# changelog

author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-11.el7
changelog:
  - Resolves: #1518157 Clarify the need to restart services in ipa-server-certinstall(1)
    - Add a notice to restart ipa services after certs are installed
  - Resolves: #1544679 OTP and Radius Authentication does not work in FIPS mode
    - Fix OTP validation in FIPS mode
    - Increase the default token key size
    - Revert "Don't allow OTP or RADIUS in FIPS mode"
    - Log errors from NSS during FIPS OTP key import
  - Resolves: #1470916 ipa client pointing to replica shows KDC has no support for encryption type
    - ipa-replica-install: make sure that certmonger picks the right master
  - Resolves: #1542627 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
    - replica-install: pass --ip-address to client install


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.5.4-10.el7.2
changelog:
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default
    - Add nsds5ReplicaReleaseTimeout to replica config
    - Fix upgrade (update_replica_config) in single master mode
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Use single Custodia instance in installers
  - Resolves: #1577805 4.5.0 -> 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
    - Don't try to backup CS.cfg during upgrade if CA is not configured


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-1.el7
changelog:
  - Resolves: #1561581  Rebase IPA to latest 4.6.x version
  - Resolves: #1234219 [WebUI] Error message could be better while adding idrange with untrusted domain name.
  - Resolves: #1274488 ipa-client-install should use previously entered username when performing setup validation
  - Resolves: #1289487 Priority field missing in Password Policy detail tab
  - Resolves: #1339129 ipa vault-archive overwrites an existing value without warning
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
  - Resolves: #1424735 While performing ipa-server-upgrade, sssd goes offline and stalls the upgrade process
  - Resolves: #1427105 RFE - Option to add custom OID or display name in IPA Cert
  - Resolves: #1434924 ipa-restore fails when umask is set to 0027
  - Resolves: #1441262 ipa group-del gives ipa: ERROR: Insufficient access: but still deletes group
  - Resolves: #1452081 Suggest user to install libyubikey package instead of traceback
  - Resolves: #1458183 Users can delete their last active OTP token
  - Resolves: #1478366 Crash noticed during IPA upgrade process due to ipa package
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
  - Resolves: #1481936 Limit number of times the DNS response for the ipa-server A and AAAA records are done during uninstallation.
  - Resolves: #1483139 ipa-restore command doesn't exit with failure if wrong directory manager's password is provided
  - Resolves: #1485429 domain resolution order field in Identity->ID Views->Settings tab missing in WebUI 
  - Resolves: #1485851 ipa param-find: command displays internal error
  - Resolves: #1494198 ipa-replica-manage re-initialize TypeError: 'NoneType' object does not support item assignment
  - Resolves: #1504565 API schema generated by server doesn't follow language requested by client.
  - Resolves: #1505925 kdc segfault in openldap libs when ipa-server is installed and custom pkinit is configured
  - Resolves: #1506709 ipa trust-add - Filter out overlapping namespace domains automatically
  - Resolves: #1513041 ipa-restore does not enable/start oddjobd
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
  - Resolves: #1515374 Custodia keys are not removed on uninstall
  - Resolves: #1518932 The Issuer DN field in IPA is not updating properly
  - Resolves: #1519723 admins group is not including all permissions of Role "User Administrator"
  - Resolves: #1527020 nsslapd-sasl-max-buffer-size is hardcoded to '2097152' during install even if another value was provided in an LDIF ( --dirsrv-config-file )
  - Resolves: #1534726 IPA 'Generate OTP' option in web gui does not show OTP code when no reverse zone is managed
  - Resolves: #1547641 ipa: Please log something after restarting the KDC
  - Resolves: #1547995 CRL url on replicas gets incorrectly redirected
  - Resolves: #1549187 IdM servers:/usr/share/ipa/html/ca.crt does not include the complete chain
  - Resolves: #1553594 ldappasswd cause the IPA embedded Directory server to SIGSEGV
  - Resolves: #1568748 Allow hosts to delete their own services
  - Resolves: #1576133 Radius Proxy OTP Auth in IPA is not failing over to the second server in a radius-proxy
  - Resolves: #1577108 Improve Custodia client and key distribution handling


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-2.el7
changelog:
  - Resolves: #1594142 SRV lookup doesn't correctly sort results
    - Sort and shuffle SRV record by priority and weight
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Fix replication races in Dogtag admin code
    - Use common replication wait timeout of 5min
    - Improve and fix timeout bug in wait_for_entry()
  - Resolves: #1591824 Installation of replica against a specific master
    - Always set ca_host when installing replica
  - Resolves: #1591647 Increase WSGI worker process count
    - Increase WSGI process count to 5 on 64bit
  - Resolves: #1394034 Custom SELinux User Map order is changed after updating IPA
    - Use replace instead of add to set new default ipaSELinuxUserMapOrder
  - Resolves: #1381535 ipa config-mod returns "Configured size limit exceeded"
    - ipaserver config plugin: Increase search records minimum limit


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.4-3.el7
changelog:
  - Resolves: #1603514 Replica install fails with "Certificate issuance failed (CA_REJECTED)" - ACIError


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-4.el7
changelog:
  - Resolves: #1600525 ipa-client-install --uninstall fails to uninstall client.
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1598117 client uninstall fails when installed using non-existing hostname
    - ipa client uninstall: clean the state store when restoring hostname
  - Resolves: #1596168 ipa help topics displays 'ipa: ERROR: an internal error has occurred'
    - Fix regression: Handle unicode where str is expected
  - Resolves: #1591824 Installation of replica against a specific master
    - Query for server role IPA master
    - Only create DNS SRV records for ready server
    - Delay enabling services until end of installer
    - replicainstall: DS SSL replica install pick right certmonger host
    - Fix CA topology warning
    - Fix race condition in get_locations_records()
    - Fix DNSSEC install regression
    - Handle races in replica config
  - Resolves: #1591647 Increase WSGI worker process count
    - Use 4 WSGI workers on 64bit systems
  - Resolves: #1565633 nsds5ReplicaReleaseTimeout should be set by default.
    - Tune DS replication settings
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-5.el7
changelog:
  - Resolves: #1607616 Traceback in messages file during ipa-server-install: File "/usr/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit", line 541, in <module>#012
    - Removing filesystem encoding check
  - Resolves: #1598044  plugable.py:491:bootstrap:SystemEncodingError: System encoding must be UTF-8, 'ANSI_X3.4-1968' is not supported.
    - Removing filesystem encoding check


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-6.el7
changelog:
  - Resolves: #1590647 ldapmodify userPassword reflects on krblastpwdchange on RHEL6 but not RHEL7
    - In IPA 4.4 when updating userpassword with ldapmodify does not update krbPasswordExpiration nor krbLastPwdChange
  - Resolves: #1600074 ipa-server-upgrade displays 'DN: cn=Schema Compatibility,cn=plugins,cn=config does not exists or haven't been updated'
    - Re-open the ldif file to prevent error message
  - Resolves: #1608783 ipa trust-add fails in FIPS mode.
    - Move fips_enabled to a common library to share across different plugins
    - ipasam: do not use RC4 in FIPS mode


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-7.el7
changelog:
  - Resolves: #1609882 ipaserver/plugins/cert.py: Add reason to raise of errors.NotFound
    - ipaserver/plugins/cert.py: Added reason to raise of errors.NotFound
  - Resolves: #1598662 Replica installation fails with connection refused error 
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1577108 Improve Custodia client and key distribution handling
    - Fix KRA replica installation from CA master
  - Resolves: #1515314 ipa-replica-install fails with PIN error [ CA-less environment ]
    - Fix ipa-replica-install when key not protected by PIN
  - Resolves: #1480502 ipa server uninstall with -v option displays "IOError: [Errno 9] Bad file descriptor Logged from file ipautil.py, line 442"
    - uninstall -v: remove Tracebacks
  - Resolves: #1368345 Replace ERROR: cannot connect to 'http://localhost:8888/ipa/json': [Errno 111] Connection refused with 'IPA is not configured on this system'
    - ipa commands: print 'IPA is not configured' when ipa is not setup
    - Disable message about log in ipa-backup if IPA is not configured
  - Resolves: #1591824 Installation of replica against a specific master
    - Do not set ca_host when --setup-ca is used
  - Resolves: #1594141 Replication races in DogtagInstance.setup_admin
    - Catch ACIError instead of invalid credentials
  - Resolves: #1623112  ipa-replica-install defines nsds5replicabinddngroup before the group contains the DN of the replication manager
    - DS replication settings: fix regression with <3.3 master
  - Resolves: #1623113 Replica install: certmonger sometimes fails
    - Wait for client certificates
    - Auto-retry failed certmonger requests


author: Tibor Dudlák <tdudlak@redhat.com> - 4.6.4-8.el7
changelog:
  - Resolves #1508498 Authn/TOTP defined users periodically prompt for just password credentials to access resources
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1622168 ipa-otpd: fix potential double-free and infinite loop in queue code
    - Clear next field when returnining list elements in queue.c
    - Add cmocka unit tests for ipa otpd queue code
  - Resolves #1603444 ipa-server-install script is failing when using the "--no-dnssec-validation" parameter combined with the "--forwarder"
    - ipa-server-install: do not perform forwarder validation with --no-dnssec-validation


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-9.el7
changelog:
  - Resolves: #1624755 Re-installing replica on the same system displays 'WARNING: cannot check if port 443 is already configured'
    - ipa-replica-install: properly use the file store
  - Resolves: #1623486 PKINIT configuration did not succeed message is received during Replica-install
    - ipa-replica-install: fix pkinit setup
  - Related: #1624289 AVC denials noticed during test execution for SUB-CA test-suite in FIPS mode
    - Update minimum selinux-policy to 3.13.1-224


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-10.el7
changelog:
  - Resolves: 1630361 PKINIT fails in FIPS mode
    - Ensure that public cert and CA bundle are readable
    - Always make ipa.p11-kit world-readable
    - Make /etc/httpd/alias world readable & executable
    - Fix permission of public files in upgrader


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-11.el7
changelog:
  - Resolves: 1651834 searching for ipa users by certificate fails
    - ipaldap.py: fix method creating a ldap filter for IPACertificate
    - ipatests: add xmlrpc test for user|host-find --certificate
  - Resolves: 1644874 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
    - ipa upgrade: handle double-encoded certificates
    - ipatests: add upgrade test for double-encoded cacert
    - ipatests: fix TestUpgrade::test_double_encoded_cacert
  - Resolves: 1599939 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
    - Add a shared-vault-retrieve test
    - Add a "Find enabled services" ACI in 20-aci.update so that all users can find IPA servers and services. ACI suggested by Christian Heimes.
  - Resolves: 1493541 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
    - ipatest: add test for ipa-pkinit-manage enable|disable
    - PKINIT: fix ipa-pkinit-manage enable|disable
  - Resolves: 1390757 automember-rebuild crashes
    - Find orphan automember rules
  - Resolves: 1658701 ipa-replica-install fails migrating RHEL 6 to 7
    - replication: check remote ds version before editing attributes


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.4-12.el7
changelog:
  - Resolves: 1672180 pki spawn fails for IPA replica install from RHEL6 IPA master
    - Update mod_nss cipher list so there is overlap with a 4.x master
  - Resolves: 1672184 Fix compile issue with new 389-ds
    - ipa-sidgen: make internal fetch_attr helper really internal
  - Resolves: 1669012 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
    - Add workaround for slow host/service del
    - Optimize cert remove case
  - Resolves: 1533228 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain record
    - replica installation: add master record only if in managed zone
    - ipatests: add test for replica in forward zone


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-1.el7
changelog:
  - Resolves: 1677197 Rebase IPA to latest 4.6.x version
  - Resolves: 1690037[RFE] Add utility to promote CA replica to CRL master
  - Resolves: 1689585 Cannot install ipa-server on rhel7.7
  - Resolves: 1672184 Fix compile issue with new 389-ds
  - Resolves: 1672180 pki spawn fails for IPA replica install from RHEL6 IPA master
  - Resolves: 1669012 host_del and host_disable fails, ra.find() search for every certificates instead of the host's certificate by subject
  - Resolves: 1658701 ipa-replica-install fails migrating RHEL 6 to 7
  - Resolves: 1651834 searching for ipa users by certificate fails
  - Resolves: 1644874 IPA Upgrade failed with "unable to convert the attribute u'cACertificate;binary'"
  - Resolves: 1638545 ipa-advise command points to old URL's.
  - Resolves: 1637717 RFE: Validation and better error messages when novajoin fails because of SSL errors
  - Resolves: 1599939 'ipa vault-retrieve' is failing with "ipa: ERROR: an internal error has occurred"
  - Resolves: 1593454 In IPA WebUI, a warning appears in the background(warning message behind the dialog box).
  - Resolves: 1586268 [RFE] Red Hat Identity Manager IP SANs
  - Resolves: 1579037 Adding 3rd Party CAs to IPA results in SmartCard preparation script failure
  - Resolves: 1577967 Users with user creation/modification privileges fail to add the "--radius-username" option when creating users
  - Resolves: 1572674 ipa-cacert-manage cannot import PKCS#7 files
  - Resolves: 1562422 [RFE] Allow IPA Services to Start After the IPA Backup Has Completed
  - Resolves: 1562396 IPA numeric username breaks sudo and getent
  - Resolves: 1533228 The ipa-replica-install command failed, exception: ValidationError: invalid 'dnszoneidnsname': only master zones can contain records
  - Resolves: 1497334 ipa-server-install should prevent installations with single label domains
  - Resolves: 1493541 ipa-pkinit-manage reports a switch from local pkinit to full pkinit configuration was successful although it was not.
  - Resolves: 1485217 [RFE] Warn or adjust umask if it is too restrictive to break installation
  - Resolves: 1428690 ipa-backup does not create log file at /var/log/
  - Resolves: 1408439 ipa idoverrideuser-find view --anchor fails to return output
  - Resolves: 1390757 automember-rebuild crashes
  - Resolves: 1376024 During one step replica install the command accepts both OTP and Admin password simultaneously
  - Resolves: 1245626 ipa-client-install modifies /etc/openldap/ldap.conf in a way which is unhandy for openldap-clients


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-2.el7
changelog:
  - Resolves: 1691334 New defect found in ipa-4.6.5-1.el7
    - Coverity: fix issue in ipa_extdom_extop.c
  - Resolves: 1666843 ipa-replica-manage force-sync --from keeps prompting "No status yet"
    - ipa-replica-manage: fix force-sync
  - Resolves: 1594245 [RFE] sysadm_r should be included in default SELinux user map order
    - Add sysadm_r to default SELinux user map order
  - Resolves: 1527215 RFE: ipa client should setup openldap for GSSAPI
    - RFE: ipa client should setup openldap for GSSAPI
  - Resolves: 1518939 RFE: Extend IPA to support unadvertised replicas
    - Unify and simplify LDAP service discovery
    - Use api.env.container_masters
    - Consolidate container_masters queries
    - Add hidden replica feature
    - ipatests: Exercise hidden replica feature
    - Simplify and improve tests
    - Implement server-state --state=enabled/hidden
    - Consider hidden servers as role provider
    - Improve config-show to show hidden servers
    - More test fixes
    - Don't allow to hide last server for a role
    - Synchronize hidden state from IPA master role
    - Test replica installation from hidden replica
    - Add design draft
    - Don't fail if config-show does not return servers
  - Resolves: 1517886 double ca acl provoke console error.
    - Add uniqueness constraint on CA ACL name
  - Resolves: 1498110 Using --auto-reverse and --allow-zone-overlap does not skip zone overlap check
    - Extend CALessBase::installer_server to accept extra_args
    - Skip zone overlap check with auto-reverse
  - Resolves: 1496963 [RFE] Provide an option to include FQDN in IDM topology graph
    - Web UI (topology graph): Show FQDN for nodes if they have no common DNS zone
  - Resolves: 1345975 [RFE] Support One-Way Trust authenticated by trust secret
    - Replace hard-coded paths with path constants
    - Support Samba 4.9
    - Add design page for one-way trust to AD with shared secret
    - trust: allow trust agents to read POSIX identities of trust
    - trusts: add support for one-way shared secret trust
    - upgrade: upgrade existing trust agreements to new layout
    - upgrade: add trust upgrade to actual upgrade code
  - Resolves: 1690191 [RFE] Offline Certificate Renewal System
    - Extract ca_renewal cert update subroutine
    - cainstance: add function to determine ca_renewal nickname
    - constants: add ca_renewal container
    - Add ipa-cert-fix tool
    - ipa-cert-fix: add man page
    - ipa-cert-fix: use customary exit statuses
  - Resolves: 1631826 Create a warning that SSSD needs restart after idrange-mod
    - Show a notification that sssd needs restarting after idrange-mod


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-3.el7
changelog:
  - Resolves: 1694623 ipa-kra-install failing with invalid 'role_servrole': must be Unicode text error
    - ipa-setup-kra: fix python2 parameter
  - Resolves: 1694596 ipa-server-upgrade fails with ConversionError: invalid 'cn': must be Unicode text
    - ipa-server-upgrade: fix add_systemd_user_hbac


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-4.el7
changelog:
  - Resolves: 1686302 ipa trust fetch-domains, server parameter ignored
    - oddjob: allow to pass options to trust-fetch-domains
  - Resolves: 1695481 ipa trust-add failing with CIFS server communication error
    - adtrust: define Guests mapping after creating cifs/ principal
    - net groupmap: force using empty config when mapping Guests


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-5.el7
changelog:
  - Resolves: 1697242 Communication with oddjob helper fails
    - Bypass D-BUS interface definition deficiences for trust-fetch-domains


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-7.el7
changelog:
  - Resolves: 1704227 - Wrong logic in ipactl restart leads to start instead of restart pki-tomcatd
    - ipactl restart: fix wrong logic when checking service list


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-8.el7
changelog:
  - Resolves: 1702651 - Command ipa conole is broken
    - ipa console: catch proper exception when history file can not be open
  - Resolves: 1704796 - Wrong CA replication topology created with two replicas
    - replica install: acknowledge ca_host override
  - Resolves: 1708873 - Unable to upgrade ipa data: IPA version error: data needs to be upgraded (expected version '4.7.90.pre1-3.fc30', current version '4.7.2-8.fc30')
    - upgrade: adtrust - catch empty result when retrieving list of trusts


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-9.el7
changelog:
  - Resolves: 1712794 - ERROR: invalid 'PKINIT enabled server': all masters must have IPA master role enabled
    - Consider configured servers as valid


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-10.el7
changelog:
  - Resolves: 1723473 - ipa upgrade fails with trust entry already exists
    - adtrust upgrade: fix wrong primary principal name


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.5-11.el7
changelog:
  - Resolves: 1723473 - ipa upgrade fails with trust entry already exists
    - adtrust upgrade: fix wrong primary principal name, part 2
  - Resolves: 1686302 - ipa trust fetch-domains, server parameter ignored
    - trust-fetch-domains: make sure we use right KDC when --server is specified


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-1.el7
changelog:
  - Resolves: 1733075 - Rebase IPA to latest 4.6.x version
  - Resolves: 1512952 - cert renewal is failing when ipa ca cert is renewed from self-signed > external ca > self-sign
  - Resolves: 1544470 - cn=cacert could show expired certificate
  - Resolves: 1581583 - Error message should be more useful while ipa-backup fails for insufficient space
  - Resolves: 1632351 - remove "last init status" from ipa-replica-manage list <node> if it's None.
  - Resolves: 1691939 - False error is shown when options are added to an existing sudo rule using 'sudooption'
  - Resolves: 1695685 - IPA Web UI is slow to display user details page
  - Resolves: 1702426 - ipa-server-common expected file permissions in package don't match runtime permissions
  - Resolves: 1711172 - Removing TLSv1.0, TLSv1.1 from nss.conf
  - Resolves: 1714076 - Issue with adding multiple RHEL 7 IPA replica to RHEL 6 IPA master
  - Resolves: 1714921 - x509.Name -> ipapython.dn.DN does not handle multi-valued RDNs
  - Resolves: 1720952 - Cannot modify TTL with ipa dnsrecord-mod --ttl alone on command line
  - Resolves: 1721550 - Staged user is not being recognized if the user entry doesn't have an objectClass "posixaccount"
  - Resolves: 1727304 - Restrict cipher lists used by openssl connections
  - Resolves: 1733209 - ipa-client-automount needs option to specify domain
  - Resolves: 1733265 - IPA webgui incorrectly display number of entries in ID views


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.6-3.el7
changelog:
  - Resolves: 1717008 - User incorrectly added to negative cache when backend is reconnecting to IPA service / timed out: error code 32 'No such object'


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.6.6-4.el7
changelog:
  - Resolves: 1744926 - rebuild against Samba 4.10 to solve undefined symbol: DEBUGLEVEL_CLASS
  - Backport patches to compile against Samba 4.10
  - Fix Python 2 compatibility in adtrustinstance


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-5.el7
changelog:
  - Resolves: #1749788 - ipa host-find --pkey-only includes SSH keys in output
    - Don't return SSH keys with ipa host-find --pkey-only
  - Resolves: #1745108 - Bug 1497334 invalidating single-label domains introduces regression of usage for customers
    - check for single-label domains only during server install
  - Resolves: #1583950 - IPA: IDM drops all custom attributes when moving account from preserved to stage
    - user-stage: transfer all attributes from preserved to stage user
    - xmlrpc test: add test for preserved > stage user


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-6.el7
changelog:
  - Resolves: #1752005 - Keyrings should not be used in containerized environment
    - Don't configure KEYRING ccache in containers
  - Resolves: #1751951 - When master's IP address does not resolve to its name, ipa-replica-install fails
    - Add container environment check to replicainstall
  - Resolves: #1750700 - when migrating trusted domain object structure, add default access control definitions, if they were missing in old trust objects
    - add default access control when migrating trust objects
    - adtrust: add default read_keys permission for TDO objects
    - Disable deprecated-lambda check in adtrust upgrade code


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-7.el7
changelog:
  - Resolves: #1754494 - ipa-replica-install does not enforce --server option
    - replica install: enforce --server arg
  - Resolves: #1729638 - ipa_kdb: assertion failure from NULL lcontext pointer to ldap_get_values_len()
    - Fix segfault in ipadb_parse_ldap_entry()
    - Log INFO message when LDAP connection fails on startup
    - Fix NULL pointer dereference in maybe_require_preauth()
  - Resolves: #1636765 - ipa-restore set wrong file permissions and ownership for /var/log/dirsrv/slapd- directory
    - ipa-restore: Restore ownership and perms on 389-ds log directory


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-8.el7
changelog:
  - Resolves: #1755223 - Sub-CA key replication failure
    - Handle missing LWCA certificate or chain
    - Fix CustodiaClient ccache handling
    - CustodiaClient: use ldapi when ldap_uri not specified
    - CustodiaClient: fix IPASecStore config on ipa-4-7
    - Bump krb5 min version


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-9.el7
changelog:
  - Resolves: #1762317 - ipa-backup command is failing on rhel-7.8
    -  ipa-backup: fix python2 issue with os.mkdir


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-10.el7
changelog:
  - Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
    - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
  - Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
    - Do not run trust upgrade code if master lacks Samba bindings
  - Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
    - Make sure to have storage space for tag


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-11.el7
changelog:
  - Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
    - trust upgrade: ensure that host is member of adtrust agents


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.6-12.el7
changelog:
  - Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
  - Resolves: #1404770 - ID Views: do not allow custom Views for the masters
    - idviews: prevent applying to a master
  - Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -> 7.6 upgrade path as opposed to new RHEL 7.6 systems
    - install/updates: move external members past schema compat update
  - Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
    - pkinit setup: fix regression on master install
    - pkinit enable: use local dogtag only if host has CA
  - Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
    - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
  - Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
    - ipa-cacert-manage man page: fix indentation
  - Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
    - adtrust.py: mention restarting sssd when adding trust agents
  - Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
    - Use default ssh host key algorithms
  - Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
    - smartcard: make the ipa-advise script compatible with authselect/authconfig
  - Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
    - upgrade: fix ipakra people entry 'description' attribute
    - krainstance: set correct issuer DN in uid=ipakra entry
  - Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
    - ipa-server-certinstall manpage: add missing options
  - Resolves: #1206690 - UPG not being enforced properly
    - ipa user_add: do not check group if UPG is disabled
  - Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
  - Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
  - Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
  - Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
  - Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
  - Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
    - Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
  - Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
    - WebUI: Fix notification area layout
  - Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
    - Fix indentation levels
    - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
    - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
    - Don't save password history on non-Kerberos accounts


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-1.el7
changelog:
  - Resolves: #1819725 - Rebase IPA to latest 4.6.x version
  - Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
  - Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
  - Resolves: #1817922 - covscan memory leaks report
  - Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
  - Resolves: #1817918 - Secure tomcat AJP connector
  - Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
  - Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-2.el7
changelog:
  - Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
    - Add interactive prompt for the LDAP bind password to ipa-getkeytab
    - CVE-2020-1722: prevent use of too long passwords


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-3.el7
changelog:
  - Resolves: #1834385 Man page syntax issue detected by rpminspect
    - Man pages: fix syntax issues
  - Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
    - Make check_required_principal() case-insensitive
  - Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
    - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
  - Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
    - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1
  - Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
    - Web UI: Upgrade jQuery version 2.0.3 -> 3.4.1


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-4.el7
changelog:
  - Resolves: #1842950 ipa-adtrust-install fails when replica is offline
    - ipa-adtrust-install: avoid failure when replica is offline
  - Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
    - WebUI: Apply jQuery patch to fix htmlPrefilter issue


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.6.8-5.el7
changelog:
  - Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
    -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset


author: Michal Ruprich <mruprich@redhat.com> - 3.1.7-1
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding latest version before including iperf3 in RHEL-7


author: Michal Ruprich - 3.1.7-2
changelog:
  - Related: #913329 - [RFE] include iperf3 in RHEL 7
                     - adding requires to spec file for devel package


author: Jan Safranek <jsafrane@redhat.com> 1.8.10-2
changelog:
  - fix issues found during package review:
    - clear Default-Start: line in the init script, the service should be 
      disabled by default
    - added Obsoletes: OpenIPMI-tools
    - compile with --disable-dependency-tracking to speed things up
    - compile with --enable-file-security
    - compile with --disable-intf-free, don't depend on FreeIPMI libraries
      (FreeIPMI has its own ipmitool-like utility)


author: Jan Safranek <jsafrane@redhat.com> - 1.8.12-2
changelog:
  - Fixed starting ipmievd under systemd (#819234).
  - Updated RPM scriplets with latest systemd-rpm macros (#850161)


author: Praveen K Paladugu <praveen_paladugu@dell.com> 1.8.12-8
changelog:
  - service & scripts to allow OS to capture BMC's IP & URL info
  - Also pass the OS information to BMC
  - patches submitted by Charles Rose (charles_rose[at]dell.com)


author: Ales Ledvinka <aledvink@redhat.com> 1.8.12-13
changelog:
  - fixed argument parsing leaks
  - ask user for password only once and do so only when interactive password
    is the chosen password method.


author: Boris Ranto <branto@redhat.com> - 0:1.8.15-7
changelog:
  - New release (0:1.8.15-7)
  - ID:437 - sel: Fix "sel time set <time>"
  - ID 408 - fix sel list last X listing


author: Josef Ridky <jridky@redhat.com> - 0:1.8.18-3
changelog:
  - Fix issues with warning: dereferencing type-punned pointer 
    will break strict-aliasing rules from RPMDiff


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz 
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
    new source for ps files. 
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default 
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used. 
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any' 
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.33-2
changelog:
  - 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
  - change BR texlive to tex according to guidelines


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-2
changelog:
  - General cleanup
  - Use global instead of define
  - Buildroot removal
  - Correcting URL and Source links
  - Install genl, ifstat, routef, routel and rtpr (rhbz#697319)


