# changelog

author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212:
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!'.
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -   comp -> binding_state,
  -   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup:
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and
    must be specified with the 'next-server' option (not the tftp-boot-server
    option ?!?) which causes PXE boot clients to fail to load anything after
    the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
                    have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
                    host-name with trailing nul


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
    binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-23
changelog:
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.4-24
changelog:
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-2
changelog:
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-8
changelog:
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Remove dhcptables.pl from the source package
  - Mark libres.a symbols hidden (#198496)
  - Set DT_SONAME on libdhcp4client to libdhcp4client-VERSION.so.0
  - Make function definition for dst_hmac_md5_init() match the prototype


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-13
changelog:
  - Add support for dhcpd(8) to read dhcpd.conf from an LDAP server (#224352)
  - Remove invalid ja_JP.eucJP man pages from /usr/share/doc


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-23
changelog:
  - Update Xen partial checksums patch
  - Remove perl Requires (#225691)
  - Make dhcp-devel depend on dhcp = e:v-r (#225691)
  - libdhcp4client-devel Requires pkgconfig (#225691)
  - Do not add to RPM_OPT_FLAGS, use COPTS variable instead (#225691)
  - Use %{buildroot} macro instead of RPM_BUILD_ROOT variable (#225691)
  - Preserve timestamps on all installed data files (#225691)
  - Remove dhcp-options.5.gz and dhcp-eval.5.gz symlinking in post (#225691)
  - Use %defattr(-,root,root,-) (#225691)
  - Do not flag init scripts as %config in %files section (#225691)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-24
changelog:
  - Include contrib/ subdirectory in /usr/share/doc (#230476)
  - Added back Requires for perl since dhcpd-conf-to-ldap needs it (#225691)
  - Put copies of dhcp-options and dhcp-eval man pages in the dhcp and
    dhclient packages rather than having the elaborate symlink collection
  - Explicitly name man pages in the %files listings
  - Use the %{_sysconfdir} and %{_initrddir} macros (#225691)
  - Use macros for commands in %build and %install
  - Split README.ldap, draft-ietf-dhc-ldap-schema-01.txt, and
    dhcpd-conf-to-ldap.pl out of the LDAP patch
  - Split linux.dbus-example script out of the extended new option info patch
  - Remove unnecessary changes from the Makefile patch


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-27
changelog:
  - Ensure that Perl and Perl modules are not added as dependencies (#234688)
  - Reorganize patches by feature/bug per packaging guidelines (#225691)
  - Move the following files from patches to source files:
       linux.dbus-example, linux, Makefile.dist, dhcp4client.h, libdhcp_control.h
  - Compile with -fno-strict-aliasing as ISC coding standards generally don't
    agree well with gcc 4.x.x


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-31
changelog:
  - Spec file cleanups (#225691)
  - Put libdhcpctl.a and libomapi.a in dhcp-devel-static package
  - Put libdhcp4client.a in libdhcp4client-devel-static package


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-34
changelog:
  - Init script fixes (#237985, #237983)
  - Reference correct scripts in dhclient-script.8 man page (#238036)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-35
changelog:
  - Disable -fvisibility=hidden for now as it breaks dhcpv4_client() from
    the shared library (#240804)


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-36
changelog:
  - BOOTP_BROADCAST_ALWAYS is not the same as ATSFP, fixed
  - Added anycast mac support to dhclient for OLPC


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-3
changelog:
  - Remove the -x switch enabling extended new option info.  If given to
    dhclient now, it's ignored.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-7
changelog:
  - In dhcp.conf.5, explain that if no next-server statement applies to the
    requesting client, the address 0.0.0.0 is used (#184484).


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.6-8
changelog:
  - Init script fixes (#320761)
  - Removed linux.dbus-example script since we aren't using dhcdbd now
  - Remove dhcdbd leftovers from dhclient-script (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-1
changelog:
  - Upgrade to ISC dhcp-3.1.0
  - Remove unnecessary /usr/include/dhcp4client/isc_dhcp headers
  - Make sure restorecon is run on /var/lib/dhcpd/dhcpd.leases (#251688)
  - Install dhcp.schema to /etc/openldap/dhcp.schema (#330471)


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-4
changelog:
  - Install libdhcp_control.h to /usr/include/isc-dhcp/libdhcp_control.h
  - Update libdhcp4client patch to use new libdhcp_control.h location
  - Remove __fedora_contrib/ subdirectory in /usr/share/doc/dhcp-3.1.0,
    install those docs to /usr/share/doc/dhcp-3.1.0


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-5
changelog:
  - Remove chkconfig usage for ypbind in dhclient-script (#351211)
  - Combine dhcp-static and dhcp-devel packages since there are no shared
    libraries offered
  - Remove Requires: openldap-devel on dhcp-devel and libdhcp4client-devel
  - Make libdhcp4client-devel require dhcp-devel (for libdhcp_control.h)
  - Do not make dhcp-devel require the dhcp package, those are independent


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-6
changelog:
  - Rename Makefile.dist to Makefile.libdhcp4client
  - Spec file cleanups
  - Include stdarg.h in libdhcp_control.h


author: David Cantrell <dcantrell@redhat.com> - 12:3.1.0-8
changelog:
  - Put dhcp.schema in /etc/openldap/schema (#330471)
  - Remove manpages patch and keep modified man pages as Source files
  - Improve dhclient.8 man page to list options in a style consistent
    with most other man pages on the planet
  - Upgrade to latest dhcp LDAP patch, which brings in a new dhcpd-conf-to-ldap
    script, updated schema file, and other bug fixes including SSL support for
    LDAP authentication (#375711)
  - Do not run dhcpd and dhcrelay services by default (#362321)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-1
changelog:
  - Upgrade to ISC dhcp-4.0.0 (#426634)
       - first ISC release to incorporate DHCPv6 protocol support
       - source tree now uses GNU autoconf/automake
  - Removed the libdhcp4client-static package


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-4
changelog:
  - Fix dhclient.lease file parsing problems (#428785)
  - Disable IPv6 support for now as we already ship dhcpv6 (#428987)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-6
changelog:
  - read_function() comes from the LDAP patch, so fix it there
  - Init new struct universe structs in libdhcp4client so we don't crash on
    multiple DHCP attempts (#428203)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-9
changelog:
  - Match LDAP server option values in stables.c and dhcpd.h (#431003)
  - Fix invalid sprintf() statement in server/ldap.c (#431003)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-10
changelog:
  - Save conf files adding '.predhclient.$interface' to the name (#306381)
  - Only restore conf files on EXPIRE/FAIL/RELEASE/STOP if there are no other
    dhclient processes running (#306381)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-12
changelog:
  - Remove Requires on openldap-server (#432180)
  - Replace CLIENTBINDIR, ETCDIR, DBDIR, and RUNDIR in the man pages with the
    correct paths


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-16
changelog:
  - Remove instaces of \032 in domain search option (#450042)
  - Make 'service dhcpd configtest' display text indicating the status


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-17
changelog:
  - Carry over RES_OPTIONS from ifcfg-ethX files to /etc/resolv.conf (#202923)
  - Clean up Requires tags for devel packages
  - Allow SEARCH variable in ifcfg files to override search path (#454152)
  - Do not down interface if there is an active lease (#453982)
  - Clean up how dhclient-script restarts ypbind
  - Set close-on-exec on dhclient.leases for SELinux (#446632)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-19
changelog:
  - Remove 'c' from the domain-search format string in common/tables.c
  - Prevent \032 from appearing in resolv.conf search line (#450042)
  - Restore SELinux context on saved /etc files (#451560)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-20
changelog:
  - Rewrite of /sbin/dhclient-script (make the script a little more readable,
    discontinue use of ifconfig in favor of ip, store backup copies of orig
    files in /var rather than in /etc)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-22
changelog:
  - Add missing '[' to dhclient-script (#459860)
  - Correct test statement in add_default_gateway() in dhclient-script (#459860)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-23
changelog:
  - Prevent $metric from being set to '' (#460640)
  - Remove unnecessary warning messages
  - Do not source config file (ifcfg-DEVICE) unless it exists


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-26
changelog:
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range (#438149)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-30
changelog:
  - Fix dhclient.conf man page and sample config file to say 'supersede
    domain-search', which is what was actually demonstrated (#467955)


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-31
changelog:
  - Use O_CLOEXEC in open(2) calls and "e" mode in fopen(3) calls, build
    with -D_GNU_SOURCE so we pick up O_CLOEXEC (#468984)
  - Add missing prototype for validate_port() in common/inet.c


author: David Cantrell <dcantrell@redhat.com> - 12:4.0.0-32
changelog:
  - Enable LDAP/SSL support in dhcpd (#467740)
  - Do not calculate a prefix for an address we did not receive (#473885)
  - Removed libdhcp4client because libdhcp has been removed from Fedora


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-1
changelog:
  - Upgraded to ISC dhcp-4.1.0
  - Had to rename the -T option to -timeout as ISC is now using -T
  - Allow package rebuilders to easily enable DHCPv6 support with:
        rpmbuild --with DHCPv6 dhcp.spec
    Note that Fedora is still using the 'dhcpv6' package, but some
    users may want to experiment with the ISC DHCPv6 implementation
    locally.


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-2
changelog:
  - Make sure all /etc/dhcp config files are marked in the manifest
  - Include new config file directies in the dhcp and dhclient packages
  - Do not overwrite new config files if they already exist


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-6
changelog:
  - Enable dhcpv6 support (#480798)
  - Fix config file migration in scriptlets (#480543)
  - Allow dhclient-script expansion with /etc/dhcp/dhclient.d/*.sh scripts


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-16
changelog:
  - Correct %post problems in dhclient package (#495361)
  - Read hooks scripts from /etc/dhcp (#495361)
  - Update to latest ldap-for-dhcp


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-17
changelog:
  - Fix setting default route when client IP address changes (#486512, #473658)
  - 'reload' and 'try-restart' on dhcpd and dhcrelay init scripts
    will display usage information and return code 3


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-19
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter (#441524)
  - Change to /etc/sysconfig/network-scripts in dhclient-script before
    calling need_config or source_config (#496233)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-21
changelog:
  - Handle cases in add_timeout() where the function is called with a NULL
    value for the 'when' parameter (#506626)
  - Fix SELinux denials in dhclient-script when the script makes backup
    configuration files and restores them later (#483747)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0-22
changelog:
  - Set permissions on /etc/dhcp to 0750 (#508247)
  - Update to new ldap-for-dhcp patch set
  - Correct problems when upgrading from a previous release and your
    dhcpd.conf file not being placed in /etc/dhcp (#506600)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-2
changelog:
  - Add /usr/lib[64]/pm-utils/sleep.d/56dhclient to handle suspend and
    resume with active dhclient leases (#479639)


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-3
changelog:
  - Update NetworkManager dispatcher script to remove case conversion
    and source /etc/sysconfig/network


author: David Cantrell <dcantrell@redhat.com> - 12:4.1.0p1-4
changelog:
  - Upgrade to latest ldap-for-dhcp patch which makes sure that only
    dhcpd links with OpenLDAP (#517474)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-15
changelog:
  - dhclient logs its pid to make troubleshooting NM managed systems
    with multiple dhclients running easier (#546792)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.0p1-18
changelog:
  - Hide startup info when starting dhcpd6 service.
  - Remove -TERM from calling killproc when stopping dhcrelay (#555672)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-3
changelog:
  - move /etc/dhcp.conf to /etc/dhcp.conf.rpmsave in %post (#561094)
  - document -nc option in dhclient(8) man page


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-4
changelog:
  - Fix dhclient-script to delete address which the client is going to release
    as soon as it begins the Release message exchange process (#559142)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-9
changelog:
  - In dhclient-script:
    - use ip command options '-4' or '-6' as shortcuts for '-f[amily] inet' resp. '-f[amily] inet6'
    - do not use IP protocol family identifier with 'ip link'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-13
changelog:
  - Discard unicast Request/Renew/Release/Decline message
    (unless we set unicast option) and respond with Reply
    with UseMulticast Status Code option (#573090)
  - Remove DHCPV6 OPERATION section from dhclient.conf.5
    describing deprecated 'send dhcp6.oro' syntax


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-14
changelog:
  - Fix UseMulticast.patch to not repeatedly parse dhcpd.conf for unicast option
  - Fix dhclient-script to set interface MTU only when it's greater than 576 (#574629)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-15
changelog:
  - In dhclient-script check whether bound address
    passed duplicate address detection (DAD) (#559147)
  - If the bound address failed DAD (is found to be in use on the link),
    the dhcpv6 client sends a Decline message to the server
    as described in section 18.1.7 of RFC-3315 (#559147)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-16
changelog:
  - In client initiated message exchanges stop retransmission
    upon reaching the MRD rather than at some point after it (#559153)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-18
changelog:
  - If the Reply was received in response to Renew or Rebind message,
    client adds any new addresses in the IA option to the IA (#578097)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-20
changelog:
  - Move /etc/NetworkManager/dispatcher.d/10-dhclient script
    from dhcp to dhclient subpackage (#586999)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.1.1-23.P1
changelog:
  - 4.1.1-P1: pair of bug fixes including one for CVE-2010-2156 (#601405)
  - Compile with -fno-strict-aliasing


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-2
changelog:
  - Add 12-dhcpd NM dispatcher script (#565921)
  - Rename 10-dhclient to 11-dhclient (10-sendmail already exists)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-8
changelog:
  - Explicitly clear the ARP cache and flush all addresses & routes
    instead of bringing the interface down (#574568)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-10
changelog:
  - Check whether there is any unexpired address in previous lease
    prior to confirming (INIT-REBOOT) the lease (#585418)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-11
changelog:
  - Use ping instead of arping in dhclient-script to handle
    not-on-local-net gateway in ARP-less device (#524298)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-12
changelog:
  - Server was ignoring client's
    Solicit (where client included address/prefix as a preference) (#634842)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-16.P1
changelog:
  - 4.2.0-P1: fix for CVE-2010-3611 (#649880)
  - dhclient-script: when updating 'search' statement in resolv.conf,
    add domain part of hostname if it's not already there (#637763)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.0-22.P2
changelog:
  - 4.2.0-P2: fix for CVE-2010-3616 (#662326)
  - Use upstream fix for #628258
  - Provide versioned symbols for rpmlint


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-0.1.b1
changelog:
  - 4.2.1b1: fix for CVE-2011-0413 (#672996)
  - No longer need invalid-dhclient-conf, parse_date and release6-elapsed patches


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-9.P1
changelog:
  - Packages dhcp/dhclient/dhcp-common explicitly require the libs sub-package
    with the same version and release (bug #705037).
  - Fix triggerun scriptlet


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-11.P1
changelog:
  - Add triggerpostun scriptlet tied to dhcp-sysvinit
  - Make it possible to build without downstream patches (Kamil Dudka)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.1-12.P1
changelog:
  - Removed upstream-merged IFNAMSIZ.patch
  - Polished patches according to results from static analysis of code.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-0.1.b1
changelog:
  - 4.2.2b1: upstream merged initialization-delay.patch
  - Drop all capabilities in dhcpd/dhcrelay (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-2
changelog:
  - #699713:
    - Use '--enable-paranoia --enable-early-chroot' configure flags
    - Create/delete dhcpd user in %post/%postun
    - Run dhcpd/dhcpd6 services with '-user dhcpd -group dhcpd'


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-3
changelog:
  - Tighten explicit libs sub-package requirement so that it includes
    the correct architecture as well.


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-6
changelog:
  - PIE-RELRO.patch is not needed anymore, defining _hardened_build does the same
  - One more tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-7
changelog:
  - Support for IPoIB (IP over InfiniBand) interfaces (#660681)
  - Hopefully last tweak of adding of user and group (#699713)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.2-12
changelog:
  - change ownership of /var/lib/dhcpd/ to dhcpd:dhcpd (#744292)
  - no need to drop capabilies in dhcpd since it's been running as regular user


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-2
changelog:
  - Write PID file BEFORE changing of the effective user/group ID.
  - Really define _hardened_build this time


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-3
changelog:
  - Write lease file AFTER changing of the effective user/group ID.
  - Move omshell from dhcp-common to main package (where it originally was).


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-7
changelog:
  - Send DHCPDECLINE and exit(2) when duplicate address was detected and
    dhclient had been started with '-1' (#756759).
  - Don't build with -D_GNU_SOURCE, configure.ac uses AC_USE_SYSTEM_EXTENSIONS


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-9.P1
changelog:
  - don't ship legacy SysV initscripts
  - dhcpd6: move '-cf /etc/dhcp/dhcpd6.conf' from sysconfig/dhcpd6 to dhcpd6.service
  - run 'chown -R dhcpd:dhcpd /var/lib/dhcpd/' before starting dhcpd/dhcpd6 service
    for the case where leases file is owned by root:root as a
    consequence of running dhcpd without '-user dhcpd -group dhcpd' (#744292)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-10.P1
changelog:
  - hopefully we don't need 12-dhcpd anymore as 'After=network.target'
    in dhcpd[6].service should take care of the original problem (#565921)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.3-11.P1
changelog:
  - revert change made in 4.2.3-3 because of failing failover inicialization (#765967)
    the procedure is now:
    init lease file, init failover, init PID file, change effective user/group ID
  - don't need to fix lease files ownership before starting service
  - dhclient-script: allow static route with a 0.0.0.0 next-hop address (#769463)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-0.5.rc1
changelog:
  - dhcpd.service: explicitly add -cf to indicate what conf file we use (#819325)
  - no need to copy /etc/*.conf to /etc/dhcp/*.conf in %prep anymore


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-6
changelog:
  - ib.patch: added fall-back method (using ioctl(SIOCGIFHWADDR)) when getting
              of HW address with getifaddrs() fails (#626514-c#63, #840601).


