# changelog

author: Lubomir Rintel <lkundrak@v3.sk> - 1.10.2-1
changelog:
  - Update to 1.10.2 release (rh #1543498)
  - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)


author: Dan Williams <dcbw@redhat.com> 0.2-4
changelog:
  - Update from CVS
  - Improvements:
  	o Better link checking on wireless cards
  	o Panel applet now a Notification Area icon
  	o Static IP configuration support


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041029
changelog:
  - #rh134893# NetworkManagerInfo and the panel-icon life-cycle
  - #rh134895# Status icon should hide when in Wired-only mode
  - #rh134896# Icon code needs rewrite
  - #rh134897# "Other Networks..." dialog needs implementing
  - #rh135055# Menu highlights incorrectly in NM
  - #rh135648# segfault with cipsec0
  - #rh135722# NetworkManager will not allow zaurus to sync via usb0
  - #rh135999# NetworkManager-0.3.1 will not connect to 128 wep
  - #rh136866# applet needs tooltips
  - #rh137047# lots of applets, yay!
  - #rh137341# Network Manager dies after disconnecting from wired network second time
  - Better checking for wireless devices
  - Fix some memleaks
  - Fix issues with dhclient declining an offered address
  - Fix an activation thread deadlock
  - More accurately detect "Other wireless networks" that are encrypted
  - Don't bring devices down as much, won't hotplug-spam as much anymore
  	about firmware
  - Add a "network not found" dialog when the user chooses a network that could
  	not be connected to


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041115
changelog:
  - Update to CVS
  - Much better link detection, works with Open System authentication
  - Blacklist wireless cards rather than whitelisting them


author: <dcbw@redhat.com> - 0.3.2-3.cvs20041117
changelog:
  - Update to CVS
  - Fixes to link detection
  - Better detection of non-ESSID-broadcasting access points
  - Don't dialog-spam the user if a connection fails


author: <dcbw@redhat.com> - 0.3.2-4.3.cvs20041208
changelog:
  - Update to CVS
  - Updates to link detection, DHCP code
  - Remove NMLaunchHelper so we start up faster and don't
  	block for a connection.  This means services that depend
  	on the network may fail if they start right after NM
  - Make sure DHCP renew/rebinding works


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050112
changelog:
  - Update to latest CVS
  - Fixes to DHCP code
  - Link-Local (ZeroConf/Rendezvous) support
  - Use bind in "caching-nameserver" mode to work around stupidity
  	in glibc's resolver library not recognizing resolv.conf changes
  - #rh144818# Clean up the specfile (Patch from Matthias Saou)
  - Ad-Hoc mode support with Link-Local addressing only (for now)
  - Fixes for device activation race conditions
  - Wireless scanning in separate thread


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050118
changelog:
  - Fix issue where NM wouldn't recognize that access points were
  	encrypted, and then would try to connect without encryption
  - Refine packaging to put client library in separate package
  - Remove bind+caching-nameserver dep for FC-3, use 'nscd -i hosts'
  	instead.  DNS queries may timeout now right after device
  	activation due to this change.


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050124
changelog:
  - Update to latest CVS
  - Make sure we start as late as possible so that we ensure dbus & HAL
  	are already around
  - Fix race in initial device activation


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050202
changelog:
  - Display wireless network name in applet tooltip
  - Hopefully fix double-default-route problem
  - Write out valid resolv.conf when we exit
  - Make multi-domain search options work
  - Rework signal strength code to be WEXT conformant, if strength is
  	still wierd then its 95% surely a driver problem
  - Fix annoying instances of suddenly dropping and reactivating a
  	wireless device (Cisco cards were worst offenders here)
  - Fix some instances of NetworkManager not remembering your WEP key
  - Fix some races between NetworkManager and NetworkManagerInfo where
  	NetworkManager wouldn't recognize changes in the allowed list
  - Don't shove Ad-Hoc Access Point MAC addresses into GConf


author: Dan Williams <dcbw@redhat.com> 0.3.3-2.cvs20050214
changelog:
  - Never automatically choose a device that doesn't support carrier detection
  - Add right-click menu to applet, can now "Pause/Resume" scanning through it
  - Fix DHCP Renew/Rebind timeouts
  - Fix frequency cycling problem on some cards, even when scanning was off
  - Play better with IPv6
  - Don't send kernel version in DHCP packets, and ensure DHCP packets are at
  	least 300 bytes in length to work around broken router
  - New DHCP options D-BUS API by Dan Reed
  - Handle multiple domain search options in DHCP responses


author: Dan Williams <dcbw@redhat.com> - 0.4-9.cvs20050404
changelog:
  - Fix some memory leaks (Tom Parker)
  - Join to threads rather than spinning for their completion (Tom Parker)
  - Fix misuse of a g_assert() (Colin Walters)
  - Fix return checking of an ioctl() (Bill Moss)
  - Better detection and matching of hidden access points (Bill Moss)
  - Don't use varargs, and therefore don't crash on PPC (Peter Jones)


author: Dan Williams <dcbw@redhat.com> - 0.4-12.cvs20050404
changelog:
  - Enable OK button correctly in Passphrase and Other Networks dialogs when
  	using ASCII or Hex WEP keys


author: Dan Williams <dcbw@redhat.com> - 0.4-31.cvs20050616
changelog:
  - Update to latest CVS
  	o Clean up wording in Wireless Network Discovery menu
  	o Robert Love's applet beautify patch


author: Dan Williams <dcbw@redhat.com> - 0.4-32.cvs20050617
changelog:
  - Update to latest CVS
  	o VPN connection import/export capability
  	o Fix up some menu item names
  - Move nm-vpn-properties.glade to the gnome subpackage


author: David Zeuthen <davidz@redhat.com> - 0.4-33.cvs20050629
changelog:
  - Update to latest CVS to get latest VPN interface settings to satisfy
    BuildReq for NetworkManager-vpnc in Fedora Extras Development
  - Latest CVS also contains various bug- and UI-fixes


author: Dan Williams <dcbw@redhat.com> - 0.4-35.cvs20050811
changelog:
  - Update to latest CVS
  	o Use DHCP server address as gateway address if the DHCP server doesn't give
  		us a gateway address #rh165698#
  	o Fixes to the applet (Robert Love)
  	o Better caching of information in the applet (Bill Moss)
  	o Generate automatic suggested Ad-Hoc network name from machine's hostname
  		(Robert Love)
  	o Update all network information on successfull connect, not just
  		authentication method


author: Dan Williams <dcbw@redhat.com> - 0.4.1-4.cvs20051009
changelog:
  - Update to latest CVS
  	o Integrate connection progress with applet icon (Chris Aillon)
  	o More information in "Connection Information" dialog (Robert Love)
  	o Shorten time taken to sleep
  	o Make applet icon wireless strength levels a bit more realistic
  	o Talk to named using DBUS rather than spawning our own
  		- You need to add "-D" to the OPTIONS line in /etc/sysconfig/named
  		- You need to set named to start as a service on startup


author: Dan Williams <dcbw@redaht.com> - 0.4.1-5.cvs20051010
changelog:
  - Fix automatic wireless connections
  - Remove usage of NMLoadModules callout, no longer needed
  - Try to fix deadlock when menu is down and keyring dialog pops up


author: Christopher Aillon <caillon@redhat.com> - 0.5.1-3
changelog:
  - Split out the -glib subpackage to have a -glib-devel package as well
  - Add epoch to version requirements for bind and wireless-tools
  - Update URL of project


author: Dan Williams <dcbw@redhat.com> 0.5.1-8.cvs20060131
changelog:
  - Switch to autostarting the applet instead of having it be session-managed
  - Work better with non-broadcasting access points
  - Add more manufacturer default SSIDs to the blacklist


author: Dan Williams <dcbw@redhat.com> 0.5.1-10.cvs20060205
changelog:
  - Workarounds for madwifi/Atheros cards
  - Do better with non-SSID-broadcasting access points
  - Fix hangs when access points change settings


author: Dan Williams <dcbw@redhat.com> 0.5.1-13.cvs20060221
changelog:
  - Add BuildRequires: libnl-devel (#rh179438#)
  - Fix libnm_glib to not clobber an application's existing dbus connection
  	(#rh177546#, gnome.org #326572)
  - libnotify support
  - AP compatibility fixes


author: Dan Williams <dcbw@redhat.com> 0.5.1-18.cvs20060301
changelog:
  - Fix VPN-related crash
  - Fix issue where NM would refuse to activate a VPN connection once it had timed out
  - Log wpa_supplicant output for better debugging


author: Dan Williams <dcbw@redhat.com> - 0.6.2-1
changelog:
  - Update to 0.6.2:
  	* Fix various WPA-related bugs
  	* Clean up leaks
  	* Increased DHCP timeout to account for slow DHCP servers, or STP-enabled
  		switches
  	* Allow applet to reconnect on dbus restarts
  	* Add "Dynamic WEP" support
  	* Allow hiding of password/key entry text
  	* More responsive connection switching


author: Jeremy Katz <katzj@redhat.com> - 0.6.2-2.fc6
changelog:
  - use the hal device type instead of poking via ioctl so that wireless
    devices are properly detected even if the kill switch has been used


author: Bill Nottingham <notting@redhat.com> - 0.6.2-3.fc6
changelog:
  - use the same 0.6.2 tarball as FC5, so we have the same VPN interface
    (did he fire ten args, or only nine?)


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060521
changelog:
  - Update to latest CVS
  - Drop special-case-madwifi.patch, since WEXT code is in madwifi-ng trunk now


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060529
changelog:
  - Update to latest CVS
  	o Gnome.org #333420: dialog do not have window icons
  	o Gnome.org #336913: HIG tweaks for vpn properties pages
  	o Gnome.org #336846: HIG tweaks for nm-vpn-properties
  	o Gnome.org #336847: some bugs in nm-vpn-properties args parsing
  	o Gnome.org #341306: nm-vpn-properties crashes on startup
  	o Gnome.org #341263: Version 0.6.2-0ubuntu5 crashes on nm_device_802_11_wireless_get_type
  	o Gnome.org #341297: displays repeated keyring dialogs on resume from suspend
  	o Gnome.org #342400: Building libnm-util --without-gcrypt results in linker error
  	o Gnome.org #342398: Eleminate Gnome dependency for NetworkManager
  	o Gnome.org #336532: declaration of 'link' shadows a global declaration
  - Specfile fixes (#rh187489#)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-2
changelog:
  - Revert FC6 to latest stable NM
  - Update to stable snapshot
  - Remove bind/caching-nameserver hard requirement


author: Dan Williams <dcbw@redhat.com> - 1:0.6.5-0.cvs20061025
changelog:
  - Update to a stable branch snapshot
      - Gnome applet timeout/redraw suppression when idle
      - Backport of LEAP patch from HEAD (from Thiago Bauermann)
      - Backport of asynchronous scanning patch from HEAD
      - Make renaming of VPN connections work (from Tambet Ingo)
      - Dial down wpa_supplicant debug spew
      - Cleanup of key/passphrase request scenarios (from Valentine Sinitsyn)
      - Shut down VPN connections on logout (from Robert Love)
      - Fix WPA passphrase hashing on PPC


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Own the /etc/NetworkManager/dispatcher.d directory
  - Require pkgconfig for the -devel packages
  - Fix compilation with dbus 1.0


author: Dan Williams <dcbw@redhat.com> - 1:0.6.5-0.7.svn2547
changelog:
  - Update from trunk
  	* Updated translations
  	* Cleaned-up VPN properties dialogs
  	* Fix 64-bit kernel leakage issues in WEXT
  	* Don't capture and redirect wpa_supplicant log output


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-4
changelog:
  - Fix ethernet link detection (gnome #354565, rh #194124)
  - Fix perpetual credentials request with private key passwords in the applet
  - Sleep a bit before activating wireless cards to work around driver bugs


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-5
changelog:
  - Fix applet crash on 64-bit platforms when choosing
      "Connect to other wireless network..." (gnome.org #435036)
  - Add debug output for ethernet device link changes


author: Dan Williams <dcbw@redhat.com> 1:0.6.5-6
changelog:
  - Update to stable branch snapshot:
      - More fixes for ethernet link detection (gnome #354565, rh #194124)
      - Support for HAL-detected rfkill switches


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2880
changelog:
  - New snapshot
  	- Fix applet icon sizing on start (mclasen)
  	- Fix nm-tool installation (mclasen)
  	- Fix 'state' method call return (#303271)
  	- Fix 40-bit WEP keys (again)
  	- Fix loop when secrets were wrong/invalid
  	- Fix applet crash when clicking Cancel in the password dialog
  	- Ensure NM doesn't get stuck waiting for the supplicant to re-appear
  		if it crashes or goes away
  	- Make VPN properties applet work again
  	- Increase timeout for network password entry


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2886
changelog:
  - New snapshot
  	- Make wired device carrier state work in the applet
  	- Fix handling of errors with unencrypted APs
  	- Fix "frozen" applet icon by reporting NM state better
  	- Fix output of AP frequency in nm-tool


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2914
changelog:
  - New snapshot
  	- Add WPA passphrase support to password dialog
  	- Applet now reflects actual VPN behavior of one active connection
  	- Applet now notices VPN active connections on startup
  	- Fix connections with some WPA and WEP keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2961
changelog:
  - New snapshot
  	- Add timestamps to networks to connect to last used wireless network
  	- Turn autoconnect on in the applet
  	- Hidden SSID support
  	- Invalidate failed or cancelled connections again
  	- Fix issues with reactivation of the same device
  	- Handle connection updates in the applet (ex. find new VPN connections)
  	- Fix vertical sizing of menu items
  	- Fix AP list on wireless devices other than the first device in the applet
  	- Fix matching of current AP with the right menu item


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2962
changelog:
  - Fix merging of non-SSID-broadcasting APs into a device's scan list
  - Speed up opening of the applet menu


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2970
changelog:
  - Fix segfault with deferred connections
  - Fix default username with vpnc VPN plugin
  - Hidden SSID fixes


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn2994
changelog:
  - Re-enable "Connect to other network"
  - Switch to new GUI bits for wireless security config and password entry


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3008
changelog:
  - Make WPA-EAP and Dynamic WEP options connect successfully
  - Static IPs are now handled correctly in NM itself


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3014
changelog:
  - Suppress excessive GConf updates which sometimes caused secrets to be cleared
      at the wrong times, causing connections to fail
  - Various EAP and LEAP related fixes


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.3.svn3016
changelog:
  - Fix getting current access point
  - Fix WPA Enterprise connections
  - Wireless dialog now defaults to sensible choices based on the connection
  - Tell nscd to restart if needed, don't silently kill it


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.4.svn3020
changelog:
  - Handle PEM certificates
  - Hide WPA-PSK Type combo since it's as yet unused
  - Fix applet crash when AP security options changed and old secrets are still
      in the keyring
  - Fix applet crash connecting to unencrypted APs via the other network dialog


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.4.svn3030
changelog:
  - Bring up ethernet devices by default if no connections are defined (rh #339201)
  - Fix crash when switching networks or bringing up secrets dialog (rh #353091)
  - Fix crash when editing VPN connection properties a second time
  - Fix crash when cancelling the secrets dialog if another connection was
      activated in the mean time
  - Fix disembodied notification bubbles (rh #333391)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.6.2.svn3080
changelog:
  - Clarify naming of WPA & WPA2 Personal encryption options (rh #374861, rh #373831)
  - Don't require a CA certificate for applicable EAP methods (rh #359001)
  - Fix certificate and private key handling for EAP-TTLS and EAP-TLS (rh #323371)
  - Fix applet crash with USB devices (rh #337191)
  - Support upgrades from NM 0.6.x GConf settings


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.6.3.svn3096
changelog:
  - Fix connections when picking a WPA Enterprise AP from the menu
  - Fix issue where applet would provide multiple same connections to NM


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3133
changelog:
  - Fix applet crash when choosing to ignore the CA certificate (rh #359001)
  - Fix applet crash when editing VPN properties and VPN connection failures (rh #409351)
  - Add file filter name in certificate file picker dialog (rh #410201)
  - No longer start named when starting NM (rh #381571)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3138
changelog:
  - Fix applet connection comparison which failed to send connection updated
      signals to NM in some cases
  - Make VPN connection applet more robust against plugin failures


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3235
changelog:
  - Fix crash when activating a mobile broadband connection
  - Better handling of non-SSID-broadcasting APs on kernels that support it
      (gnome.org #464215) (rh #373841)
  - Honor DHCP-server provided MTU if present (gnome.org #332953)
  - Use previous DNS settings if the VPN concentrator doesn't provide any
      (gnome.org #346833)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3261
changelog:
  - Add CDMA mobile broadband support (if supported by HAL)
  - Rework applet connection and icon handling
  - Enable connection editor (only for deleting connections)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3302
changelog:
  - Enable system settings service
  - Allow explicit disconnection of mobile broadband devices
  - Fix applet memory leaks (rh #430178)
  - Applet Connection Information dialog tweaks (gnome.org #505899)
  - Filter input characters to passphrase/key entry (gnome.org #332951)
  - Fix applet focus stealing prevention behavior


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3370
changelog:
  - Fix crash of nm-system-settings on malformed ifcfg files (rh #434919)
  - Require gnome-icon-theme to pick up lock.png (rh #435344)
  - Fix applet segfault after connection removal via connection editor or GConf


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.8.svn3417
changelog:
  - Honor DHCP rebinds
  - Multiple active device support
  - Better error handling of mobile broadband connection failures
  - Allow use of interface-specific dhclient config files
  - Recognize system settings which have no TYPE item


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3472
changelog:
  - Fix crashes on suspend/resume and exit (rh #437426)
  - Ensure there's always an option to chose the wired device
  - Never set default route via an IPv4 link-local addressed device (rh #437338)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3521
changelog:
  - Show VPN failures
  - Support Static WEP key indexes
  - Fix parsing of WEP keys from ifcfg files
  - Pre-fill wireless security UI bits in connection editor and applet


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3547
changelog:
  - Fix WEP key index handling in UI
  - Fix handling of NM_CONTROLLED in ifcfg files
  - Show device managed state in applet menu
  - Show wireless enabled state in applet menu
  - Better handling of default DHCP connections for wired devices
  - Fix loading of connection editor on KDE (rh #435344)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.1.svn3566
changelog:
  - Turn on Add/Edit in the connection editor
  - Don't flush or change IPv6 addresses or routes
  - Enhance nm-online tool
  - Some serial communication fixes for mobile broadband


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3578
changelog:
  - Add dbus-glib-devel BuildRequires for NetworkManager-glib-devel (rh #442978)
  - Add PPP settings page to connection editor
  - Fix a few crashes with PPPoE
  - Fix active connection state changes that confused clients


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3590
changelog:
  - Don't select devices without a default gateway as the default route (rh #437338)
  - Fill in broadcast address if not specified (rh #443474)
  - Respect manual VPN IPv4 configuration options
  - Show Connection Information for the device with the default route only


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3614
changelog:
  - Don't ask for wireless keys when the driver sends disconnect events during
  	association; wait until the entire assocation times out
  - Replace dispatcher daemon with D-Bus activated callout
  - Fix parsing of DNS2 and DNS3 ifcfg file items
  - Execute dispatcher scripts in alphabetical order
  - Be active at runlevel 2
  - Hook up MAC address widgets for wired & wireless; and BSSID widget for wireless
  - Pre-populate anonymous identity and phase2 widgets correctly
  - Clear out unused connection keys from GConf


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3619
changelog:
  - Fix device initialization race that caused ethernet devices to get stuck on
      startup
  - Fix PPPoE connections not showing up in the applet
  - Fix disabled OK button in connection editor some wireless and IP4 settings
  - Don't exit if HAL isn't up yet; wait for it
  - Fix a suspend/resume crash


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.2.svn3622
changelog:
  - Guess WEP key type in applet when asking for new keys
  - Correct OK button sensitivity in applet when asking for new WEP keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3665
changelog:
  - Fix issues with the Fedora plugin not noticing changes made by
      system-config-network (rh #444502)
  - Allow autoconnection of GSM and CDMA connections
  - Multiple IP address support for user connections
  - Fixes for Mobile Broadband cards that return line speed on connect
  - Implement PIN entry for GSM mobile broadband connections
  - Fix crash when editing unencrypted WiFi connections in the connection editor


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3667
changelog:
  - Restore behavior of marking wifi devices as "down" when disabling wireless
  - Fix a crash on resume when a VPN was active when going to sleep


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.3.svn3675
changelog:
  - Read global gateway from /etc/sysconfig/network if missing (rh #446527)
  - nm-system-settings now terminates when dbus goes away (rh #444976)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.9.4.svn3675
changelog:
  - Move NM later in the shutdown process (rh #449070)
  - Move libnm-util into a subpackage to allow NM to be removed more easily (rh #351101)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.10.svn3801
changelog:
  - Move VPN configuration into connection editor
  - Fix mobile broadband username/password issues
  - Fix issues with broken rfkill setups (rh #448889)
  - Honor APN setting for GSM mobile broadband configurations
  - Fix adding CDMA connections in the connection editor


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3830
changelog:
  - Expose server-returned DHCP options via D-Bus
  - Use avahi-autoipd rather than old built-in IPv4LL implementation
  - Send hostname to DHCP server if provided (DHCP_HOSTNAME ifcfg option)
  - Support sending DHCP Client Identifier to DHCP server
  - Allow forcing 802.1x PEAP Label to '0'
  - Make connection sharing more robust
  - Show status for shared and Ad-Hoc connections if no other connection is active


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3846
changelog:
  - Convert stored IPv4 static IP addresses to new prefix-based scheme automatically
  - Fix pppd connections to some 3G providers (rh #455348)
  - Make PPPoE "Show Password" option work
  - Hide IPv4 config options that don't make sense in certain configurations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn3927
changelog:
  - Expose DHCP-returned options over D-Bus and to dispatcher scripts
  - Add support for customized static routes
  - Handle multiple concurrent 3G or PPPoE connections
  - Fix GSM/CDMA username and password issues
  - Better handling of unmanaged devices from ifcfg files
  - Fix timeout handling of errors during 3G connections
  - Fix some routing issues (rh #456685)
  - Fix applet crashes after removing a device (rh #457380)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4022
changelog:
  - Fix parsing of DOMAIN in ifcfg files (rh #459370)
  - Fix reconnection to mobile broadband networks after an auth failure
  - Fix recognition of timeouts of PPP during mobile broadband connection
  - More compatible connection sharing (rh #458625)
  - Fix DHCP in minimal environments without glibc locale information installed
  - Add support for Option mobile broadband devices (like iCON 225 and iCON 7.2)
  - Add IP4 config information to dispatcher script environment
  - Merge WEP ASCII and Hex key types for cleaner UI
  - Pre-fill PPPoE password when authentication fails
  - Fixed some changes not getting saved in the connection editor
  - Accept both prefix and netmask in the conection editor's IPv4 page


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4174
changelog:
  - Ensure that mobile broadband cards are powered up before trying to use them
  - Hostname changing support (rh #441453)
  - Fix mobile broadband secret requests to happen less often
  - Better handling of default devices and default routes
  - Better information in tooltips and notifications
  - Various UI cleanups; hide widgets that aren't used (rh #465397, rh #465395)
  - Accept different separators for DNS servers and searches
  - Make applet's icon accurately reflect signal strength of the current AP


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4201
changelog:
  - Fix issues with hostname during anaconda installation (rh #461933)
  - Fix Ad-Hoc WPA connections (rh #461197)
  - Don't require gnome-panel or gnome-panel-devel (rh #427834)
  - Fix determination of WPA encryption capabilities on some cards
  - Fix conflicts with PPTP and vpnc plugins
  - Allow .cer file extensions when choosing certificates


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4229
changelog:
  - More reliable mobile broadband card initialization
  - Handle mobile broadband PINs correctly when PPP passwords are also used
  - Additional PolicyKit integration for editing system connections
  - Close the applet menu if a keyring password is needed (rh #353451)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4293
changelog:
  - Update to NetworkManager 0.7.0 RC2
  - Handle gateways on a different subnet from the interface
  - Clear VPN secrets on connection failure to ensure they are requested again (rh #429287)
  - Add support for PKCS#12 private keys (rh #462705)
  - Fix mangling of VPN's default route on DHCP renew
  - Fix type detection of qemu/kvm network devices (rh #466340)
  - Clear up netmask/prefix confusion in the connection editor
  - Make the secrets dialog go away when it's not needed
  - Fix inability to add system connections (rh #471308)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4295
changelog:
  - Fix issues reading ifcfg files
  - Previously fixed:
  - Doesn't send DHCP hostname (rh #469336)
  - 'Auto eth0' forgets settings (rh #468612)
  - DHCP renewal sometimes breaks VPN (rh #471852)
  - Connection editor menu item in the wrong place (rh #471495)
  - Cannot make system-wide connections (rh #471308)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4296
changelog:
  - Fix PIN/PUK issues with high-speed Option HSDPA mobile broadband cards
  - Fix desensitized OK button when asking for wireless keys


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-1.git20090102
changelog:
  - Update to 0.7.1 pre-release
  - Allow connections to be ignored when determining the default route (rh #476089)
  - Own /usr/share/gnome-vpn-properties (rh #477155)
  - Fix log flooding due to netlink errors (rh #459205)
  - Pass connection UUID to dispatcher scripts via the environment
  - Fix possible crash after deactivating a VPN connection
  - Fix issues with editing wired 802.1x connections
  - Fix issues when using PKCS#12 certificates with 802.1x connections


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-2.git20090207
changelog:
  - applet: fix blank VPN connection message bubbles
  - applet: better handling of VPN routing on update
  - applet: silence pointless warning (rh #484136)
  - applet: desensitize devices in the menu until they are ready (rh #483879)
  - nm: Expose WINS servers in the IP4Config over D-Bus
  - nm: Better handling of GSM Mobile Broadband modem initialization
  - nm: Handle DHCP Classless Static Routes (RFC 3442)
  - nm: Fix Mobile Broadband and PPPoE to always use 'noauth'
  - nm: Better compatibility with older dual-SSID AP configurations (rh #445369)
  - nm: Mark nm-system-settings.conf as config (rh #465633)
  - nm-tool: Show VPN connection information
  - ifcfg-rh: Silence message about ignoring loopback config (rh #484060)
  - ifcfg-rh: Fix issue with wrong gateway for system connections (rh #476089)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-1
changelog:
  - Update to 0.7.1rc1
  - nm: support for Huawei E160G mobile broadband devices (rh #466177)
  - nm: fix misleading routing error message (rh #477916)
  - nm: fix issues with 32-character SSIDs (rh #485312)
  - nm: allow root to activate user connections
  - nm: automatic modem detection with udev-extras
  - nm: massive manpage rewrite
  - applet: fix crash when showing the CA certificate ignore dialog a second time
  - applet: clear keyring items when deleting a connection
  - applet: fix max signal strength calculation in menu (rh #475123)
  - applet: fix VPN export (rh #480496)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-4.git20090219
changelog:
  - Fix PEAP version selection in the applet (rh #468844)
  - Match hostname behavior to 'network' service when hostname is localhost (rh #441453)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.97-5.git20090220
changelog:
  - Use IFF_LOWER_UP for carrier detect instead of IFF_RUNNING
  - Add small delay before probing cdc-acm driven mobile broadband devices


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.98-1.git20090225
changelog:
  - Fix getting secrets for system connections (rh #486696)
  - More compatible modem autodetection
  - Better handle minimal ifcfg files


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-1
changelog:
  - nm: make default wired "Auto ethX" connection modifiable if an enabled system settings
      plugin supports modifying connections (rh #485555)
  - nm: manpage fixes (rh #447233)
  - nm: CVE-2009-0365 - GetSecrets disclosure
  - applet: CVE-2009-0578 - local users can modify the connection settings
  - applet: fix inability to choose WPA Ad-Hoc networks from the menu
  - ifcfg-rh: add read-only support for WPA-PSK connections


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-2
changelog:
  - Fix conflict with NetworkManager-openconnect (rh #489271)
  - Fix possible crash when resynchronizing devices if HAL restarts


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-3.5
changelog:
  - nm: work around unhandled device removals due to missing HAL events (rh #484530)
  - nm: improve handling of multiple modem ports
  - nm: support for Sony Ericsson F3507g / MD300 and Dell 5530
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-4
changelog:
  - nm: fix communication with Option GT Max 3.6 mobile broadband cards
  - nm: fix communication with Huawei mobile broadband cards (rh #487663)
  - nm: don't look up hostname when HOSTNAME=localhost unless asked (rh #490184)
  - nm: fix crash during IP4 configuration (rh #491620)
  - nm: ignore ONBOOT=no for minimal ifcfg files (f9 & f10 only) (rh #489398)
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.99-5
changelog:
  - nm: fix crashes with out-of-tree modules that provide no driver link (rh #492246)
  - nm: fix USB modem probing on recent udev versions