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-3
changelog:
  - Install ctstat, rtstat and routef manpage symlinks
  - Install m_xt & m_ipt tc modules
  - Creating devel and virtual static subpackages with libnetlink


author: Petr Šabata <contyk@redhat.com> - 3.1.0-1
changelog:
  - 3.1.0 bump
  - Point URL and Source to the new location on kernel.org
  - Remove now obsolete defattr
  - Dropping various patches now included upstream
  - Dropping iproute2-2.6.25-segfault.patch; I fail to understand the reason for
    this hack


author: Petr Šabata <contyk@redhat.com> - 3.6.0-3
changelog:
  - Include section 7 manpages (#876857)
  - Fix ancient bogus dates in the changelog (correction based upon commits)
  - Explicitly require some TeX fonts no longer present in the base distribution


author: Petr Šabata <contyk@redhat.com> - 3.10.0-1
changelog:
  - 3.10.0 bump
  - Drop the SHAREDIR patch and revert to upstream ways (#966445)
  - Fix an XFRM regression with FORTIFY_SOURCE


author: Petr Šabata <contyk@redhat.com> - 3.10.0-6
changelog:
  - Fix lnstat -i (#1024426)
  - Support IPv6 peer addresses (#1017228)
  - Add the replace command to bridge fdb (#1024697)
  - Document link type vlan (#979326)


author: Pavel Šimerda <psimerda@redhat.com> - 3.10.0-19
changelog:
  - Resolves: #1081081 - lnstat man page references iproute-doc when it should
    reference iproute-<ver>


author: Phil Sutter - 3.10.0-47
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Related: #1219280 - backport: iproute2: vti6 support


author: Phil Sutter - 3.10.0-48
changelog:
  - Related: #1215006 - backport current version of the ss command
  - Resolves: #1247315 - Fix limitation in iproute/ss regarding dual-stack sockets


author: Phil Sutter - 3.10.0-49
changelog:
  - Resolves: bz#1241486 - backport: tc: fq scheduler
  - Related: #1215006 - backport current version of the ss command


author: Phil Sutter - 3.10.0-50
changelog:
  - Resolves: #1244851 - vti tunnel does not work
  - Resolves: #1155116 - iproute2: implement "-d" option for "ip mon"


author: Phil Sutter - 3.10.0-51
changelog:
  - Resolves: bz#1251451 - can't change the remote/local address of tunnel
    interface to "any" in ipip mode
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features
  - Related: #1215006 - [RFE] backport current version of the ss command
  - Resolves: #1251070 - Fix multiple programming errors in iproute package
  - Related: #1198456 - backport: dynamic precision, human readable, and IEC
    output to ip stats
  - Related: #1210402 - [6wind 7.2 Feat]: backport: vxlan: unable to configure
    UDP checksums
  - Related: #1213869 - [6wind 7.2 Feat]: backport: iproute2: various netns
    features


author: Phil Sutter - 3.10.0-52
changelog:
  - Resolves: #1254095 - bridge: Add master device name to bridge fdb show
  - Resolves: #1255316 - tc does not allow to attach pfifo_fast qdisc
  - Related: #1251070 - Fix multiple programming errors in iproute package


author: Phil Sutter - 3.10.0-53
changelog:
  - Related: #1212026 - [6wind 7.2 Feat]: backport: ipxfrm: unable to configure
    SPD hash table - reverted this backport due to unmet dependencies


author: Phil Sutter <psutter@redhat.com> [3.10.0-56.el7]
changelog:
  - ipaddress: fix ipaddr_flush for Linux >= 3.1 (Phil Sutter) [1291825]
  - ipaddress: simplify ipaddr_flush() (Phil Sutter) [1291825]
  - libnetlink: introduce nc_flags (Phil Sutter) [1291825]
  - iproute2: Ignore EADDRNOTAVAIL errors during address flush operation (Phil Sutter) [1291825]
  - lnstat: fix header displaying mechanism (Phil Sutter) [1263392]
  - man: lnstat: rewrite manpage (Phil Sutter) [1269133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-57.el7]
changelog:
  - route: Fix printing of locked entries (Phil Sutter) [1291832]
  - route: ignore RTAX_HOPLIMIT of value -1 (Phil Sutter) [1291832]
  - ip-link: remove warning message (Phil Sutter) [1291832]
  - ip: route: add congestion control metric (Phil Sutter) [1291832]
  - ip route: enable per-route ecn settings via 'features' option (Phil Sutter) [1291832]
  - iproute2: ip-route.8.in: minor fixes (Phil Sutter) [1291832]
  - iproute: restrict hoplimit values to be in range [0; 255] (Phil Sutter) [1291832]
  - man ss: Fix explanation when no options specified (Phil Sutter) [1291818]
  - libnetlink: don't confuse variables in rtnl_talk() (Phil Sutter) [1288042]
  - libnetlink: add size argument to rtnl_talk (Phil Sutter) [1288042]
  - ip: fix exit code for rule failures (Phil Sutter) [1288042]
  - ip: return correct exit code on route failure (Phil Sutter) [1288042]
  - link dump filter (Phil Sutter) [1288042]
  - ip: fix exit code for addrlabel (Phil Sutter) [1288042]
  - fix ip -force -batch to continue on errors (Phil Sutter) [1288042]
  - Allow specifying bridge port STP state by name rather than number. (Phil Sutter) [1288042]
  - gre: raising the size of the buffer holding nl messages. (Phil Sutter) [1288042]
  - neighbor: check return values (Phil Sutter) [1277094]
  - ip-address: fix oneline mode for interfaces with VF (Phil Sutter) [1272405]
  - ss: add support for segs_in and segs_out (Phil Sutter) [1269114]
  - ss: add support for bytes_acked & bytes_received (Phil Sutter) [1269114]
  - ss: return -1 if an unrecognized option was given (Phil Sutter) [1265238]
  - man: ip-address: document mngtmpaddr and noprefixroute flags (Phil Sutter) [1231898]
  - man: ip-address: align synopsis with help output (Phil Sutter) [1231898]
  - ip-address.8.in: fix BNF syntax error (Phil Sutter) [1231898]
  - ip-address: fix and extend documentation (Phil Sutter) [1231898]
  - ip: extend "ip-address" man page to reflect the recent flag extensions (Phil Sutter) [1231898]
  - ip: allow ip address show to list addresses with certain flags not being set (Phil Sutter) [1231898]
  - bridge fdb: add 'use' option to set NTF_USE flag in fdb add requests (Phil Sutter) [1075692]
  - bridge: drop man page fragment (Phil Sutter) [1075692]
  - bridge: drop reference to unused option embedded from manpage (Phil Sutter) [1075692]


author: Phil Sutter <psutter@redhat.com> [3.10.0-58.el7]
changelog:
  - tc: ship filter man pages and refer to them in tc.8 (Phil Sutter) [1286711]
  - tc: add a man page for u32 filter (Phil Sutter) [1286711]
  - tc: add a man page for tcindex filter (Phil Sutter) [1286711]
  - tc: add a man page for route filter (Phil Sutter) [1286711]
  - tc: add a man page for fw filter (Phil Sutter) [1286711]
  - tc: add a man page for flow filter (Phil Sutter) [1286711]
  - tc: add a man page for cgroup filter (Phil Sutter) [1286711]
  - tc: add a man page for basic filter (Phil Sutter) [1286711]
  - batch: support quoted strings (Phil Sutter) [1272593]
  - man: fix whatis for fq (Phil Sutter) [1261520]
  - man: tc: add man page for fq pacer (Phil Sutter) [1261520]


author: Phil Sutter <psutter@redhat.com> [3.10.0-59.el7]
changelog:
  - iplink: add ageing_time, stp_state and priority for bridge (Phil Sutter) [1270759]
  - iplink: shortify printing the usage of link type (Phil Sutter) [1270759]
  - iplink: use the short format to print help info (Phil Sutter) [1270759]
  - iplink_bridge: add support for priority (Phil Sutter) [1270759]
  - iplink_bridge: add support for stp_state (Phil Sutter) [1270759]
  - iplink_bridge: add support for ageing_time (Phil Sutter) [1270759]
  - add bridge master device support (Phil Sutter) [1270759]
  - add bridge_slave device support (Phil Sutter) [1270759]
  - iplink: bond_slave: fix ad_actor/partner_oper_port_state output (Phil Sutter) [1269528]
  - ip: remove extra newlines at end-of-file (Phil Sutter) [1269528]
  - ip link: missing options in bond usage (Phil Sutter) [1269528]
  - bond: fix return after invarg (Phil Sutter) [1269528]
  - iplink: bonding: add support for IFLA_BOND_TLB_DYNAMIC_LB (Phil Sutter) [1269528]
  - bonding: export 3ad actor and partner port state (Phil Sutter) [1269528]
  - iplink_bond: add support for ad_actor and port_key options (Phil Sutter) [1269528]
  - ip link: Shortify printing the usage of link type (Phil Sutter) [1269528]
  - add help command to bonding master (Phil Sutter) [1269528]
  - iproute2: allow to change slave options via type_slave (Phil Sutter) [1269528]
  - ip: add nlmon as a device type to help message (Phil Sutter) [1269528]
  - iplink: can: fix help text and man page (Phil Sutter) [1269528]
  - iplink_bond_slave: show mii_status only once (Phil Sutter) [1269528]
  - iplink_bond: fix parameter value matching (Phil Sutter) [1269528]
  - iplink_bond: fix arp_all_targets parameter name in output (Phil Sutter) [1269528]
  - iplink: add support for bonding slave (Phil Sutter) [1269528]
  - introduce support for slave info data (Phil Sutter) [1269528]
  - iproute2: finish support for bonding attributes (Phil Sutter) [1269528]
  - iplink: add support for bonding netlink (Phil Sutter) [1269528]
  - iplink: update available type list (Phil Sutter) [1269528]
  - xfrm: revise man page and document ip xfrm policy set (Phil Sutter) [1269528]
  - xfrm: add command for configuring SPD hash table (Phil Sutter) [1212026]


author: Phil Sutter <psutter@redhat.com> [3.10.0-60.el7]
changelog:
  - man: ip-neighbour.8: Document all known nud states (Phil Sutter) [1276661]
  - fix indentation of ip neighbour man page (Phil Sutter) [1276661]
  - man: ip-*.8: drop any reference to generic ip options (Phil Sutter) [1251186]
  - man8: scrub trailing whitespace (Phil Sutter) [1251186]
  - TBF man page fix (tbf is not classless) (Phil Sutter) [1251186]
  - man tc-htb: Fix HRB -> HTB typo (Phil Sutter) [1251186]
  - man: Spelling fixes (Phil Sutter) [1251186]
  - fix spelling of Kuznetsov (Phil Sutter) [1251186]
  - man: ip-l2tp.8: Fix BNF syntax (Phil Sutter) [1251186]
  - man: ip.8: Add missing flags and token subcommand description (Phil Sutter) [1251186]
  - man: ip: add -h[uman-readable] option (Phil Sutter) [1251186]
  - man: ip-xfrm.8: Document missing parameters (Phil Sutter) [1251186]
  - man: ip-tunnel.8: Document missing 6rd action (Phil Sutter) [1251186]
  - add 'vti'/'vti6' tunnel modes to ip-tunnel manual page (Phil Sutter) [1251186]
  - man: ip-token.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-rule.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-ntable.8: Review synopsis section (Phil Sutter) [1251186]
  - man: ip-netns.8: Clarify synopsis a bit (Phil Sutter) [1251186]
  - man: ip-neighbour: Fix for missing NUD_STATE description (Phil Sutter) [1251186]
  - man: ip-link.8: Fix and improve synopsis (Phil Sutter) [1251186]
  - man: ip-link.8: minor font fix (Phil Sutter) [1251186]
  - man: ip-address.8: Minor syntax fixes (Phil Sutter) [1251186]
  - iprule: add missing nat keyword to help text (Phil Sutter) [1251186]
  - iproute: TYPE keyword is not optional, fix help text accordingly (Phil Sutter) [1251186]
  - ipntable: Fix typo in help text (Phil Sutter) [1251186]
  - ipneigh: add missing proxy keyword to help text (Phil Sutter) [1251186]
  - iplink: fix help text syntax (Phil Sutter) [1251186]
  - ipaddrlabel: Improve help text precision (Phil Sutter) [1251186]
  - ip: align help text with manpage (Phil Sutter) [1251186]
  - ipl2tp: Print help even on systems without l2tp support (Phil Sutter) [1251186]
  - iprule: Align help text with man page synopsis (Phil Sutter) [1251186]
  - iplink: macvtap: fix man page (Phil Sutter) [1013584]
  - man: ip-link: document MACVLAN/MACVTAP interface types (Phil Sutter) [1013584]
  - man: ip-link: fix a typo (Phil Sutter) [1013584]
  - man ip-link: Add missing link types - vti,ipvlan,nlmon (Phil Sutter) [1013584]
  - iproute2: ip-link.8.in: Spelling fixes (Phil Sutter) [1013584]
  - ip-link: Document IPoIB link type in the man page (Phil Sutter) [1013584]
  - iproute: Descriptions of fou and gue options in ip-link man pages (Phil Sutter) [1013584]
  - iproute2: ip6gre: update man pages (Phil Sutter) [1013584]
  - ip: macvlan: support MACVLAN_FLAG_NOPROMISC flag (Phil Sutter) [1013584]
  - ip: link: consolidate macvlan and macvtap (Phil Sutter) [1013584]


author: Phil Sutter <psutter@redhat.com> [3.10.0-61.el7]
changelog:
  - fix print_ipt: segfault if more then one filter with action -j MARK. (Phil Sutter) [1314403]
  - man: ip-link: Beef up VXLAN csum options a bit (Phil Sutter) [1254625]
  - libnetlink: Double the dump buffer size (Phil Sutter) [1304840]


author: Phil Sutter <psutter@redhat.com> [3.10.0-62.el7]
changelog:
  - tc: fix compilation warning on 32bits arch (Phil Sutter) [1315930]
  - whitespace cleanup (Phil Sutter) [1315930]
  - tc: minor spelling fixes (Phil Sutter) [1315930]
  - simple print newline (Phil Sutter) [1315930]
  - tc: introduce simple action (Phil Sutter) [1315930]
  - man: rtpr: add minimal manpage (Phil Sutter) [1316059]


author: Phil Sutter <psutter@redhat.com> [3.10.0-63.el7]
changelog:
  - doc/tc-filters.tex: Drop overly subjective paragraphs (Phil Sutter) [1275426]
  - doc: Add my article about tc, filters and actions (Phil Sutter) [1275426]
  - gitignore: Ignore 'doc' files generated at runtime (Phil Sutter) [1275426]
  - tests: Add runtime generated files to .gitignore (Phil Sutter) [1275426]
  - man: ship action man pages (Phil Sutter) [1275426]
  - man: tc-skbedit.8: Elaborate a bit on TX queues (Phil Sutter) [1275426]
  - man: tc-police.8: Emphasize on the two rate control mechanisms (Phil Sutter) [1275426]
  - man: tc-mirred.8: Reword man page a bit, add generic mirror example (Phil Sutter) [1275426]
  - man: tc-csum.8: Add an example (Phil Sutter) [1275426]
  - tc: connmark, pedit: Rename BRANCH to CONTROL (Phil Sutter) [1275426]
  - tc: pedit: document branch control in help output (Phil Sutter) [1275426]
  - man: tc-u32: Minor syntax fix (Phil Sutter) [1275426]
  - man: Add a man page for the xt action (Phil Sutter) [1275426]
  - man: Add a man page for the skbedit action (Phil Sutter) [1275426]
  - man: Add a man page for the simple action (Phil Sutter) [1275426]
  - man: Add a man page for the police action (Phil Sutter) [1275426]
  - man: Add a man page for the pedit action (Phil Sutter) [1275426]
  - man: Add a man page for the nat action (Phil Sutter) [1275426]
  - man: Add a man page for the mirred action (Phil Sutter) [1275426]
  - man: Add a man page for the csum action. (Phil Sutter) [1275426]


author: Phil Sutter <psutter@redhat.com> [3.10.0-65.el7]
changelog:
  - man: ip, ip-link: Fix ip option location (Phil Sutter) [1251186]
  - ip: enable configuring multicast group autojoin (Phil Sutter) [1333513]
  - ss: Fix accidental state filter override (Phil Sutter) [1318005]
  - ss: Drop silly assignment (Phil Sutter) [1318005]
  - ss: Fix wrong filter behaviour (Phil Sutter) [1318005]


author: Phil Sutter <psutter@redhat.com> [3.10.0-66.el7]
changelog:
  - ip-link: Support printing VF trust setting (Phil Sutter) [1302119]
  - iplink: Support VF Trust (Phil Sutter) [1302119]
  - add new IFLA_VF_TRUST netlink attribute (Phil Sutter) [1302119]
  - ipaddress: Allow listing addresses by type (Phil Sutter) [1341343]
  - man ip-link: Small example of 'ip link show master' (Phil Sutter) [1341343]
  - ip link: Show devices by type (Phil Sutter) [1341343]
  - ip link: Allow to filter devices by master dev (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-67.el7]
changelog:
  - geneve: fix IPv6 remote address reporting (Phil Sutter) [1339178]
  - geneve: add support to set flow label (Phil Sutter) [1339178]
  - geneve: Add support for configuring UDP checksums. (Phil Sutter) [1339178]
  - geneve: add support for lwt tunnel creation and dst port selection (Phil Sutter) [1339178]
  - geneve: add support for IPv6 link partners (Phil Sutter) [1339178]
  - iplink_geneve: add tos configuration at link creation (Phil Sutter) [1339178]
  - iplink_geneve: add ttl configuration at link creation (Phil Sutter) [1339178]
  - iproute2: update ip-link.8 for geneve tunnels (Phil Sutter) [1339178]
  - iproute2: GENEVE support (Phil Sutter) [1339178]
  - man: ip-address, ip-link: Document 'type' quirk (Phil Sutter) [1341343]
  - man: ip-link.8: Fix 'ip link delete' description (Phil Sutter) [1341343]


author: Phil Sutter <psutter@redhat.com> [3.10.0-68.el7]
changelog:
  - devlink: add manpage for shared buffer (Phil Sutter) [1342515]
  - devlink: implement shared buffer occupancy control (Phil Sutter) [1342515]
  - devlink: implement shared buffer support (Phil Sutter) [1342515]
  - devlink: allow to parse both devlink and port handle in the same time (Phil Sutter) [1342515]
  - devlink: introduce dump filtering function (Phil Sutter) [1342515]
  - devlink: split dl_argv_parse_put to parse and put parts (Phil Sutter) [1342515]
  - devlink: introduce helper to print out nice names (ifnames) (Phil Sutter) [1342515]
  - devlink: introduce pr_out_port_handle helper (Phil Sutter) [1342515]
  - list: add list_add_tail helper (Phil Sutter) [1342515]
  - list: add list_for_each_entry_reverse macro (Phil Sutter) [1342515]
  - devlink: fix "devlink port" help message (Phil Sutter) [1342515]
  - devlink: ignore build result (Phil Sutter) [1342515]
  - add devlink tool (Phil Sutter) [1342515]
  - include: add linked list implementation from kernel (Phil Sutter) [1342515]
  - configure: cleanup (Phil Sutter) [1342515]
  - configure: Check for libmnl (Phil Sutter) [1342515]
  - configure: Add check for the doc tools (Phil Sutter) [1342515]
  - add if_macsec header (Davide Caratti) [1300765]
  - RH-INTERNAL: update kernel headers to v4.6.0 (Davide Caratti) [1300765]
  - utils: fix hex digits parsing in hexstring_a2n() (Davide Caratti) [1300765]
  - ip: add MACsec support (Davide Caratti) [1300765]
  - utils: provide get_hex to read a hex digit from a char (Davide Caratti) [1300765]
  - utils: add get_be{16, 32, 64}, use them where possible (Davide Caratti) [1300765]
  - utils: make hexstring_a2n provide the number of hex digits parsed (Davide Caratti) [1300765]
  - lib/ll_addr: improve ll_addr_n2a() a bit (Davide Caratti) [1300765]
  - iproute2: arpd: use ll_addr_a2n and ll_addr_n2a (Davide Caratti) [1300765]
  - iproute2: utils: change hexstring_n2a and hexstring_a2n to do not work with ":" (Davide Caratti) [1300765]


author: Phil Sutter <psutter@redhat.com> [3.10.0-69.el7]
changelog:
  - ip-address.8: Document autojoin flag (Phil Sutter) [1333513]
  - ip-link.8: Fix font choices (Phil Sutter) [1269528]
  - ip-link: fix man page warnings (Phil Sutter) [1269528]
  - vxlan: fix help and man text (Phil Sutter) [1269528]
  - ip-link: fix unterminated string in manpage (Phil Sutter) [1269528]
  - ip-link.8: Add slave type option descriptions (Phil Sutter) [1269528]
  - ip-link.8: Place 'ip link set' warning more prominently (Phil Sutter) [1269528]
  - ip-link.8: Extend type list in synopsis (Phil Sutter) [1269528]
  - man ip-link: Remove extra GROUP explanation (Phil Sutter) [1269528]
  - man ip-link: Add short description about 'group' (Phil Sutter) [1269528]
  - man ip-link: Add deleting links by group (Phil Sutter) [1269528]
  - iplink: bond_slave: Add missing help functions (Phil Sutter) [1269528]
  - iplink: List valid 'type' argument in ip link help text (Phil Sutter) [1269528]
  - ip link: Add group in usage() for 'ip link delete' (Phil Sutter) [1269528]
  - iproute: constify rtattr_cmp (Phil Sutter) [1348133]
  - ip route: restore route entries in correct order (Phil Sutter) [1348133]


author: Phil Sutter <psutter@redhat.com> [3.10.0-70.el7]
changelog:
  - man: ip-link: Document query_rss option (Phil Sutter) [1264146]
  - Document VF link state control in the ip-link man page (Phil Sutter) [1264146]
  - ipneigh: List all nud states in help output (Phil Sutter) [1276661]
  - iproute2: ip-route.8.in: Add expires option for ip route (Phil Sutter) [1357020]
  - ip route: timeout for routes has to be set in seconds (Phil Sutter) [1357020]
  - route: allow routes to be configured with expire values (Phil Sutter) [1357020]


author: Phil Sutter <psutter@redhat.com> [3.10.0-71.el7]
changelog:
  - ip: add paren to silence warning (Phil Sutter) [1340914]
  - Fix MAC address length check (Jakub Sitnicki) [1253767 1271580]
  - iplink: Check address length via netlink (Jakub Sitnicki) [1253767 1271580]
  - iplink: Add missing variable initialization (Jakub Sitnicki) [1253767 1271580]
  - ip link: Fix crash on older kernels when show VF dev (Jakub Sitnicki) [1340914]
  - ip link: Remove unnecessary device checking (Jakub Sitnicki) [1340914]
  - ip: check for missing dev arg when doing VF rate (Jakub Sitnicki) [1340914]
  - Add support to configure SR-IOV VF minimum and maximum Tx rate through ip tool (Jakub Sitnicki) [1340914]


author: Phil Sutter <psutter@redhat.com> [3.10.0-72.el7]
changelog:
  - macsec: cipher and icvlen can be set separately (Davide Caratti) [1354408]
  - ip {link,address}: add 'macsec' item to TYPE list (Davide Caratti) [1354702]
  - man: macsec: fix macsec related typos (Davide Caratti) [1354702 1354319]
  - Revert "Allow specifying bridge port STP state by name rather than number." (Phil Sutter) [1288042]
  - Revert "fix ip -force -batch to continue on errors" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for addrlabel" (Phil Sutter) [1288042]
  - Revert "link dump filter" (Phil Sutter) [1288042]
  - Revert "ip: return correct exit code on route failure" (Phil Sutter) [1288042]
  - Revert "ip: fix exit code for rule failures" (Phil Sutter) [1288042]
  - man: ip-link: Drop fou and gue related documentation (Phil Sutter) [1013584]
  - man: ip-link, ip-address: Drop references to ipvlan (Phil Sutter) [1013584]
  - doc, man: ip-rule: Remove incorrect statement about rule 0 (Phil Sutter) [1362561]


author: Phil Sutter <psutter@redhat.com> [3.10.0-73.el7]
changelog:
  - ip-link: add missing {min,max}_tx_rate to help text (Phil Sutter) [1340914]
  - man: ip-link.8: Document missing geneve options (Phil Sutter) [1339178]
  - iproute.spec: Fix for missing cbq.8 man page (Phil Sutter) [1362551]


author: Phil Sutter <psutter@redhat.com> [3.10.0-75.el7]
changelog:
  - ip: vfinfo: remove code duplication for IFLA_VF_RSS_QUERY_EN (Timothy Redaelli) [1264149]
  - ipaddress: Print IFLA_VF_QUERY_RSS_EN setting (Timothy Redaelli) [1264149]
  - ipaddress: Simplify vf_info parsing (Timothy Redaelli) [1264149]
  - ip-route: Prevent some double spaces in output (Timothy Redaelli) [1374446]
  - ip-route man: add usage and description for lwtunnel encap attributes (Phil Sutter) [1329730]
  - lwtunnel: implement support for ip6 encap (Phil Sutter) [1329730]
  - lwtunnel: fix argument parsing (Phil Sutter) [1329730]
  - lwtunnel: Add encapsulation support to ip route (Phil Sutter) [1329730]
  - libnetlink: introduce rta_nest and u8, u16, u64 helpers for nesting within rtattr (Phil Sutter) [1329730]
  - utils: add missing return value (Phil Sutter) [1329730]
  - remove unnecessary extern (Phil Sutter) [1329730]
  - ss: Add support for SCTP protocol (Phil Sutter) [1063934]
  - include: Add linux/sctp.h (Phil Sutter) [1063934]
  - update inet_diag.h header (Phil Sutter) [1063934]
  - macsec: fix byte ordering on input/display of 'sci' (Davide Caratti) [1355629]
  - macsec: fix input of 'port', improve documentation of 'address' (Davide Caratti) [1355629]
  - misc/ss: tcp cwnd should be unsigned (Davide Caratti) [1375215]


author: Phil Sutter <psutter@redhat.com> [3.10.0-76.el7]
changelog:
  - iplink: add missing link type (Phil Sutter) [1374493]
  - man: ip-link: Remove bits about proxy_arp and proxy_arp_wifi (Phil Sutter) [1374360]
  - iplink: bridge_slave: add support for IFLA_BRPORT_FAST_LEAVE (Phil Sutter) [1374360]
  - iplink: bridge_slave: add support for IFLA_BRPORT_MULTICAST_ROUTER (Phil Sutter) [1374360]
  - macsec: fix input range of 'icvlen' parameter (Phil Sutter) [1373121]


author: Phil Sutter <psutter@redhat.com> [3.10.0-77.el7]
changelog:
  - change of rtnetlink to use RTN_F_OFFLOAD (Phil Sutter) [1417289]
  - bridge: add support for the multicast flood flag (Phil Sutter) [1417289]
  - RH-INTERNAL: Update kernel headers to v4.10.0 (Phil Sutter) [1417289]
  - bridge: man: fix STP LISTENING description (Phil Sutter) [1417289]
  - bridge: man: fix BPUD typo (Phil Sutter) [1417289]
  - bridge: man: fix "brige" typo (Phil Sutter) [1417289]
  - bridge: vlan: fix a few "fdb" typos in vlan doc (Phil Sutter) [1417289]
  - bridge: vlan: add support to filter by vlan id (Phil Sutter) [1417289]
  - bridge: mdb: add support to filter by vlan id (Phil Sutter) [1417289]
  - bridge: fdb: add support to filter by vlan id (Phil Sutter) [1417289]
  - bridge: code cleanup (Phil Sutter) [1417289]
  - bridge: mdb: add support for extended router port information (Phil Sutter) [1417289]
  - bridge: mdb: add support for offloaded mdb entries (Phil Sutter) [1417289]
  - bridge: mdb: add user-space support for extended attributes (Phil Sutter) [1417289]
  - iplink: bridge: remove unnecessary returns (Phil Sutter) [1417289]
  - bridge: add support for dynamic fdb entries (Phil Sutter) [1417289]
  - iplink: bridge_slave: export read-only values (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_STARTUP_QUERY_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_QUERY_RESPONSE_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_QUERY_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_QUERIER_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_MEMBERSHIP_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_LAST_MEMBER_INTVL (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_STARTUP_QUERY_CNT (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_LAST_MEMBER_CNT (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_HASH_MAX (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_HASH_ELASTICITY (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_QUERIER (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_QUERY_USE_IFADDR (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_SNOOPING (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_MCAST_ROUTER (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_VLAN_DEFAULT_PVID (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_GROUP_ADDR (Phil Sutter) [1417289]
  - iplink: bridge: add support for IFLA_BR_GROUP_FWD_MASK (Phil Sutter) [1417289]
  - iplink: bridge: export read-only timers (Phil Sutter) [1417289]
  - iplink: bridge: export root_(port|path_cost), topology_change and change_detected (Phil Sutter) [1417289]
  - iplink: bridge: export bridge_id and designated_root (Phil Sutter) [1417289]
  - bridge: support for static fdb entries (Phil Sutter) [1417289]
  - bridge.8: minor formatting cleanup (Phil Sutter) [1417289]
  - bridge.8: document fdb replace command (Phil Sutter) [1417289]
  - bridge: fdb: minor syntax fix in help text (Phil Sutter) [1417289]
  - bridge: add calls to fflush in fdb and mdb print functions (Phil Sutter) [1417289]
  - ip, bridge: document -timestamp option (Phil Sutter) [1417289]
  - bridge: add batch command support (Phil Sutter) [1417289]
  - iplink: Add support for IFLA_BR_VLAN_PROTOCOL attribute (Phil Sutter) [1417289]
  - iplink: add support for IFLA_BR_VLAN_FILTERING attribute (Phil Sutter) [1417289]
  - bridge: mdb: add deleted when monitoring delmdb event (Phil Sutter) [1417289]
  - bridge: mdb: add support for vlans (Phil Sutter) [1417289]
  - ip link: proto_down config and display. (Phil Sutter) [1417289]
  - bridge: mdb: add support for router add/del notifications monitoring (Phil Sutter) [1417289]
  - ip: fix all the checkpatch warnings (Phil Sutter) [1417289]
  - iproute2: ipa: show switch id (Phil Sutter) [1417289]
  - ip: return correct exit code on route failure (Phil Sutter) [1417289]
  - iproute2: unify naming for entries offloaded to hardware (Phil Sutter) [1417289]
  - route: label externally offloaded routes (Phil Sutter) [1417289]
  - fix ip -force -batch to continue on errors (Phil Sutter) [1417289]
  - bridge link: add support to specify master (Phil Sutter) [1417289]
  - Allow specifying bridge port STP state by name rather than number. (Phil Sutter) [1417289]
  - iproute2: bridge vlan show new option to print ranges (Phil Sutter) [1417289]
  - iproute2: bridge: support vlan range adds (Phil Sutter) [1417289]
  - bridge/link: add learning_sync policy flag (Phil Sutter) [1417289]
  - bridge link: add option 'self' (Phil Sutter) [1417289]
  - bridge/fdb: add flag/indication for FDB entry synced from offload device (Phil Sutter) [1417289]
  - bridge/fdb: fix statistics output spacing (Phil Sutter) [1417289]
  - iproute2 bridge: bring to above par with brctl show macs (Phil Sutter) [1417289]
  - link dump filter (Phil Sutter) [1417289]
  - bridge: Make filter_index match in signedness (Phil Sutter) [1417289]
  - bridge: Add learning and flood support (Phil Sutter) [1417289]
  - iproute2: ipa: show port id (Phil Sutter) [1417289]
  - bridge: fix reporting of IPv6 addresses (Phil Sutter) [1417289]
  - iplink: bridge_slave: add support for IFLA_BRPORT_PROXYARP_WIFI (Phil Sutter) [1374360]
  - iplink: bridge_slave: add support for IFLA_BRPORT_PROXYARP (Phil Sutter) [1374360]
  - Revert "man: ip-link: Remove bits about proxy_arp and proxy_arp_wifi" (Phil Sutter) [1374360]


author: Phil Sutter <psutter@redhat.com> [3.10.0-78.el7]
changelog:
  - ip-address: Support filtering by slave type, too (Phil Sutter) [1375434]
  - tc: don't accept qdisc 'handle' greater than ffff (Davide Caratti) [1375393]
  - macsec: show usage even if the module is not available (Timothy Redaelli) [1367071]
  - libgenl: introduce genl_init_handle (Timothy Redaelli) [1367071]
  - tc: flower: Fix parsing ip address (Phil Sutter) [1422629]
  - tc: flower: support masked ICMP code and type match (Phil Sutter) [1422629]
  - tc: flower: provide generic masked u8 print helper (Phil Sutter) [1422629]
  - tc: flower: provide generic masked u8 parser helper (Phil Sutter) [1422629]
  - tc: flower: Update documentation to indicate ARP takes IPv4 prefixes (Phil Sutter) [1422629]
  - tc: flower: use correct type when calling flower_icmp_attr_type (Phil Sutter) [1422629]
  - f_flower: don't set TCA_FLOWER_KEY_ETH_TYPE for "protocol all" (Phil Sutter) [1422629]
  - tc: flower: Refactor matching flags to be more user friendly (Phil Sutter) [1422629]
  - tc: flower: Support matching ARP (Phil Sutter) [1422629]
  - kernel headers update (Phil Sutter) [1422629]
  - tc: flower: Fix incorrect error msg about eth type (Phil Sutter) [1422629]
  - tc: flower: Add missing err check when parsing flower options (Phil Sutter) [1422629]
  - tc: flower: Fix flower output for src and dst ports (Phil Sutter) [1422629]
  - tc: flower: Update dest UDP port documentation (Phil Sutter) [1422629]
  - tc: flower: support matching flags (Phil Sutter) [1422629]
  - tc/cls_flower: Add to the usage encapsulation dest UDP port (Phil Sutter) [1422629]
  - tc: flower: Allow *_mac options to accept a mask (Phil Sutter) [1422629]
  - tc: flower: document that *_ip parameters take a PREFIX as an argument. (Phil Sutter) [1422629]
  - tc: flower: Fix typo and style in flower man page (Phil Sutter) [1422629]
  - tc/cls_flower: Add dest UDP port to tunnel params (Phil Sutter) [1422629]
  - tc: flower: support matching on ICMP type and code (Phil Sutter) [1422629]
  - tc: flower: introduce enum flower_endpoint (Phil Sutter) [1422629]
  - tc: flower: make use of flower_port_attr_type() safe and silent (Phil Sutter) [1422629]
  - tc: flower: correct name of ip_proto parameter to flower_parse_port() (Phil Sutter) [1422629]
  - tc: flower: document SCTP ip_proto (Phil Sutter) [1422629]
  - tc: flower: remove references to eth_type in manpage (Phil Sutter) [1422629]
  - tc/cls_flower: Classify packet in ip tunnels (Phil Sutter) [1422629]
  - libnetlink: Introduce rta_getattr_be*() (Phil Sutter) [1422629]
  - tc: flower: Support matching on SCTP ports (Phil Sutter) [1422629]
  - tc: flower: Fix usage message (Phil Sutter) [1422629]
  - tc: flower checkpatch cleanups (Phil Sutter) [1422629]
  - tc: flower: Introduce vlan support (Phil Sutter) [1422629]
  - tc: flower: Add skip_{hw|sw} support (Phil Sutter) [1422629]
  - utils: add get_be{16, 32, 64}, use them where possible (Phil Sutter) [1422629]
  - lib/utils: introduce rt_addr_n2a_rta() (Phil Sutter) [1422629]
  - utils: make rt_addr_n2a() non-reentrant by default (Phil Sutter) [1422629]
  - make format_host non-reentrant by default (Phil Sutter) [1422629]
  - tc: flower no need to specify the ethertype (Phil Sutter) [1422629]
  - ip6tunnel: print local/remote addresses like iptunnel does (Phil Sutter) [1422629]
  - tc: ship filter man pages and refer to them in tc.8 (Phil Sutter) [1422629]
  - tc: add a man page for flower filter (Phil Sutter) [1422629]
  - tc: improve filter help texts a bit (Phil Sutter) [1422629]
  - tc: add support for Flower classifier (Phil Sutter) [1422629]
  - ip: make -resolve addr to print names rather than addresses (Phil Sutter) [1422629]