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-12.P1
changelog:
  - dhclient-script: fixed CONFIG variable value passed to need_config (#848858)
  - dhclient-script: calling dhclient-up-hooks after setting up route, gateways 
                     & interface alias (#848869)


author: Tomas Hozza <thozza@redhat.com> - 12:4.2.4-14.P1
changelog:
  - SystemD unit files don't use Environment files any more (#850558)
  - NetworkManager dispatcher script doesn't use DHCPDARGS any more


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.4-22.P2
changelog:
  - add After=time-sync.target to dhcpd[6].service (#878293)
  - remove groff from BuildRequires (no idea why it's been there)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-2
changelog:
  - during update convert DHC*ARGS from /etc/sysconfig/dhc*
    to /etc/systemd/system/dhc*.service (#895475)
  - 12-dhcpd NM dispatcher script now restarts also dhcpd6 service


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-5
changelog:
  - remove missing-ipv6-not-fatal.patch because the concerning code is later
    removed with getifaddrs.patch


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-29
changelog:
  - dhclient-script: fix stateless DHCPv6 mode (#1101149)
  - Add GUIDs in the DHCP logs for IPoIB. (#1109947)
  - dhclient-script: handle option 121 properly (#1109949)
  - dhclient-script: it's OK if the arping reply comes from our system (#1116004)
  - dhclient-script: PREINIT6: make sure link-local address is available (#1130803)
  - dhclient-script: IPv6 address which fails DAD is auto-removed when it was
               added with valid_lft/preferred_lft other then 'forever' (#1133465)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-30
changelog:
  - 11-dhclient: handle "dhcp4-change" and limit it to chrony/ntp (#1093490)
  - [dhclient -6] infinite preferred/valid lifetime represented as -1 (#1133839)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-34
changelog:
  - Use network-online.target instead of network.target (#1145832)
  - dhclient-script: restorecon calls shouldn't be needed
                     as we have SELinux transition rules (#1161500)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-37
changelog:
  - dhcpd generates spurious responses when seeing requests from vlans on plain interface (#1175350)
  - option 97 - pxe-client-id (#1175422)


author: Jiri Popelka <jpopelka@redhat.com> - 12:4.2.5-38
changelog:
  - correctly set IB's hw->hlen and add more randomness into xid generation (#1195693)
  - send unicast request/release via correct interface (#1177351)


author: Zdenek Dohnal <zdohnal@redhat.com> - 12:4.2.5-44
changelog:
  - 1269596 - dhclient-script doesn't keep old nameservers
  - 1193586 - DHCP renewal does not update lifetimes if MTU has changed
  - 1306608 - Add ignore-client-uids option to dhcpd
  - 1267489 - dhclient-script does not respect DEFROUTE/GATEWAYDEV


author: Pavel Šimerda <psimerda@redhat.com> - 12:4.2.5-48
changelog:
  - Resolves: #1302282 - systemd fails to keep dhcpd running after repeated
    restarts by NetworkManager dispatcher.d script


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.2.5-55
changelog:
  - Resolves: #1349044 - Add disclamer for chaging /etc/dhcp permission for scripts
  - Fix syntax error in attr


author: Petr Menšík <pemensik@redhat.com> - 12:4.2.5-74
changelog:
  - Use bind-export-libs package instead of bind99
  - Use isc-config.sh to configure bind libs
  - Change requirement to bind-export-devel
  - Compile with recent bind includes, that does not include isc/util.h


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-4
changelog:
  - Fix System Slot Information for PCIe SSD
  - Resolves: rhbz#1793900
  - Sync with upstream(commit:62bce59fed1)
  - Resolves: rhbz#1767323


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-2
changelog:
  - Disabled stripping of binary while installing (oops)
  - Enabled HAVE_ISC_READER/HAVE_DBUS via patch
  - Added BuildReq for dbus-devel


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-3
changelog:
  - Un-enabled HAVE_ISC_READER, a hack to enable a deprecated feature (request)
  - Split initscript & enable-dbus patches, conditionalized dbus for FC3
  - Tweaked name field in changelog entries (trying to be consistent)


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4
changelog:
  - Moved options out of init script and into /etc/sysconfig/dnsmasq
  - Disabled DHCP_LEASE in sysconfig file, fixing bug #190379
  - Simon Kelley provided dbus/dnsmasq.conf, soon to be part of the tarball


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.30-4.2
changelog:
  - More upstream-recommended cleanups :)
  - Killed sysconfig file (provides unneeded functionality)
  - Tweaked init script a little more


author: Patrick "Jima" Laughton <jima@auroralinux.org> 2.31-1
changelog:
  - Removed dbus config patch (now provided upstream)
  - Patched in init script (no longer provided upstream)
  - Added DBus-interface to docs


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.34-2
changelog:
  - Fixed BZ#212005
  - Moved %postun scriptlet to %post, where it made more sense
  - Render scriptlets safer
  - Minor cleanup for consistency


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.35-1
changelog:
  - Update to 2.35
  - Removed UPGRADING_to_2.0 from %doc as per upstream change
  - Enabled conf-dir in default config as per RFE BZ#214220 (thanks Chris!)
  - Added %dir /etc/dnsmasq.d to %files as per above RFE


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.40-1
changelog:
  - Finalized upstream release
  - Removing URLs from patch lines (CVS is the authoritative source)
  - Added more magic to make spinning rc/test packages more seamless


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.41-0.2.test20
changelog:
  - New upstream test release
  - Moving dnsmasq.leases to /var/lib/dnsmasq/ as per BZ#407901
  - Ignoring dangerous-command-in-%post rpmlint warning (as per above fix)
  - Patch consolidation/cleanup
  - Removed conditionals for Fedora <= 3 and Aurora 2.0


author: Patrick "Jima" Laughton <jima@beer.tclug.org> 2.43-2
changelog:
  - New upstream release, contains fixes for CVE-2008-1447/CERT VU#800113
  - Dropped patch for newer glibc (merged upstream)


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.51-1
changelog:
  - move initscript from patch to a plain text file
  - drop (dnsmasq-configuration.patch) and use sed instead
  - enable /etc/dnsmasq.d fix bz 526703
  - change requires to package name instead of file
  - new version 2.51


author: Itamar Reis Peixoto <itamar@ispbrasil.com.br> - 2.52-1
changelog:
  - New Version 2.52
  - fix condrestart() in initscript bz 547605
  - fix sed to enable DBUS(the '*' need some escaping) bz 553161


author: Tomas Hozza <thozza@redhat.com> - 2.66-3
changelog:
  - Use Full RELRO when linking the daemon
  - compile the daemon with PIE
  - include two fixes from upstream git repo


author: Tomas Hozza <thozza@redhat.com> - 2.66-4
changelog:
  - include several fixes from upstream repo:
    - Send TCP DNS messages in one packet
    - Fix crash on SERVFAIL when using --conntrack option
    - Fix regression in dhcp_lease_time utility
    - Man page typos fixes
    - Note that dhcp_lease_time and dhcp_release work only for IPv4
    - Fix for --dhcp-match option to work also with BOOTP protocol


author: Tomas Hozza <thozza@redhat.com> - 2.66-5
changelog:
  - dnsmasq unit file cleanup
    - drop forking Type and PIDfile and rather start dnsmasq with "-k" option
    - drop After syslog.target as this is by default


author: Tomas Hozza <thozza@redhat.com> - 2.66-6
changelog:
  - include several fixies from upstream repo:
    - Tighten hostname checks in legal hostname() function
    - Replace inet_addr() with inet_pton() in src/option.c
    - Use dnsmasq as default DNS server for RA only if it's doing DNS
    - Handle IPv4 interface address labels (aliases) in Linux (#962246)
    - Fix failure to start with ENOTSOCK (#962874)


author: Tomas Hozza <thozza@redhat.com> - 2.66-7
changelog:
  - use _hardened_build macro instead of hardcoded flags
  - include several fixies from upstream repo:
    - Allow constructed ranges from interface address at end of range
    - Dont BINDTODEVICE DHCP socket if more interfaces may come
    - Fix option parsing for dhcp host
    - Log forwarding table overflows
    - Remove limit in prefix length in auth zone


author: Petr Menšík <pemensik@redhat.com> - 2.76-1
changelog:
  - Rebase to 2.76 (#1375527)
  - Include also dhcp_release6 (#1375569)
  - Fix compilation warnings
  - Correct manual about interface aliases, warn if used without --bind*


author: Petr Menšík <pemensik@redhat.com> - 2.76-2
changelog:
  - Fix a few coverity warnings
  - package is dual-licensed GPL v2 or v3
  - don't include /etc/dnsmasq.d in triplicate, ignore RPM backup files instead


author: Petr Menšík <pemensik@redhat.com> - 2.76-5
changelog:
  - Fix CVE-2017-14491
  - Fix CVE-2017-14492
  - Fix CVE-2017-14493
  - Fix CVE-2017-14494
  - Fix CVE-2017-14496
  - Fix CVE-2017-14495
  - extra fixes


author: Petr Menšík <pemensik@redhat.com> - 2.76-16.1
changelog:
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)
  - Handle multiple identical DNS queries better (CVE-2020-25686)
  - Link against nettle for sha256 hash implementation


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-10
changelog:
  - libext2fs: don't ignore fsync errors (#1405049)
  - Fix nroff macro issue in chattr man page (#1429213)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-11
changelog:
  - libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
  - tune2fs: edit dire warning about check intervals (#1433233)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-13
changelog:
  - e2fsck: warn if checkinterval and broken_system_clock both set (#1365594)
  - e2fsprogs: fail to open 1k block size ext4 with bigalloc,meta_bg,^resize_inode (#1448019)


author: Lukas Czerner <lczerner@redhat.com> 1.42.9-14
changelog:
  - Various fixes and improvements (#1682935)
  - Automatically enable meta_bg to avoid failure when creating huge fs with small bs (#1608635)
  - don't ignore fsync errors in filefrag (#1451185)


author: Joseph Qi <joseph.qi@linux.alibaba.com> - 1.43.5-8.4
changelog:
  - resize2fs: fix free blocks count sanity check for 64-bit file system
  - resize2fs: remove bigalloc warning for online resizing


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.34.pre6
changelog:
  - update to latest upstream pre-release
  - drop unneeded patches
  - fix autoconf warnings
  - explicitly disable using OpenSSL and GnuTLS


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Moved ctags to gctags to fit in the more powerful for C (but less
    general) exuberant ctags as the binary /usr/bin/ctags and the
    man page /usr/man/man1/ctags.1


author: Michael Fulbright <msf@redhat.com>
changelog:
  - joy a new version of emacs! Of note - no lockdir any more.
  - use post/preun sections to handle numerous GNU info files


author: Michael Fulbright <msf@redhat.com>
changelog:
  - added multibyte support back into emacs 20.2
  - added wmconfig for X11 emacs
  - fixed some errant buildroot references


author: David S. Miller <davem@dm.cobaltmicro.com>
changelog:
  - fix signals when linked with glibc on non-Intel architectures
    NOTE: This patch is not needed with emacs >20.2


author: Paul Fisher <pnfisher@redhat.com>
changelog:
  - upgrade to 20.5a
  - remove python-mode, wheelmouse support, and auctex menu
  - import emacs.desktop with icon from GNOME


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix descriptions and summary
  - fix permissions for emacs niaries (what the hell does 1755 means for a
    binary?)
  - added missing, as per emacs Changelog, NCURSES_OSPEED_T compilation
    flag; without it emacs on Linux is making global 'ospeed' short which
    is not the same as 'speed_t' expected by libraries. (reported by Michal
    Jaegermann <michal@harddata.com>)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fix bug #2988
  - recompile patched .el files (suggested by Pavel.Janik@linux.cz)
  - prereq /sbin/install-info


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - added a security patch from RUS-CERT, which fixes
    bugs mentioned in "Advisory 200004-01: GNU Emacs 20"


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - let the build system handle gzipping man pages and stripping
  - added patch to increase keyboard buffer size


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't apply the unexelf patch - use a new unexelf.c file
    from the 21 source tree (this will go into the 20.7 tree)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Version 20.7
  - Add requirement for final newline to the default .emacs
  - redid the Xaw3d patch
  - checked all patches, discarded those we've upstreamed


author: Matt Wilson <msw@redhat.com>
changelog:
  - edited japanese patch not to patch configure
  - fixed a missing escaped \" in a wc string
  - merge japanese support to head of development


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (from MSW) different compression on IA64 to avoid hangs
  - remove etags/ctags - use a separate package. Disable patch1


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't build with -O2 on alpha until we can track down the compiler
    bug that causes crashes in the garbage collector
  - removed all the nox Japanese packages


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - include python mode and change in site-start.el related to this
  - some changes to the default .emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remove ctags.1 and etags.1 from the emacs etc directory
    (#18011)
  - fix the emacs-nox not to use the locale.alias in XFree86
    (#18548)... copy it into /usr/share/emacs and patch
    the startup files to use it. Argh.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix icon name in the .desktop file
  - don't have site-start.el "noreplace"
  - load psgml-init (if present) in the default site-start.el
    to avoid psgml modifying the file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/site-lisp/site-start.d
  - change site-start.el so files in the above directory
    are automatically run on startup
  - don't set the ispell name in site-start.el, use the
    above directory instead


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add rpm-spec-mode after modifying (use Red Hat groups,
    from /usr/share/doc/rpm-version/GROUPS) and fixing
    colours(don't specify "yellow" on "bright") Also,
    use gpg, not pgp.
  - use it (site-start.el)
  - add mwheel
  - use it, in /etc/skel/.emacs


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - do locale.alias fix for emacs-nox only, as it somehow
    broke the subject line in gnus. Weird.
  - update to gnus 5.8.7


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add /usr/share/emacs/locale.alias , which had gone AWOL
  - update rpm-spec-mode to 0.11a, fresh from the author
    (Stig Bjorlykke <stigb@tihlde.org>). The changes we made
    are integrated.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Much cleaner site-start.d sourcing
  - Add more build dependencies
  - Add the emacs lisp reference info pages (RFE #44577)
  - Don't require tamago - just plug it in for Japanese support


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-42
changelog:
  - Update python-mode to the version in the python 2.2a3
  - Include po-mode in emacs, instead of including in gettext


author: Trond Eivind Glomsrød <teg@redhat.com> 20.7-43
changelog:
  - Add php-mode 0.9.9
  - Add URL (#54603)
  - don't run autoconf/libtoolize during build - they're broken
  - don't build on IA64 until they are fixed


author: Trond Eivind Glomsrød <teg@redhat.com> 21.1-0.1
changelog:
  - 21.1
  - Build on IA64 again - the default config now handles it
  - Drop all old patches
  - Misc cleanups
  - Update the elisp manual to 21-2.7
  - Deprecate the emacs-nox and emacs-X11 subpackages.
    Simplify build procedure to match.
  - Update php-mode to 1.0.0


author: Jens Petersen <petersen@redhat.com> 21.2-19
changelog:
  - own our libexec dir (#73984)
  - only set transient-mark-mode in dotemacs for Emacs (#75440)
  - update to latest config.{guess,sub}
  - use _datadir macro


author: Jens Petersen <petersen@redhat.com> 21.2-20
changelog:
  - add support for x86_64 and merge in s390 support from cvs
  - add alloca defines to amdx86-64.h (from SuSE)


author: Jens Petersen <petersen@redhat.com> 21.2-23
changelog:
  - set transient-mark-mode in dotemacs for Emacs not XEmacs (#75440)
  - update rpm-spec-mode.el to 0.12
    - define needed XEmacs compat functions in new rpm-spec-mode-init.el
  - tidy site-start.el
    - move python-mode setup to python-mode
  - don't build with sbin in path
  - use _libexecdir, _bindir and _sysconfdir
  - don't gzip info files explicitly
  - use tar's C and j options
  - generate lisp file-lists in single find sweeps over lisp and leim dirs
    - use -fprint and -fprintf
    - correct more dir ownerships


author: Jens Petersen <petersen@redhat.com>
changelog:
  - use LC_CTYPE rather than LANG to determine default encoding (#78678)
    [reported by starback@stp.ling.uu.se]


author: Jens Petersen <petersen@redhat.com> 21.2-24
changelog:
  - rpm-spec-mode update fixes
    - patch in XEmacs compat functions rather than defining them with apel
      macros in init file (#78764)
    - autoload "rpm-spec-mode" not "rpm-spec-mode.el" in same file
  - let emacs base also own leim dir to avoid startup warning about missing dir
    when -el and -leim aren't installed (#78764)


author: Jens Petersen <petersen@redhat.com> 21.2-27
changelog:
  - look at LANG after LC_CTYPE when checking for UTF-8 locale encoding
    in site-start.el (#79535)
  - don't set desktop file config(noreplace)


author: Jens Petersen <petersen@redhat.com> 21.2-29
changelog:
  - update to newer po-mode.el and po-compat.el from gettext-0.11.4
  - patch po-mode's po-replace-revision-date for when
    po-auto-replace-revision-date is nil (#71264)
  - update po-mode-init.el
  - examine LC_ALL before LC_CTYPE in site-start.el for utf-8 (#79535)
  - don't install etc/DOC files explicitly by hand
  - make sure all lisp .elc files are up to date
  - pass _smp_mflags to make
  - remove games that we shouldn't ship


author: Jens Petersen <petersen@redhat.com> - 21.2-31
changelog:
  - block input in allocate_vectorlike to prevent malloc hangs (#83600)
    [thanks to Jim Blandy]
  - set startup wmclass notify in desktop file


author: Jens Petersen <petersen@redhat.com> - 21.2-32
changelog:
  - set X copy'n'paste encoding to extended compound-text (#74100)
    by default in .emacs file [suggested by olonho@hotmail.com]
  - .emacs file cleanup (xemacs now has a separate init file)


