
  	o Make applet icon wireless strength levels a bit more realistic
  	o Talk to named using DBUS rather than spawning our own
  		- You need to add "-D" to the OPTIONS line in /etc/sysconfig/named
  		- You need to set named to start as a service on startup


author: Dan Williams <dcbw@redaht.com> - 0.4.1-5.cvs20051010
changelog:
  - Fix automatic wireless connections
  - Remove usage of NMLoadModules callout, no longer needed
  - Try to fix deadlock when menu is down and keyring dialog pops up


author: Christopher Aillon <caillon@redhat.com> - 0.5.1-3
changelog:
  - Split out the -glib subpackage to have a -glib-devel package as well
  - Add epoch to version requirements for bind and wireless-tools
  - Update URL of project


author: Dan Williams <dcbw@redhat.com> 0.5.1-8.cvs20060131
changelog:
  - Switch to autostarting the applet instead of having it be session-managed
  - Work better with non-broadcasting access points
  - Add more manufacturer default SSIDs to the blacklist


author: Dan Williams <dcbw@redhat.com> 0.5.1-10.cvs20060205
changelog:
  - Workarounds for madwifi/Atheros cards
  - Do better with non-SSID-broadcasting access points
  - Fix hangs when access points change settings


author: Dan Williams <dcbw@redhat.com> 0.5.1-13.cvs20060221
changelog:
  - Add BuildRequires: libnl-devel (#rh179438#)
  - Fix libnm_glib to not clobber an application's existing dbus connection
  	(#rh177546#, gnome.org #326572)
  - libnotify support
  - AP compatibility fixes


author: Dan Williams <dcbw@redhat.com> 0.5.1-18.cvs20060301
changelog:
  - Fix VPN-related crash
  - Fix issue where NM would refuse to activate a VPN connection once it had timed out
  - Log wpa_supplicant output for better debugging


author: Dan Williams <dcbw@redhat.com> - 0.6.2-1
changelog:
  - Update to 0.6.2:
  	* Fix various WPA-related bugs
  	* Clean up leaks
  	* Increased DHCP timeout to account for slow DHCP servers, or STP-enabled
  		switches
  	* Allow applet to reconnect on dbus restarts
  	* Add "Dynamic WEP" support
  	* Allow hiding of password/key entry text
  	* More responsive connection switching


author: Jeremy Katz <katzj@redhat.com> - 0.6.2-2.fc6
changelog:
  - use the hal device type instead of poking via ioctl so that wireless 
    devices are properly detected even if the kill switch has been used


author: Bill Nottingham <notting@redhat.com> - 0.6.2-3.fc6
changelog:
  - use the same 0.6.2 tarball as FC5, so we have the same VPN interface
    (did he fire ten args, or only nine?)


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060521
changelog:
  - Update to latest CVS
  - Drop special-case-madwifi.patch, since WEXT code is in madwifi-ng trunk now


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060529
changelog:
  - Update to latest CVS
  	o Gnome.org #333420: dialog do not have window icons
  	o Gnome.org #336913: HIG tweaks for vpn properties pages
  	o Gnome.org #336846: HIG tweaks for nm-vpn-properties
  	o Gnome.org #336847: some bugs in nm-vpn-properties args parsing
  	o Gnome.org #341306: nm-vpn-properties crashes on startup
  	o Gnome.org #341263: Version 0.6.2-0ubuntu5 crashes on nm_device_802_11_wireless_get_type
  	o Gnome.org #341297: displays repeated keyring dialogs on resume from suspend
  	o Gnome.org #342400: Building libnm-util --without-gcrypt results in linker error
  	o Gnome.org #342398: Eleminate Gnome dependency for NetworkManager
  	o Gnome.org #336532: declaration of 'link' shadows a global declaration
  - Specfile fixes (#rh187489#)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-2
changelog:
  - Revert FC6 to latest stable NM
  - Update to stable snapshot
  - Remove bind/caching-nameserver hard requirement


author: Dan Williams <dcbw@redhat.com> - 1:0.6.5-0.cvs20061025
changelog:
  - Update to a stable branch snapshot
      - Gnome applet timeout/redraw suppression when idle
      - Backport of LEAP patch from HEAD (from Thiago Bauermann)
      - Backport of asynchronous scanning patch from HEAD
      - Make renaming of VPN connections work (from Tambet Ingo)
      - Dial down wpa_supplicant debug spew
      - Cleanup of key/passphrase request scenarios (from Valentine Sinitsyn)
      - Shut down VPN connections on logout (from Robert Love)
      - Fix WPA passphrase hashing on PPC


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Own the /etc/NetworkManager/dispatcher.d directory
  - Require pkgconfig for the -devel packages
  - Fix compilation with dbus 1.0


author: Dan Williams <dcbw@redhat.com> - 1:0.6.5-0.7.svn2547
changelog:
  - Update from trunk
  	* Updated translations
  	* Cleaned-up VPN properties dialogs
  	* Fix 64-bit kernel leakage issues in WEXT
  	* Don't capture and redirect wpa_supplicant log output


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-4
changelog:
  - Fix ethernet link detection (gnome #354565, rh #194124)
  - Fix perpetual credentials request with private key passwords in the applet
  - Sleep a bit before activating wireless cards to work around driver bugs


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-5
changelog:
  - Fix applet crash on 64-bit platforms when choosing
      "Connect to other wireless network..." (gnome.org #435036)
  - Add debug output for ethernet device link changes


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-6
changelog:
  - Update to stable branch snapshot:
      - More fixes for ethernet link detection (gnome #354565, rh #194124)
      - Support for HAL-detected rfkill switches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2880
changelog:
  - New snapshot
  	- Fix applet icon sizing on start (mclasen)
  	- Fix nm-tool installation (mclasen)
  	- Fix 'state' method call return (#303271)
  	- Fix 40-bit WEP keys (again)
  	- Fix loop when secrets were wrong/invalid
  	- Fix applet crash when clicking Cancel in the password dialog
  	- Ensure NM doesn't get stuck waiting for the supplicant to re-appear
  		if it crashes or goes away
  	- Make VPN properties applet work again
  	- Increase timeout for network password entry


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2886
changelog:
  - New snapshot
  	- Make wired device carrier state work in the applet
  	- Fix handling of errors with unencrypted APs
  	- Fix "frozen" applet icon by reporting NM state better
  	- Fix output of AP frequency in nm-tool


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2914
changelog:
  - New snapshot
  	- Add WPA passphrase support to password dialog
  	- Applet now reflects actual VPN behavior of one active connection
  	- Applet now notices VPN active connections on startup
  	- Fix connections with some WPA and WEP keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2961
changelog:
  - New snapshot
  	- Add timestamps to networks to connect to last used wireless network
  	- Turn autoconnect on in the applet
  	- Hidden SSID support
  	- Invalidate failed or cancelled connections again
  	- Fix issues with reactivation of the same device
  	- Handle connection updates in the applet (ex. find new VPN connections)
  	- Fix vertical sizing of menu items
  	- Fix AP list on wireless devices other than the first device in the applet
  	- Fix matching of current AP with the right menu item


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2962
changelog:
  - Fix merging of non-SSID-broadcasting APs into a device's scan list
  - Speed up opening of the applet menu


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2970
changelog:
  - Fix segfault with deferred connections
  - Fix default username with vpnc VPN plugin
  - Hidden SSID fixes


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2994
changelog:
  - Re-enable "Connect to other network"
  - Switch to new GUI bits for wireless security config and password entry


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3008
changelog:
  - Make WPA-EAP and Dynamic WEP options connect successfully
  - Static IPs are now handled correctly in NM itself


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3014
changelog:
  - Suppress excessive GConf updates which sometimes caused secrets to be cleared
      at the wrong times, causing connections to fail
  - Various EAP and LEAP related fixes


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3016
changelog:
  - Fix getting current access point
  - Fix WPA Enterprise connections
  - Wireless dialog now defaults to sensible choices based on the connection
  - Tell nscd to restart if needed, don't silently kill it


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.4.svn3020
changelog:
  - Handle PEM certificates
  - Hide WPA-PSK Type combo since it's as yet unused
  - Fix applet crash when AP security options changed and old secrets are still
      in the keyring
  - Fix applet crash connecting to unencrypted APs via the other network dialog


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.4.svn3030
changelog:
  - Bring up ethernet devices by default if no connections are defined (rh #339201)
  - Fix crash when switching networks or bringing up secrets dialog (rh #353091)
  - Fix crash when editing VPN connection properties a second time
  - Fix crash when cancelling the secrets dialog if another connection was
      activated in the mean time
  - Fix disembodied notification bubbles (rh #333391)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.6.2.svn3080
changelog:
  - Clarify naming of WPA & WPA2 Personal encryption options (rh #374861, rh #373831)
  - Don't require a CA certificate for applicable EAP methods (rh #359001)
  - Fix certificate and private key handling for EAP-TTLS and EAP-TLS (rh #323371)
  - Fix applet crash with USB devices (rh #337191)
  - Support upgrades from NM 0.6.x GConf settings


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.6.3.svn3096
changelog:
  - Fix connections when picking a WPA Enterprise AP from the menu
  - Fix issue where applet would provide multiple same connections to NM


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3133
changelog:
  - Fix applet crash when choosing to ignore the CA certificate (rh #359001)
  - Fix applet crash when editing VPN properties and VPN connection failures (rh #409351)
  - Add file filter name in certificate file picker dialog (rh #410201)
  - No longer start named when starting NM (rh #381571)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3138
changelog:
  - Fix applet connection comparison which failed to send connection updated
      signals to NM in some cases
  - Make VPN connection applet more robust against plugin failures


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3235
changelog:
  - Fix crash when activating a mobile broadband connection
  - Better handling of non-SSID-broadcasting APs on kernels that support it
      (gnome.org #464215) (rh #373841)
  - Honor DHCP-server provided MTU if present (gnome.org #332953)
  - Use previous DNS settings if the VPN concentrator doesn't provide any
      (gnome.org #346833)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3261
changelog:
  - Add CDMA mobile broadband support (if supported by HAL)
  - Rework applet connection and icon handling
  - Enable connection editor (only for deleting connections)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3302
changelog:
  - Enable system settings service
  - Allow explicit disconnection of mobile broadband devices
  - Fix applet memory leaks (rh #430178)
  - Applet Connection Information dialog tweaks (gnome.org #505899)
  - Filter input characters to passphrase/key entry (gnome.org #332951)
  - Fix applet focus stealing prevention behavior


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3370
changelog:
  - Fix crash of nm-system-settings on malformed ifcfg files (rh #434919)
  - Require gnome-icon-theme to pick up lock.png (rh #435344)
  - Fix applet segfault after connection removal via connection editor or GConf


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3417
changelog:
  - Honor DHCP rebinds
  - Multiple active device support
  - Better error handling of mobile broadband connection failures
  - Allow use of interface-specific dhclient config files
  - Recognize system settings which have no TYPE item


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3472
changelog:
  - Fix crashes on suspend/resume and exit (rh #437426)
  - Ensure there's always an option to chose the wired device
  - Never set default route via an IPv4 link-local addressed device (rh #437338)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3521
changelog:
  - Show VPN failures
  - Support Static WEP key indexes
  - Fix parsing of WEP keys from ifcfg files
  - Pre-fill wireless security UI bits in connection editor and applet


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3547
changelog:
  - Fix WEP key index handling in UI
  - Fix handling of NM_CONTROLLED in ifcfg files
  - Show device managed state in applet menu
  - Show wireless enabled state in applet menu
  - Better handling of default DHCP connections for wired devices
  - Fix loading of connection editor on KDE (rh #435344)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3566
changelog:
  - Turn on Add/Edit in the connection editor
  - Don't flush or change IPv6 addresses or routes
  - Enhance nm-online tool
  - Some serial communication fixes for mobile broadband


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3578
changelog:
  - Add dbus-glib-devel BuildRequires for NetworkManager-glib-devel (rh #442978)
  - Add PPP settings page to connection editor
  - Fix a few crashes with PPPoE
  - Fix active connection state changes that confused clients


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3590
changelog:
  - Don't select devices without a default gateway as the default route (rh #437338)
  - Fill in broadcast address if not specified (rh #443474)
  - Respect manual VPN IPv4 configuration options
  - Show Connection Information for the device with the default route only


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3614
changelog:
  - Don't ask for wireless keys when the driver sends disconnect events during
  	association; wait until the entire assocation times out
  - Replace dispatcher daemon with D-Bus activated callout
  - Fix parsing of DNS2 and DNS3 ifcfg file items
  - Execute dispatcher scripts in alphabetical order
  - Be active at runlevel 2
  - Hook up MAC address widgets for wired & wireless; and BSSID widget for wireless
  - Pre-populate anonymous identity and phase2 widgets correctly
  - Clear out unused connection keys from GConf


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3619
changelog:
  - Fix device initialization race that caused ethernet devices to get stuck on
      startup
  - Fix PPPoE connections not showing up in the applet
  - Fix disabled OK button in connection editor some wireless and IP4 settings
  - Don't exit if HAL isn't up yet; wait for it
  - Fix a suspend/resume crash


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3622
changelog:
  - Guess WEP key type in applet when asking for new keys
  - Correct OK button sensitivity in applet when asking for new WEP keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3665
changelog:
  - Fix issues with the Fedora plugin not noticing changes made by
      system-config-network (rh #444502)
  - Allow autoconnection of GSM and CDMA connections
  - Multiple IP address support for user connections
  - Fixes for Mobile Broadband cards that return line speed on connect
  - Implement PIN entry for GSM mobile broadband connections
  - Fix crash when editing unencrypted WiFi connections in the connection editor


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3667
changelog:
  - Restore behavior of marking wifi devices as "down" when disabling wireless
  - Fix a crash on resume when a VPN was active when going to sleep


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3675
changelog:
  - Read global gateway from /etc/sysconfig/network if missing (rh #446527)
  - nm-system-settings now terminates when dbus goes away (rh #444976)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.4.svn3675
changelog:
  - Move NM later in the shutdown process (rh #449070)
  - Move libnm-util into a subpackage to allow NM to be removed more easily (rh #351101)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.10.svn3801
changelog:
  - Move VPN configuration into connection editor
  - Fix mobile broadband username/password issues
  - Fix issues with broken rfkill setups (rh #448889)
  - Honor APN setting for GSM mobile broadband configurations
  - Fix adding CDMA connections in the connection editor


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3830
changelog:
  - Expose server-returned DHCP options via D-Bus
  - Use avahi-autoipd rather than old built-in IPv4LL implementation
  - Send hostname to DHCP server if provided (DHCP_HOSTNAME ifcfg option)
  - Support sending DHCP Client Identifier to DHCP server
  - Allow forcing 802.1x PEAP Label to '0'
  - Make connection sharing more robust
  - Show status for shared and Ad-Hoc connections if no other connection is active


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3846
changelog:
  - Convert stored IPv4 static IP addresses to new prefix-based scheme automatically
  - Fix pppd connections to some 3G providers (rh #455348)
  - Make PPPoE "Show Password" option work
  - Hide IPv4 config options that don't make sense in certain configurations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3927
changelog:
  - Expose DHCP-returned options over D-Bus and to dispatcher scripts
  - Add support for customized static routes
  - Handle multiple concurrent 3G or PPPoE connections
  - Fix GSM/CDMA username and password issues
  - Better handling of unmanaged devices from ifcfg files
  - Fix timeout handling of errors during 3G connections
  - Fix some routing issues (rh #456685)
  - Fix applet crashes after removing a device (rh #457380)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4022
changelog:
  - Fix parsing of DOMAIN in ifcfg files (rh #459370)
  - Fix reconnection to mobile broadband networks after an auth failure
  - Fix recognition of timeouts of PPP during mobile broadband connection
  - More compatible connection sharing (rh #458625)
  - Fix DHCP in minimal environments without glibc locale information installed
  - Add support for Option mobile broadband devices (like iCON 225 and iCON 7.2)
  - Add IP4 config information to dispatcher script environment
  - Merge WEP ASCII and Hex key types for cleaner UI
  - Pre-fill PPPoE password when authentication fails
  - Fixed some changes not getting saved in the connection editor
  - Accept both prefix and netmask in the conection editor's IPv4 page


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4174
changelog:
  - Ensure that mobile broadband cards are powered up before trying to use them
  - Hostname changing support (rh #441453)
  - Fix mobile broadband secret requests to happen less often
  - Better handling of default devices and default routes
  - Better information in tooltips and notifications
  - Various UI cleanups; hide widgets that aren't used (rh #465397, rh #465395)
  - Accept different separators for DNS servers and searches
  - Make applet's icon accurately reflect signal strength of the current AP


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4201
changelog:
  - Fix issues with hostname during anaconda installation (rh #461933)
  - Fix Ad-Hoc WPA connections (rh #461197)
  - Don't require gnome-panel or gnome-panel-devel (rh #427834)
  - Fix determination of WPA encryption capabilities on some cards
  - Fix conflicts with PPTP and vpnc plugins
  - Allow .cer file extensions when choosing certificates


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4229
changelog:
  - More reliable mobile broadband card initialization
  - Handle mobile broadband PINs correctly when PPP passwords are also used
  - Additional PolicyKit integration for editing system connections
  - Close the applet menu if a keyring password is needed (rh #353451)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4293
changelog:
  - Update to NetworkManager 0.7.0 RC2
  - Handle gateways on a different subnet from the interface
  - Clear VPN secrets on connection failure to ensure they are requested again (rh #429287)
  - Add support for PKCS#12 private keys (rh #462705)
  - Fix mangling of VPN's default route on DHCP renew
  - Fix type detection of qemu/kvm network devices (rh #466340)
  - Clear up netmask/prefix confusion in the connection editor
  - Make the secrets dialog go away when it's not needed
  - Fix inability to add system connections (rh #471308)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4295
changelog:
  - Fix issues reading ifcfg files
  - Previously fixed:
  - Doesn't send DHCP hostname (rh #469336)
  - 'Auto eth0' forgets settings (rh #468612)
  - DHCP renewal sometimes breaks VPN (rh #471852)
  - Connection editor menu item in the wrong place (rh #471495)
  - Cannot make system-wide connections (rh #471308)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4296
changelog:
  - Fix PIN/PUK issues with high-speed Option HSDPA mobile broadband cards
  - Fix desensitized OK button when asking for wireless keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-1.git20090102
changelog:
  - Update to 0.7.1 pre-release
  - Allow connections to be ignored when determining the default route (rh #476089)
  - Own /usr/share/gnome-vpn-properties (rh #477155)
  - Fix log flooding due to netlink errors (rh #459205)
  - Pass connection UUID to dispatcher scripts via the environment
  - Fix possible crash after deactivating a VPN connection
  - Fix issues with editing wired 802.1x connections
  - Fix issues when using PKCS#12 certificates with 802.1x connections


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-2.git20090207
changelog:
  - applet: fix blank VPN connection message bubbles
  - applet: better handling of VPN routing on update
  - applet: silence pointless warning (rh #484136)
  - applet: desensitize devices in the menu until they are ready (rh #483879)
  - nm: Expose WINS servers in the IP4Config over D-Bus
  - nm: Better handling of GSM Mobile Broadband modem initialization
  - nm: Handle DHCP Classless Static Routes (RFC 3442)
  - nm: Fix Mobile Broadband and PPPoE to always use 'noauth'
  - nm: Better compatibility with older dual-SSID AP configurations (rh #445369)
  - nm: Mark nm-system-settings.conf as config (rh #465633)
  - nm-tool: Show VPN connection information
  - ifcfg-rh: Silence message about ignoring loopback config (rh #484060)
  - ifcfg-rh: Fix issue with wrong gateway for system connections (rh #476089)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-1
changelog:
  - Update to 0.7.1rc1
  - nm: support for Huawei E160G mobile broadband devices (rh #466177)
  - nm: fix misleading routing error message (rh #477916)
  - nm: fix issues with 32-character SSIDs (rh #485312)
  - nm: allow root to activate user connections
  - nm: automatic modem detection with udev-extras
  - nm: massive manpage rewrite
  - applet: fix crash when showing the CA certificate ignore dialog a second time
  - applet: clear keyring items when deleting a connection
  - applet: fix max signal strength calculation in menu (rh #475123)
  - applet: fix VPN export (rh #480496)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-4.git20090219
changelog:
  - Fix PEAP version selection in the applet (rh #468844)
  - Match hostname behavior to 'network' service when hostname is localhost (rh #441453)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-5.git20090220
changelog:
  - Use IFF_LOWER_UP for carrier detect instead of IFF_RUNNING
  - Add small delay before probing cdc-acm driven mobile broadband devices


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.98-1.git20090225
changelog:
  - Fix getting secrets for system connections (rh #486696)
  - More compatible modem autodetection
  - Better handle minimal ifcfg files


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-1
changelog:
  - nm: make default wired "Auto ethX" connection modifiable if an enabled system settings
      plugin supports modifying connections (rh #485555)
  - nm: manpage fixes (rh #447233)
  - nm: CVE-2009-0365 - GetSecrets disclosure
  - applet: CVE-2009-0578 - local users can modify the connection settings
  - applet: fix inability to choose WPA Ad-Hoc networks from the menu
  - ifcfg-rh: add read-only support for WPA-PSK connections


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-2
changelog:
  - Fix conflict with NetworkManager-openconnect (rh #489271)
  - Fix possible crash when resynchronizing devices if HAL restarts


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-3.5
changelog:
  - nm: work around unhandled device removals due to missing HAL events (rh #484530)
  - nm: improve handling of multiple modem ports
  - nm: support for Sony Ericsson F3507g / MD300 and Dell 5530
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-4
changelog:
  - nm: fix communication with Option GT Max 3.6 mobile broadband cards
  - nm: fix communication with Huawei mobile broadband cards (rh #487663)
  - nm: don't look up hostname when HOSTNAME=localhost unless asked (rh #490184)
  - nm: fix crash during IP4 configuration (rh #491620)
  - nm: ignore ONBOOT=no for minimal ifcfg files (f9 & f10 only) (rh #489398)
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-5
changelog:
  - nm: fix crashes with out-of-tree modules that provide no driver link (rh #492246)
  - nm: fix USB modem probing on recent udev versions


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.100-1
changelog:
  - Update to 0.7.1-rc4
  - nm: use PolicyKit for system connection secrets retrieval
  - nm: correctly interpret errors returned from chmod(2) when saving keyfile system connections
  - editor: use PolicyKit to get system connection secrets


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.100-2.git20090408
changelog:
  - nm: fix recognition of Option GT Fusion and Option GT HSDPA (nozomi) devices (rh #494069)
  - nm: fix handling of spaces in DHCP 'domain-search' option
  - nm: fix detection of newer Option 'hso' devices
  - nm: ignore low MTUs returned by broken DHCP servers


author: Dan Williams <dcbw@redhat.com> - 1:0.7.1-1
changelog:
  - nm: update to 0.7.1
  - nm: fix startup race with HAL causing unmanaged devices to sometimes be managed (rh #494527)


author: Adam Jackson <ajax@redhat.com> 1:0.7.1-4.git20090414
changelog:
  - nm-save-the-leases.patch: Use per-connection lease files, and don't delete
    them on interface deactivate.