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.100-1
changelog:
  - Update to 0.7.1-rc4
  - nm: use PolicyKit for system connection secrets retrieval
  - nm: correctly interpret errors returned from chmod(2) when saving keyfile system connections
  - editor: use PolicyKit to get system connection secrets


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0.100-2.git20090408
changelog:
  - nm: fix recognition of Option GT Fusion and Option GT HSDPA (nozomi) devices (rh #494069)
  - nm: fix handling of spaces in DHCP 'domain-search' option
  - nm: fix detection of newer Option 'hso' devices
  - nm: ignore low MTUs returned by broken DHCP servers


author: Dan Williams <dcbw@redhat.com> - 1:0.7.1-1
changelog:
  - nm: update to 0.7.1
  - nm: fix startup race with HAL causing unmanaged devices to sometimes be managed (rh #494527)


author: Adam Jackson <ajax@redhat.com> 1:0.7.1-4.git20090414
changelog:
  - nm-save-the-leases.patch: Use per-connection lease files, and don't delete
    them on interface deactivate.


author: Dan Williams <dcbw@redhat.com> - 0.7.1-5.git20090617
changelog:
  - nm: fix AT&T Quicksilver modem connections (rh #502002)
  - nm: fix support for s390 bus types (rh #496820)
  - nm: fix detection of some CMOtech modems
  - nm: handle unsolicited wifi scans better
  - nm: resolv.conf fixes when using DHCP and overriding search domains
  - nm: handle WEP and WPA passphrases (rh #441070)
  - nm: fix removal of old APs when none are scanned
  - nm: fix Huawei EC121 and EC168C detection and handling (rh #496426)
  - applet: save WEP and WPA passphrases instead of hashed keys (rh #441070)
  - applet: fix broken notification bubble actions
  - applet: default to WEP encryption for Ad-Hoc network creation
  - applet: fix crash when connection editor dialogs are canceled
  - applet: add a mobile broadband provider wizard


author: Dan Williams <dcbw@redhat.com> - 0.7.1-7.git20090708
changelog:
  - nm: fixes for ZTE/Onda modem detection
  - nm: prevent re-opening serial port when the SIM has a PIN
  - applet: updated translations
  - editor: show list column headers


author: Dan Williams <dcbw@redhat.com> - 0.7.995-0.git20090728
changelog:
  - Update to upstream 'master' branch
  - Use modem-manager for better 3G modem support
  - Integrated system settings with NetworkManager itself
  - Use udev instead of HAL


author: Dan Williams <dcbw@redhat.com> - 0.7.995-3.git20090813
changelog:
  - nm: add iSCSI support
  - nm: add connection assume/takeover support for ethernet (rh #517333)
  - nm: IPv6 fixes
  - nm: re-add OLPC XO-1 mesh device support (removed with 0.7.0)
  - applet: better WiFi dialog focus handling


author: Dan Williams <dcbw@redhat.com> - 0.7.996-1.git20090826
changelog:
  - nm: IPv6 zeroconf support and fixes
  - nm: port to polkit (rh #499965)
  - nm: fixes for ehea devices (rh #511304) (rh #516591)
  - nm: work around PPP bug causing bogus nameservers for mobile broadband connections
  - editor: fix segfault with "Unlisted" plans in the mobile broadband assistant


author: Dan Williams <dcbw@redhat.com> - 0.7.996-2.git20090921
changelog:
  - nm: allow disconnection of all device types
  - nm: ensure that wired connections are torn down when their hardware goes away
  - nm: fix crash when canceling a VPN's request for secrets
  - editor: fix issues changing connections between system and user scopes
  - editor: ensure changes are thrown away when editing is canceled
  - applet: ensure connection changes are noticed by NetworkManager
  - applet: fix crash when creating new connections
  - applet: actually use wired 802.1x secrets after they are requested


author: Dan Williams <dcbw@redhat.com> - 0.7.996-3.git20090928
changelog:
  - nm: fix connection takeover when carrier is not on
  - nm: handle certificate paths (CA chain PEM files are now fully usable)
  - nm: defer action for 4 seconds when wired carrier drops
  - ifcfg-rh: fix writing WPA passphrases with odd characters
  - editor: fix editing of IPv4 settings with new connections (rh #525819)
  - editor: fix random crashes when editing due to bad widget refcounting
  - applet: debut reworked menu layout (not final yet...)


author: Dan Williams <dcbw@redhat.com> - 0.7.996-4.git20091002
changelog:
  - install: fix -gnome package pre script failures (rh #526519)
  - nm: fix failures validating private keys when using the NSS crypto backend
  - applet: fix crashes when clicking on menu but not associated (rh #526535)
  - editor: fix crash editing wired 802.1x settings
  - editor: fix secrets retrieval when editing connections


author: Dan Williams <dcbw@redhat.com> - 0.7.996-5.git20091021
changelog:
  - install: better fix for (rh #526519)
  - install: don't build Bluetooth bits on s390 (rh #529854)
  - nm: wired 802.1x connection activation fixes
  - nm: fix crash after modifying default wired connections like "Auto eth0"
  - nm: ensure VPN secrets are requested again after connection failure
  - nm: reset 'accept_ra' to previous value after deactivating IPv6 connections
  - nm: ensure random netlink events don't interfere with IPv6 connection activation
  - ifcfg-rh: fix writing out LEAP connections
  - ifcfg-rh: recognize 'static' as a valid BOOTPROTO (rh #528068)
  - applet: fix "could not find required resources" error (rh #529766)


author: Dan Williams <dcbw@redhat.com> - 0.7.996-7.git20091113
changelog:
  - nm: better pidfile handing (rh #517362)
  - nm: save WiFi and Networking enabled/disabled states across reboot
  - nm: fix crash with missing VPN secrets (rh #532084)
  - applet: fix system connection usage from the "Connect to hidden..." dialog
  - applet: show Bluetooth connections when no other devices are available (rh #532049)
  - applet: don't die when autoconfigured connections can't be made (rh #532680)
  - applet: allow system administrators to disable the "Create new wireless network..." menu item
  - applet: fix missing username connecting to VPNs the second time
  - applet: really fix animation stuttering
  - editor: fix IP config widget tooltips
  - editor: allow unlisted countries in the mobile broadband wizard (rh #530981)
  - ifcfg-rh: ignore .rpmnew files (rh #509621)


author: Dan Williams <dcbw@redhat.com> - 0.7.997-1
changelog:
  - core: remove haldaemon from initscript dependencies (rh #542078)
  - core: handle PEM certificates without an ending newline (rh #507315)
  - core: fix rfkill reporting for ipw2x00 devices
  - core: increase PPPoE timeout to 30 seconds
  - core: fix re-activating system connections with secrets
  - core: fix crash when deleting automatically created wired connections
  - core: ensure that a VPN's DNS servers are used when sharing the VPN connection
  - ifcfg-rh: support routes files (rh #507307)
  - ifcfg-rh: warn when device will be managed due to missing HWADDR (rh #545003)
  - ifcfg-rh: interpret DEFROUTE as never-default (rh #528281)
  - ifcfg-rh: handle MODE=Auto correctly
  - rpm: fix rpmlint errors
  - applet: don't crash on various D-Bus and other errors (rh #545011) (rh #542617)
  - editor: fix various PolicyKit-related crashes (rh #462944)
  - applet+editor: notify user that private keys must be protected


author: Dan Williams <dcbw@redhat.com> - 0.7.997-2.git20091214
changelog:
  - core: fix recognition of standalone 802.1x private keys
  - applet: clean notification text to ensure it passes libnotify validation


author: Dan Williams <dcbw@redhat.com> - 0.7.998-1.git20100106
changelog:
  - build: fix for new pppd (rh #548520)
  - core: add WWAN enable/disable functionality
  - ifcfg-rh: IPv6 addressing and routes support (rh #523288)
  - ifcfg-rh: ensure connection is updated when route/key files change
  - applet: fix crash when active AP isn't found (rh #546901)
  - editor: fix crash when editing connections (rh #549579)


author: Dan Williams <dcbw@redhat.com> - 0.7.999-1.git20100120
changelog:
  - core: support for managed-mode DHCPv6 (rh #429710)
  - ifcfg-rh: gracefully handle missing PREFIX/NETMASK
  - cli: initial preview of command-line client
  - applet: add --help to explain what the applet is (rh #494641)


author: Dan Williams <dcbw@redhat.com> - 0.8-0.2.git20100129
changelog:
  - core: add Bluetooth Dial-Up Networking (DUN) support (rh #136663)
  - core: start DHCPv6 on receipt of RA 'otherconf'/'managed' bits
  - nmcli: allow enable/disable of WiFi and WWAN


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.8-0.3.git20100129
changelog:
  - core: validate the autostart .desktop file
  - build: fix nmcli for the stricter ld (fixes FTBFS)
  - build: fix nm-connection-editor for the stricter ld (fixes FTBFS)
  - applet: don't autostart in KDE on F13+ (#541353)


author: Dan Williams <dcbw@redhat.com> - 0.8-0.4.git20100211
changelog:
  - core: fix mobile broadband PIN handling (rh #543088) (rh #560742)
  - core: better handling of /etc/hosts if hostname was already added by the user
  - applet: crash less on D-Bus property errors (rh #557007)
  - applet: fix crash entering wired 802.1x connection details (rh #556763)


author: Dan Williams <dcbw@redhat.com> - 0.8-1.git20100219
changelog:
  - core: update to final 0.8 release
  - core: fix Bluetooth DUN connections when secrets are needed
  - ifcfg-rh: add helper for initscripts to determine ifcfg connection UUIDs
  - applet: fix Bluetooth connection secrets requests
  - applet: fix rare conflict with other gnome-bluetooth plugins


author: Dan Williams <dcbw@redhat.com> - 0.8-2.git20100317
changelog:
  - man: many manpage updates
  - core: determine classful prefix if non is given via DHCP
  - core: ensure /etc/hosts is always up-to-date and correct (rh #569914)
  - core: support GSM network and roaming preferences
  - applet: startup speed enhancements
  - applet: better support for OTP/token-based WiFi connections (rh #526383)
  - applet: show GSM and CDMA registration status and signal strength when available
  - applet: fix zombie GSM and CDMA devices in the menu
  - applet: remove 4-character GSM PIN/PUK code limit
  - applet: fix insensitive WiFi Create... button (rh #541163)
  - applet: allow unlocking of mobile devices immediately when plugged in


author: Dan Williams <dcbw@redhat.com> - 0.8-3.git20100323
changelog:
  - core: don't exit early on non-fatal state file errors
  - core: fix Bluetooth connection issues (rh #572340)
  - applet: fix some translations (rh #576056)
  - applet: better feedback when wrong PIN/PUK is entered
  - applet: many updated translations
  - applet: PIN2 unlock not required for normal modem functionality
  - applet: fix wireless secrets dialog display


author: Dan Williams <dcbw@redhat.com> - 0.8-5.git20100408
changelog:
  - core: more flexible logging
  - core: fix crash with OLPC mesh devices after suspend
  - applet: updated translations
  - applet: show mobile broadband signal strength and technology in the icon
  - applet: fix continuous password requests for 802.1x connections (rh #576925)
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8-7.git20100422
changelog:
  - core: fix crash during install (rh #581794)
  - wifi: fix crash when supplicant segfaults after resume (rh #538717)
  - ifcfg-rh: fix MTU handling for wired connections (rh #569319)
  - applet: fix display of disabled mobile broadband devices


author: Dan Williams <dcbw@redhat.com> - 0.8-8.git20100426
changelog:
  - core: fix issues with IPv6 router advertisement mishandling (rh #530670)
  - core: many fixes for IPv6 RA and DHCP handling (rh #538499)
  - core: ignore WWAN ethernet devices until usable (rh #585214)
  - ifcfg-rh: fix handling of WEP passphrases (rh #581718)
  - applet: fix crashes (rh #582938) (rh #582428)
  - applet: fix crash with multiple concurrent authorization requests (rh #585405)
  - editor: allow disabling IPv4 on a per-connection basis
  - editor: add support for IPv6 DHCP-only configurations


author: Dan Williams <dcbw@redhat.com> - 0.8-10.git20100502
changelog:
  - core: IPv6 autoconf, DHCP, link-local, and manual mode fixes
  - editor: fix saving IPv6 address in user connections


author: Dan Williams <dcbw@redhat.com> - 0.8-11.git20100503
changelog:
  - core: allow IP configuration as long as one method completes (rh #567978)
  - core: don't prematurely remove IPv6 RDNSS nameservers (rh #588192)
  - core: ensure router advertisements are only used when needed (rh #588613)
  - editor: add IPv6 gateway editing capability


author: Dan Williams <dcbw@redhat.com> - 0.8-12.git20100504
changelog:
  - core: treat missing IPv6 configuration as ignored (rh #588814)
  - core: don't flush IPv6 link-local routes (rh #587836)
  - cli: update output formatting


author: Dan Williams <dcbw@redhat.com> - 0.8-13.git20100509
changelog:
  - core: restore initial accept_ra value for IPv6 ignored connections (rh #588619)
  - bluetooth: fix bad timeout on PAN connections (rh #586961)
  - applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.1.git20100510
changelog:
  - core: fix handling of IPv6 RA flags when router goes away (rh #588560)
  - bluetooth: fix crash configuring DUN connections from the wizard (rh #590666)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.2.git20100519
changelog:
  - core: use GIO in local mode only (rh #588745)
  - core: updated translations (rh #589230)
  - core: be more lenient in IPv6 RDNSS server expiry (rh #590202)
  - core: fix headers to be C++ compatible (rh #592783)
  - applet: updated translations (rh #589230)
  - applet: lock connections with well-known SSIDs to their specific AP


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.3
changelog:
  - core: fix nm-online crash (rh #593677)
  - core: fix failed suspend disables network (rh #589108)
  - core: print out missing firmware errors (rh #594578)
  - applet: fix device descriptions for some mobile broadband devices
  - keyfile: bluetooth fixes
  - applet: updated translations (rh #589230)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-0.4
changelog:
  - Update to 0.8.1 release candidate
  - core: fix WWAN hardware enable state tracking (rh #591622)
  - core: fix Red Hat initscript return value on double-start (rh #584321)
  - core: add multicast route entry for IPv4 link-local connections
  - core: fix connection sharing in cases where a dnsmasq config file exists
  - core: fix handling of Ad-Hoc wifi connections to indicate correct network
  - core: ensure VPN interface name is passed to dispatcher when VPN goes down
  - ifcfg-rh: fix handling of ASCII WEP keys
  - ifcfg-rh: fix double-quoting of some SSIDs (rh #606518)
  - applet: ensure deleted connections are actually forgotten (rh #618973)
  - applet: don't crash if the AP's BSSID isn't availabe (rh #603236)
  - editor: don't crash on PolicyKit events after windows are closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-1
changelog:
  - core: read nm-system-settings.conf before NetworkManager.conf (rh #606160)
  - core: fix editing system DSL connections when using keyfile plugin
  - core: work around inconsistent proprietary driver associated AP reporting
  - core: ensure empty VPN secrets are not used (rh #587784)
  - core: don't request WiFi scans when connection is locked to a specific BSSID
  - cli: show IPv6 settings and configuration
  - applet: updated translations
  - editor: fix a PolicyKit-related crash editing connections (rh #603566)
  - applet: fix saving the ignore-missing-CA-cert preference (rh #610084)
  - editor: fix listing connections on PPC64 (rh #608663)
  - editor: ensure editor windows are destroyed when closed (rh #572466)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-2
changelog:
  - core: quiet annoying warnings (rh #612991)
  - core: fix retrieval of various IP options in libnm-glib (rh #611141)
  - core: ship NetworkManager.conf instead of deprecated nm-system-settings.conf (rh #606160)
  - core: add short hostname to /etc/hosts too (rh #621910)
  - core: recheck autoactivation when new system connections appear
  - core: enable DHCPv6-only configurations (rh #612445)
  - core: don't fail connection immediately if DHCP lease expires (rh #616084) (rh #590874)
  - core: fix editing of PPPoE system connections
  - core: work around twitchy frequency reporting of various wifi drivers
  - core: don't tear down user connections on console changes (rh #614556)
  - cli: wait a bit for NM's permissions check to complete (rh #614866)
  - ifcfg-rh: ignore BRIDGE and VLAN configs and treat as unmanaged (rh #619863)
  - man: add manpage for nm-online
  - applet: fix crash saving ignore-missing-CA-cert preference (rh #619775)
  - applet: hide PIN/PUK by default in the mobile PIN/PUK dialog (rh #615085)
  - applet: ensure Enter closes the PIN/PUK dialog (rh #611831)
  - applet: fix another crash in ignore-CA-certificate handling (rh #557495)
  - editor: fix handling of Wired/s390 connections (rh #618620)
  - editor: fix crash when canceling editing in IP address pages (rh #610891)
  - editor: fix handling of s390-specific options
  - editor: really fix crash when changing system connections (rh #603566)


author: Dan Williams <dcbw@redhat.com> - 0.8.1-6
changelog:
  - core: add dispatcher events on DHCPv4 and DHCPv6 lease changes
  - core: enforce access permissions when enabling/disabling WiFi and WWAN (rh #626337)
  - core: listen for UPower suspend/resume signals
  - applet: fix disabled Enable Networking and Enable Wireless menu items (rh #627365)
  - applet: updated translations
  - applet: obscure Mobile Broadband PIN in secondary unlock dialog


author: Dan Williams <dcbw@redhat.com> - 0.8.1-9
changelog:
  - core: fix suspend/resume regression (rh #638640)
  - core: fix issue causing some nmcli requests to be ignored


author: Dan Williams <dcbw@redhat.com> - 0.8.995-1.git20110308
changelog:
  - Update to NetworkManager 0.9-beta1
  - core: consolidate user and system settings services into NM itself
  - core: add WiMAX support
  - applet: support Fast User Switching


author: Dan Williams <dcbw@redhat.com> - 0.8.997-1
changelog:
  - Update to 0.8.997 (0.9-beta3)
  - ifcfg-rh: fix reading and writing of Dynamic WEP connections using LEAP as the eap method
  - wifi: fix signal strength for scanned access points with some drivers
  - applet: translation updates


author: Dan Williams <dcbw@redhat.com> - 0.8.997-4.git20110325
changelog:
  - core: fix possible libnm-glib crash when activating connections
  - applet: fix various naming and dialog title issues


author: Dan Williams <dcbw@redhat.com> - 0.8.997-5.git20110328
changelog:
  - core: fix connection deactivation on the compat interface
  - core: give default wired connections a more friendly name
  - core: fix base type of newly created wired connections
  - applet: many updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.997-7.git20110330
changelog:
  - core: fix creation of default wired connections
  - core: fix requesting new secrets when old ones fail (ex changing WEP keys)
  - editor: ensure all pages are sensitive after retrieving secrets
  - editor: fix crash when scrolling through connection lists (rh #693446)
  - applet: fix crash after using the wifi or wired secrets dialogs (rh #693446)


author: Dan Williams <dcbw@redhat.com> - 0.8.997-8.git20110331
changelog:
  - core: resurrect default VPN username
  - core: don't stomp on crypto library users by de-initing the crypto library


author: Dan Williams <dcbw@redhat.com> - 0.8.998-1
changelog:
  - Update to 0.8.998 (0.9.0-rc1)
  - core: fix near-infinite requests for passwords (rh #692783)
  - core: fix handling of wired 802.1x connections
  - core: ignore Nokia PC-Suite ethernet devices we can't use yet
  - applet: migrate 0.8 OpenVPN passwords to 0.9 formats


author: Dan Williams <dcbw@redhat.com> - 0.8.998-3.git20110419
changelog:
  - core: systemd and startup enhancements for NFS mounts
  - core: more efficient startup process
  - core: fix handling of multiple logins when one is inactive
  - core: fix handling of S390/Hercules CTC network interfaces (rh #641986)
  - core: support Easytether interfaces for Android phones
  - core: fix handling of WWAN enable/disable states
  - ifcfg-rh: harmonize handling if IPADDR/PREFIX/NETMASK with initscripts (rh #658907)
  - applet: fix connection to WPA Enterprise networks (rh #694765)


author: Dan Williams <dcbw@redhat.com> - 0.8.998-4.git20110427
changelog:
  - core: enable optimized background roaming for WPA Enterprise configs
  - core: better handling of WiFi and WiMAX rfkill (rh #599002)
  - applet: fix crash detecting Bluetooth DUN devices a second time
  - ifcfg-rh: fix managed/unmanaged changes when removing connections (rh #698202)


author: Dan Williams <dcbw@redhat.com> - 0.8.999-1
changelog:
  - core: ensure DER format certificates are correctly recognized (rh #699591)
  - core: fix WINS server handling in client helper libraries
  - core: enhance dispatcher script environment to include IPv6 and VPN details
  - applet: migrate openswan connections to 0.9
  - editor: improve usability of editing IP addresses (rh #698199)


author: Dan Williams <dcbw@redhat.com> - 0.8.999-2.git20110509
changelog:
  - core: fix possible crash when connections are deleted
  - core: fix exported symbols in libnm-util and libnm-glib
  - core/applet: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.8.999-3.git20110526
changelog:
  - compat: fix activation/deactivation of VPN connections (rh #699786)
  - core: fix autodetection of previously-used hidden wifi networks
  - core: silence error if ConsoleKit database does not yet exist (rh #695617)
  - core: fix Ad-Hoc frequency handling (rh #699203)
  - core: fixes for migrated OpenConnect VPN plugin connections
  - core: various fixes for VPN connection secrets handling
  - core: send only short hostname to DHCP servers (rh #694758)
  - core: better handling of PKCS#8 private keys
  - core: fix dispatcher script interface name handling
  - editor: fix potential crash when connection is invalid (rh #704848)
  - editor: allow _ as a valid character for GSM APNs


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-1.git20110531
changelog:
  - editor: fix resizing of UI elements (rh #707269)
  - core: retry wired connections when cable is replugged
  - core: fix a few warnings and remove some left-over debugging code


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-3.git20110613
changelog:
  - keyfile: better handling of missing certificates/private keys
  - core: fix issues handling "always-ask" wired and WiFi 802.1x connections (rh #703785)
  - core: fix automatic handling of hidden WiFi networks (rh #707406)
  - editor: fix possible crash after reading network connections (rh #706906)
  - editor: make Enter/Return key close WiFi password dialogs (rh #708666)


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-4.git20110620
changelog:
  - core: don't cache "(none)" hostname at startup (rh #706094)
  - core: fix handling of VPN connections with only system-owned secrets
  - core: fix optional waiting for networking at startup behavior (rh #710502)
  - ifcfg-rh: fix possible crashes in error cases
  - ifcfg-rh: fix various IPv4 and IPv6 handling issues
  - applet: add notifications of GSM mobile broadband registration status
  - editor: move secrets when making connections available to all users or private
  - applet: don't show irrelevant options when asking for passwords


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-5.git20110702
changelog:
  - core: ensure users are authorized for shared wifi connections (CVE-2011-2176) (rh #715492)
  - core: retry failed connections after 5 minute timeout
  - core: immediately request new 802.1x 'always ask' passwords if they fail
  - core: add MAC blacklisting capability for WiFi and Wired connections
  - core: retry failed connections when new users log in (rh #706204)
  - applet: updated translations
  - core: drop compat interface now that KDE bits are updated to NM 0.9 API


author: Dan Williams <dcbw@redhat.com> - 0.8.9997-6.git20110721
changelog:
  - core: updated Russian translation (rh #652904)
  - core: fix possible crash if secrets are missing
  - core: append interface name for IPv6 link-local DNS server addresses (rh #720001)
  - core: fix setting hostname from DHCP options (rh #719100)
  - libnm-util: GObject introspection annotation fixes
  - libnm-util: ensure IP address/route prefixes are valid
  - ifcfg-rh: read anonymous identity for 802.1x PEAP connections (rh #708436)
  - applet: show notifications on CDMA home/roaming changes
  - applet: fix various issues saving VPN secrets
  - editor: allow exporting VPN secrets
  - editor: default to IPv6 "automatic" addressing mode


author: Dan Williams <dcbw@redhat.com> - 0.9.0-1
changelog:
  - Update to 0.9 release
  - core: fix issue where scan results could be ignored
  - core: ensure agent secrets are preserved when updating connections
  - core: don't autoconnect disabled modems
  - core: fix race when checking modem enabled/disabled status after disabling
  - core: ensure newly installed VPN plugins can actually talk to NM
  - core: add support for 802.1X certificate subject matching
  - libnm-glib: various introspection fixes
  - applet/editor: updated translations


author: Dan Williams <dcbw@redhat.com> - 0.9.1.90-1
changelog:
  - Update to 0.9.1.90 (0.9.2-beta1)
  - core: fix IPv6 link-local DNS servers in the dnsmasq DNS plugin
  - cli: add ability to delete connections
  - keyfile: fix an issue with duplicated keyfile connections
  - core: ensure the 'novj' option is passed through to pppd
  - core: store timestamps for VPN connections too (rh #725353)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.1.90-2.git20110927
changelog:
  - core: ifcfg-rh: remove newlines when writing to ifcfg files (CVE-2011-3364) (rh #737338)
  - core: change iscsiadm path to /sbin/iscsiadm in ifcfg-rh plugin (rh #740753)
  - core: fix refcounting when deleting a default wired connection (lp:797868)


author: Adam Williamson <awilliam@redhat.com> - 1:0.9.1.90-5.git20110927
changelog:
  - Rebuilt for glibc (rh #747377)
  - core: fix setting hostname from DHCP options (rh #719100)
  - skip a release to keep up with F16


author: Dan Williams <dcbw@redhat.com> - 0.9.2-1
changelog:
  - core: fix possible crash when talking to ModemManager
  - core: improve handling of rfkill on some machines (eeepc 1005HA and others)
  - ifcfg-rh: don't use spaces in ifcfg file names (rh #742273)
  - core: accept IPv6 Router Advertisements when forwarding is on
  - core: bump dnsmasq cache size to 400 entries
  - core: ensure IPv6 static routes are flushed when device is deactivated
  - ifcfg-rh: fix changing WPA connections to WEP
  - core: fix setting hostname from DHCP (rh #719100)
  - libnm-glib: fix various GObject introspection issues (rh #747302)
  - core: don't change routing or DNS if no devices are managed
  - core: ensure IPv6 RA-provided routes are honored


author: Dan Williams <dcbw@redhat.com> - 0.9.3-0.1
changelog:
  - Update to 0.9.4 snapshot
  - wimax: enable optional support for Intel WiMAX devices
  - core: use nl80211 for WiFi device control
  - core: add basic support for Infiniband IP interfaces
  - core: add basic support for bonded interfaces
  - core: in-process IP configuration no longer blocks connected state


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.4
changelog:
  - Update to 0.9.3.995 (0.9.4-beta1)
  - core: add support for bonding and VLAN interfaces
  - core: add support for Internet connectivity detection
  - core: add support for IPv6 Privacy Extensions
  - core: fix interaction with firewalld restarts


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.5
changelog:
  - core: fix a crash with ipw2200 devices and adhoc networks
  - core: fix IPv6 addressing on newer kernels
  - core: fix issue with VPN plugin passwords (rh #802540)
  - cli: enhancements for Bonding, VLAN, and OLPC mesh devices
  - ifcfg-rh: fix quoting WPA passphrases that include quotes (rh #798102)
  - libnm-glib: fix some issues with duplicate devices shown in menus


author: Dan Williams <dcbw@redhat.com> - 0.9.3.995-0.6
changelog:
  - core: fix issue with carrier changes not being recognized (rh #800690)
  - editor: warn user if CA certificate is left blank


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-0.7
changelog:
  - Update to 0.9.3.997 (0.9.4-rc1)
  - core: fix possible WiFi hang when connecting to Ad-Hoc networks
  - core: enhanced IPv6 compatibility
  - core: proxy DNSSEC data when using the 'dnsmasq' caching nameserver plugin
  - core: allow VPNs to specify multiple domain names given by the server
  - core: fix an issue creating new InfiniBand connections
  - core/applet/editor: disable WiFi Ad-Hoc WPA connections until kernel bugs are fixed


author: Dan Williams <dcbw@redhat.com> - 0.9.3.997-1
changelog:
  - applet: move to network-manager-applet RPM
  - editor: move to nm-connection-editor RPM
  - libnm-gtk: move to libnm-gtk RPM