author: Phil Sutter <psutter@redhat.com> [3.10.0-80.el7]
changelog:
  - tc: m_xt: Drop needless parentheses from #if checks (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault with iptables-1.6.0 (Phil Sutter) [1326726]
  - m_xt: whitespace cleanup (Phil Sutter) [1326726]
  - tc: m_xt: Introduce get_xtables_target_opts() (Phil Sutter) [1326726]
  - tc: m_xt: Simplify argc adjusting in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of iargc variable in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of rargc in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Drop unused variable fw in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Get rid of one indentation level in parse_ipt() (Phil Sutter) [1326726]
  - tc: m_xt: Fix indenting (Phil Sutter) [1326726]
  - tc: m_xt: Fix segfault when adding multiple actions at once (Phil Sutter) [1326726]
  - tc: m_xt: Prevent segfault with standard targets (Phil Sutter) [1326726]
  - man: update doc after support of ESN and anti-replay window (Phil Sutter) [1425059]
  - xfrm: add support of ESN and anti-replay window (Phil Sutter) [1425059]


author: Phil Sutter <psutter@redhat.com> [3.10.0-81.el7]
changelog:
  - man: ip-link: Specify min/max values for bridge slave priority and cost (Phil Sutter) [1374360]
  - man: ip-link.8: document bridge options (Phil Sutter) [1373869]


author: Ivan Vecera <ivecera@redhat.com> [3.10.0-84.el7]
changelog:
  - tc: Add support for the matchall traffic classifier. (Ivan Vecera) [1435624]
  - tc: man: Add man entry for the matchall classifier. (Ivan Vecera) [1435624]
  - tc: add missing limits.h header (Ivan Vecera) [1435624]
  - tc: man: matchall: Fix example indentation (Ivan Vecera) [1435624]
  - tc: matchall: Print skip flags when dumping a filter (Ivan Vecera) [1435624]
  - tc, clsact: add clsact frontend (Ivan Vecera) [1435624]


author: Eric Garver <egarver@redhat.com> [3.10.0-86.el7]
changelog:
  - Revert "ip-route man: add usage and description for lwtunnel encap attributes" (Eric Garver) [1459975]
  - Revert "lwtunnel: implement support for ip6 encap" (Eric Garver) [1459975]
  - Revert "lwtunnel: fix argument parsing" (Eric Garver) [1459975]
  - Revert "lwtunnel: Add encapsulation support to ip route" (Eric Garver) [1459975]


author: Sabrina Dubroca <sdubroca@redhat.com> [3.10.0-87.el7]
changelog:
  - devlink: Add e-switch support (Sabrina Dubroca) [1459772]
  - devlink: whitespace cleanup (Sabrina Dubroca) [1459772]
  - devlink: Convert conditional in dl_argv_handle_port() to switch() (Sabrina Dubroca) [1459772]
  - devlink: write usage help messages to stderr (Sabrina Dubroca) [1459772]
  - devlink: Add usage help for eswitch subcommand (Sabrina Dubroca) [1459772]
  - devlink: Call dl_free in early exit case (Sabrina Dubroca) [1459772]


author: Phil Sutter <psutter@redhat.com> [4.11.0-2.el7]
changelog:
  - rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1480136]
  - bpf: Make bytecode-file reading a little more robust (Phil Sutter) [1477491]
  - tc: fix m_simple usage (Phil Sutter) [1477523]
  - tc-simple: Fix documentation (Phil Sutter) [1477523]
  - Really fix get_addr() and get_prefix() error messages (Phil Sutter) [1477206]


author: Phil Sutter <psutter@redhat.com> [4.11.0-3.el7]
changelog:
  - lib/bpf: Fix bytecode-file parsing (Phil Sutter) [1477491]
  - tc-simple.8: Fix reference to non-existing tc-actions.8 (Phil Sutter) [1477523]
  - ss: Fix for added diag support check (Phil Sutter) [1487152]


author: Phil Sutter <psutter@redhat.com> [4.11.0-5.el7]
changelog:
  - ip neigh: allow flush FAILED neighbour entry (Matteo Croce) [1469945]
  - tc: fix typo in manpage (Phil Sutter) [1417162]
  - link_gre6: really support encaplimit option (Phil Sutter) [1459600]
  - tc: m_xt: Prevent a segfault in libipt (Phil Sutter) [1465599]


author: Phil Sutter <psutter@redhat.com> [4.11.0-6.el7]
changelog:
  - link_gre6: Fix for changing tclass/flowlabel (Phil Sutter) [1487486]
  - utils: return default family when rtm_family is not RTNL_FAMILY_IPMR/IP6MR (Stefano Brivio) [1475762]
  - netns: avoid directory traversal (Phil Sutter) [1468529]
  - Disable -fexceptions CFLAG passed by build system (Phil Sutter) [1418715]


author: Phil Sutter <psutter@redhat.com> [4.11.0-9.el7]
changelog:
  - lib/libnetlink: update rtnl_talk to support malloc buff at run time (Hangbin Liu) [1380803]
  - lib/libnetlink: re malloc buff if size is not enough (Hangbin Liu) [1380803]
  - iplink: double the buffer size also in iplink_get() (Hangbin Liu) [1380803]
  - iplink: check for message truncation in iplink_get() (Hangbin Liu) [1380803]
  - iproute: Add support for extended ack to rtnl_talk (Hangbin Liu) [1380803]
  - libnetlink: drop unused parameter to rtnl_dump_done (Hangbin Liu) [1380803]
  - netlink: Change rtnl_dump_done to always show error (Hangbin Liu) [1380803]


author: Phil Sutter <psutter@redhat.com> [4.11.0-10.el7]
changelog:
  - tc: flower: add support for matching on ip tos and ttl (Kamal Heib) [1456539]
  - iplink: Update usage in help message (Kamal Heib) [1456539]
  - tc: flower: add support for tcp flags (Kamal Heib) [1456539]
  - devlink: Add option to set and show eswitch encapsulation support (Kamal Heib) [1456539]
  - pedit: Introduce ipv6 support (Kamal Heib) [1456539]
  - pedit: Check for extended capability in protocol parser (Kamal Heib) [1456539]
  - pedit: Do not allow using retain for too big fields (Kamal Heib) [1456539]
  - pedit: Fix a typo in warning (Kamal Heib) [1456539]
  - tc: Reflect HW offload status (Kamal Heib) [1456539]
  - devlink: Add support for pipeline debug (dpipe) (Kamal Heib) [1456539]
  - devlink: Change netlink attribute validation (Kamal Heib) [1456539]
  - Update linux headers (Phil Sutter) [1456539]


author: Phil Sutter <psutter@redhat.com> [4.11.0-11.el7]
changelog:
  - ss: add AF_VSOCK support (Stefano Brivio) [1472759]
  - ss: allow AF_FAMILY constants >32 (Stefano Brivio) [1472759]
  - uapi: add include linux/vm_sockets_diag.h (Stefano Brivio) [1472759]
  - iproute: build more easily on Android (Phil Sutter) [1472759]


author: Phil Sutter <psutter@redhat.com> [4.11.0-12.el7]
changelog:
  - man: tc-csum.8: Fix inconsistency in example description (Phil Sutter) [1417162]
  - link_gre6: Detect invalid encaplimit values (Phil Sutter) [1459600]


author: Phil Sutter <psutter@redhat.com> [4.11.0-15.el7]
changelog:
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1641909]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1641909]
  - Update kernel headers (Phil Sutter)
  - tc: include stdint.h explicitly for UINT16_MAX (Phil Sutter) [1641909]
  - tc: m_tunnel_key: Allow key-less tunnels (Phil Sutter) [1658506]
  - tc: m_tunnel_key: reformat the usage text (Phil Sutter) [1658506]


author: Phil Sutter <psutter@redhat.com> [4.11.0-16.el7]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1624656]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1624656]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1624656]
  - iproute: Abort if nexthop cannot be parsed (Phil Sutter) [1624656]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-19.el7]
changelog:
  - rdma: add infrastructure for RDMA tool (Andrea Claudi) [1642479 1641914]
  - rdma: Add MR resource tracking information (Andrea Claudi) [1642479 1641914]
  - json_writer: add new json handlers (null, float with format, lluint, hu) (Andrea Claudi) [1642479 1641914]
  - lib: make resolve_hosts variable common (Andrea Claudi) [1642479 1641914]
  - utils: Move BIT macro to common header (Andrea Claudi) [1642479 1641914]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1642347]
  - man: tc-vlan.8: Fix for incorrect example (Andrea Claudi) [1593630]
  - man: ip-route.8: ssthresh parameter is NUMBER (Andrea Claudi) [1593628]
  - devlink: Add param command support (Andrea Claudi) [1644731]
  - devlink: Update man pages and add resource man (Andrea Claudi) [1644731]
  - devlink: Add support for hot reload (Andrea Claudi) [1644731]
  - devlink: Add support for devlink resource abstraction (Andrea Claudi) [1644731]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-21.el7]
changelog:
  - Check user supplied interface name lengths (Andrea Claudi) [1465646]
  - tc: flower: No need to cache indev arg (Andrea Claudi) [1465646]
  - ip{6, }tunnel: Avoid copying user-supplied interface name around (Andrea Claudi) [1465646]
  - utils: strlcpy() and strlcat() don't clobber dst (Andrea Claudi) [1465646]
  - lnstat_util: Make sure buffer is NUL-terminated (Andrea Claudi) [1465646]
  - tc_util: No need to terminate an snprintf'ed buffer (Andrea Claudi) [1465646]
  - ipxfrm: Replace STRBUF_CAT macro with strlcat() (Andrea Claudi) [1465646]
  - Convert harmful calls to strncpy() to strlcpy() (Andrea Claudi) [1465646]
  - Convert the obvious cases to strlcpy() (Andrea Claudi) [1465646]
  - utils: Implement strlcpy() and strlcat() (Andrea Claudi) [1465646]
  - lib/libnetlink: Don't pass NULL parameter to memcpy() (Andrea Claudi) [1465646]
  - lib/fs: Fix and simplify make_path() (Andrea Claudi) [1465646]
  - lib/bpf: Check return value of write() (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fscanf() (Andrea Claudi) [1465646]
  - ss: Make sure scanned index value to unix_state_map is sane (Andrea Claudi) [1465646]
  - ss: Make struct tcpstat fields 'timer' and 'timeout' unsigned (Andrea Claudi) [1465646]
  - lib/ll_map: Choose size of new cache items at run-time (Andrea Claudi) [1465646]
  - tc/m_xt: Fix for potential string buffer overflows (Andrea Claudi) [1465646]
  - lnstat_util: Simplify alloc_and_open() a bit (Andrea Claudi) [1465646]
  - lib/inet_proto: Review inet_proto_{a2n,n2a}() (Andrea Claudi) [1465646]
  - lib/fs: Fix format string in find_fs_mount() (Andrea Claudi) [1465646]
  - ipntable: Avoid memory allocation for filter.name (Andrea Claudi) [1465646]
  - tipc/bearer: Prevent NULL pointer dereference (Andrea Claudi) [1465646]
  - tc/tc_filter: Make sure filter name is not empty (Andrea Claudi) [1465646]
  - tc/q_netem: Don't dereference possibly NULL pointer (Andrea Claudi) [1465646]
  - ifstat, nstat: Check fdopen() return value (Andrea Claudi) [1465646]
  - lib/bpf: Don't leak fp in bpf_find_mntpt() (Andrea Claudi) [1465646]
  - devlink: Check return code of strslashrsplit() (Andrea Claudi) [1465646]
  - iplink_vrf: Complain if main table is not found (Andrea Claudi) [1465646]
  - iproute: Check mark value input (Andrea Claudi) [1465646]
  - tc/q_multiq: Don't pass garbage in TCA_OPTIONS (Andrea Claudi) [1465646]
  - netem/maketable: Check return value of fstat() (Andrea Claudi) [1465646]
  - ss: Use C99 initializer in netlink_show_one() (Andrea Claudi) [1465646]
  - ipmaddr: Avoid accessing uninitialized data (Andrea Claudi) [1465646]
  - iplink_can: Prevent overstepping array bounds (Andrea Claudi) [1465646]
  - ipaddress: Avoid accessing uninitialized variable lcl (Andrea Claudi) [1465646]
  - tc/m_gact: Drop dead code (Andrea Claudi) [1465646]
  - ss: Drop useless assignment (Andrea Claudi) [1465646]
  - ss: Skip useless check in parse_hostcond() (Andrea Claudi) [1465646]
  - lib/rt_names: Drop dead code in rtnl_rttable_n2a() (Andrea Claudi) [1465646]
  - iproute: Fix for missing 'Oifs:' display (Andrea Claudi) [1465646]
  - ipntable: No need to check and assign to parms_rta (Andrea Claudi) [1465646]
  - devlink: No need for this self-assignment (Andrea Claudi) [1465646]
  - tipc/bearer: Fix resource leak in error path (Andrea Claudi) [1465646]
  - ss: Fix potential memleak in unix_stats_print() (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in dump_kern_db() for json output (Andrea Claudi) [1465646]
  - ifstat: Fix memleak in error case (Andrea Claudi) [1465646]
  - ipvrf: Fix error path of vrf_switch() (Andrea Claudi) [1465646]
  - tc/em_ipset: Don't leak sockfd on error path (Andrea Claudi) [1465646]
  - ss: Don't leak fd in tcp_show_netlink_file() (Andrea Claudi) [1465646]
  - iproute_lwtunnel: csum_mode value checking was ineffective (Andrea Claudi) [1465646]
  - iproute_lwtunnel: Argument to strerror must be positive (Andrea Claudi) [1465646]
  - tipc/node: Fix socket fd check in cmd_node_get_addr() (Andrea Claudi) [1465646]
  - ifcfg: Quote left-hand side of [ ] expression (Andrea Claudi) [1465646]
  - examples: Some shell fixes to cbq.init (Andrea Claudi) [1465646]
  - ip-address: Use correct max attribute value in print_vf_stats64() (Andrea Claudi) [1679749]
  - ss: enclose IPv6 address in brackets (Andrea Claudi) [1588122]
  - tc: f_flower: Add support for matching first frag packets (Andrea Claudi) [1559814]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-23.el7]
changelog:
  - tc_util: Silence spurious compiler warning (Andrea Claudi) [1714660]
  - gre6: add collect metadata support (Andrea Claudi) [1714660]
  - tc: m_tunnel_key: add csum/nocsum option (Andrea Claudi) [1714660]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1714660]
  - tc: fix parsing of the control action (Andrea Claudi) [1714660]
  - tc: util: Don't call NEXT_ARG_FWD() in __parse_action_control() (Andrea Claudi) [1714660]
  - tc: don't print error message on miss when parsing action with default (Andrea Claudi) [1714660]
  - tc: gact: fix control action parsing (Andrea Claudi) [1714660]
  - tc/actions: introduce support for goto chain action (Andrea Claudi) [1714660]
  - tc: actions: add helpers to parse and print control actions (Andrea Claudi) [1714660]
  - tc_filter: add support for chain index (Andrea Claudi) [1714660]
  - gre/gre6: allow clearing {,i,o}{key,seq,csum} flags (Andrea Claudi) [1714660]
  - man: ip link: document GRE tunnels (Andrea Claudi) [1714660]
  - ip/tunnel: Use tnl_parse_key() to parse tunnel key (Andrea Claudi) [1714660]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-25.el7]
changelog:
  - tc: implement ingress/egress block index attributes for qdiscs (Andrea Claudi) [1721291]
  - tc: introduce support for block-handle for filter operations (Andrea Claudi) [1721291]
  - tc_filter: resolve device name before parsing filter (Andrea Claudi) [1721291]
  - tc: introduce tc_qdisc_block_exists helper (Andrea Claudi) [1721291]


author: Andrea Claudi <aclaudi@redhat.com> [4.11.0-27.el7]
changelog:
  - ss: fix NULL pointer access when parsing unix sockets with oldformat (Andrea Claudi) [1795891]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - uapi: update bpf headers (Andrea Claudi) [1637437]
  - Update kernel headers (Andrea Claudi) [1637437]
  - man: Clarify idleslope calculation for tc-cbs (Andrea Claudi) [1557461]
  - man: Add initial manpage for tc-cbs(8) (Andrea Claudi) [1557461]
  - tc: Add support for the CBS qdisc (Andrea Claudi) [1557461]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1792908]


author: Jeremy Katz <katzj@redhat.com> - 2.0.13.2-1
changelog:
  - update to 2.0.13.2 (#139083)
    - fix firmware upload for firmware in /lib instead of /usr/lib
    - fix sysfs race


author: Will Woods <wwoods@redhat.com> - 2.2.13-2
changelog:
  - Fix iprdump startup - #483340
  - iprutils-swab-moved.patch - fix compilation with 2.6.29 kernels (#483643)


author: Jakub Čajka <jcajka@redhat.com> - 2.4.2-1
changelog:
  - Resolves: #1088562 - [7.1 FEAT] iprutils package update - ppc64
  - Resolves: #1044679 - iprutils should use systemd
  - Resolves: #1092519 - iprutils - PIE and RELRO check


author: Jakub Čajka <jcajka@redhat.com> - 2.4.8-1
changelog:
  - Resolves: #1182038 - [7.2 FEAT] iprutils package update - ppc64/ppc64le
  - Resolves: #1183460 - RHEL7.1 BE: iprutils: Set known zeroed after format


author: Sinny Kumari <skumari@redhat.com> - 2.4.11.1-1
changelog:
  - Resolves: #1274367 - [7.3 FEAT] iprutils package update
  - Resolves: #1297921 - IPR: Raid migration fails to kick while executing through command line


author: Sinny Kumari <skumari@redhat.com> - 2.4.12.1-1
changelog:
  - Resolves: #1364131 - Integrate various important bug fixes for iprutils in
    RHEL7.3 by updating iprutils to 2.4.12


author: Sinny Kumari <skumari@redhat.com> - 2.4.16.1-1
changelog:
  - Resolves: #1587834 - vpdupdate takes over an hour on system with 104 drive
  - Resolves: #1521052 - iprutils package update for POWER
  - Resolves: #1547891 - iprconfig unable to Download microcode on all applicable devices
  - Resolves: #1576013 - iprconfig tools shows wrong error message, while creating raid using RI SSDs and normal SSDs


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.11-1
changelog:
  - New upstream release.
  - Removed our patch, it has been integrated upstream. As such, we also don't
    need to re-run autoreconf any more.


author: Mathieu Bridon <bochecha@fedoraproject.org> - 6.14-1
changelog:
  - New upstream release.
  - Fix scriptlets, ldconfig is needed for the libs subpackage, not the main one.


author: Thomas Woerner <twoerner@redhat.com> - 6.19-5
changelog:
  - New service sub package to provide the ipset service (RHBZ#1136257)
    Service and start-stop script from F-24
  - Fixed ipset package summary (RHBZ#1195171)
    Spec file derived from F-24


author: Thomas Woerner <twoerner@redhat.com> - 6.19-6
changelog:
  - Use /etc/sysconfig/ipset-config in service as EnvironmentFile (RHBZ#1136257)
  - Use /etc/sysconfig/ipset for data as in RHEL-6 (RHBZ#1136257)
  - No save on reload, but legacy save action (RHBZ#1136257)


author: Thomas Woerner <twoerner@redhat.com> - 6.29-1
changelog:
  - Rebase to 6.29 (RHBZ#1351299)
  - Fixes:
    - Backport ipset capability to run in namespaces (RHBZ#1226051)
    - Fix service save with empty ipset list and existing ipset save file
      (RHBZ#1377621)
    - Fix internal error at printing to output buffer (RHBZ#1395865)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-1
changelog:
  - Rebase to 6.38 (RHBZ#1557600):
    - hash:ipmac type support added to ipset, userspace part (Tomasz Chilinski)
  - Refactor /etc/sysconfig/ipset.start-stop
  - Fixes:
    - IPSet Service Monolithic Operation (RHBZ#1440741)
    - "systemctl start ipset" doesn't handle existing ipset's having counters
      (RHBZ#1502212)


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649080):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649073)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649073)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649073)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649073)
    - Make error reporting consistent, introduce different severities (RHBZ#1649877)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1650297)
    - Fix covscan SC2166 warning in init script (RHBZ#1649073)
    - Hardcode triggerin, triggerun versions for ipset-service (RHBZ#1646666)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-9
changelog:
  - fixed missing system hang at shutdown if root device is network based
    (RHBZ#1007934)
  - Fixed iptables-save man page completely wrong (RHBZ#1054871)
  - Fixed missing reload action for iptables service (RHBZ#1066007)
  - Fixed regressions from RHEL-6 iptables services (RHBZ#1067670)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-14
changelog:
  - Add cgroup support (RHBZ#1058660)
  - Add wait seonds support for commands (RHBZ#1156411)
  - Add dhcpv6-client in default IPv6 firewall rules (RHBZ#1169036)
  - Add message for init script error returns (RHBZ#1200415)
  - Use flock for wait option (RHBZ#1202435)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-16
changelog:
  - Fix important coverity findings: missing include for flock and use bash for
    init script (RHBZ#1264399)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-17
changelog:
  - Fixed init script not to fail on missing restorecon (RHBZ#1246380)
  - Adapted man page snipplet for TRACE to use proper logging backend names
    (RHBZ#1261238)
  - Warn about use of DROP in nat table (RHBZ#1298879)
  - Fixed modules unload in init script (RHBZ#1324102)


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-18
changelog:
  - Add support for --wait options to restore commands (RHBZ#1438597)
  - Do not set changed flag for rule check operations with module targets
    (RHBZ#1438597)
  - Add version option to restore commands (RHBZ#1438597)


author: Phil Sutter - 1.4.21-20
changelog:
  - Prevent iptables.service and ip6tables.service from running in parallel
    (RHBZ#1486803)
  - Don't restart services upon upgrade (RHBZ#1380141)


author: Phil Sutter - 1.4.21-25
changelog:
  - Fix for stopping iptables and ip6tables at the same time (RHBZ#1560012)
  - Propagate errors on service stop (RHBZ#1560012)


author: Phil Sutter - 1.4.21-27
changelog:
  - libxt_tcpmss: Detect invalid ranges (RHBZ#1128510)
  - ip(6)tables-save/restore: Exit if invalid option was given (RHBZ#1465078)
  - ip(6)tables-save/restore: Require value to -W option (RHBZ#1465078)
  - ip(6)tables-save/restore: Don't accept -W without -w (RHBZ#1465078)
  - Ignore security table when setting policies (RHBZ#1494012)
  - Fix spec file changing SRPM content (RHBZ#1531290)


author: Phil Sutter - 1.4.21-29
changelog:
  - Do not attempt to unload any modules when stopping the firewall (RHBZ#1520534)
  - Fix for covscan warnings (RHBZ#1525980)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-31
changelog:
  - Fix iptables-restore with empty comment in rule (RHBZ#1668475)
  - Fix parsing and printing of -m ipvs --vproto option (RHBZ#1679726)
  - Fix for wrong location of devgroup definition file (RHBZ#1657075)
  - Fix for non-numeric devgroup name output (RHBZ#1657075)
  - Reject negative realm values (RHBZ#1657075)


author: Phil Sutter <psutter@redhat.com> - 1.4.21-34
changelog:
  - Fix iptables-restore for rules with '-' and 't' in comments (RHBZ#1749700)
  - Make services start before network-pre.target is reached (RHBZ#1736765)


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-6
changelog:
  - fix 1283773 - segfault in rate_add_rate

    Jun 17 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix 1109768 bad configuration logrotate
    Mar 02 2014 Alejandro Pérez  <aeperezt@fedoraproject.org>
    fix bug 1020552 - rpm report /var/lock/ipraf-ng is missing
    added missing file iptraf-nf-tmpfiles.conf
    Dec 03 2013 Nikola Pajkovsky <npajkovs@redhat.com>
    Fedora start using -Werror=format-security and iptraf-ng had some
    parts where error compilation was trigged.
    202b2e7b27a1 Makefile: add -Werror=format-security
    Resolved: #1037133


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-7
changelog:
  - Fixes error in patch Patch03 - this fixes 1283773 and 1539081
    1501821 - Upstream moved to https://github.com/iptraf-ng/iptraf-ng/
    1020552, 1372679 - fix missing /var/lock/iptraf-ng file
    Add BuildRequires:  gcc to spec file.
    1109768 - bad configuration logrotate


author: Thomas Woerner <twoerner@redhat.com> 2.2.1-3
changelog:
  - fixed compile problem because of strerror undefined in scope
    Fixes (rhbz#434482)
  - fixed description (rhbz#140516)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - add remaining binaries.
  - casts to remove compilation warnings.
  - terminate if -w deadline is reached exactly (#8724).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include README.ifenslave doco.
  - "ping -i N" was broke for N >= 3 (#9929).
  - update to ss000121:
  -- clockdiff: preserve raw socket errno.
  -- ping: change error exit code to 1 (used to be 92,93, ...)
  -- ping,ping6: if -w specified, transmit until -c limit is reached.
  -- ping,ping6: exit code non-zero if some packets not received within deadline.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a bunch of compiler warnings (#37131)
  - Fixed wrong exit code for no packets and deadline (#40323)
  - Moved arping to /sbin from /usr/sbin due to ifup call (#45785). Symlink from
    /usr/sbin/ provided for backwards compatibility.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added a patch to activate the rdisc server (#64270).
  - Display the countermeasures warning only in verbose (#55236)


author: Phil Knirsch <pknirsch@redhat.com> 20020124-7
changelog:
  - Added new BuildPreReqs for docbook-utils and perl-SGMLSpm (#66661)
  - Fixed ipv6 error printing problem (#66659).


author: Phil Knirsch <pknirsch@redhat.com> 20020927-3
changelog:
  - Removed bonding tarball and replaced it with ifenslave.c and README
  - FHS compliance for all tools, now to be found in /bin with compat symlinks to
    old places.


author: Phil Knirsch <pknirsch@redhat.com> 20020927-4
changelog:
  - Fixed DNS lookup problems (#68212).
  - Added warning if binding problem failed on subinterface (#81640).


author: Martin Bacovsky <mbacovsk@redhat.com> - 20020927-40
changelog:
  - tracepath doesn't continue past destination host (#174032) 
    previous patch replaced by new one provided by <mildew@gmail.com>
    option -c added


author: Martin Bacovsky <mbacovsk@redhat.com>- 20020927-42
changelog:
  - Resolves: #218706 - now defines the destination address along RFC3484
  - Resolves: #229630 - ifenslave(8) man page added
  - Resolves: #213716 - arping doesn't work on InfiniBand ipoib interfaces


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-1
changelog:
  - upgarde to new upstream iputils-s20070202
  - Resolves: #229995
  - Resolves: #225909 - Merge Review: iputils
  - patches revision


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-2
changelog:
  - Resolves: #234060: [PATCH] IDN (umlaut domains) support for ping and ping6
    patch provided by Robert Scheck <redhat@linuxnetz.de>


author: Martin Bacovsky <mbacovsk@redhat.com> - 20070202-4
changelog:
  - resolves: #236725: ping does not work for subsecond intervals for ordinary user
  - resolves: #243197: RFE: Please sync ifenslave with current kernel
  - resolves: #246954: Initscript Review
  - resolves: #251124: can't build rdisc - OPEN_MAX undeclared


author: Martin Nagy <mnagy@redhat.com> - 20070202-6
changelog:
  - fix absolute symlinks and character encoding for RELNOTES (#225909)
  - preserve file timestamps (#225909)
  - use %{?_smp_mflags} (#225909)
  - fix service rdisc stop removing of lock file


author: Martin Nagy <mnagy@redhat.com> - 20071127-3
changelog:
  - major patch cleanup so it will be easier to get patches upstream
  - fix for #68212, previous fix actually didn't work for ping6
  - renewed the ia64 align patches
  - update README.bonding
  - clear up the code from warnings
  - spec file cleanup


author: Jiri Skala <jskala@redhat.com> - 20101006-3
changelog:
  - applied patch dropping capabilities of Ludwig Nussel
  - fixes building ping, pinpg6 with -pie option
  - moves most CFLAGS options from spec to Makefile


author: Jan Synáček <jsynacek@redhat.com> 20101006-15
changelog:
  - Ping fixes:
    + enable marking packets when the correct capabilities are set (#802197)
    + integer overflow (#834661)
    + Fallback to numeric addresses while exiting (#834661)


author: Jan Synáček <jsynacek@redhat.com> - 20121112-1
changelog:
  - Update to iputils-s20121112 (#875767)
    + drop unnecessary patches
    + update patches
    + wrap SO_BINDTODEVICE with the correct capability
    + fix incorrect free (hits when -lidn is used)


author: Jan Synáček <jsynacek@redhat.com> - 20121121-1
changelog:
  - Update to iputils-s20121121, drop unnecessary patches
  - Add capabilities to clockdiff and arping
  - Renumber patches
  - Fix arping's default device search logic


author: Jan Synáček <jsynacek@redhat.com> - 20121125-2
changelog:
  - Comment patches and cleanup
  - Update ifaddrs patch
  - Call usage() before limiting capabilities
  - Correct ifaddrs patch
  - Drop corr_type patch (gcc 4.4 build hack)
  - Fix missing end tags in sgml documentation


author: Jan Synáček <jsynacek@redhat.com> - 20121207-1
changelog:
  - Update to iputils-s20121207 (#884983) - fixes a ping segfault introduced
    by the previous update
  - Update ninfod-minor patch
  - Renumber patches
  - Fix -F switch (flowlabel patch)


author: Jan Synáček <jsynacek@redhat.com> - 20121221-7
changelog:
  - ping returns odd results with options inet6 in resolv.conf (#1210331)
  - count of "back" is not correct in tracepath (#1208372)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-7
changelog:
  - ping hung when it cannot receive echo reply (#1362463)
  - arping documentation inconsistency (#1351704)


author: Jan Synáček <jsynacek@redhat.com> - 20160308-9
changelog:
  - IPv4 vs IPv6 inconsistency on return value of ping (#1362388)
  - ping6 does not use device specified with -I parameter (#1371824, #1424965)
  - double cap_free call in ping_common.c (#1410114)
  - ping assumes EACCESS errors are due to broadcast addresses (#1387315)
  - ping -t with multicast address without effect on ppc64 (#1373333)
  - arping -c <n> does not exit when the device is deleted (#1387542)


author: P.Copeland <copeland@redhat.com>
changelog:
  - Added 'dist' and 'rpms' to the Makefile
  - Added Obsoletes tag since there were early versions
    of ipvsadm-*.rpm that installed in /sbin
  - Obsolete tag was a bit vicious re: piranha


author: Horms <horms@vergenet.net>
changelog:
  - Removed Obseletes tag as ipvsadm is back in /sbin where it belongs 
    as it is more or less analogous to both route and ipchains both of
    which reside in /sbin.
  - Create directory to install init script into. Init scripts won't install
    into build directory unless this is done


author: P.Copeland <bryce@redhat.com>
changelog:
  - Small modifications to make the compiler happy in RH7 and the Alpha
  - Fixed the documentation file that got missed off in building
    the rpm
  - Made a number of -pedantic mods though popt will not compile with
    -pedantic


author: Mike McLean <mikem@redhat.com> 1.21-9.ipvs108
changelog:
  - Dropping kernel-source BuildRequires and including a local copy of 
    net/ip_vs.h to compensate.
  - Incorporating some upstream changes, most notably the --sort option.


author: Matthias Saou <http://freshrpms.net/> 1.24-9
changelog:
  - Spec file cleanup.
  - Update License field.
  - Don't "chkconfig --del" upon update.
  - Add missing kernel-headers build requirement.
  - Update URL and Source locations.
  - Remove outdated piranha obsoletes, it has never been part of any Fedora.
  - No longer mark init script as config.
  - Include Makefile patch to prevent stripping and install init script.
  - The init script could use a rewrite... leave that one for later.


author: Matthias Saou <http://freshrpms.net/> 1.24-10
changelog:
  - Update to latest upstream sources. Same filename, but updated content!
  - Update kernhdr patch for it to still apply, update ip_vs.h from 1.2.0 to
    1.2.1 from kernel 2.6.23.1.


author: Matthias Saou <http://freshrpms.net/> 1.25-1
changelog:
  - Prepare update to 1.25 for when devel will update to kernel 2.6.28.
  - Build require libnl-devel and popt-devel (+ patch to fix popt detection).


author: Matthias Saou <http://freshrpms.net/> 1.26-2
changelog:
  - Backport the init script from RHEL6, which contains lots of changes to make
    it behave simlarly to the iptables init script (#593276).