author: Jens Petersen <petersen@redhat.com> - 21.3-1
changelog:
  - update to 21.3
  - no longer set compound-text-with-extensions in dotemacs, since it is now
    the default
  - emacs-21.2-pop.patch is no longer needed
  - update php-mode to 1.0.4


author: Jens Petersen <petersen@redhat.com> - 21.3-2
changelog:
  - add Mule-UCS for CJK utf-8 support (suggested by Akira Tagoh)
    and use it by default in CJK UTF-8 locale
  - move emacs-asian startup files into new lang-coding-systems-init.el
  - utf-8 setup in site-start.el is no longer needed in Emacs 21.3
  - generate filelist for site-lisp automatically like base lisp and leim
  - don't setup aspell in site-start.el
  - rename dotemacs to dotemacs.el and move former contents to new default.el


author: Jens Petersen <petersen@redhat.com> - 21.3-3
changelog:
  - use Mule-UCS utf-8 coding-system for CJK subprocess IO
  - no need to set fontset anymore in CJK locale


author: Jens Petersen <petersen@redhat.com> - 21.3-5
changelog:
  - move transient-mark-mode and global-font-lock-mode setting from default.el
    back to dotemacs, so as not to surprise old users (#90193)
    [reported by jik@kamens.brookline.ma.us]
  - change require-final-newline to query (default.el)
  - don't make a backup when applying browse-url-htmlview-84262.patch (#90226)
    [reported by mitr@volny.cz]


author: Jens Petersen <petersen@redhat.com> - 21.3-7
changelog:
  - use "setarch i386" to build on ix86 (#101818) [reported by Michael Redinger]
  - use __make to %build and %install
  - set keyboard coding-system for utf-8 in lang-coding-systems-init.el (#106929)
    [reported with fix by Axel Thimm]
  - add source url for MuleUCS
  - update base package description (#103551) [reported by Tim Landscheidt]


author: Jens Petersen <petersen@redhat.com> - 21.3-8
changelog:
  - comment out setting transient-mark-mode in skel .emacs (#102441,#90193)
    [reported by mal@gromco.com, Jonathan Kamens]
  - improve lang-coding-systems-init.el to set-language-environment for CJK
    utf-8 locale too and use utf-8 for default-coding-systems and
    terminal-coding-system (#111172) [Yoshinori Kuniga]
  - update rpm-spec-mode.el to newer one in xemacs package cvs (#105888) [Dams]
  - rename etags to etags.emacs and make etags a symlink to it at install time
    if it doesn't exist (#92256) [marc_soft@merlins.org]
  - apply editfns.c-Fformat-multibyte-davej.patch to fix multibyte code typo
    in Fformat [patch from Dave Jones]
  - add runtime requirements for XFree86-libs, image libraries, ncurses and zlib
  - improve -el and -leim package summaries
  - no longer configure build with redundant --with-gcc


author: Jens Petersen <petersen@redhat.com> - 21.3-9
changelog:
  - bring back emacs-nox subpackage (emacs built without X support) (#113001)
    [suggested by Frank Kruchio]
  - base emacs package now only contains emacs binary built with X support
    and no longer obsoletes emacs-nox
  - all the common files required by emacs and emacs-nox are now in emacs-common
  - update php-mode.el to 1.0.5
  - add missing rfc1345.el leim input method
  - update po-compat.el to version in gettext-0.13.1
  - update base package summary
  - add url for python-mode.el and php-mode.el
  - gctags is now a symlink to ctags.emacs


author: Mike A. Harris <mharris@redhat.com> 21.3-11
changelog:
  - Removed bogus Requires: XFree86-libs that was added in 21.3-8, as rpm
    find-requires will automatically pick up the dependancies on any runtime
    libraries, and such hard coded requires is not X11 implementation
    agnostic (#118471)


author: Jens Petersen <petersen@redhat.com> - 21.3-12
changelog:
  - update php-mode to 1.1.0
  - add emacs-21.3-no-rpath.patch so that /usr/X11R6/lib is not rpath'ed
  - require /bin/ln for %post (Tim Waugh, 119817)
  - move prereq for dev and /sbin/install-info to emacs-common
  - leim no longer requires emacs
  - use source site-lisp dir in %prep to setup site files
  - define and use site_lisp for buildroot in %install
  - default ispell dictionary to "english" for CJK locale
  - add comment to top of site-start.el about load order
  - turn on auto-compression-mode in default.el (114808)
  - set require-final-newline with setq (David Olsson,119141)
    and remove redundant next-line-add-newlines setting
  - update info_file list (Reuben Thomas,114729)


author: Jens Petersen <petersen@redhat.com> - 21.3-13
changelog:
  - unset focus-follows-mouse in default.el to make switching frames work for
    click-to-focus (Theodore Belding,114736)


author: Jens Petersen <petersen@redhat.com> - 21.3-15
changelog:
  - cleanup and update .desktop file
  - make emacs not appear in the desktop menu (Seth Nickell,132567)
  - move the desktop file from -common to main package
  - go back to using just gctags for ctags
  - etags is now handled by alternatives (92256)
  - improve the default frame title by prefixing the buffer name
    (Christopher Beland, 128110)
  - fix the names of some European aspell languages with
    emacs-21.3-lisp-textmodes-ispell-languages.patch (David Jansen, 122618)
  - fixing running "libtool gdb program" in gud with
    emacs-21.3-gud-libtool-fix.patch (Dave Malcolm, 130955)


author: Jens Petersen <petersen@redhat.com> - 21.3-16
changelog:
  - do not setup frame-title-format in default.el, since it will override
    setting by users (Henrik Bakken, 134520)
  - emacs-el no longer requires emacs for the sake of -nox users
    (Lars Hupfeldt Nielsen, 134479)
  - condition calling of global-font-lock-mode in default .emacs
    in case xemacs should happen to load it


author: Jens Petersen <petersen@redhat.com> - 21.3-18
changelog:
  - show emacs again in the desktop menu (132567)
  - require fonts-xorg-75dpi to prevent empty boxes at startup due to missing
    fonts (Johannes Kaiser, 137060)


author: Jens Petersen <petersen@redhat.com> - 21.3.50-0.20041111
changelog:
  - initial packaging of cvs emacs
    - leim and elisp manual now in main tarball
    - no leim subpackage anymore, so make common obsolete it
    - no longer need MuleUCS, nor rfc1345.el
    - buildrequire and use autoconf rather autoconf213
    - no longer need emacs-21.2-x86_64.patch,
      editfns.c-Fformat-multibyte-davej.patch
    - bring back game for now
    - TODO: some patches still need updating
    - fns.el no longer installed
    - remove /var/games for now
    - update filelist generation to single sweep
    - update info_files list


author: Jens Petersen <petersen@redhat.com> - 21.3-19
changelog:
  - prefer XIM status under-the-window for now to stop xft httx from dying
    (125413): add emacs-xim-status-under-window-125413.patch
  - default diff to unified format in .emacs


author: Jens Petersen <petersen@redhat.com> - 21.3-20
changelog:
  - workaround xorg-x11 modifier key problem with
    emacs-21.3-xterm-modifiers-137868.patch (Thomas Woerner, 137868)


author: Jens Petersen <petersen@redhat.com> - 21.3-21
changelog:
  - fix CAN-2005-0100 movemail vulnerability with movemail-CAN-2005-0100.patch
    (Max Vozeler, 146701)


author: Jens Petersen <petersen@redhat.com> - 21.3-22
changelog:
  - use prereq instead of contexts for common script requirements
    (Axel Thimm, 147791)
  - move emacs.png from common to main package


author: Jens Petersen <petersen@redhat.com> - 21.3-23
changelog:
  - install %{_bindir}/emacs-nox as a hardlink of the versioned binary
  - drop explicit lib requirements
  - use sed instead of perl to fix up filelists


author: Jens Petersen <petersen@redhat.com> - 21.3-24
changelog:
  - mark default.el as a noreplace config file (Pawel Salek, 149310)
  - only set keyboard-coding-system in xterms to fix problem with input
    Latin characters becoming prefixes and making emacs loop
    (Eddahbi Karim, 126007)
  - make emacs-el own its lisp directories
  - run latex-mode-hook in latex-mode (Martin Biely, 144083)
    - add emacs-21.3-latex-mode-hook-144083.patch


author: Jens Petersen <petersen@redhat.com> - 21.3-25
changelog:
  - add tramp-2.1.3 to site-lisp (David Woodhouse, 149703)
    - move removal of info dir to after its installation
    - add tramp-init.el to put tramp into load-path


author: Jens Petersen <petersen@redhat.com> - 21.3-27
changelog:
  - use alternatives to switch _bindir/emacs between emacs and emacs-nox
    (Henning Schmiedehausen, #151067)
    - remove emacs and emacs-nox from bindir
    - prereq alternatives for emacs and emacs-nox
    - add post and postun scripts to handle alternatives
  - buildrequire xorg-x11-devel instead of XFree86-devel
  - really include and apply emacs-21.3-latex-mode-hook-144083.patch
  - make emacs and emacs-nox own _datadir/emacs/version too


author: Jens Petersen <petersen@redhat.com> - 22.0.50-0.20050406
changelog:
  - update to snapshot of current cvs 
    - configure xim support off by default
    - bootstrap snapshot


author: Jens Petersen <petersen@redhat.com> - 21.4-1
changelog:
  - update to 21.4 movemail vulnerability release
    - no longer need movemail-CAN-2005-0100.patch
  - replace %{_bindir}/emacs alternatives with a wrapper script (Warren Togami)
    to prevent it from disappearing when upgrading (Michal Jaegermann, 154326)
    - suffix the X emacs binaries with -x and the no X binaries with -nox
    - the wrapper script %{_bindir}/emacs-%version runs emacs-x if installed or
      otherwise emacs-nox.  %{_bindir}/emacs is a symlink to the wrapper
  - make emacs and emacs-nox own the subdirs in %{_libexecdir}
  - add a bunch of fixes from debian's emacs21_21.4a-1 patch:
      battery-acpi-support.dpatch, bzero-and-have-stdlib.dpatch,
      coding-region-leak.dpatch, detect-coding-iso2022.dpatch,
      fix-batch-mode-signal-handling.dpatch, pcl-cvs-format.dpatch,
      python-completion-ignored-extensions.dpatch,
      remote-files-permissions.dpatch, save-buffer.dpatch, scroll-margin.dpatch,
      xfree86-4.3-modifiers.dpatch
    - add fix-x-vs-no-x-diffs.dpatch
      - define emacs_libexecdir
      - build both emacs and emacs-nox as %{version}.1 and move common DOC file
        to emacs-common
      - suffix version in fns-%{version}.1.el with -x and -nox respectively
  - add 100 to elisp patches


author: Jens Petersen <petersen@redhat.com> - 21.4-2
changelog:
  - update etags to 17.11 (idht4n@hotmail.com, 151390)
    - add etags-14.21-17.11-diff.patch
  - replace i386 setarch redefinitions of __make and makeinstall with
    emacs-21.4-setarch_for_loadup-101818.patch and setting SETARCH on i386
    (Jason Vas Dias, 101818)


author: Jens Petersen <petersen@redhat.com> - 21.4-4
changelog:
  - don't accidently exclude emacsclient from common package
    (Jonathan Kamens, #157808)
  - traditional Chinese desktop file translation (Wei-Lun Chao, #157287)


author: Jens Petersen <petersen@redhat.com> - 21.4-5
changelog:
  - update cc-mode to 5.30.9 stable release to address font-lock problems
    (126165,148977,150197,155292,158044)


author: Jens Petersen <petersen@redhat.com>
changelog:
  - move setting of require-final-newline from default.el to a comment in default
    .emacs (Ralph Loader, 119141)


author: Jens Petersen <petersen@redhat.com> - 21.4-6
changelog:
  - merge in changes from emacs22.spec conditionally
    - define emacs21 rpm macro switch to control major version and use it
  - update tramp to 2.0.49


author: Jens Petersen <petersen@redhat.com> - 21.4-7
changelog:
  - update rpm-spec-mode.el to cvs revision 1.17 (Ville Skyttä)
    - fixes expansion of %{?dist}
  - replace emacs-21.4-setarch_for_loadup-101818.patch with backport
    emacs-21-personality-linux32-101818.patch from cvs (Jan Djärv)
    which also turns off address randomization during dumping (Masatake Yamato)
    - no longer need to pass SETARCH to make on i386 (#160814)
  - move ownership of %{_datadir}/emacs/ and %{_datadir}/emacs/%{version}/
    from emacs to emacs-el and emacs-leim subpackages
  - don't build tramp html and dvi documentation
  - drop src/config.in part of bzero-and-have-stdlib.dpatch to avoid
    compiler warnings


author: Jens Petersen <petersen@redhat.com>
changelog:
  - fix name of aspell-es dictionary (#147964)
    - update emacs-21.3-lisp-textmodes-ispell-languages.patch


author: Jens Petersen <petersen@redhat.com> - 21.4-9
changelog:
  - fix keyboard-coding-system on console for utf-8 (Dawid Gajownik, #173855)
  - update etags to latest cvs (Hideki Iwamoto, #173023)
    - replace etags-14.21-17.11-diff.patch with etags-update-to-cvs.patch
  - update smtpmail.el to latest cvs version for better authentication support
    with smtpmail-cvs-update.patch (Alberto Brizio, #167804)


author: Jens Petersen <petersen@redhat.com> - 21.4-11
changelog:
  - avoid building with -fstack-protector on i386 to prevent crashing
    (Jonathan Kamens, #174730)
  - require xorg-x11-fonts-ISO8859-1-75dpi instead of xorg-x11-fonts-75dpi
    for modular X (#174614)


author: Jens Petersen <petersen@redhat.com> - 21.4-12
changelog:
  - add mule-cmd.el-X11-locale.alias-173781.patch to correct location of X11
    locale.alias file (Paul Dickson, #173781)
  - fix autoload of php-mode in php-mode-init.el (Christopher Beland, #179484)


author: Jens Petersen <petersen@redhat.com> - 21.4-13
changelog:
  - buildrequire libXaw-devel for menus and scrollbar
  - pass -R to setarch to disable address randomization during dumping
    (Sam Peterson, #174736)
  - install cc-mode.info correctly (Sam Peterson, #182084)
  - fix sort-columns not to use deprecated non-posix sort key syntax
    with sort-columns-posix-key-182282.patch (Richard Ryniker, #182282)
  - use system-name function not variable when setting frame-title-format in
    /etc/skel/.emacs for XEmacs users hitting .emacs


author: Jens Petersen <petersen@redhat.com>
changelog:
  - avoid backup for fix-x-vs-no-x-diffs.dpatch (Ian Collier, #183503)
  - remove the old ccmode info manual (#182084)


author: Jens Petersen <petersen@redhat.com> - 21.4-14
changelog:
  - bring back setarch for i386 with -R option in spec file and drop
    emacs-21-personality-linux32-101818.patch since it no longer seems
    sufficient with recent kernels (Sam Peterson, #174736)
  - buildrequire giflib-devel instead of libungif-devel


author: Chip Coldwell <coldwell@redhat.com> - 22.0.92-1
changelog:
  - new pretest version
  - removed almost all emacs 21 patches from emacs 22
  - clean up spec file,
  - many new BuildRequires (David Woodhouse #221250)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-1
changelog:
  - new pretest version
  - removed setarch since new dumper copes with execshield
  - clean up site initialization files (varions #176171)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.93-4
changelog:
  - fixup loaddefs.el dependencies (Dan Nicolaescu #176171)
  - add BuildRequires: automake (changes to Makefile.in)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-1
changelog:
  - new (last?) pretest tarball from FSF
  - update to php-mode-1.2.0 (Ville Skyttä Resolves: bz235941)
  - use /etc/alternatives instead of wrapper script


author: Chip Coldwell <coldwell@redhat.com> - 22.0.99-4
changelog:
  - format of freed blocks changed between glibc 2.5.90-21 and 2.5.90-22
  - BuildRequires: glibc >= 2.5.90-22 (Ulrich Drepper)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-1
changelog:
  - new pretest tarball from FSF
  - removed Ulrich Drepper's patch to prevent mmapped pages during dumping
    removed BuildRequires: glibc >= 2.5.90-22
    (bug traced to glibc Resolves: bz239344)
  - fix alternatives removal scriptlet (Resolves: bz239745)


author: Chip Coldwell <coldwell@redhat.com> - 22.0.990-2
changelog:
  - revert all spec file changes since 22.0.95-1 (Resolves: bz239745)
  - new pretest tarball from FSF (Resolves: bz238234)
  - restore php-mode (Resolves: bz235941)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-1
changelog:
  - move alternatives install to posttrans scriptlet (Resolves: bz239745)
  - new release tarball from FSF (Resolves: bz245303)
  - new php-mode 1.2.0


author: Chip Coldwell <coldwell@redhat.com> - 22.1-2
changelog:
  - add pkgconfig file for emacs-common and virtual provides (Resolves: bz242176)
  - glibc-open-macro.patch to deal with glibc turning "open" into a macro.
  - leave emacs info pages in default section (Resolves: bz199008)


author: Chip Coldwell <coldwell@redhat.com> - 22.1-4
changelog:
  - fix pkgconfig path (from pkg-config to pkgconfig (Jonathan Underwood)
  - use macro instead of variable style for buildroot.


author: Chip Coldwell <coldwell@redhat.com> - 22.1-5
changelog:
  - require xorg-x11-fonts-ISO8859-1-100dpi instead of 75dpi (Resolves: bz281861)
  - drop broken python mode (Resolves: bz262801)


author: Chip Coldwell <coldwell@redhat.com> 23.0.60-2
changelog:
  - New upstream tarball (fixes bz435767)
  - configure tweaks
  - drop files.el patch (now upstream)
  - drop parallel build patch (now upstream)


author: Chip Coldwell <coldwell@redhat.com> 22.2-1
changelog:
  - revert back to emacs-22.2 (bz443639)
  - update to php-mode-1.4.0
  - update to rpm-spec-mode.el v0.12.1x (bz432209)
  - patch rpm-spec-mode to use compilation mode (bz227418)
  - fix the Release tag (bz440624)
  - drop superfluous configure options
  - move the new icons into the right destination directory
  - the heuristics for detecting address space randomization in the emacs dumper
    seem insufficient, so bring back setarch -R


author: Jens Petersen <petersen@redhat.com> - 1:22.3-1
changelog:
  - update to 22.3 (#461448)
  - emacs-22.1.50-sparc64.patch and emacs-22.1.50-regex.patch no longer needed
  - update rpm-spec-mode.el to look for fields at bol (#466407)


author: Daniel Novotny <dnovotny@redhat.com> 1:22.3-5
changelog:
  - fix #474578 - /usr/bin/emacs link not updated on upgrade
    (added a script to scan the alternatives and update them)


author: Jens Petersen <petersen@redhat.com> - 1:23.0.93-3
changelog:
  - drop igrep since lgrep and rgrep are maintained in emacs now
  - specify the list of *-init.el files to be install explicitly


author: Daniel Novotny <dnovotny@redhat.com> 1:23.0.93-5
changelog:
  - revoked default.el change (#508033)
  - added build dependency: librsvg2-devel (#507852)
  - added dependency: aspell (#443549)


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-11
changelog:
  - Update macros.xemacs to treat epoch correctly and be consistent with xemacs package
  - Use site_start_d macro consistently


author: Jens Petersen <petersen@redhat.com> - 1:23.1-19
changelog:
  - m17n-lib-flt requires m17n-db-flt so no longer need to require explicitly
    m17n-db-datafiles for complex text rendering (#542657)


author: Karel Klic <kklic@redhat.com> 1:23.1-22
changelog:
  - Removed invalid URL for rpm-spec-mode.el. This mode is no longer
    found on Internet in this version.