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.5.95-1.git20120713
changelog:
  - Update to 0.9.5.95 (0.9.6-rc1) snapshot
  - core: add autoconnect, driver-versioni and firmware-version properties to NMDevice
  - core: various IPv6 improvements
  - core: reduce number of changes made to DNS information during connection setup
  - core: add Vala language bindings
  - vpn: support IPv6 over VPNs
  - wifi: add on-demand WiFi scan support


author: Dan Williams <dcbw@redhat.com> - 0.9.5.96-1
changelog:
  - Update to 0.9.6-rc2
  - core: fix race between parallel DHCP client invocations
  - core: suppress a useless warning (rh #840580)
  - ifcfg-rh: fix segfault with malformed values (rh #841391)
  - ifcfg-rh: ignore IP config on bond slave configurations (rh #838907)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.0-3.git20121004
changelog:
  - Forward-port some forgotten fixes from F17
  - Fix networked-filesystem systemd dependencies (rh #787314)
  - Don't restart NM on upgrade, don't stop NM on uninstall (rh #811200)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.7.0-8.git20121004
changelog:
  - Apply patch from master to update hostname (rh #875085)
  - spec: create /etc/NetworkManager/dnsmasq.d (rh #873621)


author: Dan Williams <dcbw@redhat.com> - 0.9.7.997-1
changelog:
  - Update to 0.9.8-beta2
  - core: ignore bridges managed by other tools (rh #905035)
  - core: fix libnl assert (rh #894653)
  - wifi: always use Proactive Key Caching with WPA Enterprise (rh #834444)
  - core: don't crash when Internet connection sharing fails to start (rh #883142)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-1.git20130327
changelog:
  - Update to 0.9.8.2 snapshot
  - core: fix VLAN parent handling when identified by UUID
  - core: quiet warning about invalid interface index (rh #920145)
  - core: request 'static-routes' from DHCP servers (rh #922558)
  - core: fix crash when dbus-daemon is restarted (rh #918273)
  - core: copy leasefiles from /var/lib/dhclient to fix netboot (rh #916233)
  - core: memory leak and potential crash fixes
  - ifcfg-rh: ensure missing STP property is interpreted as off (rh #922702)


author: Dan Williams <dcbw@redhat.com> - 0.9.8.1-2.git20130507
changelog:
  - core: fix issue with UI not showing disconnected on rfkill
  - core: memory leak fixes
  - core: silence warning about failure reading permanent MAC address (rh #907912)
  - core: wait up to 120s for slow-connecting modems
  - core: don't crash on PPPoE connections without a wired setting
  - core: ensure the AvailableConnections property is always correct
  - keyfile: ensure all-default VLAN connections are read correctly
  - core: suppress kernel's automatic creation of bond0 (rh #953466)
  - libnm-glib: make NMSecretAgent usable with GObject Introspection
  - libnm-util: fix GObject Introspection annotations of nm_connection_need_secrets()
  - core: documentation updates


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-1.git20130514
changelog:
  - Enable hardened build
  - Update to 0.9.10 snapshot
  - cli: new capabilities and somewhat re-arranged syntax
  - core: generic interface support
  - core: split config support; new "server mode" options
  - core: allow locking connections to interface names


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-2.git20130515
changelog:
  - Update for systemd network-online.target (rh #787314)
  - Add system service for the script dispatcher (rh #948433)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-6
changelog:
  - Belatedly update udev directory for UsrMove
  - Fix incorrect dates in old changelog entries to avoid rpm warnings


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-9.git20130807
changelog:
  - core: fix assert on multi-hop routes (rh #989022)
  - core: fix dispatcher systemd unit enabling (rh #948433)
  - ifcfg-rh: ignore emacs temporary lockfiles (rh #987629)
  - core: fix various routing issues and interaction with kernel events
  - cli: confirm saving connections when autoconnect is enabled (rh #953296)
  - cli: automatically change method when static IP addresses are added
  - core: preserve externally added IPv4 routes and addresses


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-10.git20130906
changelog:
  - core: fix bug which disallowed deleting connections (rh #997568)
  - core: add support for Team devices
  - core: enable NetworkManager-wait-online by default (rh #816655)
  - core: fix crash when 'gre' and 'macvlan' links change (rh #997396)
  - core: fail activation when invalid static routes are configured (rh #999544)
  - core: enhance connectivity checking to include portal detection
  - core: allow hyphens for MAC addresses (rh #1002553)
  - core: remove NetworkManager-created software devices when they are deactivated (rh #953300)
  - core: fix handling of some DHCP client identifiers (rh #999503)
  - core: correctly handle Open vSwitch interfaces as generic interfaces (rh #1004356)
  - core: better handle Layer-2-only connections (rh #979288)
  - cli: enhanced bash completion
  - cli: make the 'describe' command more visible (rh #998002)
  - cli: fix bug rejecting changes to Wi-Fi channels (rh #999999)
  - cli: update bash completion to suggest connection names (rh #997997)
  - cli: fix tab completion for aliases in edit mode
  - cli: ask whether to switch IP method to 'auto' when all addresses are deleted (rh #998137)
  - cli: request missing information when --ask is passed (rh #953291)
  - cli: add 'remove' command to edit mode
  - cli: fix creation of secure Wi-Fi connections (rh #997969) (rh #997555)
  - cli: default autoconnect to no and ask whether to activate on save (rh #953296)
  - man: clarify manpage text (rh #960071) (rh #953299)
  - man: fix errors in the nmcli help output and manpage (rh #997566)
  - ifcfg-rh: only write IPV6_DEFAULTGW when there's actually a default gateway (rh #997759)
  - ifcfg-rh: fix handling of legacy-format routes file with missing gateway


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-11.git20130913
changelog:
  - core: actually enable ModemManager 1.0 support
  - libnm-glib: fix nm_remote_connection_delete() not calling callback (rh #997568)
  - cli: ensure terminal is reset after quitting
  - cli: set wep-key-type properly when editing (rh #1003945)
  - man: fix typo in nmcli examples manpage (rh #1004117)
  - core: fix setting VLAN ingress/egress mappings
  - core: allow creating VLANs from interfaces other than Ethernet (rh #1003180)
  - cli: fix input/output format conversion (rh #998929)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-13.git20131001
changelog:
  - core: fix bridge device creation (#1012532)
  - core,settings: do not call functions with connection==NULL (rh #1008151)
  - cli: accept gateway in the IP questionnaire of 'nmcli -a con add' (rh #1007368)
  - cli: always print success message (not only in --pretty mode) (rh #1006444)
  - cli: fix bond questionnaire to be able to set miimon (rh #1007355)
  - ifcfg-rh: if IPv4 is disabled put DNS domains (DOMAIN) into IPv6 (rh #1004866)
  - platform: fix a crash when nm_platform_sysctl_get() returns NULL (rh #1010522)
  - platform: fix InfiniBand partition handling (rh #1008568)
  - infiniband: only check the last 8 bytes when doing hwaddr matches (rh #1008566)
  - bluez: merge adding support for BlueZ 5 (bgo #701078)
  - api: clarify lifetime and behavior of ActiveConnection's SpecificObject property (rh #1012309)
  - vpn: fix connecting to VPN (bgo #708255) (rh #1014716)
  - rdisc: do not crash on NDP init failures (rh #1012151)
  - cli: be more verbose when adding IP addresses in questionnaire (rh #1006450)
  - team: chain up parent dispose() in NMDeviceTeam dispose() (rh #1013593)
  - translation updates


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-14.git20131003
changelog:
  - core: fix DHCPv6 address prefix length (rh #1013583)
  - cli: enhance bonding questionaire (rh #1007355)
  - core: fix crash with Bluez5 if PAN connection is not defined (rh #1014770)
  - libnm-glib: fix various memory leaks that could cause UIs to mis-report state
  - core: fix issues with mis-configured IPv6 router advertisements (rh #1008104)
  - cli: fix potential crash editing connections (rh #1011942)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-15.git20131003
changelog:
  - ifcfg-rh: fix crash in ifcfg-rh plugin when reloading connections (rh #1023571)
  - ifcfg-rh: fix crash when having connections with NEVER_DEFAULT (rh #1021112)
  - core: fix segfault in nm-policy when setting default route for vpn (rh #1019021)
  - ifcfg-rh: fix crash when reading connection (assert) (rh #1025007)
  - core: allow IPv4 to proceed if IPv6 is globally disabled but set to "auto" (rh #1012151)


author: Dan Winship <danw@redhat.com> - 0.9.9.0-18.git20131003
changelog:
  - nmcli: add "con load" to manually load an ifcfg file
  - vpn: fix logging to help debug rh #1018317
  - bridge: fix crash with bridge ports with empty settings (rh #1031170)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.0-19.git20131003
changelog:
  - dispatcher: fix crash on exit while logging from signal handler (rh #1017884)
  - core: workaround crash when connecting to wifi (rh #1025371)
  - ethernet: don't crash if device doesn't have a MAC address (rh #1029053)
  - libnm-glib: fix crash by taking additional ref in result_cb() (rh #1030403)
  - ifcfg-rh: fix ignoring updates that don't change anything


author: Dan Williams <dcbw@redhat.com> - 0.9.9.0-21.git20131003
changelog:
  - core: wait for link before declaring startup complete (rh #1034921)
  - core: ignore RA-provided IPv6 default routes (rh #1029213)
  - core: set IPv4 broadcast address correctly (rh #1032819)


author: Thomas Haller <thaller@redhat.com> - 0.9.9.0-28.git20140131
changelog:
  - add nmtui package
  - bugfix caching of libnl objects (caused error with new libnl3 version when activating bridges) (rh #1063290)
  - fix NMManager:startup tracking (pending action) (rh #1030583)


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.1-2.git20140314
changelog:
  - Update to a git snapshot (git20140314 git:45a326d)
  - Fix Obsoletes and Requires to perform updates correctly


author: Jiří Klimeš <jklimes@redhat.com> - 0.9.9.1-3.git20140317
changelog:
  - Update to a git snapshot (git20140317 git:a1e89b4)
  - platform: fix NM crash if link has no name (e.g. for failed VPN connection)
  - libnm-util/cli: fix bridge priority default value (rh #1073664)


author: Dan Winship <danw@redhat.com> - 0.9.9.1-4.git20140319
changelog:
  - Update to a git snapshot (git20140319 git:3980806)
  - Rename NetworkManager-atm package to NetworkManager-adsl
  - Rename NetworkManager-bt package to NetworkManager-bluetooth


author: Jiří Klimeš <jklimes@redhat.com> - 1:0.9.10.0-14.git20140704
changelog:
  - vpn: propagate daemon exec error correctly (bgo #739436)
  - core: do not assert when a device is enslaved externally (rh #1167345)


author: Dan Winship <danw@redhat.com> - 1:1.0.0-2
changelog:
  - build: fix NetworkManager-bluetooth dep on NetworkManager-wwan
  - build: re-enable hardware plugins on s390


author: Jiří Klimeš <jklimes@redhat.com> - 1:1.0.4-0.2.git20150707.cf15f2a
changelog:
  - Update to a new 1.0.3 development snapshot (git20150707)
  - core: fix handling of ignore-auto-* properties (rh #1239184)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.0.4-2
changelog:
  - Fix an assertion failure in nmcli (rh #1244048)
  - Fix default route handling on assumed connections (rh #1245648)


author: Thomas Haller <thaller@redhat.com> - 1:1.0.6-0.2.20150813git7e2caa2
changelog:
  - fix crash when deactivating assumed device (rh #1253949)
  - backport wifi scan options for ssid
  - use plain HTTP URI for connectivity check


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.2.0-0.3.20151023gite01c175
changelog:
  - Drop the NetworkManager-devel subpackage (folded into libnm-glib-devel)
  - Update to a later snapshot


author: Thomas Haller <thaller@redhat.com> - 1:1.2.0-0.6.beta1
changelog:
  - specfile: remove no longer needed 10-ibft-plugin.conf and sync with contrib/rpm
  - core: backport fix for missing braces bug in platform


author: Thomas Haller <thaller@redhat.com> - 1:1.2.2-2
changelog:
  - dns: clear cache of dnsmasq when updating DNS configuration (rh#1338731)
  - dns: fix restarting dnsmasq instance
  - spec: depend bluetooth subpackage on exact wwan version
  - all: fix some memleaks


author: Thomas Haller <thaller@redhat.com> - 1:1.4.0-4
changelog:
  - wifi: fix another activation failure when changing MAC address (rh#1371478, bgo#770456, bgo#770504)


author: Thomas Haller <thaller@redhat.com> - 1:1.5.2-2
changelog:
  - fix enabling ifcfg-rh plugin by default (rh#1397938)
  - move translation files from core to libnm/glib subpackages


author: Thomas Haller <thaller@redhat.com> - 1:1.5.2-3
changelog:
  - fix enabling ifcfg-rh plugin by default for +=/-= operations (rh#1397938)
  - fix missing symbol _nm_device_factory_no_default_settings


author: Thomas Haller <thaller@redhat.com> - 1:1.6-0.2.rc1
changelog:
  - Update with fixes from upstream nm-1-6 branch
  - build: let libnm and glib package conflict (rh #1406454)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-2
changelog:
  - dhcp: don't add route to DHCP4 server (rh #1448987)
  - device: update external configuration before commit (rh #1449873)
  - libnm: fix NUL termination of device's description (rh #1443114)
  - libnm, core: ensure valid UTF-8 in device properties (rh #1443114)
  - core: fix device's UDI property on D-Bus (rh #1443114)
  - ifcfg-rh: omit empty next hop for routes in legacy format (rh #1452648)
  - core: fix persisting managed state of device (rh #1440171)
  - proxy: fix use-after-free (rh #1450459)
  - device: don't wrongly delay startup complete waiting for carrier (rh #1450444)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.0-4
changelog:
  - ifcfg-rh: fix writing legacy NETMASK value (rh #1445414)
  - tui: fix crash during connect (rh #1456826)
  - libnm: fix libnm rejecting VLAN ID 4095 (rh #1456911)
  - bluetooth: fix crash on connecting to a NAP (rh #1454385)
  - device: release removed devices from master on cleanup (rh #1448907)
  - nmcli: fix crash when setting 802-1x.password-raw (rh #1456362)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.8.0-5
changelog:
  - bond: fix crash comparing mode while generating bond connection (rh #1459580)
  - connectivity: fix route penalty if WWAN and BT device using ip-ifindex (rh #1459932)
  - device: persist nm-owned in run state (rh #1376199)
  - device: fix assuming master device on restart (rh #1452062)
  - device: apply route metric penality only when the default route exists (rh #1459604)
  - connectivity: fix periodic connectivity check (rh #1458399)
  - bond: improve option matching on daemon restart (rh #1457909)
  - device: fix touching device after external activation (rh #1457242)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.8.0-6
changelog:
  - device: don't change MTU unless explicitly configured (rh #1460760)
  - core: don't remove external IPv4 addresses (rh #1459813)
  - cli: fix output of iface in overview output (rh#1460219)
  - ppp: unexport NMPPPManager instance on dispose (rh#1459579)
  - cli: remove spurious device names from wifi subcommands output (rh#1460527)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.8.2-1
changelog:
  - Update to 1.8.2 release
  - dhcp/dhclient: improve "interface" statement parsing
  - dns: fix public suffix check on search domains (rh #1404350)


author: Stephen Gallagher <sgallagh@redhat.com> - 1:1.8.2-2
changelog:
  - NetworkManager-wifi and NetworkManager-glib-devel should require
    NetworkManager, not provide it.


author: Thomas Haller <thaller@redhat.com> - 1:1.8.4-1
changelog:
  - Update to 1.8.4 release
  - don't install NetworkManager-wait-online in network-online.target.wants (rh#1455704)


author: Thomas Haller <thaller@redhat.com> - 1:1.8.4-3
changelog:
  - cli: fix crash in interactive mode for "describe ."
  - libnm/{vpn,remote}-connection: disconnect signal handlers when disposed
  - libnm/manager: disconnect from signals on the proxy when we're disposed


author: Thomas Haller <thaller@redhat.com> - 1:1.8.4-4
changelog:
  - device: fix frozen notify signals on unrealize error path
  - device: fix delay startup complete for unrealized devices
  - keyfile: fix handling routes with metric zero


author: Thomas Haller <thaller@redhat.com> - 1:1.8.4-6
changelog:
  - systemd: let NM-w-o.service require NetworkManager service (rh #1452866)
  - platform: really treat dsa devices as regular wired ethernet (rh #1371289)
  - libnm: fix accessing enabled and metered properties


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.12.0-0.4
changelog:
  - Update to 1.11.4, a development snapshot of NetworkManager 1.12
  - Switch to Python 3-only build root


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.14.0-4
changelog:
  - Don't depend on openvswitch (rh #1629178)
  - device: don't remove routes when the interface is down (rh #1636715)


author: Thomas Haller <thaller@redhat.com> - 1:1.14.0-6
changelog:
  - dhcp: fix out-of-bounds heap write for DHCPv6 with internal plugin (CVE-2018-15688)
  - dhcp: revert letting internal DHCP generate default client-id based on MAC address (rh #1640464)
  - dhcp: support "duid" setting for ipv4.dhcp-client-id
  - dhcp: support "${MAC}" identifier for connection.stable-id
  - dhcp: support dhcp-plugin device spec for matching devices in NetworkManager.conf
  - dhcp: install configuration snippet in config-server package for ipv4.dhcp-client-id=mac (rh #1640494)
  - dns: remove limitation for six DNS search entries (rh #1649704)
  - libnm: fix crash cancelling activation from within callback (rh #1643085)


author: Thomas Haller <thaller@redhat.com> - 1:1.14.0-9
changelog:
  - dhcp: fix default client-id for NetworkManager-config-server (rh #1658057)
  - connectivity: fix crash and portal detection (rh #1658217)
  - core: combine secret-key with machine-id for host identity (rh #1642023)
  - SR-IOV related fixes (rh #1651578, rh #1651576, rh #1651979)
  - core: fix updating agent-owned secrets (rh #1658771)
  - core: no longer set rp_filter sysctl (rh #1651097)
  - device: don't take device down when changing MAC address (rh #1659063)
  - doc: use pregenerated manual pages and gtk-doc from source tarball


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.14.0-10
changelog:
  - ifcfg-rh: fix reading SR-IOV settings
  - dhcp: support client-id and DUID for infiniband (rh #1658057)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.14.0-11
changelog:
  - device: ensure IP configuration is restored when link goes up (rh #1636715)
  - dhcp: fix client-id and DUID for infiniband (rh #1658057)
  - dhcp: change internal DHCP plugin's ipv4.dhcp-client-id setting to "mac" (rh #1661165)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.20.0-0.1
changelog:
  - Update to a 1.20 snapshot
  - core: fix a possible crash on device removal (rh #1659790)
  - core: fix automatic activation of software deviecs (rh #1667874)
  - team: use strict JSON parsing for configuration (rh #1691619)
  - team: don't kill teamd for external devices (rh #1693142)
  - logging: don't misuse SYSLOG_FACILITY field in journal (rh #1709741)


author: Lubomir Rintel <lrintel@redhat.com> - 1:1.20.0-0.2
changelog:
  - Update to a newer 1.20 snapshot
  - ovs: support dpdk interfaces (rh #1612503)
  - libnm-core: change unsupported modes for arp_ip_targets bond option (rh #1718173)
  - ipv6: add 'disabled' method (rh #1643841)
  - device: fix matching parent device by connection UUID (rh #1716438)
  - cli: fix default value for team.runner-min-ports (rh #1716987)
  - initrd: re-enable the generator (rh #1626348)


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-0.4
changelog:
  - Update to 1.20-rc1 snapshot
  - settings: support read-only directory for keyfile profiles (rh #1674545)
  - settings: add AddConnection2 D-Bus API to suppress autoconnect (rh #1677068)
  - settings: add no-reapply flat to Update2 D-Bus API (rh #1677070)
  - openvswitch: don't release slaves on quit (rh #1733709)
  - dhcp: expose private options for internal DHCP plugin (rh #1663253)
  - device: fix route table setting when re-activating device (rh #1719318)
  - man: clarify example in nm-openvswitch manual page (rh #1638038)
  - man: various improvements of manual pages (rh #1612554)


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-1
changelog:
  - Update to 1.20.0 release
  - fix license comments for RPM package (rh #1723395)
  - dhcp: disable experimental nettools DHCP plugin


author: Thomas Haller <thaller@redhat.com> - 1:1.20.0-3
changelog:
  - wifi: detect FT support per device to fix issues with driver support (rh #1743730)
  - doc: fix default values in pre-generated documentation (rh #1737945)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.0-0.1
changelog:
  - Update to 1.21.3, a development snapshot of NetworkManager 1.22
  - support configuring default route as a regular, static route (rh #1714438)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.0-0.2
changelog:
  - Update to 1.22-rc1 (1.21.90)
  - large internal rework of libnm's NMClient
  - dhcp: switch implementation of "internal" DHCP to nettools' n-dhcp4
  - add support for carrier state of devices on D-Bus/libnm (rh #1722024)
  - cloud-setup: add initial and experimental tool for configuring in cloud (rh #1642461)
  - dhcp: support configuring FQDN hostname flags (rh #1649368)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.2-1
changelog:
  - Update to 1.22.2
  - core,libnm: expose capability for OVS support (rh #1785147)
  - dhcp: various bugfixes for nettools n-dhcp4 plugin


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.4-1
changelog:
  - Update to 1.22.4
  - dhcp: fix behavior of internal DHCP client when the server sends a NAK (rh #1787219)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.6-1
changelog:
  - Update to 1.22.6
  - nm-device: add new pending action to keep the device busy when in between states (rh #1759956)
  - cloud-setup: avoid unsupported settings in systemd service unit (rh #1791758)
  - do not create virtual device if master is not present (rh #1795919)
  - allow IPv6 RA timeout to be set to a value higher than 120 seconds (rh #1795957)
  - fix behaviour when 'ipv4.dhcp-timeout' option is set to 'infinity' (rh #1791378)


author: Antonio Cardace <acardace@redhat.com> - 1:1.22.8-1
changelog:
  - Update to 1.22.8
  - Added configuration option to customize IPv6 RA timeout (rh #1801158)
  - Removed length limitation for OVS Bridge, Patches and Interfaces (only Patch types) names (rh #1788432)
  - Reworked asynchronous deactivation of OVS interfaces (rh #1787989, rh #1782701)
  - Fixed failure when creating team interfaces (rh #1798947)
  - ifcfg-rh: fix clearing ovs slave type from ifcfg-rh file (rh #1804167)
  - Fixed bug causing virtual devices to not be available after AddConnection()/Update() (rh #1804350)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.22.8-3
changelog:
  - dhcp: keep trying after a send failure (rh #1806516)
  - ovs: fail port enslavement when the bridge is not found (rh #1797696)


author: Thomas Haller <thaller@redhat.com> - 1:1.22.8-4
changelog:
  - core: fix leaking device state files in /run (rh #1810153)
  - dhcp: fix crash in nettools client when leaking GSource (rh #1810188)


author: Thomas Haller <thaller@redhat.com> - 1:1.25.1-1
changelog:
  - update to 1.25.1 (development)
  - improve documentation (rh #1651594, rh #1819259)
  - vrf: add support (rh #1773908)
  - bond: improve setting default options for miimon and updelay (rh #1805184, rh #1806549)
  - bluetooth: fix crash handling DUN modem (rh #1826635)
  - core: fix potential infinite loop with prefix delegation (rh #1488030)
  - initrd: fixes for running NetworkManager in initrd (rh #1627820, #1710935, #1744935, #1771792)
  - core: prevent multiple attempts to create default wired connection (rh #1687937)
  - bridge: support more options (rh #1755768)
  - libnm,dbus: expose HwAddress for all device types (rh #1786937)
  - core: fix route priority for IPv6 (rh #1814557)
  - core: fix crash during reapply (rh #1816067)
  - core: clear IP address from bridge slave (rh #1816517)
  - ovs: support changing MTU of OVS interfaces (rh #1820052)
  - nm-online: support setting timeout for NetworkManager-wait-online (rh #1828458)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.25.2-1
changelog:
  - update to 1.25.2 (development)
  - support ethtool coalesce and ring options (rh #1614700)
  - core: improve synchronization of qdiscs with kernel (rh #1815875)
  - team: support running without D-Bus (rh #1784363)
  - core: fix potential crash when autoactivating child connections (rh #1778073)
  - ethernet: reset original autonegotiation/speed/duplex settings on deactivation (rh #1807171)
  - core: fix setting IPv6 token in kernel (rh #1819680)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-0.1
changelog:
  - update to 1.26-rc1 (1.25.90)
  - core: support more tc qdiscs (tbf and sfq) (rh #1546802)
  - core: support match devices for connection profile by PCI address (ID_PATH) (rh #1673321)
  - ovs: fix peer property for OVS patch interface (rh #1845216)
  - doc: add manual pages nm-settings-dbus and nm-settings-nmcli (rh #1614726)
  - wifi: don't block autoconnect for profiles that never succeeded to connect (rh #1781253)
  - dbus,nmcli: highlight externally managed devices (rh #1816202)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2
changelog:
  - update to 1.26-rc2 (1.25.91)
  - initrd: set ipv6.method=auto when using IPv4 static configuration (rh #1848943)
  - cloud-setup: add support for Google Cloud load-balancing routes (rh #1821787)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.26.0-0.2.1
changelog:
  - device: restart DHCP only for devices that are active or activating (rh #1852612)
  - initrd: fix generating default BOOTIF= connection (rh #1853277)
  - ovs: fix race condition when setting MAC address for ovs interfaces (rh #1852106)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - device: reset SR-IOV parameters on activation failure (rh #1819587)
  - initrd: enable ipv6.method=auto with ip=dhcp6 (rh #1854323)
  - core: add "nm-shared" zone for firewalld for shared mode (rh #1834907)
  - ppp: fix taking control of link (rh #1849386)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-2
changelog:
  - core: fix generation of local routes for VRF devices (rh #1857133)
  - team: fix crash on failure to connect to teamd (rh #1856723)
  - core: fix detecting failure of master active-connection (rh #1845018)
  - core: fix warning about setting active_slave of bond when activating master (rh #1858326)
  - import translations (rh #1820552)


author: Thomas Haller <thaller@redhat.com> - 1:1.26.0-3
changelog:
  - core: fix managing devices after resuming from sleep (rh #1855563)
  - dhcp: fix BPF filter for internal client on big endian arch (rh #1861488)
  - core: support warning log setting IPv6 MTU with IPv6 disabled (rh #1840989)
  - wifi: fix crash parsing incomplete BSS info (rh #1866395)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-4
changelog:
  - bond: fix Reapply does not update bond options (rh #1847814)
  - dhcp: support DHCPv6 fqdn_fqdn option for hostname (rh #1858344)


author: Antonio Cardace <acardace@redhat.com> - 1:1.26.0-7
changelog:
  - dhcp: add dhcp-vendor-class-identifier option (rh #1871042)
  - initrd: parse 'rd.net.dhcp.vendor-class' kernel cmdline arg (rh #1872299)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.28.0-0.1
changelog:
  - Update to 1.27.3 (development)
  - device: enforce the absence of a master during activation (rh #1869079)
  - bond: fix race condition setting the "active_slave" option (rh #1856640)


author: Antonio Cardace <acardace@redhat.com> - 1:1.30.0-0.1
changelog:
  - Update to 1.29.1 (development)
  - add library for handling profiles in keyfile format (rh #1813334)
  - initrd: allow disabling NICs during boot (rh #1883958)
  - allow `NM.Device.get_applied_connection_async()` to run by non-privilege user (rh #1882380)
  - nmcli ignores /etc/terminal-colors.d/nmcli.scheme (rh #1886336)
  - pass bridge master to wpa_supplicant when Wlan is part of bridge (rh #1888051)
  - add infiniband support in initrd (rh #1883173)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.2
changelog:
  - device: fix crash in nm_device_reactivate_ip_config()
  - dns: fix crash in systemd-resolved DNS plugin (rh #1894839)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.3
changelog:
  - Update to 1.29.3 (development)
  - Support changing external-ids of OVS bridges and interfaces (rh #1866227)
  - Add a hostname setting (rh #1766944)
  - Support creating veth interfaces (rh #1901523)
  - initrd: fix parsing of ip= arguments with empty first token (rh #1900260)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.4
changelog:
  - Update to 1.29.6 (development)
  - initrd: disable ipv4 and ipv6 by default for vlan parent connection (rh #1903175)
  - initrd: fix parsing of ip= argument with dotted interface name (rh #1898294)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.6
changelog:
  - Update to 1.29.8 (development)
  - initrd: accept zero-byte prefix for BOOTIF MAC address (rh #1904099)
  - core: fix bond port wrongly detached by dispather call (rh #1888348)
  - cloud-setup: add manual page (rh #1867997)
  - core: fix handling timeout for IPv6 RDNSS,DNSSL option in RA (rh #1874743)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.7
changelog:
  - Update to 1.29.9 (development)
  - By default check all devices for hostname reverse DNS lookup (rh #1766944)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.30.0-0.8
changelog:
  - Update to 1.29.10 (development)
  - bond: introduce new 'vlan+srcmac' xmit_hash_policy option (rh #1915457)
  - ovs: clean up interfaces from ovsdb at startup (rh #1861296)


author: Antonio Cardace <acardace@redhat.com> - 1:1.30.0-0.9
changelog:
  - Update to 1.29.11 (development)
  - bond: fix changing mode when the device is created externally (rh #1870691)
  - ovs: fix firewalld configuration for ovs-ports (rh #1921107)
  - ovs: avoid race condition when system interface is removed from ovsdb (rh #1923248)
  - doc: mention NETMASK as alternative to PREFIX for addresses in `man nm-settings-ifcfg-rh` (rh #1925123)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-0.10
changelog:
  - Update to 1.30-rc1 (1.29.90-dev) (development)
  - cloud-setup: fix removing IPv4 address (rh #1920838)


author: Thomas Haller <thaller@redhat.com> - 1:1.30.0-3
changelog:
  - Increase LimitNOFILE to allow more than 1024 file descriptors (rh #1926599).
    This requires a suitable libndp version that can handle many file descriptors (rh #1933041).