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.3-5
changelog:
  - Make irqbalance scan for new irqs when it detects new irqs (bz832815)
  - Fixes SIGFPE crash for some banning configuration (bz849792)
  - Fixes affinity_hint values processing (bz832815)
  - Adds banirq and bansript options (bz837049)
  - imake isn't needed for building any more (bz844359)
  - Fixes clogging of syslog (bz837646)
  - Added IRQBALANCE_ARGS variable for passing arguments via systemd(bz837048)
  - Fixes --hint-policy=subset behavior (bz844381)


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.6-5
changelog:
  - Fixed irqbalance web adresses in spec (bz1060810)
  - Default hintpolicy adjusted (bz1060814)
  - Missing autogen.sh call fixed


author: Petr Holasek <pholasek@redhat.com> - 2:1.0.7-2
changelog:
  - fixed unused variable revealed by covscan
  - fixed ignored pid argument (#1155632)
  - warning when irqbalance started under non-root (#1155799)
  - more robust signal handling (#1158937)
  - fixed hostname in manpage (#1162251)


author: Dams <anvil[AT]livna.org> 0:0.8.9-0.fdr.2
changelog:
  - Fixed changelog typo
  - Added trigger.pl as replace.pl wont be maintained anymore
  - Updated replace.pl to 0.1.4 version
  - Added replace.pl URL in Source tag
  - Removed .packlist files
  - Added as doc a script to convert pref from replace.pl to trigger.pl


author: Dams <anvil[AT]livna.org> - 0.8.10-0.1.rc7
changelog:
  - Dropped patch 2 (seems applied upstream) and 3 (no longer needed)
  - Removed conditionnal build against glib1 parts


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.8.15-8
changelog:
  - Fixed crash that can occur if term is resized during irssi init
    (init-resize-crash-fix patch)
    Resolves: rhbz#796457


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-11
changelog:
  - Fix iscsid autostarting when upgrading from an older version
    (add iscsid.startup key to iscsid.conf on upgrade)
  - Fix printing of [ OK ] when successfully stopping iscsid
  - systemd related fixes:
   - Add Should-Start/Stop tgtd to iscsi init script to fix (re)boot from
     hanging when using locally hosted targets
   - %ghost /var/lock/iscsi and contents (#656605)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-12
changelog:
  - Change iscsi init scripts to check for networking being actually up, rather
    then for NetworkManager being started (#692230)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.18
changelog:
  - 789683 Fix boot slow down when the iscsi service is started
    (regression added in 6.2.0.872.16 when the nm wait was added).


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - rebase to new upstream code
  - systemd conversion
  - 565245 Fix multilib issues caused by timestamp in doxygen footers


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-4
changelog:
  - build with libkmod support, instead of calling out to modprobe
  - enable socket activation by default


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-19
changelog:
  - 1007388 fixes for iscsiadm to support qla4xxx
  - refresh boot session info patches to final version from upstream,
    fixes context issues with later patches
  - 1006156, 1006161 Add/Update entries in chap table through Open-iSCSI
  - 948134 extend support to set additional parameters for network configuration
  - 1049710 update open-iscsi to support host statistics
  - 1043019 iscsiuio fix for arp cache flush issue
  - 1059332 Fix broken discovery sessions over iser
  - 1017393 split out iscsiuio into a seperate sub-package


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-20
changelog:
  - 1049710 host0 being treated as an invalid in the host stats command
  - 1015563 revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - 1069825
  - boot session handling improvements
  - Fix iscsi-mark-root for changed iscsiadm output
  - Make sure iscsiuio is running for boot session recovery when using the
    bnx2i transport by forcing iscsiuio.service start
  - Make NM dispatch triggered re-check for autostart sessions async
  - Accept exit code 21, no records, from iscsiadm as success in
    iscsi.service


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-22
changelog:
  - 1081798 retry login on host not found error
  - 1111925 ignore iscsiadm return in iscsi.service
  - 1126524 make sure systemd order against remote mounts is correct
  - 963039 add discovery as a valid mode in iscsiadm.8
  - sync with upstream


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24
changelog:
  - 1040343 segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-29
changelog:
  - 1166713 1187792 add missing ExecStart, only newer systemd lets that be optional for oneshot services


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-32
changelog:
  - 1235684 apply safe_logout setting to flashnode sessions as well
    but only when logging out by session id, not by flashnode index


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-34
changelog:
  - 1322000 ensure TCP abort on session failure to prevent data corruption with link flap
  - 1294964, 1265073, 1213569 iscsiuio update, fix small ARP table issue
  - 1309488 remove broken sysfs cache code to speed up login of many sessions
  - 1330348 sync with upstream Open-iSCSI for minor fixes


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-6
changelog:
  - 1507945 force start iscsiuio for boot session recovery with qedi
  - 1457359 start systemd socket listeners, otherwise if iscsid is started
    directly iscsiuio doesn't activate as expected


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-12
changelog:
  - 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
  - 1624670 Login negotiation failed due to CHAP_N values do not match
            (rec update race condition)


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-17
changelog:
  - 1518367 boot from iSCSI not establishing all sessions persistently
  - 1667965 A manual restart of iscsi.service modifies records node.startup value


author: Chris Leech <cleech@redhat.com> - 6.2.0.874-18
changelog:
  - 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)


author: Florian La Roche <Florian.LaRoche@redhat.com>
changelog:
  - use relative instead of absolute link in postinstall script
  - use only one patch-file for the config file
  - change from 0700 to 0755 perms
  - change Makefiles instead of moving things around in the spec file
  - include the manpages of the X11 progs only in the xisdnload rpm


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - fix compilation with kernel 2.4.x
  - rebuild with new ncurses and Tcl
  - enable building of eurofile and divertctl stuff


author: Than Ngo <than@redhat.de>
changelog:
  - rebuilt for 7.0
  - FHS fixes
  - fix dependencies problem with new tcltk
  - fix to built with kernel-2.4


author: Than Ngo <than@redhat.de>
changelog:
  - add more documents
  - and missing config files to isdnlog
  - some fixes in vbox, isdnlog, vboxgetty
  - mark ioptions as %config(noreplace)
  - add pppdcapiplugin
  - add missing /sbin/ldconfig in %post and %postun
  - fix to build on ia64


author: Than Ngo <than@redhat.com>
changelog:
  - split package into isdn4k-utils, isdn4k-utils-vboxgetty, xisdnload
  - convert old isdn configuration format into new format
  - add startup script for loading module and starting isdnlog


author: Than Ngo <than@redhat.com>
changelog:
  - make isdnctrl executable by normal users (Bug #30803)
  - fix a minor bug in triggerpostun
  - fix rebuild problem in beehive if kernel-source is missed


author: Than Ngo <than@redhat.com> 3.1-47
changelog:
  - fixed symlinks bugs (bug #55306)
  - fix a bug in converting of old isdn configuration (bug #55083)
  - some hacks for ASUS COM ISDNLink ISA PnP


author: Than Ngo <than@redhat.com> 3.1-48
changelog:
  - new upstream
  - remove some unused patch files
  - move pppcapiplugin to /usr/lib/pppd, The plugin option now looks in here
  - devel sub package
  - buildreqquires: linuxdoc-tools


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.1-50
changelog:
  - new upstream, needed to switch isdnlog to EUR currency for contries that
    have it
  - fix installation of pppcapiplugin man page
  - don't build against 2.4.5 kernel headers, they're not compatible with
    2.4.17.


author: Than Ngo <than@redhat.com> 3.2-10.p1
changelog:
  - fix build problem with new libpcap

  -* Wed Jan 14 2004 Than Ngo <than@redhat.com> 3.2-9.p1
  - fixed permission problem


author: Than Ngo <than@redhat.com> 3.2-16.p1.1
changelog:
  - fix build problem with gcc-3.4
  - fix typo bug in isdnlog, bug #120568
  - fix capiplugin for working with pppd 2.4.2, bug #125723


author: Than Ngo <than@redhat.com> - 3.2-62
changelog:
  - fix #398121, capiplugin.so uses non-existent libcapi20.so
  - fix CAPI overflow
  - fix #471712, add sh architecture support


author: Than Ngo <than@redhat.com> - 3.2-69
changelog:
  - fix quotation issue with autoconf-2.64
  - fix bz#556056, split off -static subpackage
  - fix bz#539020, FTBFS


author: Than Ngo <than@redhat.com> - 3.2-70
changelog:
  - enable capi.new
  - add 40-isdn.rules, it's dropped from udev in F14 and later
  - fix multilib issue
  - add subpackage doc


author: Than Ngo <than@redhat.com> - 3.2-71
changelog:
  - fix bz#566909, thanks to Louis Lagendijk
      - own LIBDIR/capi
      - fix loading of plugins
      - remove chkconfig capi off


author: Than Ngo <than@redhat.com> - 3.2-72
changelog:
  - bz#545469, put vboxgetty config file in correct directory
  - fix wrong exit status in startup scrripts


author: Than Ngo <than@redhat.com> - 3.2-75
changelog:
  - apply patch to fix man pages, thanks to John Bradshaw
    bz#673794, bz#665079, bz#663637, bz#675715, bz#669053, bz#675676, bz#669081,
    bz#675604, bz#675679, bz#664335, bz#674204, bz#669091


author: Than Ngo <than@redhat.com> - 3.2-94
changelog:
  - Resolves: bz#1060370
    update patch to handle all cases by recursing through fmtmsg
    instead of vfmtmsg directly which depends on va_list type.


author: Chris Leech <cleech@redhat.com> - 0.93-4
changelog:
  - set hardened build flag, required for long running processes (isnsd)
  - patch makefile to actually use LDFLAGS


author: Jeremy Katz <katzj@redhat.com> - 1:1.0.4-1
changelog:
  - Add man pages from Ryan Finnie (ryan AT finnie DOT org)
  - Use popt in checkisomd5 (Ryan Finnie)
  - Fix verbose/gauge interactions (Ryan Finnie)
  - A few other little janitorial things (Ryan Finnie)


author: Radek Vykydal <rvykydal@redhat.com> - 1:1.0.6-1
changelog:
  - Add abort check feature (#555107) (dpierce, rvykydal)
    Changes prototype of exported checkMediaFile function.
  - Fix exit value of checkisomd5 (rvykydal)
  - Remove output to stderr from library (#576251) (bcl)
  - Use separate return value for image not found (#578160) (bcl)


author: Brian C. Lane <bcl@redhat.com> 1.0.9-1
changelog:
  - Add python-isomd5sum package with python bindings
  - Add callback and interrupt support to the python library
  - Add RPM_OPT_FLAGS to CFLAGS and update makefile to use CFLAGS from environment


author: Brian C. Lane <bcl@redhat.com> 1.0.10-1
changelog:
  - Fix for gcc type-punned and sizeof pointer warnings. (bcl)
  - Add exit code 2 for user abort (#907600) (bcl)
  - Cleanup TABs and update Copyrights (bcl)
  - Standardize *FLAGS in Makefile (ryan)


author: Dave Anderson <anderson@redhat.com> - 01.00.00.2113-1
changelog:
  - Copied upstream v01.00.00.2113.tar.gz into ixpdimm_sw-01.00.00.2113.tar.gz
    and did an rhpkg new-sources to replace the mismatched checksum version 
    included in the Fedora src.rpm
  - Resolves: rhbz#1270993


author: Eric Sandeen <sandeen@redhat.com> - 01.00.00.2111-1
changelog:
  - Downgrade to v01.00.00.2113 to satisfy existing RHEL7 deps
  - Add explicit inter-package dependencies
  - Resolves: rhbz#1270993


author: Sean Middleditch <sean@middleditch.us> 1.1.3-2
changelog:
  - Fix Changelog dates.
  - Mix autoheader warning.
  - Added make check.
  - Build and install HTML documentation in -devel package.


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.900.1-4
changelog:
  - -libs subpkg to be multilib friendlier
  - -utils subpkg for non-essential binaries jiv, tmrdemo (#244153)


author: Rex Dieter <rdieter@fedoraproject.org> - 1.900.1-13
changelog:
  - CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
  - CVE-2008-3522 jasper: possible buffer overflow in 
    jas_stream_printf() (#461478)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-18
changelog:
  - CVE-2011-4516, CVE-2011-4517 jasper: heap buffer overflow flaws
    lead to arbitrary code execution (CERT VU#887409) (#765660)
  - Fixed problems found by static analysis of code (#761440)
  - spec file modernized


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-27
changelog:
  - CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                    marker segment decoders (#1171211)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-28
changelog:
  - CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173569)
  - CVE-2014-8138 - heap overflow in jp2_decode (#1173569)


author: Jiri Popelka <jpopelka@redhat.com> - 1.900.1-29
changelog:
  - CVE-2014-8157 - dec->numtiles off-by-one check in jpc_dec_process_sot() (#1183674)
  - CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183682)


author: Josef Ridky <jridky@redhat.com> - 1.900.1-30
changelog:
  - Multiple security fixes (fixed by thoger):
    CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
    CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
    CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
    CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
    CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
    CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
  - Fix implicit declaration warning caused by security fixes above


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-59.1.10.3
changelog:
  - updated to icedtea6 1.10.3
  - http://blog.fuseyism.com/index.php/2011/07/21/icedtea6-1103-released/


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - updated to icedtea6 1.10.4
  - Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)
    - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
  - Bug fixes
    - RH727195 : Japanese font mappings are broken
  - Backports
    - S6826104, RH730015: Getting a NullPointer exception when clicked on Application & Toolkit Modal dialog
  - Zero/Shark
    - PR690: Shark fails to JIT using hs20.
    - PR696: Zero fails to handle fast_aldc and fast_aldc_w in hs20.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-60.1.10.4
changelog:
  - omajid have added Patch6 as (probably temporally) solution for S7103224 for buildability on newest glibc libraries.


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.64.1.11.12
changelog:
  - Removed the temporary libffi-compat-5 requirement
  - Updated BR to java6-1.6.0-devel
  - Build with OpenJDK6 specifically


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - removed patch100: 8000791-regression-fix.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - added:
     - Patch103 type_hsx23_patch3.patch
     - Patch104 type_hsx23_patch4.patch
   -to fix zero type error
   -aplied everywhere, as should go upstream
  - Resolves: rhbz#1018679


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed upstreamed  patch103 type_hsx23_patch3.patch
  - Resolves: rhbz#1053279


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1099563


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - added upstreamed patch patch9 rh1115580-unsyncHashMap.patch
  - Resolves: rhbz#1115870
  - forwardported from rhel 6.6, patch10, add-final-location-rpaths.patch (rh1059925)
   - Work when capabilities are set on the binary
   - Include hardcoded install path as well as $ORIGIN in RPATH
   - Don't Expect LD_LIBRARY_PATH to be set in the launcher


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Remove upstreamed patches.
  - Regenerate add-final-location-rpaths patch against new release.
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - Use xz for tarballs to reduce file size.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148902


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Remove upstream patch type_hsx23_patch4.patch.
  - Regenerate add-final-location-rpaths patch against new release.
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Regenerate add-final-location-rpaths patch against new release.
  - Resolves: rhbz#1180293


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.35-1.13.7.0
changelog:
  - Update to IcedTea 1.13.7
  - Regenerate add-final-location-rpaths patch so as to be less disruptive.
  - Add ExcludeArch directive for RH1209326
  - Resolves: rhbz#1209068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235154


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.2
changelog:
  - Update with newer tarball, including 6763122 fix for TCK regression.
  - Use release + 1 to avoid having a lower version than the 6.7 version.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.3
changelog:
  - Update with new IcedTea & b37 tarballs, including Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.4
changelog:
  - Update with new IcedTea & b37 tarballs, including more Kerberos fixes for TCK regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.37-1.13.9.5
changelog:
  - Update with new IcedTea & b37 tarballs, including fix for appletviewer regression.
  - Resolves: rhbz#1271931


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.38-1.13.10.3
changelog:
  - Remove dependencies no longer needed by modern IcedTea 1.x and current RPM build.
  - Explicitly disable downloading, removing the need for wget.
  - Resolves: rhbz#1308687


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.1
changelog:
  - Update to IcedTea 1.13.12 & OpenJDK 6 b40.
  - Separate SystemTap option from bootstrap options.
  - Depend on mailcap for /etc/mime.types (PR2800)
  - Use configure macro and disable long-running JTreg & SystemTap tests from make check
  - Remove redundant patch-ecj target invocation for bootstrap build.
  - Add check section to run the new tests introduced in 1.13.12.
  - Fix context for rpath patch following PR3140.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.2
changelog:
  - Require mailcap at build time as well, so configure finds /etc/mime.types
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.3
changelog:
  - Separate bootstrap option as it should not be tied to the JDK used.
  - Enable bootstrapping on JIT architectures going forward.
  - Temporarily enable bootstrapping on all architectures to work around RH1334465/PR2956.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.5
changelog:
  - Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.8
changelog:
  - Set install directories in configure so that @prefix@ is substituted correctly in tapset
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.40-1.13.12.9
changelog:
  - Require a JDK with RH1334465/PR2956 fixed and turn off bootstrapping for Zero architectures.
  - Resolves: rhbz#1350047


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.41-1.13.13.0
changelog:
  - Update to IcedTea 1.13.13 & OpenJDK 6 b41.
  - Fix context for rpath patch following PR3213.
  - Resolves: rhbz#1381990


author: Omair Majid <omajid@redhat.com> - 1.7.0.19-2.3.9.12.el7
changelog:
  - Allowed multiple OpenJDKs to be installed in parallel
  - Removed archname
  - Added arch to all, not only multilib arches
  - uniquesuffix is now holding fully versioned name
  - Intorduced source11 remove-buildids.sh


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.13.el7
changelog:
  - javadoc put into fully versioned directory, but without arch (to be kept noarch)
   - uniquejavadocdir
  - updated to latest 2.3.9 tarball - fixing the rhbz#967436


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.9.14.fc19
changelog:
  - Added client/server directories so they can be owned
  - Renamed patch 107 to 200
  - Added nss support from 6.5
  - Added fix for RH857717, owned /etc/.java/ and /etc/.java/.systemPrefs
  - Removed ant-nodeps, should not be needed


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.19-2.3.10.0.el7
changelog:
  - fixed RH972717 by enabling patch110 java-1.7.0-openjdk-nss-icedtea-e9c857dcb964.patch
  - temporarly swithced to intree lcms as it have security fixes (patch 500)
   - added  GENSRCDIR="$PWD/generated.build" to be able to
   - removed (build)requires  lcms2(-devel)
  - Updated to latest IcedTea7-forest 2.3.10


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.3.el7
changelog:
  - update of IcedTea7-forest 2.3.10 tarball
  - removed patch1000 MBeanFix.patch to fix regressions caused by security patches


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.10.4.el7
changelog:
  - Sync with upstream IcedTea7-forest 2.3.10 tag
  - Fixes regressions as introduced with 1.7.0.25-2.3.10.3.el6:
    rhbz#978005, rhbz#977979, rhbz#976693, IcedTeaBZ#1487.
  - all patch commands repalced by patch macro
    - updated java-1.7.0-openjdk-ppc-zero-hotspot.patch to pass without loose patching


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.11.0.el7
changelog:
  - added new alternatives jre-1.7.0-openjdk and java-1.7.0-openjdk 
  - finally merged arm and main source tarballs
  - updated to icedtea 2.3.11
   - http://blog.fuseyism.com/index.php/2013/07/25/icedtea-2-3-11-released/
  - added removal of new jre-1.7.0-openjdk and java-1.7.0-openjdk alternatives
  - removed patch 400, rhino for 2.1 and other 2.1 conditional stuff
  - removed patch 103 arm-fixes.patch
  - removed "dir" from files which was duplicating jre in sdk


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.3.12.2.el7
changelog:
  - refreshed icedtea7-forest 2.3.12
  - fix broken jre_exports alternatives links (thanx to orion bug #979128)


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.2.7.el7
changelog:
  - fixed incorrect  _jvmdir/jre-javaver_origin to  _jvmdir/jre-javaver-origin link
  - Resolves:rhbz#875408


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.2.fel7
changelog:
  - added and applied patch121, FixPPC64StackOverflow.patch
  - all redundant ppc64 strings replaced by power64 macro
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.3.fel7
changelog:
  - just bumped release, need to confirm, that   patch121, FixPPC64StackOverflow.patch
    really works
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.40-2.4.3.4.fel7
changelog:
  - Removed obsoletes for java-1.6.0-openjdk* ,  until decided its presence in el7
  - Resolves:rhbz#1018680


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.0.el7
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 0
  - sync with fedora
   - added and applied patch411 1029588.patch (rh 1029588)
   - added aand applied patch410, 1015432 (rh 1015432)
   - and so removed patch121 FixPPC64StackOverflow.patch
  - added patch412 zero-x32.diff to try to fix zero builds build
  - Resolves: rhbz#1053280


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.5.0.el7
changelog:
  - updated to icedtea 2.4.5 + sync with f21
   - http://blog.fuseyism.com/index.php/2014/01/29/icedtea-2-4-5-released/
  - removed buildRequires: pulseaudio >= 0.9.11, as not neccessary
   -  but kept libs-devel)
  - removed upstreamed or unwonted patches (thanx to gnu_andrew to pointing them out)
   - patch410 1015432.patch (upstreamed)
   - patch411 1029588.patch
   - patch412 zero-x32.diff
   - patch104 java-1.7.0-ppc-zero-jdk.patch
   - patch105 java-1.7.0-ppc-zero-hotspot.patch
  - patch402 gstackbounds.patch and patch403 PStack-808293.patch applied always
   (again thanx to gnu_andrew)
  - merged other gnu_andrew's changes
   - FT2_CFLAGS and FT2_LIBS hardoced values replaced by correct pkg-config calls 
   - buildver bumbed to 31
  - added build requires  nss-devel
  - removed build requires mercurial
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS into make call
  - Related: rhbz1038092


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el7
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed upstreamed patch402 gstackbounds.patch
  - removed Requires: rhino, BuildRequires is enough
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.6 forward port)
  - nss enabled, but notused as default (6.6 forward port)
  - Resolves: rhbz#1099565


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1.7.0.55-2.4.7.2
changelog:
  - Remove NSS patches. Issues with PKCS11 provider mean it shouldn't be enabled.
  - Always setup nss.cfg and depend on nss-devel at build-time to do so.
  - This allows users who wish to use PKCS11+NSS to just add it to java.security.
  - Patches to PKCS11 provider will be included upstream in 2.4.8 (ETA July 2014)
  - Resolves: rhbz#1099565


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115877


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.65-2.5.1.5
changelog:
  - Add workaround to build on ppc64le where arch directory is still ppc64le, not ppc64
  - Resolves: rhbz#1125557


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.7
changelog:
  - added and applied patch666 stackoverflow-ppc32_64-20140828.patch
  - returned ppc (rebuild in brew must be done by 2.4.x)
  - Resolves: rhbz#1125557


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.65-2.5.1.10
changelog:
  - Add patches for PPC zero build.
  - Fixes stack overflow problem. See RHBZ#1015432.
  - Fixes missing memory barrier in Atomic::xchg*
  - Fixes missing PPC32/PPC64 defines for Zero builds on power.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1.7.0.65-2.5.1.11
changelog:
  - Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in
    the bytecode verifier on ppc/ppc64.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 for latest security fixes.
  - Remove obsolete patches and CFLAGS which are now upstream.
  - Add hsbootstrap option to pre-build HotSpot when required.
  - Resolves: rhbz#1148894


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.3
changelog:
  - Set ENABLE_FULL_DEBUG_SYMBOLS=0 for aarch64 to retain debuginfo in files.
  - Resolves: rhbz#1148894


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.71-2.5.3.4
changelog:
  - aarch64 sources updated to most recent stable tag
  - adapted patch4030 PStack-808293-aarch64.patch
  - removed upstreamed CPU patches (patch500-509, 20141014*)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Bump AArch64 port to 2.6.0pre17.
  - Fix rh1648241-rh1648241-abrt_friendly_hs_log_jdk7.patch to apply again and enable on all archs.
  - Remove OpenJDK 8 / AArch64 version of PStack patch as this is no longer needed.
  - Resolves: rhbz#1180298


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.75-2.5.4.3
changelog:
  - removed source14 remove-origin-from-rpaths (1169097)
  - removed build requirement for chrpath
  - Resolves: rhbz#1180298


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.4
changelog:
  - Symlink ppc64 directory to ppc64le
  - Run test application to print architecture-specific paths stored in the JDK
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix patch for RH1191652 to override LIBARCH on ppc64le as there is no BUILDARCH
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.5
changelog:
  - Fix hsbootstrap option on ppc64le where JDK_TO_BUILD_WITH is changed.
  - Print uname to feedback to upstream OpenJDK.
  - Resolves: rhbz#1191652


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.79-2.5.5.0
changelog:
  - Bump to 2.5.5 using OpenJDK 7u79 b14.
  - Update OpenJDK tarball creation comments
  - Remove test case for RH1191652 now fix has been verified.
  - Drop AArch64 version of RH1191652 HotSpot patch as included upstream.
  - Resolves: rhbz#1209073


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers.
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Add GConf2-devel dependency for native proxy fallback support.
  - Remove libxslt dependency pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.1
changelog:
  - Pass SYSTEM_GSETTINGS="true" to the OpenJDK build to explicitly enable the GSettings API.
  - Resolves: rhbz#1194226


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.91-2.6.2.1
changelog:
  - Bump to 2.6.2 and u91b00.
  - Disable system LCMS 2 for now until security of it can be verified.
  - Drop patches for PR2560/RH1245855 as now applied upstream.
  - Sync minor changes from RHEL 6 spec file.
  - Resolves: rhbz#1271923


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.91-2.6.2.4
changelog:
  - fixed headless to become headless again
   - jre/lib/archinstall/libjavagtk.so
   - jre/bin/policytool
   - jre-abrt/lib/archinstall/libjavagtk.so
   - all three added to not headless exclude list
  - see rhbz1141123
  - Resolves: rhbz#1278987


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.95-2.6.4.1
changelog:
  - Bump to 2.6.4 and u95b00.
  - Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
  - Drop 8072932or8074489 patch as applied upstream in u91b01.
  - Add MD5 checksums for last two version of the java.security file.
  - Correct date of ChangeLog entry below.
  - Resolves: rhbz#1295769


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.99-2.6.5.1
changelog:
  - Bump to 2.6.5 and u99b00.
  - Correct check for fsg.sh in tarball creation script
  - Drop AArch64 ADRP backports (8143067, 8146709) included in 2.6.5
  - Resolves: rhbz#1320659


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.1
changelog:
  - Bump to 2.6.6 and u101b00.
  - Drop AArch64 patch (PR2914) included in 2.6.6
  - Drop a leading zero from the priority as the update version is now three digits
  - Update PR2809 patch to apply against 2.6.6.
  - Resolves: rhbz#1325428


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.101-2.6.6.3
changelog:
  - added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654
  - Resolves: rhbz#1296441


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.101-2.6.6.4
changelog:
  - luascripts extracted and used from separate package
  - added requirement on at least build time nss
  - added --family and dependence on chkconfig >=1.7
  - in adition, family is restricted by arch
  - Resolves: rhbz#1296441
  - Resolves: rhbz#1296413


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.101-2.6.6.6
changelog:
  - Add fix for 8069181/PR3012 and pre-requisites from PR3013.
  - Add bug information for backports from last CPU.
  - Resolves: rhbz#1015612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.1
changelog:
  - Bump to 2.6.7 and u111b00.
  - Update SystemTap bundle with fix for PR3091/RH1204159
  - Drop patches (PR2938, PR2939, PR3012, PR3013 and PR1437) applied upstream.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.2
changelog:
  - Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.3
changelog:
  - Add additional changes to 8162344 to fix issues which only show up on a full build.
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.4
changelog:
  - Require a version of java-1.7.0-openjdk-devel with a working jar uf
  - Use readlink rather than a wildcard to resolve the system JDK directory
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.5
changelog:
  - Change to disable RC4 did not add MD5 checksum of previous java.security file from 2016/01
  - Resolves: rhbz#1350042


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.111-2.6.7.6
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.111-2.6.7.7
changelog:
  - Rebuild java-1.7.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372747)
  - Resolves: rhbz#1350042


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.121-2.6.8.0
changelog:
  - Bump to 2.6.8 and u121b00.
  - Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
  - Update md5sum list with checksum for the new java.security file.
  - Resolves: rhbz#1381990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.1
changelog:
  - Bump to 2.6.9 and u131b00.
  - Remove patch application debris in fsg.sh.
  - Re-generate PR2809 and RH1022017 against 2.6.9.
  - Update md5sum list with checksum for the new java.security file.
  - Add blacklisted.certs to installation file list.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.2
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Handle unsupported architectures by calling the error function rather than a parse failure
  - ABS_JAVA_HOME_DIR is no longer used in the updated tapsets
  - Resolves: rhbz#1373986


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.131-2.6.9.3
changelog:
  - Backport "8173783: IllegalArgumentException: jdk.tls.namedGroups"
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1422738


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.1
changelog:
  - Bump to 2.6.10 and u141b00.
  - Add more detailed output to fsg.sh and generate_source_tarball.sh.
  - Update md5sum list with checksum for the new java.security file.
  - Drop 8173783 backport which is now applied upstream.
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.3
changelog:
  - Add support for using RSAandMGF1 with the SHA hash algorithms in the PKCS11 provider 
  - Resolves: rhbz#1273760