author: Dan Williams <dcbw@redhat.com> - 0.7.1-5.git20090617
changelog:
  - nm: fix AT&T Quicksilver modem connections (rh #502002)
  - nm: fix support for s390 bus types (rh #496820)
  - nm: fix detection of some CMOtech modems
  - nm: handle unsolicited wifi scans better
  - nm: resolv.conf fixes when using DHCP and overriding search domains
  - nm: handle WEP and WPA passphrases (rh #441070)
  - nm: fix removal of old APs when none are scanned
  - nm: fix Huawei EC121 and EC168C detection and handling (rh #496426)
  - applet: save WEP and WPA passphrases instead of hashed keys (rh #441070)
  - applet: fix broken notification bubble actions
  - applet: default to WEP encryption for Ad-Hoc network creation
  - applet: fix crash when connection editor dialogs are canceled
  - applet: add a mobile broadband provider wizard


author: Dan Williams <dcbw@redhat.com> - 0.7.1-7.git20090708
changelog:
  - nm: fixes for ZTE/Onda modem detection
  - nm: prevent re-opening serial port when the SIM has a PIN
  - applet: updated translations
  - editor: show list column headers


author: Dan Williams <dcbw@redhat.com> - 0.7.995-0.git20090728
changelog:
  - Update to upstream 'master' branch
  - Use modem-manager for better 3G modem support
  - Integrated system settings with NetworkManager itself
  - Use udev instead of HAL


author: Dan Williams <dcbw@redhat.com> - 0.7.995-3.git20090813
changelog:
  - nm: add iSCSI support
  - nm: add connection assume/takeover support for ethernet (rh #517333)
  - nm: IPv6 fixes
  - nm: re-add OLPC XO-1 mesh device support (removed with 0.7.0)
  - applet: better WiFi dialog focus handling


author: Dan Williams <dcbw@redhat.com> - 0.7.996-1.git20090826
changelog:
  - nm: IPv6 zeroconf support and fixes
  - nm: port to polkit (rh #499965)
  - nm: fixes for ehea devices (rh #511304) (rh #516591)
  - nm: work around PPP bug causing bogus nameservers for mobile broadband connections
  - editor: fix segfault with "Unlisted" plans in the mobile broadband assistant


author: Dan Williams <dcbw@redhat.com> - 0.7.996-2.git20090921
changelog:
  - nm: allow disconnection of all device types
  - nm: ensure that wired connections are torn down when their hardware goes away
  - nm: fix crash when canceling a VPN's request for secrets
  - editor: fix issues changing connections between system and user scopes
  - editor: ensure changes are thrown away when editing is canceled
  - applet: ensure connection changes are noticed by NetworkManager
  - applet: fix crash when creating new connections
  - applet: actually use wired 802.1x secrets after they are requested


author: Dan Williams <dcbw@redhat.com> - 0.7.996-3.git20090928
changelog:
  - nm: fix connection takeover when carrier is not on
  - nm: handle certificate paths (CA chain PEM files are now fully usable)
  - nm: defer action for 4 seconds when wired carrier drops
  - ifcfg-rh: fix writing WPA passphrases with odd characters
  - editor: fix editing of IPv4 settings with new connections (rh #525819)
  - editor: fix random crashes when editing due to bad widget refcounting
  - applet: debut reworked menu layout (not final yet...)


author: Dan Williams <dcbw@redhat.com> - 0.7.996-4.git20091002
changelog:
  - install: fix -gnome package pre script failures (rh #526519)
  - nm: fix failures validating private keys when using the NSS crypto backend
  - applet: fix crashes when clicking on menu but not associated (rh #526535)
  - editor: fix crash editing wired 802.1x settings
  - editor: fix secrets retrieval when editing connections


author: Dan Williams <dcbw@redhat.com> - 0.7.996-5.git20091021
changelog:
  - install: better fix for (rh #526519)
  - install: don't build Bluetooth bits on s390 (rh #529854)
  - nm: wired 802.1x connection activation fixes
  - nm: fix crash after modifying default wired connections like "Auto eth0"
  - nm: ensure VPN secrets are requested again after connection failure
  - nm: reset 'accept_ra' to previous value after deactivating IPv6 connections
  - nm: ensure random netlink events don't interfere with IPv6 connection activation
  - ifcfg-rh: fix writing out LEAP connections
  - ifcfg-rh: recognize 'static' as a valid BOOTPROTO (rh #528068)
  - applet: fix "could not find required resources" error (rh #529766)


author: Dan Williams <dcbw@redhat.com> - 0.7.996-7.git20091113
changelog:
  - nm: better pidfile handing (rh #517362)
  - nm: save WiFi and Networking enabled/disabled states across reboot
  - nm: fix crash with missing VPN secrets (rh #532084)
  - applet: fix system connection usage from the "Connect to hidden..." dialog
  - applet: show Bluetooth connections when no other devices are available (rh #532049)
  - applet: don't die when autoconfigured connections can't be made (rh #532680)
  - applet: allow system administrators to disable the "Create new wireless network..." menu item
  - applet: fix missing username connecting to VPNs the second time
  - applet: really fix animation stuttering
  - editor: fix IP config widget tooltips
  - editor: allow unlisted countries in the mobile broadband wizard (rh #530981)
  - ifcfg-rh: ignore .rpmnew files (rh #509621)


author: Dan Williams <dcbw@redhat.com> - 0.7.997-1
changelog:
  - core: remove haldaemon from initscript dependencies (rh #542078)
  - core: handle PEM certificates without an ending newline (rh #507315)
  - core: fix rfkill reporting for ipw2x00 devices
  - core: increase PPPoE timeout to 30 seconds
  - core: fix re-activating system connections with secrets
  - core: fix crash when deleting automatically created wired connections
  - core: ensure that a VPN's DNS servers are used when sharing the VPN connection
  - ifcfg-rh: support routes files (rh #507307)
  - ifcfg-rh: warn when device will be managed due to missing HWADDR (rh #545003)
  - ifcfg-rh: interpret DEFROUTE as never-default (rh #528281)
  - ifcfg-rh: handle MODE=Auto correctly
  - rpm: fix rpmlint errors
  - applet: don't crash on various D-Bus and other errors (rh #545011) (rh #542617)
  - editor: fix various PolicyKit-related crashes (rh #462944)
  - applet+editor: notify user that private keys must be protected


author: Dan Williams <dcbw@redhat.com> - 0.7.997-2.git20091214
changelog:
  - core: fix recognition of standalone 802.1x private keys
  - applet: clean notification text to ensure it passes libnotify validation


author: Dan Williams <dcbw@redhat.com> - 0.7.998-1.git20100106
changelog:
  - build: fix for new pppd (rh #548520)
  - core: add WWAN enable/disable functionality
  - ifcfg-rh: IPv6 addressing and routes support (rh #523288)
  - ifcfg-rh: ensure connection is updated when route/key files change
  - applet: fix crash when active AP isn't found (rh #546901)
  - editor: fix crash when editing connections (rh #549579)


author: Dan Williams <dcbw@redhat.com> - 0.7.999-1.git20100120
changelog:
  - core: support for managed-mode DHCPv6 (rh #429710)
  - ifcfg-rh: gracefully handle missing PREFIX/NETMASK
  - cli: initial preview of command-line client
  - applet: add --help to explain what the applet is (rh #494641)


author: Dan Williams <dcbw@redhat.com> - 0.8-0.2.git20100129
changelog:
  - core: add Bluetooth Dial-Up Networking (DUN) support (rh #136663)
  - core: start DHCPv6 on receipt of RA 'otherconf'/'managed' bits
  - nmcli: allow enable/disable of WiFi and WWAN


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.8-0.3.git20100129
changelog:
  - core: validate the autostart .desktop file
  - build: fix nmcli for the stricter ld (fixes FTBFS)
  - build: fix nm-connection-editor for the stricter ld (fixes FTBFS)
  - applet: don't autostart in KDE on F13+ (#541353)


author: Dan Williams <dcbw@redhat.com> - 0.8-0.4.git20100211
changelog:
  - core: fix mobile broadband PIN handling (rh #543088) (rh #560742)
  - core: better handling of /etc/hosts if hostname was already added by the user
  - applet: crash less on D-Bus property errors (rh #557007)
  - applet: fix crash entering wired 802.1x connection details (rh #556763)


author: Dan Williams <dcbw@redhat.com> - 0.8-1.git20100219
changelog:
  - core: update to final 0.8 release
  - core: fix Bluetooth DUN connections when secrets are needed
  - ifcfg-rh: add helper for initscripts to determine ifcfg connection UUIDs
  - applet: fix Bluetooth connection secrets requests
  - applet: fix rare conflict with other gnome-bluetooth plugins


author: Dan Williams <dcbw@redhat.com> - 0.8-2.git20100317
changelog:
  - man: many manpage updates
  - core: determine classful prefix if non is given via DHCP
  - core: ensure /etc/hosts is always up-to-date and correct (rh #569914)
  - core: support GSM network and roaming preferences
  - applet: startup speed enhancements
  - applet: better support for OTP/token-based WiFi connections (rh #526383)
  - applet: show GSM and CDMA registration status and signal strength when available
  - applet: fix zombie GSM and CDMA devices in the menu
  - applet: remove 4-character GSM PIN/PUK code limit
  - applet: fix insensitive WiFi Create... button (rh #541163)
  - applet: allow unlocking of mobile devices immediately when plugged in


author: Dan Williams <dcbw@redhat.com> - 0.8-3.git20100323
changelog:
  - core: don't exit early on non-fatal state file errors
  - core: fix Bluetooth connection issues (rh #572340)
  - applet: fix some translations (rh #576056)
  - applet: better feedback when wrong PIN/PUK is entered
  - applet: many updated translations
  - applet: PIN2 unlock not required for normal modem functionality
  - applet: fix wireless secrets dialog display


author: Dan Williams <dcbw@redhat.com> - 0.8-5.git20100408
changelog:
  - core: more flexible logging
  - core: fix crash with OLPC mesh devices after suspend
  - applet: updated translations
  - applet: show mobile broadband signal strength and technology in the icon
  - applet: fix continuous password requests for 802.1x connections (rh #576925)
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8-7.git20100422
changelog:
  - core: fix crash during install (rh #581794)
  - wifi: fix crash when supplicant segfaults after resume (rh #538717)
  - ifcfg-rh: fix MTU handling for wired connections (rh #569319)
  - applet: fix display of disabled mobile broadband devices


author: Dan Williams <dcbw@redhat.com> - 0.8-8.git20100426
changelog:
  - core: fix issues with IPv6 router advertisement mishandling (rh #530670)
  - core: many fixes for IPv6 RA and DHCP handling (rh #538499)
  - core: ignore WWAN ethernet devices until usable (rh #585214)
  - ifcfg-rh: fix handling of WEP passphrases (rh #581718)
  - applet: fix crashes (rh #582938) (rh #582428)
  - applet: fix crash with multiple concurrent authorization requests (rh #585405)
  - editor: allow disabling IPv4 on a per-connection basis
  - editor: add support for IPv6 DHCP-only configurations


author: Dan Williams <dcbw@redhat.com> - 0.8-10.git20100502
changelog:
  - core: IPv6 autoconf, DHCP, link-local, and manual mode fixes
  - editor: fix saving IPv6 address in user connections


author: Dan Williams <dcbw@redhat.com> - 0.8-11.git20100503
changelog:
  - core: allow IP configuration as long as one method completes (rh #567978)
  - core: don't prematurely remove IPv6 RDNSS nameservers (rh #588192)
  - core: ensure router advertisements are only used when needed (rh #588613)
  - editor: add IPv6 gateway editing capability


author: Dan Williams <dcbw@redhat.com> - 0.8-12.git20100504
changelog:
  - core: treat missing IPv6 configuration as ignored (rh #588814)
  - core: don't flush IPv6 link-local routes (rh #587836)
  - cli: update output formatting


author: Dan Williams <dcbw@redhat.com> - 0.8-13.git20100509
changelog:
  - core: restore initial accept_ra value for IPv6 ignored connections (rh #588619)
  - bluetooth: fix bad timeout on PAN connections (rh #586961)
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.1.git20100510
changelog:
  - core: fix handling of IPv6 RA flags when router goes away (rh #588560)
  - bluetooth: fix crash configuring DUN connections from the wizard (rh #590666)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.2.git20100519
changelog:
  - core: use GIO in local mode only (rh #588745)
  - core: updated translations (rh #589230)
  - core: be more lenient in IPv6 RDNSS server expiry (rh #590202)
  - core: fix headers to be C++ compatible (rh #592783)
  - applet: updated translations (rh #589230)
  - applet: lock connections with well-known SSIDs to their specific AP


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.3
changelog:
  - core: fix nm-online crash (rh #593677)
  - core: fix failed suspend disables network (rh #589108)
  - core: print out missing firmware errors (rh #594578)
  - applet: fix device descriptions for some mobile broadband devices
  - keyfile: bluetooth fixes
  - applet: updated translations (rh #589230)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.4
changelog:
  - Update to 0.8.1 release candidate
  - core: fix WWAN hardware enable state tracking (rh #591622)
  - core: fix Red Hat initscript return value on double-start (rh #584321)
  - core: add multicast route entry for IPv4 link-local connections
  - core: fix connection sharing in cases where a dnsmasq config file exists
  - core: fix handling of Ad-Hoc wifi connections to indicate correct network
  - core: ensure VPN interface name is passed to dispatcher when VPN goes down
  - ifcfg-rh: fix handling of ASCII WEP keys
  - ifcfg-rh: fix double-quoting of some SSIDs (rh #606518)
  - applet: ensure deleted connections are actually forgotten (rh #618973)
  - applet: don't crash if the AP's BSSID isn't availabe (rh #603236)
  - editor: don't crash on PolicyKit events after windows are closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-1
changelog:
  - core: read nm-system-settings.conf before NetworkManager.conf (rh #606160)
  - core: fix editing system DSL connections when using keyfile plugin
  - core: work around inconsistent proprietary driver associated AP reporting
  - core: ensure empty VPN secrets are not used (rh #587784)
  - core: don't request WiFi scans when connection is locked to a specific BSSID
  - cli: show IPv6 settings and configuration
  - applet: updated translations
  - editor: fix a PolicyKit-related crash editing connections (rh #603566)
  - applet: fix saving the ignore-missing-CA-cert preference (rh #610084)
  - editor: fix listing connections on PPC64 (rh #608663)
  - editor: ensure editor windows are destroyed when closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-2
changelog:
  - core: quiet annoying warnings (rh #612991)
  - core: fix retrieval of various IP options in libnm-glib (rh #611141)
  - core: ship NetworkManager.conf instead of deprecated nm-system-settings.conf (rh #606160)
  - core: add short hostname to /etc/hosts too (rh #621910)
  - core: recheck autoactivation when new system connections appear
  - core: enable DHCPv6-only configurations (rh #612445)
  - core: don't fail connection immediately if DHCP lease expires (rh #616084) (rh #590874)
  - core: fix editing of PPPoE system connections
  - core: work around twitchy frequency reporting of various wifi drivers
  - core: don't tear down user connections on console changes (rh #614556)
  - cli: wait a bit for NM's permissions check to complete (rh #614866)
  - ifcfg-rh: ignore BRIDGE and VLAN configs and treat as unmanaged (rh #619863)
  - man: add manpage for nm-online
  - applet: fix crash saving ignore-missing-CA-cert preference (rh #619775)
  - applet: hide PIN/PUK by default in the mobile PIN/PUK dialog (rh #615085)
  - applet: ensure Enter closes the PIN/PUK dialog (rh #611831)
  - applet: fix another crash in ignore-CA-certificate handling (rh #557495)
  - editor: fix handling of Wired/s390 connections (rh #618620)
  - editor: fix crash when canceling editing in IP address pages (rh #610891)
  - editor: fix handling of s390-specific options
  - editor: really fix crash when changing system connections (rh #603566)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-6
changelog:
  - core: add dispatcher events on DHCPv4 and DHCPv6 lease changes
  - core: enforce access permissions when enabling/disabling WiFi and WWAN (rh #626337)
  - core: listen for UPower suspend/resume signals
  - applet: fix disabled Enable Networking and Enable Wireless menu items (rh #627365)
  - applet: updated translations
  - applet: obscure Mobile Broadband PIN in secondary unlock dialog


author: Dan Williams <dcbw@redhat.com> - 0.8.1-9
changelog:
  - core: fix suspend/resume regression (rh #638640)
  - core: fix issue causing some nmcli requests to be ignored


author: Dan Williams <dcbw@redhat.com> - 0.8.995-1.git20110308
changelog:
  - Update to NetworkManager 0.9-beta1
  - core: consolidate user and system settings services into NM itself
  - core: add WiMAX support
  - applet: support Fast User Switching


author: Dan Williams <dcbw@redhat.com> - 0.8.997-1
changelog:
  - Update to 0.8.997 (0.9-beta3)
  - ifcfg-rh: fix reading and writing of Dynamic WEP connections using LEAP as the eap method
  - wifi: fix signal strength for scanned access points with some drivers
  - applet: translation updates


author: Dan Williams <dcbw@redhat.com> - 0.8.997-4.git20110325
changelog:
  - core: fix possible libnm-glib crash when activating connections
  - applet: fix various naming and dialog title issues


author: Dan Williams <dcbw@redhat.com> - 0.8.997-5.git20110328
changelog:
  - core: fix connection deactivation on the compat interface
  - core: give default wired connections a more friendly name
  - core: fix base type of newly created wired connections
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.997-7.git20110330
changelog:
  - core: fix creation of default wired connections
  - core: fix requesting new secrets when old ones fail (ex changing WEP keys)
  - editor: ensure all pages are sensitive after retrieving secrets
  - editor: fix crash when scrolling through connection lists (rh #693446)
  - applet: fix crash after using the wifi or wired secrets dialogs (rh #693446)


author: Dan Williams <dcbw@redhat.com> - 0.8.997-8.git20110331
changelog:
  - core: resurrect default VPN username
  - core: don't stomp on crypto library users by de-initing the crypto library


author: Dan Williams <dcbw@redhat.com> - 0.8.998-1
changelog:
  - Update to 0.8.998 (0.9.0-rc1)
  - core: fix near-infinite requests for passwords (rh #692783)
  - core: fix handling of wired 802.1x connections
  - core: ignore Nokia PC-Suite ethernet devices we can't use yet
  - applet: migrate 0.8 OpenVPN passwords to 0.9 formats


author: Dan Williams <dcbw@redhat.com> - 0.8.998-3.git20110419
changelog:
  - core: systemd and startup enhancements for NFS mounts
  - core: more efficient startup process
  - core: fix handling of multiple logins when one is inactive
  - core: fix handling of S390/Hercules CTC network interfaces (rh #641986)
  - core: support Easytether interfaces for Android phones
  - core: fix handling of WWAN enable/disable states
  - ifcfg-rh: harmonize handling if IPADDR/PREFIX/NETMASK with initscripts (rh #658907)
  - applet: fix connection to WPA Enterprise networks (rh #694765)


author: Dan Williams <dcbw@redhat.com> - 0.8.998-4.git20110427
changelog:
  - core: enable optimized background roaming for WPA Enterprise configs
  - core: better handling of WiFi and WiMAX rfkill (rh #599002)
  - applet: fix crash detecting Bluetooth DUN devices a second time
  - ifcfg-rh: fix managed/unmanaged changes when removing connections (rh #698202)


author: Dan Williams <dcbw@redhat.com> - 0.8.999-1
changelog:
  - core: ensure DER format certificates are correctly recognized (rh #699591)
  - core: fix WINS server handling in client helper libraries
  - core: enhance dispatcher script environment to include IPv6 and VPN details
  - applet: migrate openswan connections to 0.9
  - editor: improve usability of editing IP addresses (rh #698199)


author: Dan Williams <dcbw@redhat.com> - 0.8.999-2.git20110509
changelog:
  - core: fix possible crash when connections are deleted
  - core: fix exported symbols in libnm-util and libnm-glib
  - core/applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.999-3.git20110526
changelog:
  - compat: fix activation/deactivation of VPN connections (rh #699786)
  - core: fix autodetection of previously-used hidden wifi networks
  - core: silence error if ConsoleKit database does not yet exist (rh #695617)
  - core: fix Ad-Hoc frequency handling (rh #699203)
  - core: fixes for migrated OpenConnect VPN plugin connections
  - core: various fixes for VPN connection secrets handling
  - core: send only short hostname to DHCP servers (rh #694758)
  - core: better handling of PKCS#8 private keys
  - core: fix dispatcher script interface name handling
  - editor: fix potential crash when connection is invalid (rh #704848)
  - editor: allow _ as a valid character for GSM APNs


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-1.git20110531
changelog:
  - editor: fix resizing of UI elements (rh #707269)
  - core: retry wired connections when cable is replugged
  - core: fix a few warnings and remove some left-over debugging code


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-3.git20110613
changelog:
  - keyfile: better handling of missing certificates/private keys
  - core: fix issues handling "always-ask" wired and WiFi 802.1x connections (rh #703785)
  - core: fix automatic handling of hidden WiFi networks (rh #707406)
  - editor: fix possible crash after reading network connections (rh #706906)
  - editor: make Enter/Return key close WiFi password dialogs (rh #708666)


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-4.git20110620
changelog:
  - core: don't cache "(none)" hostname at startup (rh #706094)
  - core: fix handling of VPN connections with only system-owned secrets
  - core: fix optional waiting for networking at startup behavior (rh #710502)
  - ifcfg-rh: fix possible crashes in error cases
  - ifcfg-rh: fix various IPv4 and IPv6 handling issues
  - applet: add notifications of GSM mobile broadband registration status
  - editor: move secrets when making connections available to all users or private
  - applet: don't show irrelevant options when asking for passwords


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-5.git20110702
changelog:
  - core: ensure users are authorized for shared wifi connections (CVE-2011-2176) (rh #715492)
  - core: retry failed connections after 5 minute timeout
  - core: immediately request new 802.1x 'always ask' passwords if they fail
  - core: add MAC blacklisting capability for WiFi and Wired connections
  - core: retry failed connections when new users log in (rh #706204)
  - applet: updated translations
  - core: drop compat interface now that KDE bits are updated to NM 0.9 API


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-6.git20110721
changelog:
  - core: updated Russian translation (rh #652904)
  - core: fix possible crash if secrets are missing
  - core: append interface name for IPv6 link-local DNS server addresses (rh #720001)
  - core: fix setting hostname from DHCP options (rh #719100)
  - libnm-util: GObject introspection annotation fixes
  - libnm-util: ensure IP address/route prefixes are valid
  - ifcfg-rh: read anonymous identity for 802.1x PEAP connections (rh #708436)
  - applet: show notifications on CDMA home/roaming changes
  - applet: fix various issues saving VPN secrets
  - editor: allow exporting VPN secrets
  - editor: default to IPv6 "automatic" addressing mode


author: Dan Williams <dcbw@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9 release
  - core: fix issue where scan results could be ignored
  - core: ensure agent secrets are preserved when updating connections
  - core: don't autoconnect disabled modems
  - core: fix race when checking modem enabled/disabled status after disabling
  - core: ensure newly installed VPN plugins can actually talk to NM
  - core: add support for 802.1X certificate subject matching
  - libnm-glib: various introspection fixes
  - applet/editor: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.9.1.90-1
changelog:
  - Update to 0.9.1.90 (0.9.2-beta1)
  - core: fix IPv6 link-local DNS servers in the dnsmasq DNS plugin
  - cli: add ability to delete connections
  - keyfile: fix an issue with duplicated keyfile connections
  - core: ensure the 'novj' option is passed through to pppd
  - core: store timestamps for VPN connections too (rh #725353)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.1.90-2.git20110927
changelog:
  - core: ifcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)
  - core: change iscsiadm path to /sbin/iscsiadm in ifcfg-rh plugin (rh #740753)
  - core: fix refcounting when deleting a default wired connection (lp:797868)


author: Adam Williamson <awilliam@redhat.com> - 1:0.9.1.90-5.git20110927
changelog:
  - Rebuilt for glibc (rh #747377)
  - core: fix setting hostname from DHCP options (rh #719100)
  - skip a release to keep up with F16


author: Dan Williams <dcbw@redhat.com> - 0.9.2-1
changelog:
  - core: fix possible crash when talking to ModemManager
  - core: improve handling of rfkill on some machines (eeepc 1005HA and others)
  - ifcfg-rh: don't use spaces in ifcfg file names (rh #742273)
  - core: accept IPv6 Router Advertisements when forwarding is on
  - core: bump dnsmasq cache size to 400 entries
  - core: ensure IPv6 static routes are flushed when device is deactivated
  - ifcfg-rh: fix changing WPA connections to WEP
  - core: fix setting hostname from DHCP (rh #719100)
  - libnm-glib: fix various GObject introspection issues (rh #747302)
  - core: don't change routing or DNS if no devices are managed
  - core: ensure IPv6 RA-provided routes are honored


author: Dan Williams <dcbw@redhat.com> - 0.9.3-0.1
changelog:
  - Update to 0.9.4 snapshot
  - wimax: enable optional support for Intel WiMAX devices
  - core: use nl80211 for WiFi device control
  - core: add basic support for Infiniband IP interfaces
  - core: add basic support for bonded interfaces
  - core: in-process IP configuration no longer blocks connected state


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.4
changelog:
  - Update to 0.9.3.995 (0.9.4-beta1)
  - core: add support for bonding and VLAN interfaces
  - core: add support for Internet connectivity detection
  - core: add support for IPv6 Privacy Extensions
  - core: fix interaction with firewalld restarts


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.5
changelog:
  - core: fix a crash with ipw2200 devices and adhoc networks
  - core: fix IPv6 addressing on newer kernels
  - core: fix issue with VPN plugin passwords (rh #802540)
  - cli: enhancements for Bonding, VLAN, and OLPC mesh devices
  - ifcfg-rh: fix quoting WPA passphrases that include quotes (rh #798102)
  - libnm-glib: fix some issues with duplicate devices shown in menus