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-0.4
changelog:
  - Update to 1.31.5 (development)
  - core: configure MTU early before DHCP completes (rh #1890234)
  - core: fix activation handling for ports (rh #1955101, rh #1959961)
  - core: add support for ethtool pause parameters (rh #1899372)
  - dhcp: support option 249 (Microsoft Classless Static Route) (rh #1959461)


author: Thomas Haller <thaller@redhat.com> - 1:1.32.0-0.5
changelog:
  - update to 1.32-rc1 (1.31.90) (release candidate)
  - core: allow to preserved external TFilter and QDisc settings (rh #1928078)
  - bond: support "tlb_dynamic_lb" in "balance-alb" mode (rh #1959934)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - veth: fix null error when deleting the device (rh #1915278)
  - veth: fix crash when deleting the device profile (rh #1915276)
  - firewall: add new "nftables" firewall-backend (rh #1548825)
  - DNS: fix lookup of hostname via DNS (rh #1970335)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - device: prefer IPv6 not-deprecated addresses for hostname lookup (rh #1820770)
  - docs: describe qdiscs and tfilters in nm-settings manpage (rh #1847894)
  - cloud-setup: preserve IPv4 addresses/routes/rules from profile (rh #1971527)
  - daemon: performance improvements (rh #1847125)
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1961251, CVE-2020-13529)
  - Add bridge_role in 802-3-ethernet.s390-options using nmcli (rh #1935842)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 with fixes of:
  - nmcli: show DNS SEARCH field in device information. (rh #1852317)
  - device: avoid crash setting VPN config during unrealize. (rh #1912423)
  - core: send ARP announcements when there is carrier. (rh #1956793)
  - core: add ipv[46].required-timeout option to wait for IP configuration while activating. (rh #1961666)
  - core: start DHCPv6 when a prefix delegation is needed for shared mode. (rh #1973199)
  - ifcfg: log warning about invalid keys in ifcfg files. (rh #1959656)
  - cloud-setup: add support for Aliyun cloud. (rh #1823315)


author: Gris Ge <fge@redhat.com> - 1:1.32.6-1
changelog:
  - Upgrade to 1.32.6 release
  - core: fix adding stale local routes when address changes (rh #1979192)
  - dhcp: handle filename/bootfile_name DHCP option and write it to device state
    file for initrd/kickstart (rh #1979387)
  - initrd: add "ib.pkey=" command line option (rh #1805708)
  - core: introduce "keep-configuration" device option to forcefully activate a
    profile on start (rh #1934122)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.32.8-1
changelog:
  - Upgrade to 1.32.8 release
  - firewalld: configure zones on "Reloaded" signal (rh #1982403)
  - ethtool: support configuring newer gigabit ethernet speeds (rh #1897004)
  - core: fix wrong MTU for bridge interfaces (rh #1973536)
  - cloud-setup: fix gateway address for Aliyun cloud (rh #1823315)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.10-1
changelog:
  - update to 1.32.10 release
  - nm-initrd-generator: add kernel command line options ethtool autoneg and speed (rh #1940934)
  - IP: fix the order of IP addresses during service restart (rh #1988751)


author: Ana Cabral <acabral@redhat.com> - 1:1.34.0-0.1
changelog:
  - Upgrade to 1.33.2 release (development) (rh #1996617)
  - Obtain permanent hardware address via netlink or lookup via ethtool (rh #1987286)
  - Show more information about routes in nmcli (rh #1870059)
  - Add test for creation and activation of new connection via interface (rh #1763054)
  - ethtool: fix setting autonegotiation/speed on reactivation (rh #1897004)
  - Fix MTU's decrease after the removal of 802-3-ethernet configuration (rh #1973536)


author: Ana Cabral <acabral@redhat.com> - 1:1.34.0-0.2
changelog:
  - Upgrade to 1.33.3 release (development)
  - platform: don't listen for tc netlink messages (rh #1753677)
  - cloud-setup: better handle other route configuration (rh #2006370)
  - Fix autoneg advertisement (rh #1897004)


author: Ana Cabral <acabral@redhat.com> - 1:1.34.0-0.3
changelog:
  - Upgrade to 1.33.4 release (development)
  - Deprecate "master"/"slave" on bonding and bridge API (rh #1949023)
  - core: Fix configuration reload for active devices (rh #1852445)
  - Update systemd-udev dependency (rh #2012123)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.36.0-0.1
changelog:
  - Upgrade to 1.35.1 release (development)
  - core: refactor IP configuration code (rh #1868254)
  - core: fix deleting external route during service restart (rh #2010640)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.2
changelog:
  - Upgrade to 1.35.2 release (development)
  - initrd: handle ip=dhcp,dhcp6 specially to wait for both IPv4 and IPv6 (rh #1961666)
  - bridge: fix ageing_time bridge option (rh #1871950)
  - core: make sure Device and AC emit StateChanged a bit later (rh #2006677)
  - ovsdb: deactivate removed device if does not have a master (rh #2022275)
  - nmcli: fix setting wake-on-lan property on edit mode (rh #2016348)
  - core: fix wrong DHCPv6 timeouts due to endianness problem (rh #2027267)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.3
changelog:
  - Upgrade to 1.35.3 release (development)
  - device: fix update of the ip-iface property (rh #2027490)
  - platform: add bpf filter to ignore routes from routing daemons (rh #1861527)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - ipv4ll: fix assert on external LL address removal (rh #2028404)
  - openvswitch: add DPDK n_rxq configuration option (rh #2001563)
  - device: ignore ndisc signal if device has no ifindex (rh #2013266)
  - bluetooth: fix invalid assertion in NMBluezManager:dispose() (rh #2028427)
  - supplicant: enable SAE-H2E (rh #2019396)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983747)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - revert: generate docs during build instead of using pre-generated (rh #1995915)
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.37.2-1
changelog:
  - Upgrade to 1.37.2 release (development)
  - core: preserve external ports during checkpoint rollback (rh #2035519)
  - core: fix ovs bridge deletion (rh #1935026)
  - core: shorten hostname when too long (rh #2033643)
  - nm-online: bump the timeout upper limit to 2073600 seconds (rh #2025617)
  - cloud-setup: fix crash when handling sigterm (rh #2027674)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.37.3-1
changelog:
  - Upgrade to 1.37.3 release (development)
  - core: allow reapply on autoconnect-slaves property change (rh #2065049)
  - wifi: do not advertise channels outside regulatory domain (rh #2062785)
  - wifi: warn about WEP being phased out (rh #2030997)
  - bond: reject reapply when fail_over_mac was changed (rh #2003214)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.0-1
changelog:
  - Update to 1.39.0 release (development)
  - ovs, dpdk: fix creating ovs-interface when the ovs-bridge is netdev
    (rh #2001792)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.2-1
changelog:
  - Update to 1.39.2 release (development)
  - dhcp: set "src" attribute for DHCP routes (rh #1995372)
  - dhcp: drop internal DHCPv4 client based on systemd code (rh #2073067)
  - core: delay startup complete for DNS update (rh #2049421)
  - nmcli: support offline mode to create and edit keyfiles (rh #1361145)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.3-1
changelog:
  - Update to 1.39.3 release (development)
  - dhcp: save leases in /run (rh #1943153)
  - ovs: use asynchronous attach-port (rh #2052441)
  - device: set MTU after attaching bond port (rh #2071985)
  - l3cfg: drop NM_L3_CFG_COMMIT_TYPE_ASSUME and assume_config_once (rh #2077605)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.5-1
changelog:
  - Update to 1.39.5 release (development)
  - device: commit l3cfg on link change only when the device is activating (rh #2079054)
  - l3cfg: during reapply, also clear IPv6 temporary addresses (rh #2082230)
  - dhcp: support overlong DHCP host names (rh #2033643)
  - cloud-setup: reorder addresses to honor "primary_ip_address" (rh #2082000)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.6-1
changelog:
  - Update to 1.39.6 release (development)
  - Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - initrd: set a default carrier timeout of 10 seconds in initrd (rh #2079277)
  - dhcp: wait DAD completion for DHCPv6 addresses (rh #2096386)
  - libnm: support wait-activation-delay property (rh #2008337)
  - veth: fix veth activation on booting (rh #2105956)
  - support a ipv6.addr-gen-mode knob in the global config (rh #208268)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - dhcp: fix EXTENDED DHCP event to accept lease for dhclient plugin (rh #2109285)
  - ovs: honor unmanaged setting also for interfaces that fail (rh #2077950)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - bridge: fix reapply of non-bridge properties (rh #2092762)
  - bridge: fix wired.mtu reapply (rh #2076131)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.2-1
changelog:
  - Update to 1.40.2 release
  - core: fix persisting Infiniband partition connections (rh #2122703)
  - core: wait for carrier before resolving hostname via DNS (rh #2118817)
  - core: fix handling of autoconnect-retries with multiconnect (rh #2039734)
  - nmcli: allow removing a port connection from a bond (rh #2126262)
  - initrd: decrease autoconnect priority for initrd connections (rh #2089707)
  - dhcp: wait DAD completion for DHCPv6 addresses (send decline) (rh #2096386, rh #2099794)
  - ovs: wait that links disappear during initial cleanup (rh #2060031)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.40.10-1
changelog:
  - Update to 1.40.10 release
  - cloud-setup: preserve addresses added externally (rh #2132754)
  - veth: fix detection of existing interface and peer (rh #2129829)
  - dns: ensure dnsmasq is stopped after disabling it and a restart (rh #2120763)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.40.12-1
changelog:
  - Update to 1.40.12 release
  - core: retry if a rtnetlink socket runs out of buffer space (rh #2154350)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.40.16-5
changelog:
  - support bond port prio property (rh #1920398)
  - team: don't try to connect to teamd in update_connection() (rh #2182029)


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.31-3
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
    - add code to restore binary compatibility in libIPMIlanserv.so
      and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping
      compatibility with 2.0.31 as well.


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Al Stone <ahs3@redhat.com> - 20180508-1
changelog:
  - Update to 20180508 source tree, including patch refeshes. Closes BZ#1544048
  - acpidump/acpixtract no longer have alternatives, so remove the scriptlets
    that maintain them and just install them directly; we do leave the pre-
    and post- scriptlets to remove the alternatives for now.  Closes BZ#1576970
  - Typo: OPT_LDFLAGS, not OPT_LDLAGS in the build section.  Closes BZ#1560542


author: Al Stone <ahs3@redhat.com> - 20180508-2
changelog:
  - %pre and %post scriptlets fail -- stupid thinko where I inadvertently
    tested for alternatives not existing, vs existing


author: Al Stone <ahs3@redhat.com> - 20180629-1
changelog:
  - Update to 20180629 source tree, including patch refeshes. Closes BZ#1584923
  - Includes upstream fix for #1592971 (iasl segfault).


author: Al Stone <ahs3@redhat.com> - 20180629-3
changelog:
  - Add in man page for acpiexamples.  So that the man page makes some sense,
    also copy the source code used for acpiexamples to the doc directory for
    this package.  Closes BZ#1611145.
  - Add in the converterSample.asl file from the misc tests.  Clean up the
    run-misc-tests.sh script, too, to make it more robust by simplifying
    the work done.


author: Dean Nelson <dnelson@redhat.com> - 20180629-5
changelog:
  - Switch to using '%autopatch -p1' and eliminate long list of '%patch<N> -p1 -b <name>'.
  - Backport 0b03aa8ebd7a ("CXL 2.0: CEDT: Add new CEDT table").
  - Backport b980be9b7fd3 ("CXL 2.0: CEDT: Add table and subtable dumping").
  - Backport 187e2f286f50 ("CXL 2.0: CEDT: Add template").
  - Backport 1e6dded267b1 ("iASL/TableCompiler: Add compilation support for CEDT table.").
  - Backport 5ace82441a34 ("Add defines for the CXL Host Bridge Structure (CHBS)").
  - Backport 699fc72e5693 ("Add the CFMWS structure definition to the CEDT table").
  - Backport ec39d05939c7 ("Disassembler: add missing strings to decode subtable types").
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").


author: Sumit Bose <sbose@redhat.com> - 0.8.2-6
changelog:
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260]
  - No longer able to delete computer from AD using adcli [#1846882]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1846878]
  - Typo in adcli update --help option [#1791611]
  - Manpage and help does not explain the use of "-C" option [#1791545]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-8
changelog:
  - Add --use-ldaps option to adcli update as well [#1883467]
  - Cannot join a pre-staged Computer Account on AD in Custom OU using Delegated
    user [#1734764]
  - missing documentation for required AD rights for adcli join and net
    join [#1852080]
  - [RFE] Add new mode to just create an AD account to be able to connect to
    LDAP [#1854112]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-10
changelog:
  - [RFE] Adcli and Realm Error Code Optimization Request [#1889386]
  - [RFE] adcli should allow to modify DONT_EXPIRE_PASSWORD attribute [#1769644]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-12
changelog:
  - [RFE] Allow adcli to create AD user with password as well as set or reset
    existing user password [#1952828]
  - [RFE] add option to populate "managed by" computer attribute [#1690920]


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.20-7
changelog:
  - the ownership of the spool directory should be root as at is configured
    with daemon username root
  - document the -n option


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-1
changelog:
  - Update to new 3.10.3 stable version.
  - Remove ppc64/ppc64le related patches.
  - All packages now use -A option to specify the target CPU/Architecture instead of 
  sed substitutions and auto detection. The packages should now be less dependant on the 
  builder machine used.
  - Base package for each architecture should now be configured to be compatible with the 
  most basic machine of given type.
  - In addittion to base package, added some optimized packages for more advanced CPUs for
  most architectures.
  - Dropped sse2/sse3 subpackages for ix86


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-6
changelog:
  * Pass all required compiler/linker flags
  - use annobin plugin
  - generate assembler build notes
  Related: #1624098


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-8
changelog:
  * Update the s390 subpackages:
  - The base pakcage is now optimized to z13
  - New subpackage is introduced: z14
  - All remaining subpackages for s390 are being deprecated
  - Clean up of the spec file 
  - Some commented out subpackages were removed form the spec
  - These subpackages were not built/shipped -> no change from the users point of view
  Resolves: #1782560
  Resolves: #1780286
  Resolves: #1782561


author: Kamil Dudka <kdudka@redhat.com> 2.4.47-19
changelog:
  - fix test-suite failure with perl-5.26.0 (#1473853)
  - apply patches automatically to ease maintenance
  - update URL of the upstream source tarball


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.15.20191104git1c2f876
changelog:
  resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates
  resolves: rhbz#1767054 - move audit rules to shared data directory
  resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files
  resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit
  resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin


author: Sergio Correia <scorreia@redhat.com> - 3.0.5-1
changelog:
  - Rebase audit package on 8.6
    Resolves: rhbz#1939406
    Resolves: rhbz#1906065
    Resolves: rhbz#1921447
    Resolves: rhbz#1927884
    Resolves: rhbz#1921658


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-3
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062612 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-4
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories


author: Radovan Sroka <rsroka@redhat.com> - 3.0.7-5
changelog:
  - Introduce new fanotify record fields
  Resolves: rhbz#2216668
  - invalid use of flexible array member
  Resolves: rhbz#2116867


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-5
changelog:
  - Fix completion with special characters in augtool. (RHBZ#1232224)
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1798486)
  - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080238)
  - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325)
  - backup-restore now works correctly (RHBZ #2066535)
  - add with-subid to sssd profile (RHBZ #2063750)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - Update translations (RHBZ #2139696)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2216755)
  - Update translations (RHBZ #2189557)
  - Do not prompt for password twice when changing password of local user (RHBZ #2179607)


author: Ian Kent <ikent@redhat.com> - 5.1.4-93
changelog:
  - bz2165143 - Autofs reports can't connect to sssd, retry for 10 seconds when
    real problem is empty LDAP object
    - improve handling of ENOENT in sss setautomntent().
    - dont immediately call function when waiting.
  - Resolves: rhbz#2165143


author: Ian Kent <ikent@redhat.com> - 5.1.4-102
changelog:
  - bz2177998 - deadlock while reading amd maps
    - fix return status of mount_autofs().
    - don't close lookup at umount.
    - fix deadlock in lookups.
    - dont delay expire.
    - make amd mapent search function name clear.
    - rename statemachine() to signal_handler().
    - make signal handling consistent.
    - fix incorrect print format specifiers in get_pkt().
    - eliminate last remaining state_pipe usage.
    - add function master_find_mapent_by_devid().
    - use device id to locate autofs_point when setting log priotity.
    - add command pipe handling functions.
    - switch to application wide command pipe.
    - get rid of unused field submnt_count.
    - fix mount tree startup reconnect.
    - fix unterminated read in handle_cmd_pipe_fifo_message() (Coverity).
  - Resolves: rhbz#2177998


author: Ian Kent <ikent@redhat.com> - 5.1.4-103
changelog:
  - bz2177998 - deadlock while reading amd maps
    - rebuild to avoid possible NVR problems.
  - Related: rhbz#2177998


author: Ian Kent <ikent@redhat.com> - 5.1.4-104
changelog:
  - bz2208408 - autofs fails to start with combination of +auto.master and
    local direct map lookups after upgrading to 5.1.4-93.el8
    - fix memory leak in sasl_do_kinit() (Coverity).
    - fix fix mount tree startup reconnect.
  - Resolves: rhbz#2208408


author: Ian Kent <ikent@redhat.com> - 5.1.4-105
changelog:
  - bz2207801 - amd map format netgoup selector function not working
    - fix date for revision 104 changelog entry.
    - fix use_ignore_mount_option description.
    - include addtional log info for mounts.
    - fix amd selector function matching.
    - get rid entry thid field.
    - continue expire immediately after submount check.
    - add buffer length checks to autofs mount_mount().
    - eliminate realpath from mount of submount.
    - eliminate root param from autofs mount and umount.
    - remove redundant fstat from do_mount_direct().
    - get rid of strlen call in handle_packet_missing_direct().
    - remove redundant stat call in lookup_ghost().
    - set mapent dev and ino before adding to index.
    - change to use printf functions in amd parser.
    - dont call umount_subtree_mounts() on parent at umount.
    - dont take parent source lock at mount shutdown.
    - eliminate buffer usage from handle_mounts_cleanup().
    - fix possible use after free in handle_mounts_exit().
    - make submount cleanup the same as top level mounts.
    - eliminate some more alloca usage.
    - add soucre parameter to module functions.
    - add ioctlfd open helper.
    - make open files limit configurable.
  - Resolves: rhbz#2207801


author: Ian Kent <ikent@redhat.com> - 5.1.4-106
changelog:
  - bz2214444 - The sss lookup modules handles error return incorrectly
    in some cases
    - fix some sss error return cases.
  - Resolves: rhbz#2214444


author: Ian Kent <ikent@redhat.com> - 5.1.4-107
changelog:
  - bz2216877 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix incorrect matching of cached wildcard key
  - Resolves: rhbz#2216877


author: Ian Kent <ikent@redhat.com> - 5.1.4-108
changelog:
  - bz2216877 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix the "fix incorrect matching of cached wildcard key" patch.
  - Related: rhbz#2216877


author: Ian Kent <ikent@redhat.com> - 5.1.4-109
changelog:
  - bz2213267 - filesystems mount and expire immediately
    - fix expire retry looping.
  - Resolves: rhbz#2213267


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.11
changelog:
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.12
changelog:
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.16
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.20
changelog:
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.21
changelog:
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.23
changelog:
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.26
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.29
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757).
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.33
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.34
changelog:
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.38
changelog:
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.41
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.5
changelog:
  - remove fullstop from Summary tag.
  - change Buildroot to recommended form.
  - replace Prereq with Requires.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.13
changelog:
  - make double quote handing consistent (at least as much as we can).
  - fix handling of trailing white space in wildcard lookup (forward port bz 199720).
  - check fqdn of each interface when matching export access list (bz 213700).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.17
changelog:
  - make use of spaces and tabs in spec file consistent.
  - escape embedded macro text in %changelog.
  - eliminate redundant %version and %release.
  - remove redundant conditional check from %clean.
  - remove redundant exit from %preun.
  - correct %defattr spec.
  - remove empty %doc and redundant %dir misc lines.
  - combine program module spec lines into simpler one line form.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.18
changelog:
  - update the "task done race" patch to fix a deadlock.
  - added URL tag.
  - removed obsoletes autofs-ldap.
  - replaced init directory paths with %{_initrddir} macro.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc3.24
changelog:
  - add "condrestart" to init script (bz 228860).
  - add "@network" and .domain.name export check.
  - fix display map name in mount entry for "-hosts" map.


author: Ian Kent <ikent@redhat.com> - 5.0.1-1
changelog:
  - update to release tar.
  - fix return check for getpwuid_r and getgrgid_r.
  - patch to give up trying to update exports list while host is mounted.
  - fix to "@network" matching. 
  - patch to check for fstab update and retry if not updated.


author: Ian Kent <ikent@redhat.com> - 5.0.1-5
changelog:
  - drop "DEFAULT_" prefix from configuration names.
  - add option to select replicated server at random (instead of
    ping response time) (bz 227604).
  - fix incorrect cast in directory cleanup routines (bz 231864).


author: Ian Kent <ikent@redhat.com> - 5.0.1-6
changelog:
  - fix directory creation for browse mounts.
  - fix wildcard map handling and improve nsswitch source map update.


author: Ian Kent <ikent@redhat.com> - 5.0.1-8
changelog:
  - add configuration variable to control appending of global options (bz 214684).
  - add command option to set a global mount options string (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-9
changelog:
  - upstream fix for filesystem is local check.
  - disable exports access control check (bz 203277).
  - fix patch to add command option for set a global mount options (bz 214684).


author: Ian Kent <ikent@redhat.com> - 5.0.1-16
changelog:
  - add ldaps support.
    - note: it's no longer possible to have multiple hosts in an ldap map spec.
    - note: to do this you need to rely on the ldap client config.


author: Ian Kent <ikent@redhat.com> - 5.0.2-2
changelog:
  - include krb5.h in lookup_ldap.h (some openssl doesn't implicitly include it).
  - correct initialization of local var in parse_server_string.


author: Ian Kent <ikent@redhat.com> - 5.0.2-5
changelog:
  - fix mount point directory creation for bind mounts.
  - add quoting for exports gathered by hosts map.


author: Ian Kent <ikent@redhat.com> - 5.0.2-10
changelog:
  - mark map instances stale so they aren't "cleaned" during updates.
  - fix large file compile time option.


author: Ian Kent <ikent@redhat.com> - 5.0.2-11
changelog:
  - don't fail on empty master map.
  - add support for the "%" hack for case insensitive attribute schemas.


author: Ian Kent <ikent@redhat.com> - 5.0.2-14
changelog:
  - update patch to prevent failure on empty master map.
  - if there's no "automount" entry in nsswitch.conf use "files" source.
  - add LDAP schema discovery if no schema is configured.


author: Ian Kent <ikent@redhat.com> - 5.0.2-16
changelog:
  - add descriptive comments to config about LDAP schema discovery.
  - work around segfault at exit caused by libxml2.
  - fix foreground logging (also fixes shutdown needing extra signal bug).


author: Ian Kent <ikent@redhat.com> - 5.0.2-18
changelog:
  - fix schema selection in LDAP schema discovery.
  - check for "*" when looking up wildcard in LDAP.
  - fix couple of edge case parse fails of timeout option.
  - add SEARCH_BASE configuration option.
  - add random selection as a master map entry option.
  - re-read config on HUP signal.
  - add LDAP_URI, LDAP_TIMEOUT and LDAP_NETWORK_TIMEOUT configuration options.
  - fix deadlock in submount mount module.
  - fix lack of ferror() checking when reading files.
  - fix typo in autofs(5) man page.
  - fix map entry expansion when undefined macro is present.
  - remove unused export validation code.
  - add dynamic logging (adapted from v4 patch from Jeff Moyer).
  - fix recursive loopback mounts (Matthias Koenig).
  - add map re-load to verbose logging.
  - fix handling of LDAP base dns with spaces.
  - handle MTAB_NOTUPDATED status return from mount.
  - when default master map, auto.master, is used also check for auto_master.
  - update negative mount timeout handling.
  - fix large group handling (Ryan Thomas).
  - fix for dynamic logging breaking non-sasl build (Guillaume Rousse).
  - eliminate NULL proc ping for singleton host or local mounts.


author: Ian Kent <ikent@redhat.com> - 5.0.2-21
changelog:
  - Bug 421371: CVE-2007-5964 autofs defaults don't restrict suid in /net [rawhide]
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.2-23
changelog:
  - Bug 397591 SELinux is preventing /sbin/rpc.statd (rpcd_t) "search" to <Unknown> (sysctl_fs_t).
    - prevent fork between fd open and setting of FD_CLOEXEC.


author: Ian Kent <ikent@redhat.com> - 5.0.2-25
changelog:
  - Bug 426401: CVE-2007-6285 autofs default doesn't set nodev in /net [rawhide]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.


author: Ian Kent <ikent@redhat.com> - 5.0.3-3
changelog:
  - catch "-xfn" map type and issue "no supported" message.
  - another correction for handling of LDAP base dns with spaces.


author: Ian Kent <ikent@redhat.com> - 5.0.3-4
changelog:
  - correction to the correction for handling of LDAP base dns with spaces.
  - avoid using UDP for probing NFSv4 mount requests.
  - use libldap instead of libldap_r.


author: Ian Kent <ikent@redhat.com> - 5.0.3-6
changelog:
  - fix expire calling kernel more often than needed.
  - fix unlink of mount tree incorrectly causing autofs mount fail.
  - add miscellaneous device node interface library.
  - use miscellaneous device node, if available, for active restart.
  - device node and active restart fixes.
  - update is_mounted to use device node ioctl, if available.


author: Ian Kent <ikent@redhat.com> - 5.0.3-8
changelog:
  - revert miscellaneous device node related patches.
  - add missing check for zero length NIS key.
  - fix incorrect match of map type name when included in map name.
  - update rev 7 sasl callbacks patch.


author: Ian Kent <ikent@redhat.com> - 5.0.3-18
changelog:
  - don't abuse the ap->ghost field on NFS mount.
  - multi-map doesn't pickup NIS updates automatically.
  - eliminate redundant DNS name lookups.
  - mount thread create condition handling fix.
  - allow directory create on NFS root.
  - check direct mount path length.
  - fix incorrect in check in get user info.
  - fix a couple of memory leaks.