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-25
changelog:
  - Add --eval '(progn (setq load-path (cons "." load-path)))' to byte
    compilation macro for packaging add-ons


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1-26
changelog:
  - Fix broken byte compilation of emacs2.py and emacs3.py with the relevant
    python binaries - requires turning off brp-python-bytecompile script


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-4
changelog:
  - Remove unnecessary buildroot tag
  - Remove explicit dependency on librsvg2 (but keep BuildRequires for
    librsvg2-devel)
  - Add properly versioned Provides for emacs(bin)
  - Remove long unneeded Obsoletes for emacs-leim
  - Fix summary for emacs-el


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.94-5
changelog:
  - Fix typo in spec file changelog
  - Use standard %patch macro to apply all patches to silent rpmlint warnings


author: Jonathan G. Underwood <jonathan.underwood@gmail.com> - 1:23.1.96-2
changelog:
  - Remove po-mode files since they are now packaged separately as a sub-package
    of gettext (RHBZ #579452)


author: Karel Klíč <kklic@redhat.com> - 1:23.2-4
changelog:
  - Add patch to fix rhbz#595546 hideshow library matches wrong parenthesis
    under certain circumstances
  - Removed %clean section


author: Karel Klic <kklic@redhat.com> - 1:23.2-6
changelog:
  - Removed Obsoletes: emacs-nxml-mode, it was obsoleted in F-11
  - Added COPYING to emacs-el, moved COPYING in emacs-common to %doc


author: Karel Klic <kklic@redhat.com> - 1:23.2-11
changelog:
  - Own /usr/bin/emacs (rhbz#614935)
  - Updated the handling of alternatives to match
    https://fedoraproject.org/wiki/Packaging:Alternatives


author: Karel Klic <kklic@redhat.com> - 1:23.2-12
changelog:
  - Mention xdg-open in browse-url-default-browser docstring (rhbz#624359)
    Updates emacs-23.1-xdg.patch


author: Karel Klic <kklic@redhat.com> - 1:23.2-13
changelog:
  - Removed transient-mark-mode suggestion from dotemacs.el, as this
    minor mode is enabled by default in recent versions of Emacs


author: Karel Klic <kklic@redhat.com> - 1:23.2-16
changelog:
  - Removed dependency on both hunspell and aspell. Emacs does not
    _require_ spell checker, e.g. if user wants to uninstall one, there
    is no reason why Emacs should also be uninstalled. Emacs can run one
    like it can run GDB, pychecker, (La)TeX, make, gcc, and all VCSs out
    there.
  - Removed conflict with old gettext package
  - Cleaned spec file header
  - Removed gcc-4.5.0 specific CFLAGS


author: Karel Klic <kklic@redhat.com> - 1:23.3-2
changelog:
  - Another attempt to fix the handling of alternatives (rhbz#684447)
    The current process loses alternatives preference on every upgrade,
    but there seems to be no elegant way how to prevent this while
    having versioned binaries (/bin/emacs-%{version}) at the same time.
  - Removed 'rm -rf %{buildroot}' from %install section


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-3
changelog:
  - Use UTC timestamps in rpm-spec-mode changelog entries by default (rhbz#672350)
  - Consider *.elc in addition to *.el when loading files from site-start.d (rhbz#672324)


author: Karel Klíč <kklic@redhat.com> - 1:23.3-5
changelog:
  - Removed %defattr from %files sections, as RPM no longer needs it
  - Removed %dir %{_libexecdir}/emacs and similar from emacs and
    emacs-nox packages, as the directories are used and present only in
    emacs-common (rhbz#704067)


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-7
changelog:
  - Use custom-set-variables for customizable variables in .emacs (#716440).
  - Move frame-title-format default from .emacs to default.el (#716443).


author: Karel Klíč <kklic@redhat.com> - 1:23.3-8
changelog:
  - Updated release archive to 23.3a, which includes grammar files that are
    necessary to modify Semantic parsers


author: Karel Klíč <kklic@redhat.com> - 1:23.3-10
changelog:
  - Keep COPYING and NEWS in the etc subdir, and symlinks in the docs (rhbz#714212)
    Author: fedora.dm0@gmail.com


author: Ville Skyttä <ville.skytta@iki.fi> - 1:23.3-11
changelog:
  - Build with gpm and liblockfile support.
  - Drop ssl.el (superseded by tls.el).
  - Update php-mode to 1.5.0.


author: Karel Klíč <kklic@redhat.com> - 1:23.3-19
changelog:
  - Added patch to handle CVE-2012-0035: CEDET global-ede-mode file loading vulnerability (rhbz#773024)


author: Karel Klíč <kklic@redhat.com> - 1:24.0.94-1
changelog:
  - Update to the newest prerelease
  - Remove unpatched files in the lisp directory, where all files are
    installed


author: Karel Klíč <kklic@redhat.com> - 1:24.1-3
changelog:
  - Fix org-mode to work without emacs-el installed. rhbz#830162
  - Fix building without gets function, which is removed from recent version of glibc.


author: Karel Klíč <kklic@redhat.com> - 1:24.1-6
changelog:
  - Fix CVE-2012-3479: Evaluation of 'eval' forms in file-local variable
    sections, when 'enable-local-variables' set to ':safe'


author: Karel Klíč <kklic@redhat.com> - 1:24.2-1
changelog:
  - Updated to the newest upstream release
  - Switched from bz2 upstream package to xz
  - Make the spec file usable on EL6
  - Removed the nogets and CVE-2012-3479 patches, because the upstream
    package fixes the associated issues
  - Added GFDL license to emacs-common package


author: Karel Klíč <kklic@redhat.com> - 1:24.2-2
changelog:
  - Removed focus-init.el which used to set focus-follows-mouse to nil.
    It is set to nil by default in Emacs 24.2.


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 1:24.2-11
changelog:
  - Remove %config from %{_sysconfdir}/rpm/macros.*
    (https://fedorahosted.org/fpc/ticket/259).
  - Fix broken spec-file changelog entry.


author: Petr Hracek <phracek@redhat.com> - 1:24.3-1
changelog:
  - Updated to the newest upstream release
  - solved problem with distribution flag in case of rhel
  - rcs-checking not availble anymore
  - emacs22.png are not installed anymore


author: Petr Hracek <phracek@redhat.com> - 1:24.3-3
changelog:
  - Fix for emacs bug 112144, style_changed_cb (#922519) 
  - Fix for emacs bug 112131, bell does not work (#562719)


author: Jan Synáček <jsynacek@redhat.com> - 1:24.3-21
changelog:
  - fix libjpeg detection fails with gcc7 (#1487557)
  - fix Emacs GUI Toolbar icons missing (#1477745)
  - fix hardening: TLS certificate warnings should be hard errors (#1403643)


author: Horst H. von Brand <vonbrand@inf.utfsm.cl>
changelog:
  - Redid the description
  - Cut overlong make line, loosened changelog a bit
  - I think Junio (or perhaps OSDL?) should be vendor...


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.99.4-3
changelog:
  - use dist tag to differentiate between branches
  - use rpm optflags by default (patch0)
  - own %{_datadir}/git-core/


author: Chris Wright <chrisw@osdl.org> 0.99.4-4
changelog:
  - drop sh_utils, sh-utils, diffutils, mktemp, and openssl Requires
  - use RPM_OPT_FLAGS in spec file, drop patch0


author: H. Peter Anvin <hpa@zytor.com> 0.99.9j-1
changelog:
  - Change subpackage names to git-<name> instead of git-core-<name>
  - Create empty root package which brings in all subpackages
  - Rename git-tk -> gitk


author: Chris Wright <chrisw@redhat.com> 1.1.0-1
changelog:
  - Update to latest git-1.1.0 (drop git-email for now)
  - Now creates multiple packages:
  -        git-core, git-svn, git-cvs, git-arch, gitk


author: Josh Boyer <jwboyer@gmail.com> 1.5.3.6-1
changelog:
  - git-1.5.3.6
  - git-core requires perl(Error) (bug 367861)
  - git-svn requires perl(Term:ReadKey) (bug 261361)
  - git-email requires perl-Git (bug 333061)


author: Jeremy Katz <katzj@redhat.com> - 1.5.4.1-2
changelog:
  - Add upstream patch (e62a641de17b172ffc4d3a803085c8afbfbec3d1) to have 
    gitweb rss feeds point be commitdiffs instead of commit


author: James Bowes <jbowes@redhat.com> 1.5.4.4-3
changelog:
  - Include the sample hooks from contrib/hooks as docs (bug 321151).
  - Install the bash completion script from contrib (bug 433255).
  - Include the html docs in the 'core' package again (bug 434271).


author: Josh Boyer <jwboyer@gmail.com> 1.6.0.3-1
changelog:
  - git-1.6.0.3
  - Drop curl requirement in favor of libcurl (bug 449388)
  - Add requires for SMTP-SSL perl module to make git-send-email work (bug 443615)


author: Todd Zullinger <tmz@pobox.com> 1.6.0.6-1
changelog:
  - git-1.6.0.6
  - Fixes a local privilege escalation bug in gitweb
    (http://article.gmane.org/gmane.comp.version-control.git/103624)
  - Add gitk Requires to git-gui (bug 476308)


author: Todd Zullinger <tmz@pobox.com> 1.6.1-1
changelog:
  - Install git-* commands in %{_libexecdir}/git-core, the upstream default
  - Remove libcurl from Requires, rpm will pick this up automatically
  - Consolidate build/install options in %make_git (Roland McGrath)
  - Include DirectoryIndex in gitweb httpd-config (bug 471692)
  - Define DOCBOOK_XSL_172 to fix minor manpage issues
  - Rename %{_var}/lib/git-daemon to %{_var}/lib/git
  - Preserve timestamps on installed files
  - Quiet some rpmlint complaints
  - Use macros more consistently


author: Todd Zullinger <tmz@pobox.com> 1.6.1.3-1
changelog:
  - git-1.6.1.3
  - Set htmldir so "git help -w <command>" works
  - Patch git-web--browse to not use "/sbin/start" to browse
  - Include git-daemon documentation in the git-daemon package


author: Todd Zullinger <tmz@pobox.com> - 1.6.1.3-2
changelog:
  - Require perl(Authen::SASL) in git-email (bug 483062)
  - Build many of the subpackages as noarch
  - Update URL field


author: Todd Zullinger <tmz@pobox.com> - 1.6.2-1
changelog:
  - git-1.6.2
  - Include contrib/emacs/README in emacs subpackage
  - Drop upstreamed git-web--browse patch


author: Todd Zullinger <tmz@pobox.com> - 1.6.2.2-1
changelog:
  - git-1.6.2.2
  - Include contrib/ dir in %doc (bug 492490)
  - Don't set DOCBOOK_XSL_172, fix the '\&.ft' with sed (bug 485161)
  - Ignore Branches output from cvsps-2.2b1 (bug 490602)
  - Remove shebang from bash-completion script
  - Include README in gitweb subpackage


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.2-1
changelog:
  - git-1.6.3.2
  - Require emacs >= 22.2 for emacs support (bug 495312)
  - Add a .desktop file for git-gui (bug 498801)
  - Set ASCIIDOC8 and ASCIIDOC_NO_ROFF to correct documentation issues,
    the sed hack to fix bug 485161 should no longer be needed
  - Escape newline in git-daemon xinetd description (bug 502393)
  - Add xinetd to git-daemon Requires (bug 504105)
  - Organize BuildRequires/Requires, drop redundant expat Requires
  - Only build noarch subpackages on Fedora >= 10
  - Only build emacs and arch subpackages on Fedora
  - Handle curl/libcurl naming for EPEL and Fedora


author: Todd Zullinger <tmz@pobox.com> - 1.6.3.3-1
changelog:
  - git-1.6.3.3
  - Move contributed hooks to %{_datadir}/git-core/contrib/hooks (bug 500137)
  - Fix rpmlint warnings about Summary and git-mergetool--lib missing shebang


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.2-1
changelog:
  - git-1.6.5.2
  - Drop asciidoc --unsafe option, it should not be needed anymore
  - Don't use install -t/-T, they're not compatible with older coreutils
  - Don't use -perm /a+x with find, it's incompatible with older findutils


author: Todd Zullinger <tmz@pobox.com> - 1.6.5.3-1
changelog:
  - git-1.6.5.3
  - Only BR perl(Error) on Fedora and RHEL >= 5
  - Use config.mak to set build options
  - Improve compatibility with EPEL
  - Replace $RPM_BUILD_ROOT with %{buildroot}
  - Fix Obsoletes for those rebuilding on EL-4


author: Todd Zullinger <tmz@pobox.com> - 1.6.6.1-1
changelog:
  - git-1.6.6.1
  - Use %{gitcoredir}/git-daemon as xinetd server option, for SELinux (#529682)
  - Make %{_var}/lib/git the default gitweb projectroot (#556299)
  - Include gitweb/INSTALL file as documentation, the gitweb README refers to it
  - Ship a short example gitweb config file (%{_sysconfdir}/gitweb.conf)
  - Remove long fixed xinetd IPv6 workaround on Fedora (#557528)
  - Install missing gitweb.js (#558740)


author: Todd Zullinger <tmz@pobox.com> - 1.7.0-1
changelog:
  - git-1.7.0
  - Link imap-send with libcrypto (#565147)
  - Disable building of unused python remote helper libs


author: Todd Zullinger <tmz@pobox.com> - 1.7.1-1
changelog:
  - git-1.7.1
  - Fix conditionals for EL-6
  - Comply with Emacs add-on packaging guidelines (#573423), Jonathan Underwood
    - Place elisp source files in separate emacs-git-el package
    - Place git support files in own directory under site-lisp
    - Use Emacs packaging macros


author: Todd Zullinger <tmz@pobox.com> - 1.7.4.1-1
changelog:
  - Update to 1.7.4.1
  - Clean up documentation settings (the defaults changed in 1.7.4)
  - Improve EL-5 compatibility, thanks to Kevin Fenzi for emacs testing


author: Adam Tkac <atkac redhat com> - 1.7.4.2-1
changelog:
  - update to 1.7.4.2
  - move man3/Git.3pm file to perl-Git subpkg (#664889)
  - add perl-DBD-SQLite dependency to git-cvs (#602410)


author: Todd Zullinger <tmz@pobox.com> - 1.7.6-4
changelog:
  - Drop git-arch on fedora >= 16, the tla package has been retired
  - Rework most spec file dist conditionals to make future changes easier


author: Todd Zullinger <tmz@pobox.com> - 1.7.6.2-1
changelog:
  - Update to 1.7.6.2
  - Fixes incompatibility caused by git push --quiet fix
    http://thread.gmane.org/gmane.comp.version-control.git/180652


author: Adam Tkac <atkac redhat com> - 1.8.0-1
changelog:
  - update to 1.8.0
  - include git-credential-gnome-keyring helper in git pkg
  - 0001-cvsimport-strip-all-inappropriate-tag-strings.patch was merged


author: Todd Zullinger <tmz@pobox.com> - 1.8.1.4-2
changelog:
  - Update asciidoc requirements, drop unsupported ASCIIDOC7
  - Define GNU_ROFF to force ASCII apostrophes in manpages (so copy/paste works)
  - Install tcsh completion (requires manual setup by users)
  - Clean up dist conditionals, don't pretend to support EL-4 builds
  - Use prebuilt documentation on EL-5, where asciidoc is too old
  - Respect gitexecdir variable in git-subtree install


author: Todd Zullinger <tmz@pobox.com> - 1.8.2-2
changelog:
  - Require perl(Term::ReadKey) for git add --interactive (#928328)
  - Drop DESTDIR from python instlibdir
  - Fix bogus changelog dates


author: Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9
changelog:
  - add control of GSSAPI credential delegation to enable HTTP(S)-SSO
    authentication
    Resolves: #1369173


author: Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
changelog:
  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
changelog:
  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
changelog:
  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
changelog:
  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
changelog:
  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.