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.6
changelog:
  - core: fix issue with carrier changes not being recognized (rh #800690)
  - editor: warn user if CA certificate is left blank


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-0.7
changelog:
  - Update to 0.9.3.997 (0.9.4-rc1)
  - core: fix possible WiFi hang when connecting to Ad-Hoc networks
  - core: enhanced IPv6 compatibility
  - core: proxy DNSSEC data when using the 'dnsmasq' caching nameserver plugin
  - core: allow VPNs to specify multiple domain names given by the server
  - core: fix an issue creating new InfiniBand connections
  - core/applet/editor: disable WiFi Ad-Hoc WPA connections until kernel bugs are fixed


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-1
changelog:
  - applet: move to network-manager-applet RPM
  - editor: move to nm-connection-editor RPM
  - libnm-gtk: move to libnm-gtk RPM


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - Update to 0.9.5.95 (0.9.6-rc1) snapshot
  - core: add autoconnect, driver-versioni and firmware-version properties to NMDevice
  - core: various IPv6 improvements
  - core: reduce number of changes made to DNS information during connection setup
  - core: add Vala language bindings
  - vpn: support IPv6 over VPNs
  - wifi: add on-demand WiFi scan support


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - core: fix race between parallel DHCP client invocations
  - core: suppress a useless warning (rh #840580)
  - ifcfg-rh: fix segfault with malformed values (rh #841391)
  - ifcfg-rh: ignore IP config on bond slave configurations (rh #838907)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.0-3.git20121004
changelog:
  - Forward-port some forgotten fixes from F17
  - Fix networked-filesystem systemd dependencies (rh #787314)
  - Don't restart NM on upgrade, don't stop NM on uninstall (rh #811200)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.7.0-8.git20121004
changelog:
  - Apply patch from master to update hostname (rh #875085)
  - spec: create /etc/NetworkManager/dnsmasq.d (rh #873621)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.8-beta2
  - core: ignore bridges managed by other tools (rh #905035)
  - core: fix libnl assert (rh #894653)
  - wifi: always use Proactive Key Caching with WPA Enterprise (rh #834444)
  - core: don't crash when Internet connection sharing fails to start (rh #883142)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - core: fix VLAN parent handling when identified by UUID
  - core: quiet warning about invalid interface index (rh #920145)
  - core: request 'static-routes' from DHCP servers (rh #922558)
  - core: fix crash when dbus-daemon is restarted (rh #918273)
  - core: copy leasefiles from /var/lib/dhclient to fix netboot (rh #916233)
  - core: memory leak and potential crash fixes
  - ifcfg-rh: ensure missing STP property is interpreted as off (rh #922702)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-2.git20130507
changelog:
  - core: fix issue with UI not showing disconnected on rfkill
  - core: memory leak fixes
  - core: silence warning about failure reading permanent MAC address (rh #907912)
  - core: wait up to 120s for slow-connecting modems
  - core: don't crash on PPPoE connections without a wired setting
  - core: ensure the AvailableConnections property is always correct
  - keyfile: ensure all-default VLAN connections are read correctly
  - core: suppress kernel's automatic creation of bond0 (rh #953466)
  - libnm-glib: make NMSecretAgent usable with GObject Introspection
  - libnm-util: fix GObject Introspection annotations of nm_connection_need_secrets()
  - core: documentation updates


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-1.git20130514
changelog:
  - Enable hardened build
  - Update to 0.9.10 snapshot
  - cli: new capabilities and somewhat re-arranged syntax
  - core: generic interface support
  - core: split config support; new "server mode" options
  - core: allow locking connections to interface names


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-2.git20130515
changelog:
  - Update for systemd network-online.target (rh #787314)
  - Add system service for the script dispatcher (rh #948433)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-6
changelog:
  - Belatedly update udev directory for UsrMove
  - Fix incorrect dates in old changelog entries to avoid rpm warnings


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-9.git20130807
changelog:
  - core: fix assert on multi-hop routes (rh #989022)
  - core: fix dispatcher systemd unit enabling (rh #948433)
  - ifcfg-rh: ignore emacs temporary lockfiles (rh #987629)
  - core: fix various routing issues and interaction with kernel events
  - cli: confirm saving connections when autoconnect is enabled (rh #953296)
  - cli: automatically change method when static IP addresses are added
  - core: preserve externally added IPv4 routes and addresses


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-10.git20130906
changelog:
  - core: fix bug which disallowed deleting connections (rh #997568)
  - core: add support for Team devices
  - core: enable NetworkManager-wait-online by default (rh #816655)
  - core: fix crash when 'gre' and 'macvlan' links change (rh #997396)
  - core: fail activation when invalid static routes are configured (rh #999544)
  - core: enhance connectivity checking to include portal detection
  - core: allow hyphens for MAC addresses (rh #1002553)
  - core: remove NetworkManager-created software devices when they are deactivated (rh #953300)
  - core: fix handling of some DHCP client identifiers (rh #999503)
  - core: correctly handle Open vSwitch interfaces as generic interfaces (rh #1004356)
  - core: better handle Layer-2-only connections (rh #979288)
  - cli: enhanced bash completion
  - cli: make the 'describe' command more visible (rh #998002)
  - cli: fix bug rejecting changes to Wi-Fi channels (rh #999999)
  - cli: update bash completion to suggest connection names (rh #997997)
  - cli: fix tab completion for aliases in edit mode
  - cli: ask whether to switch IP method to 'auto' when all addresses are deleted (rh #998137)
  - cli: request missing information when --ask is passed (rh #953291)
  - cli: add 'remove' command to edit mode
  - cli: fix creation of secure Wi-Fi connections (rh #997969) (rh #997555)
  - cli: default autoconnect to no and ask whether to activate on save (rh #953296)
  - man: clarify manpage text (rh #960071) (rh #953299)
  - man: fix errors in the nmcli help output and manpage (rh #997566)
  - ifcfg-rh: only write IPV6_DEFAULTGW when there's actually a default gateway (rh #997759)
  - ifcfg-rh: fix handling of legacy-format routes file with missing gateway


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-11.git20130913
changelog:
  - core: actually enable ModemManager 1.0 support
  - libnm-glib: fix nm_remote_connection_delete() not calling callback (rh #997568)
  - cli: ensure terminal is reset after quitting
  - cli: set wep-key-type properly when editing (rh #1003945)
  - man: fix typo in nmcli examples manpage (rh #1004117)
  - core: fix setting VLAN ingress/egress mappings
  - core: allow creating VLANs from interfaces other than Ethernet (rh #1003180)
  - cli: fix input/output format conversion (rh #998929)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-13.git20131001
changelog:
  - core: fix bridge device creation (#1012532)
  - core,settings: do not call functions with connection==NULL (rh #1008151)
  - cli: accept gateway in the IP questionnaire of 'nmcli -a con add' (rh #1007368)
  - cli: always print success message (not only in --pretty mode) (rh #1006444)
  - cli: fix bond questionnaire to be able to set miimon (rh #1007355)
  - ifcfg-rh: if IPv4 is disabled put DNS domains (DOMAIN) into IPv6 (rh #1004866)
  - platform: fix a crash when nm_platform_sysctl_get() returns NULL (rh #1010522)
  - platform: fix InfiniBand partition handling (rh #1008568)
  - infiniband: only check the last 8 bytes when doing hwaddr matches (rh #1008566)
  - bluez: merge adding support for BlueZ 5 (bgo #701078)
  - api: clarify lifetime and behavior of ActiveConnection's SpecificObject property (rh #1012309)
  - vpn: fix connecting to VPN (bgo #708255) (rh #1014716)
  - rdisc: do not crash on NDP init failures (rh #1012151)
  - cli: be more verbose when adding IP addresses in questionnaire (rh #1006450)
  - team: chain up parent dispose() in NMDeviceTeam dispose() (rh #1013593)
  - translation updates


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-14.git20131003
changelog:
  - core: fix DHCPv6 address prefix length (rh #1013583)
  - cli: enhance bonding questionaire (rh #1007355)
  - core: fix crash with Bluez5 if PAN connection is not defined (rh #1014770)
  - libnm-glib: fix various memory leaks that could cause UIs to mis-report state
  - core: fix issues with mis-configured IPv6 router advertisements (rh #1008104)
  - cli: fix potential crash editing connections (rh #1011942)
  - core: fix crash deactivating team devices (rh #1013593)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-15.git20131004
changelog:
  - core: add support for 'primary' bond option (rh #1013727)
  - cli: fix creation of Dynamic WEP configurations (rh #1005171)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-16.git20131011
changelog:
  - core: fix IPv4 addressing when IPv6 is disabled at boot time (rh #1012151)
  - ifcfg-rh: fix handling of default routes in route6 files (rh #991807)
  - core: fix PropertiesChanged signals for IP-related properties
  - ifcfg-rh: make minimal ifcfg file handling consistent with initscripts


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-19.git20131108
changelog:
  - core: fix various issues with ignore-carrier configuration (rh #1018403)
  - core: improve handling of NPAR/SRIOV devices in bonds (rh #804527)
  - ifcfg-rh: fix crash when reading connection (rh #1025007)
  - core: better handling of unrecognized connections (rh #1022256)
  - cli: add 'nmcli dev connect eth0' functionality (rh #961543)
  - core: add support for DCB/FCoE configuration (rh #799241)
  - cli: add 'activate' menu command for interactive editor (rh #1004883)
  - core: fix segfault when setting default IPv6 route for VPNs (rh #1019021)
  - core: track autoconnect for software devices that are removed (rh #1005913)
  - ifcfg-rh: always read and write static IP addresses (rh #998135)
  - cli: copy remove connection to local one on save (rh #997958)
  - core: don't crash when no DHCP client is available (rh #1015809)
  - libnm-glib: fix crash in nm_client_new() (rh #1010288)


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-28.git20131212
changelog:
  - core: fix auto-activation after deactivation (rh #1033187)
  - core: delay startup complete for initial carrier (rh #1030583)
  - wifi: fix possible crashes checking associated AP (rh #1025371)
  - core: fix sending of hostname to DHCP server (rh #1001529)
  - core: don't retry a failed connection indefinitely (rh #1040528)
  - core: add reconnect delay for PPPoE connections (rh #1023503)
  - core: fix handling of routes with gateway in keyfiles (bgo #719851)
  - core: fix wierd profile doubling on restart (rh #1029859)
  - core: ensure software connections can be auto-activated after creationg (rh #1035814)
  - core: fix setting broadcast address (rh #1032819)
  - core: fix handling of PtP addresses for VPNs (rh #1018317)
  - cli: fix help command for connection object (rh #1036545)
  - core: fix connection auto-activation based on timestamp order (rh #1029854)
  - core: fix connecting VLAN interfaces without a specific interface name (rh #1034908)
  - core: fix crash canceling secrets requests (rh #922855)
  - libnm-glib: fix crash when connections are deleted remotely (rh #1030403)
  - cli: add "nmcli con load file..." (bgo #709830)
  - core: use disable_ipv6 in the right situations (rh #1004255)
  - cli: fix crash on editing 'lo' connection (rh #1030395)
  - core: ignore RA-provided IPv6 default routes (rh #1042402)
  - core: fix various issues found by Coverity (rh #1025894)
  - cli: add bash completion for hostname commands (rh #1018510)
  - core: require secondary connections to be VPNs (rh #997039)
  - core: don't crash if ethernet device has no MAC address (rh #1029053)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.0-30.git20130108
changelog:
  - core: ignore public-suffix search domains like ".com" or ".net" (#851521)
  - core: don't touch virtual devices on suspend/resume (rh #1038158)
  - core: fix handling of local nameservers in resolv.conf on startup (rh #1035861)
  - core: fix race with 'network' service at boot (rh #1034983)
  - core: fix stale information in dispatcher DHCP lease change events
  - cli: more compact 'nmcli dev' output format (rh #998003)
  - cli: make some mandatory parameters actually mandatory (rh #953397)
  - cli: enhance help documentation and bash completion (rh #1036545)
  - cli: show VPN connection information (rh #1036132)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.0-32.git20140122
changelog:
  - core: add host route for DHCPv4 server if outside assigned subnet (rh #983325)
  - core: set classful prefix length for DHCPv4 static routes
  - core: only request wired 802.1x secrets during initial connection
  - cli: fix crash when edited connection removed by another client (rh #1011942)
  - cli: add help for second-level commands (rh #1034119)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.0-37.git20140131
changelog:
  - dbus: kill at_console usage in permissions (rh #979416)
  - policy: allow inactive (remote/SSH) sessions to perform some actions (rh #979416)
  - cli: consolidate active and configured connections (rh #997999)
  - core/rdisc: add support for IPv6 privacy (rh #1003859)
  - core/platform: revise failure to activate connection on error of setting route (rh #1005416)
  - core/platform: sort routes before adding them in nm_platform_ipX_route_sync() (rh #1005416)
  - vpn: handle missing tunnel interface for IP-based VPNs (rh #1030068)
  - core: make NMDeviceTun 'mode' immutable and set at construct time (rh #1034737)
  - core/rdisc: add autoconf addresses as /64 (instead of /128) (rh #1044590)
  - ifcfg-rh: unescape Team configuration (rh #1051517)
  - core: fix a crash with autoconnect masters with autoconnect slaves (rh #1054194)
  - libnm-glib: additional functions to get nameservers (rh #1056146)


author: Thomas Haller <thaller@redhat.com> - 1:0.9.9.1-0.git20140228
changelog:
  - new snapshot version 0.9.9.1
  - cli: show warning when setting band/channel for infrastructure mode wifi (rh #1000096)
  - cli: better checking of WEP key types in interactive editor (rh #1040964)
  - core: fix crash while wrongly switching device to state NEED_AUTH (rh #1058308)
  - core: fix crash during re-activation with pending activation request (rh #1058843)
  - cli: support set/appending container types in modify command and interactive editor (rh #1044027)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-2.git20140228
changelog:
  - core: fix adding gateway route for IPv6 (rh #1072410)
  - core: unschedule deletion of sw device when activating request (rh #1073015)
  - cli: fix a crash when trying to set a white-space string as IP (rh #1071394)
  - core: correctly handle pre-activation dependency failure (rh #1069695)
  - libnm-util, libnm-glib: Add master/slave-matching utils (rh #1045203)
  - rdisc: set the expiration timer correctly (rh #1073560)
  - core,libnm-glib: support 'type', 'id' properties in NMActiveConnection (rh #1061822)
  - core: reenable auto activation for slave connections with a matching UUID master
  - core: implement function nm_active_connection_get_uuid()
  - core: rename function nm_active_connection_get_name() to nm_active_connection_get_id()
  - libnm-glib: fix a double free in NMDeviceVlan
  - platform: fix converting address flags in nm_platform_ip6_address_to_string()
  - core: postpone non-static master IP configuration until carrier
  - core: match IPv4 'disabled' method to 'auto' when device has no link
  - core: refactor connection matching and add testcase
  - policy: fix crash caused by calling functions on connection==NULL


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-3.git20140313
changelog:
  - core: read and assume team port configuration (rh #1035859)
  - core: looser IPv6 existing configuration assumption (rh #1073824)
  - core: follow network interface renames (rh #907836)
  - core: add support for VXLAN interfaces (rh #1066705)
  - wifi: fix connections to hidden SSIDs (rh #1069844)
  - cli: allow using master connection name when creating slaves (rh #1057494)
  - ifcfg-rh: fix reading and writing of Team port configurations (rh #1074160)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-4.git20140313
changelog:
  - core: fix startup auto-activation of slow carrier detect interfaces (rh #1076592)
  - core: align default bridge priority with kernel defaults (rh #1073664)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.1-7.git20140313
changelog:
  - ifcfg-rh: give a better error on "permission denied" (rh #1070617)
  - tui: allow cancelling with "Esc" from "nmtui connect" (rh #1080059)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-8.git20140326
changelog:
  - core: fix management of some static configurations from initramfs (rh #1077743)
  - ifcfg-rh: add support for alias files (rh #1067170)
  - core: additional fixes for Data Center Bridging (DCB) (rh #799241)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-11.git20140326
changelog:
  - core: additional fixes for Data Center Bridging (DCB) (rh #799241) (rh #1081991)
  - core: ensure /etc/resolv.conf has the right SELinux label (rh #1070829)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-12.git20140326
changelog:
  - core: fix master interface DHCP handling if ignore-carrier is set (rh #1083624)
  - core: fix startup state not finishing correctly (rh #1084554)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.9.1-13.git20140326
changelog:
  - core: ignore IPv6 cache routes to fix initial connection generation (rh #1083153)
  - core: ensure slow DHCP emits 'dhcp4-change' and 'dhcp6-change' dispatcher events (rh #1091296)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.1-14.git20140326
changelog:
  - core: fix connection matching with IPv6 routes (rh #1086237)
  - core: wait with startup-complete for dynamic IPv4 and IPv6 addresses (rh #1096063, rh #1086906)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-17.git20140326
changelog:
  - core: fix connection matching generally and for s390 as well (rh #1083196)
  - dhcp: fix DHCPv6 address lifetime handling (rh #1086237)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-30.git20140326
changelog:
  - ifcfg-rh: fix a crash on setting hostname with SELinux disabled (rh #1122826)
  - cli: fix 'nmcli device wifi' crash with multiple wifi devices (rh #1131042)
  - policy: don't use default (localhost) hostname as configured hostname (rh #1110436)
  - ifcfg-rh: write GATEWAY instead of GATEWAY0 to be ifup-compatible (rh #1105770)
  - libnm-util, cli: make explicit that we only allow VPN as secondaries (rh #1094296)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-31.git20140326
changelog:
  - core, cli: D-Bus Delete() call; 'nmcli device delete <ifname>' for SW devices (rh #1034150)
  - cli: use readline library throughout nmcli when asking for input (rh #1007365)


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.9.1-35.git20140326
changelog:
  - core: don't generate a connection for unmanaged devices (rh #1136843)
  - bluetooth: don't crash when switching off bluetooth (rh #1136387)
  - dhcp: fix dhclient abnormal exit due to SIGPIPE (rh #1136836)


author: Dan Winship <danw@redhat.com> - 1:0.9.9.1-38.git20140326
changelog:
  - tui: fix password handling (rh #1133967)
  - tui: save LEAP username correctly (rh #1133967)
  - tui: fix a crash when dismissing password dialog (rh #1132612)


author: Lubomir Rintel <lrintel@redhat.com> - 1:0.9.9.1-39.git20140326
changelog:
  - platform: Increase NL buffer size for systems with a lot of interfaces (rh #1141256)
  - tui: Remove primary option if bond mode is not active-backup (rh #1142864)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.11.0-1.git20141107.git289f7881
changelog:
  - core: DHCP address lifetime expires before it can be updated (rh #1139326)
  - core: apply static IPv6 configuration while waiting for an RA (rh #1101809)
  - core: fix activation of IP configurations on unmanaged interfaces (rh #1067299)
  - core: serialize dispatcher state changes (rh #1061212)
  - core: increased dispatcher timeout and blocking events (rh #1048345)
  - core: add support for "lacp_rate" bonding option (rh #1061702)
  - core: better handle slave state changes done externally (rh #1066706)
  - core: fix checking whether NM is running for root clients (rh #1096772)
  - ifcfg-rh: ignore tailing spaces (rh #1100336)
  - cli: fix warning setting DCB application priority (rh #1080510)
  - tui: fix inverted 'Require IPvX addressing' checkbox (rh #1108839)
  - tui: fix entry of some IP address formats (rh #1090422)
  - tui: fix disabled <Add> button in IP configuration (rh #1131434)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.11.0-4.git20141114.669f74b8
changelog:
  - core: wait for IPv6LL address before starting DHCPv6-only configurations
  - core: fix race with kernel IPv6LL when deactiving connections that ignored IPv6
  - cli: fix waiting for activation success/failure
  - core: silence warning about bad ifindex for non-netdev devices
  - core: fix default route ordering issues
  - core: don't change firewall zone for assumed devices (rh #1098281)
  - libnm: fix translations in clients and non-UTF-8 encodings
  - tui: fix unsetting the gateway (rh #1163896)
  - cli/tui: only handle secrets for connection being activated


author: Dan Williams <dcbw@redhat.com> - 1:0.9.11.0-5.git20141118.646f335d
changelog:
  - cli: fix showing secrets when editing connections
  - cli: ignore timestamp when comparing connections (rh #1122995)
  - core: fix a few issues with the internal DHCP client (rh #1066700)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.11.0-6.git20141125.f32075d2
changelog:
  - tui: fix missing IPv4/IPv6 method popup (rh #1167710)
  - core: inherit parent managed state for VLAN devices (rh #1114681)


author: Dan Williams <dcbw@redhat.com> - 1:0.9.11.0-9.git20141211.da4a98bf
changelog:
  - core: recognize layer-2 connections (rh #1141266)
  - core: don't tear down assumed connections that fail (rh #1141264)
  - core: clean up IP operations when restarting them after re-authentication
  - core: fix some VPN issues with secrets and routing
  - core: fix regression parsing gateway from addresses (rh #1170199)
  - core: don't release slaves on exit (rh #1169936)
  - tui: fix deletion of slaves with master (rh #1131574)
  - cli: fix regression deactivating multiple connections (rh #1168383)


author: Dan Williams <dcbw@redhat.com> - 1:0.995.0.0-1
changelog:
  - core: fix DHCP lease expiry/nak during lease acquisition
  - core: don't step on external team interfaces when teamd appears


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-1.git20150107.1ea95cd3
changelog:
  - Update to 1.0 release
  - core: split device support into sub-packages (rh #1066690)
  - core: don't touch externally created software interfaces until IFF_UP (rh #1030947)
  - tui: fix handling of "Available to all users" checkbox (rh #1176042)


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-5.git20150107.1ea95cd3
changelog:
  - build: remove -bluetooth and -wwan Requires to prevent unwanted updates (rh #1066690)
  - build: remove erroneous libnm/libnm-devel dependencies


author: Thomas Haller <thaller@redhat.com> - 1:1.0.0-7.git20150107.1ea95cd3
changelog:
  - platform: fix handling of routes with special metric (rh #1172780)
  - ifcfg-rh: add reading and writing of route-metric property


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-9.git20150121.b4ea599c
changelog:
  - build: fix NetworkManager-libnm and old NetworkManager-glib conflict (rh #1066690)
  - core: accept numeric bond options (rh #1171009) (rh #1133544)
  - core/libnm: better validate setting properties (rh #1182567)
  - core: add dispatcher script to support policy based routing (rh #1160013)


author: Dan Williams <dcbw@redhat.com> - 1:1.0.0-13.git20150121.b4ea599c
changelog:
  - core: remove IPv6LL address when deactivating managed devices (rh #1184997)
  - core: recognize external IP config earlier on startup
  - core: fix bridge default metric