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.141-2.6.10.4
changelog:
  - Fix merge error with "native2ascii changes file permissions of input file"
  - Resolves: rhbz#1446700


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.141-2.6.10.5
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - aligned with this change, applied repackReproduciblePolycies.sh
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.2
changelog:
  - Bump to 2.6.11 and u151b00.
  - Update java-access-bridge-security.patch to apply against 2.6.11.
  - Drop 7177216 merge fix which is applied upstream.
  - Apply fix for 8185716 so ppc uses correct ins_encode format
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.151-2.6.11.4
changelog:
  - Add backport of 8075484/PR3473/RH1490713 (SocketInputStream.socketRead0 hang)
  - Resolves: rhbz#1490713


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.1
changelog:
  - Bump to 2.6.12 and u161b00.
  - Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
  - Drop 8185716, 8145438, 8138745 and 8075484 patches, all applied upstream.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.1
changelog:
  - Add missing implementation of Matcher::pass_original_key_for_aes() on AArch64 (PR3497)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.161-2.6.12.2
changelog:
  - Need to quote ourcppflags/ourldflags so as not to break on spaces.
  - Add flags to both make invocations.
  - Drop -fstack-protector-strong addition as provided by distro.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Bump to 2.6.13 and u171b01.
  - Update rh1648644-java_access_bridge_privlidged_security.patch to apply after 8186080
  - Drop PR3497 AArch64 patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Fix missing return statement in hotspot/src/cpu/aarch64/vm/c1_LIRAssembler_aarch64.cpp.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Fix missing return statement in hotspot/src/os_cpu/linux_aarch64/vm/os_linux_aarch64.cpp
  - Temporarily add -Wno-error=return-type so we can catch them all.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Extend pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch so Token.getMechanismInfo can handle CK_MECHANISM
  - Fix missing return statement in hotspot/src/cpu/aarch64/vm/vm_version_aarch64.cpp
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Update to new tarball with AArch64 return value fixes, dropping local patch.
  - Drop -Wno-error=return-type now they appear to be fixed.
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.1
changelog:
  - Spoke too soon... fix missing return statement in src/os_cpu/linux_zero/vm/os_linux_zero.cpp (non-LP64 only)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.171-2.6.13.2
changelog:
  - Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.1
changelog:
  - Bump to 2.6.14 and u181b00.
  - Drop 8197981 Zero 32-bit patch now applied upstream.
  - Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.2
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.6
changelog:
  - added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.7.0.181-2.6.14.11
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Add reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.181-2.6.14.11
changelog:
  - Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.191-2.6.15.1
changelog:
  - Bump to 2.6.15 and u191b00.
  - Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.16.1
changelog:
  - Bump to 2.6.16 and u201b00.
  - Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.201-2.6.17pre01.0
changelog:
  - Bump to 2.6.17pre01.
  - Add support for icedtea_snapshot so we can build pre-releases.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Bump to 2.6.17.
  - Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
  - Regenerate pr3393-rh1273760-support_rsaandmgf1_with_sha_in_pkcs11.patch against current sources
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.2
changelog:
  - Synchronise Requires with java-1.8.0-openjdk
  - Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
  - Add libjavagtk.so and libmawt.so to _privatelibs
  - Remove duplicate fontconfig build requirement
  - Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
  - Add _isa to NSS requirements
  - Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
  - Resolves: rhbz#1608957


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.1
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.261-2.6.22.1
changelog:
  - Add release notes from IcedTea.
  - Mark license files with appropriate macro.
  - Resolves: rhbz#1810557


author: Omair Majid <omajid@redhat.com> 1:1.8.0.0-0.5.b87
changelog:
  - Update to b87
  - Remove all rhino support; use nashorn instead
  - Remove upstreamed/unapplied patches


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.11.b89
changelog:
  - prelink dependence excluded also for aaech64
  - arm64 added to jitarches
  - added source100 config.guess to repalce the outdated one in-tree
  - added source101 config.sub  to repalce the outdated one in-tree
  - added patch2011 system-libjpegAARCH64.patch (as aarch64-port is little bit diferent)
  - added patch2031 system-lcmsAARCH64.patch (as aarch64-port is little bit diferent)
  - added gcc-c++ build depndece so builddep will  result to better situation


author: Deepak Bhole <dbhole@redhat.com> - 1:1.8.0.0-0.15.b89
changelog:
  - Added a missing includes patch (#302/%{name}-arm64-missing-includes.patch)
  - Added --disable-precompiled-headers for arm64 build


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-0.26.b129
changelog:
  - Add -headless subpackage based on java-1.7.0-openjdk
  - Add abrt connector support
  - Add -accessibility subpackage


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.0-0.31.b132
changelog:
  - updated to rc4 aarch64 tarball
  - outdated removed: patch2031 system-lcmsAARCH64.patch patch2011 system-libjpeg-aarch64.patch
    patch2021 system-libpng-aarch64.patch


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.0-2.b132
changelog:
  - Include version information in desktop files
  - Move desktop files from tarball to top level source


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-11.b12
changelog:
  - backporting old fixes:
  - get rid of jre-abrt, uniquesuffix, parallel install, jsa files,
    config(norepalce) bug, -fstack-protector-strong, OrderWithRequires,
    nss config, multilib arches, provides/requires excludes
  - some additional cosmetic changes


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-12.b12
changelog:
  - bumped release to build by previous release.
  - forcing rebuild by jdk8
  - uncommenting forgotten comment on tzdb link


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.11-17.b12
changelog:
  - added build requires and requires for headles  _datadir/javazi-1.8/tzdb.dat
  - restriction of tzdata provider, so we will be aware of another possible failure


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b01
changelog:
  - updated to u40-b01
  - adapted  rh1648242-accessible_toolkit_crash_do_not_break_jvm.patch
  - adapted  jdk8042159-allow_using_system_installed_lcms2.patch
  - removed patch8 set-active-window.patch
  - removed patch9 javadoc-error-jdk-8029145.patch
  - removed patch10 javadoc-error-jdk-8037484.patch
  - removed patch99 applet-hole.patch - itw 1.5.1 is able to ive without it


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.40-1.b02
changelog:
  - adapted aarch64 patch
  - removed upstreamed patch  0001-PPC64LE-arch-support-in-openjdk-1.8.patch
  - added patch666 stackoverflow-ppc32_64-20140828.patch
  - commented out patch2 1015432.patch (does nearly the same as new patch666)
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.40-5.b26
changelog:
  - Update aarch64 hotspot to jdk7u40-b02 to match the rest of the JDK
  - Do not obsolete java-1.7.0-openjdk
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.20-2.b26
changelog:
  - moving all ppc64 to jit arches
  - using cpp interpreter for ppc64le
  - removing requirement on datadir/javazi-1.8/tzdb.dat
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-5.b26
changelog:
  - Update aarch64 hotspot to latest upstream version
  - Depend on java-1.7.0-openjdk to work around self-building issues
  - Resolves: rhbz#1125260


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-8.b26
changelog:
  - Add patches for PPC zero build.
  - Fixes stack overflow problem. See RHBZ#1015432.
  - Fixes missing memory barrier in Atomic::xchg*
  - Fixes missing PPC32/PPC64 defines for Zero builds on power.
  - Resolves: rhbz#1125260


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.20-9.b26
changelog:
  - Add hotspot compiler flag -fno-tree-vectorize which fixes the segfault in
    the bytecode verifier on ppc/ppc64.
  - Resolves: rhbz#1125260


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.20-10.b26
changelog:
  - Remove LIBDIR and funny definition of _libdir.
  - Fix rpmlint warnings about macros in comments.
  - Resolves: rhbz#1125260


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.25-3.b17
changelog:
  - added patch12,removeSunEcProvider-RH1154143
  - xdump excluded from ppc64le (rh1156151)
  - Add check for src.zip completeness. See RH1130490 (by sgehwolf@redhat.com)
  - Resolves: rhbz#1125260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Fix configure script to use ppc64le, not ppc64.
  - Add ppc64le support to LIBJSOUND_CFLAGS.
  - Add a jvm.cfg for ppc64le
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Print contents of spec.gmk to see what is being passed to the HotSpot build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Set OPENJDK_TARGET_CPU_LEGACY to ppc64 so as not to mess up HotSpot build.
  - Add -DABI_ELFv2 to CFLAGS on ppc64le to match OpenJDK 7.
  - Print contents of hotspot-spec.gmk
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-4.b13
changelog:
  - Override ppc64le as ppc64 only in hotspot-spec.gmk so as not to disrupt JDK build.
  - Add property test case from java-1.7.0-openjdk build.
  - Resolves: rhbz#1194378


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.31-6.b13
changelog:
  - Adjust ppc64le HotSpot patch for OpenJDK 8.
  - Enable AArch64 configure/JDK patch on all archs to minimise patching issues.
  - Adjust ppc64le patches to apply after the enableAArch64 patch.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Resolves: rhbz#1194378


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-27.b13
changelog:
  - updated to security u45
  - minor sync with 7.2
   - generate_source_tarball.sh
   - adapted java-1.8.0-openjdk-s390-java-opts.patch and java-1.8.0-openjdk-size_t.patch
   - reworked (synced) zero patches (removed 103,11 added 204, 400-403)
   - family of 5XX patches renamed to 6XX
   - added upstreamed patch 501 and 505
   - included removeSunEcProvider-RH1154143.patch
  - returned java (jre only) provides
  - repacked policies (source20)
  - removed duplicated NVR provides
  - added automated test for priority (length7)
  - Resolves: RHBZ#1209077


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-34.b13
changelog:
  - Omit jsa files from power64 file list as well, as they are never generated
  - Resolves: rhbz#1202726


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.45-35.b13
changelog:
  - Make use of system timezone data for OpenJDK 8.
  - moved to boot build by openjdk8
  - priority set  gcj < lengthOffFour < otherJdks (RH1175457)
  - misusing already fixed bug
  - Resolves: rhbz#1189530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.45-36.b13
changelog:
  - Correctly fix system timezone data issue by depending on correct tzdata version.
  - Remove reference to tz.properties which is no longer used.
  - Resolves: rhbz#1212571


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-0.b16
changelog:
  - July 2015 security update to u51b16.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Add %{name} prefix to patches to avoid conflicts with OpenJDK 7 versions.
  - Add patches for RH issues fixed in IcedTea 2.x and/or the upcoming u60.
  - Use 'openjdk' as directory prefix to allow patch interchange with IcedTea.
  - Re-generate EC disablement patch following CPU DH changes.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.51-1.b16
changelog:
  - Re-introduce handling of java.security updates, with new md5sum of Jan 2015 version.
  - Resolves: rhbz#1235163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.65-0.b17
changelog:
  - October 2015 security update to u65b17.
  - Add script for generating OpenJDK tarballs from a local Mercurial tree.
  - Update RH1191652 patch to build against current AArch64 tree.
  - Use appropriate source ID to avoid unpacking both tarballs on AArch64.
  - Add MD5 checksums for java.security from 8u51 and 8u60 RPMs.
  - Resolves: rhbz#1257657


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.65-4.b17
changelog:
  - moved to integration forest 
  - sync with fedora (all but extracted luas and family)
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - October 2015 security update to u71b15.
  - Improve verbosity and helpfulness of tarball generation script.
  - Remove RH1290936 workaround as RHEL does not have the hardened flags nor ARM32.
  - Update patch documentation using version originally written for Fedora.
  - Drop prelink requirement as we no longer use execstack.
  - Drop ifdefbugfix patch as this is fixed upstream.
  - Temporarily enable a full bootcycle to ensure flag changes don't break anything.
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Turn off additional CFLAGS/LDFLAGS on AArch64 as bootstrapping failed.
  - Add patch for size_t formatting on s390 as size_t != intptr_t there.
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Add additional fixes for s390 warnings in arguments.cpp
  - Temporarily turn off -Werror on s390 to make progress
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Make bootstrap build optional and turn it off by default.
  - Fix remaining warnings in s390 fix and re-enable -Werror
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-1.b15
changelog:
  - Change correct specifier in src/share/vm/gc_implementation/g1/g1StringDedupTable.cpp
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-2.b15
changelog:
  - Restore upstream version of system LCMS patch removed by 'sync with Fedora'
  - Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-4.b15
changelog:
  - Remove -fno-tree-vectorize now a GCC is available with this bug fixed.
  - Add build requirement on a GCC with working tree vectorization.
  - Enable bootstrap temporarily to ensure the JDK is functional.
  - Resolves: rhbz#1146897


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-5.b15
changelog:
  - Backport S8148351: Only display resolved symlink for compiler, do not change path
  - Resolves: rhbz#1256464


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.71-6.b15
changelog:
  - Define EXTRA_CPP_FLAGS again, after it was removed in the fix for 1146897.
  - Resolves: rhbz#1146897


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15
changelog:
  - Replace s390 Java options patch with general version from IcedTea.
  - Apply s390 patches unconditionally to avoid arch-specific patch failures.
  - Resolves: rhbz#1307108


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15
changelog:
  - Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
  - Remove aarch64-specific suffix as update/build version are now the same as for other archs.
  - Resolves: rhbz#1307108


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-0.b15
changelog:
  - Remove unnecessary AArch64 port divergence on parsing jvm.cfg, broken by 9399aa7ef558
  - Resolves: rhbz#1307108


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-1.b15
changelog:
  - Add backport of 8147805: aarch64: C1 segmentation fault due to inline Unsafe.getAndSetObject
  - Resolves: rhbz#1300630


author: jvanek <jvanek@redhat.com> - 1:1.8.0.72-3.b15
changelog:
  - returning accidentlay removed hunk from renamed and so wrongly merged remove_aarch64_jvm.cfg_divergence.patch
  - Resolves: rhbz#1300630


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-4.b15
changelog:
  - Add patches to allow the SunEC provider to be built with the system NSS install.
  - Re-generate source tarball so it includes ecc_impl.h.
  - Adjust tarball generation script to allow ecc_impl.h to be included.
  - Bring over NSS changes from java-1.7.0-openjdk spec file (NSS_CFLAGS/NSS_LIBS)
  - Remove patch which disables the SunEC provider as it is now usable.
  - Correct spelling mistakes in tarball generation script.
  - Resolves: rhbz#1245810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-5.b16
changelog:
  - Update to u72b16.
  - Drop 8147805 and jvm.cfg fix which are applied upstream.
  - Resolves: rhbz#1307108


author: Omair Majid <omajid@redhat.com> - 1:1.8.0.72-12.b15
changelog:
  - Use a simple backport for PR2462/8074839.
  - Don't backport the crc check for pack.gz. It's not tested well upstream.
  - Resolves: rhbz#1307108


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.72-13.b16
changelog:
  - When using a compositing WM, the overlay window should be used, not the root window.
  - Resolves: rhbz#1176206


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.77-2.b03
changelog:
  - Avoid WithSeed versions of NSS functions as they do not fully process the seed
  - List current java.security md5sum so that java.security is replaced and ECC gets enabled.
  - Resolves: rhbz#1245810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Use basename of test file to avoid misinterpretation of full path as a package
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Enable a full bootstrap on JIT archs. Full build held back by Zero archs anyway.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Add 8132051 port to Zero.
  - Turn on bootstrap build for all to ensure we are now good to go.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Revert settings to production defaults so we can at least get a build.
  - Switch to a slowdebug build to try and unearth remaining issue on s390x.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Turn off -Werror so s390 can build in slowdebug mode.
  - Add fix for formatting issue found by previous s390 build.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Temporarily remove power64 from JIT arches to see if endian issue appears on Zero.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Add additional fix to Zero patch to properly handle result on 64-bit big-endian
  - Revert debugging options (aarch64 back to JIT, product build, no -Wno-error)
  - Enable full bootstrap on all architectures to check we are good to go.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.91-1.b14
changelog:
  - Roll back release number as release 1 never succeeded, even with tests disabled.
  - Resolves: rhbz#1325423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-1.b14
changelog:
  - Update to u92b14.
  - Remove upstreamed patches for AArch64 byte behaviour and template issue.
  - Remove upstreamed patches for Zero build failures 8087120 & 8143855.
  - Replace 8132051 Zero fix with version upstreamed as 8154210 in 8u112.
  - Add upstreamed patch 6961123 from u102 to fix application name in GNOME Shell.
  - Add upstreamed patches 8044762 & 8049226 from u112 to fix JDI issues.
  - Regenerate java-1.8.0-openjdk-rh1191652-root.patch against u92
  - Resolves: rhbz#1335322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-2.b14
changelog:
  - Add fix for PKCS#10 output regression, adding -systemlineendings option.
  - Move S8150954/RH1176206/PR2866 fix to correct section, as not in 9 yet.
  - Resolves: rhbz#1337583


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-4.b14
changelog:
  - added requires for copy-jdk-configs, to help with https://projects.engineering.redhat.com/browse/RCM-3654
  - Resolves: rhbz#1296442


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.92-5.b14
changelog:
  - added --family option with chkconfig version full dependence
  - added nss restricting requires
  - added zipped javadoc subpackage
  - extracted lua scripts
  - Resolves: rhbz#1296442
  - Resolves: rhbz#1296414


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.92-9.b14
changelog:
  - Add additional fixes (S6260348, S8159244) for u92 update.
  - Add bug ID to Javadoc patch.
  - Resolves: rhbz#1335322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-1.b13
changelog:
  - Update to u101b13.
  - Document REPOS option in generate_source_tarball.sh
  - Drop a leading zero from the priority as the update version is now three digits
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-3.b13
changelog:
  - Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-4.b13
changelog:
  - Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
  - Resolves: rhbz#1335322


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.101-7.b13
changelog:
  - added patch532 hotspot-1358661.patch - to fix performance of bimorphic inlining may be bypassed by type speculation
  - rhbz1358661
  - added patch301 bz1204159_java8.patch - to fix systemtap on multiple jdks
  - rhbz1204159
  - added patch531 hotspot-8157306.changeset - to fix rare NPE injavac on aarch64
  - rhbz1360863
  - added all virtual provides of java-devel
  - Resolves: rhbz#1216018


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13
changelog:
  - Replace patch for S8157306 with upstream version, documented & applied on all archs with conditional in patch
  - Resolves: rhbz#1360863


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-8.b13
changelog:
  - Replace patch for S8162384 with upstream version. Document correctly along with SystemTap RH1204159 patch.
  - Resolves: rhbz#1358661


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.101-9.b15
changelog:
  - Update to aarch64-jdk8u101-b15.
  - Rebase SystemTap tarball on IcedTea 3.1.0 versions so as to avoid patching.
  - Drop additional hunk for 8147771 which is now applied upstream.
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-0.b14
changelog:
  - Update to aarch64-jdk8u102-b14.
  - Drop 8140620, 8148752 and 6961123, all of which appear upstream in u102.
  - Move 8159244 to 8u111 section as it only appears to be in unpublished u102 b31.
  - Move 8158260 to 8u112 section following its backport to 8u.
  - Resolves: rhbz#1359857


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - @prefix@ in tapsetfiles substitued by prefix as necessary to work with systemtap3 (rhbz1371005)
  - Resolves: rhbz#1295754


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.102-2.b14
changelog:
  - declared check_sum_presented_in_spec and used in prep and check
  - it is checking that latest packed java.security is mentioned in listing
  - Resolves: rhbz#1295754


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-3.b14
changelog:
  - Rebuild java-1.8.0-openjdk for GCC aarch64 stack epilogue code generation fix (RH1372750)
  - Resolves: rhbz#1359857


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.102-4.b14
changelog:
  - Runtime native library requirements need to match the architecture of the JDK
  - Resolves: rhbz#1375224


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-0.b14
changelog:
  - Update to aarch64-jdk8u111-b14.
  - Add latest md5sum for java.security file due to jar signing property addition.
  - Drop S8157306 and the CORBA typo fix, both of which appear upstream in u111.
  - Add LCMS 2 patch to fix Red Hat security issue RH1367357 in the local OpenJDK copy.
  - Resolves: rhbz#1350037


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-3.b15
changelog:
  - Add MD5 checksum from RHEL 7.2 security update so the 7.3 one overwrites it.
  - Resolves: rhbz#1391132


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
  - Resolves: rhbz#1391132


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-4.b18
changelog:
  - Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
  - Resolves: rhbz#1391132


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.111-5.b18
changelog:
  - Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
  - Resolves: rhbz#1391132


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.112-1.b16
changelog:
  - Update to aarch64-jdk8u112-b16.
  - Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
  - Re-generate size_t and key size (RH1163501) patches against u112.
  - Resolves: rhbz#1391132


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-1.b13
changelog:
  - Update to aarch64-jdk8u121-b13.
  - Add MD5 checksum for the new java.security file (EC < 224, DSA < 1024 restricted)
  - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
  - Resolves: rhbz#1410612


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-2.b13
changelog:
  - Backport "S8153711: [REDO] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command"
  - Resolves: rhbz#1284948


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-3.b13
changelog:
  - Backport "8170888: [linux] Experimental support for cgroup memory limits in container (ie Docker) environments"
  - Resolves: rhbz#1390708


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-4.b14
changelog:
  - added shenandoah hotspot
  - sync with fedora
  - Resolves: rhbz#1400306
  - Resolves: rhbz#1390708
  - Resolves: rhbz#1388520
  - Resolves: rhbz#1403992


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14
changelog:
  - Regenerate tarball with correct version of PR2126 patch.
  - Update generate_source_tarball.sh script to download correct version.
  - Resolves: rhbz#1400306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-6.b14
changelog:
  - Patch OpenJDK to check the system cacerts database directly
  - Remove unneeded symlink to the system cacerts database
  - Drop outdated openssl dependency from when the RPM built the cacerts database
  - Resolves: rhbz#1319875


author: jvanek <jvanek@redhat.com> - 1:1.8.0.121-7.b14
changelog:
  - updated to aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-08 (from aarch64-port/jdk8u-shenandoah) of hotspot
  - used aarch64-port-jdk8u-shenandoah-aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09.tar.xz as new sources for hotspot
  - Resolves: rhbz#1400306


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-9.b14
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Update jstack tapset to handle AArch64
  - Resolves: rhbz#1373848


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14
changelog:
  - Move unprocessed nss.cfg to nss.cfg.in and add missing substitution to create nss.cfg for install
  - Resolves: rhbz#1429774


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.121-10.b14
changelog:
  - Add backports from 8u131 and 8u152 ahead of April CPU.
  - Apply backports before local RPM fixes so they will be the same as when applied upstream
  - Adjust RH1022017 following application of 8173783
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-1.b11
changelog:
  - Update to aarch64-jdk8u131-b11 and aarch64-shenandoah-jdk8u131-b11.
  - Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
  - Update generate_source_tarball.sh to remove patch remnants.
  - Cleanup Shenandoah tarball referencing and document how to create it.
  - Add MD5 checksum for the new java.security file (MD5 disabled for JAR signing)
  - Resolves: rhbz#1438751


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-2.b11
changelog:
  - Update tapset tarball to include the better error handling in PR3348
  - http://icedtea.classpath.org/hg/icedtea8/rev/14fc67a5d5a3
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11
changelog:
  - Rename SystemTap tapset tarball to avoid conflicts with previous version.
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1443417


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12
changelog:
  - Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
  - Resolves: rhbz#1319875


author: Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12
changelog:
  - Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
  - Resolves: rhbz#1448880


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-12.b12
changelog:
  - Add backports from 8u152 (8179084/RH1455694, 8181419/RH1463144, 8175887) ahead of July CPU.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-1.b15
changelog:
  - Update to aarch64-jdk8u141-b15 and aarch64-shenandoah-jdk8u141-b15.
  - Update location of OpenJDK system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
  - Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.141-2.b16
changelog:
  - Update to aarch64-jdk8u141-b16 and aarch64-shenandoah-jdk8u141-b16.
  - Revert change to remove-intree-libraries.sh following backout of 8173207
  - Resolves: rhbz#1466509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-1.b01
changelog:
  - Update to aarch64-jdk8u144-b01 and aarch64-shenandoah-jdk8u144-b01.
  - Exclude 8175887 from Shenandoah builds as it has been included in that repo.
  - Resolves: rhbz#1477855


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Switch to IBM-supplied Montgomery backport and add remaining ppc64 fixes & CFF fix
  - Resolves: rhbz#1498309
  - Resolves: rhbz#1498319
  - Resolves: rhbz#1498320
  - Resolves: rhbz#1498321
  - Resolves: rhbz#1484079


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Switch AArch64 to using java-1.8.0-openjdk to bootstrap until RH1482244 is fixed in bootstrap
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.144-2.b01
changelog:
  - Reverted completely unnecessary patch addition which broke the RPM build.
  - Resolves: rhbz#1484079


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Update to aarch64-jdk8u151-b12 and aarch64-shenandoah-jdk8u151-b12.
  - Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
  - Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
  - Update RH1191652 (root) and PR2842 to accomodate 8151841 (GCC 6 support).
  - Update PR2964/RH1337583 to accomodate 8171319 (keytool warning output)
  - Update RH1163501 to accomodate 8181048 (crypto refactoring)
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - 8188030 is not yet upstream, so it should be listed under upstreamable fixes.
  - 8181055, 8181419, 8145913, 8168318, 8170328 & 8181810 all now in 8u162.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-2.b12
changelog:
  - repack policies adapted to new counts and paths
  - note that also c-j-c is needed to make this apply in next update
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1499207


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-3.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
  - Resolves: rhbz#1490260


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13
changelog:
  - Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13.
  - Drop upstreamed patch for 8075484.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16.
  - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC)
  - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
  - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226,
  -    8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and
  -    8164293/PR3412/RH1459641
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7)
  - Resolves: rhbz#1512647


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - drop more of usptreamed patches 565,566,567,568
    ( 8184673-pr3475-rh1487266.patch  8191840-pr3503-rh1512647.patch  8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-1.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Bump release for RHEL 7.6 now branch is available.
  - Resolves: rhbz#1538772
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-4.b10
changelog:
  - Cleanup from previous commit.
  - Remove unused upstream patch 8167200.hotspotAarch64.patch.
  - Resolves: rhbz#1559766
  - Resolves: rhbz#1536623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-6.b10
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-9.b12
changelog:
  - Update to aarch64-jdk8u171-b12 and aarch64-shenandoah-jdk8u171-b12.
  - Remove patch for 8200556/PR3566 as applied upstream.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-3.b11
changelog:
  - Sync with IcedTea 3.8.0.
  - Label architecture-specific fixes with architecture concerned
  - x86: S8199936, PR3533: HotSpot generates code with unaligned stack, crashes on SSE operations (-mstackrealign workaround)
  - PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
  - 8171000, PR3542, RH1402819: Robot.createScreenCapture() crashes in wayland mode
  - 8197546, PR3542, RH1402819: Fix for 8171000 breaks Solaris + Linux builds
  - 8185723, PR3553: Zero: segfaults on Power PC 32-bit
  - 8186461, PR3557: Zero's atomic_copy64() should use SPE instructions on linux-powerpcspe
  - PR3559: Use ldrexd for atomic reads on ARMv7.
  - 8187577, PR3578: JVM crash during gc doing concurrent marking
  - 8201509, PR3579: Zero: S390 31bit atomic_copy64 inline assembler is wrong
  - 8165489, PR3589: Missing G1 barrier in Unsafe_GetObjectVolatile
  - PR3591: Fix for bug 3533 doesn't add -mstackrealign to JDK code
  - 8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11
changelog:
  - Update Shenandoah tarball to include 2018-05-15 merge.
  - Split PR3458/RH1540242 fix into AArch64 & Zero sections, so former can be skipped on Shenandoah builds.
  - Drop PR3573 patch applied upstream.
  - Restrict 8187577 fix to non-Shenandoah builds, as it's included in the new tarball.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Fix a number of bad bug identifiers (PR3546 should be PR3578, PR3456 should be PR3546)
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-5.b11
changelog:
  - Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
  - Resolves: rhbz#1567204


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-6.b11
changelog:
  - Remove build flags exemption for aarch64 now the platform is more mature and can bootstrap OpenJDK with these flags.
  - Remove duplicate -fstack-protector-strong; it is provided by the RHEL cflags.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Sync with IcedTea 3.8.0 patches to use -Wreturn-type.
  - Add backports of 8141570, 8143245, 8197981 & 8062808.
  - Drop pr3458-rh1540242-zero.patch which is covered by 8143245.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Bring in PR3519 from IcedTea 3.7.0 to fix remaining -Wreturn-type failure on AArch64.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-7.b11
changelog:
  - Add additional fix (PR3601) to fix -Wreturn-type failures introduced by 8061651
  - Resolves: rhbz#1573700


author: Jiri Vanek <jvanek@redhat.com> - 11:1.8.0.172-10.b11
changelog:
  - jsa files changed to 444 to pass rpm verification
  - Fix reg-ex for filtering private libraries' provides/requires.
  - Resolves: rhbz#1573700


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-3.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8075942, PR3602: ArrayIndexOutOfBoundsException in sun.java2d.pisces.Dasher.goTo"
  - Resolves: rhbz#1582032


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-4.b04
changelog:
  - Backport "8203182, PR3603: Release session if initialization of SunPKCS11 Signature fails"
  - Resolves: rhbz#1568033


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-5.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1597825


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-6.b04
changelog:
  - Add "8146115, PR3508, RH1463098: Improve docker container detection and resource configuration usage"
  - Resolves: rhbz#1463098


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-2
changelog:
  - made rhpkg and srpm or rebuild working on fedora again
  - cosmetic changes - using macros where possible
  - fixed issues in desktop files (missing vendor, unexpandedmacros, missing information)
  - README.src renamed to README.md
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-3
changelog:
  - cups moved to headful package
  - enabled gtk2 in headful package (RH1598152)
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-4
changelog:
  - Update(s) from upstreamed patches:
    - jdk8036003-add_with_native_debug_symbols_configure_flag.patch
    - jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch =>
      jdk8150954-pr2866-rh1176206-screenshot_xcomposite_jdk.patch
      Deleted rh1176206-root.patch as thats no longer needed with
      upstream 8150954.
    - 8207057-pr3613-hotspot-assembler-debuginfo.patch =>
      jdk8207057-pr3613-no_debug_info_for_assembler_files_hotspot.patch and
      jdk8207057-pr3613-no_debug_info_for_assembler_files_root.patch. From JDK 8u
      backport.
  - Use --with-native-debug-symbols=internal which JDK-8036003 adds.
  - Remove comment for make invocation since it's no longer valid.
    --with-native-debug-symbols=internal will do everything we need.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-5
changelog:
  - Removed patch, rh1214835.patch, since it's invalid:
    See https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2304#c3
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-6
changelog:
  - Add fixes for optimization gaps (annocheck issues):
    - 8210761: libjsig is being compiled without optimization
    - 8210647: libsaproc is being compiled without optimization
    - 8210416: [linux] Poor StrictMath performance due to non-optimized compilation
    - 8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization
               8u upstream and aarch64/jdk8u upstream versions.
  - Resolves: rhbz#1633817