author: Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
changelog:
  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
changelog:
  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1


author: Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21
changelog:
  - Fix CVE-2019-1387: remote code execution in recursive clones with nested
    submodules
    Resolves: CVE-2019-1387


author: Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23
changelog:
  - Prevent crafted URL containing new lines, empty host or lacks a scheme
    to cause credential leak.
    Resolves: CVE-2020-11008


author: Milan Crha <mcrha@redhat.com> - 3.28.2-1
changelog:
  - Update to 3.28.2
  - Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
  - Resolves: #1575495


author: Milan Crha <mcrha@redhat.com> - 3.28.5-4
changelog:
  - Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)


author: Jan Grulich <jgrulich@redhat.com> - 0.26-2
changelog:
  - Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
    Resolves: bz#1547207

    Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
    Resolves: bz#1545232


author: Jan Grulich <jgrulich@redhat.com> - 0.26-3
changelog:
  - Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
    remote attacker to cause a denial of service via a crafted tif file
    Resolves: bz#1548410


author: Jan Grulich <jgrulich@redhat.com> - 0.27.0-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990352


author: Joe Orton <jorton@redhat.com> 1.95.8-9
changelog:
  - regenerate configure/libtool correctly (#199361)
  - strip DSP files from examples (#186889)
  - fix expat.h compilation with g++ -pedantic (#190244)


author: Joe Orton <jorton@redhat.com> 1.95.8-10
changelog:
  - remove trailing dot in Summary (#225742)
  - use preferred BuildRoot per packaging guidelines (#225742)


author: Joe Orton <jorton@redhat.com> - 2.0.1-8
changelog:
  - add security fix for CVE-2009-3560 (#533174)
  - add security fix for CVE-2009-3720 (#531697)
  - run the test suite


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-13
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.1.0-14
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Marek Grac <mgrac@redhat.com> - 4.0.2-3
changelog:
  - fence_bladecenter: Fix telnet login failure
  - fence_brocade: Rewrite to fencing library
  - fencing_snmp: Fix 'KeyError --a'
  - fence_scsi: Fix XML metadata
  - fence_scsi: Add a documentation of "delay"
  - fence_ilo2: Unable to login when password contains "


author: Marek Grac <mgrac@redhat.com> - 4.0.2-4
changelog:
  - fence_vmware_soap: Disable cache in SUDS library to resolve SELinux problems
    Resolves: rhbz#1022528
  - fencing: Add information that operation 'unfence' should be run automatically after start of the cluster
    Resolves: rhbz#1012994
  - Aligned to upstream 4.0.4


author: Marek Grac <mgrac@redhat.com> - 4.0.2-5
changelog:
  - fence_vmware_soap: Report if user privileges are not enough for given operation
    Resolves: rhbz#1018780
  - fence_wti: Add support for named groups
    Resolves: rhbz#1022536
  - fence_rsb: Update regular expression to match newer firmware version
    Resolves: rhbz#1022538


author: Marek Grac <mgrac@redhat.com> - 4.0.2-6
changelog:
  - fencing: Ensure validity of XML metadata using Relax NG 
    Resolves: rhbz#1022529
  - fencing: Fix invalid use of options[".."]
    Resolves: rhbz#1022533
  - fence_brocade: Add fence agent
    Resolves: rhbz#1021392


author: Marek Grac <mgrac@redhat.com> - 4.0.2-8
changelog:
  - fence-agents-all now includes fence-virt which is not available everywhere
    Resolves: rhbz#1028940


author: Marek Grac <mgrac@redhat.com> - 4.0.2-10
changelog:
  - fix default action for fabric fencing agents
    Resolves: rhbz#1021392
  - modify key generation in fence_scsi to support pacemaker/corosync cluster
    Resolves: rhbz#994466


author: Marek Grac <mgrac@redhat.com> - 4.0.2-13
changelog:
  - fencing: Do not use public key if identity file is not defined
    Resolves: rhbz#1048843
  - fence_vmware_soap: Add support for --delay option
    Resolves: rhbz#1057299
  - fence_wti: Add support for named groups (also for firmware 1.43)
    Resolves: rhbz#1022536


author: Marek Grac <mgrac@redhat.com> - 4.0.2-14
changelog:
  - fence_vmware_soap: Fix unexpected exception
    Resolves: rhbz#1018780
  - nss_wrapper was replaced by gnutls-cli
    Resolves: rhbz#990539


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 4.0.2-17
changelog:
  - Fix fence-agents-* Requires on proper fence-agents-common and silence
    suds error
    Resolves: rhbz#1018780


author: Marek Grac <mgrac@redhat.com> - 4.0.11-1
changelog:
  - rebase of fence agents
    Resolves: rhbz#1120682
  - INFO: fence_scsi_check.pl is now a python script


author: Marek Grac <mgrac@redhat.com> - 4.0.11-5
changelog:
  - fence_wti: Fix problem with EOL introduced by rebase
    Resolves: rhbz#1148762
  - fence_rsb: Fix issue with new firmware 
    Resolves: rhbz#1111597


author: Marek Grac <mgrac@redhat.com> - 4.0.11-6
changelog:
  - fence_cisco_ucs and fence_vmware_soap should logout even in case of failure
    Resolves: rhbz#1111599
  - fence_vmware_soap: Fix issue with import of fail_usage
    Resolves: rhbz#1153059


author: Marek Grac <mgrac@redhat.com> - 4.0.11-9
changelog:
  - fence_ilo_ssh: Fix EOL issue, syslog problem and add fence_ilo_[34]_ssh symlink
    Resolves: rhbz#1121122


author: Marek Grac <mgrac@redhat.com> - 4.0.11-11
changelog:
  - fence_ipmilan: Unset default cipher
    Resolves: rhbz#1203877
  - fence_ilo2: Add --tls1.0
    Resolves: rhbz#1199970
  - update scripts so 'make check' is working again


author: Marek Grac <mgrac@redhat.com> - 4.0.11-13
changelog:
  - fence_scsi: Add monitor operation
    Resolves: rhbz#1213571
  - fence_scsi: Force unfence if any of paths is off
    Resolves: rhbz#1214919
  - fence_cisco_ucs: Fix https:// prefix with --ssl-(in)secure
    Resolves: rhbz#1165591
  - fence_kdump: Add monitor operation
    Resolves: rhbz#1196068
  - fence2rng: Fix problem with quotes
    Resolves: rhbz#1207982


author: Marek Grac <mgrac@redhat.com> - 4.0.11-14
changelog:
  - fence_rhevm: Add authentication via cookies
    Resolves: rhbz#1145769
  - fence_ilo_moonshot: New fence agent
    Resolves: rhbz#1152917
  - fence_emerson: New fence agent
    Resolves: rhbz#1171732
  - fence_rsa: New fence agent
    Resolves: rhbz#1185329


author: Marek Grac <mgrac@redhat.com> - 4.0.11-16
changelog:
  - fence_compute: Agent cleanup
    Resolves: rhbz#1214359
  - fence_hpblade: Add support for HP Integrity Superdome
    Resolves: rhbz#1216997
  - fence_zvmip: Add --missing-as-off and change monitor/status actions
    Resolves: rhbz#1188750
  - fence_mpath: new fence agent
    Resolves: rhbz#1102727
  - fencing: Option --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-18
changelog:
  - fence_rsa: Fix login issue
    Resolves: rhbz#1185329
  - fencing: support for list-status
    Resolves: rhbz#1250586
  - fencing: Fix support for --port-as-ip
    Resolves: rhbz#1214522


author: Marek Grac <mgrac@redhat.com> - 4.0.11-21
changelog:
  - fence_mpath: Fix unfencing after non-cluster reboot
    Resolves: 1102727
  - manual pages now describe 'list-status' properly

  bz1102727-3-fence_mpath.patch bz1250586-2-list_status.patch


author: Marek Grac <mgrac@redhat.com> - 4.0.11-24
changelog:
  - fence_ipmilan: Add removed attributes -i & timeout
    Resolves: rhbz#1257137
  - fence_ipmilan: Do not print password in verbose mode
    Resolves: rhbz#1241648
  - fence_ilo: Negotiation of TLS1.0 is more automatic
    Resolves: rhbz#1256908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-34
changelog:
  - fence_virsh: add --missing-as-off
    Resolves: rhbz#1254821
  - fence_ipmilan: fix power_wait regression
    Resolves: rhbz#1275250
  - fence_ipmilan: add diag action
    Resolves: rhbz#1286045
  - fence_ipmilan: warn that cycle method can report success before node
    is powered off
    Resolves: rhbz#1271780
  - fence_scsi: fix persistentl typo in short desc
    Resolves: rhbz#1280139
  - fence_scsi: remove /dev/dm-X reference
    Resolves: rhbz#1280151
  - fence_rhevm: add Filter header
    Resolves: rhbz#1287059
  - fence_compute: fix to locate all instances to be evacuated
    Resolves: rhbz#1313561


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-44
changelog:
  - fence_mpath: update info to say unique key per node instead of per
    node/device
    Resolves: rhbz#1280151


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-52
changelog:
  - fence_compute: fix ConnectionError
    Resolves: rhbz#1384073
  - fence_lpar: add IVM support and improve error handling
    Resolves: rhbz#1376481
  - fence_vmware_soap: suppress warning for --ssl-insecure
    Resolves: rhbz#1393962
  - Add support for "s" for seconds for delay, *_timeout, *_wait parameters
    Resolves: rhbz#1377928
  - fence-agents-zvm: add to fence-agents-all dependencies for s390x
    Resolves: rhbz#1255700
  - Build for ppc64le
    Resolves: rhbz#1402566


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-56
changelog:
  - fencing: add validate-all action
    Resolves: rhbz#1433948
  - fence_rhevm: add "--disable-http-filter" to be able to explicitly
    use oVirt API version 3
    Resolves: rhbz#1422499


author: Marek Grac <mgrac@redhat.com> - 4.0.11-57
changelog:
  - Set SELinux booleans required for fence agent integration with cluster
    Resolves: rhbz#1427986
  - Add consistency of parameters between STDIN and command-line
    Resolves: rhbz#1403028


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-68
changelog:
  - fence_compute/fence_scsi: fix issue with some parameters
    Resolves: rhbz#1473860
  - fence_compute/fence_evacuate: changes to support Instance HA on OSP12
    Resolves: rhbz#1496390
  - fence-agents-common: remove fence_scsi_check-files that should only be in
    the scsi subpackage
    Resolves: rhbz#1484128


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-83
changelog:
  - fence_compute/fence_evacuate: add support for keystone v3 authentication
    Resolves: rhbz#1533170
  - fence_ilo3: default to onoff
    Resolves: rhbz#1519370


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-86
changelog:
  - fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
    dependencies
    Resolves: rhbz#1476009


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-87
changelog:
  - fence_azure_arm: add network-fencing
    Resolves: rhbz#1553904
  - fence_compute/fence_evacuate: fix parameters
    Resolves: rhbz#1559977


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.0.11-90
changelog:
  - fence_gce: new fence agent
    Resolves: rhbz#1568753
  - fence_rhevm: dont require --ssl parameter when using --ssl-insecure
    Resolves: rhbz#1544093
  - fence_mpath: fix preemptive abort
    Resolves: rhbz#1556857
  - fence-agents-all: dont show manpage-tags in metadata
    Resolves: rhbz#1553908
  - fence_scsi: dont write duplicates to .dev-file
    Resolves: rhbz#1575973
  - fence_impilan: add iLO5-support
    Resolves: rhbz#1579391


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-1
changelog:
  - rebase to v4.2.1
    Resolves: rhbz#1236395
  - fence_mpath: add watchdog support
    Resolves: rhbz#1504202


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-8
changelog:
  - fence_aliyun: add logging
    Resolves: rhbz#1568742
  - fence_gce: add stackdriver-logging support, improve logging and
    set default mode to cycle
    Resolves: rhbz#1568753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-12
changelog:
  - fence_scsi: fix incorrect SCSI-key when node ID is 10 or higher
    Resolves: rhbz#1645170
  - fence_hpblade: fix log_expect syntax
    Resolves: rhbz#1650526
  - fence_vmware_soap: cleanup when receiving SIGTERM
    Resolves: rhbz#1350908


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-18
changelog:
  - fence_rhevm: add RHEV v4 API support and auto-detection
    Resolves: rhbz#1402862
  - fence_azure_arm: use skip_shutdown feature
    Resolves: rhbz#1700544


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-26
changelog:
  - fence_mpath: fix watchdog reboot not triggered when multipath
    disconnected
    Resolves: rhbz#1751702


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-30
changelog:
  - fencing: only use inetX_only parameters for SSH based agents and
    fence_zvmip
    Resolves: rhbz#1722004


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-31
changelog:
  - fence_compute/fence_evacuate: fix region_name content type and
    project shortopt in usage text and project-domain shortopt
    Resolves: rhbz#1760203
  - fence_rhevm: add cookie support
    Resolves: rhbz#1763675
  - fencing: improve stdin quote parsing
    Resolves: rhbz#1769784


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-34
changelog:
  - fence_aws: improve parameter logic to allow setting region parameter
    while using credentials from ~/.aws/config
    Resolves: rhbz#1673468
  -


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-39
changelog:
  - fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
    and avoid failing when hitting it during the monitor-action
    Resolves: rhbz#1654058


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.2.1-41.1
changelog:
  - fence_lpar: fix issue with long username, hostname, etc not
    working when the command run by the agent exceeds 80 characters
  - fence_evacuate: enable evacuation of instances using private flavors

    Resolves: rhbz#1860545
    Resolves: rhbz#1862024


author: Jan Horak <jhorak@redhat.com> - 60.1.0-8
changelog:
  - Fixed homepage and bookmarks (rhbz#1606778)
  - Fixed missing file associations in RHEL6 (rhbz#1613565)


author: Jan Horak <jhorak@redhat.com> - 60.1.0-9
changelog:
  - Do not set user agent (rhbz#1608065)
  - GTK dialogs are localized now (rhbz#1619373)
  - JNLP association works again (rhbz#1607457)


author: David King <dking@redhat.com> - 0.8.4-2
changelog:
  - Sync bzip2 dependency with Fedora package
  - Make the libs subpackage depend on the base package for libostree
  - Fix multilib issues with XML-based documentation


author: Colin Walters <walters@verbum.org> - 0.8.7-3
changelog:
  - Fix libostree bundling:
    Ensure we do not Provide or Require libostree.
    Move the shared library into flatpak-libs so flatpak always
    depends on it.
    Keep the shared library filename as libostree, but put it
    under a private directory.  Renaming the file on disk did not
    really do much since the dynamic linker and RPM work from the
    soname.
    Resolves: #1476905


author: Ray Strode <rstrode@redhat.com> - 0.8.8-2
changelog:
  - Fix crasher in xdg-desktop-portal
    Resolves: #1503579
  - Tweak spec file so it still builds even though we need to
    autoreconf.


author: Ondrej Holy <oholy@redhat.com> - 2.0.0-4.rc4
changelog:
  - CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
  - CVE-2020-11523: Fix integer overflow in region.c (#1837622)
  - CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)


author: Honza Horak <hhorak@redhat.com> - 2.0.35-19
changelog:
  - Spec file cleanup
  - Compile and run test suite during build
  - Using chrpath to get rid of --rpath in gd-progs


author: Filip Januš <fjanus@redhat.com> - 2.0.35-27
changelog:
  - Fix CVE-2016-5766
  - Resolves: #1356813
  - Upstream patch: https://github.com/libgd/libgd/commit/aba3db8


author: Nils Philippsen <nils@redhat.com> - 0.2.0-11
changelog:
  - replace lua-5.2 patch by upstream commit
  - fix buffer overflow in and add plausibility checks to ppm-load op
    (CVE-2012-4433)
  - fix multi-lib issue in generated documentation


author: Paul Howarth <paul@city-fan.org> - 2.2.2-1
changelog:
  - Update to 2.2.2
    - geoipupdate now calls fsync on the database directory after a rename to
      make it durable in the event of a crash
  - Update autotools patch


author: Paul Howarth <paul@city-fan.org> - 2.3.1-1
changelog:
  - Update to 2.3.1
    - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
      greater
    - Previously, on an invalid gzip file, geoipupdate would output binary data
      to stderr; it now displays an appropriate error message
    - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
    - $(sysconfdir) is now created if it doesn't exist (GH#33)
    - The sample config file is now usable (GH#33)


author: Paul Howarth <paul@city-fan.org> - 2.4.0-1
changelog:
  - Update to 2.4.0
    - geoipupdate now checks that the database directory is writable: if it is
      not, it reports the problem and aborts
    - geoipupdate now acquires a lock when starting up to ensure only one
      instance may run at a time: a new option, 'LockFile', exists to set the
      file to use as a lock ('.geoipupdate.lock' in the database directory by
      default)
    - geoipupdate now prints out additional information from the server when a
      download request results in something other than HTTP status 2xx; this
      provides more information when the API does not respond with a database
      file
    - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
    - Previously, a variable named 'ERROR' was used, which caused issues building
      on Windows (GH#36)
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - noarch subpackages always available now
    - libcurl-devel always available now


author: Paul Howarth <paul@city-fan.org> - 2.5.0-1
changelog:
  - Update to 2.5.0
    - Replace use of strnlen() due to lack of universal availability (GH#71)
    - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
    - Remove unused base64 library (GH#68)
    - Add the new configuration option 'PreserveFileTimes'; if set, the
      downloaded files will get the same modification times as their original on
      the server (default is '0') (GH#63)
    - Use the correct types when calling 'curl_easy_setopt()'; this fixes
      warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
    - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
      'ProductIds' option was renamed to 'EditionIDs'; the old options will
      continue to work, but upgrading to the new names is recommended for
      forward compatibility


author: Andrew Price <anprice@redhat.com> - 3.1.10-3
changelog:
  - libgfs2: Issue one write per rgrp when creating them
  - mkfs.gfs2: Fix resource group alignment issue
  - mkfs.gfs2: Free unnecessary cached pages, disable readahead
    Resolves: rhbz#1440269


author: Andrew Price <anprice@redhat.com> - 3.1.10-5
changelog:
  - Update URL in spec file
    Resolves: rhbz#1501738
  - fsck.gfs2: Make -p, -n and -y conflicting options
    Resolves: rhbz#1507091


author: Andrew Price <anprice@redhat.com> - 3.1.10-9
changelog:
  - fsck.gfs2: Don't check fs formats we don't recognise
  - libgfs2: Fix pointer cast byte order issue
    Resolves: rhbz#1616389


author: Andrew Price <anprice@redhat.com> - 3.1.10-10
changelog:
  - libgfs2: Use sizeof for 'reserved' fields in ondisk.c
  - fsck.gfs2: Disambiguate 'check_data'
  - gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
  - fsck.gfs2: Disambiguate check_metalist
  - fsck.gfs2: Fix segfault in build_and_check_metalist
  - fsck.gfs2: Retain context for indirect pointers in ->check_metalist
  - fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
    Resolves: rhbz#1487726


author: Andrew Price <anprice@redhat.com> - 3.1.10-11
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1837640