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.3-1.git20150622.9c83d18d
changelog:
  - Update to a 1.0.4 git snapshot:
  - bond: add support for setting a MTU (rh #1177860)
  - core: delay initialization of the connection for devices without carrier at startup (rh #1079353)
  - route-manager: ensure the routes are set up properly with multiple interface in the same subnet (rh #1164441)
  - config: add support for reloading configuration (rh #1062301)
  - device: disallow ipv6.method=shared connections early during activation (rh #1183015)
  - device: don't save the newly added connection for a device until activation succeeds (rh #1174164)
  - rdisc: prevent solicitation loop for expiring DNS information (rh #1207730)
  - wifi: Indicate support of wireless radio bands (rh #1200451)
  - nmcli: Fix client hang upon multiple deletion attempts of the same connection (rh #1168657)
  - nmcli: Fix documentation for specifying a certificate path (rh #1182575)
  - device: add support for auto-connecting slave connection when activating a master (rh #1158529)
  - nmtui: Fix a crash when attempting an activation with no connection present (rh #1197203)
  - nmcli: Add auto-completion and hints for valid values in enumeration properties (rh #1034126)
  - core: load the the libnl library from the correct location (rh #1211859)
  - config: avoid duplicate connection UUIDs (rh #1171751)
  - device: enable IPv6 privacy extensions by default (rh #1187525)
  - device: fix handling if DHCP hostname for configure-and-quit (rh #1201497)
  - manager: reuse the device connection is active on when reactivating it (rh #1182085)
  - device: reject incorrect MTU settings from an IPv6 RA (rh #1194007)
  - default-route: allow preventing the connection to override externally configured default route (rh #1205405)
  - manager: reduce logging for interface activation (rh #1212196)
  - device: don't assume a connection for interfaces that only have an IPv6 link-local address (rh #1138426)
  - device: reject hop limits that are too low (CVE-2015-2924) (rh #1217090)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.4-0.1.git20150713.38bf2cb0
changelog:
  - Update to a bit newer 1.0.4 git snapshot, to fix test failures
  - device: restart ping process when it exits with an error (rh #1128581)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-1
changelog:
  - Align with the upstream 1.0.6 release:
  - device: add support for configuring Wake-On-Lan (rh #1141417)
  - device: don't disconnect after DHCP failure when there's static addresses  (rh #1168388)
  - device: provide information about metered connections (rh #1200452)
  - device: fix an assert fail when cleaning up a slave connection (rh #1243371)
  - team: add support for setting MTU (rh #1255927)
  - config: avoid premature exit with configure-and-quit option (rh #1256772)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-4
changelog:
  - config: fix config-changed signal for s390x and ppc64 archs (rh #1062301)
  - device: fix handling ignore-auto-dns for IPv6 nameservers (rh #1261428)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-5
changelog:
  - config: add code comments to NetworkManager.conf file
  - iface-helper: enabled slaac/dhcp4 based on connection setting only (rh #1260243)
  - utils: avoid generation of duplicated assumed connection for veth devices (rh #1256430)
  - nmcli: improve handling of wake-on-lan property (rh #1260584)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.0.6-6
changelog:
  - device: retry DHCP after timeout/expiration for assumed connections (rh #1246496)
  - device: retry creation of default connection after link is initialized (rh #1254089)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-13
changelog:
  - vpn-connection: set the MTU for the VPN IP interface (rh #1267004)
  - modem-broadband: update modem's supported-ip-families (rh #1263959)
  - wifi: fix a crash in on_bss_proxy_acquired() (rh #1267462)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-14
changelog:
  - platform: updating link cache when moving link to other netns (rh #1264361)
  - nmtui: fix possible crash during secret request (rh #1267672)
  - vpn: increase the plugin inactivity quit timer (rh #1268030)
  - core: fix enslaving team device to bridge (rh #1183444)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-17
changelog:
  - dhcp6: destroy the lease when destroying a client (rh #1260727)
  - device: fix race wrongly managing external-down device (rh #1269199)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-22
changelog:
  - platform: fix detection of s390 CTC device (rh #1272974)
  - core: fix queuing activation while waiting for carrier (rh #1079353)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.0.6-25
changelog:
  - vpn: cancel the secrets request on agent timeout (rh #1272023)
  - vpn: cancel the connect timer when vpn reconnects (rh #1272023)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.2.0-0.1.beta2
changelog:
  - Update to a 1.2.0 snapshot:
  - core: add a connection defaults section to NetworkManager.conf (rh #1164677)
  - dhcp: make timeout configurable (rh #1262922)
  - pppoe: set the firewall zone on the correct ip interface (rh #1110465)
  - device: properly roll back the device activation attempt on failure (rh #1270814)
  - nmcli: add monitor command (rh #1034158)
  - nmcli: fix shell completion of bluetooth device names (rh #1271271)
  - ipv4: add an option to send full FQDN in DHCP requests (rh #1255507)
  - core: fix a use-after-free() when activating a secondary VPN connection (rh #1277247)
  - wifi: fix bssid cache updating (rh #1094298)
  - vlan: honor the reorder-header flag (rh #1250225)
  - ipv4: do a duplicate address detection (rh #1259063)
  - core: add LLDP listener to the daemon and utilities (rh #1142898)
  - vpn: don't fail activation when plugin supports interactive mode, but the VPN daemon does not (rh #1298732)
  - ipv6: readd the address when the MAC address changes (rh #1286105)
  - core: avoid generating excessively long names for virtual devices (rh #1300755)
  - nmcli: add connection import and export (rh #1034105)
  - vlan: fix matching of connections on assumption (rh #1276343)
  - core: fix matching of static route metrics on connection assumption (rh #1302532)
  - core: work around broken device drivers (AWS ENI) that initially have zero MAC address (rh #1288110)
  - infiniband: set the link down when changing mode, some drivers need that (rh #1281301)
  - infiniband: retry autoactivation of partitions when parent device changes (rh #1275875)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.2.0-1
changelog:
  - Update to NetworkManager 1.2.0 release
  - vlan: keep the hardware address synchronized with parent device (rh #1325752)
  - bond: add more options (rh #1299103)


author: Thomas Haller <thaller@redhat.com> - 1:1.2.0-2
changelog:
  - write /etc/resolv.conf as file by default instead of symlink (rh#1337222)
  - rename package config-routing-rules to dispatcher-routing-rules (rh #1334876)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-0.1.git20160606.b769b4df
changelog:
  - Update to a 1.3.0 snapshot:
  - cli: hide secret certificate blobs unless --show-secrets set (rh #1184530)
  - dns: add support for specifying dns priorities (rh #1228707)
  - core: wait for IPv6 DAD before completing activation (rh #1243958)
  - device: take care of default route of DHCP generated-assumed connections (rh #1265239)
  - team: improve matching of team connection upon service restart (rh #1294728)
  - device: apply MTU setting also to devices without IPv4 configuration (rh #1303968)
  - device: reconfigure IP addressing after bringing up device (rh #1309899)
  - team: expose current device configuration through D-Bus and nmcli (rh #1310435)
  - systemd: add "After=dbus.service" to NetworkManager.service (rh #1311988)
  - cli: handle device failure when activating (rh #1312726)
  - core,libnm: remove gateway from connection if never-default is set (rh #1313091)
  - platform: remove padding for IP address lifetimes (rh #1318945)
  - manager: run dispatcher scripts on suspend/sleep (rh #1330694)
  - device: remove pending dhcp actions also in IP_DONE state (rh #1330893)
  - wwan: fixed multiple crashes (rh #1331395)
  - nmcli: fix tab completion for libreswan import (rh #1337300)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-0.2.git20160621.072358da
changelog:
  - enable JSON validation configure option
  - Update to a more recent 1.3.0 snapshot:
  - team: check return value of g_dbus_connection_call_sync() (rh #1347015)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.4.0-0.3.git20160727.9446481f
changelog:
  - Update to a more recent 1.4.0 snapshot:
  - bond: fix defaults and be more liberal in accepting different formats of option values (rh #1352131)
  - bond: fix setting of "lp_interval" option (rh #1348573)
  - device: don't try to generate ipv6ll address for disconnected devices (rh #1351633)
  - device: make sure we update system hostname when DHCP configuration changes (rh #1356015)
  - device: tune down warning about failure to set userspace IPv6LL on non-existing device (rh #1323571)
  - nmcli: add "nmcli device modify" subcommand to do runtime configuration changes (rh #998000)
  - nmcli: crash on connection delete/down timeout (rh $1355740)
  - nmcli: fix 8021x settings tab-completion (rh #1301226)
  - secrets: increase timeout for getting the secrets from the agent (rh #1349740)
  - team: keep device config property up to date with actual configuration (rh #1310435)
  - team: make synchronization with teamd more robust (rh #1257237)
  - vpn: don't merge DNS properties into parent device's configuration (rh #1348901)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.4.0-0.5.beta1
changelog:
  - Update to 1.4-beta1 release
  - core: fix setting hostname from DHCP (rh #1356015)
  - vlan: honor the REORDER_HDR flag (rh #1312281)
  - device: apply MTU setting also to devices without IPv4 configuration (rh #1364275)
  - bond: improved connection matching (rh #1304641)
  - team: check return value of g_dbus_connection_call_sync() (rh #1349749)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.4.0-1
changelog:
  - Update to 1.4.0 release
  - cli: show username when interactively connecting to a wireless network (rh #1351272)
  - ifcfg-rh: ensure master is cleared when updating a connection (rh #1355656)
  - policy: always try to update kernel hostname (rh #1362542)
  - cli: return sane error message for D-Bus policy permission errors (rh #1362542)
  - device: don't flush addresses when unmanaging assumed devices (rh #1364393)
  - team: be more tolerant when handling invalid or empty configuration (rh #1366300)
  - act-request: queue failing the slave when master fails (rh #1367702)
  - vpn: fix ipv6 configuration of VPNs without a separate interface (rh #1368354)
  - vpn: properly discard routes with invalid prefix length (rh #1368355)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-2
changelog:
  - ifcfg-rh: clear IP settings for slave connections (rh#1368761)
  - ifcfg-rh: accept TEAM connections also without DEVICETYPE setting (rh#1367180)


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-3
changelog:
  - wifi: fix activation failure due to error changing MAC address (rh#1371623)
  - core: fix wrong source interface for PropertiesChanged D-Bus signal (rh#1371920)
  - team: restore validation of JSON configuration (rh#1371967)
  - device: manage firewall zone for assumed persistent connections (rh#1366288)
  - device: don't let external changes cause a release of the slave (rh#1357738)


author: Francesco Giudici <fgiudici@redhat.com> - 1:1.4.0-16
changelog:
  - libnm-core: remove INFERRABLE flag from dhcp-hostname property (rh#1421082)
  - core: honor order of IP addresses from configuration (rh#1394500)


author: Ray Strode <rstrode@redhat.com> 0.6.14-2
changelog:
  - Fix wtmp loading so users coming from the network are
    remembered in the user list in subsequent boots


author: Matthias Clasen <mclasen@redhat.com> 0.6.15-2
changelog:
  - Make resetting user icons work
  - Update to 0.6.15
  - Fixes session chooser at login screen when logged into vt


author: Ray Strode <rstrode@redhat.com> - 0.6.35-11
changelog:
  - address minor bug in previous patch
    Related: #1220904

  - fix memory leak in log handler
    Resolves: #1292543


author: Adam Williamson <awilliam@redhat.com> 2.1.3-4
changelog:
  - add in some systemd scriptlets that were missed, including one which
    will cause auditd to be enabled on upgrade from pre-systemd builds


author: Steve Grubb <sgrubb@redhat.com> 2.3.2-1
changelog:
  - New upstream bugfix/enhancement release
  resolves: #982112 Add delay between stopping and starting auditd


author: Steve Grubb <sgrubb@redhat.com> 2.3.3-2
changelog:
  - New upstream bugfix/enhancement release
  resolves: #1053804 - ausearch issues found by ausearch-test
  resolves: #1030409 - ausearch help typo for "-x" option


author: Steve Grubb <sgrubb@redhat.com> 2.4-1
changelog:
  resolves: #1115196 - Add golang bindings for libaudit
  resolves: #1105150 - audispd config file parser fails on long input
  resolves: #1104973 - auparse truncating selinux context after first category
  resolves: #1088593 - auditctl man page examples use deprecated syscalls
  resolves: #1087849 - support for setting loginuid immutable
  resolves: #1073063 - AUDIT_SECCOMP events syscall field is not interpretted
  resolves: #975796  - confusing aulast records for bad logins


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-1
changelog:
  resolves: #963353 - aarch64 userspace auditing needs to be written
  resolves: #1150202 - perf trace sleep 1 does not list any syscall information
  resolves: #1142989 - Update audit package to 2.4.1
  resolves: #1155221 - adjust fstatat naming to match kernel uapi


author: Steve Grubb <sgrubb@redhat.com> 2.4.1-4
changelog:
  - Remove golang bindings added under the following bz
  resolves: #1115196 - Add golang bindings for libaudit


author: Steve Grubb <sgrubb@redhat.com> 2.6.5-3.1
changelog:
  resolves: #1415724 - write_logs option is not correctly handled
  resolves: #1415726 - Setting log_format to NOLOG make auditd core dump


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-5.P2
changelog:
  - update to 9.9.3-P2 (fix for CVE-2013-4854)
  - update RRL patch to 9.9.3-P2-rl.13207.22
  - Fix script for setting up chroot so it unmounts everything successfully


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Install configuration for rwtab and fix chroot setup script (#1028189)
  - use --enable-filter-aaaa when building bind to enable filter-aaaa-on-v4 option (#1025245)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-7
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run (#1024384)
  - Added session-keyfile statement into default named.conf since we use /run/named (#1024384)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-8
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#1004300)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-15
changelog:
  - Use /dev/urandom when generating rndc.key file (#1107568)
  - Allow authentication using TSIG in allow-notify configuration statement (#1067424)
  - Fix race condition when destroying a resolver fetch object (#1072379)
  - Increase defaults for lwresd workers and make workers and client objects number configurable (#1098959)
  - Configure BIND with --with-dlopen=yes to support dynamically loadable DLZ drivers (#1096688)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-17
changelog:
  - Fix error in dyndb API that can cause named to freeze on shutdown (#1142150)
  - Fix error in triggerun scriptlet (#1143033)
  - Remove /var/named/chroot/var/run on bind-chroot update if it is a directory (#1091341)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-19
changelog:
  - Install config for tmpfiles under %{_tmpfilesdir} (#1180976)
  - Fixed systemctl path in logrotate configuration (#1164264)
  - remove information about system-config-bind from named.8 man page (#1152066)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-20
changelog:
  - DNS resolution failure in high load environment with SERVFAIL and "out of memory/success" in the log (#1221180)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-22
changelog:
  - Add version specific requires on bind for bind-pkcs11 (Related: #1097753)
  - Resolve issues found by static analysis (Related: #1097753)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-23
changelog:
  - Don't copy /etc/localtime on -chroot package installation (#1186773)
  - Fix SPF resource records check to comply with RFC7208 (#1215164)
  - Don't use ISC's DLV by default (#1223336)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-33
changelog:
  - Fix excessive queries caused by DS chasing with stub zones when DNSSEC is not used (#1291185)
  - Fix error in internal test suite (#1259514)
  - Fix named-checkconf call in *-chroot.service files (#1278082)
  - Fix incorrect path in BIND sample configuration and added comment to default configuration (#1247502)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-34
changelog:
  - Added support for CAA records (#1306610)
  - Use HTTPS URL instead of FTP for upstream sources (#1319280)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.4-36
changelog:
  - Added automatic interface scan functionality (#1294506)
  - Removed NetworkManager dispatcher script since it is not needed any more (#1294506)


author: Petr Menšík <pemensik@redhat.com> - 32:9.9.4-38.1
changelog:
  - Fix CVE-2016-9131 (ISC change 4508)
  - Fix CVE-2016-9147 (ISC change 4510)
  - Fix regression introduced by CVE-2016-8864 (ISC change 4530)
  - Fix CVE-2016-9444 (ISC change 4517)


author: Joe Orton <jorton@redhat.com> 2008-2
changelog:
  - add (but don't use) mkcabundle.pl
  - tweak description
  - use /usr/bin/keytool directly; BR java-openjdk


author: Joe Orton <jorton@redhat.com> - 2010-2
changelog:
  - fix Java cacert database generation: use Subject rather than Issuer
    for alias name; add diagnostics; fix some alias names.


author: Joe Orton <jorton@redhat.com> - 2010-3
changelog:
  - update to certdata.txt r1.58
  - add /etc/pki/tls/certs/ca-bundle.trust.crt using 'TRUSTED CERTICATE' format
  - exclude ECC certs from the Java cacerts database
  - catch keytool failures
  - fail parsing certdata.txt on finding untrusted but not blacklisted cert


author: Paul Wouters <pwouters@redhat.com> - 2012.86-2
changelog:
  - Updated blacklist with 20 entries (Diginotar, Trustwave, Comodo(?)
  - Fix to certdata2pem.py to also check for CKT_NSS_NOT_TRUSTED


author: Kai Engert <kaie@redhat.com> - 2012.87-2.fc19.1
changelog:
  - Ship trust bundle file in /usr/share/pki/ca-trust-source/, temporarily in addition.
    This location will soon become the only place containing this file.


author: Kai Engert <kaie@redhat.com> - 2012.87-9
changelog:
  - Major rework for the Fedora SharedSystemCertificates feature.
  - Only ship a PEM bundle file using the BEGIN TRUSTED CERTIFICATE file format.
  - Require the p11-kit package that contains tools to automatically create
    other file format bundles.
  - Convert old file locations to symbolic links that point to dynamically
    generated files.
  - Old files, which might have been locally modified, will be saved in backup 
    files with .rpmsave extension.
  - Added a update-ca-certificates script which can be used to regenerate
    the merged trusted output.
  - Refer to the various README files that have been added for more detailed
    explanation of the new system.
  - No longer require rsc for building.
  - Add explanation for the future version numbering scheme,
    because the old numbering scheme was based on upstream using cvs,
    which is no longer true, and therefore can no longer be used.
  - Includes changes from rhbz#873369.


author: Kai Engert <kaie@redhat.com> - 2012.87-9.fc19.1
changelog:
  - adjust to changed and new functionality provided by p11-kit 0.17.3
  - updated READMEs to describe the new directory-specific treatment of files
  - ship a new file that contains certificates with neutral trust
  - ship a new file that contains distrust objects, and also staple a 
    basic constraint extension to one legacy root contained in the
    Mozilla CA list
  - adjust the build script to dynamically produce most of above files
  - add and own the anchors and blacklist subdirectories
  - file generate-cacerts.pl is no longer required


author: Kai Engert <kaie@redhat.com> - 2012.87-10.1
changelog:
  - Add myself as contributor to certdata2.pem.py and remove use of rcs/ident.
    (thanks to Michael Shuler for suggesting to do so)
  - Update source URLs and comments, add source file for version information.


author: Kai Engert <kaie@redhat.com> - 2012.87-10.3
changelog:
  - added a manual page and related build requirements
  - simplify the README files now that we have a manual page
  - set a certificate alias in trusted bundle (thanks to Ludwig Nussel)


author: Kai Engert <kaie@redhat.com> - 2014.1.98-71
changelog:
  - Update to CKBI 1.98 from NSS 3.16.1
  - building on RHEL 7 no longer requires java-openjdk
  - added more detailed instructions for release numbers on RHEL branches,
    to avoid problems when rebasing on both z- and y-stream branches.


author: Stef Walter <stefw@redhat.com> - 2014.1.98-72
changelog:
  - The BasicConstraints fix for Entrust Root is no longer necessary.
    In addition it was invalid for p11-kit 0.20.x. rhbz#1130485


author: Kai Engert <kaie@redhat.com> - 2015.2.3-71
changelog:
  - Update to CKBI 2.3 from NSS 3.18 with legacy modifications.
  - Add an alternative version of the "Thawte Premium Server CA" root,
    which carries a SHA1-RSA signature, to allow OpenJDK to verify applets
    which contain that version of the root certificate.
    This change doesn't add trust for another key, because both versions
    of the certificate use the same public key (rhbz#1170982).
  - Add a patch to the source RPM that documents the changes from the
    upstream version.
  - Introduce the ca-legacy utility, a manual page, and the ca-legacy.conf
    configuration file.
  - The new scriptlets require the coreutils package.
  - Remove the obsolete blacklist.txt file.


author: Kai Engert <kaie@redhat.com> - 2017.2.11-70.1
changelog:
  - Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
  - Use comments in extracted bundle files.
  - Change packaging script to support empty legacy bundles.


author: Miroslav Lichvar <mlichvar@redhat.com> 1.29.1-1
changelog:
  - update to 1.29.1 (#1053022, CVE-2014-0021)
  - fix selecting of sources with prefer option (#1061048)
  - fix potential bug in writing of drift files (#1061106)
  - replace hardening build flags with _hardened_build (#1061036)


author: Miroslav Lichvar <mlichvar@redhat.com> 2.1-1
changelog:
  - update to 2.1 (#1117882 #1169353 #1206504 #1209568 CVE-2015-1821
    CVE-2015-1822 CVE-2015-1853)
  - extend chrony-helper to allow using servers from DNS SRV records (#1211600)
  - add servers from DHCP with iburst option by default (#1219492)
  - execute test suite


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-4
changelog:
  - make the coolkey token caches persist over application calls.
  - make a separate cache for each user.


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-11
changelog:
  - CAC cards sometimes need to reset before they can get their
  - initial transaction (problem is noticed on insertion an removal)


author: Bob Relyea <rrelyea@redhat.com> - 1.0.1-14
changelog:
  - Shared memory directory needs to be writeable by all so
  - coolkey can create caches for any user. (lack of caches
  - show up in screen savers reactly slowly).


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-12
changelog:
  - Fix threading issue. Coolkey will now work with non-threaded applications 
  - that don't link with libpthread.


author: Robert Relyea <rrelyea@redhat.com> - 1.1.0-34
changelog:
  - recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
  - own our cache file.
  - verify we are using the correct mechanisms


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-1
changelog:
  - Updated to latest Upstream 0.4.8 code: multipath-tools-080519.tgz
    (git commit id: 42704728855376d2f7da2de1967d7bc71bc54a2f)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-6
changelog:
  - Updated to latest upstream 0.4.8 code: multipath-tools-080804.tgz
    (git commit id: eb87cbd0df8adf61d1c74c025f7326d833350f78)
  - fixed 451817, 456397 (scsi_id_change.patch), 457530 (config_space_fix.patch)
    457589 (static_libaio.patch)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.8-7
changelog:
  - Since libaio is now in /lib, not /usr/lib, multipath no longer needs to
    statically link against it. Fixed an error with binding file and WWIDs
    that include spaces. Cleaned up the messages from the directio checker
    function.  Fixed the udev rules. Fixed a regression in multipath.conf
    parsing
  - Fixed 457530, 457589


author: Mike Snitzer <snitzer@redhat.com> - 0.4.9-1
changelog:
  - Updated to latest upstream 0.4.9 code: multipath-tools-090429.tgz
    (git commit id: 7395bcda3a218df2eab1617df54628af0dc3456e)
  - split the multipath libs out to a device-mapper-multipath-libs package
  - if appropriate, install multipath libs in /lib64 and /lib64/multipath


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-3
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-090729.tgz
    (git commit id: d678c139719d5631194b50e49f16ca97162ecd0f)
  - moved multipath bindings file from /var/lib/multipath to /etc/multipath
  - Fixed 354961, 432520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.4.9-5
changelog:
  - Fixed problem where maps were being added and then removed.
  - Changed the udev rules to fix some issues.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-6
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091013.tar.gz
    (git commit id: aa0a885e1f19359c41b63151bfcface38ccca176)
  - Drop, now upstream, patches:
    * fix_missed_uevs.patch.
    * log_all_messages.patch.
    * uninstall.patch.
    * select_lib.patch.
    * directio_message_cleanup.patch.
    * stop_warnings.patch.
  - Drop redhatification.patch in favour of spec file hacks.
  - Drop mpath_wait.patch: no longer required.
  - Merge multipath_rules.patch and udev_change.patch.
  - Rename all patches based on source.
  - Add patch 0009-RH-fix-hp-sw-hardware-table-entries.patch to fix
    default entry for hp_sw and match current kernel.
  - Add multipath.conf.redhat as source instead of patch.
  - spec file:
    * divide runtime and build/setup bits.
    * update BuildRoot.
    * update install section to apply all the little hacks here and there,
      in favour of patches against upstream.
    * move ldconfig invokation to libs package where it belong.
    * fix libs package directory ownership and files.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-7
changelog:
  - Add patch 0010-RH-Set-friendly-defaults.patch:
    * set rcdir to fedora default.
    * do not install kpartx udev bits.
    * install redhat init script.
    * Cleanup spec file install target.
  - Add patch 0011-RH-multipathd-blacklist-all-by-default.patch:
    * Fix BZ#528059
    * Stop installing default config in /etc and move it to the doc dir.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-8
changelog:
  - Split patches in "for-upstream" and "RH" series.
  - Replace 0011-RH-multipathd-blacklist-all-by-default.patch with
    version from Benjamin Marzinski.
  - Update udev rules 0010-RH-multipath-rules-udev-changes.patch.
  - rpmlint cleanup:
    * Drop useless-provides kpartx.
    * Cleanup tab vs spaces usage.
    * Summary not capitalized.
    * Missing docs in libs package.
    * Fix init script LSB headers.
  - Drop README* files from doc sections (they are empty).