author: Ian Kent <ikent@redhat.com> - 5.0.3-21
changelog:
  - add upstream bug fix patches
    - add command line option to override is running check.
    - don't use proc fs for is running check.
    - fix fail on included browse map not found.
    - fix incorrect multi source messages.
    - clear stale flag on map read.
    - fix proximity other rpc ping timeout.
    - refactor mount request vars code.
    - make handle_mounts startup condition distinct.
    - fix submount shutdown handling.
    - try not to block on expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - fix nfs4 colon escape handling.
    - check replicated list after probe.
    - add replicated server selection debug logging.
    - update replicated server selection documentation.
    - use /dev/urandom instead of /dev/random.
    - check for mtab pointing to /proc/mounts.
    - fix interface config buffer size.
    - fix percent hack heap corruption.


author: Ian Kent <ikent@redhat.com> - 5.0.3-23
changelog:
  - add upstream bug fixes
    - bug fix for mtab check.
    - bug fix for zero length nis key.
    - update for ifc buffer handling.
    - bug fix for kernel automount handling.
  - warning: I found a bunch of patches that were present but not
    being applied.


author: Ian Kent <ikent@redhat.com> - 5.0.3-25
changelog:
  - fix fd leak at multi-mount non-fatal mount fail.
  - fix incorrect multi-mount mountpoint calcualtion.


author: Ian Kent <ikent@redhat.com> - 5.0.3-26
changelog:
  - add map-type-in-map-name fix patch to sync with upstream and RHEL.
  - don't readmap on HUP for new mount.
  - add NIS_PARTIAL to map entry not found check and fix use after free bug.


author: Ian Kent <ikent@redhat.com> - 5.0.3-28
changelog:
  - don't close file handle for rootless direct mounti-mount at mount.
  - wait submount expire thread completion when expire successful.
  - add inadvertantly ommitted server list locking in LDAP module.


author: Ian Kent <kent@redhat.com> - 5.0.3-30
changelog:
  - fix segv during library re-open.
  - fix incorrect pthreads condition handling for expire requests.
  - fix master map lexer eval order.
  - fix bad alloca usage.


author: Ian Kent <kent@redhat.com> - 5.0.4-5
changelog:
  - fix negative caching of non-existent keys.
  - fix ldap library detection in configure.
  - use CLOEXEC flag functionality if present.
  - fix select(2) fd limit.
  - make hash table scale to thousands of entries.


author: Ian Kent <ikent@redhat.com> - 5.0.4-8
changelog:
  - rename program map parsing bug fix patch.
  - use CLOEXEC flag functionality for setmntent also, if present.


author: Ian Kent <ikent@redhat.com> - 5.0.4-9
changelog:
  - fix hosts map use after free.
  - fix uri list locking (again).
  - check for stale SASL credentials upon connect fail.
  - add "forcestart" and "forcerestart" init script options to allow
    use of 5.0.3 strartup behavior if required.
  - always read entire file map into cache to speed lookups.
  - make MAX_ERR_BUF and PARSE_MAX_BUF use easier to audit.
  - make some easy alloca replacements.
  - update to configure libtirpc if present.
  - update to provide ipv6 name and address support.
  - update to provide ipv6 address parsing.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-15
changelog:
  - fix array out of bounds accesses and cleanup couple of other alloca() calls.
  - Undo mistake in copy order for submount path introduced by rev 11 patch.
  - add check for alternate libxml2 library for libxml2 tsd workaround.
  - add check for alternate libtirpc library for libtirpc tsd workaround.
  - cleanup configure defines for libtirpc.
  - add WITH_LIBTIRPC to -V status report.
  - add libtirpc-devel to BuildRequires.
  - add nfs mount protocol default configuration option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-21
changelog:
  - fix file map lookup when reading included or nsswitch sources.
    - a regression introduced by file map lookup optimisation in rev 9.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-26
changelog:
  - fix lsb init script header.
  - fix memory leak reading ldap master map.
  - fix st_remove_tasks() locking.
  - reset flex scanner when setting buffer.
  - zero s_magic is valid.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-28
changelog:
  - use intr option as hosts mount default.
  - sync kernel includes with upstream kernel.
  - dont umount existing direct mount on master re-read.
  - fix incorrect shutdown introduced by library relaod fixes.
  - improve manual umount recovery.
  - dont fail on ipv6 address when adding host.
  - always read file maps multi map fix.
  - always read file maps key lookup fixes.
  - add support for LDAP_URI="ldap:///<domain db>" SRV RR lookup.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-30
changelog:
  - fix incorrect dclist free.
  - srv lookup handle endianness.
  - fix bug introduced by library reload changes which causes autofs to
    not release mount thread resources when using submounts.
  - fix notify mount message path.
  - try harder to work out if we created mount point at remount.
  - fix double free in do_sasl_bind().
  - manual umount recovery fixes.
  - fix map type info parse error.


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-32
changelog:
  - fix an RPC fd leak.
  - don't block signals we expect to dump core.
  - fix pthread push order in expire_proc_direct().


author: Ian Kent <ikent@redhat.com> - 1:5.0.4-39
changelog:
  - fix libxml2 non-thread-safe calls.
  - fix direct map cache locking.
  - fix patch "dont umount existing direct mount on reread" deadlock.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-1
changelog:
  - update source to latest upstream version.
    - this is essentially a consolidation of the patches already in this rpm.
  - add dist tag to match latest RHEL-5 package tag format.


author: Ian Kent <kent@redhat.com> - 1:5.0.5-2
changelog:
  - fix included map read fail handling.
  - refactor ldap sasl authentication bind to eliminate extra connect
    causing some servers to reject the request. 
  - add mount wait parameter to allow timeout of mount requests to
    unresponsive servers.
  - special case cifs escape handling.
  - fix libxml2 workaround configure.
  - more code analysis corrections (and fix a typo in an init script).
  - fix backwards #ifndef INET6.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-6
changelog:
  - don't use master_lex_destroy() to clear parse buffer.
  - make documentation for set-log-priority clearer.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-17
changelog:
  - dont connect at ldap lookup module init.
  - fix random selection option.
  - fix disable timeout.
  - fix strdup() return value check.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-22
changelog:
  - fix get query dn failure.
  - fix ampersand escape in auto.smb.
  - add locality as valid ldap master map attribute.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-25.fc14
changelog:
  - make nfs4 default for replicated selection configuration (bz579949).
  - add simple bind authentication option (bz579951).


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-27.fc14
changelog:
  - fix master map source server unavailable handling.
  - add autofs_ldap_auth.conf man page.
  - fix random selection for host on different network.
  - make redhat init script more lsb compliant.
  - don't hold lock for simple mounts.
  - fix remount locking.
  - fix wildcard map entry match.
  - fix parse_sun() module init.
  - dont check null cache on expire.
  - fix null cache race.
  - fix cache_init() on source re-read.
  - fix mapent becomes negative during lookup.
  - check each dc server individually.
  - fix negative cache included map lookup.
  - remove state machine timed wait.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-28
changelog:
  - remove extra read master map call.
  - remove extra cache create call in master_add_map_source().
  - fix error handing in do_mount_indirect().
  - expire thread use pending mutex.
  - explicity link against the Kerberos library.
  - remove some log message duplication for verbose logging.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-32.fc15
changelog:
  - always read file maps mount lookup map read fix.
  - fix direct map not updating on reread.
  - add external bind method.
  - fix add simple bind auth.
  - add option to dump configured automount maps.
  - wait for master map to be available at start.


author: Ian Kent <ikent@redhat.com> - 1:5.0.5-36
changelog:
  - use weight only for server selection.
  - fix isspace() wild card substition.
  - auto adjust ldap page size.
  - fix prune cache valid check.
  - fix mountd vers retry.
  - fix expire race.
  - add lsb force-reload and try-restart.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-3
changelog:
  - improve mount location error reporting.
  - fix paged query more results check.
  - fix dumpmaps not reading maps.
  - fix result null check in read_one_map().
  - Fix LDAP result leaks on error paths.
  - code analysis fixes 1.
  - fix not bind mounting local filesystem.
  - update dir map-type patch for changed patch order.
  - fix wait for master source mutex.
  - fix submount shutdown race
  - fix fix map source check in file lookup.
  - add disable move mount configure option.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-5
changelog:
  - fix ipv6 name lookup check.
  - fix ipv6 rpc calls.
  - fix ipv6 configure check.
  - add piddir to configure.
  - add systemd unit support.
  - fix MNT_DETACH define.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-9
changelog:
  - add correct patch for "fix improve mount location error reporting".
  - add correct patch for "fix fix wait for master source mutex".


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-12
changelog:
  - ignore duplicate exports in auto.net.
  - add kernel verion check function.
  - add function to check mount.nfs version.
  - reinstate singleton mount probe.
  - rework error return handling in rpc code.
  - catch EHOSTUNREACH and bail out early.
  - systemd support fixes.
  - fix segmentation fault in do_remount_indirect().


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-15
changelog:
  - fix typo in libtirpc file name.
  - fix rework error return handling in rpc code.
  - allow MOUNT_WAIT to override probe.
  - improve UDP RPC timeout handling.
  - fix segfault in get_query_dn().
  - use strtok_r() in linux_version_code().
  - fix sss wildcard match.
  - fix dlopen() error handling in sss module.
  - fix configure string length tests for sss library.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix fix LDAP result leaks on error paths.
  - report map not read when debug logging.
  - duplicate parent options for included maps.
  - update ->timeout() function to not return timeout.
  - move timeout to map_source.
  - fix kernel verion check of version components.
  - dont retry ldap connect if not required.
  - check if /etc/mtab is a link to /proc/self/mounts.
  - fix nfs4 contacts portmap.
  - make autofs wait longer for shutdown.
  - fix sss map age not updated.
  - fix remount deadlock.
  - fix umount recovery of busy direct mount.
  - fix offset mount point directory removal.
  - remove move mount code and configure option.
  - fix remount of multi mount.
  - fix devce ioctl alloc path check.
  - refactor hosts lookup module.
  - remove cache update from parse_mount().
  - add function to delete offset cache entry.
  - allow update of multi mount offset entries.
  - add hup signal handling to hosts map.


author: Ian Kent <ikent@redhat.com> - 1:5.0.6-21
changelog:
  - fix systemd argument passing.
  - fix get_nfs_info() can incorrectly fail.
  - fix offset directory removal.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-3
changelog:
  - fix nobind sun escaped map entries.
  - fix use cache entry after free mistake.
  - fix ipv6 proximity calculation.
  - fix parse buffer initialization.
  - fix typo in automount(8).


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-4
changelog:
  - include usage in usage message.
  - dont wait forever to restart.
  - add option description to man page.
  - fix null map entry order handling.
  - make description of default MOUNT_WAIT setting clear.
  - configure.in: allow cross compilation.
  - README: update mailing list subscription info.
  - allow non root user to check status.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-6
changelog:
  - fix recursive mount deadlock.
  - increase file map read buffer size.
  - handle new location of systemd.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-8
changelog:
  - fix map entry duplicate offset detection.
  - Allow nsswitch.conf to not contain "automount:" lines.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-10
changelog:
  - fix submount offset delete.
  - fix init script status return.
  - fix use get_proximity() without libtirpc.
  - don't use dirent d_type to filter out files in scandir().
  - don't schedule new alarms after readmap.
  - use numeric protocol ids instead of protoent structs.
  - lib/defaults.c: use WITH_LDAP conditional around LDAP types.
  - make yellow pages support optional.
  - modules/replicated.c: use sin6_addr.s6_addr32.
  - workaround missing GNU versionsort extension.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-12
changelog:
  - dont fail on master map self include.
  - fix wildcard multi map regression.
  - fix file descriptor leak when reloading the daemon.
  - depricate nosymlink pseudo option.
  - add symlink pseudo option.
  - update kernel include files.
  - fix requires in spec file.
  - fix libtirpc build option.
  - fix systemd unidir in spec file.
  - document browse option in man page.
  - fix automounter support on parisc.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-16
changelog:
  - make dump maps check for duplicate indirect mounts (bz961312).
  - document allowed map sources in auto.master(5) (bz961312).
  - add enable sloppy mount option to configure.


author: Ian Kent <ikent@redhat.com> - 1:5.0.7-20
changelog:
  - fix master map mount options matching.
  - fix master map bogus keywork match.
  - fix fix map entry duplicate offset detection.
  - add a number of fixes based on a Covarity report.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-3
changelog:
  - fix undefined authtype_requires_creds err if ldap enabled but without sasl.
  - fix master map type check.
  - fix task manager not getting signaled.


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-4
changelog:
  - allow --with-systemd to take a path arg.
  - fix WITH_LIBTIRPC function name.
  - fix ipv6 libtirpc getport (bz1033918).


author: Ian Kent <ikent@redhat.com> - 1:5.0.8-5
changelog:
  - fix ipv6 link local address handling.
  - fix fix ipv6 libtirpc getport.
  - get_nfs_info() should query portmapper if port is not given.
  - fix rpc_portmap_getport() proto not set.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-0.beta1.1
changelog:
  - amd lookup update lookup ldap to handle amd keys
    - inadvertantly drop from initial series.
  - amd lookup update lookup hesiod to handle amd keys
    - inadvertantly drop from initial series.
  - fix wildcard key lookup.
  - check for non existent negative entries in lookup_ghost().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-1
changelog:
  - update to upstream release, 5.1.0.
    - fix reset flex scan buffer on init.
    - fix fix negative status being reset on map read.
    - fix out of order amd timestamp lookup.
    - fix ldap default schema config.
    - fix ldap default master map name config.
    - fix map format init in lookup_init().
    - fix incorrect max key length in defaults get_hash().
    - fix xfn sets incorrect lexer state.
    - fix old style key lookup.
    - fix expire when server not responding.
    - fix ldap_uri config update.
    - fix typo in conf_load_autofs_defaults().
    - fix hash on confg option add and delete.
    - add plus to path match pattern.
    - fix multi entry ldap option handling.
    - cleanup options in amd_parse.c.
    - allow empty value for some map options.
    - allow empty value in macro selectors.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-3
changelog:
  - fix compile error in defaults.c.
  - add serialization to sasl init.
  - dont allocate dev_ctl_ops too early.
  - fix incorrect round robin host detection.
  - fix race accessing qdn in get_query_dn().
  - fix leak in cache_push_mapent().
  - fix config entry read buffer not checked.
  - fix FILE pointer check in defaults_read_config().
  - fix memory leak in conf_amd_get_log_options().
  - fix signed comparison in inet_fill_net().
  - fix buffer size checks in get_network_proximity().
  - fix leak in get_network_proximity().
  - fix buffer size checks in merge_options().
  - check amd lex buffer len before copy.
  - add return check in ldap check_map_indirect().
  - check host macro is set before use.
  - check options length before use in parse_amd.c.
  - fix some out of order evaluations in parse_amd.c.
  - fix copy and paste error in dup_defaults_entry().


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-7
changelog:
  - force disable browse mode for amd format maps.
  - fix hosts map options check in lookup_amd_instance().
  - fix memory leak in create_client().
  - fix memory leak in get_exports().
  - fix memory leak in get_defaults_entry().
  - fix out of order clearing of options buffer.
  - fix reset amd lexer scan buffer.
  - ignore multiple commas in options strings.
  - fix typo in flagdir configure option.
  - clarify multiple mounts description.
  - gaurd against incorrect umount return.
  - update man page autofs(8) for systemd.
  - remove ancient kernel Requires.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-9
changelog:
  - fix custom autofs.conf not being installed.
  - init qdn before use in get_query_dn().
  - fix typo in update_hosts_mounts().
  - fix hosts map update on reload.


author: Ian Kent <ikent@redhat.com> - 1:5.1.0-10
changelog:
  - make negative cache update consistent for all lookup modules.
  - ensure negative cache isn't updated on remount.
  - dont add wildcard to negative cache.
  - make service want network-online (bz1071591).


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-5
changelog:
  - actually apply fix use after free in do_master_list_reset().
  - fix deadlock in dumpmaps.
  - fix rpcgen dependency problem.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-6
changelog:
  - dont use array for path when not necessary.
  - fix prefix option handling in expand_entry().
  - fix sublink option not set from defaults.
  - fix error return in do_nfs_mount().


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-7
changelog:
  - add error handling for ext_mount_add().
  - account for recent libnsl changes.
  - use_hostname_for_mounts shouldn't prevent selection among replicas.
  - fix monotonic_elapse.
  - Makefiles.rules: remove 'samples' from SUBDIRS.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-12
changelog:
  - dont allow trailing slash in master map mount points.
  - fix libresolv configure check.
  - add fedfs-getsrvinfo.c.
  - add mount.fedfs.c.
  - add fedfs-map-nfs4.c
  - add conditional inclusion of fedfs binaries.
  - add an example fedfs master map entry to the installed master map.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-16
changelog:
  - tiny patch for autofs typo and possible bug.
  - add units After line to include statd service.
  - use systemd sd_notify() at startup.
  - add "BuildRequires: systemd-devel".
  - fix NFS version mask usage.
  - fix incorrect date in changelog.


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-17
changelog:
  - bz1577700 - automount leaves FDs in half-open state
    - fix fd leak in rpc_do_create_client().
  - Resolves: rhbz#1577700


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-18
changelog:
  - bz1593492 - Ignore trailing slashes at the end of executable maps in
    auto.master config file
    - add-man page note about extra slashes in paths
  - Resolves: rhbz#1593492


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-19
changelog:
  - bz1602447 - Please review important issues found by covscan in
    "autofs-5.1.4-18.el8+7"
    - covarity fixes.
  -Resolves: rhbz#1602447


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-20
changelog:
  - bz1612565 - Man page scan results for autofs
    - fix program usage message.
  - Resolves: rhbz#1612565


author: Ian Kent <ikent@redhat.com> - 1:5.1.4-21
changelog:
  - bz1611866 - autofs reload is unable to activate new map entries,
    it is autofs restart which shows new map entries.
    - fix update_negative_cache() map source usage.
  - bz1613621 - [autofs]Removed entries still can be accessed
    - mark removed cache entry negative.
  - Resolves: rhbz#1611866 rhbz#1613621


author: Ian Kent <ikent@redhat.com> - 5.1.4-22
changelog:
  - bz1613630 - On Red Hat 7.x systems if you try to access local
    filesystems using the automounter through /net then the shell
    and mount could lock up *if* the filesystem your accessing is
    double exported.
    - set bind mount as propagation slave.
    - add master map pseudo options for mount propagation.
  - Resolves: rhbz#1613630


author: Ian Kent <ikent@redhat.com> - 5.1.4-23
changelog:
  - bz1615782 - autofs master map age is incorrectly set
    - fix age setting at startup.
  - Resolves: rhbz#1615782


author: Ian Kent <ikent@redhat.com> - 5.1.4-24
changelog:
  - bz1621938 - autofs can no longer get maps from IPA server
    - fix use after free in parse_ldap_config().
  - Resolves: rhbz#1621938


author: Ian Kent <ikent@redhat.com> - 5.1.4-26
changelog:
  - bz1630190 - yum update hanging while restarting autofs
    - fix incorrect locking in sss lookup.
  - bz1630194 - after upgrading to autofs-5.0.7-83.el7.x86_64 on
    RHEL 7 clients, amd maps /defaults key mount options are no
    longer working
    - fix amd parser opts option handling.
  - Resolves: rhbz#1630190 rhbz#1630194


author: Ian Kent <ikent@redhat.com> - 5.1.4-27
changelog:
  - bz1638487 - Drop dependency on hesiod
    - better handle hesiod support not built in.
    - exclude hesiod support from configure options
    - remove hesiod depends.
  - Resolves: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-28
changelog:
  - bz1638487 - Drop dependency on hesiod
    - actually update the spec file with the hesiod removal.
  - Related: rhbz#1638487


author: Ian Kent <ikent@redhat.com> - 5.1.4-29
changelog:
  - bz1654541 - autofs crash when parsing master map
    - fix hesiod string check in master_parse().
  - Resolves: rhbz#1654541


author: Ian Kent <ikent@redhat.com> - 5.1.4-30
changelog:
  - bz1689469 - [autofs] The log no longer print PID of automount process
    - remove autofs4 module load code.
    - add NULL check in prepare_attempt_prefix().
    - update build info with systemd.
    - use flags for startup boolean options.
    - move close stdio descriptors to become_daemon().
    - add systemd service command line option.
  - Resolves: rhbz#1689469


author: Ian Kent <ikent@redhat.com> - 5.1.4-31
changelog:
  - bz1689467 - path_resolution on an autofs managed path resets the timer. Can
    this be made configurable?
    - support strictexpire mount option.
  - Resolves: rhbz#1689467


author: Ian Kent <ikent@redhat.com> - 5.1.4-32
changelog:
  - bz1703876 - [RFE] Enable additional logging information for autofs
    - add NULL check for get_addr_string() return.
    - use malloc(3) in spawn.c.
    - add mount_verbose configuration option.
    - optionally log mount requestor process info.
    - log mount call arguments if mount_verbose is set.
  - Resolves: rhbz#1703876


author: Ian Kent <ikent@redhat.com> - 5.1.4-33
changelog:
  - bz1689466 - Sanitize autofs logging
    - make expire remaining log level debug.
  - bz1685805 - autofs doesn't expand macros in amd map selectors
    - allow period following macro in selector value.
    - fix macro expansion in selector values.
  - Resolves: rhbz#1689466 rhbz#1685805


author: Ian Kent <ikent@redhat.com> - 5.1.4-34
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - add gating.yaml for manual gate testing.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-35
changelog:
  - bz1681956 - autofs changes blocked until gating tests are added
    - correct test name in gating.yaml.
  - Related: rhbz#1681956


author: Ian Kent <ikent@redhat.com> - 5.1.4-36
changelog:
  - bz1743442 - getmntent returns additional "-hosts" entries when
    automounter is used with "hosts" map (userspace part)
    - also use strictexpire for offsets (mounts).
    - change expire type naming to better reflect usage.
    - remove unused function has_fstab_option().
    - remove unused function reverse_mnt_list().
    - remove a couple of old debug messages.
    - fix amd entry memory leak.
    - fix unlink_mount_tree() not umounting mounts.
    - add ignore mount option.
    - use ignore option for offset mounts as well.
    - add config option for "ignore" mount option.
    - use bit flags for autofs mount types in mnt_list.
    - use mp instead of path in mnt_list entries.
    - always use PROC_MOUNTS to make mount lists.
    - add glibc getmntent_r().
    - use local getmntent_r in table_is_mounted().
    - refactor unlink_active_mounts() in direct.c.
    - don't use tree_is_mounted() for mounted checks.
    - use single unlink_umount_tree() for both direct and indirect mounts.
    - move unlink_mount_tree() to lib/mounts.c.
    - use local_getmntent_r() for unlink_mount_tree().
    - use local getmntent_r() in get_mnt_list().
    - use local getmntent_r() in tree_make_mnt_list().
    - fix missing initialization of autofs_point flags.
  - Resolves: rhbz#1743442


author: Ian Kent <ikent@redhat.com> - 5.1.4-37
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update ldap READMEs and schema definitions.
  - Resolves: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-38
changelog:
  - bz1660145 - autofs.schema doesn't work in RHEL8
    - update spec file doc inclusions for schema definition update.
  - Related: rhbz#1660145


author: Ian Kent <ikent@redhat.com> - 5.1.4-39
changelog:
  - bz1802251 - Autofs will only mount share once if sss is first ini
    nsswitch.conf
    - fix a regression with map instance lookup.
  - Resolves: rhbz#1802251


author: Ian Kent <ikent@redhat.com> - 5.1.4-41
changelog:
  - bz1835547 - [RHEL8]autofs cannot mount samba/cifs shares that end with a
    dollar sign
    - fix trailing dollar sun entry expansion.
  - Resolves: rhbz#1835547


author: Ian Kent <ikent@redhat.com> - 5.1.4-42
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - initialize struct addrinfo for getaddrinfo() calls.
    - fix quoted string length calc in expandsunent().
  -Resolves: rhbz#1841456


author: Ian Kent <ikent@redhat.com> - 5.1.4-43
changelog:
  - bz1841456 - automount program crashes with "malloc(): invalid next size
    (unsorted)
    - fix autofs mount options construction.
  -Related: rhbz#1841456


author: Ian Kent <ikent@redhat.com> - 5.1.4-44
changelog:
  - bz1858742 - autofs share doesn't mount when using nobind over RDMA where
    nfs-server and nfs-client are the same systems.
    - mount_nfs.c fix local rdma share not mounting.
  -Resolves: rhbz#1858742


author: Ian Kent <ikent@redhat.com> - 5.1.4-45
changelog:
  - bz1664561 - incorrect of start service command in autofs man page
    - fix incorrect systemctl command syntax in autofs(8).
  -Resolves: rhbz#1664561


author: Ian Kent <ikent@redhat.com> - 5.1.4-46
changelog:
  - bz1664561 - incorrect of start service command in autofs man page
    - actually apply fix patch.
  - fix dates and recent status messages in changelog.
  -Related: rhbz#1664561 rhbz#1858742


author: Ian Kent <ikent@redhat.com> - 5.1.4-47
changelog:
  - bz1887681 - automount force unlink option (-F) does not work as expected
    on autofs-5.0.7-109.el7
    - fix direct mount unlink_mount_tree() path.
    - fix unlink mounts umount order.
    - fix incorrect logical compare in unlink_mount_tree().
    - use bit flag for force unlink mounts.
    - improve force unlink mounts option description.
    - remove logpri fifo on autofs mount fail.
    - add force unlink mounts and exit option.
    - cleanup stale logpri fifo pipes on unlink and exit.
  - Resolves: rhbz#1887681


author: Ian Kent <ikent@redhat.com> - 5.1.4-48
changelog:
  - bz1892184 - autofs: return a connection failure until maps have been fetched
    - fix lookup_nss_read_master() nsswicth check return.
    - fix typo in open_sss_lib().
    - fix sss_master_map_wait timing.
    - add sss ECONREFUSED return handling.
    - use mapname in sss context for setautomntent().
    - add support for new sss autofs proto version call.
    - fix retries check in setautomntent_wait().
    - refactor sss setautomntent().
    - improve sss setautomntent() error handling.
    - refactor sss getautomntent().
    - improve sss getautomntent() error handling.
    - sss introduce calculate_retry_count() function.
    - move readall into struct master.
    - sss introduce a flag to indicate map being read.
    - update sss timeout documentation.
    - refactor sss getautomntbyname().
    - improve sss getautomntbyname() error handling.
    - use a valid timeout in lookup_prune_one_cache().
    - dont prune offset map entries.
    - simplify sss source stale check.
  - Resolves: rhbz#1892184


author: Ian Kent <ikent@redhat.com> - 5.1.4-64
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
      - use defines for expire type.
    - remove unused function dump_master().
    - fix additional typing errors.
    - make bind mounts propagation slave by default.
    - fix browse dir not re-created on symlink expire.
      - update list.h.
    - add hashtable implementation.
    - change mountpoint to mp in struct ext_mount.
    - make external mounts independent of amd_entry.
    - make external mounts use simpler hashtable.
    - add a hash index to mnt_list.
    - use mnt_list for submounts.
    - use mnt_list for amdmounts.
    - make umount_autofs() static.
    - remove force parameter from umount_all().
    - fix remount expire.
    - fix stale offset directories disable mount.
    - use struct mnt_list to track mounted mounts.
    - use struct mnt_list mounted list for expire.
    - remove unused function tree_get_mnt_list().
    - only add expre alarm for active mounts.
    - move submount check into conditional_alarm_add().
    - move lib/master.c to daemon/master.c.
    - use master_list_empty() for list empty check.
    - add helper to construct mount point path.
      - add xdr_exports().
    - remove mount.x and rpcgen dependencies.
    - dont use realloc in host exports list processing.
    - use sprintf() when constructing hosts mapent.
    - fix mnts_remove_amdmount() uses wrong list.
    - eliminate cache_lookup_offset() usage.
    - fix is mounted check on non existent path.
    - simplify cache_get_parent().
    - set offset parent in update_offset_entry().
    - remove redundant variables from mount_autofs_offset().
    - remove unused parameter form do_mount_autofs_offset().
    - refactor umount_multi_triggers().
    - eliminate clean_stale_multi_triggers().
    - simplify mount_subtree() mount check.
    - fix mnts_get_expire_list() expire list construction.
    - fix inconsistent locking in umount_subtree_mounts().
    - fix return from umount_subtree_mounts() on offset list delete.
    - pass mapent_cache to update_offset_entry().
    - fix inconsistent locking in parse_mount().
    - remove unused mount offset list lock functions.
    - eliminate count_mounts() from expire_proc_indirect().
    - eliminate some strlen calls in offset handling.
    - don't add offset mounts to mounted mounts table.
    - reduce umount EBUSY check delay.
    - cleanup cache_delete() a little.
    - rename path to m_offset in update_offset_entry().
    - don't pass root to do_mount_autofs_offset().
    - rename tree implementation functions.
    - fix program map multi-mount lookup after mount fail.
    - add some multi-mount macros.
    - remove unused functions cache_dump_multi() and cache_dump_cache().
    - add a len field to struct autofs_point.
    - make tree implementation data independent.
    - add mapent tree implementation.
    - add tree_mapent_add_node().
    - add tree_mapent_delete_offsets().
    - add tree_mapent_traverse_subtree().
    - fix mount_fullpath().
    - add tree_mapent_cleanup_offsets().
    - add set_offset_tree_catatonic().
    - add mount and umount offsets functions.
    - switch to use tree implementation for offsets.
    - remove obsolete functions.
    - remove redundant local var from sun_mount().
    - use mount_fullpath() in one spot in parse_mount().
    - pass root length to mount_fullpath().
    - remove unused function master_submount_list_empty().
    - move amd mounts removal into lib/mounts.c.
    - check for offset with no mount location.
    - remove mounts_mutex.
  - Resolves: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-65
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
    - fix unapplied patch.
    - remove unused variable from get_exports().
  - Related: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-66
changelog:
  - bz1912106 - Using -hosts option does not resolve host from /etc/hosts and mount
    failes
    - Coverity fixes
      - add missing free in handle_mounts().
      - remove redundant if check.
      - fix possible memory leak in master_parse().
      - fix possible memory leak in mnts_add_amdmount().
      - fix double unlock in parse_mount().
      - add length check in umount_subtree_mounts().
      - fix flags check in umount_multi().
      - dont try umount after stat() ENOENT fail.
      - remove redundant assignment in master_add_amd_mount_section_mounts().
      - fix dead code in mnts_add_mount().
      - fix arg not used in error print.
      - fix missing lock release in mount_subtree().
      - fix double free in parse_mapent().
      - refactor lookup_prune_one_cache() a bit.
      - cater for empty mounts list in mnts_get_expire_list().
      - add ext_mount_hash_mutex lock helpers.
  - Related: rhbz#1912106