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own %{_infodir}, %{_mandir} nor %{_mandir}/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61908)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /%{_lib}/tls/librt*so* and /%{_lib}/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move %{_datadir}/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/%{_lib}/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move %{_prefix}/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move %{_prefix}/libexec/getconf/* to glibc from glibc-common
  - make %{_prefix}/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak %{_prefix}/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/%{_lib}/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir %{_prefix}/%{_lib}/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/%{_lib}/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/%{_lib}/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /%{_lib}/obsolete/linuxthreads/
    and NPTL libraries to /%{_lib}.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/%{_lib}/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /%{_lib}/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on %{auxarches},
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-20
changelog:
  - update from CVS
    - time ((void *) 1) should segfault, not return -EFAULT (#174856, BZ#1952)
    - fix errlist generation
  - update ulps for GCC 4.1 on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-22
changelog:
  - update from CVS
    - minor fts fixes
  - revert broken _Pragma () workaround
  - fix ldconfig on bi-arch architectures (#176316)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-23
changelog:
  - update from CVS
    - robust mutexes
  - fix transliteration segfaults (#176573, #176583)
  - ignore prelink temporaries in ldconfig (#176570)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-25
changelog:
  - update from CVS
    - s390{,x} and sparc{,64} pointer mangling fixes
  - install a sanitized LinuxThreads <bits/libc-lock.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-26
changelog:
  - update from CVS
    - for newly linked lio_listio* callers, send per request
      notifications (#170116)
    - fixup nscd -S option removal changes (#176860)
    - remove nonnull attribute from ctermid (#176753)
    - fix PTHREAD_*_INITIALIZER{,_NP} on 64-bit arches
    - SPARC NPTL support for pre-v9 CPUs
  - drop support for 2.4.xx and < 2.6.9 kernels


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-29
changelog:
  - update from CVS
    - make pthread_mutex_t an unnamed union again, as it affects
      libstdc++ ABI mangling


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-30
changelog:
  - update from CVS
    - <pthread.h> initializer fixes for -std=c{8,9}9 on 32-bit
      arches
  - avoid writable .rodata (#177121)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-31
changelog:
  - update from CVS
    - 128-bit long double on ppc, ppc64, s390, s390x and sparc{,v9}
  - add some new syscall numbers to the override <asm/unistd.h>
    headers


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-32
changelog:
  - update from CVS
    - 128-bit long double fixes for ppc{,64}, s390{,x} and sparc{,v9},
      alpha 128-bit long double support
  - add inotify syscall numbers to the override <asm/unistd.h> headers
    (#179366)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-34
changelog:
  - fix <math.h> with C++ and -mlong-double-64 (#179742)
  - add nexttowardl redirect for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-35
changelog:
  - update from CVS
    - handle futimesat (fd, NULL, tvp) as futimes (fd, tvp)
  - fix <stdlib.h> q{e,f,g}cvt{,_r} for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-36
changelog:
  - update from CVS
    - fix frequency setting for ITIMER_PROF (#179938, BZ#2268)
    - fix powerpc inline fegetround ()
    - fix nptl_db (#179946)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-1
changelog:
  - update from CVS
    - fixes for various arches
  - ensure malloc returns pointers aligned to at least
    MIN (2 * sizeof (size_t), __alignof__ (long double))
    (only on ppc32 this has not been the case lately with addition
     of 128-bit long double, #182742)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-2
changelog:
  - update from CVS
    - fix sYSMALLOc for MALLOC_ALIGNMENT > 2 * SIZE_SZ (#183895)
    - revert ppc32 malloc alignment patch, it breaks malloc_set_state
      and needs some further thoughts and time (#183894)
  - provide accurate unwind info for lowlevellock.h stubs on x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4-2
changelog:
  - accurate unwind info for lowlevellock.h stubs on %{ix86}
  - fix ppc/ppc64 ceill, floorl, rintl, roundl and truncl (BZ#2423)


author: Jakub Jelinek <jakub@redhat.com> 2.4-5
changelog:
  - update from CVS
    - pshared robust mutex support
    - fix btowc and bwtoc in C++ (#186410)
    - fix NIS+ (#186592)
    - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - don't mention nscd failures on 2.0 kernels (#185335)


author: Jakub Jelinek <jakub@redhat.com> 2.4-6
changelog:
  - update from CVS
    - NIS+ fixes
    - don't segfault on too large argp key values (#189545)
    - getaddrinfo fixes for RFC3484 (#188364)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-2
changelog:
  - update from CVS
    - fix getaddrinfo (#190002)
    - add auto-propagate nscd.conf options (#177154)
    - fix nscd auditing (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-3
changelog:
  - update from CVS
    - fix a typo in nscd.conf (#190085)
    - fix handling of SIGHUP in nscd when some caches are disabled (#189978)
    - make nscd paranoia mode working with non-root server-user (#189779)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-4
changelog:
  - update from CVS
    - SETENT_BATCH_READ /etc/default/nss option for speeding up
      some usages of NIS+ (#188246)
    - move debug state change notification (#179208)
    - fix ldd script if one of the dynamic linkers is not installed (#190259)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-5
changelog:
  - update from CVS
    - some NIS+ fixes
    - allow overriding rfc3484 address sorting tables for getaddrinfo
      through /etc/gai.conf (sample config file included in %doc directory)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-8
changelog:
  - update from CVS
    - fix nss_compat when SETENT_BATCH_READ=TRUE is in /etc/default/nss
    - fix RFC3484 precedence table for site-local and ULA addresses (#188364)
    - fix a sunrpc memory leak


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-11
changelog:
  - don't exit from nscd -i <database> before the database is
    actually invalidated, add locking to prune_cache (#191464)
  - build glibc-devel.i386 static libraries with
    -mno-tls-direct-seg-refs -DNO_TLS_DIRECT_SEG_REFS
  - RFC3542 support (advanced API for IPv6; #191001, BZ##2693)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-12
changelog:
  - buildrequire gettext
  - enable fstatat64/newfstatat syscalls even on ppc*/s390*/ia64 (#196494)
  - fix out of memory behavior in gettext (#194321)
  - fix regex on multi-byte non-UTF-8 charsets (#193873)
  - minor NIS+ fixes (#190803)
  - don't use cancellable calls in posix_spawn* and only set{u,g}id
    current thread if requested (#193631)


author: Roland McGrath <roland@redhat.com> 2.4.90-15
changelog:
  - fix missing destructor calls in dlclose (#197932)
  - enable transliteration support in all locales (#196713)
  - disallow RTLD_GLOBAL flag for dlmopen in secondary namespaces (#197462)
  - PI mutex support


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-16
changelog:
  - fix dladdr on binaries/libraries with only DT_GNU_HASH and no
    DT_HASH (#200635)
  - fix early timeout of initgroups data in nscd (#173019)
  - add am/pm display to es_PE and es_NI locales (#167101)
  - fix nss_compat failures when nis/nis+ unavailable (#192072)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-18
changelog:
  - NIS+ fixes
  - fix memusage and xtrace scripts (#200736)
  - redirect /sbin/service sshd condrestart std{out,err} to /dev/null
    when executed from glibc_post_upgrade


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-19
changelog:
  - adaptive malloc brk/mmap threshold
  - fix fchownat to use kernel syscall (if available) on many arches (#201870)
  - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all
    other arches (#201748)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-21
changelog:
  - if some test gets stuck, kill the tee process after make check
    finishes
  - build with -mtune=generic on i686 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-23
changelog:
  - malloc fixes, especially for 32-bit arches (#202309)
  - further *_IN locale fixes (#200230)
  - fix get{serv,rpc}ent{,_r} if NIS map is empty (#203237)
  - fix /usr/bin/iconv (#203400)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-25
changelog:
  - temporarily back out code to limit number of unsorted block
    sort iterations (#203735, #204027)
  - handle PLT symbols in dladdr properly (BZ#2683)
  - avoid malloc infinite looping for allocations larger than
    the system can allocate (#203915)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-26
changelog:
  - real fix for the doubly linked list corruption problem
  - try harder in realloc to allocate memory (BZ#2684)
  - fix getnameinfo error reporting (#204122)
  - make localedef more robust on invalid input (#203728)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-27
changelog:
  - allow $LIB and $PLATFORM in dlopen parameters even in suid/sgid (#204399)
  - handle $LIB/$PLATFORM in LD_LIBRARY_PATH
  - fix splice prototype (#204530)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-29
changelog:
  - randomize resolver query ids before use instead after use (#205113)
  - fix resolver symver checking with DT_GNU_HASH (#204909)
  - put .hash section in glibc libraries at the end of RO segment
    when .gnu.hash is present


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-30
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - fix or_IN February name (#204730)
  - fix pthread_create called from cancellation handlers (BZ#3124)
  - fix regex case insensitive searches with characters where upper
    and lower case multibyte representations have different length
    (e.g. I and dotless i, #202991)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-31
changelog:
  - fix pthread_cond_{,timed}wait cancellation (BZ#3123)
  - fix lrint on ppc32 (BZ#3155)
  - fix malloc allocating more than half of address space (BZ#2775)
  - fix mktime on 32-bit arches a few years after 2038 (BZ#2821)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-32
changelog:
  - on ppc* use just AT_PLATFORM and altivec AT_HWCAP bit for library selection
  - fix lrintl and lroundl on ppc{,64}
  - use hidden visibility on fstatat{,64} and mknodat in libc_nonshared.a


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /%{_lib}/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-34
changelog:
  - fix ppc{32,64} longjmp (BZ#3225)
  - fix user visible spelling errors (BZ#3137)
  - fix l{,l}rint{,f,l} around zero (BZ#2592)
  - avoid stack trampoline in s390{,x} makecontext


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-35
changelog:
  - fix glob with large number of matches (BZ#3253)
  - fix fchownat on kernels that don't support that syscall (BZ#3252)
  - fix lrintl on s390{,64}


author: Jakub Jelinek <jakub@redhat.com> 2.5-2
changelog:
  - fix nscd database growing (#207928)
  - bypass prelinking when LD_DYNAMIC_WEAK=1 is in the environment


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-1
changelog:
  - fix i?86 6 argument syscalls (e.g. splice)
  - fix rtld minimal realloc (BZ#3352)
  - fix RFC3484 getaddrinfo sorting according to rules 4 and 7 (BZ#3369)
  - fix xdrmem_setpos (#211452)
  - bump __GLIBC_MINOR__
  - increase PTHREAD_STACK_MIN on ppc{,64} to 128K to allow
    64K pagesize kernels (#209877)
  - speed up initgroups on NIS+ (#208203)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-2
changelog:
  - fix ia64 build
  - don't call _dl_close outside of dl_load_lock critical section
    if dlopen failed (BZ#3426)
  - add rtld scope locking (#211133)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-4
changelog:
  - fix atexit backwards compatibility (#213388)
  - add mai_IN locale (#213415)
  - remove bogus %{_libdir}/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - change libc.info category (#209493)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-5
changelog:
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix libthread_db.so on TLS_DTV_AT_TP architectures
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - fix strxfrm
  - powerpc-cpu add-on updates


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-7
changelog:
  - handle IPv6 addresses in /etc/hosts that are mappable to
    IPv4 addresses in IPv4 host lookups (#215283)
  - fix :include: /etc/alias handling (#215572)
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-8
changelog:
  - fix svc_run (#216834, BZ#3559)
  - add -fasynchronous-unwind-tables to CFLAGS (#216518)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-9
changelog:
  - fix last svc_run change (#217850)
  - on ppc64 build __libc_start_main without unwind info,
    as it breaks MD_FROB_UPDATE_CONTEXT (#217729, #217775; in the
    future that could be fixable just by providing .cfi_undefined r2
    in __libc_start_main instead)
  - add unwind info for x86-64 restore_rt signal return landing pad
    (#217087)
  - add power6x subdir to /%{_lib}/ and /%{_lib}/rtkaio/,
    link all libs from ../power6/* into them


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-11
changelog:
  - allow suid apps to setenv NIS_PATH and influence through that
    nis_list and nis_lookup (#209155)
  - fix ttyname and ttyname_r with invalid file descriptor (#218276)
  - cs_CZ LC_TIME fixes (#218438)
  - fix build with 2.6.19+ headers (#217723)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-12
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)
  - fix memusage with realloc (x, 0)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-13
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - handle relatime mount option in statvfs
  - revert i?86/x86_64 clone CFI temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-14
changelog:
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-15
changelog:
  - fix NIS getservbyname when proto is NULL
  - fix nss_compat +group handling (#220658)
  - cache services in nscd
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)
  - fix ABBA deadlock possibility in ld.so scope locking code


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-16
changelog:
  - add strerror_l
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - ignore errors from install-info in glibc-devel scriptlets
    (#223691)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-17
changelog:
  - RFC2671 support in resolver (#205842)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix pthread_mutex_timedlock on x86_64 (#228103)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-18
changelog:
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix fmod{,f,l} on i?86 (BZ#3325)
  - support localized digits for fp values in *scanf (BZ#2211)
  - namespaces fixes (BZ#2633)
  - fix euidaccess (BZ#3842)
  - glob fixes (BZ#3996)
  - assorted locale data fixes (BZ#1430, BZ#672, BZ#58, BZ#3156,
    BZ#2692, BZ#2648, BZ#3363, BZ#3334, BZ#3326, BZ#3322, BZ#3995,
    BZ#3885, BZ#3884, BZ#3851)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-19
changelog:
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-20
changelog:
  - assorted NIS+ speedups (#223467)
  - fix HAVE_LIBCAP configure detection (#178934)
  - remove %{_prefix}/sbin/rpcinfo from glibc-common (#228894)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - feholdexcept/feupdateenv fixes (BZ#3427)
  - speed up fnmatch with two or more * in the pattern


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-21
changelog:
  - don't include individual locale files in glibc-common,
    rather include prepared locale-archive template and let
    build-locale-archive create locale-archive from the template
    and any user supplied /usr/lib/locale/*_* directories,
    then unlink the locale-archive template - this should save
    > 80MB of glibc-common occupied disk space
  - fix _XOPEN_VERSION (BZ#4364)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362)
  - fix NIS+ __nisfind_server (#235229)


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-22
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix a regression introduced in #223467 changes
  - gethostby*_r alignment fixes (BZ#4381)
  - fix ifaddrs error handling


author: Jakub Jelinek <jakub@redhat.com> 2.5.90-23
changelog:
  - use madvise MADV_DONTNEED in malloc
  - fix ia64 feraiseexcept
  - fix s390{,x} feholdexcept (BZ#3427)
  - ppc fenv fixes
  - make fdatasync a cancellation point (BZ#4465)
  - fix *printf for huge precisions with wide char code and multi-byte
    strings
  - fix dladdr (#232224, BZ#4131)


author: Jakub Jelinek <jakub@redhat.com> 2.6-2
changelog:
  - restore malloc_set_state backwards compatibility (#239344)
  - fix epoll_pwait (BZ#4525)
  - fix printf with unknown format spec or positional arguments
    and large width and/or precision (BZ#4514)
  - robust mutexes fix (BZ#4512)


author: Jakub Jelinek <jakub@redhat.com> 2.6-3
changelog:
  - don't use %config(missingok) for locale-archive.tmpl,
    instead of removing it altogether truncate it to zero
    size (#240697)
  - add a workaround for #210748


author: Jakub Jelinek <jakub@redhat.com> 2.6-4
changelog:
  - filter <built-in> pseudo-files from debuginfo source lists (#245714)
  - fix sscanf when errno is EINTR before the call (BZ#4745)
  - save/restore errno around reading /etc/default/nss (BZ#4702)
  - fix LD_HWCAP_MASK handling
  - disable workaround for #210748, instead backport
    ld.so locking fixes from the trunk (#235026)
  - new x86_64 memcpy
  - don't write uninitialized padding bytes to nscd socket
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#245035, #244545)
  - fix LD_AUDIT=a:b program (#180432)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64
  - fix sem_timedwait on i?86 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-1
changelog:
  - update to trunk
    - private futex optimizations
    - open{,at}{,64} argument checking
  - ldconfig speedups


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-2
changelog:
  - make aux-cache purely optional performance optimization in ldconfig,
    don't issue any errors if it can't be created (#250430)
  - remove override_headers hack, BuildRequire >= 2.6.22 kernel-headers
    and rely on its content


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-3
changelog:
  - fix open{,at}{,64} macro for -pedantic (#250897)
  - add transliteration for l with stroke (#250492)
  - fix strtod ("-0", NULL)
  - update License tag