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 0.4.9-10
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-091027.tar.gz
    (git commit id: a946bd4e2a529e5fba9c9547d03d3f91806618a3)
  - Drop unrequired for-upstream patches.
  - BuildRequires and Requires new device-mapper version for udev sync support.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-11
changelog:
  - Add 0002-for-upstream-add-tmo-config-options.patch
    * Add fail_io_fail_tmo and dev_loss_tmo multipath.conf options
  - Add 0013-RH-add-weighted_prio-prioritizer.patch
  - Add 0014-RH-add-hp_tur-checker.patch
  - Add 0015-RH-add-multipathd-count-paths-cmd.patch
  - rename multipath.conf.redhat to multipath.conf, and remove the default
    blacklist.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-12
changelog:
  - Refresh 0001-RH-queue-without-daemon.patch
  - Refresh 0002-RH-path-checker.patch
  - Modify 0010-RH-multipath-rules-udev-changes.patch
    * Fix udev rules to use DM_SBIN_PATH when calling kpartx
    * install udev rules to /lib/udev/rules.d instead of /etc/udev/rules.d
  - Modify 0014-RH-add-hp_tur-checker.patch
  - Add 0003-for-upstream-default-configs.patch
  - Add 0016-RHBZ-554561-fix-init-error-msg.patch
  - Add 0017-RHBZ-554592-man-page-note.patch
  - Add 0018-RHBZ-554596-SUN-6540-config.patch
  - Add 0019-RHBZ-554598-fix-multipath-locking.patch
  - Add 0020-RHBZ-554605-fix-manual-failover.patch
  - Add 0021-RHBZ-548874-add-find-multipaths.patch
    * Added find_multipaths multipath.conf option
    * Added /sbin/mpathconf for simple editting of multipath.conf
  - Add 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * Make kpartx deal with logical partitions like it did in RHEL5.
      Don't create a dm-device for the extended partition itself.
      Create the logical partitions on top of the dm-device for the whole disk.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-13
changelog:
  - Replace 0012-RH-explicitly-disable-dm-udev-sync-support-in-kpartx.patch
    with 0012-RH-udev-sync-support.patch
    * Add udev sync support to kpartx and multipath. In kpartx it is disabled
      unless you use the -s option.
  - Refresh 0013-RH-add-weighted_prio-prioritizer.patch
  - Refresh 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
    * kpartx now creates a 2 sector large device for dos extended
      partitions, just like the kernel does on the regular block devices.
  - Add 0023-RHBZ-557810-emc-invista-config.patch
  - Add 0024-RHBZ-565933-checker-timeout.patch
    * Multipath has a new option checker_timeout. If this is not set, 
      all path checker functions with explicit timeouts use
      /sys/block/sd<x>/device/timeout. If this is set, they use it instead.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-14
changelog:
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
    * fix bug where mpathconf wouldn't create a multpath.conf file unless one
      already existed.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-16
changelog:
  - Modify 0012-RH-udev-sync-support.patch
  - Modify 0021-RHBZ-548874-add-find-multipaths.patch
  - Modify 0022-RHBZ-557845-RHEL5-style-partitions.patch
  - Add 0025-RHBZ-508827-update-multipathd-manpage.patch through
        0101-RHBZ-631009-disable-udev-disk-rules-on-reload.patch
    * sync with current state of RHEL6. Next release should include a updated
      source tarball with most of these fixes rolled in.
  - Add 0102-RHBZ-690828-systemd-unit-file.patch
    * Add Jóhann B. Guðmundsson's unit file for systemd.
    * Add sub-package sysvinit for SysV init script.
  - Resolves: bz #690828


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-17
changelog:
  - Add 0103-add-disable-sync-option.patch
    * add a -n (nosync) option to multipath. This disables synchronous
      file creation with udev.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.9-19
changelog:
  - Modify 0103-add-disable-sync-option.patch
  - Add 0104-RHBZ-737989-systemd-unit-fix.patch
    * systemd will only start multipathd if /etc/multipath.conf exists
  - Add 0105-fix-oom-adj.patch
    * first try setting oom_score_adj


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-21
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120123.tgz
    (git commit id: 63704387009443bdb37d9deaaafa9ab121d45bfb)
  - Add 0001-RH-fix-async-tur.patch
  - Add 0002-RH-dont_start_with_no_config.patch
  - Add 0003-RH-multipath.rules.patch
  - Add 0004-RH-update-init-script.patch
  - Add 0005-RH-cciss_id.patch
  - Add 0006-RH-Make-build-system-RH-Fedora-friendly.patch
  - Add 0007-RH-multipathd-blacklist-all-by-default.patch
  - Add 0008-RH-add-mpathconf.patch
  - Add 0009-RH-add-find-multipaths.patch
  - Add 0010-RH-check-if-multipath-owns-path.patch
  - Add 0011-RH-add-hp_tur-checker.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-22
changelog:
  - Add 0012-RH-update-on-show-topology.patch
  - Add 0013-RH-manpage-update.patch
  - Add 0014-RH-RHEL5-style-partitions.patch
  - Add 0015-RH-add-followover.patch
  - Add 0016-RH-dont-remove-map-on-enomem.patch
  - Add 0017-RH-fix-shutdown-crash.patch
  - Add 0018-RH-warn-on-bad-dev-loss-tmo.patch
  - Add 0019-RH-deprecate-uid-gid-mode.patch
  - Add 0020-RH-dont-remove-map-twice.patch
  - Add 0021-RH-validate-guid-partitions.patch
  - Add 0022-RH-adjust-messages.patch
  - Add 0023-RH-manpage-update.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-27
changelog:
  - Updated to latest upstream 0.4.9 code : multipath-tools-120613.tgz
    (git commit id: cb0f7127ba90ab5e8e71fc534a0a16cdbe96a88f)
  - Add 0001-RH-remove_callout.patch
    * multipath no longer uses the getuid callout.  It now gets the
      wwid from the udev database or the environment variables
  - Add 0004-RH-fix-cciss-names.patch
    * convert cciss device names from cciss/cXdY to sysfs style cciss!cXdY
  - Split 0009-RH-add-find-multipaths.patch into 0002-RH-add-wwids-file.patch
          and 0010-RH-add-find-multipaths.patch
  - Add 0016-RH-change-configs.patch
    * default fast_io_fail to 5 and don't set the path selector in the
      builtin configs.
  Resolves: bz #831978


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-29
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-120821.tgz
    (git commit id: 050b24b33d3c60e29f7820d2fb75e84a9edde528)
    * includes 0001-RH-remove_callout.patch, 0002-RH-add-wwids-file.patch,
      0003-RH-add-followover.patch, 0004-RH-fix-cciss-names.patch
  - Add 0013-RH-kpartx-msg.patch
  - Modify 0002-RH-multipath.rules.patch
    * removed socket call from rules file


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-31
changelog:
  - Add 0014-RH-dm_reassign.patch
    * Fix reassign_maps option
  - Add 0015-RH-selector_change.patch
    * devices default to using service-time selector
  - Add 0016-RH-retain_hwhandler.patch
    * add retain_attached_hw_handler option, to let multipath keep an
      already attached scsi device handler
  - Add 0017-RH-netapp_config.patch
  - Add 0018-RH-remove-config-dups.patch
    * Clean up duplicates in the devices and blacklist sections


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-32
changelog:
  - Modified 0018-RH-remove-config-dups.patch
    * Made modified config remove original only if the vendor/product
      exactly match


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-33
changelog:
  - Modify 0016-RH-retain_hwhandler.patch
    * Check the dm-multipath module version, and don't enable
      retain_attached_hw_handler if the kernel doesn't support it
  - Add 0019-RH-detect-prio.patch
    * add detect_prio option, to make multipath check if the device
      supports the ALUA prio, before defaulting to the configured prio
  - Remove 0017-RH-netapp_config.patch
  - Add 0020-RH-netapp-config.patch
    * new netapp config that uses retain_attached_hw_handler and
      detect_prio to autoconfigure ALUA and non-ALUA devices.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-35
changelog:
  - Add 0022-RHBZ-864368-disable-libdm-failback.patch
    * make kpartx and multiapthd disable libdm failback device creation
  - Add 0023-RHBZ-866291-update-documentation.patch
  - Resolves: bz #864368, #866291


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-38
changelog:
  - Add 0026-RH-fix-mpathpersist-fns.patch
  - Add 0027-RH-default-partition-delimiters.patch
    * Only use the -p delimiter when the device name ends in a number
  - Add 0028-RH-storagetek-config.patch
  - Add 0029-RH-kpartx-retry.patch
    * retry delete on busy loop devices
  - Add 0030-RH-early-blacklist.patch
    * multipath will now blacklist devices by device type and wwid in
      store_pathinfo, so that it doesn't do a bunch of unnecessary work
      on paths that it would only be removing later on.


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-40
changelog:
  - Add 0032-RH-make-path-fd-readonly.patch
    * revert change made when adding persistent reservations, so that path fds
      are again opened O_RDONLY


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-41
changelog:
  - Add 0033-RH-dont-disable-libdm-failback-for-sync-case.patch
    * make kpartx -s and multipath use libdm failback device creation, so
      that they work in environments without udev


author: Benjamin Marzinski <bmarizns@redhat.com> 0.4.9-42
changelog:
  - Add 0034-RHBZ-887737-check-for-null-key.patch
  - Add 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch
    * Compile multipathd with full RELRO and PIE and install to /usr


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-44
changelog:
  - Add 0036-UP-fix-state-handling.patch
    * handle transport-offline and quiesce sysfs state
  - Add 0037-UP-fix-params-size.patch
  - Add 0038-RH-fix-multipath.rules.patch
    * make sure multipath's link priority gets increased
  - Add 0039-RH-handle-other-sector-sizes.patch
    * allow gpt partitions on 4k sector size block devices.
  - Add 0040-RH-fix-output-buffer.patch
    * fix multipath -ll for large configuration.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-45
changelog:
  - Updated to latest upstrem 0.4.9 code: multipath-tools-130222
    (git commit id: 67b82ad6fe280caa1770025a6bb8110b633fa136)
  - Refresh 0001-RH-dont_start_with_no_config.patch
  - Modify 0002-RH-multipath.rules.patch
  - Modify 0003-RH-Make-build-system-RH-Fedora-friendly.patch
  - Refresh 0004-RH-multipathd-blacklist-all-by-default.patch
  - Refresh 0005-RH-add-mpathconf.patch
  - Refresh 0006-RH-add-find-multipaths.patch
  - Add 0008-RH-revert-partition-changes.patch
  - Rename 0008-RH-RHEL5-style-partitions.patch to
  	 0009-RH-RHEL5-style-partitions.patch
  - Rename 0009-RH-dont-remove-map-on-enomem.patch to
  	 0010-RH-dont-remove-map-on-enomem.patch
  - Rename 0010-RH-deprecate-uid-gid-mode.patch to
  	 0011-RH-deprecate-uid-gid-mode.patch
  - Rename 0013-RH-kpartx-msg.patch to 0012-RH-kpartx-msg.patch
  - Rename 0035-RHBZ-883981-cleanup-rpmdiff-issues.patch to
           0013-RHBZ-883981-cleanup-rpmdiff-issues.patch
  - Rename 0039-RH-handle-other-sector-sizes.patch to
  	 0014-RH-handle-other-sector-sizes.patch
  - Rename 0040-RH-fix-output-buffer.patch to 0015-RH-fix-output-buffer.patch
  - Add 0016-RH-dont-print-ghost-messages.patch
  - Add 0017-RH-fix-sigusr1.patch
    * Actually this fixes a number of issues related to signals
  - Rename 0018-RH-remove-config-dups.patch to 0018-RH-fix-factorize.patch
    * just the part that isn't upstream
  - Add 0019-RH-fix-sockets.patch
    * makes abstract multipathd a cli sockets use the correct name.
  - Set find_multipaths in the default config


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-46
changelog:
  - Add 0020-RHBZ-907360-static-pthread-init.patch
    * statically initialize the uevent pthread structures


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-47
changelog:
  - Add 0021-RHBZ-919119-respect-kernel-cmdline.patch
    * keep the multipath.rules udev file from running and multipathd from
      starting if nompath is on the kernel command line
  - Add 0022-RH-multipathd-check-wwids.patch
    * Whenever multipath runs configure, it will check the wwids, and
      add any missing ones to the wwids file
  - Add 0023-RH-multipath-wipe-wwid.patch
    * multipath's -w command will remove a wwid from the wwids file
  - Add 0024-RH-multipath-wipe-wwids.patch
    * multipath's -W command will set reset the wwids file to just the current
      devices
  - Add 0025-UPBZ-916668_add_maj_min.patch
  - Resolves: bz #919119


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-48
changelog:
  - Add 0026-fix-checker-time.patch
    * Once multipathd hit it max checker interval, it was reverting to
      to shortest checker interval
  - Add 0027-RH-get-wwid.patch
    * Multipath wasn't correctly setting the multipath wwid when it read devices
      in from the kernel
  - Add 0028-RHBZ-929078-refresh-udev-dev.patch
    * Make multipath try to get the UID of down devices.  Also, on ev_add_path,
      make multipathd reinitialize existing devices that weren't fully
      initialized before.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-49
changelog:
  - Modify 0020-RHBZ-907360-static-pthread-init.patch
    * Don't initialize uevent list twice
  - Add 0029-RH-no-prio-put-msg.patch
  - Add 0030-RHBZ-916528-override-queue-no-daemon.patch
    * Default to "queue_without_daemon no"
    * Add "forcequeueing daemon" and "restorequeueing daemon" cli commands
  - Modify spec file to force queue_without_daemon when restarting
    multipathd on upgrades.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-50
changelog:
  - Add 0031-RHBZ-957188-kpartx-use-dm-name.patch
    * use the basename of the devices that will be created to choose the
      delimiter instead of using the device name from the command line
  - Resolves: bz #957188


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-51
changelog:
  - Add 0032-RHBZ-956464-mpathconf-defaults.patch
    * fix defaults listed in usage
  - Add 0033-RHBZ-829963-e-series-conf.patch
  - Add 0034-RHBZ-851416-mpathconf-display.patch
    * display whether or not multipathd is running in the status
  - Add 0035-RHBZ-891921-list-mpp.patch
    * add a new path format wilcard to list the multipath device associated
      with a path
  - Add 0036-RHBZ-949239-load-multipath-module.patch
    * load the dm-multipath kernel module when multipathd starts
  - Add 0037-RHBZ-768873-fix-rename.patch
    * When deciding on a multipth devices name on reload, don't default to
      the existing name if there is no config file alias and user_friendly_names
      isn't set. Use the wwid.
  - Modify multipath.conf
  - Resolves: bz #768873, #950252


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-52
changelog:
  - Add 0038-RHBZ-799860-netapp-config.patch
  - Add 0039-RH-detect-prio-fix.patch
    * Don't autodetect ALUA prioritizer unless it actually can get a priority
  - Add 0040-RH-bindings-fix.patch
    * Do a better job of trying to get the first free user_friendly_name
  - Add 0041-RH-check-for-erofs.patch
    * Don't create/reload a device read-only unless doing it read/write fails
      with EROFS
  - Remove 0017-RH-fix-sigusr1.patch
    * fix signal handling upstream way instead
  - Add 0042-UP-fix-signal-handling.patch
    * uxlsnr now handles all the signals sent to multipathd. This makes its
      signal handling posix compliant, and harder to mess up.
  - Add 0043-RH-signal-waiter.patch
    * ioctl isn't a pthread cancellation point.  Send a signal to the waiter
      thread to break out of waiting in ioctl for a dm event.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-53
changelog:
  - Add 0044-RHBZ-976688-fix-wipe-wwids.patch
    * Seek back to the start of the file after truncating it
  - Add 0045-RHBZ-977297-man-page-fix.patch
    * update man page to match actual defaults
  - Add 0046-RHBZ-883981-move-udev-rules.patch
    * move udev rules file from /lib to /usr/lib
  - Resolves: bz #883981, #976688, #977297


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-54
changelog:
  - Modify 0015-RH-fix-output-buffer.patch
    * Fix memory leak
  - Add 0047-RHBZ-kpartx-read-only-loop-devs.patch
    * Fix read only loop device handling
  - Add 0048-RH-print-defaults.patch
  - Add 0049-RH-remove-ID_FS_TYPE.patch
    * remove ID_FS_TYPE udev enviroment variable for multipath devices
  - Add 0051-UP-fix-cli-resize.patch
    * check before dereferencing variables
  - Add 0052-RH-fix-bad-derefs.patch
    * setup multipath free the multipath device when it fails, so don't keep
      using it.
  - Add 0053-UP-fix-failback.patch
    * setting failback in the devices section was broken
  - Add 0054-UP-keep-udev-ref.patch
    * multipathd needs to keep the same udev object across reconfigures
  - Add 0055-UP-handle-quiesced-paths.patch
    * quiesced paths should be treated as down
  - Add 0056-UP-alua-prio-fix.patch
    * Don't count the preferred bit for paths that are active/optimized
  - Add 0057-UP-fix-tmo.patch
    * Cleanup how multipath sets dev_loss_tmo and fast_io_fail_tmo.  Also
      make multipath get changing values directly from sysfs, instead of
      from udev, which caches them.
  - Add 0058-UP-fix-failback.patch
    * make failback print the default value when you show configs.
  - Add 0059-UP-flush-failure-queueing.patch
    * If you can't flush a multipath device, restore the queue_if_no_paths
      value
  - Add 0060-UP-uevent-loop-udev.patch
    * make ueventloop grab it's own udev reference, since it is cancelled
      asychnrously.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-55
changelog:
  - Add 0061-RH-display-find-mpaths.patch
  - Add 0062-RH-dont-free-vecs.patch
    * freeing vecs causes a number of races which can crash multipathd on
      shutdown.
  - Add 0063-RH-fix-warning.patch


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-56
changelog:
  - Add 0064-RHBZ-1010040-fix-ID_FS-attrs.patch
    * make multipath create a timestamp file /run/multipathd/timestamp, and
      add -T<timestamp>:<valid> option to shortcut processing if the
      timestamp hasn't changed
  - Resolves: bz #1010040


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-57
changelog:
  - Add 0065-UPBZ-995538-fail-rdac-on-unavailable.patch
    * make rdac checker always mark paths with asymmetric access state of
      unavailable as down
  - Resolves: bz #995538


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-58
changelog:
  - 0066-UP-dos-4k-partition-fix.patch
    * Make kpartx correctly handle 4K sector size devices with dos partitions.
  - Resolves: bz #1018439


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-59
changelog:
  - Add 0067-RHBZ-1022899-fix-udev-partition-handling.patch
    * Make sure to wipe partition devices on change event if they weren't 
      wiped on the device add event 
  - Add 0068-RHBZ-1034578-label-partition-devices.patch   
    * Make sure that partition devices are labeled like the whole device 
  - Add 0069-UPBZ-1033791-improve-rdac-checker.patch   
    *  Use RTPG data in RDAC checker 
  - Add 0070-RHBZ-1036503-blacklist-td-devs.patch
  - Add 0071-RHBZ-1031546-strip-dev.patch   
    * make multipathd interactive commands able to handle /dev/<devnode> 
      instead of just <devnode>
  - Resolves: bz #1022899, #1031546, #1033791, #1034578, #1036503


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-60
changelog:
  - Add 0072-RHBZ-1039199-check-loop-control.patch
    * Make kpartx use LOOP_CTL_GET_FREE and loop-control to find a free
      loop device. This will autoload the loop module.
  - Resolves: bz #1039199


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-63
changelog:
  - Modify 0072-RHBZ-1039199-check-loop-control.patch
    * only call close on the /dev/loop-control fd the open succeeds
  - Add 0073-RH-update-build-flags.patch
    * fix print call to work with -Werror=format-security compile flag, and
      change compilation flags for non-rpmbuild compiles
  - Add 0074-RHBZ-1056976-dm-mpath-rules.patch
    * Add rules to keep from doing work in udev if there are no
      active paths, or if the event was for a multipath device
      reloading its table due to a path change.
  - Add 0075-RHBZ-1056976-reload-flag.patch
    * multipath code to identify reloads that the new rules can
      ignore
  - Add 0076-RHBZ-1056686-add-hw_str_match.patch
    * add a new default config paramter, "hw_str_match", to make user
      device configs only overwrite builtin device configs if the
      identifier strings match exactly, like the default in RHEL6.
  - Add 0077-RHBZ-1054806-mpathconf-always-reload.patch
    * Make mpathconf always reconfgure multipathd when you run it with
      a reconfigure option and --with-multipathd=y, even if the
      configuration doesn't change.
  - Update Requires and BuildRequires for device-mapper to 1.02.82-2
  - Install new udev rules file /usr/lib/udev/rules.d/11-dm-mpath.rules
  - Related: bz #1039199
  - Resolves: bz #1054806, #1056686, #1056976


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-65
changelog:
  - Add 0078-RHBZ-1054044-fix-mpathconf-manpage.patch
    * Fix typo
  - Add 0079-RHBZ-1070581-add-wwid-option.patch
    * add multipath option "-a". To add a device's wwid to the wwids file
  - Resolves: bz #1054044, #1070581


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-66
changelog:
  - Add 0080-RHBZ-1075796-cmdline-wwid.patch
    * add multipath option "-A" to add wwids specified by the kernel
      command line mapth.wwid options.
  - Resolves: bz #1075796


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-67
changelog:
  - Modify multipath.conf (bz #1069360)
    * remove getuid_callout example
  - Add 0081-RHBZ-1066264-check-prefix-on-rename.patch
    * make multipath check the prefix on kpartx partitions during rename, and
      copy the existing behaviour
  - Add 0082-UPBZ-1109995-no-sync-turs-on-pthread_cancel.patch
    * If async tur checker fails on threads, don't retry with the sync version
  - Add 0083-RHBZ-1080055-orphan-paths-on-reload.patch
    * Fix case where pathlist wasn't getting updated properly
  - Add 0084-RHBZ-1110000-multipath-man.patch
    * fix errors in multipath man page
  - Add 0085-UPBZ-1110006-datacore-config.patch
    * Add support for DataCore Virtual Disk
  - Add 0086-RHBZ-1110007-orphan-path-on-failed-add.patch
    * If multipathd fails to add path correctly, it now fully orphans the path
  - Add 0087-RHBZ-1110013-config-error-checking.patch
    * Improve multipath.conf error checking.
  - Add 0088-RHBZ-1069811-configurable-prio-timeout.patch
    * checker_timeout now adjusts the timeouts of the prioritizers as well.
  - Add 0089-RHBZ-1110016-add-noasync-option.patch
    * Add a new defaults option, "force_sync", that disables the async mode
      of the path checkers. This is for cases where to many parallel checkers
      hog the CPU
  - Add 0090-UPBZ-1080038-reorder-paths-for-round-robin.patch
    * make multipathd order paths for better throughput in round-robin mode
  - Resolves: bz #1069360, #1066264, #1109995, #1080055, #1110000, #1110006
  - Resolves: bz #1110007, #1110013, #1069811, #1110016, #1080038


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-68
changelog:
  - Add 0091-RHBZ-1069584-fix-empty-values-fast-io-fail-and-dev-loss.patch
    * check for null pointers in configuration reading code.
  - Add 0092-UPBZ-1104605-reload-on-rename.patch
    * Reload table on rename if necessary
  - Add 0093-UPBZ-1086825-user-friendly-name-remap.patch
    * Keep existing user_friend_name if possible
  - Add 0094-RHBZ-1086825-cleanup-remap.patch
    * Cleanup issues with upstream patch
  - Add 0095-RHBZ-1127944-xtremIO-config.patch
    * Add support for EMC ExtremIO devices
  - Resolves: bz #1069584, #1104605, #1086825, #1086825, #1127944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-69
changelog:
  - Add 0096-RHBZ-979474-new-wildcards.patch
    * Add N, n, R, and r path wildcards to print World Wide ids
  - Add 0097-RH-fix-coverity-errors.patch
    * Fix a number of unterminated strings and memory leaks on failure
      paths.
  - Resolves: bz #979474


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-70
changelog:
  - Modify 0096-RHBZ-979474-new-wildcards.patch
    * Fix a faulty check
  - Add 0098-UPBZ-1067171-mutipath-i.patch
    * Add -i option to ignore wwids file when checking for valid paths
  - Add 0099-RH-add-all-devs.patch
    * Add new devices config option all_devs. This makes the configuration
      overwrite the specified values in all builtin configs
  - Related: bz #979474
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-71
changelog:
  - Re-add 0050-RH-listing-speedup.patch
  - Modify 0098-UPBZ-1067171-mutipath-i.patch
    * add dry_run cleanup code from upstream
  - Refresh 0099-RH-add-all-devs.patch
  - Add 0100-RHBZ-1067171-multipath-i-update.patch
    * make -i work correctly with find_multipaths
  - Resolves: bz #1067171