author: Ian Kent <ikent@redhat.com> - 5.1.4-67
changelog:
  - bz1954430 - Please, rebuild autofs-5.1.4-66.el8
    - rebuild with fixed binutils.
  - Resolves: rhbz#1954430


author: Ian Kent <ikent@redhat.com> - 5.1.4-68
changelog:
  - bz1958487 - autofs amd mounts present in the configuration get umounted
    on reload
    - fix amd section mounts map reload.
  - bz1958485 - autofs amd type host mounts fail for certain host names
    - fix amd hosts mount expire.
  - Resolves: rhbz#1958487 rhbz#1958485


author: Ian Kent <ikent@redhat.com> - 5.1.4-69
changelog:
  - bz1961492 - autofs: regression in offset ordering
    - fix offset entries order.
    - use mapent tree root for tree_mapent_add_node().
    - eliminate redundant cache lookup in tree_mapent_add_node().
    - fix hosts map offset order.
    - fix direct mount deadlock.
  - Resolves: rhbz#1961492


author: Ian Kent <ikent@redhat.com> - 5.1.4-70
changelog:
  - bz1965862 - A recent Coverity change can cause an infinit loop on map reload
    - fix lookup_prune_one_cache() refactoring change.
  - bz1963129 - auto.master manpage doesn't mention -null or other built-in maps
    - add missing desciption of null map option.
  - Resolves: rhbz#1965862 rhbz#1963129


author: Ian Kent <ikent@redhat.com> - 5.1.4-71
changelog:
  - bz1969210 - autofs: already mounted as other than autofs or failed to unlink
    entry in tree
    - fix empty mounts list return from unlink_mount_tree().
  - Resolves: rhbz#1969210


author: Ian Kent <ikent@redhat.com> - 5.1.4-72
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - fix nonstrict offset mount fail handling.
  - Resolves: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-73
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - correct patch, fix nonstrict offset mount fail handling.
  - Related: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-74
changelog:
  - bz1974309 - Removal of default intr mount option while using -hosts
    and host.net
    - remove intr hosts map mount option.
    - fix previous changelog entry revision.
  - Resolves: rhbz#1974309


author: Ian Kent <ikent@redhat.com> - 5.1.4-75
changelog:
  - bz2023740 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2023740


author: Ian Kent <ikent@redhat.com> - 5.1.4-76
changelog:
  - bz2025963 - autofs service has not proper limits set to be able to handle many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2025963


author: Ian Kent <ikent@redhat.com> - 5.1.4-77
changelog:
  - bz2025509 - Autofs auto.smb awk script fails on shares with dollar signs
    - fix double quoting in auto.smb.
    - fix double quoting of ampersand in auto.smb as well.
  - Resolves: rhbz#2025509


author: Ian Kent <ikent@redhat.com> - 5.1.4-81
changelog:
  - bz2033552 - Using -hosts option does not work after upgrading from 8.4 to 8.5
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
  - Resolves: rhbz#2033552


author: Ian Kent <ikent@redhat.com> - 5.1.4-82
changelog:
  - bz2052122 - autofs attempts unmount on directory in use
    - make umount_ent() recognise forced umount.
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2052122


author: Ian Kent <ikent@redhat.com> - 5.1.4-83
changelog:
  - bz2069097 - libnss_sss: threads stuck at sss_nss_lock from initgroups
    - dont use initgroups() at spawn.
  - Resolves: rhbz#2069097


author: Ian Kent <ikent@redhat.com> - 5.1.4-84
changelog:
  - bz2130034 - automount -m crashes with Segmentation fault (core dumped)
    - fix invalid tsv access.
  - Resolves: rhbz#2130034


author: Ian Kent <ikent@redhat.com> - 5.1.4-85
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix parse module instance mutex naming.
    - serialise lookup module open and reinit.
  - Resolves: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-86
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - coverity fix for invalid access.
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-87
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix hosts map deadlock on restart.
    - fix deadlock with hosts map reload.
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-88
changelog:
  - bz2139504 - segfault due to lookup_mod->context address being freed
    and reused while multiple threads were using it
    - fix memory leak in update_hosts_mounts().
  - Related: rhbz#2139504


author: Ian Kent <ikent@redhat.com> - 5.1.4-89
changelog:
  - bz2149206 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix concat_options() error handling.
    - fix minus only option handling in concat_options().
  - Resolves: rhbz#2149206


author: Ian Kent <ikent@redhat.com> - 5.1.4-90
changelog:
  - bz2149206 - RHEL9: automount does not handle null option string after
    "-" anymore
    - fix changelog entry.
  - Related: rhbz#2149206


author: Ian Kent <ikent@redhat.com> - 5.1.4-91
changelog:
  - bz2148872 - autofs: errors in autofs-5.1.4-83.el8.x86_64 when restarting
    autofs with busy directories
    - fix incorrect path for is_mounted() in try_remount().
  - Resolves: rhbz#2148872


author: Ian Kent <ikent@redhat.com> - 5.1.4-92
changelog:
  - bz2161336 - Users can trigger a simple autofs DoS with wildcard automounter maps
    - fail on empty trailing replicated host name.
  - Resolves: rhbz#2161336


author: Ian Kent <ikent@redhat.com> - 5.1.4-109.el8_9.1
changelog:
  - RHEL-21288 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-21288


author: Michal Sekletar <msekleta@redhat.com> - 0.7-21.1
changelog:
  - Fix CVE-2021-3468 (RHEL-18311)
  - Fix CVE-2023-38469 (RHEL-17783)
  - Fix CVE-2023-38470 (RHEL-17795)
  - Fix CVE-2023-38471 (RHEL-17789)
  - Fix CVE-2023-38472 (RHEL-17807)
  - Fix CVE-2023-38473 (RHEL-17801)


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Bernhard Rosenkranzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R %{prefix}
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
                    host and nslookup now by default try next server on SERVFAIL
                    (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use %{__cc} for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - fix for #200465: named-checkzone and co. cannot be run as non-root user
  - fix for #212348: chroot'd named causes df permission denied error
  - fix for #211249, #211083 - problems with stopping named
  - fix for #212549: init script does not unmount /proc filesystem
  - fix for #211282: EDNS is globally enabled, crashing CheckPoint FW-1,
      added edns-enable options to named configuration file which can suppress
      EDNS in queries to DNS servers (see /usr/share/doc/bind-9.3.3/misc/options)
  - fix for #212961: bind-chroot doesn't clean up its mess on %preun
  - update to 9.3.3rc3, removed already merged patches


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-0.1.rc3
changelog:
  - added back an interval to restart
  - renamed package, it should meet the N-V-R criteria
  - fix for #216185: bind-chroot-admin able to change root mode 750
  - added fix from #215997: incorrect permissions on dnszone.schema
  - added a notice to init script when /etc/named.conf doesn't exist (#216075)


author: Martin Stransky <stransky@redhat.com> - 31:9.3.3-2
changelog:
  - added namedGetForwarders written in shell (#176100),
    created by Baris Cicek <baris@nerd.com.tr>.


author: Adam Tkac <atkac@redhat.com> 31:9.3.3-4.fc7
changelog:
  - package bind-libbind-devel has beed removed (libs has been moved to bind-devel & bind-libs)
  - Resolves: #214208


author: Adam Tkac <atkac@redhat.com> 31:9.3.4-3.fc7
changelog:
  - fixed building without libbind
  - fixed post section (selinux commands is now in if-endif statement)
  - prever macro has been removed from version


author: Adam Tkac <atkac@redhat.com> 31:9.4.0-1.fc7
changelog:
  - updated to 9.4.0
  - bind-chroot-admin now sets EAs correctly (#213926)
  - throw away next_server_on_referral and no_servfail_stops patches (fixed in 9.4.0)


author: Adam Tkac <atkac redhat com> 31:9.4.0-2.fc7
changelog:
  - added experimental SQLite support (written by John Boyd <jaboydjr@netwalk.com>)
  - moved bind-chroot-admin script to chroot package
  - bind-9.3.2-redhat_doc.patch is always applied (#231738)


author: Adam Tkac <atkac redhat com> 31:9.4.0-3.fc7
changelog:
  - prepared bind to merge review
  - added experimental idn support to bind-utils utils (not enabled by default yet)
  - change chroot policy in caching-nameserver post section
  - fixed bug in bind-chroot-admin - rootdir function is called properly now


author: Adam Tkac <atkac redhat com> 31:9.4.0-4.fc7
changelog:
  - removed query-source[-v6] options from caching-nameserver config
    (#209954, increase security)
  - throw away idn. It won't be ready in fc7


author: Adam Tkac <atkac redhat com> 31:9.4.0-7.fc7
changelog:
  - removed DEBUGINFO option because with this option (default) was bind
    builded with -O0 and without this flag no debuginfo package was produced.
    (I want faster bind => -O2 + debuginfo)
  - fixed zone finding (#236426)


author: Adam Tkac <atkac redhat com> 31:9.4.0-8.fc7
changelog:
  - improved "zone freeze patch" - if multiple zone with same name exists
    no zone is freezed
  - minor cleanup in caching-nameserver's config file
  - fixed race-condition in dbus code (#235809)
  - added forgotten restorecon statement in bind-chroot-admin


author: Adam Tkac <atkac redhat com> 31:9.4.1-3
changelog:
  - fixed bind-chroot-admin dynamic DNS handling (#239149)
  - updated zone-freeze patch to latest upstream
  - ldap sdb has been rewriten to latest api (#239802)


author: Adam Tkac <atkac redhat com> 31:9.4.1-4
changelog:
  - removed ldap-api patch and start using deprecated API
  - fixed minor problem in bind-chroot-admin script (#241103)


author: Adam Tkac <atkac redhat com> 31:9.4.1-5
changelog:
  - very minor compatibility change in bind-chroot-admin (line 215)
  - enabled IDN support by default and don't distribute IDN libraries
  - specfile cleanup
  - add dynamic directory to /var/named. This directory will be primarily used for
    dynamic DNS zones. ENABLE_ZONE_WRITE and SELinux's named_write_master_zones no longer exist


author: Adam Tkac <atkac redhat com> 31:9.4.1-6
changelog:
  - major changes in initscript. Could be LSB compatible now
  - removed caching-nameserver subpackage. Move configs from this
    package to main bind package as default configuration and major
    configuration cleanup


author: Adam Tkac <atkac redhat com> 31:9.4.1-7
changelog:
  - marked caching-nameserver as obsolete (#244604)
  - fixed typo in initscript (causes that named doesn't detect NetworkManager
    correctly)
  - next cleanup in configuration - moved configfiles into config.tar
  - removed delay between start & stop in restart function in named.init


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-2
changelog:
  - minor changes in default configuration
  - fix h_errno assigment during resolver initialization (unbounded recursion, #245857)
  - removed wrong patch to #150288


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-3.9
changelog:
  - removed bind-sdb package (default named has compiled SDB backend now)
  - integrated DLZ (Dynamically loadable zones) drivers
  - integrated GSS-TSIG support (RFC 3645)
  - build with -O0 (many new features, potential core dumps will be more useful)


author: Adam Tkac <atkac redhat com> 31:9.5.0a5-5
changelog:
  - integrated "autotools" patch for testing purposes (upstream will
    accept it in future, for easier building)


author: Adam Tkac <atkac redhat com> 32:9.5.0-6.a6
changelog:
  - updated to 9.5.0a6 which contains fixes for CVE-2007-2925 and
    CVE-2007-2926
  - fixed building on 64bits


author: Adam Tkac <atkac redhat com> 32:9.5.0-8.a6
changelog:
  - minor next improvements on autotools patch
  - dig and host utilities now using libidn instead idnkit for
    IDN support


author: Adam Tkac <atkac redhat com> 32:9.5.0-9.a6
changelog:
  - disable 64bit dlz driver patch on alpha and ia64 (#251298)
  - remove wrong malloc functions from lib/dns/spnego.c (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.a6
changelog:
  - dropped direct dependency to /etc/openldap/schema directory
  - changed hardcoded paths to macros
  - fired away code which configure LDAP server


author: Adam Tkac <atkac redhat com> 32:9.5.0-10.2.a6
changelog:
  - added new initscript option KEYTAB_FILE which specified where
    is located kerberos .keytab file for named service
  - obsolete temporary bind-9.5-spnego-memory_management.patch by
    bind-9.5-gssapictx-free.patch which conforms BIND coding standards
    (#251853)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.a6
changelog:
  - start using --disable-isc-spnego configure option
    - remove bind-9.5-spnego-memory_management.patch (source isn't
      compiled)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.1.a6
changelog:
  - removed end dots from Summary sections (skasal@redhat.com)
  - fixed wrong file creation by autotools patch (skasal@redhat.com)


author: Adam Tkac <atkac redhat com> 32:9.5.0-11.3.a6
changelog:
  - initscript failure message is now printed correctly (#277981,
    Quentin Armitage (quentin armitage org uk) )


author: Adam Tkac <atkac redhat com> 32:9.5.0-12.a6
changelog:
  - bind-9.5-2119_revert.patch and bind-9.5-fix_h_errno.patch are
    obsoleted by upstream bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-16.5.a6
changelog:
  - added bind-sdb again, contains SDB modules and DLZ modules
  - bind-9.3.1rc1-sdb.patch replaced by bind-9.5-sdb.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-17.a7
changelog:
  - 9.5.0a7
  - dropped patches (upstream)
    - bind-9.5-update.patch
    - bind-9.5-pool_badfree.patch
    - bind-9.5-_res_errno.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-18.4.a7
changelog:
  - bind-9.5-random_ports.patch was removed because upstream doesn't
    like it. query-source{,v6} options are sufficient (#391931)
  - bind-chroot-admin called restorecon on /proc filesystem (#405281)


author: Adam Tkac <atkac redhat com> 32:9.5.0-23.b1
changelog:
  - fixed initscript wait loop (#426382)
  - removed dependency on policycoreutils and libselinux (#426515)


author: Adam Tkac <atkac redhat com> 32:9.5.0-24.b1
changelog:
  - removed bind-9.3.2-prctl_set_dumpable.patch (upstream)
  - allow parallel building of libdns library
  - CVE-2008-0122


author: Adam Tkac <atkac redhat com> 32:9.5.0-26.b2
changelog:
  - build with -D_GNU_SOURCE (#431734)
  - improved fix for #253537, posttrans script is now used
  - improved fix for #400461
  - 9.5.0b2
    - bind-9.3.2b1-PIE.patch replaced by bind-9.5-PIE.patch
      - only named, named-sdb and lwresd are PIE
    - bind-9.5-sdb.patch has been updated
    - bind-9.5-libidn.patch has been updated
    - bind-9.4.0-sdb-sqlite-bld.patch replaced by bind-9.5-sdb-sqlite-bld.patch
    - removed bind-9.5-gssapi-header.patch (upstream)
    - removed bind-9.5-CVE-2008-0122.patch (upstream)
  - removed bind-9.2.2-nsl.patch
  - improved sdb_tools Makefile.in


author: Adam Tkac <atkac redhat com> 32:9.5.0-27.b2
changelog:
  - removed conditional build with libefence (use -fmudflapth instead)
  - fixed building of DLZ stuff (#432497)
  - do not build Berkeley DB DLZ backend
  - temporary build with --disable-linux-caps and without threads (#433102)
  - update named.ca file to affect IPv6 changes in root zone


author: Adam Tkac <atkac redhat com> 32:9.5.0-30.b3
changelog:
  - 9.5.0b3 release
  - dropped patches (upstream)
    - bind-9.5-transfer-segv.patch
    - bind-9.5-mudflap.patch
    - bind-9.5.0-generate-xml.patch
    - bind-9.5-libcap.patch


author: Adam Tkac <atkac redhat com> 32:9.5.0-32.b3
changelog:
  - reverted "any" patch, upstream says not needed
  - log EDNS failure only when we really switch to plain EDNS (#275091)
  - detect configuration file better


author: Adam Tkac <atkac redhat com> 32:9.5.0-33.rc1
changelog:
  - updated to 9.5.0rc1
  - merged patches
    - bind-9.5-libcap.patch
  - make binaries readable by others (#427826)


author: Adam Tkac <atkac redhat com> 32:9.5.0-36.1
changelog:
  - removed dns-keygen utility in favour of rndc-confgen -a (#449287)
  - some minor sample fixes (#449274)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.1.b1
changelog:
  - 9.5.1b1 release (CVE-2008-1447)
  - dropped bind-9.5-recv-race.patch because upstream doesn't want it


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.3.b1
changelog:
  - static libraries are no longer supported
  - IP acls weren't merged correctly (#457175)
  - use fPIE on sparcv9/sparc64 (Dennis Gilmore)
  - add sparc64 to list of 64bit arches in spec (Dennis Gilmore)


author: Adam Tkac <atkac redhat com> 32:9.5.1-0.7.b2
changelog:
  - 9.5.1b2 release
  - patches merged
    - bind95-rh454783.patch
    - bind-9.5-edns.patch
    - bind95-rh450995.patch
    - bind95-rh457175.patch


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.1.b1
changelog:
  - 9.6.0b1 release
  - don't build ODBC and Berkeley DB DLZ drivers
  - end of bind-chroot-admin script, copy config files to chroot manually
  - /proc doesn't have to be mounted to chroot
  - temporary use libbind from 9.5 series, noone has been released for 9.6 yet


author: Adam Tkac <atkac redhat com> 32:9.6.0-0.5.rc1
changelog:
  - 9.6.0rc1 release
  - patches merged
    - bind-9.2.0rc3-varrun.patch
    - bind-95-sdlz-include.patch
    - bind-96-libxml2.patch
  - fixed rare use-after-free problem in host utility (#452060)
  - enabled chase of DNSSEC signature chains in dig


author: Adam Tkac <atkac redhat com> 32:9.6.0-11.P1
changelog:
  - fall back to insecure mode when no supported DNSSEC algorithm is found
    instead of SERVFAIL
  - don't fall back to non-EDNS0 queries when DO bit is set


author: Adam Tkac <atkac redhat com> 32:9.6.1-0.1.b1
changelog:
  - 9.6.1b1 release
  - patches merged
    - bind-96-isc_header.patch
    - bind-95-rh469440.patch
    - bind-96-realloc.patch
    - bind9-fedora-0001.diff
  - use -version-number instead of -version-info libtool param


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.2.b1
changelog:
  - update the patch for dynamic loading of database backends
  - fix dns_db_unregister()
  - useradd now takes "-N" instead of "-n" (atkac, #495726)
  - print nicer error msg when zone file is actually a directory (atkac, #490837)


author: Martin Nagy <mnagy redhat com> 32:9.6.1-0.3.b1
changelog:
  - update the patch for dynamic loading of database backends
  - create %{_libdir}/bind directory
  - copy default named.conf to doc directory, shared with s-c-bind (atkac)


author: Adam Tkac <atkac redhat com> 32:9.6.1-1
changelog:
  - 9.6.1 release
  - simplify chroot maintenance. Important files and directories are mounted into
    chroot (see /etc/sysconfig/named for more info, #504596)
  - fix doc/named.conf.default perms


author: Adam Tkac <atkac redhat com> 32:9.6.1-2
changelog:
  - improved "chroot automount" patches (#504596)
  - host should fail if specified server doesn't respond (#507469)


author: Adam Tkac <atkac redhat com> 32:9.6.1-3
changelog:
  - fix broken symlinks in bind-libs (#509635)
  - fix typos in /etc/sysconfig/named (#509650)
  - add DEBUG option to /etc/sysconfig/named (#510283)


author: Adam Tkac <atkac redhat com> 32:9.6.1-9.P1
changelog:
  - next attempt to fix the postun trigger (#520385)
  - remove obsolete bind-9.3.1rc1-fix_libbind_includedir.patch


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.2.a2
changelog:
  - improve chroot related documentation (#507795)
  - add NetworkManager dispatcher script to reload named when network interface is
    activated/deactivated (#490275)
  - don't set/unset named_write_master_zones SELinux boolean every time in
    initscript, modify it only when it's actually needed


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.6.b1
changelog:
  - update to 9.7.0b1
  - add bind-pkcs11 subpackage to support PKCS11 compatible keystores for DNSSEC
    keys


author: Adam Tkac <atkac redhat com> 32:9.7.0-0.14.rc2
changelog:
  - obsolete dnssec-conf
  - automatically update configuration from old dnssec-conf based
  - improve default configuration; enable DLV by default
  - remove obsolete triggerpostun from bind-libs subpackage


author: Adam Tkac <atkac redhat com> 32:9.7.0-2
changelog:
  - improve automatic DNSSEC reconfiguration trigger
  - initscript now returns 2 in case that action doesn't exist (#523435)
  - enable/disable chroot when bind-chroot is installed/uninstalled


author: Adam Tkac <atkac redhat com> 32:9.7.1-0.1.b1
changelog:
  - update to 9.7.1b1
  - make /var/named/dynamic as a default directory for managed DNSSEC keys
  - add patch to get "managed-keys-directory" option working
  - patches merged
    - bind97-managed-keyfile.patch
    - bind97-rh554316.patch


author: Adam Tkac <atkac redhat com> 32:9.7.1-3.P1
changelog:
  - remove outdated Copyright.caching-nameserver file
  - remove rfc1912.txt, it is already located in %doc/rfc directory
  - move COPYRIGHT to the bind-libs subpkg
  - add COPYRIGHT to the -pkcs11 subpkg


author: Adam Tkac <atkac redhat com> 32:9.7.2-3.P2
changelog:
  - new bind-libs-lite and bind-lite-devel subpkgs which contain
    public version of BIND 9 libraries
  - don't ship devel files for internal version of BIND 9 libraries


author: Adam Tkac <atkac redhat com> 32:9.7.2-5.P2
changelog:
  - move BIND9 internal libs back to %{_libdir}
  - add "-export" suffix to public libraries (-lite subpkg)


author: Adam Tkac <atkac redhat com> 32:9.7.3-0.3.b1
changelog:
  - fix "service named status" when used with named-sdb
  - don't check MD5, size and mtime of sysconfig/named


author: Adam Tkac <atkac redhat com> 32:9.7.3-1
changelog:
  - update to 9.7.3
  - fix dig +trace on dualstack systems (#674334)
  - fix linkage order when building on system with older BIND (#665971)
  - reduce number of gcc warnings


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.1.rc1
changelog:
  - update to 9.8.1rc1
  - patches merged
    - bind97-rh674334.patch
    - bind97-cleanup.patch
    - bind98-includes.patch


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.2.rc1
changelog:
  - fix rare race condition in request.c
  - print "the working directory is not writable" as debug message
  - re-add configtest target to initscript
  - initscript: sybsys name is always named, not named-sdb
  - nsupdate returned zero when target zone didn't exist (#700097)
  - nsupdate could have failed if server has multiple IPs and the first
    was unreachable (#714049)


author: Adam Tkac <atkac redhat com> 32:9.8.1-0.3.rc1
changelog:
  - fix DLZ related compilation issues
  - make /etc/named.{root,iscdlv}.key world-readable
  - add bind-libs versioned requires to bind pkg


author: Adam Tkac <atkac redhat com> 32:9.8.1-1
changelog:
  - update to 9.8.1
  - ship /etc/trusted-key.key (needed by dig)
  - use select instead of epoll in export libs (#735103)


author: Adam Tkac <atkac redhat com> 32:9.9.0-0.3.b2
changelog:
  - update to 9.9.0b2 (CVE-2011-4313)
  - patches merged
    - bind97-rh700097.patch
    - bind99-cinfo.patch


author: Adam Tkac <atkac redhat com> 32:9.9.0-1
changelog:
  - update to 9.9.0
  - load dynamic DBs later (and update dyndb patch)
  - fix memory leak in named during processing of rndc command
  - don't call `rndc-confgen -a` in "post" section
  - fix some packaging bugs in bind-chroot


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-6.P2
changelog:
  - Fixed bad path to systemctl in /etc/NetworkManager/dispatcher.d/13-named (#844047)
  - Fixed path to libdb.so in config.dlz.in


author: Tomas Hozza <thozza@redhat.com> 32:9.9.1-9.P2
changelog:
  - fixed SPEC file so it comply with new systemd-rpm macros guidelines (#850045)
  - changed %define macros to %global and fixed several rpmlint warnings


author: Adam Tkac <atkac redhat com> 32:9.9.2-1
changelog:
  - update to 9.9.2
  - bind97-rh714049.patch has been dropped
  - patches merged
    - bind98-rh816164.patch


author: Adam Tkac <atkac redhat com> 32:9.9.2-6.P1
changelog:
  - generate /etc/rndc.key during named service startup if doesn't exist
  - increase startup timeout in systemd units to 90sec (default)
  - fix IDN related statement in dig.1 manpage


author: Tomas Hozza <thozza@redhat.com> 32:9.9.2-7.P1
changelog:
  - Corrected IP addresses in named.ca (#901741)
  - mount/umount /var/named in setup-named-chroot.sh as the last one (#904666)


author: Adam Tkac <atkac redhat com> 32:9.9.3-0.1.rc1
changelog:
  - update to 9.9.3rc1
  - bind-96-libtool2.patch has been merged
  - fix bind tmpfiles.d for named.pid /run migration (#920713)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.5.rc1
changelog:
  - Include recursion Warning in named.conf and named.conf.sample (#740894)
  - Include managed-keys-directory statement in named.conf.sample (#948026)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-0.6.rc2
changelog:
  - update to 9.9.3rc2
  - part of bind97-exportlib.patch not needed any more
  - bind-9.9.1-P2-multlib-conflict.patch modified to reflect latest source
  - rl-9.9.3rc1.patch -> rl-9.9.3rc2.patch
  - bind99-opts.patch merged


author: Tomas Hozza <thozza@redhat.com> 32:9.9.3-1
changelog:
  - update to 9.9.3
  - install dns/update.h header
  - update RRL patch to the latest version 9.9.3-rl.150.20


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-5
changelog:
  - Create symlink /var/named/chroot/var/run -> /var/named/chroot/run
  - Added session-keyfile statement into default named.conf since we use /run/named


author: Tomas Hozza <thozza@redhat.com> 32:9.9.4-10
changelog:
  - Split chroot package for named and named-sdb
  - Extract setting-up/destroying of chroot to a separate systemd service (#997030)


author: Tomas Hozza <thozza@redhat.com> 32:9.9.5-2
changelog:
  - dlz_dlopen driver could return the wrong error leading to a segfault (#1052781)
  - Fix race condition when freeing fetch object (ISC-Bugs #35385)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-1
changelog:
  - Update to 9.9.6
  - drop merged patches and rebase some of existing patches
  - Add architecture specific dependencies.
  - Fix assert in dig when using +sigchase (#985918)