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.191.b12-7
changelog:
  - Add patch jdk8210425-rh1632174-03-compile_with_o2_and_ffp_contract_off_as_for_fdlibm_zero.patch:
    - Annother fix for optimization gaps (annocheck issues)
    - Zero 8u version fix was missing. Hence, only shows up on Zero arches.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-8
changelog:
  - added Patch583 jdk8172850-rh1640127-01-register_allocator_crash.patch
  - added Patch584 jdk8209639-rh1640127-02-coalesce_attempted_spill_non_spillable.patch
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Fix patch organisation in the spec file:
  -   * Move ECC patches back to upstreamable section
  -   * Move system cacerts patches to upstreamable section
  -   * Merge "Local fixes" and "RPM fixes" which amount to the same thing
  -   * Move system libpng & lcms patches back to 8u upstreamable section
  -   * Make it clearer that "Non-OpenJDK fixes" is currently empty
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-9
changelog:
  - Note why PR1834/RH1022017 is not suitable to go upstream in its current form.
  - Resolves: rhbz#1633817


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.191.b12-11
changelog:
  - Renamed all patches to new convention
  -   bug1-bug2-..-bugN-XY-lowercase_comment_suffix_or_jdkpart.patch
  - Resolves: rhbz#1633817


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-13
changelog:
  - Add backport of JDK-8029661 which adds TLSv1.2 support to the PKCS11 provider.
  - Resolves: rhbz#1477159


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b12-15
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-1
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-2
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1498936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-1
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release using new script
  - Resolves: rhbz#1434241


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-5
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-1
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
    - JDK-8029661/PR3642/RH1477159
  - Re-generate patches
    - JDK-8203030
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Set milestone to "ea" as this is not the final release.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b07-2
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-2
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1498932


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1737109


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1737109


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b01.
  - Switch to EA mode.
  - Adjust JDK-8199936/PR3533 patch following JDK-8227397 configure change
  - Remove local copies of JDK-8231991 & JDK-8234107 as replaced by upstream versions.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-3
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-4
changelog:
  - Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled.
  - Resolves: rhbz#1751985


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b01.
  - Switch to EA mode.
  - Adjust JDK-8143245/PR3548 patch following context changes due to JDK-8203287 for JFR
  - Adjust RH1648644 following context changes due to introduction of JFR packages
  - Add recently added binaries to alternatives set (clhsdb, hsdb, jfr)
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b02-0.2.ea
changelog:
  - Enable JFR in our builds, ahead of upstream default.
  - Only enable JFR for JIT builds, as it is not supported with Zero.
  - Turn off JFR on x86 for now due to assert(SerializePageShiftCount == count) crash.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b05.
  - Remove backports of JDK-8227269 & JDK-8241750 included upstream in 8u262-b05.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b05-0.2.ea
changelog:
  - Backport JDK-8243541 & require tzdata 2020a as latest tzdata package needs resource updates
  - Resolves: rhbz#1838229


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.2.ea
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Sync stapinstall handling with RHEL 8 implementation
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Drop JDK-8243541 backport now applied upstream.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Introduce jfr_arches for architectures which support JFR.
  - Introduce sa_arches for architectures which support the serviceability agent.
  - Introduce share_arches for architectures which support class sharing (-Xshare:dump).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860456


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1
changelog:
  - ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs
  - Resolves: rhbz#1861222


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b01.
  - Switch to EA mode.
  - Add debugging output for build.
  - JFR must now be explicitly disabled when unwanted (e.g. x86), following switch of upstream default.
  - Remove ZipConstants change from JDK-8186464 backport, now provided upstream by JDK-8075774
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b02.
  - Remove JDK-8154313 backport now applied upstream.
  - Change target from 'zip-docs' to 'docs-zip', which is the naming used upstream.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b04.
  - Update tarball generation script to use PR3795, following inclusion of JDK-8177334
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05.
  - Fix context in JDK-8186464/RH1433262 patch, following JDK-8078334 @randomness tag addition.
  - Add additional s390 size_t case in g1ConcurrentMarkObjArrayProcessor.cpp introduced by JDK-8057003
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895062


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b01 (EA)
  - Update release notes for 8u282-b01.
  - Switch to EA mode.
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Remove PR3601, covered upstream by JDK-8062808.
  - Remove upstreamed JDK-8197981/PR3548, JDK-8062808/PR3548, JDK-8254177 & JDK-8215727.
  - Resolves: rhbz#1903903


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Added patch600: rh1750419-redhat_alt_java.patch
  - Replaced alt-java placeholder with real patched alt-java
  - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Both surpassed by new patch
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908963


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b01 (EA)
  - Update release notes for 8u292-b01.
  - Switch to EA mode.
  - Update tarball generation script to use PR3822 which handles
      JDK-8233228 & JDK-8035166 changes
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b02 (EA)
  - Update release notes for 8u292-b02.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b03 (EA)
  - Update release notes for 8u292-b03.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea
changelog:
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b01 (EA)
  - Update release notes for 8u302-b01.
  - Switch to EA mode.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b02 (EA)
  - Update release notes for 8u302-b02.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03 (EA)
  - Update release notes for 8u302-b03.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
  - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b04 (EA)
  - Update release notes for 8u302-b04.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Remove JDK-8266929/RH1960024 as now upstream.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.22-5
changelog:
  - Initial Load
  - removed -fno-lifetime-dse; rhel7 gcc to old (4.8.5)
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, pr1983-rh1565658-support_using_the_system_installation_of_nss_with_the_sunec_provider_jdk11.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-6
changelog:
  - Add patch, JDK-8210416-RHBZ-1624122-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1624122-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1624122-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210703-RHBZ-1624122-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - No longer filter -O flags from C flags coming from
    redhat-rpm-config.
  - Resolves: RHBZ#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libjsig.
  - Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.1.13-3
changelog:
  - Use upstream's version of Aarch64 intrinsics disable patch:
    - Removed:
      RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
      RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    - Superceded by:
      jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.1.13-6
changelog:
  - fixed tck failures of arraycopy and process exec with shenandoah on
  - added patch585 rh1648995-shenandoah_array_copy_broken_by_not_always_copy_forward_for_disjoint_arrays.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-8
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Drop upstream Shenandoah patch RH1648995.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-8
changelog:
  - Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-1
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Make tagsuffix optional and comment it out while unused.
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-4
changelog:
  - Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  - Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  - Add missing ISA to cups-libs requirement
  - Remove duplicate lksctp-tools requirement
  - Resolves: rhbz#1684617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Resolves: rhbz#1677516


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.3.7-2
changelog:
  - Don't build the test images needlessly.
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.7-3
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-1
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1737117


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.2-0.2.ea
changelog:
  - Update generate_source_tarball.sh script to use the PR3751 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - PR3751 includes the changes in the PR1834/RH1022017 patch which is removed.
  - Resolves: rhbz#1699068


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.3-0.1.ea
changelog:
  - Use 'release' rather than 'rpmrelease' for the release variable so rpmdev-bumpspec works again.
  - Resolves: rhbz#1737117


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.4-0.1.ea
changelog:
  - Revert rpmdev-bumpspec workaround as it has consequences for RPM installation.
  - Resolves: rhbz#1737117


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-1
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-1
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.7+1 (EA)
  - Switch to EA mode for 11.0.7 pre-release builds.
  - Drop JDK-8236039 backport now applied upstream.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-5
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-6
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.11.0 using new script
  - Resolves: rhbz#1737114


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-6
changelog:
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Resolves: rhbz#1737114


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-7
changelog:
  - Add backports of JDK-8227269 & JDK-8241750 to resolve slow class loading with JDWP enabled.
  - Resolves: rhbz#1826915


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+1 (EA)
  - Switch to EA mode for 11.0.8 pre-release builds.
  - Drop JDK-8237396 & JDK-8228407 backports now applied upstream.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.2-0.2.ea
changelog:
  - Build static-libs-image and add resulting files via -static-libs sub-package.
  - Resolves: rhbz#1839091


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.2-0.2.ea
changelog:
  - Use RHEL 7 format for handling the debug argument to the files_static_libs macro.
  - Fix warning about macro in comment.
  - Resolves: rhbz#1839091


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.2.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-1
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Colin Walters <walters@redhat.com> - 3.0.2-7
changelog:
  - Add patch to use JPackage-compatible JNI library path
  - Do build debuginfo package
  - Refactor build patch greatly so it's hopefully upstreamable
  - Install .so directly to JNI directory, rather than inside jar
  - Clean up Requires/BuildRequires (thanks Mamoru Tasaka)


author: Colin Walters <walters@redhat.com> - 3.0.4-1.svn630
changelog:
  - New upstream version, drop upstreamed patch parts
  - New patch jna-3.0.4-nomixedjar.patch which ensures that we don't
    include the .so in the .jar


author: Colin Walters <walters@redhat.com> - 3.0.4-7.svn700
changelog:
  - Add patch to make typemapper always accessible
  - Add patch to skip cracktastic X11 test bits which currently fail


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.7-11
changelog:
  - Drop dependency on main package from -javadoc.
  - Add license to -javadoc, and OTHERS and TODO to main package docs.
  - Install javadocs and jars unversioned.
  - Fix release-notes.html permissions.
  - Make -javadoc and -contrib noarch where available.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5-0.rc6a.2
changelog:
  - Include perlconnect.
  - Include readline support, rebuild using "--without readline" to disable.
  - Add libjs* provides for upstream compatibility.
  - Install header files in %{_includedir} instead of %{_includedir}/js.


author: Matthias Saou <http://freshrpms.net/> 1.5-1
changelog:
  - Update to 1.5.0 final.
  - Spec file cleanups.
  - Move docs from devel to main, since we need the license there.
  - Remove no longer needed js-perlconnect.patch.
  - Update js-1.5-va_copy.patch.
  - Include a pkgconfig file (#178993).


author: Matthias Saou <http://freshrpms.net/> 1.60-1
changelog:
  - Update to 1.60.
  - Rebuild in order to link against ncurses instead of termcap (#226773).
  - Add ncurses-devel build requirement and patch s/termcap/ncurses/ in.
  - Change mode of perl library from 555 to 755 (#224603).


author: Matthias Saou <http://freshrpms.net/> 1.70-1
changelog:
  - Update to 1.7.0, as 1.70 to avoid introducing an epoch for now...
  - Remove no longer provided perlconnect parts.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.70-8
changelog:
  - Reformat spec with tabs.
  - By report of Thomas Sondergaard (BZ#511162) Add -DXP_UNIX=1 -DJS_THREADSAFE=1 flags and nspr requires into libjs.pc


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1.8.5-0.hg51702867d932
changelog:
  - Build version 1.8.5 by update request - BZ#676441 from Firefox 4.0 mercurial repository.
  - Gone -DJS_C_STRINGS_ARE_UTF8
  - Add BR autoconf213, change build system to use configure.
  - Adopt patch0 (js-1.7.0-make.patch -> js-1.8.5-make.patch)
  - Adopt patch1 (js-shlib.patch -> js-1.8.5-shlib.patch)
  - Remove Patch2 (js-1.5-va_copy.patch) and Patch3 (js-ldflags.patch)
  - Add BR python, zip.


author: Colin Walters <walters@verbum.org> - 1:1.8.5-6
changelog:
  - Include mozjs185.pc, clean up build
  - Based on work from Christopher Aillon <caillon@redhat.com>
  - Switch to using make install DESTDIR=, instead of hardcoding build rules.
  - Add DESTDIR= patch from GNOME 3.2 jhbuild
  - Make mozjs185 the canonical target for both libmozjs and libmozjs185.


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Justin M. Forbes <64bit_fedora@comcast.net> - 0.11.6-1
changelog:
  - Initial packaging of 0.11.6 for Fedora Core 2
  - remove mp3 plugin build options
  - add i18n package
  - clean up for kde 3.2/FC2 target


author: Justin M. Forbes <64bit_fedora@comcast.net> - 0.11.10-1
changelog:
  - remove unnecesary [ -z "$QTDIR" ] check
  - Update to 0.11.10 upstream 
  - remove qt-devel BuildRequires, implied with kde-devel
  - remove ldconfig Requires, implied
  - remove i18n docbook patch, fixed upstream.


author: Rex Dieter <rdieter[AT]fedoraproject.org> - 0:1.0.1-1
changelog:
  - k3b-1.0.1
  - include icon/mime scriptlets
  - cleanup/simplify BR's
  - optimize %configure
  - restore applnk/.hidden bits


author: Rex Dieter <rdieter@fedoraproject.org> - 0:1.0.5-1
changelog:
  - k3b-1.0.5
  - k3brc: set manual buffer size here
  - omit reload patch (for now), to verify if still needed.


author: Rex Dieter <rdieter@fedoraproject.org> - 0:1.0.5-5
changelog:
  - resurrect -devel (!=f9), grow -libs (f10+, #341651)
  - avoid auto*foo
  - fix build on rawhide (libdvdread header changes)
  - conditionalize i18n bits


author: Rex Dieter <rdieter@fedoraproject.org> - 1:2.0.1-5
changelog:
  - turns out existing hal support is mostly harmless (not required, but will
    use if present), so back out those changes.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1:2.0.2-4
changelog:
  - prefer growisofs to wodim for DVD/BluRay also for DVD copying and data
    projects, the previous patch only worked for ISO burning (#610976)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 1:2.0.2-5
changelog:
  - increase overburning tolerance from 1/10 to 1/4 for CD-R90/99 (kde#276002)
  - fix overburning check to not count the used capacity twice


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Miloslav Trmac <mitr@redhat.com> - 1.12-4
changelog:
  - Don't ship a patch backup file
  - Mention in setfont.8 that 512-glyph fonts reduce the number of available
    colors (#140935, patch by Dmitry Butskoj)
  - Remove "Meta_acute" from German keymaps (#143124)
  - Make the %triggerun script condition more precise, ignore failure of the
    script


author: Miloslav Trmac <mitr@redhat.com> - 1.12-5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (patch by Jochen Schmitt)
  - Don't ship patch backup files, simpler way


author: Miloslav Trmac <mitr@redhat.com> - 1.12-11
changelog:
  - Don't ship character set lists (they are already in glibc-common) and an
    obsolete copy of kbd.FAQ


author: Miloslav Trmac <mitr@redhat.com> - 1.12-13
changelog:
  - Fix build with new coreutils
  - Hardcode paths in unicode_start to avoid a few file lookups (#178329)
  - Drop unnecessary Prereq: sed mktemp


author: Miloslav Trmac <mitr@redhat.com> - 1.12-19
changelog:
  - Ship "el" translation instead of the obsolete "gr" translation
    Resolves: #210749
  - Fix % quoting in %changelog


author: Miloslav Trmac <mitr@redhat.com> - 1.12-20
changelog:
  - Document that setkeycodes doesn't affect USB keyboards and that the kernel
    doesn't provide the raw scan codes by default
    Resolves: #211803


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-26
changelog:
  - Fix ro.map to generate right unicode for s, S, t, T with comma
  - Fix LatArCyrHeb-16 unicode mapping table to show comma-version
    of s, S, t, T and cedilla-version of s, S, t, T as the same glyph
    (because there is no font in kbd for comma-version)
    Resolves: #329071


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-28
changelog:
  - Fix ro.map.gz, add ro_std.map.gz, drop ro_win.map.gz,
    add Lat2-Terminus16.psf console font (many thanks to Alexandru Szasz
    <alexxed@gmail.com>)
    Resolves: #253892


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15-4
changelog:
  - Merge review (drop Provides/Obsoletes, change Prereq to Requires,
    add URL, convert ChangeLog to utf-8, replace locale destination
    with macro, add COPYING and add dvorak documentation)
    Resolves: #225958


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.2-1
changelog:
  - Update to kbd-1.15.2 (removed kbd-1.15-quiet_doc.patch and romanian keymaps, both are
    part of the upstream tarball now)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.3-4
changelog:
  - Ship double scaled latarcyrheb console font for high resolution screens
    (created by Tom Horsley)
    Resolves: #617768


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-1
changelog:
  - Update to kbd-1.15.5 (removed kbd-1.15-resizecon-x86_64.patch,
    kbd-1.15-defkeymap.patch, kbd-1.15.3-fix-es-translation.patch,
    kbd-1.15.3-loadkeys-d.patch)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-3
changelog:
  - Include xkb layouts from xkeyboard-config converted to console keymaps
  - Add version to vlock provides
    Resolves: #902564


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-8
changelog:
  - Fix vlock doesn't perform PAM account management or credential reinitialization
    Resolves: #1032140


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.15.5-14
changelog:
  - Replace CtrlL_Lock with Caps_Lock in generated us.map
    Resolves: #1441411
  - Improve man pages and usage messages quality and consistency
    Resolves: #949015


author: Rex Dieter <rdieter@fedoraproject.org> 0.5.3-5
changelog:
  - kcm-gtk : "GTK+ Appearance" in systemsettings->lost and found (#628381)
  - Requires: kdebase-runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 0.5.3-8
changelog:
  - add support for GTK+ 3 (backported from upstream bzr gtk3 branch)
  - drop ancient Fedora < 13 env_script conditional, now always in kde-settings


author: Rex Dieter <rdieter@fedoraproject.org>
changelog:
  - 0.5.3-10
  - update kcm_category patch
  - kubuntu_01_xsettings_kipc.patch
  - drop old Obsoletes: gtk-qt-engine


author: Ryan Rix <ry@n.rix.si> - 0.3.1-3
changelog:
  - Update the category to adhere to new SC 4.5 systemsettings layout. Will now
    appear under the "input devices" section.


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 0.3.1-6
changelog:
  - Merge bugfixes from Kubuntu, fixes circular scrolling and more (#633353)
  - Drop default kcmtouchpadrc, use driver defaults (#611611)
  - Make the Scrolling tab use a vertical scrollbar if needed (#600121)


author: Than Ngo <than@redhat.com> 4.0.3-1
changelog:
  - 4.0.3
  - drop fix for favicons infinite loop, it's included in new version
  - omit multilib upgrade hacks
  - omit extraneous BR's
  - (re)include oxgygen/scalable icons


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72 (4.1 alpha 1)
  - drop backported kde#160422 and nspluginviewer patches
  - add minimum versions to soprano-devel and strigi-devel BRs


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-2
changelog:
  - quote semicolon in fix for #442834
  - only do the echo when konquerorsu.desktop is actually shipped (#445989)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 6:4.1.80-1
changelog:
  - 4.1.80
  - patch100 was backported from 4.2 (4.1.6x), removed from patch list
  - ported 4.1.2 konsole patches
  - drop the second konsole patch (upstreamed)
  - using make install/fast
  - BR cmake >= 2.6.2


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - own %_kde4_appsdir/konqueror/{kpartplugins,icons,opensearch}
  - %lang'ify HTML docs
  - Provides: kdelibs4%{?_isa}


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.3-3
changelog:
  - allow 'Open Folder in Tabs' in Konsole to support SSH bookmarks (kde#177637)
    (upstream patch backported from 4.4)


author: Rex Dieter <rdieter@fedoraproject.org> - 6:4.4.1-2
changelog:
  - drop kappfinder (keep option for -kappfinder subpkg)
  - use whitelist for conflicting libs
  - libs: Requires: %name


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 6:4.4.3-2
changelog:
  - completely drop commented out konsole-session patch (fixed upstream)
  - add backwards compatibility hack for a config option change by that patch


author: Radek Novacek <rnovacek@redhat.com> 6:4.6.80-1
changelog:
  - 4.6.80
  - import separately packaged kwrite and konsole
  - drop upstreamed patches (nsplugins_sdk_headers and nsplugins_flash)
  - add konq-plugins


author: Rex Dieter <rdieter@fedoraproject.org> 6:4.6.95-10
changelog:
  - drop kate, konsole, to be packaged separately.
  - update summary to mention included apps/utilities
  - Provides: kde-baseapps (matching new upstream tarball)


author: Rex Dieter <rdieter@fedoraproject.org> 0.8-0.21.20090815svn
changelog:
  - use knetworkmanager pkg names
  - quasi-artificially inflate version to 0.8 (for now), to simplify upgrade path
    for knetworkmanager-0.7 (from F-10)
  - nuke -devel pkg
  - drop references to short-lived kde-plasma-networkmanager


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.4.20090930svn
changelog:
  - Build as knetworkmanager4 for F10 so KDE 3 KNM users are not forced to upgrade
  - Obsolete knetworkmanager4 (and keep replacing the KDE 3 KNM) on F11+


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.11.20100210svn
changelog:
  - update to revision 1088283 (2010-02-10)
  - drop F10 conditionals
  - warn about the plasmoid being experimental, recommend knetworkmanager
  - drop minimum version requirements for qt and kdelibs, not needed anymore


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.12.20100220svn
changelog:
  - update to revision 1093233 (2010-02-20)
  - use user-readable URL instead of outdated websvn link
  - include translations (#566386, use create_tarball.rb script from kdesdk trunk)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.13.20100220svn
changelog:
  - make kde-plasma-neworkmanagment an empty placeholder package (#571433)
  - knetworkmanager: move kcm_networkmanagement_tray bits here (from kde-plasma-nm)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.21.20100603
changelog:
  - Conflicts: kdebase-runtime > 4.4.76 (if built on/for < kde-4.4)
  - use -DINSTALL_KNM_AUTOSTART=ON (compat with f12's cmake)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.25.20100920
changelog:
  - make plasma_applet unconditional
  - include javascript to enable nm plasmoid in systray, kde45+ (#604798)


author: Rex Dieter <rdieter@fedoraproject.org> 1:0.9-0.28.20101011
changelog:
  - 20101011 snapshot
  - KDE NM applet 20101008 snapshot crashes on new CDMA connection (#641792)
  - Add NetworkManager dependency to knetworkmanager (#618918)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.42.20110323
changelog:
  - Conditionalize NM 0.9 (with compat patches) support to F15+
  - Merge VPN subpackages into the main package for F15+ to match NM 0.9 packaging


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.49.20110527git.nm09
changelog:
  - update to 20110527 snapshot from nm09 branch
  - make it clear in Release where the snapshot comes from
  - drop nm09 conditional, this version targets only NetworkManager 0.9


author: Lukas Tinkl <ltinkl@redhat.com> - 0.9-0.54.20110812git.nm09
changelog:
  - update to current snapshot, for changes and fixes see 
    http://lamarque-lvs.blogspot.com/2011/07/plasma-nm-bugs-fixed-after-465.html


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.56.20110828git.nm09
changelog:
  - update to 20110828 snapshot, fixes kde#280913 (OpenConnect) among other things
  - bump minimum required NM version to 0.9.0 as required by the new snapshot


author: Lukas Tinkl <ltinkl@redhat.com> - 1:0.9-0.57.20110907git.nm09
changelog:
  - update to current git nm09 snapshot, for details see: 
    http://lamarque-lvs.blogspot.com/2011/09/plasma-nm-bugs-fixed-after-470.html
  - fix #605527: KNetworkManager can´t connect to DSL/PPPoE connection
  - fix #715459: KDE's wireless broken on secure AP w/ "hidden" setup
  - fix #715461: KDE's wireless broken on secure AP w/ manual entry


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 1:0.9-0.70.rc4
changelog:
  - update to 0.9.0_rc4 (0.8.99)
  - drop the nm09 tag, all our builds are NM 0.9 builds now
  - drop the nuking of monolithic stuff, already disabled upstream for a while


author: Lukas Tinkl <ltinkl@redhat.com> 0.9.0.4-1
changelog:
  - upstream version 0.9.0.4 (see
    http://lamarque-lvs.blogspot.cz/2012/07/plasma-nm-0904.html for details)


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.7-2
changelog:
  - fix the wpa2 bug with missing password field #bz832893
  - fix the bug with lock indicator #bz912603


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.1-2
changelog:
  - reenable kio_smb everywhere (including F9) now that we have a GPLv3 qt4
    (kio_smb itself is already GPLv2+)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-2
changelog:
  - if building for a KDE 4 desktop, include the khelpcenter.desktop service
    description for KDE 3 here so help works in KDE 3 apps


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72 (4.1 alpha 1)
  - drop upstreamed deinterlace-crash patch
  - drop khelpcenter patch (fixed upstream)
  - update Phonon PulseAudio patch
  - drop Fedora 7 support
  - update file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.0-1.1
changelog:
  - don't remove autostart directory on F8- (does not conflict, fixes build
    failure due to nepomukserver.desktop listed in filelist but not found)


author: Rex Dieter <rdieter@fedoraproject.org> 4.1.2-2
changelog:
  - make VERBOSE=1
  - respin against new(er) kde-filesystem
  - grow -libs, kde4 styles are unavailable for i386 applications (#456826)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - Drop upstreamed patch kdebase-runtime-4.1.2-kioexec.patch
  - BR cmake >= 2.6.2
  - Use 'make install/fast'
  - Drop subpkg phonon-backend-xine and related file entries: this has to be
    part of phonon now that it moved there
  - Drop xine-lib-devel BR
  - Add libkwalletbackend to files list
  - Drop _default_patch_fuzz 2


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-5
changelog:
  - don't ship libkwalletbackend.so devel symlink (conflicts with kdelibs3-devel,
    and should be in a -devel package if it gets shipped)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-2
changelog:
  - Files not trashed to the correct location in Dolphin/Konqueror
    (#481598, kdebug#178479)
  - omit --with-samba crud


author: Lukáš Tinkl <ltinkl@redhat.com> - 4.3.0-3
changelog:
  - fix Oxygen comboboxes' text being garbled (drawn twice); fixes kdebug:202701
  - fix Locale control module crashing when dragging languages around (kdebug:201578)


author: Nils Philippsen <nils@redhat.com> - 4.3.1-3
changelog:
  - if available, use the "manpath" command in the man kioslave to determine man
    page file locations


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.1-2
changelog:
  - Requires: hal-storage-addon (f14+)
  - drop <f11 Conflicts baggage
  - plasma-scriptengine-javascript-4.4-errata


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - active-development-4.7-diff.patch
  - omit activitymanger unconditionally
  - drop dep on libkactivities


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.2-5
changelog:
  - -desktoptheme, -drkonqi, -kio-smb subpkgs (#855930)
  - drop hard Requires: htdig (#855930)
  - remove .spec cruft


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-2
changelog:
  - BR: libXxf86misc-devel
  - BR: libXxf86misc-devel
  - BR: libXcomposite-devel
  - BR: bluez-libs-devel
  - BR: libxklavier-devel
  - BR: pam-devel
  - BR: lm_sensors-devel
  - BR: libXdamage-devel
  - BR: libXv-devel
  - BR: libXres-devel


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-3
changelog:
  - own some more directories
  - add %defattr to package devel
  - some spec cleanups
  - -R: kdepimlibs-devel
  - +BR: libXpm-devel
  - +BR: glib2-devel (do we really need this?)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.0-7
changelog:
  - use kde.desktop from /usr/share/apps/kdm/sessions/kde.desktop
  - use %config(noreplace) for /etc/ksysguarddrc
  - Requires: kdebase, kdebase-runtime, oxygen-icon-theme
  - fix url


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.96.1-2
changelog:
  - %doc README COPYING
  - -libs subpkg
  - -libs: Requires: kdelibs4
  - don't remove libplasma.so from %{_kde4_libdir}
  - %files: use %_datadir for dbus-1/interfaces,xsessions


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.1-3
changelog:
  - update and apply redhat-startkde patch
  - update and apply KDM ConsoleKit patch (#228111, kde#147790)
  - ConsoleKit patch also includes xdmcp fixes from Mandriva (#243560)


author: Sebastian Vahl <fedora@deadbabylon.de> 3.96.2-2
changelog:
  - BR: dbus-devel
  - crystalsvg icons are not part of kdebase-workspace anymore
  - make sure libkdeinit_plasma.so is in normal package


author: Rex Dieter <rdieter[AT]fedoraproject.org> 3.97.0-3
changelog:
  - Requires: coreutils dbus-x11 xorg-x11-apps xorg-x11-utils
              xorg-x11-server-utils (used in startkde)
  - drop pam configs that were previously moved to kde-settings


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed creategtkrc-gtk212 patch
  - update redhat-startkde and consolekit-kdm patches


author: Than Ngo <than@redhat.com> 4.0.2-7
changelog:
  - apply upstream patch to fix changing wallpaper causes desktop to go white
  - apply upstream patch to check whether the to-be-embedded window has been destroyed, (bz#437058)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.0.3-15
changelog:
  - workaround #434824: KDE4 System Settings - No Method To Enter Administrative Mode
  - fix #441062: packagekit tools do not show icons correctly on KDE


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - update file list (Lorenzo Villani)
  - port plasma-konsole, ck-shutdown, rootprivs, plasma-default-wallpaper patches
  - remove NoDisplay=true in systemsettings onlyshowkde patch (still add
    OnlyShowIn=KDE), rename to show-systemsettings
  - drop upstreamed suspend patch
  - drop backported kde#155362 and menu-switch patches
  - drop rh#443610 patch, "Zoom Out" should be working in 4.1
  - disable kde#158301 patch for now (fails to apply, looks hard to port)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.85-3
changelog:
  - rewrite and reapply plasma-default-wallpaper patch
  - (no more separate plasma-default-wallpaper-config part)
  - rediff kde#154119 patch one last time


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-2
changelog:
  - backport Plasma tooltip manager from KDE 4.2 (fixes regression from 4.0)
    WARNING: Adds some new APIs from 4.2 (Plasma::popupPosition, Plasma::viewFor,
             Plasma::ToolTip*), use at your own risk, we have no control to
             guarantee that they will not change!