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-72
changelog:
  - Add 0101-RH-cleanup-partmaps-code.patch
    * code refactoring to prepare for next patch
  - Add 0102-RHBZ-631009-deferred-remove.patch
    * add deferred_remove option to /etc/multipath.conf
  - Resolves: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-75
changelog:
  - Add 0103-RHBZ-1148979-fix-partition-mapping-creation-race-with-kpartx.patch
    * Only run kpartx on device activation
  - Resolves: bz #1148979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-76
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Fixed compiler warning message for builds with old device-mapper versions
  - Add 0104-RHBZ-1159337-fix-double-free.patch
    * made ev_remove_path exit immediately after failing setup_multipath, since
      it handles cleaning up the device
  - Resolves: bz #1159337
  - Related: bz #631009


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-77
changelog:
  - Add 0105-RHBZ-1180032-find-multipaths-man.patch
    * add find_multipaths to man page
  - Modify multipath.conf (bz #1069360)
    * add uid_attribute example
  - Resolves: bz #1180032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-78
changelog:
  - Modify 0102-RHBZ-631009-deferred-remove.patch
    * Code refactor and minor fix.
  - Add 0106-RHBZ-1169935-no-new-devs.patch
    * add new configuration option "ignore_new_boot_devs"
  - Add 0107-RH-adapter-name-wildcard.patch
    * add new paths wildcard to show the host adapter
  - Add 0108-RHBZ-1153832-kpartx-remove-devs.patch
    * switch to kpartx -u in 62-multipath.rules to delete removed partitions
  - Add 0109-RH-read-only-bindings.patch
    * add -B support to multipathd
  - Add 0110-RHBZ-blacklist-vd-devs.patch
    * virtio-blk devices don't report a WWID so multipath can't use them
  - Add 0111-RH-dont-show-pg-timeout.patch
    * remove pg_timeout setting and displaying code
  - Add 0112-RHBZ-1194917-add-config_dir-option.patch
    * add new configuration option "config_dir"
  - Add 0113-RHBZ-1194917-cleanup.patch
    * code refactoring
  - Add 0114-RHBZ-1196394-delayed-reintegration.patch
    * add new configuration options "delay_watch_checks" and
      "delay_wait_checks"
  - Add 0115-RHBZ-1198418-fix-double-free.patch
    * fix crash when multipath fails adding a multipath device
  - Add 0116-UPBZ-1188179-dell-36xxi.patch
    * New builtin config
  - Add 0117-RHBZ-1198424-autodetect-clariion-alua.patch
    * update default config
  - Add 0118-UPBZ-1200738-update-eternus-config.patch
    * update default config
  - Add 0119-RHBZ-1081397-save-alua-info.patch
    * make prioritizers save information between calls to speed them up.
  - Add 0120-RHBZ-1043093-realloc-fix.patch
    * free old memory if realloc fails.
  - Add 0121-RHBZ-1197234-rules-fix.patch
    * make sure kpartx runs after an DM_ACTIVATION event occurs.
  - Add 0122-RHBZ-1212590-dont-use-var.patch
    * use /run instead of /var/run
  - Add 0123-UPBZ-1166072-fix-path-offline.patch
    * Don't mark quiesce and transport-offline paths as offline
  - Modify mulfipth.conf default config file (bz #1194794)
  - Related: bz #1153832
  - Resolves: bz #631009, #1043093, #1081397, #1166072, #1169935, #1188179
  - Resolves: bz #1194794, #1194917, #1196394, #1197234, #1198418, #1198424
  - Resolves: bz #1200738, #1212590


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-79
changelog:
  - Add 0124-RHBZ-1209275-retrigger-uevents.patch
    * Make multipathd retrigger uevents when paths haven't successfully had
      their udev_attribute environment variable set by udev and add
      "retrigger_ties" and "retrigger_delay" to control this
  - Add 0125-RHBZ-1153832-kpartx-delete.patch
    * Delete all partition devices with -d (not just the ones in the partition
      table)
  - Add 0126-RHBZ-1211383-alias-collision.patch
    * make multipathd use the old alias, if rename failed and add
      "new_bindings_in_boot" to determine if new bindings can be added to
      the bindings file in the initramfs
  - Resolves: bz #1153832, #1209275, #1211383


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-80
changelog:
  - Add 0127-RHBZ-1201030-use-blk-availability.patch
    * Make multipath use blk-availability.service
  - Add 0128-RHBZ-1222123-mpathconf-allow.patch
    * Add mpathconf --allow for creating specialized config files.
  - Resolves: bz #1201030, #1222123


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-81
changelog:
  - Modify 0128-RHBZ-1222123-mpathconf-allow.patch
    * Fix up covscan complaints.
  - Related: bz #1222123


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-82
changelog:
  - Add 0129-UPBZ-1254292-iscsi-targetname.patch
    * check for targetname iscsi sysfs value
  - Resolves: bz #1254292


author: Benjmain Marzinski <bmarzins@redhat.com> 0.4.9-83
changelog:
  - Add 0130-RHBZ-1259523-host_name_len.patch
    * increase size of host string
  - Resolves: bz# 1259523


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-84
changelog:
  - 0131-UPBZ-1259831-lock-retry.patch
    * retry locking when creating multipath devices
  - Resolves: bz# 1259831


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-86
changelog:
  - Add 0132-RHBZ-1296979-fix-define.patch
    * look for the correct libudev function to set define
  - Resolves: bz # 1296979


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-87
changelog:
  - Add 0133-RHBZ-1241774-sun-partition-numbering.patch
    * makr kpartx device numbers match partition numbers
  - Add 0134-RHBZ-1241528-check-mpath-prefix.patch
    * only touch devices with a "mpath-" dm uuid prefix
  - Add 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger path uevent the first time a path is claimed by multipath
  - Add 0136-RHBZ-1304687-wait-for-map-add.patch
    * wait for the device to finish being added before reloading it.
  - Add 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Add 0138-RHBZ-1288660-fix-mpathconf-allow.patch
    * don't remove existing lines from blacklist_exceptions section
  - Add 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Add 0140-RHBZ-1299647-fix-help.patch
  - Add 0141-RHBZ-1303953-mpathpersist-typo.patch
  - Add 0142-RHBZ-1283750-kpartx-fix.patch
    * only remove devices if their uuid says that they are the correct
      partition device
  - Add 0143-RHBZ-1299648-kpartx-sync.patch
    * default to using udev sync mode
  - Add 0144-RHBZ-1299652-alua-pref-arg.patch
    * allow "exclusive_pref_bit" argument to alua prioritizer
  - Add 0145-UP-resize-help-msg.patch
  - Add 0146-UPBZ-1299651-raw-output.patch
    * allow raw format mutipathd show commands, that remove headers and padding
  - Add 0147-RHBZ-1272620-fail-rm-msg.patch
  - Add 0148-RHBZ-1292599-verify-before-remove.patch
    * verify that all partitions are unused before attempting to remove a device
  - Add 0149-RHBZ-1292599-restore-removed-parts.patch
    * don't disable kpartx when restoring the first path of a device.
  - Add 0150-RHBZ-1253913-fix-startup-msg.patch
    * wait for multipathd daemon to write pidfile before returning
  - Resolves: bz #1241528, #1241774, #1253913, #1272620, #1273173, #1280524
  - Resolves: bz #1283750, #1288660, #1292599, #1299600, #1299647, #1299648
  - Resolves: bz #1299651, #1299652, #1303953, #1304687


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-88
changelog:
  - Add 0151-RHBZ-1297456-weighted-fix.patch
    * add wwn keyword to weighted prioritizer for persistent naming
  - Add 0152-RHBZ-1269293-fix-blk-unit-file.patch
    * use "Wants" instead of "Requires"
  - Add 0153-RH-fix-i686-size-bug.patch
    * use 64-bit keycodes for multipathd client commands
  - Add 0154-UPBZ-1291406-disable-reinstate.patch
    * don't automatically reinstate ghost paths for implicit alua devices
  - Add 0155-UPBZ-1300415-PURE-config.patch
    * Add default config for PURE FlashArray
  - Add 0156-UPBZ-1313324-dont-fail-discovery.patch
    * don't fail discovery because individual paths failed.
  - Resolves: bz #1297456, #1269293, #1291406, #1300415, #1313324


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-89
changelog:
  - Modify 0151-RHBZ-1297456-weighted-fix.patch
    * add documentation
  - Add 0157-RHBZ-1319853-multipath-c-error-msg.patch
    * better error reporting for multipath -c
  - Add 0158-RHBZ-1318581-timestamp-doc-fix.patch
    * add documentation for -T
  - Add 0159-UPBZ-1255885-udev-waits.patch
    * make multipath and kpartx wait after for udev after each command
  - Resolves: bz #1297456, #1319853, #1318581, #1255885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-90
changelog:
  - Modify 0159-UPBZ-1255885-udev-waits.patch
    * fix bug in failure path
  - Add 0160-RH-udev-flags.patch
  - Add 0161-RHBZ-1311659-no-kpartx.patch
    * skip_kpartx option disables kpartx running on multipath devices
  - Add 0162-RHBZ-1333331-huawei-config.patch
    * Add default config for Huawei XSG1 array
  - Add 0163-UPBZ-1333492-resize-map.patch
    * restore old size if resize fails
  - Add 0164-RHBZ-1311463-dos-part-rollover.patch
    * fix incorrect partition size due to 4k device size rollover
  - Resolves: bz #1255885, #1311463, #1311659, #1333331, #1333492


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-91
changelog:
  - Add 0165-UPBZ-1341748-MSA-2040-conf.patch
    * Add default config for MSA 2040 array
  - Resolves: bz #1341748


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-92
changelog:
  - Add 0166-RHBZ-1323429-dont-allow-new-wwid.patch
    * don't allow path wwid to change while it is in use
  - Add 0167-RHBZ-1335176-fix-show-cmds.patch
    * and new show multipath format wildcard, 'f' to sho number of failures.
      This will hopefully be useful for tracking what happens to multipath
      devices for bz #1335176
  - Resolves: bz #1323429


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-93
changelog:
  - Modify 0135-RHBZ-1299600-path-dev-uevents.patch
    * trigger uevents when adding wwids for existing devices during startup
  - Refresh 0136-RHBZ-1304687-wait-for-map-add.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Add 0168-RHBZ-1347769-shared-lock.patch
    * make multipath lock the path devices with a shared lock
  - Add 0169-UPBZ-1353357-json-output.patch
    * add mulitpathd json output command
  - Resolves: bz #1299600, #1347769, #1353357


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-95
changelog:
  - Add 0170-UPBZ-1352925-fix-typo.patch
  - Add 0171-UPBZ-1356651-allow-zero-size.patch
    * Allow zero-sized paths to be added to a multipath device
  - Add 0172-RHBZ-1350931-no-active-add.patch
    * Allow paths to be added to a new map if no active paths exist. Also
      fixes 1351430
  - Resolves: bz #1350931, #1351430, #1352925, #1356651


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-96
changelog:
  - Modify 0136-RHBZ-1304687-wait-for-map-add.patch
    * change missing_uev_msg_delay to missing_uev_msg_timeout, and make
      multipathd re-enable table loads if the timeout has passed
  - Refresh 0137-RHBZ-1280524-clear-chkr-msg.patch
  - Refresh 0139-RHBZ-1273173-queue-no-daemon-doc.patch
  - Refresh 0150-RHBZ-1253913-fix-startup-msg.patch
  - Refresh 0154-UPBZ-1291406-disable-reinstate.patch
  - Refresh 0155-UPBZ-1300415-PURE-config.patch
  - Refresh 0156-UPBZ-1313324-dont-fail-discovery.patch
  - Refresh 0161-RHBZ-1311659-no-kpartx.patch
  - Refresh 0167-RHBZ-1335176-fix-show-cmds.patch
  - Add 0173-RH-update-man-page.patch
  - Add 0174-RHBZ-1362396-modprobe.patch
    * make starting the multipathd service modprobe dm-multipath in the
      sysvinit scripts
  - Add 0175-RHBZ-1357382-ordering.patch
    * force multipathd.service to start after systemd-udev-trigger.service
  - Add 0176-RHBZ-1363830-fix-rename.patch
    * initialized a variable to make dm_rename not fail randomly
  - Resolves: bz #1304687, #1362396, #1357382, #1363830


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-97
changelog:
  - Add 0177-libmultipath-correctly-initialize-pp-sg_id.patch
    * This and all the following patches add the rbd patch checker
  - Add 0178-libmultipath-add-rbd-discovery.patch
  - Add 0179-multipath-tools-add-checker-callout-to-repair-path.patch
  - Add 0180-multipath-tools-Add-rbd-checker.patch
  - Add 0181-multipath-tools-Add-rbd-to-the-hwtable.patch
  - Add 0182-multipath-tools-check-for-initialized-checker-before.patch
  - Add 0183-multipathd-Don-t-call-repair-on-blacklisted-path.patch
  - Add 0184-rbd-fix-sync-repair-support.patch
  - Add 0185-rbd-check-for-nonshared-clients.patch
  - Add 0186-rbd-check-for-exclusive-lock-enabled.patch
  - Add 0187-rbd-fixup-log-messages.patch
  - Added BuildRequires on librados2-devel
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-98
changelog:
  - Modified 0180-multipath-tools-Add-rbd-checker.patch
    * make the rbd path checker only compile if librados2-devel is installed
  - Make librados2-devel only be BuildRequired on x86_64
  - Resolves: bz #1348372


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99
changelog:
  - Add 0188-RHBZ-1368501-dont-exit.patch
    * make multipathd not exit if it encounters recoverable errors on startup
  - Resolves: bz #1368501


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.1
changelog:
  - Add 0189-RHBZ-1395298-rbd-lock-on-read.patch
    * pass lock_on_read when remapping image
  - Resolves: bz #1395298


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.2
changelog:
  - Add 0190-RHBZ-1429885-max-sectors-kb.patch
    * add new max_sectors_kb multipath.conf parameter
  - Resolves: bz #1429885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.9-99.3
changelog:
  - Modify 0190-RHBZ-1429885-max-sectors-kb.patch
    * make max_sectors_kb only update the device sysfs paramter on creates.
  - Resolves: bz #1429885


author: Dave Jones <davej@redhat.com>
changelog:
  - Don't try to modify areas mmap'd read-only.
  - Don't build on ia64 any more.
    (It breaks on some boxes very badly, and works on very few).


author: Anton Arapov <anton@redhat.com> - 1:2.11-5
changelog:
  - Fix the wrong call of the dmi_chassis_type function call. Thus fix
    an issue on the systems with the chassis lock available, application
    doesn't fall out with the out of spec error anymore.


author: Anton Arapov <anton@redhat.com> - 1:2.11-7
changelog:
  - Add "PXE" to HP OEM Type 209 record output
  - Properly print the hexadecimal value of invalid string characters


author: Petr Oros <poros@redhat.com> - 1:2.12-6
changelog:
  - Add preliminary support for SMBIOS 64-bit entry point (Mark Salter)
  - Add support for DDR4 memmory


author: Petr Oros <poros@redhat.com> - 1:2.12-9
changelog:
  - dmioem: Decode Acer-specific DMI type 170
  - dmioem: Decode HP-specific DMI types 212 and 219
  - dmioem: Decode HP-specific DMI type 233, and refactored 209 and 221 to use a common function
  - Resolves: #1232501


author: Harald Hoyer <harald@redhat.com> 0.3-1
changelog:
  - version 0.3
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.4-1
changelog:
  - version 0.4
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.5-1
changelog:
  - version 0.5
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.6-1
changelog:
  - version 0.6
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.7-1
changelog:
  - version 0.7
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 0.8-1
changelog:
  - version 0.8 
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 001-1
changelog:
  - version 001
  - see http://dracut.git.sourceforge.net/git/gitweb.cgi?p=dracut/dracut;a=blob_plain;f=NEWS


author: Harald Hoyer <harald@redhat.com> 001-8
changelog:
  - plymouth: use plymouth-populate-initrd
  - add add_drivers for dracut and dracut.conf
  - do not mount /proc and /selinux manually in selinux-load-policy


author: Harald Hoyer <harald@redhat.com> 001-10
changelog:
  - add ifname= argument for persistent netdev names
  - new /initqueue-finished to check if the main loop can be left
  - copy mdadm.conf if --mdadmconf set or mdadmconf in dracut.conf


author: Harald Hoyer <harald@redhat.com> 002-3
changelog:
  - bail out if selinux policy could not be loaded and 
    selinux=0 not specified on kernel command line 
    (bug #524113)
  - set finished criteria for dmsquash live images


author: Warren Togami <wtogami@redaht.com> 002-5
changelog:
  - Revert back to -3, Add umount back to initrd
    This makes no functional difference to LiveCD.  See Bug #525319


author: Harald Hoyer <harald@redhat.com> 002-10
changelog:
  - do not destroy assembled raid arrays if mdadm.conf present
  - mount /dev/shm 
  - let udevd not resolve group and user names
  - preserve timestamps of tools on initramfs generation
  - generate symlinks for binaries correctly
  - moved network from udev to initqueue
  - mount nfs3 with nfsvers=3 option and retry with nfsvers=2
  - fixed nbd initqueue-finished
  - improved debug output: specifying "rdinitdebug" now logs
    to dmesg, console and /init.log
  - stop udev before killing it
  - add ghost /var/log/dracut.log
  - dmsquash: use info() and die() rather than echo
  - strip kernel modules which have no x bit set
  - redirect stdin, stdout, stderr all RW to /dev/console
    so the user can use "less" to view /init.log and dmesg


author: Harald Hoyer <harald@redhat.com> 002-13
changelog:
  - fixed init=<command> handling
  - kill loginit if "rdinitdebug" specified
  - run dmsquash-live-root after udev has settled (bug #527514)


author: Harald Hoyer <harald@redhat.com> 002-18
changelog:
  - renamed lvm/device-mapper udev rules according to upstream changes
  - fixed dracut search path issue


author: Harald Hoyer <harald@redhat.com> 002-22
changelog:
  - add module 90multipath
  - add module 01fips
  - renamed module 95ccw to 95znet (bug #533833)
  - crypt: ignore devices in /etc/crypttab (root is not in there)
  - dasd: only install /etc/dasd.conf in hostonly mode (bug #533833)
  - zfcp: only install /etc/zfcp.conf in hostonly mode (bug #533833)
  - kernel-modules: add scsi_dh scsi_dh_rdac scsi_dh_emc (bug #527750)
  - dasd: use dasdconf.sh from s390utils (bug #533833)


author: Harald Hoyer <harald@redhat.com> 002-26
changelog:
  - add WITH_SWITCH_ROOT make flag
  - add fips requirement conditional
  - add more device mapper modules (bug #539656)


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed rpmlint errors (rhbz#570547)
  - removed firmware package from dracut-kernel (rhbz#572634)
  - add dcb support to dracut's FCoE support (rhbz#563794)
  - force install some modules in hostonly mode (rhbz#573094)
  - various other bugfixes
  - Resolves: rhbz#570547, rhbz#572634, rhbz#563794, rhbz#573094


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages
  - dmraid parse different error messages
  - add cdrom polling mechanism for slow cdroms
  - add module btrfs
  - teach dmsquash live-root to use rootflags
  - trigger udev with action=add
  - fixed add_drivers handling 
  - add sr_mod
  - use pigz instead of gzip, if available


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed network with multiple nics
  - fixed nfsidmap paths
  - do not run blkid on non active container raids
  - fixed cdrom polling mechanism
  - update to latest git


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed dracut manpages 
  Resolves: rhbz#589109
  - use ccw-init and ccw rules from s390utils
  Resolves: rhbz#533494
  - fixed fcoe
  Resolves: rhbz#486244
  - various other bugfixes seen in Fedora


author: Harald Hoyer <harald@redhat.com>
changelog:
  - Remove requirements, which are not really needed
  Resolves: rhbz#598509
  - fixed copy of network config to /dev/.initramfs/ (patch 146)
  Resolves: rhbz#594649
  - more password beauty (patch 142)
  Resolves: rhbz#561092
  - support multiple iSCSI disks (patch 143)
  Resolves: rbhz#580190
  - fixed selinux=0 (patch 130)
  Resolves: rhbz#593080
  - add support for booting LVM snapshot root volume (patch 145)
  Resolves: rbhz#602723
  - remove hardware field from BOOTIF= (patch 148)
  Resolves: rhbz#599593
  - add aes kernel modules and fix crypt handling (patch 137, patch 140 and patch 147)
  Resolves: rhbz#600170


author: Harald Hoyer <harald@redhat.com> 008-2
changelog:
  - do not write dracut.log to /tmp under any circumstances
  - touch /dev/.systemd/plymouth after plymouth started


author: Harald Hoyer <harald@redhat.com> 009-3
changelog:
  - fixed dhcp
  - added /lib/firmware/updates to firmware directories 
  - fixed LiveCD /dev/.initramfs fallback
  - fixed cdrom polling
  - dropped net-tools dependency


author: Harald Hoyer <harald@redhat.com> 017-22.git20120302
changelog:
  - nfs path fixes for live image over nfs
    root=live:nfs://10.10.10.10:/srv/all/install.img ip=dhcp rd.neednet


author: Harald Hoyer <harald@redhat.com> 017-39.git20120308
changelog:
  - kill dhclient silently
  - cleanup and fix network config writeout to /run/initramfs/state
  Resolves: rhbz#799989
  - various cleanups


author: Harald Hoyer <harald@redhat.com> 019-92.git20120625
changelog:
  - support vlan tagged binding
  - speedup initramfs emergency service
  - speedup image creation
  - fix installkernel() return codes
  Resolves: rhbz#833256
  - add qemu and qemu-net modules to add qemu drivers even in host-only
  - speedup btrfs and xfs fsck (nop)
  - no more mknod in the initramfs (fixes plymouth on s390)


author: Harald Hoyer <harald@redhat.com> 020-64.git20120709
changelog:
  - fixed plymouth install
  - fixed resume
  - fixed dhcp
  - no dracut systemd services installed in the system


author: Harald Hoyer <harald@redhat.com> 020-70.git20120710
changelog:
  - more systemd unit fixups
  - restart systemd-journald in switch-root post
  - fixed dracut-install loader ldd error message


author: Harald Hoyer <harald@redhat.com> 020-83.git20120711
changelog:
  - more systemd journal fixes
  - nfs module fix
  - install also /lib/modprobe.d/*
  - fixed dracut-shutdown service
  - safeguards for dracut-install
  - for --include also copy symlinks


author: Harald Hoyer <harald@redhat.com> 023-13.git20120821
changelog:
  - reintroduce rd.neednet, which reenables anaconda networking
  - fix some dracut-install corner cases
  - fix FIPS for /boot not on extra partition


author: Harald Hoyer <harald@redhat.com> 026-33.git20130313
changelog:
  - add module-load.d modules to the initramfs
  - add sysctl.d to the initramfs
  - optimize plymouth module for systemd mode
  - add new dracut parameter "--regenerate-all"
  - add new dracut parameter "--noimageifnotneeded"
  - shutdown: mount move /run /sys /dev /proc out of /oldroot
    before pre-shutdown
  - add bash completion for dracut


author: Harald Hoyer <harald@redhat.com> 026-72.git20130320
changelog:
  - fix rescue image naming
  Resolves: rhbz#923439
  - turn off host-only mode if essential system filesystems not mounted
  - turn off host-only mode if udev database is not accessible


author: Harald Hoyer <harald@redhat.com> 027-17.git20130409
changelog:
  - only include needed /etc/crypttab entries
  Resolves:rhbz#919752
  - add support for bridge over team and vlan
  - support multiple bonding interfaces
  - add "action_on_fail=" kernel command line parameter
  - add support for bridge over a vlan tagged interface


author: Harald Hoyer <harald@redhat.com> 027-26.git20130415
changelog:
  - do not call plymouth with full path
  - include systemd-random-seed-load.service
  - fix ca-bundle.crt for ssl curl
  Resolves: rhbz#950770
  - add support for "iso-scan/filename" kernel parameter


author: Harald Hoyer <harald@redhat.com> 027-36.git20130418
changelog:
  - fix initramfs creation on noexec tmpdir
  Resolves: rhbz#953426
  - more options for lsinitrd
  - bash completion for lsinitrd
  - do not output debug information on initramfs creation, if rd.debug is
    on the kernel command line
  - drop requirement on 'file', lsinitrd can find the magic on its own