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-2
changelog:
  - Added native PKCS#11 functionality (#1097752)
  - bind-sdb now requires bind due to configuration and other utilities
  - bind-pkcs11 now requires bind due to configuration and other utilities


author: Tomas Hozza <thozza@redhat.com> - 32:9.9.6-4
changelog:
  - Fixed systemctl path in logrotate configuration (#1148360)
  - drop engine_pkcs11 dependency, since we use native PKCS#11 implementation


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-0.1.rc1
changelog:
  - update to 9.10.2rc1
  - fix nsupdate server auto-detection (#1184151)
  - drop merged patch bind99-rh985918.patch


author: Till Maas <opensource@till.name> - 32:9.10.2-0.2.rc1
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-1
changelog:
  - update to 9.10.2 stable
  - remove parallel-build patch after discussion with upstream [ISC-Bugs #38739]


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.2-2
changelog:
  - enable tuning for large systems - increases hardcoded internal limits
  - enable GeoIP access control feature


author: Robert Scheck <robert@fedoraproject.org> - 32:9.10.3-8.P2
changelog:
  - Remove unrecognized build options for %configure
  - Own %{_includedir}/bind9 directory in -lite-devel
  - Fixed building without (optional) PKCS#11 support


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-9.P2
changelog:
  - Commented out bindkeys-file statement in default configuration (#1223365#c3)
  - Removed unrecognized configure option --enable-developer
  - Added configure option --enable-full-report to get report on enabled features


author: Tomas Hozza <thozza@redhat.com> - 32:9.10.3-13.P4
changelog:
  - Remove NM dispatcher script, since it is not needed any more (#1277257)
  - Replaced After=network-online.target with After=network.target in all unit files


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.0-6.P2
changelog:
  - RTLD_DEEPBIND conflicts with pkcs11 libraries, skip it for dyndb (#1410433)
  - Fix some rpm warnings


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-1
changelog:
  - Update to 9.11.2
  - Add recursing and secroots file into default and sample config
  - Fix nsupdate GSSAPI auth against AD server (#1484451)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-2
changelog:
  - Build against mariadb-connector-c-devel (#1493615)
  - Include DNSKEY 20326 also in trusted-key.key (#1505476)
  - Fix dynamic symbols conflict with ldap (#1205168)
  - Use hmac-sha256 for new RNDC keys (#1508003)
  - Include protocols and services in chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-4
changelog:
  - Enable unit tests with kyua tool (#1532694)
  - Provide internal tool to prepare softhsm token storage
  - Proper fix for python3-bind subpackage directory ownership (#1522944)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.2-11.P1
changelog:
  - Use versioned provides
  - Fix starting of unit tests
  - Forward export libs path to isc-config
  - Rename export devel subpackage to bind-export-devel


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-2.b1
changelog:
  - Require openssl-devel and libcap-devel from bind-export-devel
  - Conflict with bind99-devel
  - Change spec globals to rpmbuild --with feature


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.3-15
changelog:
  - Use new config file named-chroot.files for chroot setup (#1429656)
  - Fix chroot devices file verification (#1592873)
  - Prevent errors on bind-chroot uninstall when running (#1600583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-2
changelog:
  - Install generated manual pages
  - Remove system-config-bind from manual
  - Disable GeoIP support (#1609856)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-5.P1
changelog:
  - Update to 9.11.4-P1
  - Adds root key sentinel support
  - Large IXFR zone transfers are rejected to prevent journal corruption
  - Fixes CVE-2018-5740


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-7.P1
changelog:
  - Fix chroot devices upgrade warning (#1592872)
  - Automatically replace obsoleted ISC DLV key with root key (#1595782)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-19.P2
changelog:
  - Add support for OpenSSL provided random data
  - Disable often failing unit test random_test
  - Add /dev/urandom to chroot


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.12-2
changelog:
  - Add GeoLite2 support (#1564443)
  - Add GeoIP to bind-chroot (#1497646)
  - Fix wrong default GeoIP directory (#1768258)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-2
changelog:
  - Add manual page for dnssec-importkey-pkcs11 (#1666785)
  - Add versioned depends to all library subpackages


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.20-5
changelog:
  - Fix tsig-request verify (CVE-2020-8622)
  - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
  - Correct update-policy type subdomain to match documentation (CVE-2020-8624)
  - Include available test


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.25-1
changelog:
  - Update to 9.11.25
  - Require libcap from devel package
  - Fix crash on NTA recheck failure (#1893761)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-2
changelog:
  - Add DNSTAP support (#1854148), new dnstap-read tool
  - Add JSON support in statistics-channel (#1899257)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-4
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-5
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-11.1
changelog:
  - Speed up parsing of DNS messages with many different names (CVE-2023-4408)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868)
  - Do not use header_prev in expire_lru_headers


author: Yara Ahmad <yahmad@redhat.com> - 2.30-121
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - make biosdevname optional even on Dell servers (#1623621)
  - prevent infinite recursion in smbios_setslot() (#1499458)
  - Netronome biosdevname support (#1649036)


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.2.0-2
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Tomas Orsava <torsava@redhat.com> - 1.2.0-9
changelog:
  - Switch hardcoded python3 shebangs into the %{__python3} macro
  - Add missing BuildRequires on python3-devel so that %{__python3} macro is
    defined


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Christian Kellner <ckellner@redhat.com> - 0.1-2
changelog:
  - Set database path to /var/lib/boltd, create it during
    installation, which is needed for the service file to work.


author: Christian Kellner <ckellner@redhat.com> - 0.8-1
changelog:
  - bolt 0.8 upstream release with pre-boot ACL and IOMMU support
    D-Bus Configuration moved from sysconfdir to datadir
    Resolves: #1629715


author: Marian Csontos <mcsontos@redhat.com> 1.3-1
changelog:
  - Check for duplicates consistently in the clone and edit commands.
  - Apply correct command line precedence to --add-opts and --del-opts.
  - Correctly merge multiple --add/del-opts when editing or cloning.
  - Correctly propagate --add/del-opts in boom edit commands.
  - Enhanced logging of --add/del-opts merge logic.
  - The default Python interpreter is now /usr/bin/python.
  - Fixed re-ordering of options modifications when read from disk.
  - Do not set BootParams attributes for anonymous option words.
  - Make lvm_root_lv validation checks more strict.
  - Improve BootParams.from_entry() parameter recovery debug logging.
  - Include sample OsProfile for Fedora 32.
  - Re-set sandbox state in test suite to ensure run-to-run consistency.
  - Improve compatibility with Red Hat BLS implementation.
  - Allow non-boom managed entries to be listed and displayed.
  - Handle quirks in Red Hat's use of the BLS machine_id key.
  - Allow grub2 bootloader variables to be expanded when cloning entries.
  - Simplify clone_entry logic and make consistent with edit_entry.
  - Ensure stable ordering of legacy boot entry configuration.


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-7
changelog:
  - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]


author: Ville Skyttä <ville.skytta at iki.fi> - 1.6.0-3
changelog:
  - Patch to make upstream build system honor our CFLAGS and friends.
  - Don't bother building throwaway static libs.
  - Disable autotools dependency tracking for cleaner build logs and possible
    slight build speedup.
  - Convert docs to UTF-8.
  - Update URLs.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.3-1
changelog:
  - Upgrade to new upstream release 1.7.3 (obsoletes search/domain patch)
  - Fix conflict of -devel packages on multilib architectures (#602880)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.7.5-1
changelog:
  - New upstream release 1.7.5
  - Obsoletes patch #2
  - Rebase patch #1 (optflags) to match the 1.7.5 code
  - Fixed Source0 URL to point at the upstream tarball


author: Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-5
changelog:
  - Apply a patch by Stephen Gallagher to patch autoconf, not configure to
    allow optflags to be passed in by build environment
  - Run autoreconf before configure
  - git rm obsolete patches
  - Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR


author: Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
changelog:
  - New upstream release 1.10
  - Obsolete upstreamed patches
  - Amend the multilib patch, there's no need to patch configure since we
    are running autoreconf anyways
  - https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-9
changelog:
  - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-81
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-80.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Sergey Cherevko <s.cherevko@msvsphere.ru> - 2022.2.54-80.2.inferit
changelog:
  - Added:
  -     # Certificate "Russian Trusted Root CA"
  -     # Certificate "Russian Trusted Sub CA"
  - Rebuilt for MSVSphere 8.8


author: Sergey Cherevko <s.cherevko@msvsphere-os.ru> - 2022.2.54-80.2.inferit.1
changelog:
  - place MDDC certificates to /etc/pki/ca-trust/source/anchors (Arkady L. Shane <tigro@msvsphere-os.ru>)


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.19.2-1
changelog:
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - spec: Replace not working awk command with sed (#63)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
changelog:
  - update to 4.1 (#1895003 #1847853 #1929157)
  - add NetworkManager dispatcher script to add servers from DHCP even without
    dhclient (#1933139)
  - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
  - reset chrony-helper state after stopping chronyd (#1971697)
  - add gcc-c++ and make to build requirements
  - move default paths in /var/run to /run


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2062356)
  - fix chrony-helper to delete sources by their original name (#2061660)
  - update ntp2chrony script (#2018045 #2063766)


author: Sergey Cherevko <s.cherevko@msvsphere.ru> - 4.2-1.inferit
changelog:
  - MSVSphere debranding: changed vendorzone
  - Synchronize time via Russian NTP servers
  - Rebuilt for MSVSphere 8.8


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Packit <hello@packit.dev> - 297-1
changelog:
  - users: allow administrators to change the user shell
  - Enable Python bridge on Fedora 38 and CentOS/RHEL 9


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Eugene Zamriy <ezamriy@msvsphere-os.ru> - 300.1-1.inferit
changelog:
  - Replace Source0 archive with MSVSphere OS-specific one
  - Add MSVSphere OS branding
  - Use MSVSPHERE_PRETTY_NAME instead of PRETTY_NAME and NAME in UI
  - Fix sudo button translation issue
  - Remove upstream documentation links from UI


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-13
changelog:
  - ls, stat: avoid triggering automounts (#2044981)
  - make `df --direct` work again (#2058686)
  - doc: improve description of the --kibibytes option of ls (#1527391)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.11-17.20190603git
changelog:
  - update to the latest release
  - add sed require
  - remove %clean section
  - remove obsolete Group tag
  - fix upstream URL
  - Resolves: rhbz#1696449, rhbz#1703982


author: Tomáš Mráz <tmraz@redhat.com> - 20200610-1.git0ac8b1f
changelog:
  - fallback to FIPS policy instead of the default-config in FIPS mode
  - java: Document properly how to override the crypto policy
  - krb5: No support for 3des anymore
  - reorder the signature algorithms to follow the order in default openssl list


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210617-1.gitc776d3e
changelog:
  - implement scoped policies, e.g., cipher@SSH = ... (#1960266)
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol
  - deprecate sha1_in_dnssec property
  - deprecate unscoped form of protocol property
  - update documentation
  - expand upstream test coverage
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522)
  - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846)
  - stop claiming Camellia is disabled (#1925104)
  - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016)
  - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755)
  - condition ecdh-sha2-nistp384 on SECP384R1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211116-1.gitae470d6
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
  - libssh: enable diffie-hellman-group14-sha256 support
  - openssl: fix disabling ChaCha20


author: Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
changelog:
  - bind: expand the list of disableable algorithms
  - tests/java: fix java.security.disableSystemPropertiesFile=true
  - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git3177e06
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - krb5: fix policy generator to account for macs
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to %{_datadir}/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="%{__cc} -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that %{epoch} is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved %{_bindir}/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use %_initrddir instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Simo Sorce <ssorce@redhat.com> 3.0.24-2.fc7
changelog:
  - New upstream release
  - Fix packaging issue wrt idmap modules used only by smbd
  - Addedd Vista Patchset for compatibility with Windows Vista
  - Change default of "msdfs root", it seem to cause problems with
    some applications and it has been proposed to change it for
    3.0.25 upstream


author: Simo Sorce <ssorce@redhat.com> 3.0.24-3.fc7
changelog:
  - Directories reorg, tdb files must go to /var/lib, not
    to /var/cache, add migration script in %post common
  - Split out libsmbclient, devel and doc packages
  - Remove libmsrpc.[h|so] for now as they are not really usable
  - Remove kill -HUP from rotate, samba use -HUP for other things
    noit to reopen logs


author: Simo Sorce <ssorce@redhat.com> 3.0.24-5.fc7
changelog:
  - actually use the correct samba.pamd file not the old samba.pamd.stack file
  - fix logifles and use upstream convention of log.* instead of our old *.log
    Winbindd creates its own log.* files anyway so we will be more consistent
  - install our own (enhanced) default smb.conf file
  - Fix pam_winbind acct_mgmt PAM result code (prevented local users from
    logging in). Fixed by Guenther.
  - move some files from samba to samba-common as they are used with winbindd
    as well


author: Simo Sorce <ssorce@redhat.com> 3.0.24-6.fc7
changelog:
  - do not put comments inline on smb.conf options, they may be read
    as part of the value (for example log files names)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-7.fc7
changelog:
  - make winbindd start earlier in the init process, at the same time
    ypbind is usually started as well
  - add a sepoarate init script for nmbd called nmb, we need to be able
    to restart nmbd without dropping al smbd connections unnecessarily


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - remove patch for bug 106483 as it introduces a new bug that prevents
    the use of a credentials file with the smbclient tar command
  - move the samba private dir from being the same as the config dir
    (/etc/samba) to /var/lib/samba/private


author: Simo Sorce <ssorce@redhat.com> 3.0.24-9.fc7
changelog:
  - integrate most of merge review proposed changes (bug #226387)
  - remove libsmbclient-devel-static and simply stop shipping the
    static version of smbclient as it seem this is deprecated and
    actively discouraged


author: Simo Sorce <ssorce@redhat.com> 3.0.24-10.fc7
changelog:
  - set passdb backend = tdbsam as default in smb.conf
  - remove samba-docs dependency from swat, that was a mistake
  - put back COPYING and other files in samba-common
  - put examples in samba not in samba-docs
  - leave only stuff under docs/ in samba-doc


author: Guenther Deschner <gdeschner@redhat.com> 3.0.24-11.fc7
changelog:
  - enable PAM and NSS dlopen checks during build
  - fix unresolved symbols in libnss_wins.so (bug #198230)


author: Simo Sorce <ssorce@redhat.com> 3.0.24-12.fc7
changelog:
  - fixes in smb.conf
  - advice in smb.conf to put scripts in /var/lib/samba/scripts
  - create /var/lib/samba/scripts so that selinux can be happy
  - fix Vista problems with msdfs errors


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - fixes in the spec file
  - moved to 3.0.25rc1
  - addedd patches (merged upstream so they will be removed in 3.0.25rc2)


author: Simo Sorce <ssorce@redhat.com>
changelog:
  - update to 3.0.25a as it contains many fixes
  - add a fix for pam_smbpass made by Günther but committed upstream after 3.0.25a was cut.


author: Simo Sorce <ssorce@redhat.com> 3.2.0-0.pre1.fc9
changelog:
  - New major relase, minor switched from 0 to 2
  - License change, the code is now GPLv3+
  - Numerous improvements and bugfixes included
  - package libsmbsharemodes too
  - remove smbldap-tools as they are already packaged separately in Fedora
  - Fix bug 245506


author: Simo Sorce <ssorce@redhat.com> - 3.2.0-0.pre1.3
changelog:
  - Try to fix GCC 4.3 build
  - Add --with-dnsupdate flag and also make sure other flags are required just to
    be sure the features are included without relying on autodetection to be
    successful


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.0-0.25
changelog:
  - Update to 3.3.0 final
  - Add upstream fix for ldap connections to AD (Bug #6073)
  - Remove bogus perl dependencies (resolves: #473051)


author: Simo Sorce <ssorce@redhat.com> - 3.3.1-0.29
changelog:
  - Make the talloc and ldb packages optionsl and disable their build within
    the samba3 package, they are now built as part of the samba4 package
    until they will both be released as independent packages.


author: Simo Sorce <ssorce@redhat.com> - 3.3.2-0.33
changelog:
  - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the
    configuration
  - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on
    startup, causing your own machine not to show up in the network for 5 minutes
    if it was the only client in that workgroup (fix committed upstream)


author: Guenther Deschner <gdeschner@redhat.com> - 3.4.0-0.41
changelog:
  - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX)
  - Specify required talloc and tdb version for BuildRequires


author: Simo Sorce <ssorce@redhat.com> - 3.4.2-47
changelog:
  - Spec file cleanup
  - Fix sources upstream location
  - Remove conditionals to build talloc and tdb, now they are completely indepent
    packages in Fedora
  - Add defattr() where missing
  - Turn all tabs into 4 spaces
  - Remove unused migration script
  - Split winbind-clients out of main winbind package to avoid multilib to include
    huge packages for no good reason


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.3-60
changelog:
  - Update to 3.5.3
  - Make sure nmb and smb initscripts return LSB compliant return codes
  - Fix winbind over ipv6


author: Andreas Schneider <asn@redhat.com> - 2:3.6.5-88
changelog:
  - Move tmpfiles.d config to common package as it is needed for smbd and
    winbind.
  - Make sure tmpfiles get created after installation.


author: Ville Skyttä <ville.skytta@iki.fi> - 2:3.6.6-92
changelog:
  - Call ldconfig at libwbclient and -winbind-clients post(un)install time.
  - Fix empty localization files, use %find_lang to find and %lang-mark them.
  - Escape macros in %changelog.
  - Fix source tarball URL.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-154.rc3
changelog:
  - Update to 4.0.0rc3.
  - resolves: #805562 - Unable to share print queues.
  - resolves: #863388 - Unable to reload smbd configuration with systemctl.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.0-160.rc3
changelog:
  - resolves: #867893 - Move /var/log/samba to samba-common package for
                        winbind which requires it.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.2-1
changelog:
  - Update to Samba 4.0.2.
  - Fixes CVE-2013-0213.
  - Fixes CVE-2013-0214.
  - resolves: #906002
  - resolves: #905700
  - resolves: #905704
  - Fix conn->share_access which is reset between user switches.
  - resolves: #903806
  - Add missing example and make sure we don't introduce perl dependencies.
  - resolves: #639470


author: Andreas Schneider <asn@redhat.com> - 2:4.0.3-1
changelog:
  - Update to Samba 4.0.3.
  - resolves: #907544 - Add unowned directory /usr/lib64/samba.
  - resolves: #906517 - Fix pidl code generation with gcc 4.8.
  - resolves: #908353 - Fix passdb backend ldapsam as module.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.4-3
changelog:
  - resolves: #919405 - Fix and improve large_readx handling for broken clients.
  - resolves: #924525 - Don't use waf caching.


author: Andreas Schneider <asn@redhat.com> - 2:4.0.5-1
changelog:
  - Update to Samba 4.0.5.
  - Add UPN enumeration to passdb internal API (bso #9779).
  - resolves: #928947 - samba-doc is obsolete now.
  - resolves: #948606 - LogRotate should be optional, and not a hard "Requires".


author: Andreas Schneider <asn@redhat.com> - 2:4.0.7-2
changelog:
  - resolves: #972692 - Build with PIE and full RELRO.
  - resolves: #884169 - Add explicit dependencies suggested by rpmdiff.
  - resolves: #981033 - Local user's krb5cc deleted by winbind.
  - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong
                        directory.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.2
changelog:
  - resolves: #985985 - Fix file conflict between samba and wine.
  - resolves: #985107 - Add support for new default location for Kerberos
                        credential caches.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.7
changelog:
  - related: #985609 - Update to Samba 4.1.0rc3.
  - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd.


author: Andreas Schneider <asn@redhat.com> - 2:4.1.0-0.8
changelog:
  - related: #985609 - Update to Samba 4.1.0rc4.
  - resolves: #1010722 - Split out a samba-winbind-modules package.


author: Andreas Schneider <asn@redhat.com> - 4.1.0-2
changelog:
  - resolves: #1018856 - Fix installation of pam_winbind after upgrade.
  - related: #1010722 - Split out a samba-winbind-modules package.
  - related: #985609


author: Andreas Schneider <asn@redhat.com> - 4.1.0-4
changelog:
  - related: #884169 - Add direct dependency to samba-libs in the
                       glusterfs package.
  - resolves: #996567 - Fix userPrincipalName composition.
  - related: #884169 - Fix memset call with zero length in in ntdb.


author: Andreas Schneider <asn@redhat.com> - 4.1.3-1
changelog:
  - Update to Samba 4.1.3.
  - resolves: #1039454 - CVE-2013-4408.
  - resolves: #1039500 - CVE-2012-6150.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-0.3.rc2
changelog:
  - resolves: #1174412 - Build VFS Ceph module.
  - resolves: #1169067 - Move libsamba-cluster-support.so to samba-libs package.
  - resolves: #1016122 - Move smbpasswd to samba-common package.


author: Michael Adam <madam@redhat.com> - 4.2.0-0.2.rc3
changelog:
  - Improve dependencies of vfs-glusterfs and vfs-cephfs.
  - Remove unused python_libdir.
  - Fix malformed changelog entries.


author: Andreas Schneider <asn@redhat.com> - 4.2.0-2
changelog:
  - Fix the AD build.
  - Create samba-client-libs subpackage.
  - Fix multiarch issues by splitting the samba-common package.


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-5
changelog:
  - Require samba-common-tools in samba package
  - Require samba-common-tools in samba-client package
  - resolves: #1215631 - /usr/bin/net moved to samba-common-tools but the package is not required by samba


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-7
changelog:
  - Fix LSASD daemon
  - resolves: #1217346 - FreeIPA trusts to AD broken due to Samba 4.2 failure to run LSARPC pipe externally


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.2.1-8
changelog:
  - Fixes: #1219832: Samba 4.2 broke FreeIPA trusts to AD
  - Remove usage of deprecated API from gnutls


author: Andreas Schneider <asn@redhat.com> - 4.2.2-1
changelog:
  - resolves: #1227911 - Enable tar support for smbclient
  - resolves: #1234908 - Own the /var/lib/samba directory
  - Enable hardened build


author: Guenther Deschner <gdeschner@redhat.com> - 4.3.3-0
changelog:
  - Update to Samba 4.3.3
  - resolves: #1292069
  - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server
  - CVE-2015-5252 Insufficient symlink verification in smbd
  - CVE-2015-5296 Samba client requesting encryption vulnerable to
                  downgrade attack
  - CVE-2015-5299 Missing access control check in shadow copy code
  - CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1
                  memory allocation


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.0-0.7.rc4
changelog:
  - Update to Samba 4.4.0rc4
  - resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path


author: Guenther Deschner <gdeschner@redhat.com> - 4.4.2-1
changelog:
  - Update to Samba 4.4.2, fix badlock security bug
  - resolves: #1326453 - CVE-2015-5370
  - resolves: #1326453 - CVE-2016-2110
  - resolves: #1326453 - CVE-2016-2111
  - resolves: #1326453 - CVE-2016-2112
  - resolves: #1326453 - CVE-2016-2113
  - resolves: #1326453 - CVE-2016-2114
  - resolves: #1326453 - CVE-2016-2115
  - resolves: #1326453 - CVE-2016-2118


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-3
changelog:
  - auth/credentials: Always set the the realm if we set the principal from the ccache
  - resolves: #1430761 - credentials_crb5: use gss_acquire_cred for client-side GSSAPI use case


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.0-4
changelog:
  - Export arcfour_crypt_blob to Python as samba.crypto.arcfour_encrypt
  - Makes possible to run trust to AD in FreeIPA in FIPS mode


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.5.rc1
changelog:
  - Convert more rpc modules to python3
  - Explicitly specify Python artifacts in the spec to be able to catch unpackaged ones
  - Split 'make test' Python code into separate python2-samba-test/python3-samba-test sub-packages
  - Remove embedded python2-dns version, require python{2,3}-dns instead


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-0.6.rc1
changelog:
  - Use Python 2 explicitly for samba-tool and other Python-based tools
  - Install samba.service as it is required for the AD DC case


author: Guenther Deschner <gdeschner@redhat.com> - 4.7.0-12
changelog:
  - Update to Samba 4.7.0
  - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-13
changelog:
  - Move /usr/lib{64,}/samba/libdsdb-garbage-collect-tombstones-samba4.so to samba-dc-libs
  - Rebuild in rawhide against new krb5 1.16 and docbook-xml


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.7.0-18
changelog:
  - Force samba-dc to use the same libldb version as LDB modules compiled
  - resolves: #1507420 - LDB / Samba module version mismatch


author: Guenther Deschner <gdeschner@redhat.com> - 4.8.0-7
changelog:
  - resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057
  - resolves: #1555112 - Update to Samba 4.8.0


author: Petr Viktorin <pviktori@redhat.com> - 4.8.3-2
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Change unversioned python macros to python2
  - Disable gluster temporarily


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1754575 - Avoid overlinking with librt and libpthread
  - resolves: #1755440 - Fix forest trusts enumeration
  - resolves: #1755445 - Fix CUPS username/password authentication with smbspool


author: Andreas Schneider <asn@redhat.com> - 4.11.2-1
changelog:
  - resolves: #1754409 - Rebase to Samba version 4.11.2
  - resolves: #1776312 - Winbind is not restarted on upgrade
  - resolves: #1764469 - Fix CVE-2019-10218
  - resolves: #1746241 - Fix CVE-2019-10197
  - resolves: #1710980 - Add support for KCM ccache in pam_winbind


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Andreas Schneider <asn@redhat.com> - 4.12.3-0
changelog:
  - resolves: #1817557 - Rebase to version 4.12.3
  - resolves: #1813833 - Fix 'net ads join createupn='


author: Andreas Schneider <asn@redhat.com> - 4.12.3-1
changelog:
  - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
  - resolves: #1842844 - Fix GnuTLS priority list for TLS connections


author: Isaac Boukris <iboukris@redhat.com> - 4.12.3-4
changelog:
  - resolves: #1850980 - Add "additional dns hostname" to keytab
  - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option


author: Andreas Schneider <asn@redhat.com> - 4.12.3-5
changelog:
  - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
  - resolves: #1792553 - Fix 'net ads join createcomputer=OU'


author: Andreas Schneider <asn@redhat.com> - 4.12.3-7
changelog:
  - resolves: #1855711 - Fix 'require_membership_of' documentation in
                         pam_winbind manpage


author: Andreas Schneider <asn@redhat.com> - 4.12.3-9
changelog:
  - related: #1817557 - Move DECRPC mdssvc data files to correct package
  - resolves: #1856676 - Fix lookuprids in winbind


author: Andreas Schneider <asn@redhat.com> - 4.13.2-1
changelog:
  - resolves: #1878109 - Rebase Samba to version 4.13.2
  - resolves: #1872833 - Add samba-winexe subpackage
  - resolves: #1891688 - Fix CVE-2020-14323
  - resolves: #1892633 - Fix CVE-2020-14318
  - resolves: #1892639 - Fix CVE-2020-14383
  - resolves: #1879835 - Fix CVE-2020-1472
  - resolves: #1888990 - Update smb.conf manpages to describe how to apply
                         config changes.
  - resolves: #1869702 - Fix %U substitution for 'valid users' option
  - resolves: #1818038 - Improve FIPS compliance


author: Andreas Schneider <asn@redhat.com> - 4.13.2-2
changelog:
  - related: #1869702 - Fix spoolss crash
  - resolves: #1896736 - Fix name lookups of FreeIPA users
  - resolves: #1899113 - Fix DFS links


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-3
changelog:
  - resolves: rhbz#2019662 - Fix CVE-2016-2124
  - resolves: rhbz#2019668 - Fix CVE-2021-23192
  - resolves: rbhz#2019674 - Fix CVE-2020-25717