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-9
changelog:
  - private futex even for mutexes and condvars
  - some further O_CLOEXEC changes
  - use vDSO on x86_64 if available
  - ia64 build fixes (#251983)


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-10
changelog:
  - don't open /etc/ld.so.{cache,preload} with O_NOATIME (#252146)
  - s390{,x}, alpha and sparc fixes
  - sparcv9 is no longer an aux arch, as we expect
    to not build sparc.rpm glibc any longer, only sparcv9.rpm,
    sparc64.rpm and new two aux arches sparcv9v.rpm and sparc64v.rpm


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-11
changelog:
  - remove __strtold_internal and __wcstold_internal from ppc*/s390*/sparc*
    *-ldbl.h headers
  - temporarily backout x86_64 gettimeofday.S changes (#252453)
  - some further sparc, sparc64 and alpha fixes


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-12
changelog:
  - readd x86_64 gettimeofday stuff, initialize it earlier
  - nis_list fix (#254115)
  - workaround for bugs in ia64 silly /emul/ia32-linux hack (#253961)
  - misc fixes (BZ#3924, BZ#4566, BZ#4582, BZ#4588, BZ#4726, BZ#4946,
    BZ#4905, BZ#4814, BZ#4925, BZ#4936, BZ#4896, BZ#4937, BZ#3842,
    BZ#4554, BZ#4557, BZ#4938)


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-14
changelog:
  - -D_FORTIFY_SOURCE{,=2} support for C++
  - fortification of fread{,_unlocked}
  - support *scanf m allocation modifier (%ms, %mls, %mc, ...)
  - in -std=c99 or -D_XOPEN_SOURCE=600 mode don't recognize
    %as, %aS and %a[ as a GNU extension for *scanf
  - fix splice, vmsplice, tee return value, make them cancellation
    points
  - mq_open checking
  - use inline function rather than function-like macro
    for open{,at}{,64} checking
  - IFA_F_OPTIMISTIC handling in getaddrinfo (#259681)
  - fix an ABBA deadlock in ld.so (#284171)
  - remove sparc{32,64} unwind info from _start and clone


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-16
changelog:
  - misc fixes (BZ#4963, BZ#4972, BZ#5028, BZ#5043, BZ#5058)
  - improve -D_FORTIFY_SOURCE{,=2} diagnostic through warning/error
    attributes
  - fix wcscpy, wcpcpy, fgetws, fgetws_unlocked, swprintf and vswprintf
    fortification inlines
  - fix a scalability issue with lazy binding in heavily multithreaded
    programs


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-17
changelog:
  - fix {,v}swprintf with -D_FORTIFY_SOURCE=1 -mlong-double-64 on ppc*/s390*/sparc*
  - strcoll fixes
  - misc fixes (BZ#645, BZ#5071)
  - locale fixes (BZ#4941, #299321, #203364, #196711, #236212)


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-18
changelog:
  - add signalfd, eventfd, eventfd_read, eventfd_write
  - qsort speedups
  - workaround for cpuid bugs (#324081)
  - make sure gettext's conversion_lock is initialized even if
    program isn't linked against libpthread.so.0, only dlopens it (#321761)
  - misc fixes (BZ#5112, BZ#5113, BZ#5104, BZ#5063, BZ#5010, BZ#4407,
    BZ#3924, BZ#5103, BZ#2633, BZ#181, BZ#73, #321901)


author: Jakub Jelinek <jakub@redhat.com> 2.6.90-20
changelog:
  - install <bits/error.h> (#330031)
  - disable -D_FORTIFY_SOURCE{,=2} support (with a warning) for
    GCC 3.4.x and earlier(#327641)
  - pl_PL locale changes (BZ#4098, #242296)
  - misc fixes (BZ#1140, BZ#3195, BZ#3242, BZ#4359)


author: Jakub Jelinek <jakub@redhat.com> 2.7-1
changelog:
  - glibc 2.7 release
  - fix tzfile.c for times after last transition (#333561)
  - fix sem_post@GLIBC_2.0 on i?86
  - appease valgrind in libpthread.so initialization
  - misc fixes (BZ#3425, BZ#5184, BZ#5186)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-3
changelog:
  - update to trunk
    - fix recognition of interface family (#425768)
    - add __THROW to __ctype_{b,tolower,toupper}_loc prototypes


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-4
changelog:
  - update to trunk
    - misc fixes (BZ#5541, BZ#5545, BZ#5553, BZ#5112, BZ#5520)
    - getaddrinfo fixes
    - signalize EOVERFLOW from sem_post instead of overflowing
      the counter
    - fix i?86 makecontext
    - fix iconv for iso-2022-jp//translit (#397021)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-7
changelog:
  - update to trunk
    - make NI_MAXHOST and NI_MAXSERV available even in BSDish
      namespaces (BZ#5737)
    - timerfd_* syscalls


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-8
changelog:
  - update to trunk
    - {,v}{as,d}printf and obstack_{,v}printf fortification (#435905)
    - fix getnameinfo/gethostbyaddr (#428067, BZ#5790)
    - fix yp_order (#435519, BZ#5854)
    - misc fixes (BZ#5779, BZ#5736, BZ#5627, BZ#5818, BZ#5012)
  - merge review cleanup (Tom Callaway, #225806)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-12
changelog:
  - update to trunk
    - new CLONE_* flags in <sched.h> (#438542)
    - nis+ errno clobbering fix (#437945)
    - fix adjtime (#437974)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-13
changelog:
  - update to trunk
    - don't define ARG_MAX in <limits.h>, as it is no longer
      constant - use sysconf (_SC_ARG_MAX) to get the current
      argument size limit
    - fix build on sparc64
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-14
changelog:
  - update to trunk
    - misc fixes (BZ#5443, BZ#5475, BZ#5478, BZ#5939, BZ#5979, BZ#5995,
  		BZ#6004, BZ#6007, BZ#6020, BZ#6021, BZ#6042)
    - change mtrace to keep perl 5.10 quiet (#441082)
    - don't share conversion state between mbtowc and wctomb (#438687)
    - if st_blksize is too large and malloc fails, retry with smaller
      buffer in opendir (#430768)
    - correct *printf overflow test (#358111)


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-15
changelog:
  - update to trunk
    - misc fixes (BZ#4314, BZ#4407, BZ#5209, BZ#5436, BZ#5768, BZ#5998,
  		BZ#6024)
  - restart sshd in %post when upstart is used - it doesn't have
    /dev/initctl (#441763)
  - disable assert checking again


author: Jakub Jelinek <jakub@redhat.com> 2.7.90-16
changelog:
  - update to trunk
    - misc fixes (BZ#4997, BZ#5741)
    - make sure all users of __libc_setlocale_lock know it is
      now a rwlock
    - fix ppc/ppc64 compatibility _sys_errlist and _sys_siglist
      symbols


author: Jakub Jelinek <jakub@redhat.com> 2.8-2
changelog:
  - fix nscd races during GC (BZ#5381)
  - rebuilt with fixed GCC to fix regex miscompilation on power6
  - SPARC fixes


author: Jakub Jelinek <jakub@redhat.com> 2.8-3
changelog:
  - don't run telinit u in %post if both /dev/initctl and
    /sbin/initctl exist (#444978)
  - workaround GCC ppc64 miscompilation of c{log{,10},acosh,atan}l
    (#444996)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-1
changelog:
  - update to trunk
    - O(n) memmem/strstr/strcasestr
    - i386/x86_64 TLS descriptors support
    - concurrent IPv4 and IPv6 DNS lookups by getaddrinfo


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-6
changelog:
  - update from trunk
    - nscd fixes (#450704)
    - fix getservbyport (#449358)
    - fix regexp.h (#446406)
    - avoid crashing on T_DNAME in DNS responses (#450766)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-7
changelog:
  - update from trunk
    - avoid *lround* on ppc* clobbering cr3/cr4 registers (#450790)
    - further nscd fixes (#450704)
    - use inotify in nscd to watch files


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-9
changelog:
  - update from trunk
    - fix unbuffered vfprintf if writing to the stream fails (#455360)
    - remove useless "malloc: using debugging hooks" message (#455355)
    - nscd fixes
    - fix resolver alignment issues (#454500)
    - fix setvbuf (BZ#6719)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-10
changelog:
  - update from trunk
    - resolver fixes
    - misc fixes (BZ#6771, BZ#6763, BZ#6698, BZ#6712)
    - s390{,x} utmp/utmpx bi-arch support (BZ#6724)
    - popen "e" flag
  - fr_FR locale changes reenabled


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-11
changelog:
  - update from trunk
    - fix non-absolute $ORIGIN handling (#457560)
    - exported some further libresolv APIs (#453325)
    - misc fixes


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-12
changelog:
  - update from trunk
    - revert origin changes (#457849)
    - use MAP_STACK for thread stacks
    - misc fixes (BZ#6845, BZ#6544, BZ#6634, BZ#6589, BZ#6790, BZ#6791,
      BZ#6824)
    - power7 bits (BZ#6817)
    - fix expm1 on i?86/x86_64 (#43354, BZ#5794)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-14
changelog:
  - update from trunk
    - fix dynamic TLS handling (#467309)
    - fix sys/signalfd.h for C++ (#467172)
    - fix sprof (#458861)
    - fix _mcount and socket syscalls on s390x (#464146)
    - try harder to allocate memory in valloc and pvalloc (#461481)
  - fix power6 32-bit libs (#467311)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-16
changelog:
  - update from trunk
    - further resolver fixes
    - another dynamic TLS handling fix (#469263)
    - misc fixes (BZ#6867, BZ#6875, BZ#6919, BZ#6920, BZ#6942, BZ#6947,
  		BZ#6968, BZ#6974, BZ#6980, BZ#6995)
  - rebuild with newer rpm to avoid stripping
    shared libraries when they shouldn't be (#468129)


author: Jakub Jelinek <jakub@redhat.com> 2.8.90-17
changelog:
  - update from trunk
    - don't abort on broken DNS replies (#469299, BZ#7009)
    - misc fixes (BZ#6966, BZ#7008, BZ#6955, BZ#6843)


author: Jakub Jelinek <jakub@redhat.com> 2.9-3
changelog:
  - temporarily disable _nss_dns_gethostbyname4_r (#459756)
  - NIS hostname lookup fixes (#473073, #474800, BZ#7058)
  - fix unsetenv (#472941)


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-7
changelog:
  - update from trunk
  - adjust for i586 + i686 from i386 + i686 build
  - split static libraries into glibc-static subpackage
  - ld -r the whole libpthread.a together to avoid endless issues with
    -static ... -lpthread
  - require 2.6.18 and later kernel


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-9
changelog:
  - update from trunk
    - POSIX 2008 support: -D_XOPEN_SOURCE=700 and -D_POSIX_C_SOURCE=200809L
  - move libnldbl_nonshared.a on ppc*/s390*/sparc* back to glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-11
changelog:
  - update from trunk
    - POSIX 2008 prototype adjustments for scandir{,64}, alphasort{,64} and
      versionsort{,64}
    - fix libthread_db (#491197)


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-15
changelog:
  - rebuilt with fixed gcc to avoid miscompilation of i586 memmove
  - reenable experimental malloc again


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-17
changelog:
  - update from trunk
    - if threads have very small stack sizes, use much smaller buffer
      in __get_nprocs when called from within malloc (#494631)


author: Jakub Jelinek <jakub@redhat.com> 2.9.90-21
changelog:
  - update from trunk
    - fix localedef
    - fix SHIFT_JIS iconv EILSEQ handling (#497267)
    - misc fixes (BZ#10093, BZ#10100)


author: Jakub Jelinek <jakub@redhat.com> 2.10.1-2
changelog:
  - fix accept4 on architectures other than i?86/x86_64
  - robustify nscd client code during server GC
  - fix up nscd segfaults during daemon shutdown
  - fix memchr on ia64 (BZ#10162)
  - replace the Sun RPC license with the BSD license, with the explicit
    permission of Sun Microsystems
  - fix up powerpc long double errno reporting


author: Andreas Schwab <aschwab@redhat.com> 2.10.90-1
changelog:
  - Update from master.
  - Enable multi-arch support on x86/x86-64.
  - Add requires glibc-headers to glibc-devel (#476295).
  - Implement second fallback mode for DNS requests (#505105).
  - Don't generate invalid POSIX TZ string for Asia/Dhaka timezone (#506941).
  - Allow backtrace through __longjmp_chk on powerpc.


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-10
changelog:
  - Update from master.
    * fix memory ordering in pthread_mutex_unlock (BZ#10418)
    * implement RES_USE_DNSSEC option in resolver (#205842)
    * fix hang in ldd -r (#513945)


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-13
changelog:
  - Update from master.
    - fix rehashing of unique symbols (#515677)
  - Fix spurious messages with --excludedocs (#515948)


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-15
changelog:
  - Update from master.
    - fix fortify failure with longjmp from alternate stack (#512103).
  - Add conflict with prelink (#509655).


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-20
changelog:
  - Update from master.
    - Fix strstr/strcasestr/fma/fmaf on x86_64 (#519226).
    - Fix lookup of group names in hesiod initgroups (#520472).


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-22
changelog:
  - Update from master.
    - Fix endless loop in localedef.
    - Fix __longjmp_chk on s390/s390x.
  - Fix exit codes in nscd start script (#521848).
  - Build with -fno-var-tracking-assignments for now (#523172).


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-25
changelog:
  - Update from master
    - Fix descriptor leak when calling dlopen with RTLD_NOLOAD (#527409).
    - Fix week-1stday in C locale.
    - Check for integer overflows in formatting functions.
    - Fix locale program error handling (#525363).


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-26
changelog:
  - Update from master.
    - Add ____longjmp_chk for sparc.
  - Avoid installing the same libraries twice.


author: Andreas Schwab <schwab@redhat.com> - 2.10.90-27
changelog:
  - Update from master.
    - Fix races in setXid implementation (BZ#3270).
    - Implement IFUNC for PPC and enable multi-arch support.
    - Implement mkstemps/mkstemps64 and mkostemps/mkostemps64 (BZ#10349).
    - Fix IA-64 and S390 sigevent definitions (BZ#10446).
    - Fix memory leak in NIS grp database handling (BZ#10713).
    - Print timestamp in nscd debug messages (BZ#10742).
    - Fix mixing IPv4 and IPv6 name server in resolv.conf.
    - Fix range checks in coshl.
    - Implement SSE4.2 optimized strchr and strrchr.
    - Handle IFUNC symbols in dlsym (#529965).
    - Misc fixes (BZ#10312, BZ#10315, BZ#10319, BZ#10391, BZ#10425,
      BZ#10540, BZ#10553, BZ#10564, BZ#10609, BZ#10692, BZ#10780,
      BZ#10717, BZ#10784, BZ#10789, BZ#10847
  - No longer build with -fno-var-tracking-assignments.


author: Andreas Schwab <schwab@redhat.com> - 2.11-1
changelog:
  - Update to 2.11 release.
  - Disable multi-arch support on PowerPC again since binutils is too old.
  - Fix crash in tzdata-update due to use of multi-arch symbol (#532128).


author: Andreas Schwab <schwab@redhat.com> - 2.11-2
changelog:
  - Fix readahead on powerpc32.
  - Fix R_PPC64_{JMP_IREL,IRELATIVE} handling.
  - Fix preadv, pwritev and fallocate for -D_FILE_OFFSET_BITS=64 (#533063).


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-2
changelog:
  - Update from master.
    - Define week, first_weekday, and first_workday for en_DK locale (#525126).
    - Use struct timespec for timestamps in struct stat also if
      __USE_XOPEN2K8 (#539870).
    - Fix week information for nl_NL locale (#499748).
    - Update ntp_gettime for Linux (#479558).
    - Fix getwc* and putwc* on non-wide streams (BZ#10958).
    - Avoid warnings in CPU_* macros when using const bitsets (BZ#10918).
    - Handle LC_GLOBAL_LOCALE in duplocale (BZ#10969).
    - Fix _NC_LOCALE_NAME definition (BZ#10968).
    - Add missing Linux MADV_* definitions (BZ#10972).
    - Add support for new Linux error ERFKILL (BZ#10939).
  - Enable multi-arch support on ppc and ppc64.


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-3
changelog:
  - Update from master.
    - Fix infloop in __pthread_disable_asynccancel on x86_64 (#537690).
    - Prevent unintended file desriptor leak in grantpt (#530558).
    - Fix startup to security-relevant statically linked binaries (#528631).
  - Re-install CFI in x86/x86_64 clone (#491542).


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-4
changelog:
  - Update from master.
    - Add Requeue-PI support for x86 arch.
    - Redefine O_SYNC and O_DSYNC to match 2.6.33+ kernels.
    - Fix a few error cases in *name4_r lookup handling (BZ#11000).
    - Fix kernel version check in recent ptsname change (BZ#11046).
    - Add more warnings to exec functions (BZ#11056).
    - Add recvmmsg interface.
    - Define SCHED_IDLE and SCHED_RESET_ON_FORK for Linux.


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-5
changelog:
  - Update from master.
    - Additional setcontext(), etc. conformance tests (BZ#11115).
    - Handle AT_FDCWD in futimens (BZ#10992).
    - Update poll.h header for POSIX 2008 (BZ#11093).
    - Avoid ELF lookup race.


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-9
changelog:
  - Update from master.
    - Define IPTOS_CLASS_* macros according to RFC 2474 (BZ#11027)
    - Always use IPv4 sockets for IPv4 addresses (BZ#11141)
    - regcomp.c: do not ignore memory allocation failure (BZ#11127)
    - Fix malloc_info without prior allocations (BZ#11126)
    - Optimize 32bit memset/memcpy with SSE2/SSSE3
    - Relax feature tests in headers


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-10
changelog:
  - Update from master
    - Fix ____longjmp_chk for s390/s390x
    - Remove duplicate definitions of O_DSYNC and O_RSYNC for Linux/sparc
    - Ignore negative dynamic entry types (#546890)
    - Fix pthread_cond_*wait with requeue-PI on i386 (#548989)
    - Fix _XOPEN_SOURCE_EXTENDED handling
  - Revert "Optimize 32bit memset/memcpy with SSE2/SSSE3."