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.99-5
changelog:
  - F10+: fix circular kdebase<->kdebase-workspace dependency: don't Obsolete or
    Require kdebase, as kdebase now requires kdebase-workspace, obviating the
    upgrade path hack


author: Lukáš Tinkl <ltinkl@redhat.com> 4.1.0-5
changelog:
  - fix 457479: "Run as root" dialog of kdm system settings is shown twice
    (due to activated signal being connected to twice)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-6
changelog:
  - reenable panel-autohide-fix-flicker patch
  - backport revision 866998 to fix the CPU consumption problem (kde#172549)
  - backport panelview.cpp coordinate fixes (revisions 869882, 869925, 870041)
  - backport revision 871058 (request config sync when panel controller goes away)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.2-10
changelog:
  - never touch PATH in startkde, prepending $QTDIR/bin is unnecessary on Fedora
    and breaks locating Qt 3 Assistant and other Qt 3 stuff (startkde gets run
    with a full path by KDM)


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - drop _default_patch_fuzz 2
  - rebase startkde patch
  - rebase plasma-konsole patch
  - rebase ck-shutdown patch
  - add PyKDE4-devel, python-devel and PyQt4-devel to build plasma's python
    scripting interface
  - BR google-gadgets-devel for google gadgets scriptengine
  - BR libusb-devel for Logitech USB support in KControl


author: Than Ngo <than@redhat.com> 4.1.80-2
changelog:
  - merged
  - drop kdebase-workspace-4.1.2-kdm-i18n.patch, it's included in upstream
  - drop kdebase-workspace-4.0.85-plasma-default-wallpaper.patch, it's included in upstream
  - drop kdebase-workspace-4.1.65-consolekit-kdm.patch
  - add kdebase-workspace-4.1.80-session-button.patch
  - add kdebase-workspace-4.1.2-ldap.patch


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-3
changelog:
  - rebase kdebase-workspace-4.1.1-show-systemsettings.patch
  - new library: Kephal -> adapt file lists


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.80-5
changelog:
  - use python_sitearch for x86_64 systems
  - kephal seems to be disabled/removed, re-adapted file lists


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.85-5
changelog:
  - drop BR edje-devel, we need QEdje instead, which we don't have yet
  - comment out BR google-gadgets-* for now, need 0.10.4, have 0.10.3


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.0-3
changelog:
  - Requires: PyKDE4 (for plasmascript bits)
  - solid-bluetoothTrunkTo42.diff (bug #481801), and
    +Provides: solid-bluetooth(-devel) = 4.3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.0-4.1
changelog:
  - conditionalize bluetooth backport on F10+
  - F9: revert solid-bluetooth to the version from KDE 4.1.4


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-9
changelog:
  - kdm subpkg
  - -devel: move cmake modules here
  - Requires: kdelibs4%{?_isa} ..
  - BR: libutempter-devel (drops need for kwrited helper)


author: Rex Dieter <rdieter@fedoraproject.org> 4.2.85-2
changelog:
  - upgrade path broken (F-11+), Obsoletes: guidance-power-manager (#502892)
  - drop < F-10 crud, have_bluez3


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.95-2
changelog:
  - port and reapply rootprivs (#434824) patch (#508593)
  - fix internal version number (otherwise it mismatches with our file list)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - move designer plugins to -libs, fixes
    Multilib conflicts for index.cache.bz2 (#515088)
  - tighten -libs deps, using %{?_isa}
  - %check: desktop-file-validate


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-101
changelog:
  - inflate Release tag, avoiding possible upgrade/obsoletes pain
  - -devel: drop Provides: PolicyKit-kde-devel, bump Obsoletes


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.1-3
changelog:
  - -python-applet: Provides: plasma-scriptengine-python
  - Requires: system-ksplash-theme (f12+,rhel6+)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.75-0.4.svn1048496
changelog:
  - backport battery plasmoid from current pre-4.3.80 trunk for showremainingtime
  - rebase battery-plasmoid-showremainingtime patch
  - rebase brightness-keys patch for the above backport


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.3.85-3
changelog:
  - F13+: don't Obsoletes: PolicyKit-kde, let polkit-kde obsolete it
  - F13+: explicitly require polkit-kde instead of PolicyKit-authentication-agent


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-5
changelog:
  - do not link calendar dataengine with Akonadi (kde#215150, rh#552473)
  - s/plasma-engine/plasma-dataengine/


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.90-8
changelog:
  - SELinux is preventing /sbin/setfiles "read" access on
    /var/spool/gdm/force-display-on-active-vt (deleted) (#556643)


author: Than Ngo <than@redhat.com> - 4.4.0-4
changelog:
  - move xsession desktop files to main package
    (cannot start kde from gdm if kdm not installed)
  - Desktop locking crashes (kde#217882#16)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.2-2
changelog:
  - try to workaround "X server hogs the CPU (#577482)" by letting X
    choose vt itself
  - include (but not yet apply) kubuntu_34_kdm_plymouth_transition.diff


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.2-3
changelog:
  - rip out bulletproof X changes (cf. kubuntu_33_kdm_bulletproof_x.diff) from
    our copy of kubuntu_34_kdm_plymouth_transition.diff
  - drop experimental novt patch, should not be needed with the working Plymouth
    integration and may have side effects (can readd it later if really needed)
  - fix icon name in plasma-konsole patch: use XDG icon instead of kappfinder one


author: Rex Dieter <rdieter@fedoraproject.org> - 4.4.85-2
changelog:
  - Adding "Enable networking" button to knetworkmanager (rh#598765, kde#238325)
  - drop < f12 conditionals
  - pciutils, raw1394 & qualculate BRs
  - added kcmkdm helper and policy (from kdelibs)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.2-2
changelog:
  - include better, upstream fix for: krandr: Display Settings are Lost
    on Logout (kdebug183143, rh#607180)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.2-5
changelog:
  - use upstream ck-shutdown patch from 4.6 trunk (instead of my old one),
    supports GDM session switching (#560511, kde#186198)
  - drop old F11- version of the ck-shutdown patch, F11 is EOL


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.5.3-2
changelog:
  - drop classicmenu-games patch, upstream fixed the same issue differently and
    now the 2 fixes conflict (classic menu confuses Name and Description)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.5.80-7
changelog:
  - -googlegadgets => plasma-scriptengine-googlegaddgets
  - -python-applet => plasma-scriptengine-python
  - (new) plasma-scriptengine-ruby


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.1-2
changelog:
  - use system-kde-theme again (ie, lovelock-kde-theme on f15)
  - -Requires: system-backgrounds-kde
  - +Requires: system-plasma-desktoptheme
  - -ksplash-themes: move Default (Air+Horos) ksplash theme here


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.6.1-7
changelog:
  - Restore lost hunks from redhat_startkde patch, fixes regressions with running
    Qt 3 binaries (Qt 3 Assistant etc.) and with the initial background color
  - Fix incorrectly rebased hunk from redhat_startkde patch, fixes regression with
    language setting


author: Lukas Tinkl <ltinkl@redhat.com> - 4.6.2-2
changelog:
  - #694222 - Brightness controls no longer work
  - kdebug#257948 - Powerdevil can no longer control brightness
  - drop obsolete HAL backlight patch


author: Jaroslav Reznik <jreznik@redhat.com> 4.7.0-1
changelog:
  - 4.7.0
  - kde4workspace_version is not needed anymore
  - Provides: kde-workspace kde-wallpapers (to match new upstream tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.1-2
changelog:
  - upstream kwin_performance patch
  - Use /etc/login.defs to define a 'system' account instead of hard-coding 500 (#732830)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.3-12
changelog:
  - Crash in TaskManager::TaskItem::task (kde#272495)
  - Crashes When Adding Weather Widgets (Geolocation) (kde#277036)


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-3
changelog:
  - Fixed file listed twice
  - Remove big cursors from files (they are no longer in upstream tarball)
  - Add new files: libkwinglutils.so*, liboxygenstyleconfig.so*
    libpowerdevilconfigcommonprivate.so*, kfontinst.knsrc
  - New ksplash theme Minimalistic
  - patch: don't use INSTALL to copy file to current binary dir


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-4
changelog:
  - Respin with new upstream tarball
  - Drop patch: don't use INSTALL to copy file to current binary dir


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
changelog:
  - kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
  - gcc47 fixes


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.0-2
changelog:
  - kcm_colors subpkg (#761184)
  - kdm-themes: Requires: kde-wallpapers unconditionally (#784389)
  - s/kdebase-runtime/kde-runtime/


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.8.0-5
changelog:
  - kde-workspace: Requires: ConsoleKit (shutdown/restart, works around #788171)
  - kdm: Requires: ConsoleKit (works around #787855, nasty error message on login)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.8.80-2
changelog:
  - new showremainingtime patch, now just defaults the option to true
    (It doesn't have ugly side effects anymore with the rewritten plasmoid.)


author: Rex Dieter <rdieter@fedoraproject.org> 4.8.95-3
changelog:
  - Battery Monitor widget stops tracking charging state changes after suspend/resume cycle (#837345, kde#287952)


author: Than Ngo <than@redhat.com> - 4.8.97-2
changelog:
  - remove obsolete stuffs in startkde, kde-4.6.x already uses QLocale
    to try obtain a default country.


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.0-2
changelog:
  - kcm_fonts should use $XDG_CONFIG_HOME/fontconfig/fonts.conf for storage settings for fontconfig > 2.10.0 (kde#304317)


author: Lukáš Tinkl <ltinkl@redhat.com> 4.9.1-6
changelog:
  - update the systemd PowerDevil Policy Agent patch to match the upstream
    version (part of KDE 4.9.2)
  - update clock applets on system date/time changes


author: Martin Briza <mbriza@redhat.com> - 4.9.3-3
changelog:
  - user switching dialog now doesn't list inactive (closing) sessions and more information is retrieved from logind


author: Martin Briza <mbriza@redhat.com> 4.9.90-2
changelog:
  - Merged and cleaned the systemd shutdown and logout patches.
  - It is possible to use systemd and/or CK without defining it at compile time


author: Rex Dieter <rdieter@fedoraproject.org> 4.9.97-3
changelog:
  - hack to use org.freedesktop.login1 to handle suspend (instead of upower),
    seems to help avoid double-sleep (#859227)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.0-6
changelog:
  - tweak fedora-plasma-cache.sh for plasma-svgelements*, Trolltech.conf too
  - enable powerdevil-login1 support on f18


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.1-2
changelog:
  - PowerDevil should use upower to suspend on F17 (#920874)
  - other small upstream fixes (xrandrbrightness, login1 leak, stop screensaver)


author: Rex Dieter <rdieter@fedoraproject.org> 4.10.2-5
changelog:
  - drop LD_BIND_NOW from startkde (#908380)
  - fold all startkde-related patches into redhat_startkde.patch


author: Martin Briza <mbriza@redhat.com> 4.10.2-9
changelog:
  - regenerated the systemd-displaymanager patch against latest upstream master
  - worked around #955374 before I fix it clean upstream


author: Than Ngo <than@redhat.com> - 4.10.5-3
changelog:
  - CVE-2013-4132, backport systray icons memleak fix
  - CVE-2013-4133, backport potential kcheckpass security issue


author: Than Ngo <than@redhat.com> - 4.10.5-20
changelog:
  - Resolves: bz#1040678 - cannot assign custom keyboard shortcut for Show Desktop Grid
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Sebastian Vahl <fedora@deadbabylon.de> 7:3.96.0-4
changelog:
  - BR: libXcomposite-devel
  - BR: libXdamage-devel
  - BR: libxkbfile-devel
  - BR: libXpm-devel
  - BR: libXv-devel
  - BR: libXxf86misc-devel
  - BR: libXtst-devel
  - BR: libXScrnSaver-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 7:3.97.0-3
changelog:
  - don't run kpackage through consolehelper, it can elevate privileges on demand
    (see also #344751, though that bug appears not to have affected KDE 4)


author: Rex Dieter <rdieter@fedoraproject.org> 7:4.0.1-1
changelog:
  - 4.0.1
  - don't use consolehelper for kuser (for now anyway, didn't work anyway)
  - -kpackage scriptlet fixes


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - add files and description for ksystemlog
  - kcron is now a KCM (update file list)
  - remove secpolicy from file list and description (dropped upstream)


author: Rex Dieter <rdieter@fedoraproject.org> 4.1.2-4
changelog:
  - make %description for kcron, knetworkconf more clear (#467650)
  - Requires: kdebase-workspace (for kcm modules)
  - cleanup extraneous scriptlets


author: Than Ngo <than@redhat.com> - 4.2.2-4
changelog:
  - get rid of the dependency of system-config-printer
  - drop the BR on PyKDE4, system-config-printer-libs
    it's just needed for runtime


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.85-2
changelog:
  - reenable sytem-config-printer-kde
  - rebase printing patch, drop hunks fixed upstream
  - BR python-devel instead of just python
  - fix file list, system-config-printer-kde is now a System Settings module


author: Than Ngo <than@redhat.com> - 7:4.9.0-2
changelog:
  - fix ksystemlog to find log files correctly
  - mv s*c*p-kde docs in subpackage system-config-printer-kde


author: Than Ngo <than@redhat.com> 3.3.2-0.2
changelog:
  - add correct paths for xscreensaver, xscreensaver-4.18-14 stores the
    config files and graphic hacks in %{_libdir}/xscreensaver/config/hacks
    and %{_libexecdir}/xscreensaver/hacks/


author: Than Ngo <than@redhat.com> 3.4.1-2
changelog:
  - configure script does not look the right xscreensaver dirs
    apply patch to fix this problem, #161312, thanks to Rex Dieter


author: Rex Dieter <rdieter@fedoraproject.org> 4.0.2-2
changelog:
  - -icons: Provides: *-icon-theme (Locolor, ikons, kdeclassic, kids, slick)
  - include noarch build hooks (not enabled)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.2-3
changelog:
  - optimize scriptlets
  - omit (unused) noarch hacks, use f10+ support
  - -extras -> -screensavers rename
  - -icons -> kdeclassic-icon-theme rename
  - main pkg, Requires: -wallpapers, -sounds (upgrade path)
  - -wallpapers, -sounds: drop Req: kdebase-workspace
  - BR: eigen2-devel


author: Preston Brown <pbrown@redhat.com>
changelog:
  - removed bell.xpm (used to be in fvwm2-icons, don't want installer to see
  - this previous connection and autoselect kdebase for upgrade).


author: Preston Brown <pbrown@redhat.com>
changelog:
  - today's snapshot makes kfm a bit nicer and some other fixes
  - moved default rc files to kdesupport


author: Preston Brown <pbrown@redhat.com>
changelog:
  - snapshot, includes kde 1.1.1 + fixes
  - kvt removed for security reasons.  It is a steaming pile of...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - customized startkde script to set up user environment if not present.
  - mention kthememgr in description.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added link to /etc/X11/applnk, .directory file
  - included lowcolor icon sub-package
  - enable .desktop file access


author: Preston Brown <pbrown@redhat.com>
changelog:
  - start autorun if present in startkde
  - check for configured soundcard before running sound services


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Build the OpenGL screensavers, and move them to a separate package
  - Improve the spec file (BuildPrereqs etc.)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - ExcludeArch ia64 for now
  - remove gnome .desktop file, we get it from gnome-core now.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild, now that kdelibs2 works on alpha
  - use the same ugly hack to get kdebase to compile
  - remove ksysguard on alpha (even more compiler problems)


author: Than Ngo <than@redhat.com>
changelog:
  - fix dependency problem with KDE1 so that KDE1 and KDE2 can be installed
    at the same time
  - add missing ldconfig in %post anf %postun
  - fix for reading config files in /etc/X11/xdm, add Xsession to requires


author: Than Ngo <than@redhat.com>
changelog:
  - fix gnome-session so that KDE2 can be started from gdm
  - pam/kde2 instead pam/kde to avoid problem with KDE1
  - don't requires qt-GL, It's now in qt


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - get rid of the 3d-screensavers package - now that qt-GL is part of qt,
    there's no need to keep them separate to avoid the dependency.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to CVS
  - Enable building kpilot
  - Obsolete kpilot
  - Don't exclude ia64, use -O0 on ia64
  - Disable building kpilot on ia64 (compiler breakage)


author: Than Ngo <than@redhat.com> 6:3.2.0-0.3
changelog:
  - 3.2.0 release
  - built with qt 3.3.0
  - add patch file from Stable branch, fix some critical bugs in kmail


author: Than Ngo <than@redhat.com> 3.3.2-0.1
changelog:
  - update to 3.3.2
  - get rid of the kdepim-3.3.1-cvs.patch, kdepim-3.3.0-holiday.patch,
    both are included in 3.3.2


author: Than Ngo <than@redhat.com> 6:3.4.1-1
changelog:
  - add kdepim-kpilot-fix.diff
  - update to 3.4.1
  - remove kdepim-3.4.0-long.patch, it's included in new upstream


author: Than Ngo <than@redhat.com> 6:3.5.2-2
changelog:
  - fix #190491, korganizer crashes whenever New Event selected
  - fix crash from proko2
  - possibly fix crash while selecting mail in mail header view
  - fix #122571, kmail doesn't remember "fallback character encoding" setting
  - fix #126571, kmail crashes when pressing "Send again..." in drafts folder
  - fix syntax error in /usr/bin/kmail_clamav.sh


author: Than Ngo <than@redhat.com> 6:3.5.4-1
changelog:
  - apply upstream patches,
     - Kmail crashes on startup, kde#132008
     - Cannot send to addresses containing an ampersand (&), kde#117882


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
     fix 98545, kmail does not remember pop3 passwords
     add default values for font sizes
     fix #133792, do not double-count days during weekly-summarized report
     remove a duplicated holiday
     fix #134200, always initialize mLineHeight and mFirstColumnWidth
     fix #126975, Refuse to LOGIN when hasCapability("LOGINDISABLED")
     fix #134702, Kontact crashes when moving mail between imap folders
     fix #126060, Kmail crash when IMAP mailbox modified externally


author: Rex Dieter <rdieter[AT]fedoraproject.org> 6:3.5.6-7
changelog:
  - +BR: gpgme-devel gnokii-devel libmal-devel
  - +Requires: pinentry-gui
  - drop unused/deprecated patches
  - revert to kinder/gentler scriptlets
  - sanitize .la files a bit


author: Lorenzo Villani <lvillani@binaryhelix.net> - 6:4.1.80-1
changelog:
  - 4.1.80
  - BR cmake >= 2.6.2
  - make install/fast
  - kdepim-4.1.2-kabcdistlistupdater.patch upstreamed


author: Rex Dieter <rdieter@fedoraproject.org> - 4.3.0-2
changelog:
  - -libs: move designer plugins here
  - %check: desktop-file-validate
  - don't own %{_kde4_appsdir}/kconf_update/


author: Radek Novacek <rnovacek@redhat.com> 7:4.7.80-1
changelog:
  - 4.7.80 (beta 1)
  - add BR: kdebase-devel
  - drop "nepomuk disabled spam" patch, patched file not exists


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.2-2
changelog:
  - build apidocs and put them into an -apidocs subpackage (can be turned off)
  - BR doxygen, graphviz and qt4-doc when building apidocs


author: Lorenzo Villani <lvillani@binaryhelix.net> - 4.1.82-2
changelog:
  - add --debug-output to our cmake call, that should fix a reproducible
    bug with cmake and ppc builds (this work-around should be
    removed anyway)


author: Rex Dieter <rdieter@fedoraproject.org> 4.7.2-2
changelog:
  - pkgconfig-style deps
  - "Mimetype tree is not a DAG!" errors + crashes when using SMI 0.91 (#749618)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.9.1-3
changelog:
  - Update holiday_sg_en-gb (#857877, kde#306924)
  - Update Argentina holidays rule file (kde#306347)
  - kmail cannot display html messages with images refered (kde#205791)
  - transportlistview: resize to content


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-0.1.20080506svn804581
changelog:
  - update to revision 804581 from KDE SVN (to match KDE 4.0.72)
  - add COPYING and COPYING.LIB as %doc
  - update file list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-3
changelog:
  - BR plasma-devel
  - add Provides: kde-plasma-lancelot
  - fix file list
  - BR libkexiv2-devel >= 0.4.0 on F10+


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.2.1-2
changelog:
  - fix Lancelot rendering issues with Qt 4.5 (F11+ only, as the effect of that
    patch with 4.4.3 is unknown)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.2.1-3
changelog:
  - make bball applet work, ship .svg instead of .svgz (kdebug#185568)
  - use new %_qt45 macro
  - spec housecleaning


author: Radek Novacek <rnovacek@redhat.com> 4.7.0-2
changelog:
  - Fix crash with Group Desktop plasma option (fixed upstream)
  - https://bugs.kde.org/show_bug.cgi?id=278222#c16


author: Rex Dieter <rdieter@fedoraproject.org> - 4.7.97-1
changelog:
  - 4.7.97
  - kimpanel: omit ibus backend on f17+ FTBFS (#771115)
  - add patch that fix shadowning variable


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.96.2-2
changelog:
  - drop kbabel from description (not actually there)
  - reenable kompare, fix its build and porting bugs (kde#153463)
  - add missing BR subversion-devel, add files for kio_svn to list
  - add missing BR binutils-devel (for libiberty), add files for kmtrace to list


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.97.0-6
changelog:
  - update Kompare from SVN (rev 748928)
  - Kompare now installs unversioned (private) shared libs, package them properly


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 3.97.0-7
changelog:
  - don't look for libkompare*part.so in %{_kde4_libdir}
  - don't list D-Bus interfaces twice in file list
  - build Kompare documentation


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.0-1
changelog:
  - update to 4.0.0
  - drop upstreamed fix-kompare patch
  - update file list (no more katesessionmenu.desktop)


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.0.72-1
changelog:
  - update to 4.0.72
  - Obsoletes/Provides kaider (now part of kdesdk, renamed to lokalize)
  - add lokalize to description and file list
  - add BR strigi-devel for lokalize
  - add BR boost-devel (now needed by Umbrello)


author: Than Ngo <than@redhat.com> 4.1.2-4
changelog:
  - check if the document has been saved, if not ask the user
    to save the change or close without saving


author: Kevin Kofler <Kevin@tigcc.ticalc.org> 4.1.80-3
changelog:
  - BR plasma-devel instead of kdebase-workspace-devel
  - don't require kdebase-workspace
  - rebase Lokalize quit menu patch
  - BR libical-devel


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.0-3
changelog:
  - fix Cervisia not to unconditionally enable auto spell checking (kde#228587)
  - BR binutils-static (F13+)


author: Rex Dieter <rdieter@fedoraproject.org> 4.6.3-2
changelog:
  - Unowned  /usr/share/kde4/apps/{cervisiapart,kcachegrind,kuiviewer,kuiviewerpart,lokalize} dirs (#645067)


author: Radek Novacek <rnovacek@redhat.com> 4.7.80-1
changelog:
  - 4.7.80 (beta 1)
  - Drop patch for fixing virtual inheritance of QObject (fixed upstream)
  - Drop patch for fixing big endian check/logic to not fail the build (fixed upstream)
  - libkomparepart.so renamed to komparepart.so (same for komparenavtreepart.so)


author: Matthias Saou <http://freshrpms.net/> 1.1.13-1
changelog:
  - Update to 1.1.13.
  - Change mode of configuration file to 0600.
  - Don't include all of "doc" since it meant re-including all man pages.
  - Don't include samples in the main configuration path, they're in %doc.
  - Include patch to add an optional label to interfaces.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-4
changelog:
  - Add missing \n to the kernel define, for when multiple kernels are installed.
  - Pass STRIP=/bin/true to "make" in order to get a useful debuginfo package.


author: Matthias Saou <http://freshrpms.net/> 1.1.13-5
changelog:
  - Include types patch to fix compile on F7 (David Woodhouse).
  - Fix up file modes (main binary 700 -> 755 and config 600 -> 640).


author: Matthias Saou <http://freshrpms.net/> 1.1.14-1
changelog:
  - Update to 1.1.14.
  - Remove all upstreamed patches.
  - Remove our init script and sysconfig files, use the same now provided by the
    upstream package (will need to patch for LSB stuff soonish).
  - Include new goodies/arpreset.pl in %doc.
  - Add missing scriplet requirements.


author: Matthias Saou <http://freshrpms.net/> 1.1.14-2
changelog:
  - Include patch from Shinji Tanaka to fix conf include from inside some
    directives like vrrp_instance.


author: Matthias Saou <http://freshrpms.net/> 1.1.19-3
changelog:
  - Update init script to have keepalived start after the local MTA (#526512).
  - Simplify the kernel source detection, to avoid running rpm from rpmbuild.


author: Matthias Saou <http://freshrpms.net/> 1.1.20-1
changelog:
  - Update to 1.1.20 (#589923).
  - Update BR conditional for RHEL6.
  - No longer include goodies/arpreset.pl, it's gone from the sources.


author: Ryan O'Hara <rohara@redhat.com> - 1.2.7-3
changelog:
  - Update spec file.
  - Add option to prevent respawn of child processes.
  - Remove duplicate command-line option code.
  - Use popt to generate usage message.
  - Fix pointer arithmetic for VRRP packets.
  - Fix comparison of primary IP address.
  - Fix loading of SSL certificate.
  - Fix typo in error message.
  - Update FSF address in GPLv2 license.
  - Remove debug message from if_get_by_ifname.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-58
changelog:
  - Updating kdump.init and mkdumprd with most recent RHEL5 fixes
  - Fixing BuildReq to require elfutils-devel-static


author: Neil Horman <nhorman@redhat.com> - 1.102pre-1
changelog:
  - Bumping kexec version to latest horms tree (bz 257201)
  - Adding trigger to remove initrds when a kernel is removed


author: Neil Horman <nhorman@redhat.com> - 1.102pre-3
changelog:
  - Fix ARCH placement in kdump init script (bz 427201)
  - Fix BuildRequires
  - Fix Makedumpfile to build with new libelf


author: Neil Horman <nhorman@redhat.com> - 1.102pre-6
changelog:
  - Bringing rawhide up to date with bugfixes from RHEL5
  - Adding patch to prevent kexec buffer overflow on ppc (bz 428684)


author: Neil Horman <nhorman@redhat.com> 2.0.0-18
changelog:
  - Updated initscript to use mkdumprd2 if manifest is present
  - Updated spec to require dash
  - Updated sample manifest to point to correct initscript
  - Updated populate_std_files helper to fix sh symlink


author: CAI Qian <caiqian@redhat.com> - 2.0.0-34
changelog:
  - Massive forward-port from RHEL6
  - Update kexec-kdump-howto.txt
  - Update docs to reflect use of ext4
  - Update mkdumprd to pull in all modules needed
  - Fix mkdumprd typo
  - Removed universal add of ata_piix from mkdumprd
  - Fix infinite loop from modprobe changes
  - Fixed kexec-kdump-howto.doc for RHEL6
  - Update makedumpfile to 1.3.5
  - Improved mkdumprd run time
  - Cai's fix for broken regex
  - Fixing crashkernel syntax parsing
  - Fix initscript to return proper LSB return codes
  - Fixed bad call to resolve_dm_name
  - Added poweroff option to mkdumprd
  - Fixed readlink issue
  - Fixed x86_64 page_offset specifictaion
  - Fixed lvm setup loop to not hang
  - Added utsname support to makedumpfile for 2.6.32
  - Fix critical_disks list to exclude cciss/md
  - Add help info for -b option
  - Add ability to handle firmware hotplug events
  - Update mkdumprd to deal with changes in busybox fsck
  - Vitaly's fix to detect need for 64 bit elf
  - Fix major/minor numbers on /dev/rtc
  - Fix ssh id propogation w/ selinux
  - Add blacklist feature to kdump.conf
  - Removed rhpl code from firstboot
  - Fixed firstboot enable sense
  - Remove bogus debug comment from mkdumprd.
  - Handle SPARSEMEM properly
  - Fix scp monitoring script
  - Fix firstboot to find grub on EFI systems
  - Fixed mkdumprd to remove dup insmod
  - Fixed kdump fsck pause
  - Fixed kdump option handling
  - fixed raid5 module detection


author: Cong Wang <xiyou.wangcong@gmail.com> - 2.0.3-42
changelog:
  - get ip addr with getent
  - spec: depends on dracut-network
  - Handle net option for nfs in kdump.conf correctly


author: Dave Young <dyoung@redhat.com> - 2.0.3-44
changelog:
  - update ppc64 sysconfig, resolve bug 811449
  - deal with nic rename issue, resolve bug 810107
  - update x86_64 sysconfig, resolve bug 813711


author: Dave Young <ruyang@redhat.com> - 2.0.3-46
changelog:
  - mkdumprd: Start using --hostonly and --add kdumpbase while calling dracut
  - get_mp function cleanup
  - move kdump script order to the end of pre pivot
  - port raw dump from rhel6
  - remove multi dump


author: Dave Young <ruyang@redhat.com> - 2.0.3-48
changelog:
  - do_default_action cleanup, Resolves: bz805773
  - add rhcrashkernel-param for anaconda use, Resolves: bz707441
  - Basic iscsi target dump support (software initiator), Resolves bz822701
  - Static ip configuratio support, Resolves: bz822739
  - udev rules fix, Resolves: bz808817


author: Dave Young <ruyang@redhat.com> - 2.0.3-49
changelog:
  - cleanup DUMP_INSTRUCTION handling
  - final reboot behavior fix
  - dump_rootfs for default target fix
  - add vlan support
  - fix and refactor bond handling code
  - fix and refactor bridge handling code
  - core_collector doc basic fix
  - omit plymouth module, Resolves: bz821997
  - mkdumprd manpage cleanup manpage
  - mkdumprd: remove --debug
  - mkdumprd: remove noconf
  - makedumprd: remove -d
  - kdump.conf add sshkey
  - kdump.conf remove disk_timeout
  - kdump.conf make path uncommented
  - kdump.conf.5 add default poweroff
  - kdump.conf default shell fix
  - kdump.conf default default action fix
  - kdump.conf.5 remove module option
  - kdump.conf remove kdump_pre/kdump_post
  - kdump.conf: remove link_delay


author: Dave Young <ruyang@redhat.com> - 2.0.3-50
changelog:
  - add blacklist option, Resolves: bz805774
  - Add kdump_post and kdump_pre support, Resolves: bz805773
  - Port check_config from rhel6, Resolves: bz805778
  - raw core_collector fix
  - ssh core_collector fix
  - drcut-kdump.sh: cleanup kdump.conf check


author: Dave Young <ruyang@redhat.com> - 2.0.3-51
changelog:
  - add s390x netdev setup
  - Add s390x support
  - Cleanup temp file leaved at /tmp/
  - add check_size function for fs dump
  - add ssh check_size
  - blacklist patch apply fix
  - Respect bonding mode
  - Support dump over vlan tagged bonding


author: Dave Young <ruyang@redhat.com> - 2.0.3-53
changelog:
  - refactor net option
  - use fstab-sys to mount nfs
  - rename function dump_localfs
  - dump_localfs error path fix
  - update kexec-kdump-howto.txt about systemctl commands
  - ssh propagate alert message fix
  - remove useless dracut cmdline '-c /dev/null'
  - remove useless dracut cmdline for kernel-modules and kdumpbase
  - install core_collector in module-setup.sh
  - install extra_bins in module-setup.sh
  - remove busybox dependency
  - improve warning message of space checking
  - do not mount root twice
  - do not add fstab-sys module in dracut cmdline
  - omit dash module
  - network dns config fix
  - shell exit value fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-54
changelog:
  - pass raw device as dracut argument
  - iscsi setup fix
  - firstboot: add automatic and manual memory reservation for rhel
  - firstboot: remove unnecessary underline shortkey
  - firstboot: fix gtk warning about non-zero page size
  - firstboot: update all kernels config in grubbyCmd
  - firstboot: add actual reserved memory widget
  - firstboot code cleanup
  - rhcrashkernel-param: echo crashkernel=auto for rhel7
  - Remove the kernel-kdump handling
  - s390x firstboot fix
  - remove elilo support
  - grub2 fix in firstboot
  - Take closing the reboot dialog as no
  - Handle new crashkernel= syntax in firstboot
  - Fix a localized string in firstboot
  - Configure kdump in firstboot
  - fix firstboot to ensure kdump svc is disabled properly
  - firstboot text domain fix
  - Update to use systemctl instead of sysv chkconfig
  - port force_rebuild kdump.conf option
  - Change return value to indicate the result of dump_raw() correctly.
  - call dracut function for default shell


author: Dave Young <ruyang@redhat.com> - 2.0.3-56
changelog:
  - Pull vmcore-dmesg patches from vivek
  - ppc/ppc64: compile purgatory with gcc option msoft-float
  - Update to support f18 grub2 efi config file
  - pass persistent name to dracut --device
  - pass persistent name to dracut --mount
  - use persistent name in kdump.conf of initramfs
  - mkdumprd: add function get_persistent_dev
  - remove useless uuid and label handling


author: Dave Young <ruyang@redhat.com> - 2.0.3-59
changelog:
  - Enable kdump service after installation
  - get MEM_RESERVED from sysfs attribute
  - get_ssh_size: use -n to redirect stdin from /dev/null
  - add random feeding code for ssh dump
  - kdump option space checking improvement
  - kdumpctl: multi dump target checking fix


author: Dave Young <ruyang@redhat.com> - 2.0.3-60
changelog:
  - makedumpfile 1.5.1
  - Update po tar.gz
  - Add a notes for zanata process
  - Add two xmls file for po zanata translation
  - Cleanup and recreate po files


author: Dave Young <ruyang@redhat.com> - 2.0.3-62
changelog:
  - Pull translated po files from zanata
  - Optimize redundent code fetching server of network dump
  - change the dump dir format to be more readable


author: Dave Young <ruyang@redhat.com> - 2.0.3-63
changelog:
  - revert explictly handling of PIPESTATUS
  - enable pipefail bash option
  - wrong ssh key fix
  - build fix: Update 3 po files: po/gu.po po/or.po po/zh_CN.po