author: Harald Hoyer <harald@redhat.com> 027-81.git20130531
changelog:
  - fix btrfs mount flags for /usr
  - degrade message about missing tools for stripping
  Resolves: rhbz#958519
  - set environment vars DRACUT_SYSTEMD, NEWROOT in service file
  Resolves: rhbz#963159
  - don't add volatile swap partitions to host_devs
  - add libssl.so.10 to make kdump work with fips mode
  - readd selinux dracut module for kdump
  - url-lib/url-lib.sh: turn off curl globbing
  Resolves: rhbz#907497
  - include btrfs-zero-log in the initramfs
  Resolves: rhbz#963257
  - proper NAME the network interfaces
  Resolves: rhbz#965842
  - install default font latarcyrheb-sun16
  Resolves: rhbz#927564
  - optionally install /etc/pcmcia/config.opts
  Resolves: rhbz#920076
  - fix ONBOOT for slaves, set TYPE=Bond for bonding
  Resolves: rhbz#919001
  - add nvme kernel module
  Resolves: rhbz#910734
  - add xfs_metadump
  - selinux: load_policy script fix
  - add hid-hyperv and hv-vmbus kernel modules
  - add parameter rd.live.squashimg
  Resolves: rhbz#789036 rhbz#782108
  - wait for all required interfaces if "rd.neednet=1"
  Resolves: rhbz#801829
  - lvm: add tools for thin provisioning
  Resolves: rhbz#921235
  - ifcfg/write-ifcfg.sh: fixed ifcfg file generation
  - do not wait for mpath* devices
  Resolves: rhbz#969068


author: Harald Hoyer <harald@redhat.com> 028-1
changelog:
  - lvm: fixed "thin" recognition
  Resolves: rhbz#921235
  - install libs also from one dir above
    fixes booting power6 generated initramfs on power7
  - setup correct system time and time zone in initrd
  - cms fixups
  Resolves: rhbz#970982 rhbz#971025 rhbz#825199
  - iso-scan/filename fixes
  Resolves: rhbz#972337
  - add udev rules for persistent network naming
  Resolves: rhbz#972662


author: Harald Hoyer <harald@redhat.com> 029-1
changelog:
  - wait for IPv6 auto configuration
  Resolves: rhbz#973719
  - i18n: make the default font configurable
  - systemd/dracut-pre-pivot.service: also execute for cleanup hooks or rd.break
  - add dracut-shutdown.service.8 manpage
  - lvm: redirect error message of lvs to /dev/null
  Resolves: rhbz#921235


author: Harald Hoyer <harald@redhat.com> 030-1
changelog:
  - support new persistent network interface names
  - fix findmnt calls, prevents hang on stale NFS mounts
  - add systemd.slice and slice.target units
  - major shell cleanup
  - support root=PARTLABEL= and root=PARTUUID=
  - terminfo: only install l/linux v/vt100 and v/vt220
  - unset all LC_* and LANG, 10% faster
  - fixed dependency loop for dracut-cmdline.service
  - do not wait_for_dev for the root devices
  - do not wait_for_dev for devices, if dracut-initqueue is not needed
  - support early microcode loading with --early-microcode
  - dmraid, let dmraid setup its own partitions
  - sosreport renamed to rdsosreport


author: Harald Hoyer <harald@redhat.com> 031-1
changelog:
  - do not include the resume dracut module in hostonly mode,
    if no swap is present
  - don't warn twice about omitted modules
  - use systemd-cat for logging on systemd systems, if logfile is unset
  - fixed PARTUUID parsing
  - support kernel module signing keys
  - do not install the usrmount dracut module in hostonly mode,
    if /sbin/init does not live in /usr
  - add debian udev rule files
  - add support for bcache
  - network: handle bootif style interfaces
    e.g. ip=77-77-6f-6f-64-73:dhcp
  - add support for kmod static devnodes
  - add vlan support for iBFT


author: Harald Hoyer <harald@redhat.com> 031-22.git20130809
changelog:
  - lsinitrd.sh: add old cpio signature
  - dracut.sh: call find with -print0 and cpio with --null
  - dracut.asc: small corrections
  - systemd/dracut-initqueue.sh: continue to boot if finished failed
  - dracut.sh/dracut-functions.sh: handle root on non-block device
  - dracut-functions.sh: removed non dracut-install shell functions
  - dracut-functions.sh: inst_multiple == dracut_install
  - 51-dracut-rescue.install: fixed rescue image creation
  - dracut.sh: do not strip in FIPS mode
  Resolves: rhbz#990250
  - dracut.sh: check the value of --kver
  - crypt: Fix typo--/etc/crypttab not /etc/cryptab
  - network/net-lib.sh: fix ibft interface configuration
  - iscsi/module-setup.sh: install some modules regardless of hostonly
  - multipath: need_shutdown if multipath devices exist
  Resolves: rhbz#994913
  - omit drivers fix


author: Harald Hoyer <harald@redhat.com> 032-1
changelog:
  - fix for kdump in FIPS mode
  Resolves: rhbz#920931
  - fixed iBFT booting
  Resolves: rhbz#989944
  - fixed FIPS mode initramfs creation
  Resolves: rhbz#990250
  - shutdown: fixed killall_proc_mountpoint()
  Resolves: rhbz#996549
  - disable lvmetad in the initramfs
  Resolves: rhbz#996627
  - require dhclient


author: Harald Hoyer <harald@redhat.com> 032-19
changelog:
  - fixed curl error with zero size kickstart file
  Resolves: rhbz#989133
  - fixed systemd-cat failure, when systemd is installed
    but not actually running
  Resolves: rhbz#1002021
  - do not fail on empty dracut module directories
  Resolves: rhbz#1003153


author: Harald Hoyer <harald@redhat.com> 032-23
changelog:
  - do not fail on empty dracut module directories
  Resolves: rhbz#1003153
  - parse cmdline parameter, even if rootok=1
  Resolves: rhbz#978330
  - fixed ibft_to_cmdline()


author: Harald Hoyer <harald@redhat.com> 033-26
changelog:
  - create /dev/mapper/live-base for anaconda
  Resolves: rhbz#1009710
  - support "rootfallback=<root fallback device>"
  Resolves: rhbz#727333
  - add UEFI FCoE boot support
  Resolves: rhbz#732059
  - Make udev db records for MD devices persistent
    so LVM on MD autoactivation works correctly
  Resolves: rhbz#1017031
  - support mdadm-3.2.6+ and mdadm-3.3+
  - install lvm thin utils for non-hostonly also


author: Harald Hoyer <harald@redhat.com> 033-39
changelog:
  - fixed booting with rd.iscsi.firmware and without root=
  Resolves: rhbz#1024858
  - fixed resuming
  - fix swap detection in hostonly
  - fixed missing modules in hostonly, which have no modalias
  Resolves: rhbz#1015284
  - moved dracut to /usr/sbin


author: Harald Hoyer <harald@redhat.com> 033-40
changelog:
  - fips: include crct10dif_generic
  Resolves: rhbz#1024455
  - add /etc/system-fips in the initramfs
  Resolves: rhbz#1014284


author: Harald Hoyer <harald@redhat.com> 033-67
changelog:
  - fixed luks timeout
  Resolves: rhbz#949697
  - do not systemctl daemon-reload
  Resolves: rhbz#1023039 rhbz#1028043
  - do not do dhcp on interfaces with no link
  Resolves: rhbz#1029062
  - do iscsistart for iscsi_firmware even without network
  Resolves: rhbz#1031160


author: Harald Hoyer <harald@redhat.com> 033-84
changelog:
  - fixed iscsistart for iscsi_firmware
  Related: rhbz#1031160
  - add more drivers
  Resolves: rhbz#1048403
  Resolves: rhbz#1038827
  - add rd.bootif=0 parameter
  Resolves: rhbz#1044623
  - halt the machine, if FIPS fails
  - do not exit != 0 for dracut-rootfs-generator


author: Harald Hoyer <harald@redhat.com> 033-110
changelog:
  - add nameservers from ibft settings
  Resolves: rhbz#1034287
  - add microcode to the initramfs image by default
  Resolves: rhbz#1045639
  - halt the machine for wrong checksums in FIPS mode
  Resolves: rhbz#1053655
  - add kernel drivers from the update directory to search path
  Resolves: rhbz#1055774
  - set the ip address lifetime for DHCP setups
  Resolves: rhbz#1058519


author: Harald Hoyer <harald@redhat.com> 033-124
changelog:
  - fixed dns parsing for ip= parameter
  Resolves: rhbz#1034287
  - skipcpio bugfixes
  Resolves: rhbz#1045639
  - do not ifup, and already setup network
  Resolves: rhbz#844828
  - do not run dhclient twice
  Resolves: rhbz#844828


author: Harald Hoyer <harald@redhat.com> 033-137
changelog:
  - added sdhci_acpi to static list of kernel modules
  - add kernel drivers from the update directory to search path
  Resolves: rhbz#1055774
  - set the correct initiatior name for iBFT (typo)
  - try all FcoeBootDevice variables
  Resolves: rhbz#1032699
  - write directly to the output file and get correct selinux label
  - add sys-kernel-config.mount to the initramfs
  - configure IPv6 interface for DHCP6
  Resolves: rhbz#1064365
  - Wait until the tentative flag is cleared.
  Resolves: rhbz#1069263
  - no HWADDR if SUBCHANNELS are set for s390 interfaces
  Resolves: rhbz#1056438
  - modify the device timeout for the root device with the rootfs-generator
  Resolves: rhbz#1069133
  Resolves: rhbz#1028043
  - do not store kernel cmdline config in the initramfs about device assembly
  Resolves: rhbz#949697
  - write directly to the output image
  Resolves: rhbz#1062544


author: Harald Hoyer <harald@redhat.com> 033-144
changelog:
  - wait for IPv6 tentative flag to be cleared
  Resolves: rhbz#1069263
  - set correct flag file for interfaces
  Resolves: rhbz#1069263
  - add systemd-sysctl service to initramfs
  Resolves: rhbz#1070086
  - honor kernel cmdline, no internal cmdline anymore
  Resolves: rhbz#985160
  - --mount can now take fsck options
  Resolves: rhbz#1069106


author: Harald Hoyer <harald@redhat.com> 033-150
changelog:
  - make dracut-shutdown not fail fatally
  Resolves: rhbz#1067116
  - do PREINIT6 for DHCP6
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-153
changelog:
  - fcoe: wait for lldpad to be ready
  Resolves: rhbz#1080353
  - network: handle "ip=dhcp6" for all interfaces
  Resolves: rhbz#1064365


author: Harald Hoyer <harald@redhat.com> 033-156
changelog:
  - network: set correct lease times for DHCPv6
  Resolves: rhbz#1064365
  - include dm-cache kernel modules
  Resolves: rhbz#1081435


author: Harald Hoyer <harald@redhat.com> 033-160
changelog:
  - add fsck.<filesystem>, if it exists
  Resolves: rhbz#1083654
  - set IPV6INIT=yes if inet6 is found on the interface
  Resolves: rhbz#1083153


author: Harald Hoyer <harald@redhat.com> 033-207
changelog:
  - only fsck from the systemd side
  Resolves: rhbz#1080699
  - handle multiple fcoe devices
  Resolves: rhbz#1082512
  - handle entries in ssh_config
  Resolves: rhbz#1086778
  - do not bind persistent interfaces to MAC
  Resolves: rhbz#1087945
  - fixed iscsiroot install in initqueue
  Resolves: rhbz#1094469
  - handle upper case letters in SUBCHANNELS
  Resolves: rhbz#1094773
  - add rd.route kernel command line parameter
  Resolves: rhbz#1101412
  - do not reload systemd on wait_for_dev
  Resolves: rhbz#1126008


author: Harald Hoyer <harald@redhat.com> 033-213
changelog:
  - add "-m" option to lsinitrd to list the modules used
  Resolves: rhbz#1122806
  - add "--rebuild" option to dracut
  Resolves: rhbz#1123900


author: Harald Hoyer <harald@redhat.com> 033-224
changelog:
  - don't enforce iSCSI target name policy
  Resolves: rhbz#1078867
  - replaced "ip=auto" with "ip=dhcp" in the documentation
  Resolves: rhbz#1086931
  - bind bonding and bridge interfaces to SUBCHANNELS on s390(x)
  Resolves: rhbz#1090524
  - turn on ipv6, if configured
  Resolves: rhbz#1091410
  - parse DASD="none" as empty
  Resolves: rhbz#1096979
  - add virtio-console for qemu
  Resolves: rhbz#1097999
  - fail on missing dracut modules
  Resolves: rhbz#1121362
  - replace the default route
  Resolves: rhbz#1137022


author: Harald Hoyer <harald@redhat.com> 033-233
changelog:
  - fips: corrected previous fix
  Resolves: rhbz#1165603
  - fixed iscsi_target parsing
  Resolves: rhbz#1176534
  - skip GlobalKnownHostsFile for ssh_config
  Resolves: rhbz#1086778
  - cms-write-ifcfg.sh: turn SUBCHANNELS into lowercase
  Resolves: rhbz#1169384
  - fixed static routes execution
  Resolves: rhbz#1101412
  - add 90-vconsole.rules
  Resolves: rhbz#1162177


author: Harald Hoyer <harald@redhat.com> 033-237
changelog:
  - add support for multiple autoconf options ip=eth0:auto6,dhcp
  Resolves: rhbz#1069270
  - fixed team implementation
  Resolves: rhbz#1147521


author: Harald Hoyer <harald@redhat.com> 033-248
changelog:
  - fips: rearrange fips modules due to zlib
  Resolves: rhbz#1216086
  - wait for IPV6 DAD in DHCP PREINIT6
  - wait 5s for an network link carrier to appear
  Resolves: rhbz#1088808


author: Harald Hoyer <harald@redhat.com> 033-283
changelog:
  - add support for "x-initrd.mount"
  Resolves: rhbz#1080405
  - add network timeout kernel command line arguments
  Resolves: rhbz#1088808
  - use fcoemon and write out fcoemon config
  Resolves: rhbz#1129884 rhbz#1129888
  - add fcoe module EDD parsing quirk for i40e
  Resolves: rhbz#1129886
  - add RENEW to dhclient-script
  Resolves: rhbz#1144277
  - only fetch squashfs.img once
  Resolves: rhbz#1152485
  - add more input kernel drivers
  Resolves: rhbz#1165585 rhbz#1194529
  - be more sloppy with swap partitions and don't fail without them
  Resolves: rhbz#1165736
  - don't call dinfo binary
  Resolves: rhbz#1167082
  - don't halt the system, if the media check is aborted
  Resolves: rhbz#1167735
  - add boot option to spcecify size of live image rw overlay
  Resolves: rhbz#1183566
  - fix nfs dracut module, to not alter rootok for non nfs root
  Resolves: rhbz#1186004
  - don't fsck nfs 
  Resolves: rhbz#1186699
  - correctly parse multi line kernel command line
  Resolves: rhbz#1186822
  - add hyperv_fb module
  Resolves: rhbz#1187428
  - fixup IPv6 NFS addresses parsing
  Resolves: rhbz#1190098
  - add drbg kernel module in fips mode
  Resolves: rhbz#1193147
  - add all multipath path selector kernel modules
  Resolves: rhbz#1195392
  - don't symlink /var/log /run/log
  Resolves: rhbz#1199645
  - wait for IPv6 link local addresses
  Resolves: rhbz#1209814
  - fix references to grub config file in dracut man page
  Resolves: rhbz#1209962
  - add s390 kernel crypto modules to dracut-fips
  Resolves: rhbz#1215766
  - suppress 'cat: write error: Broken pipe' for lsinitrd
  Resolves: rhbz#1223888
  - enable DNS before routes to avoid race conditions
  Resolves: rhbz#1226004
  - add point-to-point ethernet configured via DHCP
  Resolves: rhbz#1227813
  - add virtio-pci
  Resolves: rhbz#1231716
  - add cache tools for dm-cache usage
  Resolves: rhbz#1234407
  - dracut-functions: move non-function code to dracut-init.sh
  Resolves: rhbz#1235500
  - add more information why a dracut module could not be included
  Resolves: rhbz#1236190
  - fixup iBFT parsing
  Resolves: rhbz#1236610


author: Harald Hoyer <harald@redhat.com> 033-314
changelog:
  - fixed iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - check for duplicate IPv4 address
  Resolves: rhbz#1202553
  - wait udev to be settled before transitioning to the real root
  Resolves: rhbz#1231373
  - support ip= parameter with enx* interface for autobinding to MAC
  Resolves: rhbz#1241102
  - include 40-redhat.rules in the initramfs
  Resolves: rhbz#1241547
  - degrade missing binaries for modules to info level
  Resolves: rhbz#1242845
  - cleanup lldpad cleanly to help out in state transition from initramfs
  Resolves: rhbz#1246217


author: Harald Hoyer <harald@redhat.com> 033-328
changelog:
  - add hostonly multipath.conf (to save memory in kdump)
  Resolves: rhbz#994702
  - increase version number of systemd dependency
  - fixed more iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - check for duplicate IPv4 address
  Resolves: rhbz#1202553


author: Harald Hoyer <harald@redhat.com> 033-333
changelog:
  - fixed more iSCSI handling
  Resolves: rhbz#1114966 rhbz#1189891
  - fixed "ip=ibft"
  Resolves: rhbz#1256814
  - fixed cmsifup and s390 ifup
  Resolves: rhbz#1245660


author: Harald Hoyer <harald@redhat.com> 033-346
changelog:
  - slim down the image by not including microcode header, if
    not needed
  - add command line parameter for hostonly keyboard layouts
     --hostonly-i18n
  Resolves: rhbz#1262208


author: Harald Hoyer <harald@redhat.com> 033-349
changelog:
  - no iSCSI timeout and modprobe, if iSCSI is not used
  - modprobe iSCSI modules with "-b" to allow blacklisting
  Resolves: rhbz#1263984
  - check for firmware file existance, before crafting
    microcode cpio
  Resolves: rhbz#1263798


author: Harald Hoyer <harald@redhat.com> 033-353
changelog:
  - fix network wait_for_if_up() to parse NO-CARRIER
  Resolves: rhbz#1249507
  - don't create garbage directories because of ldconfig
    misparsing
  Resolves: rhbz#1264725


author: Harald Hoyer <harald@redhat.com> 033-358
changelog:
  - fixed qemu detection
  Resolves: rhbz#1245959
  - fixed vlan ifcfg generation and nameserver handling
  Resolves: rhbz#1267311


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-359
changelog:
  - write-ifcfg: fix creating configuration for VLAN
  Resolves: rhbz#1267311
  - 90qemu: also add ibmvscsi on qemu
  Resolves: rhbz#1245959


author: Harald Hoyer <harald@redhat.com> - 033-379
changelog:
  - Autodetect iSCSI firmware
  - check, if NFS is already mounted
  Resolves: rhbz#1302764
  - fix carrier detection
  - fix majmin_to_mpath_dev()
  - add "wheel" and "adm" to passwd and group
  Resolves: rhbz#1287537
  - add "tar" and "dd" requirement
  Resolves: rhbz#1285810
  - for microcode generation, skip gpg files
  - add documentation: for "--hostonly-i18n" "--no-hostonly-i18n" "i18n_install_all"
  - add classless-static-routes support
  Resolves: rhbz#1260955


author: Harald Hoyer <harald@redhat.com> - 033-385
changelog:
  - add more SDHCI driver
  Resolves: rhbz#1336503
  - add str_ends() function
  - optimize test suite for RHEL


author: Harald Hoyer <harald@redhat.com> - 033-436
changelog:
  - ip=auto6 waits now until some router advertisments have been done
  Resolves: rhbz#1242058 rhbz#1292623
  - default iSCSI off-load start is now done in the background via systemd
  - don't fail on missing swap devices
  Resolves: rhbz#1165736
  - on shutdown re-mount the pivot-root writeable again
  Resolves: rhbz#1178497
  - fixed waiting for interface to be up
  Resolves: rhbz#1289341
  - for iSCSI, wait for all interfaces to be up
  Resolves: rhbz#1247478
  - correctly set MAC address on interface for DHCP
  Resolves: rhbz#1274230
  - fixed detection of virtual machines
  Resolves: rhbz#1170122
  - suppress building of early microcode image for non-x86 HW
  Resolves: rhbz#1260187
  - show more meaningfull messages for missing binaries
  Resolves: rhbz#1201035
  - backport fcoe fixes
  Resolves: rhbz#1169672
  - find device mapper devices with user_friendly_names turned on
  Resolves: rhbz#1299800
  - add dm-snapshot kernel module for LVM
  Resolves: rhbz#1287940
  - skip gpg files for microcode generation
  Resolves: rhbz#1282870
  - add description for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - copy all requires lines from crypttab
  Resolves: rhbz#1254987
  - add "wheel" and "adm" to passwd and group
  Resolves: rhbz#1275792 rhbz#1287537
  - strip whitespaces from volume group name in check_vol_slaves()
  Resolves: rhbz#1299879
  - dhcp: support rfc3442-classless-static-routes
  Resolves: rhbz#1260955
  - activate all bridges
  Resolves: rhbz#1194604
  - don't call "udevadm control --exit"
  Resolves: rhbz#1277026
  - support multiple bond interfaces
  Resolves: rhbz#1282679
  - configure other interfaces, if team/bond is configured
  Resolves: rhbz#1282680
  - error out, if initramfs.img could not be created
    and remove a partial written image
  Resolves: rhbz#1235895
  - optionally install items in 01-dist.conf
  Resolves: rhbz#1222529
  - fixed MAC and MUT settings in ip= command line parameter
  Resolves: rhbz#1271656


author: Harald Hoyer <harald@redhat.com> - 033-449
changelog:
  - include /etc/lvm/lvm_<host_tag>.conf
  Resolves: rhbz#1328778
  - cleanup watchdog module
  Resolves: rhbz#1319986
  - make reboot/halt/poweroff work
  Resolves: rhbz#1324454
  - include nfs module, if host_fs_types contains nfs
    copy filesystems to host_fs_types
  Resolves: rhbz#1349253
  - add kernel command line argument rd.emergency to specify a
    default action rd.emergency=[reboot|poweroff|halt]
  Resolves: rhbz#1359144
  - deduplicate /etc/resolv.conf
  Resolves: rhbz#1332418


author: Harald Hoyer <harald@redhat.com> - 033-457
changelog:
  - add --help documentation for --no-hostonly-i18n and --hostonly-i18n options
  Resolves: rhbz#1266448
  - mention rd.shell=0 for rd.emergency
  Resolves: rhbz#1359144
  - put IPv6 IP in brackets for IBFT
  Resolves: rhbz#1322592
  - install symlinked ca-bundle.crt for curl and ssl
  Resolves: rhbz#1341280


author: Harald Hoyer <harald@redhat.com> - 033-461
changelog:
  - be more liberal to multiple ip= lines and ip=dhcp
  Resolves: rhbz#1304069
  - don't display error for hba.conf
  Resolves: rhbz#1369342


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 22.0.50-0.20050406
changelog:
  - update to snapshot of current cvs 
    - configure xim support off by default
    - bootstrap snapshot


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519) 
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-2
changelog:
  - minor corrections in spec file
  - moved init script to correct location
  - correction in the init script (chkconfig directives)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-6
changelog:
  - renamed init script to fcoe, changed lock filename to fcoe
    (#497604)
  - init script modified to do condrestart properly
  - some modifications in spec file to apply previous change
    to older versions od init script during update
  - fixed issue with accepting long options (#498551)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.12-1
changelog:
  - rebased to version 1.0.12, improved functionality with lldpad
    and dcbd
  - removed /etc/fcoe/scripts/fcoeplumb