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.2-1
changelog:
  - resolves: rhbz#2013596 - Rebase to version 4.15.2
  - resolves: rhbz#1999294 - Remove noisy error message in winbindd
  - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                             with one-way trusts
  - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.6-2
changelog:
  - resolves: RHEL-11956
    Fix CVE-2023-3961 - smbd must check the pipename
  - resolves: RHEL-11956
    Fix CVE-2023-4091 - SMB clients can truncate files
  - resolves: RHEL-11956
    Fix CVE-2023-42669 - Remove rpcecho server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-25
changelog:
  - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-31
changelog:
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Jindrich Novy <jnovy@redhat.com> - 7.16.0-2
changelog:
  - fix BuildRoot
  - add Requires: pkgconfig for curl-devel
  - move LDFLAGS and LIBS to Libs.private in libcurl.pc.in (#213278)


author: Jindrich Novy <jnovy@redhat.com> 7.16.2-4
changelog:
  - another series of review fixes (#225671),
    thanks to Paul Howarth
  - check version of ldap library automatically
  - don't use %makeinstall and preserve timestamps
  - drop useless patches


author: Jindrich Novy <jnovy@redhat.com> 7.16.3-1
changelog:
  - update to 7.16.3
  - drop .print patch, applied upstream
  - next series of merge review fixes by Paul Howarth
  - remove aclocal stuff, no more needed
  - simplify makefile arguments
  - don't reference standard library paths in libcurl.pc
  - include docs/CONTRIBUTE


author: Jindrich Novy <jnovy@redhat.com> 7.16.4-5
changelog:
  - add support for the NSS PKCS#11 pem reader so the command-line is the
    same for both OpenSSL and NSS by Rob Crittenden (rcritten@redhat.com)
  - switch to NSS again


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-1
changelog:
  - update to curl 7.17.1
  - include patch to enable SSL usage in NSS when a socket is opened
    nonblocking, thanks to Rob Crittenden (rcritten@redhat.com)


author: Jindrich Novy <jnovy@redhat.com> 7.17.1-3
changelog:
  - drop useless ldap library detection since curl doesn't
    dlopen()s it but links to it -> BR: openldap-devel
  - enable LDAPS support (#225671), thanks to Paul Howarth
  - BR: krb5-devel to reenable GSSAPI support
  - simplify build process
  - update description


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-1
changelog:
  - update to curl 7.18.1 (fixes #397911)
  - add ABI docs for libcurl
  - remove --static-libs from curl-config
  - drop curl-config patch, obsoleted by @SSL_ENABLED@ autoconf
    substitution (#432667)


author: Jindrich Novy <jnovy@redhat.com> 7.18.1-2
changelog:
  - spec cleanup, thanks to Paul Howarth (#225671)
    - drop BR: libtool
    - convert CHANGES and README to UTF-8
    - _GNU_SOURCE in CFLAGS is no more needed
    - remove bogus rpath


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-1
changelog:
  - update to 7.19.4 (fixes CVE-2009-0037)
  - fix leak in curl_easy* functions, thanks to Kamil Dudka
  - drop nss-fix patch, applied upstream


author: Jindrich Novy <jnovy@redhat.com> 7.19.4-2
changelog:
  - drop .easy-leak patch, causes problems in pycurl (#488791)
  - fix libcurl-devel dependencies (#488895)


author: Kamil Dudka <kdudka@redhat.com> 7.19.4-6
changelog:
  - upstream patch fixing memory leak in lib/nss.c (#453612)
  - remove redundant dependency of libcurl-devel on libssh2-devel


author: Kamil Dudka <kdudka@redhat.com> 7.19.5-8
changelog:
  - do not pre-login to all PKCS11 slots, it causes problems with HW tokens
  - try to select client certificate automatically when not specified, thanks
    to Claes Jakobsson


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-1
changelog:
  - new upstream release, dropped applied patches
  - changed NSS code to not ignore the value of ssl.verifyhost and produce more
    verbose error messages (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-3
changelog:
  - avoid tight loop during a sftp upload
  - http://permalink.gmane.org/gmane.comp.web.curl.library/24744


author: Kamil Dudka <kdudka@redhat.com> 7.19.6-4
changelog:
  - use pkg-config to find nss and libssh2 if possible
  - better patch (not only) for SCP/SFTP polling
  - improve error message for not matching common name (#516056)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-1
changelog:
  - new upstream release, dropped applied patches
  - workaround for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-3
changelog:
  - fix crash on doubly closed NSPR descriptor, patch contributed
    by Kevin Baughman (#534176)
  - new version of patch for broken TLS servers (#525496, #527771)


author: Kamil Dudka <kdudka@redhat.com> 7.19.7-11
changelog:
  - upstream patch adding a new option -J/--remote-header-name
  - dropped temporary workaround for #545779


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-1
changelog:
  - new upstream release - added support for IMAP(S), POP3(S), SMTP(S) and RTSP
  - dropped patches applied upstream
  - dropped curl-7.16.0-privlibs.patch no longer useful
  - a new patch forcing -lrt when linking the curl tool and test-cases


author: Kamil Dudka <kdudka@redhat.com> 7.20.0-3
changelog:
  - throw CURLE_SSL_CERTPROBLEM in case peer rejects a certificate (#565972)
  - valgrind temporarily disabled (#574889)
  - kerberos installation prefix has been changed


author: Paul Howarth <paul@city-fan.org> 7.20.1-3
changelog:
  - replace Rawhide s390-sleep patch with a more targeted patch adding a
    delay after tests 513 and 514 rather than after all tests


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-4
changelog:
  - upstream patch preventing failure of test536 with threaded DNS resolver
  - upstream patch preventing SSL handshake timeout underflow


author: Kamil Dudka <kdudka@redhat.com> 7.20.1-5
changelog:
  - CRL support now works again (#581926)
  - make it possible to start a testing OpenSSH server when building with SELinux
    in the enforcing mode (#521087)


author: Kamil Dudka <kdudka@redhat.com> 7.21.0-1
changelog:
  - new upstream release, drop applied patches
  - update of %description
  - disable valgrind for certain test-cases (libssh2 problem)


author: Kamil Dudka <kdudka@redhat.com> 7.21.1-2
changelog:
  - re-enable test575 on s390(x), already fixed (upstream commit d63bdba)
  - modify system headers to work around gcc bug (#617757)
  - curl -T now ignores file size of special files (#622520)
  - fix kerberos proxy authentication for https (#625676)
  - work around glibc/valgrind problem on x86_64 (#626470)


author: Paul Howarth <paul@city-fan.org> 7.21.1-3
changelog:
  - fix up patches so there's no need to run autotools in the rpm build
  - drop buildreq automake
  - drop dependency on automake for devel package from F-14, where
    %{_datadir}/aclocal is included in the filesystem package
  - drop dependency on pkgconfig for devel package from F-11, where
    pkgconfig dependencies are auto-generated


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-4
changelog:
  - prevent FTP client from hanging on unrecognized ABOR response (#649347)
  - return more appropriate error code in case FTP server session idle
    timeout has exceeded (#650255)


author: Kamil Dudka <kdudka@redhat.com> 7.21.2-5
changelog:
  - do not send QUIT to a dead FTP control connection (#650255)
  - pull back glibc's implementation of str[n]casecmp(), #626470 appears fixed


author: Paul Howarth <paul@city-fan.org> 7.21.3-1
changelog:
  - update to 7.21.3:
    - added --noconfigure switch to testcurl.pl
    - added --xattr option
    - added CURLOPT_RESOLVE and --resolve
    - added CURLAUTH_ONLY
    - added version-check.pl to the examples dir
    - check for libcurl features for some command line options
    - Curl_setopt: disallow CURLOPT_USE_SSL without SSL support
    - http_chunks: remove debug output
    - URL-parsing: consider ? a divider
    - SSH: avoid using the libssh2_ prefix
    - SSH: use libssh2_session_handshake() to work on win64
    - ftp: prevent server from hanging on closed data connection when stopping
      a transfer before the end of the full transfer (ranges)
    - LDAP: detect non-binary attributes properly
    - ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT
    - gnutls->handshake: improved timeout handling
    - security: pass the right parameter to init
    - krb5: use GSS_ERROR to check for error
    - TFTP: resend the correct data
    - configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected
    - GnuTLS: now detects socket errors on Windows
    - symbols-in-versions: updated en masse
    - added a couple of examples that were missing from the tarball
    - Curl_send/recv_plain: return errno on failure
    - Curl_wait_for_resolv (for c-ares): correct timeout
    - ossl_connect_common: detect connection re-use
    - configure: prevent link errors with --librtmp
    - openldap: use remote port in URL passed to ldap_init_fd()
    - url: provide dead_connection flag in Curl_handler::disconnect
    - lots of compiler warning fixes
    - ssh: fix a download resume point calculation
    - fix getinfo CURLINFO_LOCAL* for reused connections
    - multi: the returned running handles counter could turn negative
    - multi: only ever consider pipelining for connections doing HTTP(S)
  - drop upstream patches now in tarball
  - update bz650255 and disable-test1112 patches to apply against new codebase
  - add workaround for false-positive glibc-detected buffer overflow in tftpd
    test server with FORTIFY_SOURCE (similar to #515361)


author: Kamil Dudka <kdudka@redhat.com> 7.21.4-1
changelog:
  - new upstream release
  - avoid memory leak on SSL connection failure (upstream commit a40f58d)
  - work around valgrind bug (#678518)


author: Kamil Dudka <kdudka@redhat.com> 7.21.7-3
changelog:
  - fix SIGSEGV of curl -O -J given more than one URL (#723075)
  - introduce the --delegation option of curl (#730444)
  - initialize NSS with no database if the selected database is broken (#728562)


author: Paul Howarth <paul@city-fan.org> 7.25.0-1
changelog:
  - new upstream release (#806264)
  - fix character encoding of docs with a patch rather than just iconv
  - update debug and multilib patches
  - don't use macros for commands
  - reduce size of %prep output for readability


author: Kamil Dudka <kdudka@redhat.com> 7.25.0-2
changelog:
  - use NSS_InitContext() to initialize NSS if available (#738456)
  - provide human-readable names for NSS errors (upstream commit a60edcc6)


author: Kamil Dudka <kdudka@redhat.com> 7.27.0-3
changelog:
  - use the upstream facility to disable problematic tests
  - do not crash if MD5 fingerprint is not provided by libssh2


author: Kamil Dudka <kdudka@redhat.com> 7.28.1-2
changelog:
  - prevent NSS from crashing on client auth hook failure
  - clear session cache if a client cert from file is used
  - fix error messages for CURLE_SSL_{CACERT,CRL}_BADFILE


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-3
changelog:
  - switch SSL socket into non-blocking mode after handshake
  - drop the hide_selinux.c hack no longer needed in %check


author: Kamil Dudka <kdudka@redhat.com> 7.29.0-4
changelog:
  - do not ignore poll() failures other than EINTR (#919127)
  - curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag (#919127)


author: Kamil Dudka <kdudka@redhat.com> 7.30.0-1
changelog:
  - new upstream release (fixes CVE-2013-1944)
  - prevent test-suite failure due to using non-default port ranges in tests


author: Kamil Dudka <kdudka@redhat.com> 7.33.0-1
changelog:
  - new upstream release
  - fix missing initialization in NTLM code causing test 906 to fail
  - fix missing initialization in SSH code causing test 619 to fail


author: Kamil Dudka <kdudka@redhat.com> 7.37.1-1
changelog:
  - new upstream release
  - fix endless loop with GSSAPI proxy auth (patches by David Woodhouse, #1118751)


author: Kamil Dudka <kdudka@redhat.com> 7.42.0-1
changelog:
  - new upstream release (fixes CVE-2015-3143, CVE-2015-3144, CVE-2015-3145,
    and CVE-2015-3148)
  - implement public key pinning for NSS backend (#1195771)
  - do not run flaky test-cases in %check


author: Kamil Dudka <kdudka@redhat.com> 7.46.0-1
changelog:
  - disable silent builds (suggested by Paul Howarth)
  - use default port numbers when running the upstream test-suite
  - install zsh completion script
  - new upstream release


author: Kamil Dudka <kdudka@redhat.com> 7.50.0-1
changelog:
  - run HTTP/2 tests only on Intel for now to work around #1358845
  - require nss-pem because it is no longer included in the nss package (#1347336)
  - fix HTTPS and FTPS tests (work around stunnel bug #1358810)
  - new upstream release


author: Kamil Dudka <kdudka@redhat.com> 7.50.1-2
changelog:
  - work around race condition in PK11_FindSlotByName()
  - fix incorrect use of a previously loaded certificate from file
    (related to CVE-2016-5420)


author: Kamil Dudka <kdudka@redhat.com> 7.51.0-1
changelog:
  - temporarily disable failing libidn2 test-cases
  - new upstream release, which fixes the following vulnerabilities
      CVE-2016-8615 - Cookie injection for other servers
      CVE-2016-8616 - Case insensitive password comparison
      CVE-2016-8617 - Out-of-bounds write via unchecked multiplication
      CVE-2016-8618 - Double-free in curl_maprintf
      CVE-2016-8619 - Double-free in krb5 code
      CVE-2016-8620 - Glob parser write/read out of bounds
      CVE-2016-8621 - curl_getdate out-of-bounds read
      CVE-2016-8622 - URL unescape heap overflow via integer truncation
      CVE-2016-8623 - Use-after-free via shared cookies
      CVE-2016-8624 - Invalid URL parsing with '#'
      CVE-2016-8625 - IDNA 2003 makes curl use wrong host


author: Kamil Dudka <kdudka@redhat.com> 7.53.0-1
changelog:
  - do not use valgrind on ix86 until sqlite is rebuilt by patched GCC (#1423434)
  - new upstream release (fixes CVE-2017-2629)


author: Paul Howarth <paul@city-fan.org> 7.53.1-7
changelog:
  - add %post and %postun scriptlets for libcurl-minimal
  - libcurl-minimal provides both libcurl and libcurl%{?_isa}
  - remove some legacy spec file cruft


author: Kamil Dudka <kdudka@redhat.com> 7.54.0-2
changelog:
  - nss: use libnssckbi.so as the default source of trust
  - nss: do not leak PKCS #11 slot while loading a key (#1444860)


author: Kamil Dudka <kdudka@redhat.com> 7.55.0-1
changelog:
  - drop multilib fix for libcurl header files no longer needed
  - new upstream release, which fixes the following vulnerabilities
      CVE-2017-1000099 - FILE buffer read out of bounds
      CVE-2017-1000100 - TFTP sends more than buffer size
      CVE-2017-1000101 - URL globbing out of bounds read


author: Kamil Dudka <kdudka@redhat.com> - 7.57.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2017-8816 - curl: NTLM buffer overflow via integer overflow
      CVE-2017-8817 - curl: FTP wildcard out of bounds read
      CVE-2017-8818 - curl: SSL out of buffer access


author: Kamil Dudka <kdudka@redhat.com> - 7.58.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2018-1000005 - curl: HTTP/2 trailer out-of-bounds read
      CVE-2018-1000007 - curl: HTTP authentication leak in redirects


author: Kamil Dudka <kdudka@redhat.com> - 7.58.0-3
changelog:
  - temporarily work around internal compiler error on x86_64 (#1540549)
  - disable brp-ldconfig to make RemovePathPostfixes work with shared libs again


author: Paul Howarth <paul@city-fan.org> - 7.58.0-6
changelog:
  - switch to %ldconfig_scriptlets
  - drop legacy BuildRoot: and Group: tags
  - enforce versioned libssh dependency for libcurl


author: Paul Howarth <paul@city-fan.org> - 7.58.0-7
changelog:
  - Add explicity-used build requirements
  - Fix libcurl soname version number in %files list to avoid accidental soname
    bumps


author: Kamil Dudka <kdudka@redhat.com> - 7.59.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2018-1000120 - FTP path trickery leads to NIL byte out of bounds write
      CVE-2018-1000121 - LDAP NULL pointer dereference
      CVE-2018-1000122 - RTSP RTP buffer over-read


author: Kamil Dudka <kdudka@redhat.com> - 7.60.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2018-1000300 - FTP shutdown response buffer overflow
      CVE-2018-1000301 - RTSP bad headers buffer over-read


author: Kamil Dudka <kdudka@redhat.com> - 7.61.0-1
changelog:
  - new upstream release, which fixes the following vulnerability
      CVE-2018-0500 - SMTP send heap buffer overflow


author: Kamil Dudka <kdudka@redhat.com> - 7.61.0-3
changelog:
  - disable flaky test 1900, which covers deprecated HTTP pipelining
  - adapt test 323 for updated OpenSSL


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-6
changelog:
  - SASL password overflow via integer overflow (CVE-2018-16839)
  - fix use-after-free in handle close (CVE-2018-16840)
  - fix bad arethmetic when outputting warnings to stderr (CVE-2018-16842)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-10
changelog:
  - fix SMTP end-of-response out-of-bounds read (CVE-2019-3823)
  - fix NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)
  - fix NTLM type-2 out-of-bounds buffer read (CVE-2018-16890)
  - xattr: strip credentials from any URL that is stored (CVE-2018-20483)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-12
changelog:
  - double free due to subsequent call of realloc() (CVE-2019-5481)
  - fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
  - fix TFTP receive buffer overflow (CVE-2019-5436)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-15
changelog:
  - do not crash when HTTPS_PROXY and NO_PROXY are used together (#1873327)
  - libcurl: wrong connect-only connection (CVE-2020-8231)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-23
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-24
changelog:
  - fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
  - fix invalid type in printf() argument detected by Coverity


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-33.el8_9.4
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-15296)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-7
changelog:
  - Fix lvm crash when recreating PV with UUID of a missing PV.
  - Fix lvconvert --type vdo-pool with --test should not write signature.
  - Use correect profile in lvmdbusd preventing messages in JSON output.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-8
changelog:
  - Fix [vdo_]use_compression options.
  - Fix vgimportdevices operating on incomplete VGs fails when nothing to import.
  - Fix message processing on thin-pool extension leaving devices behind.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-33
changelog:
  - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
    * Fixes bz #2141996
  - Modify tests/multipath_conf_syntax/main.sh
    * fix unrelated test error
  - Resolves: bz #2141996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-34
changelog:
  - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
    * Fixes bz #2126714
  - Cleanup multiple CI tests
  - Resolves: bz #2126714


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-35
changelog:
  - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2155560


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-36
changelog:
  - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-37
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162537)
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-38
changelog:
  - Add 0132-multipathd-make-pr-registration-consistent.patch
  - Add 0133-libmultipath-make-prflag-an-enum.patch
  - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164871


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-39
changelog:
  - Add OSCI tests directory
  - Make kpartx_id installation location relative to /usr/lib/udev/rules.d
  - Resolves: bz #2164871


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Marian Csontos <mcsontos@redhat.com> - 0.9.0-1
changelog:
  - Update to upstream version 0.9.0.
  - Fix important issues found by static analysis.
  - Update crc32c to version 0.5 supporting non x86 architectures.
  - New tools thin_metadata_pack and thin_metadata_unpack.


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - dhclient logs its pid to make troubleshooting NM managed systems
    with multiple dhclients running easier (#546792)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-18
changelog:
  - Hide startup info when starting dhcpd6 service.
  - Remove -TERM from calling killproc when stopping dhcrelay (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
  - document -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559142)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - In dhclient-script:
    - use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet' resp. '-f[amily] inet6'
    - do not use IP protocol family identifier with 'ip link'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#573090)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-14
changelog:
  - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast option
  - Fix dhclient-script to set interface MTU only when it's greater than 576 (#574629)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-15
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559147)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559147)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559153)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-18
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578097)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20
changelog:
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#586999)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - 4.1.1-P1: pair of bug fixes including one for CVE-2010-2156 (#601405)
  - Compile with -fno-strict-aliasing


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
changelog:
  - Add 12-dhcpd NM dispatcher script (#565921)
  - Rename 10-dhclient to 11-dhclient (10-sendmail already exists)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-16.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-22.P2
changelog:
  - 4.2.0-P2: fix for CVE-2010-3616 (#662326)
  - Use upstream fix for #628258
  - Provide versioned symbols for rpmlint


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-0.1.b1
changelog:
  - 4.2.1b1: fix for CVE-2011-0413 (#672996)
  - No longer need invalid-dhclient-conf, parse_date and release6-elapsed patches


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
changelog:
  - Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
    with the same version and release (bug #705037).
  - Fix triggerun scriptlet


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-11.P1
changelog:
  - Add triggerpostun scriptlet tied to dhcp-sysvinit
  - Make it possible to build without downstream patches (Kamil Dudka)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
changelog:
  - Removed upstream-merged IFNAMSIZ.patch
  - Polished patches according to results from static analysis of code.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-0.1.b1
changelog:
  - 4.2.2b1: upstream merged initialization-delay.patch
  - Drop all capabilities in dhcpd/dhcrelay (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-2
changelog:
  - #699713:
    - Use '--enable-paranoia --enable-early-chroot' configure flags
    - Create/delete dhcpd user in %post/%postun
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-3
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-6
changelog:
  - PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same
  - One more tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-7
changelog:
  - Support for IPoIB (IP over InfiniBand) interfaces (#660681)
  - Hopefully last tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-12
changelog:
  - change ownership of /var/lib/dhcpd/ to dhcpd:dhcpd (#744292)
  - no need to drop capabilies in dhcpd since it's been running as regular user


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-2
changelog:
  - Write PID file BEFORE changing of the effective user/group ID.
  - Really define _hardened_build this time


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-3
changelog:
  - Write lease file AFTER changing of the effective user/group ID.
  - Move omshell from dhcp-common to main package (where it originally was).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
changelog:
  - Send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).
  - Don't build with -D_GNU_SOURCE, configure.ac uses AC_USE_SYSTEM_EXTENSIONS


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-9.P1
changelog:
  - don't ship legacy SysV initscripts
  - dhcpd6: move '-cf /etc/dhcp/dhcpd6.conf' from sysconfig/dhcpd6 to dhcpd6.service
  - run 'chown -R dhcpd:dhcpd /var/lib/dhcpd/' before starting dhcpd/dhcpd6 service
    for the case where leases file is owned by root:root as a
    consequence of running dhcpd without '-user dhcpd -group dhcpd' (#744292)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-10.P1
changelog:
  - hopefully we don't need 12-dhcpd anymore as 'After=network.target'
    in dhcpd[6].service should take care of the original problem (#565921)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-11.P1
changelog:
  - revert change made in 4.2.3-3 because of failing failover inicialization (#765967)
    the procedure is now:
    init lease file, init failover, init PID file, change effective user/group ID
  - don't need to fix lease files ownership before starting service
  - dhclient-script: allow static route with a 0.0.0.0 next-hop address (#769463)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-0.5.rc1
changelog:
  - dhcpd.service: explicitly add -cf to indicate what conf file we use (#819325)
  - no need to copy /etc/*.conf to /etc/dhcp/*.conf in %prep anymore


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-6
changelog:
  - ib.patch: added fall-back method (using ioctl(SIOCGIFHWADDR)) when getting
              of HW address with getifaddrs() fails (#626514-c#63, #840601).


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-12.P1
changelog:
  - dhclient-script: fixed CONFIG variable value passed to need_config (#848858)
  - dhclient-script: calling dhclient-up-hooks after setting up route, gateways 
                     & interface alias (#848869)


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
changelog:
  - SystemD unit files don't use Environment files any more (#850558)
  - NetworkManager dispatcher script doesn't use DHCPDARGS any more


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-22.P2
changelog:
  - add After=time-sync.target to dhcpd[6].service (#878293)
  - remove groff from BuildRequires (no idea why it's been there)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-2
changelog:
  - during update convert DHC*ARGS from /etc/sysconfig/dhc*
    to /etc/systemd/system/dhc*.service (#895475)
  - 12-dhcpd NM dispatcher script now restarts also dhcpd6 service


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-5
changelog:
  - remove missing-ipv6-not-fatal.patch because the concerning code is later
    removed with getifaddrs.patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-21
changelog:
  - 12-dhcpd: wait a few seconds before restarting services (#1003695)
  - another solution for #1001742 (#1005814#c10)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-23
changelog:
  - 'No subnet declaration for <iface>' should be info, not error
  - decrease the sleep in 12-dhcpd due to timeout (#1003695#8)


author: Filipe Brandenburger <filbranden@google.com> - 12:4.3.0-15
changelog:
  - dhclient-script: fix issue with classless static routes that breaks Fedora 20 on GCE cloud (#1102830)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-5
changelog:
  - spec: use -D with 'install'
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
    added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-11
changelog:
  - dhcpd generates spurious responses when seeing requests
    from vlans on plain interface (#1150587)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.1-15
changelog:
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.3-0.1b1
changelog:
  - 4.3.3b1
  - enable krb5/gssapi authentication for OpenLDAP
  - enable support for binary insertion of leases


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.3-4
changelog:
  - dhclient-script: make_resolv_conf(): keep old nameservers
    if server sends domain-name/search, but no nameservers (#1269595)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.3.4-3
changelog:
  - [dhclient] rename -R option to --request-options (#1357947)
  - [dhclient] rename -timeout option to --timeout


author: Petr Menšík <pemensik@redhat.com> - 12:4.3.6-14
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.3.6-33
changelog:
  - Resolves: #1673946 - Change default prefix length to 128
  - Add address-prefix-lenght option to change default value
  - Fix backporting issues


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-6
changelog:
  - Updated to the latest upstream(5b3c8e995026 ("Allow overriding
    build settings from the environment"))
  - Resolves: rhbz#1796581


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-12
changelog:
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Set default value for variable to prevent crash (RhBug:2091636)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-13
changelog:
  - Add support for rollback of group upgrade rollback (RhBug:2016070)
  - Move system-upgrade plugin to core (RhBug:2054235)
  - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-15
changelog:
  - Ignore processing variable files with unsupported encoding (RhBug:2141215)
  - Better explain traceback of rpm.error with dnf


author: Jaroslav Rohel <jrohel@redhat.com> - 4.7.0-17
changelog:
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Pino Toscano <ptoscano@redhat.com> 1.28.34-1
changelog:
  - tito: add rhel 8.8 releaser (ptoscano@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com)
  - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.28.35-1
changelog:
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com)
  - ENT-5350: Implement "force" register option in rhsm dbus python bindings
    (mhorky@redhat.com)
  - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com)
  - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com)
  - Skip AsyncPool tests (mhorky@redhat.com)
  - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Remove deprecated function call (mhorky@redhat.com)
  -  Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.28.36-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - 2168576: cockpit: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)
  - cockpit: Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - 2166623: gui: use UnknownContentException instead of NetworkException
    (ptoscano@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - build: pin pytest to < 7 (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - Fix tests for Python 3.6 runner (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.28.37-1
changelog:
  - 2174887: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com)
  - Fix of unit tests of d-bus register: extended list of exceptions for
    catching. (jhnidek@redhat.com)
  - [1.28] Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com)
  - test: add simple test for 1982670 (ptoscano@redhat.com)
  - 2076948: [1.28] Fix issue with race condition in rhsm.service
    (jhnidek@redhat.com)
  - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.28.38-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - 2150814: Drop RHN migration (ptoscano@redhat.com)
  - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com)
  - Fix issue with old glib not containing one macro (jhnidek@redhat.com)
  - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd
    (jhnidek@redhat.com)
  - 1890080: Handle IOErrors and Exceptions when looking for process names
    (csnyder@redhat.com)
  - ci: install nodejs-npm on Fedora (ptoscano@redhat.com)
  - tito: add centos-8-stream releaser (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.28.39-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Punjabi) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - [1.28] Update messaging around the "container mode" (#3310)
    (34436146+grunwmar@users.noreply.github.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - ENT-5610: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - Fix flake8 errors (mhorky@redhat.com)
  - Run flake8 and rpmlint on CI (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - Update cockpit test lib for Chromium 113 fix (martin@piware.de)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)
  - 2091269: Make locking more reliable (jhnidek@redhat.com)


author: Nicola Sella <nsella@redhat.com> - 4.0.21-17
changelog:
  - offline-upgrade: add support for security filters (RhBug:1939975,2139324)
  - Move system-upgrade plugin to core (RhBug:2054235)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-20
changelog:
  - versionlock: Use only the most specific NEVRA (RhBug:1961217)
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-21
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Pavel Valena <pvalena@redhat.com> - 049-209.git20220815
changelog:
  - fix(95iscsi): Fix network setup
  - fix(dracut-systemd): correct service dependencies
  - feat(lvm): add new module lvmthinpool-monitor
  - fix(dracut-shutdown): add cleanup handler on failure


author: Pavel Valena <pvalena@redhat.com> - 049-218.git20221019
changelog:
  - Dracut: only login to one target at a time
  - iscsi: don't continue waiting if the root device is present
  - network: stop waiting for interfaces if root device is
  - iscsiroot: parse_iscsi_root overwrites command line args
  - iscsiroot: there's never more than one target per call
  - iscsiroot: try targets only once
  - iscsiroot: remove bashisms
  - fixup "Dracut: only login to one target at a time"
  - 35network-legacy: only skip waiting for interfaces if netroot


author: Pavel Valena <pvalena@redhat.com> - 049-221.git20221214
changelog:
  - fix(80lvmthinpool-monitor): use systemsctl instead of
  - fix(squash): build ld cache for squash loader
  - fix(network-manager): write DHCP filename option to dhcpopts


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