author: Dave Young <ruyang@redhat.com> - 2.0.3-65
changelog:
  - Add support for team devices
  - Update translation file po/it.po
  - remove wait for net ok function
  - add bootdev cmdline param
  - kdumpnic cmdline file name cleanup


author: Dave Young <ruyang@redhat.com> - 2.0.3-66
changelog:
  - Spec: remove kdump image when a corresponding kernel is removed
  - Merge an upstream patch for fix a ppc64 makedumpfile bug


author: Baoquan He <bhe@redhat.com> - 2.0.3-67
changelog:
  - Remove comma which is redundant
  - Modify codes related to dump dir to make it clearer
  - Rectify the get_host_ip implementation
  - Revert: Merge an upstream patch for fix a ppc64 makedumpfile bug with with CONFIG_SPARSEMEM_EXTREME
  - pull makedumpfile 1.5.3


author: Baoquan He <bhe@redhat.com> - 2.0.3-68
changelog:
  - tune sysconfig to save memory usage
  - Remove useless codes related to LOGGER in kdumpctl
  - kdumpctl:print out the service status
  - Return to start() function when check_ssh_target failed
  - use findmnt instead of blkid in mkdumprd
  - check dump target mounting earlier
  - kdumpctl: rename function name check_config
  - add function to check kdump config file
  - dracut-module-setup.sh: remove UUID/LABEL quotes before using it
  - Change dump_to_rootfs to be a default option and reboot to be default action
  - Remove "-F" in CORE_COLLECTOR when dump_to_rootfs


author: Baoquan He <bhe@redhat.com> - 2.0.4-1
changelog:
  - Delete several patches which have been merged into kexec-tools-2.0.4
  - Revert: Release 2.0.3-72
  - Release 2.0.3-72
  - Pull kexec-tools-2.0.4
  - Check if block device as dump target is resettable
  - mkdumprd: add function perror_exit
  - Deprecate blacklist option


author: Baoquan He <bhe@redhat.com> - 2.0.4-2
changelog:
  - kdump: Save vmcore-dmesg.txt before saving vmcore
  - Remove "ip=" overwrite to 40ip.conf
  - Add support for bridge over bond/team/vlan.
  - Fix bonding options syntax and get all specified options from ifcfg file.
  - add dracut_args option to kdump.conf
  - kexec-tools.spec: Add ethtool to dependency.
  - error out if dump target is encrypted


author: Baoquan He <bhe@redhat.com> - 2.0.4-3
changelog:
  - mkdumprd: remove -M option for dracut
  - kdumpctl: add selinux relabel when service startup
  - depends on dracut selinux module
  - dracut-kdump.sh: umount rootfs after dump_to_rootfs
  - kdump.sysconfig: append "panic=10" to kdump cmdline
  - kexec-kdump-howto: grubby is suggested modifing kernel cmdline
  - kexec-tools.spec: removes kexec udev rules for s390
  - kdump.sysconfig: Add option action_on_fail and set its default as continue
  - Add tab key as delimiter for core_collector in kdump.conf
  - redirect stdout to stderr


author: Baoquan He <bhe@redhat.com> - 2.0.4-4
changelog:
  - dracut-module-setup.sh: improve the approach to get a bridged interface list
  - dracut-module-setup.sh: cleanup - use kdump_get_mac_addr() function
  - dracut-module-setup.sh: use kernel exported mac address in kdump_get_mac_addr()
  - dracut-module-setup.sh: use perm addr of slaves to setup bonding network
  - kdump: Do not output debug messages by default
  - dracut-module-setup.sh: kdump module depends on drm module
  - mkdumprd: return error if no write permission on save path of server for ssh


author: Baoquan He <bhe@redhat.com> - 2.0.4-5
changelog:
  - monitor-dd-progress fix
  - rawdump: only show dd progress bar when core_collector is not makedumpfile
  - kexec-tools.spec: replaces scriptlets with new systemd macros
  - dracut-kdump.sh: umount fs right before kdump exit
  - dracut-kdump.sh: recursively umount fs and its submounts
  - dracut-kdump.sh: cleanup - using local variable names instead of $1/$2 in functions
  - dracut-kdump.sh: name the invalid vmcore to vmcore-incomplete
  - dracut-kdump.sh: Output top level information about the kdump progress.
  - kexec-kdump-howto: Add a section for debugging tips


author: Baoquan He <bhe@redhat.com> - 2.0.4-6
changelog:
  - add lzo build
  - makedumpfile: Add vmap_area_list definition for ppc/ppc64.
  - pull makedumpfile-1.5.4
  - mkdumprd: check return value of subshell
  - mkdumprd: get_persistent_dev() return original dev if no persistent dev exists.
  - dracut-kdump.sh: Merge dump_to_rootfs() to dump_fs()
  - dracut-kdump.sh: explicitly sync after each dump
  - Correct wrong weekday of changelog
  - kexec-tools.spec: Remove incorrect description in changelog


author: Baoquan He <bhe@redhat.com> - 2.0.4-7
changelog:
  - dracut-kdump.sh: add do_dump() and error out if dump vmcore fails
  - dracut-module-setup.sh: setup correct system time and time zone in 2nd kernel.
  - kernel cmdline: Remove hugepage allocations
  - Use /lib/dracut/no-emergency-shell to control action on fail
  - Revert: kdump.sysconfig: Add option action_on_fail and set its default as continue
  - dracut-kdump.sh: Redirect kdump script stdout/stderr to /dev/console
  - add snappy build


author: Baoquan He <bhe@redhat.com> - 2.0.4-9
changelog:
  - Strip inline comments from the kdump config file before use
  - kdump-lib.sh: add common function strip_comments
  - Introduce kdump-lib.sh for kdump shared functions
  - kdump.service: Start kdump after network is online and remote fs is mounted
  - dracut-module-setup: _dev to be a local variable
  - kdumpctl: Run multiple kdumpctl instances one by one in serial order


author: WANG Chao <chaowang@redhat.com> - 2.0.4-12
changelog:
  - fix sadump format phys_base calculating error
  - kdump, x86: Process multiple Crash kernel in /proc/iomem
  - makedumpfile: wrong cyclic buffer size recalculation causes bitmap data corruption
  - Fix max_mapnr issue on system has over 44-bit addressing.


author: WANG Chao <chaowang@redhat.com> - 2.0.4-14
changelog:
  - Add rd.memdebug in kdump module
  - kdumpctl: Avoid leaking fd to subshell
  - makedumpfile: Understand >= v3.11-rc4 dmesg
  - makedumpfile, ppc: Support to filter dump for kernels that use CONFIG_SPARSEMEM_VMEMMAP.


author: WANG Chao <chaowang@redhat.com> - 2.0.4-15
changelog:
  - makedumpfile: default to lzo compression
  - makedumpfile: add makedumpfile.conf.sample and its manpage


author: WANG Chao <chaowang@redhat.com> - 2.0.4-20
changelog:
  - vmcore-dmesg: fix timestamp error in vmcore-dmesg.txt
  - makedumpfile: re-enable mmap() and introduce --non-mmap
  - kdump.conf uncomment default core_collector line
  - fix an issue when 'ssh' directive appearing in kdump.conf, the rest part of
    lines in this file are ignored


author: WANG Chao <chaowang@redhat.com> - 2.0.4-21
changelog:
  - makedumpfile: Improve progress information for huge memory system
  - s390: use nr_cpus=1 instead of maxcpus=1


author: WANG Chao <chaowang@redhat.com> - 2.0.4-24
changelog:
  - remove selinux flipping when propagating ssh key
  - add kdump-in-cluster-environment.txt to rpm pkg
  - Secure Boot status check warning
  - Some watchdog driver support


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: WANG Chao <chaowang@redhat.com> - 2.0.4-33
changelog:
  - support fence_kdump for generic cluster
  - handle static ip fix
  - stop passing "nofail" mount option to 2nd kernel


author: WANG Chao <chaowang@redhat.com> - 2.0.7-4
changelog:
  - ppc64: kexec load fails due to elf symbol relocation failure.
  - display a message while waiting for kdump lock


author: WANG Chao <chaowang@redhat.com> - 2.0.7-5
changelog:
  - rework of kdump error handling
  - ppc: add fadump support
  - add static route support
  - systemd will take care of shutdown and unmount filesystems
  - fix an issue that can't bring up correct network device


author: WANG Chao <chaowang@redhat.com> - 2.0.7-9
changelog:
  - Enable ppc64le arch.
  - add sample eppic scripts to kexec-tools-eppic package
  - Restart kdump service on cpu ADD/REMOVE events


author: WANG Chao <chaowang@redhat.com> - 2.0.7-10
changelog:
  - Rebase makedumpfile-1.5.7
  - Fix an issue on iscsi boot environment
  - Disable kvm CMA reservation in kdump kernel


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-21
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames
  - make kdump saving directory name consistent with RHEL6


author: Minfei Huang <mhuang@redhat.com> - 2.0.7-26
changelog:
  - kdumpctl: Add the command "kdumpctl showmem" to show the reserved memory
  - Enhance kdump.conf "default" parameters check.
  - Filtered out "noauto" options in 2nd kernel fstab
  - make kdump work when kernel crash after shutdown


author: Minfei Huang <mhuang@redhat.com> - 2.0.7-27
changelog:
  - dracut-module-setup: Apply the manual DNS to the 2nd kernel
  - makedumpfile: --split: assign fair I/O workloads in appropriate time
  - makedumpfile: Support producing a consistent dump file even if disk space is insufficient
  - Disable transparent hugepages in second kernel


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-Anolis-linux --host=x86_64-Anolis-linux \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: Baoquan He <bhe@redhat.com> - 2.0.7-39
changelog:
  - Remove duplicate prefix path ${initdir}
  - Document declaration to support iSCSI HBA (ALL OFFLOAD)
  - kdump.init: fix a typo
  - rpm spec: add two patches to fix ppc64 kexec boot issue
  - kexec-tools ppc64: add arch option --dt-no-old-root
  - kexec-tools fs2dt.c: move copy old root param as a new function
  - kdumpctl: Remove slub_debug from cmdline


author: Baoquan He <bhe@redhat.com> - 2.0.7-40
changelog:
  - kdumpctl: force rebuild in case of file system is modified
  - mkdumprd: move to_dev_name() & get_persistent_dev() to kdump-lib.sh
  - kdumpctl: Move file modification check logic in check_system_modified()
  - kdumpctl: force rebuild in case of dynamic system modification
  - mkdumprd: do not lookup in by-uuid dirs for raw device's persistent name


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


author: Baoquan He <bhe@redhat.com> - 2.0.7-45
changelog:
  - kdump.conf man page fixes
  - kdump.conf comments fixes
  - Add persistent memory support
  - module-setup: Don't handle iBFT in kdump


author: Baoquan He <bhe@redhat.com> - 2.0.7-47
changelog:
  - spec: Update to add dependency on dracut version >= 033-449
  - watchdog: do not add watchdog module in rd.driver.pre now
  - howto: Notes on watchdog module handling
  - kdumpctl: force rebuild in case of watchdog state change
  - mkdumprd: Add dracut watchdog module as default option


author: Baoquan He <bhe@redhat.com> - 2.0.7-50
changelog:
  - spec: Update to add dependency on dracut-network version >= 033-449
  - mkdumprd: Do not add "nfs" dracut module explicitly
  - kexec-kdump-howto: Add doc about the special mount information via "dracut_args"
  - Support special mount information via "dracut_args"


author: Pingfan Liu <piliu@redhat.com> - 2.0.7-52
changelog:
  - kdumpctl: check /etc/fstab modification only when it exists
  - kdumpctl: remove duplicate statement
  - kdumpctl: Kill duplicate code related to file modication check
  - fadump: restore default initrd when fadump mode is disabled
  - kdump/fadump: fix network interface name when switching from fadump to kdump


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-2
changelog:
  - kdumpctl: check the existence of /sys/kernel/security/securelevel
  - kdump.sysconfig.x86_64: Remove 'notsc' from kdump kernel cmdline
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE for aarch64 and ia64
  - kdump.sysconfig: add KDUMP_COMMANDLINE_REMOVE
  - Document: fix incorrect link in fadump-how.txt
  - kexec-tools.spec: add %doc for fadump-howto.txt


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-3
changelog:
  - arm64: backport latest kdump patches
  - Fix `makedumpfile --mem-usage /proc/kcore`
  - kdump-lib.sh: fix incorrect usage with pipe as input for grep -q in is_pcs_fence_kdump()


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-4
changelog:
  - kdump-emergency: fix "Transaction is destructive" emergency failure
  - x86: Support large number of memory ranges


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-5
changelog:
  - ppc64: Reduce number of ELF LOAD segments
  - kexec-kdump-howto: Include notes about using debug kernel as crash kernel
  - Correct two typos in kdumpctl and kdump.conf


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-7
changelog:
  - arm64: Increase the upper limit for RAM segments
  - kdump: Introduce 'force_no_rebuild' option
  - kdump-lib-initramfs.sh: ignore the failure of echo
  - use "systemctl reboot -f" for reboot action


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-18
changelog:
  mkdumprd: remove useless "x-initrd.mount"
  kdumpctl: use "apicid" other than "initial apicid"
  kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors
  kdumpctl: change prepare_cmdline() to operate KDUMP_COMMANDLINE directly
  mkdumprd: use 300s as the default systemd unit timeout for kdump mount
  mkdumprd: reduce lvm2 memory under kdump
  module-setup: suppress the early iscsi error messages
  kdumpctl: fix infinite loop caused by running under bash


author: Pingfan Liu <piliu@redhat.com> 2.0.15-2
changelog:
  - mkdumprd: fix patterns to modify mount options
  - kexec-tools/ppc64: avoid adding coherent memory regions to crash memory ranges
  - kexec-tools/ppc64: fix command line overflow error
  - kexec-tools/ppc64: fix how RMA top is deduced


author: Pingfan Liu <piliu@redhat.com> 2.0.15-3
changelog:
  - makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
  - makedumpfile: ppc64: get the info of mem reserved for crashkernel
  - makedumpfile: Fix SECTION_MAP_MASK for kernel >= v.13


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: Pingfan Liu <piliu@redhat.com> 2.0.15-22
changelog:
  - doc/kdump.conf: Local dump path should be <mnt>/<path>/%HOST_IP-%DATE
  - Update help text to indicate --mem-usage is supported on archs other than x86_64
  - Add missing usage info
  - Rewrite kdump's udev rules, use reload instead of restart
  - kdumpctl: Add reload support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-23
changelog:
  - kdump: fix an error that can not parse the e820 reserved region
  - Doc: add document to declare atlantic support


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-24
changelog:
  - mkdumprd: use --quiet dracut argument to speedup initramfs build
  - mkdumprd: refine regex on dropping mount options


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: David Howells <dhowells@redhat.com> - 0.2-1
changelog:
  - Don't attempt to define the error codes in the header file.
  - Pass the release ID through to the makefile to affect the shared library name.


author: David Howells <dhowells@redhat.com> - 0.3-2
changelog:
  - Added timeout keyctl option
  - request_key auth keys must now be assumed
  - Fix keyctl argument ordering for debug negate line in request-key.conf


author: David Howells <dhowells@redhat.com> - 0.3-3
changelog:
  - Added stdint.h inclusion in keyutils.h
  - Made request-key.c use request_key() rather than keyctl_search()
  - Added piping facility to request-key


author: David Howells <dhowells@redhat.com> - 1.0-1
changelog:
  - Rename library and header file "keyutil" -> "keyutils" for consistency
  - Fix shared library version naming to same way as glibc.
  - Add versioning for shared library symbols
  - Create new keyutils-libs package and install library and main symlink there
  - Install base library symlink in /usr/lib and place in devel package
  - Added a keyutils archive library
  - Shorten displayed key permissions list to just those we actually have


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: David Howells <dhowells@redhat.com> - 1.3-1
changelog:
  - Fix compiler warnings in request-key.
  - Expose the kernel function to get a key's security context.
  - Expose the kernel function to set a processes keyring onto its parent.
  - Move libkeyutils library version to 1.3.


author: David Howells <dhowells@redhat.com> - 1.4-2
changelog:
  - Fix prototypes in manual pages (some char* should be void*).
  - Rename the keyctl_security.3 manpage to keyctl_get_security.3.


author: David Howells <dhowells@redhat.com> - 1.4-4
changelog:
  - Make build guess at default libdirs and word size.
  - Make program build depend on library in Makefile.
  - Don't include $(DESTDIR) in MAN* macros.
  - Remove NO_GLIBC_KEYSYS as it is obsolete.
  - Have Makefile extract version info from specfile and version script.
  - Provide RPM build rule in Makefile.
  - Provide distclean rule in Makefile.


author: David Howells <dhowells@redhat.com> - 1.5-1
changelog:
  - Disable RPATH setting in Makefile.
  - Add -I. to build to get this keyutils.h.
  - Make CFLAGS override on make command line work right.
  - Make specfile UTF-8.
  - Support KEYCTL_REJECT.
  - Support KEYCTL_INSTANTIATE_IOV.
  - Add AFSDB DNS lookup program from Wang Lei.
  - Generalise DNS lookup program.
  - Add recursive scan utility function.
  - Add bad key reap command to keyctl.
  - Add multi-unlink variant to keyctl unlink command.
  - Add multi key purger command to keyctl.
  - Handle multi-line commands in keyctl command table.
  - Move the package to version to 1.5.


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Kevin Kofler <Kevin@tigcc.ticalc.org> - 4.4.0-2
changelog:
  - update docbook version to make doc-translations build with kdelibs >= 4.5,
    fixes FTBFS (#599843)


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Jon Masters <jcm@jonmasters.org> - 2-3
changelog:
  - Update package incorporating fixes from initial review feedback
  - Cleaups to SPEC, rpath, documentation, library and binary locations


author: Jon Masters <jcm@jonmasters.org> - 3-1
changelog:
  - Update to latest upstream (adds new depmod replacement utility)
  - For the moment, use the "kmod" utility to test the various functions


author: Kay Sievers <kay@redhat.com> - 5-1
changelog:
  - Update to version 5
  - replace the module-init-tools package and provide all tools
    as compatibility symlinks


author: Kay Sievers <kay@redhat.com> - 5-3
changelog:
  - temporarily add fake-provides to be able to bootstrap
    the new udev which pulls the old udev into the buildroot


author: Harald Hoyer <harald@redhat.com> 5-6
changelog:
  - add upstream patch to fix "modprobe --ignore-install --show-depends"
    otherwise dracut misses a lot of modules, which are already loaded


author: Kay Sievers <kay@redhat.com> - 7-1
changelog:
  - update to version 7
    - fix issue with --show-depends, where built-in
      modules of the running kernel fail to include
      loadable modules of the kernel specified


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Andy Walsh <awalsh@redhat.com> 6.1.0.0-6
changelog:
  - Fixed kernel requirement to allow subsequent releases without updating spec
  - Resolves: rhbz#1491422


author: Joe Chapman <jochapma@redhat.com> 6.1.0.44-8
changelog:
  - fix readCacheSize handling large numbers
  - vdoformat signals error when it finds a geometry block
  - prevent kernel oops when loading an old geometry block
  - vdoformat silently rounds down physical sizes to a block boundary
  - UDS threads identify related VDO device
  - clean up contents of source tarballs
  - Resolves: rhbz#1505936
  - Resolves: rhbz#1507996
  - Resolves: rhbz#1509466
  - Resolves: rhbz#1510558
  - Resolves: rhbz#1510585
  - Resolves: rhbz#1511201
  - Resolves: rhbz#1511209


author: Joe Chapman <jochapma@redhat.com> 6.1.0.55-9
changelog:
  - fail loading an uncreated index more gracefully
  - remove spurious/unnecessary files from the distribution
  - fix kernel module version
  - make logging less chatty
  - fix an integer overflow in makeVDOLayout
  - Resolves: rhbz#1511034
  - Resolves: rhbz#1511109
  - Resolves: rhbz#1511096


author: Joe Chapman <jochapma@redhat.com> 6.1.0.72-10
changelog:
  - clear VDO metadata on a vdo remove call
  - fix create of new dedupe indices
  - add magic number to VDO geometry block
  - do less logging when stopping a VDO
  - add a UUID
  - Resolves: rhbz#1512127
  - Resolves: rhbz#1516081
  - Resolves: rhbz#1511109
  - Resolves: rhbz#1515183


author: Joe Chapman <jochapma@redhat.com> 6.1.0.89-11
changelog:
  - improve metadata cleanup after vdoformat failure
  - log REQ_FLUSH & REQ_FUA at level INFO
  - improve performance of cuncurrent write requests with the same data
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1521200


author: Joe Chapman <jochapma@redhat.com> 6.1.0.97-11
changelog:
  - Default logical size is no longer over-provisioned
  - Remove debug logging when verifying dedupe advice
  - Resolves: rhbz#1519330


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.106-11
changelog:
  - Detect journal overflow after 160E of writes
  - Clean up UDS threads when removing last VDO
  - Resolves: rhbz#1512968
  - Resolves: rhbz#1523240


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.114-11
changelog:
  - /sys/uds permissions now resticted to superuser only
  - Remove /sys/uds files that should not be used in production
  - Removing kvdo module reports version
  - VDO automatically chooses the proper write policy by default
  - Fixed a Coverity-detected error path leak
  - Resolves: rhbz#1525305
  - Resolves: rhbz#1527734
  - Resolves: rhbz#1527737
  - Resolves: rhbz#1527924
  - Resolves: rhbz#1528399


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.124-11
changelog:
  - Fixed provisional referencing for dedupe.
  - Only log a bio submission from a VDO to itself.
  - vdoformat cleans up metadata properly after fail.
  - Resolves: rhbz#1511587
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1532481


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.130-12
changelog:
  - Fix General Protection Fault unlocking UDS callback mutex
  - Removing kmod-kvdo package unloads kernel module
  - Fix URL to point to GitHub tree
  - Resolves: rhbz#1510176
  - Resolves: rhbz#1533260
  - Resolves: rhbz#1539061


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-13
changelog:
  - Module target is now "vdo" instead of "dedupe"
  - Fixed a bug where crash recovery led to failed kernel page request
  - Improved modification log messages
  - Improved package description and summary fields
  - Resolves: rhbz#1535127
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1540696
  - Resolves: rhbz#1541409


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
  - Deleted unused UDS features.
  - Improved performance of sub 4K writes.
  - Simplified and improved performance of writes with FUA.
  - Improved the accuracy of dedupe statistics.
  - Made the MurmurHash3 implementation architecture independent.
  - Fixed compilation errors on newer versions of GCC.
  - Eliminated spurious allocation of a UDS sparse cache for dense indexes.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resvolves: rhbz#1562228
  - Fixed bugs related to the timing of the creation and destruction of sysfs
    nodes relative to the creation and destruction of VDO data structures.
  - Resolves: rhbz#1559692
  - Fixed a bug which made deduplication impossible to disable.
  - Removed obsolete code.
  - Improved deduplication of concurrent requests containing the same data.
  - Reduced unnecessary logging.
  - Resolves: rhbz#1511127
  - Removed the prepare_ioctl() function to avoid signature changes since
    this function currently does nothing.
  - Resolves: rhbz#1568129
  - Fixed a bug which made using a sparse index impossible to create.
  - Resolves: rhbz#1570156


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.99-1
changelog:
  - Added /sys/kvdo/version which contains the currently loaded version of
    the kvdo module.
  - Resolves: rhbz#1533950
  - Added logging of normal operation when a VDO device starts normally.
  - Resolves: rhbz#1520988
  - Fixed a race in the UDS module which could cause the index to go offline.
  - Resolves: rhbz#1520988
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1582647
  - Fixed thread safety issues in the UDS page cache.
  - Resolves: rhbz#1579492
  - Modified the vdo script to not allow creation of a VDO device on top of an
    already running VDO device.
  - Resolves: rhbz#1572640
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1589249
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1576539


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.111-1
changelog:
  - Added support for issuing fullness warnings via dmeventd
  - rhbz#1519307
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1593444
  - Improved logging when growing the physical size of a VDO volume.
  - Resolves: rhbz#1597890
  - Resolves: rhbz#1597886
  - Removed misleading log messages when rebuilding the UDS index.
  - Resolves: rhbz#1599867


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.120-2
changelog:
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved memory allocation by not using the incorrect __GFP_NORETRY flag
    and by using the memalloc_noio_save mechanism.
  - Resolves: rhbz#1571292
  - Fixed a potential deadlock in the UDS index by using the kernel supplied
    struct callback instead of our own implementation of synchronous
    callbacks.
  - Resolves: rhbz#1602151
  - Fixed a potential stack overflow when reaping the recovery journal.
  - Resolves: rhbz#1608070
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved safety around memory allocation permissions
  - Resolves: rhbz#1595923
  - Improved statistics accounting to allow for concurrent dedupe.
  - Resolves: rhbz#1540722


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.125-4
changelog:
  - Attempt to unload modules and print a warning if unable to.
  - Resolves: rhbz#1553420
  - Fixed a hang when recovering a VDO volume with a physical size larger than
    16TB.
  - Resolves: rhbz#1628316


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.38-5
changelog:
  - Fixed more error path memory leaks.
    - Resolves: rhbz#1609426
  - Rebased to version 6.2.0 of the UDS module
    - Resolves: rhbz#1637762
  - Improved counting of dedupe timeouts by including in the count queries
    which are not made due to their being a lack of resources from previous
    queries taking too long.
    - Resolves: rhbz#1639898
  - Fixed a NULL pointer dereference if dmeventd registration fails.
    - Resolves: rhbz#1640794
  - Fixed a bug in the statistics tracking partial I/Os.
    - Resolves: rhbz#1594406
  - Allowed VDO backing devices to be specified by major:minor device number.
    - Resolves: rhbz#1637762
  - Suppressed egregious read-only error logging.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.41-5
changelog:
  - Reduced and rate limited error logging in order to avoid kernel soft-lockups.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.4-5
changelog:
  - Reduced and rate limited more error logging in order to avoid kernel
    soft-lockups.
    - Resolves: rhbz#1706196
  - Fixed a bug in the handling of re-used bios. This bug resulted in a
    kernel panic when rebooting a system after a crash with a VDO device on
    USB attached storage.
    - Resolves: rhbz#1676643


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.7-5
changelog:
  - Fixed a rare bug which would log an assertion failure when shutting down
    a VDO device.
    - Resolves: rhbz#1749000


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.23-5
changelog:
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
    - Resolves: rhbz#1821275


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-1
changelog:
  - Update to version 0.9.0
  - Drop upstreamed patches
  - Use CMake build system
  - Include FindCMPI.cmake and FindKonkretCMPI.cmake cmake modules
  - Add python subpackage


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include %{version}


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to %{_var}/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-8
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-6
changelog:
  - incorporate updated fix for CVE-2007-3999 (CVE-2007-4743)
  - fix incorrect call to "test" in the kadmin init script (#252322,#287291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-7
changelog:
  - also perform PAM session and credential management when ftpd accepts a
    client using strong authentication, missed earlier
  - also label kadmind log files and files created by the db2 plugin


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.2-9
changelog:
  - apply the fix for CVE-2007-4000 instead of the experimental patch for
    setting ok-as-delegate flags


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#329811)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-1
changelog:
  - update to 1.6.3, dropping now-integrated patches for CVE-2007-3999
    and CVE-2007-4000 (the new pkinit module is built conditionally and goes
    into the -pkinit-openssl package, at least for now, to make a buildreq
    loop with openssl avoidable)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-3
changelog:
  - allocate space for the nul-terminator in the local pathname when looking up
    a file context, and properly free a previous context (Jose Plans, #426085)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-4
changelog:
  - some init script cleanups
    - drop unquoted check and silent exit for "$NETWORKING" (#426852, #242502)
    - krb524: don't barf on missing database if it looks like we're using kldap,
      same as for kadmin
    - return non-zero status for missing files which cause startup to
      fail (#242502)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-5
changelog:
  - enable patch for key-expiration reporting
  - enable patch to make kpasswd fall back to TCP if UDP fails (#251206)
  - enable patch to make kpasswd use the right sequence number on retransmit
  - enable patch to allow mech-specific creds delegated under spnego to be found
    when searching for creds


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-7
changelog:
  - drop netdb patch
  - kdb_ldap: add patch to treat 'nsAccountLock: true' as an indication that
    the DISALLOW_ALL_TIX flag is set on an entry, for better interop with Fedora,
    Netscape, Red Hat Directory Server (Simo Sorce)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated
  - in login, signal PAM when we're changing an expired password that it's an
    expired password, so that when cracklib flags a password as being weak it's
    treated as an error even if we're running as root


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove a patch, to fix problems with interfaces which are "up" but which
    have no address assigned, which conflicted with a different fix for the same
    problem in 1.5 (#200979)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to suppress double-processing of /etc/krb5.conf when we build
    with --sysconfdir=/etc, thereby suppressing double-logging (#231147)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-8
changelog:
  - ftp: add patch to fix "runique on" case when globbing fixes applied
  - stop adding a redundant but harmless call to initialize the gssapi internals


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-9
changelog:
  - rework file labeling patch to not depend on fragile preprocessor trickery,
    in another attempt at fixing #428355 and friends


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-10
changelog:
  - add fixes from MITKRB5-SA-2008-001 for use of null or dangling pointer
    when v4 compatibility is enabled on the KDC (CVE-2008-0062, CVE-2008-0063,
    - add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
    high-numbered descriptors are used (CVE-2008-0947, #433596)
  - add backport bug fix for an attempt to free non-heap memory in
    libgssapi_krb5 (CVE-2007-5901, #415321)
  - add backport bug fix for a double-free in out-of-memory situations in
    libgssapi_krb5 (CVE-2007-5971, #415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-11
changelog:
  - libgssapi_krb5: properly export the acceptor subkey when creating a lucid
    context (Kevin Coffman, via the nfs4 mailing list)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-12
changelog:
  - stop exporting kadmin keys to a keytab file when kadmind starts -- the
    daemon's been able to use the database directly for a long long time now
  - belatedly add aes128,aes256 to the default set of supported key types


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-15
changelog:
  - build with -fno-strict-aliasing, which is needed because the library
    triggers these warnings
  - don't forget to label principal database lock files
  - fix the labeling patch so that it doesn't break bootstrapping


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - clear fuzz out of patches, dropping a man page patch which is no longer
    necessary
  - quote %{__cc} where needed because it includes whitespace now
  - define ASN1BUF_OMIT_INLINE_FUNCS at compile-time (for now) to keep building


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-19
changelog:
  - libgssapi_krb5: backport fix for some errors which can occur when
    we fail to set up the server half of a context (CVE-2009-0845)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.3-100
changelog:
  - turn off krb4 support (it won't be part of the 1.7 release, but do it now)
  - use triggeruns to properly shut down and disable krb524d when -server and
    -workstation-servers gets upgraded, because it's gone now
  - move the libraries to /%{_lib}, but leave --libdir alone so that plugins
    get installed and are searched for in the same locations (#473333)
  - clean up buildprereq/prereqs, explicit mktemp requires, and add the
    ldconfig for the -server-ldap subpackage (part of #225974)
  - escape possible macros in the changelog (part of #225974)
  - fixup summary texts (part of #225974)
  - take the execute bit off of the protocol docs (part of #225974)
  - unflag init scripts as configuration files (part of #225974)
  - make the kpropd init script treat 'reload' as 'restart' (part of #225974)