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.14-2
changelog:
  - added device-mapper-multipath to requires (#603242)
  - added missing man pages for fcrls, fcnsq and fcping
  - update of init script - added condrestart, try-restart
    and force-reload options
  - added vconfig to requires (#589608)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.0.17-1
changelog:
  - Pull in new upstream release (required to build)
  - Fix git clone URL in comments
  - Drop fcoe-utils-1.0.7-init.patch, fcoe-utils-1.0.7-init-condrestart.patch
    and fcoe-utils-1.0.8-init-LSB.patch that are now upstream
  - Drop fcoe-utils-1.0.8-includes.patch and use a copy of kernel headers
    for all architectures (rename fcoe-sparc.patch to fcoe-include-headers.patch)
    Upstream added detection to avoid inclusion of kernel headers in the build
    and it expects to find the userland headers installed. Those have not
    yet propagated in Fedora.
    Use temporary this workaround, since fcoe is a requiment for anaconda
    and it failed to build for a while
  - Drop BuildRequires on kernel-devel
  - Add BuildRequires on autoconf (it is used and not installed by default
    on all build chroots)


author: Petr Sabata <psabata@redhat.com> - 1.0.18-1
changelog:
  - 1.0.18 bump with latest bugfixes
  - Removing ExcludeArch completely; not related for Fedora
  - Buildroot cleanup


author: Petr Sabata <contyk@redhat.com> - 1.0.20-2
changelog:
  - Drop SysV support in favor of systemd (#714683)
  - Remove ancient scriptlets (pre-1.0.7 era)
  - Update quickstart.txt to reflect new changes


author: Petr Šabata <contyk@redhat.com> - 1.0.25-1
changelog:
  * Tue Aug 28 2012 Petr Šabata <contyk@redhat.com> - 1.0.24-2
  - Migrate to systemd scriptlets (#850104)


author: Petr Šabata <contyk@redhat.com> - 1.0.28-3
changelog:
  - Require just 'systemd' instead of 'systemd-units'
  - Patch the fcoemon manpage with a note for systemd users


author: Petr Šabata <contyk@redhat.com> - 1.0.29-2
changelog:
  - Bug #1024124:
  - Don't install the old configuration file alongside the new one
  - Add bnx2fc to the SUPPORTED_DRIVERS for consistency with previous configuration


author: Petr Šabata <contyk@redhat.com> - 1.0.29-5
changelog:
  - Don't build on s390x again (#1073060)
  - Drop bnx2fc from SUPPORTED_DRIVERS on s390x, for future (#1056371)
  - Update fcoemon(8) with more systemd changes (#1049162)


author: Chris Leech <cleech@redhat.com> - 1.0.30-4.git91c0c8c
changelog:
  - 1039779 replace README that contained mostly build instructions with
    README.redhat containing better distro-specific information


author: Chris Leech <cleech@redhat.com> - 1.0.31-1.git5dfd3e4
changelog:
  - 1274530 rebase to upstream 1.0.31+
  - no longer requires libhbaapi/libhbalinux
  - no longer attempts to connect to lldpad if DC_REQUIRED is configured off
    for all interfaces


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Marek Grac <mgrac@redhat.com> - 4.0.2-3
changelog:
  - fence_bladecenter: Fix telnet login failure
  - fence_brocade: Rewrite to fencing library
  - fencing_snmp: Fix 'KeyError --a'
  - fence_scsi: Fix XML metadata
  - fence_scsi: Add a documentation of "delay"
  - fence_ilo2: Unable to login when password contains "


author: Marek Grac <mgrac@redhat.com> - 4.0.2-4
changelog:
  - fence_vmware_soap: Disable cache in SUDS library to resolve SELinux problems
    Resolves: rhbz#1022528
  - fencing: Add information that operation 'unfence' should be run automatically after start of the cluster
    Resolves: rhbz#1012994
  - Aligned to upstream 4.0.4


author: Marek Grac <mgrac@redhat.com> - 4.0.2-5
changelog:
  - fence_vmware_soap: Report if user privileges are not enough for given operation
    Resolves: rhbz#1018780
  - fence_wti: Add support for named groups
    Resolves: rhbz#1022536
  - fence_rsb: Update regular expression to match newer firmware version
    Resolves: rhbz#1022538


author: Marek Grac <mgrac@redhat.com> - 4.0.2-6
changelog:
  - fencing: Ensure validity of XML metadata using Relax NG 
    Resolves: rhbz#1022529
  - fencing: Fix invalid use of options[".."]
    Resolves: rhbz#1022533
  - fence_brocade: Add fence agent
    Resolves: rhbz#1021392


author: Marek Grac <mgrac@redhat.com> - 4.0.2-8
changelog:
  - fence-agents-all now includes fence-virt which is not available everywhere
    Resolves: rhbz#1028940


author: Marek Grac <mgrac@redhat.com> - 4.0.2-10
changelog:
  - fix default action for fabric fencing agents
    Resolves: rhbz#1021392
  - modify key generation in fence_scsi to support pacemaker/corosync cluster
    Resolves: rhbz#994466


author: Marek Grac <mgrac@redhat.com> - 4.0.2-13
changelog:
  - fencing: Do not use public key if identity file is not defined
    Resolves: rhbz#1048843
  - fence_vmware_soap: Add support for --delay option
    Resolves: rhbz#1057299
  - fence_wti: Add support for named groups (also for firmware 1.43)
    Resolves: rhbz#1022536


author: Marek Grac <mgrac@redhat.com> - 4.0.2-14
changelog:
  - fence_vmware_soap: Fix unexpected exception
    Resolves: rhbz#1018780
  - nss_wrapper was replaced by gnutls-cli
    Resolves: rhbz#990539


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 4.0.2-17
changelog:
  - Fix fence-agents-* Requires on proper fence-agents-common and silence
    suds error
    Resolves: rhbz#1018780


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Marek Grac <mgrac@redhat.com> - 4.0.11-5
changelog:
  - fence_wti: Fix problem with EOL introduced by rebase
    Resolves: rhbz#1148762
  - fence_rsb: Fix issue with new firmware 
    Resolves: rhbz#1111597


author: Marek Grac <mgrac@redhat.com> - 4.0.11-6
changelog:
  - fence_cisco_ucs and fence_vmware_soap should logout even in case of failure
    Resolves: rhbz#1111599
  - fence_vmware_soap: Fix issue with import of fail_usage
    Resolves: rhbz#1153059


author: Marek Grac <mgrac@redhat.com> - 4.0.11-9
changelog:
  - fence_ilo_ssh: Fix EOL issue, syslog problem and add fence_ilo_[34]_ssh symlink
    Resolves: rhbz#1121122


author: Marek Grac <mgrac@redhat.com> - 4.0.11-11
changelog:
  - fence_ipmilan: Unset default cipher
    Resolves: rhbz#1203877
  - fence_ilo2: Add --tls1.0
    Resolves: rhbz#1199970
  - update scripts so 'make check' is working again


author: Marek Grac <mgrac@redhat.com> - 4.0.11-13
changelog:
  - fence_scsi: Add monitor operation
    Resolves: rhbz#1213571
  - fence_scsi: Force unfence if any of paths is off
    Resolves: rhbz#1214919
  - fence_cisco_ucs: Fix https:// prefix with --ssl-(in)secure
    Resolves: rhbz#1165591
  - fence_kdump: Add monitor operation
    Resolves: rhbz#1196068
  - fence2rng: Fix problem with quotes
    Resolves: rhbz#1207982


author: Marek Grac <mgrac@redhat.com> - 4.0.11-14
changelog:
  - fence_rhevm: Add authentication via cookies
    Resolves: rhbz#1145769
  - fence_ilo_moonshot: New fence agent
    Resolves: rhbz#1152917
  - fence_emerson: New fence agent
    Resolves: rhbz#1171732
  - fence_rsa: New fence agent
    Resolves: rhbz#1185329


author: Marek Grac <mgrac@redhat.com> - 4.0.11-16
changelog:
  - fence_compute: Agent cleanup
    Resolves: rhbz#1214359
  - fence_hpblade: Add support for HP Integrity Superdome
    Resolves: rhbz#1216997
  - fence_zvmip: Add --missing-as-off and change monitor/status actions
    Resolves: rhbz#1188750
  - fence_mpath: new fence agent
    Resolves: rhbz#1102727
  - fencing: Option --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-18
changelog:
  - fence_rsa: Fix login issue
    Resolves: rhbz#1185329
  - fencing: support for list-status
    Resolves: rhbz#1250586
  - fencing: Fix support for --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly

  bz1102727-3-fence_mpath.patch bz1250586-2-list_status.patch


author: Marek Grac <mgrac@redhat.com> - 4.0.11-24
changelog:
  - fence_ipmilan: Add removed attributes -i & timeout
    Resolves: rhbz#1257137
  - fence_ipmilan: Do not print password in verbose mode
    Resolves: rhbz#1241648
  - fence_ilo: Negotiation of TLS1.0 is more automatic
    Resolves: rhbz#1256908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-34
changelog:
  - fence_virsh: add --missing-as-off
    Resolves: rhbz#1254821
  - fence_ipmilan: fix power_wait regression
    Resolves: rhbz#1275250
  - fence_ipmilan: add diag action
    Resolves: rhbz#1286045
  - fence_ipmilan: warn that cycle method can report success before node
    is powered off
    Resolves: rhbz#1271780
  - fence_scsi: fix persistentl typo in short desc
    Resolves: rhbz#1280139
  - fence_scsi: remove /dev/dm-X reference
    Resolves: rhbz#1280151
  - fence_rhevm: add Filter header
    Resolves: rhbz#1287059
  - fence_amt_ws: new fence agent
    Resolves: rhbz#1296201
  - fence_compute: fix to locate all instances to be evacuated
   Resolves: rhbz#1313561


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Thomas Woerner <twoerner@redhat.com> 0.1.1-1
changelog:
  - new version 0.1.1
  - fixed source path in POTFILES*
  - added missing firewall_config.py.in
  - added misssing space for spec_ver line
  - using firewall_config.VARLOGFILE
  - added date to logging output
  - also log fatal and error logs to stderr and firewall_config.VARLOGFILE
  - make log message for active_firewalld fatal


author: Thomas Woerner <twoerner@redhat.com> 0.1.2-1
changelog:
  - fixed package according to package review (rhbz#665395):
    - non executable scripts: dropped shebang
    - using newer GPL license file
    - made /etc/dbus-1/system.d/FirewallD.conf config(noreplace)
    - added requires(post) and (pre) for chkconfig


author: Thomas Woerner <twoerner@redhat.com> 0.1.3-1
changelog:
  - new version 0.1.3
  - restore all firewall features for reload: panic and virt rules and chains
  - string fixes for firewall-cmd man page (by Jiri Popelka)
  - fixed firewall-cmd port list (by Jiri Popelka)
  - added firewall dbus client connect check to firewall-cmd (by Jiri Popelka)
  - translation updates: de, es, gu, it, ja, kn, ml, nl, or, pa, pl, ru, ta,
                         uk, zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-1
changelog:
  - version 0.2.0 with new FirewallD1 D-BUS interface
  - supports zones with a default zone
  - new direct interface as a replacement of the partial virt interface with 
    additional passthrough functionality
  - dropped custom rules, use direct interface instead
  - dropped trusted interface funcionality, use trusted zone instead
  - using zone, service and icmptype configuration files
  - not using any system-config-firewall parts anymore


author: Thomas Woerner <twoerner@redhat.com> 0.2.0-2
changelog:
  - added glib2-devel to build requires, needed for gsettings.m4
  - added --with-system-unitdir arg to fix installaiton of system file
  - added glib-compile-schemas calls for postun and posttrans
  - added EXTRA_DIST file lists


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)


author: Thomas Woerner <twoerner@redhat.com> 0.2.2-1
changelog:
  - enabled dhcpv6-client service for zones home and work
  - new dhcpv6-client service
  - firewall-cmd: query mode returns reversed values
  - new zone.changeZone(zone, interface)
  - moved zones, services and icmptypes to /usr/lib/firewalld, can be overloaded
    by files in /etc/firewalld (no overload of immutable zones block, drop,
    trusted)
  - reset MinimalMark in firewalld.cnf to default value
  - fixed service destination (addresses not used)
  - fix xmlplus to be compatible with the python xml sax parser and python 3
    by adding __contains__ to xml.sax.xmlreader.AttributesImpl
  - use icon and glib related post, postun and posttrans scriptes for firewall
  - firewall-cmd: fix typo in state
  - firewall-cmd: fix usage()
  - firewall-cmd: fix interface action description in usage()
  - client.py: fix definition of queryInterface()
  - client.py: fix typo in getInterfaces()
  - firewalld.service: do not fork
  - firewall-cmd: fix bug in --list=port and --port action help message
  - firewall-cmd: fix bug in --list=service


author: Thomas Woerner <twoerner@redhat.com> 0.2.3-1
changelog:
  - firewall-cmd: several changes and fixes
  - code cleanup
  - fixed icmp protocol used for ipv6 (rhbz#801182)
  - added and fixed some comments
  - properly restore zone settings, timeout is always set, check for 0
  - some FirewallError exceptions were actually not raised
  - do not REJECT in each zone
  - removeInterface() don't require zone
  - new tests in firewall-test script
  - dbus_to_python() was ignoring certain values
  - added functions for the direct interface: chains, rules, passthrough
  - fixed inconsistent data after reload
  - some fixes for the direct interface: priority positions are bound to ipv,
    table and chain
  - added support for direct interface in firewall-cmd:
  - added isImmutable(zone) to zone D-Bus interface
  - renamed policy file
  - enhancements for error messages, enables output for direct.passthrough
  - added allow_any to firewald policies, using at leas auth_admin for policies
  - replaced ENABLE_FAILED, DISABLE_FAILED, ADD_FAILED and REMOVE_FAILED by
    COMMAND_FAILED, resorted error codes
  - new firewalld configuration setting CleanupOnExit
  - enabled polkit again, found a fix for property problem with slip.dbus.service
  - added dhcpv6-client to 'public' (the default) and to 'internal' zones.
  - fixed missing settings form zone config files in
    "firewall-cmd --list=all --zone=<zone>" call
  - added list functions for services and icmptypes, added --list=services and
    --list=icmptypes to firewall-cmd


author: Thomas Woerner <twoerner@redhat.com> 0.2.5-1
changelog:
  - Fixed traceback in firewall-cmd for failed or canceled authorization, 
    return proper error codes, new error codes NOT_RUNNING and NOT_AUTHORIZED
  - Enhanced firewalld service file (RHBZ#806868) and (RHBZ#811240)
  - Fixed duplicates in zone after reload, enabled timed settings after reload
  - Removed conntrack --ctstate INVALID check from default ruleset, because it
    results in ICMP problems (RHBZ#806017).
  - Update interfaces in default zone after reload (rhbz#804814)
  - New man pages for firewalld(1), firewalld.conf(5), firewalld.icmptype(5),
    firewalld.service(5) and firewalld.zone(5), updated firewall-cmd man page
    (RHBZ#811257)
  - Fixed firewall-cmd help output
  - Fixed missing icon for firewall-applet (RHBZ#808759)
  - Added root user check for firewalld (RHBZ#767654)
  - Fixed requirements of firewall-applet sub package (RHBZ#808746)
  - Update interfaces in default zone after changing of default zone (RHBZ#804814)
  - Start firewalld before NetworkManager (RHBZ#811240)
  - Add Type=dbus and BusName to service file (RHBZ#811240)


author: Thomas Woerner <twoerner@redhat.com> 0.2.6-1
changelog:
  - New D-BUS interface for persistent configuration
  - Aded support for persistent zone configuration in firewall-cmd
  - New Shields Up feature in firewall-applet
  - New requirements for python-decorator and pygobject3
  - New firewall-config sub-package
  - New firewall-convert-scfw-config config script


author: Thomas Woerner <twoerner@redhat.com> 0.2.8-1
changelog:
  - Do not apply old settings to zones after reload
  - FirewallClient: Added callback structure for firewalld signals
  - New firewall-config with full zone, service and icmptype support
  - Added Shields Up/Down configuration dialog to firewall-applet
  - Name attribute of main tag deprecated for zones, services and icmptypes,
    will be ignored if present
  - Fixed wrong references in firewalld man page
  - Unregister DBus interfaces after sending out the Removed signal
  - Use proper DBus signature in addIcmpType, addService and addZone
  - New builtin property for config interfaces
  - New test case for Config interface
  - spec: use new systemd-rpm macros (rhbz#850110)
  - More config file verifications
  - Lots of smaller fixes and enhancements


author: Thomas Woerner <twoerner@redhat.com> 0.2.9-1
changelog:
  - firewall-config: some UI usability changes
  - firewall-cmd: New option --list-all-zones, output of --list-all changed,
    more option combination checks
  - firewall-applet: Replaced NMClient by direct DBUS calls to fix python core
    dumps in case of connection activates/deactivates
  - Use fallback 'C' locale if current locale isn't supported (RHBZ#860278)
  - Add interfaces to zones again after reload
  - firewall-cmd: use FirewallClient().connected value
  - firewall-cmd: --remove-interface was not working due to a typo
  - Do not use restorecon for new and backup files
  - Fixed use of properties REJECT and DROP
  - firewalld_test.py: check interfaces after reload
  - Translation updates
  - Renamed firewall-convert-scfw-config to firewall-offline-cmd, used by
    anaconda for firewall configuration (e.g. kickstart)
  - Fix python shebang to use -Es at installation time for bin_SCRIPTS and
    sbin_SCRIPTS and at all times in gtk3_chooserbutton.py
  - tests/firewalld_config.py: update test_zones() test case
  - Config interface: improve renaming of zones/services/icmp_types
  - Move emiting of Added signals closer to source.
  - FirewallClient(): config:ServiceAdded signal was wrongly mapped
  - Add argument 'name' to Removed signal
  - firewall-config: Add callbacks for config:[service|icmp]-[added|removed]
  - firewall-config: catch INVALID_X error when removing zone/service/icmp_type
  - firewall-config: remove unused code
  - Revert "Neutralize _xmlplus instead of conforming it"
  - firewall-applet: some UI usability changes
  - firewall-cmd: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings


author: Thomas Woerner <twoerner@redhat.com> 0.2.10-1
changelog:
  - tests/firewalld_config.py: tests for config.service and config.icmptype
  - FirewallClientConfigServiceSettings(): destinations are dict not list
  - service/zone/icmptype: do not write deprecated name attribute
  - New service ntp
  - firewall-config: Fixed name of about dialog
  - configure.in: Fixed getting of error codes
  - Added coding to all pyhton files
  - Fixed copyright years
  - Beautified file headers
  - Force use of pygobject3 in python-slip (RHBZ#874378)
  - Log: firewall.server.config_icmptype, firewall.server.config_service and
    firewall.server.config_zone: Prepend full path
  - Allow ":" in interface names for interface aliases
  - Add name argument to Updated and Renamed signal
  - Disable IPv4, IPv6 and EB tables if missing - for IPv4/IPv6 only environments
  - firewall-config.glade file cleanup
  - firewall-config: loadDefaults() can throw exception
  - Use toolbars for Add/Edit/Remove/LoadDefaults buttons for zones, services
    and icmp types
  - New vnc-server service, opens ports for displays :0 to :3 (RHBZ#877035)
  - firewall-cmd: Fix typo in help output, allow default zone usage for
    permanenent options
  - Translation updates: cs, fr, ja, pt_BR and zh_CN


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-1
changelog:
  - Fixed more _xmlplus (PyXML) incompatibilities to python xml
  - Several man page updates
  - Fixed error in addForwardPort, removeForwardPort and queryForwardPort
  - firewall-cmd: use already existing queryForwardPort()
  - Update firewall.cmd man page, use man page as firewall-cmd usage (rhbz#876394)
  - firewall-config: Do not force to show labels in the main toolbar
  - firewall-config: Dropped "Change default zone" from toolbar
  - firewall-config: Added menu entry to change zones of connections
  - firewall-applet: Zones can be changed now using nm-connection-editor
    (rhbz#876661)
  - translation updates: cs, hu, ja


author: Thomas Woerner <twoerner@redhat.com> 0.2.11-2
changelog:
  - require pygobject3-base instead of pygobject3 (no cairo needed) (RHBZ#874378)
  - fixed dependencies of firewall-config to use gtk3 with pygobject3-base and 
    not pygtk2


author: Thomas Woerner <twoerner@redhat.com> 0.2.12-1
changelog:
  - firewall-cmd: use -V instead of -v for version info (RHBZ#886477)
  - firewall-cmd: don't check reload()'s return value (RHBZ#886461)
  - actually install firewalld.zones.5
  - firewall-config: treat exceptions when adding new zone/service/icmp
    (RHBZ#886602)
  - firewalld.spec: Fixed requirements of firewall-config to use gtk2 and
    pygobject3
  - Fail gracefully when running in non X environment.(RHBZ#886551)
  - offline-cmd: fail gracefully when no s-c-f config
  - fix duplicated iptables rules (RHBZ#886515)
  - detect errors and duplicates in config file (RHBZ#886581)
  - firewall-config: don't make 'Edit Service' and 'Edit ICMP Type' insensitive
  - firewalld.spec: fixed requirements, require pygobject3-base
  - frewall-applet: Unused code cleanup
  - firewall-applet: several usability fixes and enhancements
    (RHBZ#886531) (RHBZ#886534)
  - firewall/server/server.py: fixed KeyboardInterrupt message (RHBZ#886558)
  - Moved fallback zone and minimal_mark to firewall.config.__init__
  - Do not raise ZONE_ALREADY_SET in change_zone if old zone is set again
    (RHBZ#886432)
  - Make default zone default for all unset connections/interfaces
    (RHBZ#888288) (RHBZ#882736)
  - firewall-config: Use Gtk.MessageType.WARNING for warning dialog
  - firewall-config: Handle unknown services and icmptypes in persistent mode
  - firewall-config: Do not load settings more than once
  - firewall-config: UI cleanup and fixes (RHBZ#888242)
  - firewall-cmd: created alias --change-zone for --change-interface
  - firewall-cmd man page updates (RHBZ#806511)
  - Merged branch 'build-cleanups'
  - dropped call to autogen.sh in build stage, not needed anymore due to 
    'build-cleanups' merge


author: Jiri Popelka <jpopelka@redhat.com> - 0.2.12-2
changelog:
  - Default zone in firewalld.conf was reseted with every restart (RHBZ#902845)
  - Add icon cache related scriptlets for firewall-config (RHBZ#902680)
  - Fix typo in firewall-config (RHBZ#895812)
  - Fix few mistakes in firewall-cmd(1) man page


author: Thomas Woerner <twoerner@redhat.com> 0.3.0-1
changelog:
  - Added rich language support
  - Added lockdown feature
  - Allow to bind interfaces and sources to zones permanently
  - Enabled IPv6 NAT support
    masquerading and port/packet forwarding for IPv6 only with rich language
  - Handle polkit errors in client class and firewall-config
  - Added priority description for --direct --add-rule in firewall-cmd man page
  - Add XML Schemas for zones/services/icmptypes XMLs
  - Don't keep file descriptors open when forking
  - Introduce --nopid option for firewalld
  - New FORWARD_IN_ZONES and FORWARD_OUT_ZONES chains (RHBZ#912782)
  - Update cluster-suite service (RHBZ#885257)
  - firewall-cmd: rename --enable/disable-panic to --panic-on/off (RHBZ#874912)
  - Fix interaction problem of changed event of gtk combobox with polkit-kde
    by processing all remaining events (RHBZ#915892)
  - Stop default zone rules being applied to all zones (RHBZ#912782)
  - Firewall.start(): don't call set_default_zone()
  - Add wiki's URL to firewalld(1) and firewall-cmd(1) man pages
  - firewalld-cmd: make --state verbose (RHBZ#886484)
  - improve firewalld --help (RHBZ#910492)
  - firewall-cmd: --add/remove-* can be used multiple times (RHBZ#879834)
  - Continue loading zone in case of wrong service/port etc. (RHBZ#909466)
  - Check also services and icmptypes in Zone() (RHBZ#909466)
  - Increase the maximum length of the port forwarding fields from 5 to 11 in
    firewall-config
  - firewall-cmd: add usage to fail message
  - firewall-cmd: redefine usage to point to man page
  - firewall-cmd: fix visible problems with arg. parsing
  - Use argparse module for parsing command line options and arguments
  - firewall-cmd.1: better clarify where to find ACTIONs
  - firewall-cmd Bash completion
  - firewall-cmd.1: comment --zone=<zone> usage and move some options
  - Use zone's target only in %s_ZONES chains
  - default zone in firewalld.conf was set to public with every restart (#902845)
  - man page cleanup
  - code cleanup


author: Thomas Woerner <twoerner@redhat.com> 0.3.1-1
changelog:
  - Use explicit file lists for make dist
  - New rich rule validation check code
  - New global check_port and check_address functions
  - Allow source white and black listing with the rich rule
  - Fix error handling in case of unsupported family in rich rule
  - Enable ip_forwarding in masquerade and forward-port
  - New functions to read and write simple files using filename and content
  - Add --enable-sysconfig to install Fedora-specific sysconfig config file.
  - Add chains for security table (RHBZ#927015)
  - firewalld.spec: no need to specify --with-systemd-unitdir
  - firewalld.service: remove syslog.target and dbus.target
  - firewalld.service: replace hard-coded paths
  - Move bash-completion to new location.
  - Revert "Added configure for new build env"
  - Revert "Added Makefile.in files"
  - Revert "Added po/Makefile.in.in"
  - Revert "Added po/LINGUAS"
  - Revert "Added aclocal.m4"
  - Amend zone XML Schema