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-11
changelog:
  - Update from master
    - Fix error checking in iconv (#558053)
    - Don't map U00DF to U1E9E in toupper table
    - _nl_load_locale() incorrectly handles mmap() failures (BZ#11200)
    - Fix various issues in regex matcher (BZ#11183, BZ#11184, BZ#11185,
      BZ#11186, BZ#11187, BZ#11188, BZ#11189, BZ#11190, BZ#11191,
      BZ#11192, BZ#11193)


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-12
changelog:
  - Update from master
    - Update constants in <sys/mount.h> for current kernels (#11235)
    - Fix endless loop with invalid /etc/shells file (#11242)
    - Fix sorting of malayalam letter 'na' (#10414)
    - Add kok_IN locale
    - Use common collation data in as_IN locale
    - Avoid alloca in setenv for long strings
  - Use shared mapping to reserve memory when creating locale archive (#10855)
  - Fix fstat on Linux/sparc64 (#11155)


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-13
changelog:
  - Update from master
    - Use CPUID_OFFSET instead of FEATURE_OFFSET
    - Add 32bit memcmp/strcmp/strncmp optimized for SSSE3/SSS4.2
    - Fix file descriotor leak in nftw with FTW_CHDIR (BZ#11271)
    - Add Sparc STT_GNU_IFUNC support
    - Add power7-optimized classification functions
  - Reapply "Optimize 32bit memset/memcpy with SSE2/SSSE3."
  - Use unsigned comparison in sse memcpy/memset


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-15
changelog:
  - Update from master
    - sparc64: Fix handling of R_SPARC_TLS_LE_* relocations (#571551)
    - Handle ext4 and logfs in statvfs functions
    - Fix setxid race with thread creation
    - Pass -mtune=i686 to assembler when compiling for i686
    - Fix R_X86_64_PC32 overflow detection
    - Fix msgrcv on sparc64
    - Fix unwind info in x86 strcmp-sse4.S (BZ#11332)
    - sparc: Add multiarch support for memset/bzero/memcpy
  - Remove directories owned by filesystem (#569414)
  - Add %ghost /etc/gai.conf to glibc-common (#567748)


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-17
changelog:
  - Update from master
    - Locale data updates (BZ#11007, BZ#11258, BZ#11272, BZ#10554)
    - Handle DNS timeouts in old-style lookup code (BZ#11010)
    - Fix aux cache handling in ldconfig with chroot (BZ#11149)
    - Fix printing error messages in getopt (BZ#11043)
    - Declare iruserok and iruserok_af (BZ#11070)
    - Fix option aliasing in argp (BZ#11254)
    - Handle POSIX-compliant errno value of unlink in remove (BZ#11276)
    - Fix definition and testing of S_ISSOCK (BZ#11279)
    - Fix retrieving of kernel header version (BZ#11287)
    - Fix concurrent handling of __cpu_features (BZ#11292)
    - Handle unnecessary padding in getdents64 (BZ#11333)
    - Fix changes to interface list during getifaddrs calls (BZ#11387)
    - Missing memory barrier in DES initialization (BZ#11449)
    - Fix spurious UNAVAIL status is getaddrinfo
    - Add support for new clocks (BZ#11389)
    - Fix Linux getlogin{_r,} implementation
    - Fix missing zero-termination in cuserid (BZ#11397)
    - Fix glob with empty pattern
    - Fix handling of STB_GNU_UNIQUE in LD_TRACE_PRELINKING
    - Unify wint_t handling in wchar.h and wctype.h (BZ#11410)
    - Implement handling of libc ABI in ELF header
    - Don't underestimate length of DST substitution in rpath
    - Power7-optimized 64-bit and 32-bit memcpy
  - Assign global scope to RFC 1918 addresses (#577626)


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-18
changelog:
  - Update from master
    - Implement interfaces to set and get names of threads (BZ#11390)
    - Locale data updates (BZ#10824, BZ#10936, BZ#11470, BZ#11471)
    - Print reload count in nscd statistics (BZ#10915)
    - Fix reading loginuid file in getlogin{,_r}
    - Fix fallocate error return on i386
    - Fix cproj implmentation (BZ#10401)
    - Fix getopt handing (BZ#11039, BZ#11040, BZ#11041)
    - Implement new mode for NIS passwd.adjunct.byname table (BZ#11134)
    - Obey LD_HWCAP_MASK in ld.so.cache lookups


author: Andreas Schwab <schwab@redhat.com> - 2.11.90-20
changelog:
  - Update from master
    - Fix bugs in x86-32 strcmp-sse4.S and strcmp-ssse3.S
    - Add x86-32 FMA support
    - Don't crash in trace mode when dependencies are missing
    - x86-64 SSE4 optimized memcmp
    - Fix makecontext on s390/s390x


author: Roland McGrath <roland@redhat.com> - 2.12-1
changelog:
  - Update to 2.12 release.
    - Fix ldconfig chroot handling.
    - Don't deadlock in __dl_iterate_phdr while (un)loading objects.
    - Fix handling of newline in addmntent.
    - Fix AIO when thread creation failed.


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-1
changelog:
  - Update from master
    - POWER7 optimized memset
    - Fix typo in es_CR locale
    - Enable IDN support in getent
    - Fix race in free sanity check
    - Fix lookup of collation sequence value during regexp matching
    - Fix name of tt_RU.UTF-8@iqtelif locale (#589138)
    - Handle too-small buffers in Linux getlogin_r (BZ#11571, #589946)


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-2
changelog:
  - Update from master
    - Small fix to POWER7 32-bit memcpy
    - Correct x86 CPU family and model check (BZ#11640, #596554)
    - Fix iov size in SH register_dump
    - Don't crash on unresolved weak symbol reference
    - Implement recvmmsg also as socketcall
    - sunrpc: Fix spurious fall-through
    - Make <sys/timex.h> compatible with C++ (#593762)
  - Fix users and groups creation in nscd %post script


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-3
changelog:
  - Update from master
    - Power7 string compare optimizations
    - Properly resize buffer in NIS initgroups
    - Define F_SETPIPE_SZ and F_GETPIPE_SZ
    - Fix more C++ incompatibility problems in headers
  - Properly set __libc_multiple_libcs
  - Don't assume AT_PAGESIZE is always available (#597578)
  - Don't call uname or getrlimit in libpthread init function (#579086)
  - Mark /etc/rpc as %config (#587050)


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-4
changelog:
  - Update from master
    - Work around kernel rejecting valid absolute timestamps
    - Improve 64bit memcpy/memmove for Atom, Core 2 and Core i7
    - Fix error handling in Linux getlogin*
  - Workaround assembler bug sneaking in nopl (#579838)
  - Fix scope handling during dl_close
  - Fix setxid race handling exiting threads


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-5
changelog:
  - Update from master
    - Don't pass NULL occation to dl_signal_cerror
    - Implement _PC_PIPE_BUF.
  - Add glibc-ports tarball


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-7
changelog:
  - Update from master
    - Add optimized x86-64 implementation of strnlen and strcaecmp
    - Document M_PERTURB
    - Fix vDSO synthetic hwcap handling so they are not masked out from
      ld.so.cache matching
    - POWER6/7 optimizations for copysign
  - Build with ports addon on alpha and armv5tel
  - Add conflict with kernel < 2.6.32 (#619538)
  - Switch to xz compressed tar files
  - build-locale-archive: process only directories matching *_*


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-8
changelog:
  - Update from master
    - Fix static strspn on x86 (#624852)
    - Various POWER7 optimized string functions
    - Fix x86 pthread_cond_signal() FUTEX_WAKE_OP fallback
    - Add optimized strncasecmp versions for x86-64
    - PowerPC64 ABI fixes
    - Properly quote output of locale (BZ#11904)
    - f_flags in statfs implementation
    - Add support for fanotify_init and fanotify_mask syscalls
    - Add support for prlimit and prlimit64
    - Fix IPTOS_CLASS definition (BZ#11903)
    - Avoid too much stack use in fnmatch (BZ#11883)
    - x86: Add support for frame pointer less mcount
  - Disable asynchronous-unwind-tables during configure run


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-10
changelog:
  - Update from master
    - Remove invalid iconv aliases (BZ#11979)
    - Update x86-64 mpn routines from GMP 5.0.1
    - Fix array overflow in floating point parser (BZ#7066)
    - Support fanotify_mark syscall on powerpc32
    - Unroll x86-64 strlen
    - Unroll 32bit SSE strlen and handle slow bsf
    - Missing server address again leads to localhost being used (BZ#10851)
  - Revert last change
  - Remove or don't install unpackaged files for auxarches


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-11
changelog:
  - Update from master
    - Fix _FORITY_SOURCE version of longjmp for Linux/x86-64 (BZ#11968)
  - Work around shortest-stem feature in make 3.82+


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-13
changelog:
  - Update from master
    - Add two forgotten licence exceptions
    - getdents64 fallback d_type support
    - Move freeres function from ld.so to libc.so
    - Undo feature selection for ftruncate (BZ#12037)
    - Fix namespace pollution in pthread_cleanup_push
    - Fix limit detection in x86-64 SSE2 strncasecmp (#632560)
    - Add support for fanotify_mark on sparc32 and s390
    - Fix register conflict in s390 ____longjmp_chk (#629970)
    - Don't try to free rpath strings allocated during startup (#629976)
    - Actually make it possible to user the default name server
  - Fix memory leak on init/fini dependency list (#632936)
  - Fix handling of collating symbols in regexps (BZ#11561)
  - Don't parse %s format argument as multibyte string (BZ#6530)
  - Fix overflow in nss files parser
  - Fix spurious nop at start of __strspn_ia32


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-15
changelog:
  - Update from master
    - Handle large requests in debugging hooks for malloc (BZ#12005)
    - Fix handling of remaining bytes in buffer for strncmp and
      strncasecmp (BZ#12077)
    - Handle cgroup and btrfs filesystems in statvfs
    - S/390: Fix highgprs check in startup code (BZ#12067)
    - Properly convert f_fsid in statvfs (BZ#11611)


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-16
changelog:
  - Update from master
    - Implement accurate fma (BZ#3268, #43358)
    - Fix alignment of AVX save area on x86-64 (BZ#12113)
    - Fix regex memory leaks (BZ#12078)
    - Improve output of psiginfo (BZ#12107, BZ#12108)
    - Don't return NULL address in getifaddrs (BZ#12093)
    - Fix strstr and memmem algorithm (BZ#12092, #641124)
  - Don't discard result of decoding ACE if AI_CANONIDN (#636642)
  - Remove /etc/gai.conf from glibc-common and mark it %ghost in glibc
  - Require exact glibc version in nscd


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-17
changelog:
  - Update from master
    - Fix some fma issues, implement fmal (BZ#3268, #43358)
    - Expect PLT call to _Unwind_Find_FDE on s390*-linux
  - Never expand $ORIGIN in privileged programs (#643306, CVE-2010-3847)


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-19
changelog:
  - Update from master
    - Fix memory leak in fnmatch
    - Support Intel processor model 6 and model 0x2c
    - Fix comparison in sqrtl for IBM long double
    - Fix one exit path in x86-64 SSE4.2 str{,n}casecmp (BZ#12205, #651638)
    - Fix warnings in __bswap_16 (BZ#12194)
    - Use IFUNC on x86-64 memset
    - Power7-optimized mempcpy
    - Handle uneven cache size in 32bit SSE2 memset (BZ#12191)
    - Verify in ttyname that the symlink is valid (BZ#12167)
    - Update Danish translations
    - Fix concurrency problem between dl_open and dl_iterate_phdr
    - Fix x86-64 strchr propagation of search byte into all bytes of SSE
      register (BZ#12159)
    - Fix perturbing in malloc on free (BZ#12140)
    - PPC/A2 optimized memcpy function
    - Add C99 FP_FAST_FMA{,F,L} macros to <math.h>
  - Check that the running kernel is new enough (#649589)


author: Andreas Schwab <schwab@redhat.com> - 2.12.90-20
changelog:
  - Update from master
    - Declare wcpcpy and wcpncpy only under _GNU_SOURCE
    - Fix use of restrict in wchar.h and string.h
    - Fix race in qsort_r initialization (BZ#11655)
    - Don't ignore zero TTL in DNS answers
    - Allow aux_cache_file open()ing to fail silently even in the chroot
      mode (BZ#11149)
    - Fix multiple nss_compat initgroups() bugs (BZ#10085)
    - Define MAP_HUGETLB and SWAP_FLAG_DISCARD
  - Remove .UTF-8 suffix from locale names when it is the only supported
    codeset (#657556)
  - Don't ignore $ORIGIN in libraries


author: Andreas Schwab <schwab@redhat.com> - 2.13-1
changelog:
  - Update to 2.13 release
    - Define AT_NO_AUTOMOUNT
    - Define MADV_HUGEPAGE and MADV_NOHUGEPAGE
    - Add definitions for new socket protocols
    - Signal temporary host lookup errors in nscd as such to the
      requester (BZ#6812)
    - Change setgroups to affect all the threads in the process
      (BZ#10563)
    - FIx handling of unterminated [ expression in fnmatch (BZ#12378)
    - Relax requirement on close in child created by posix_spawn
    - Fix handling of missing syscall in Linux mkdirat (BZ#12397)
    - Handle long lines in host lookups in the right place (BZ#10484)
    - Fix assertion when handling DSTs during auditing
    - Fix alignment in x86 destructor calls
    - Fix grouping when rounding increases number of integer digits
      (BZ#12394)
    - Update Japanese translations
    - Fix infloop on persistent failing calloc in regex (BZ#12348)
    - Use prlimit64 for 32-bit [gs]etrlimit64 implementation (BZ#12201)
    - Change XPG-compliant strerror_r function to return error code
      (BZ#12204)
    - Always allow overwriting printf modifiers etc.
    - Make PowerPC64 default to nonexecutable stack


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-1
changelog:
  - Update from master
    - Fix ordering of DSO constructors and destructors (BZ#11724)
  - Remove no longer needed assembler workaround


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-4
changelog:
  - Update from master
    - Update sysdeps/unix/sysv/linux/sparc/bits/socket.h
    - Synchronize generic bits/sched.h cpu_set_t with Linux implementation
    - Schedule nscd cache pruning more accurately from re-added values
    - Fix passing symbol value to pltexit callbacks when ld.so auditing
    - Fix range error handling in sgetspent
  - Revert "Fix ordering of DSO constructors and destructors" (#673014)
  - Create debuginfo-common on biarch archs
  - Reinstall assembler workaround.
  - Replace setuid by file capabilities (#646469)


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-5
changelog:
  - Update from master
    - Fix memory leak in dlopen with RTLD_NOLOAD (BZ#12509)
    - Don't crash when dependencies are missing (BZ#12454)
    - Fix allocation when handling positional parameters in printf
      (BZ#12445)
    - Fix two printf handler issues
  - Fix false assertion (BZ#12454, #673014)


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-6
changelog:
  - Update from master
    - Fix loading first object along a path when tracing
    - Enable SSE2 memset for AMD'supcoming Orochi processor
    - Don't read past end of buffer in fmemopen
  - Revert broken changes (#682307)


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-7
changelog:
  - Update from master
    - Handle page boundaries in x86 SSE4.2 strncmp (BZ#12597)
    - Implement x86 cpuid handling of leaf4 for cache information (BZ#12587)
    - Check size of pattern in wide character representation in fnmatch
      (BZ #12583)
    - Remove __restrict quals from wmemcmp prototype
    - Fix copy relocations handling of unique objects (BZ#12510)
  - ldd: never run file directly
  - Ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged
  - Don't leave empty element in rpath when skipping the first element
  - Revert "Don't crash when dependencies are missing" (#688990)


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-9
changelog:
  - Update from master
    - Fix typo in cache information table for x86-{32,64}
    - Define CLOCK_BOOTTIME, O_PATH, AT_EMPTY_PATH
    - Work around old buggy program which cannot cope with memcpy
      semantics (BZ#12518)
    - Fix visibility of declarations of wcpcpy and wcpncpy (BZ#12631)
    - Add clock_adjtime, name_to_handle_at, open_by_handle_at, syncfs
      syscalls
    - Really implement fallocate{,64} and sync_file_range as
      cancellation points
  - Enable systemtap support (#690281)


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-10
changelog:
  - Update from master
    - ldconfig: don't crash on empty path in config file (#699784)
    - getaddrinfo(AF_INET6) does not return scope_id info provided by
      NSS modules (BZ#12714)
    - Fix pathconf(_PC_BUF_SIZE) (BZ#12723)
    - Fix getnameinfo flags parameter type (BZ#12717)
    - Add finer grained control for initgroups lookups to NSS
    - Use all possible bytes from fopen mode string (BZ#12685, #698025)
    - Define initgroups callback for nss_files
    - elf.h: Define R_ARM_IRELATIVE reloc type
    - Fix static linking with checking x86/x86-64 memcpy (BZ#12653)
    - Fix POWER4/POWER7 optimized strncmp to not read past differing bytes
    - Fix FPU context handling in getcontext on x86-64 (BZ#12420)
    - Skip extra zeroes when searching auxv on s390
    - Obsolete RPC implementation in libc
    - Fix memory leak in TLS of loaded objects (BZ#12650)
    - Don't leave empty element in rpath when skipping an element
    - Make ppc sync_file_range cancelable
    - Maintain stack alignment in ____longjmp_chk on x86_64


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-12
changelog:
  - Update from master
    - Fix resizing table for unique symbols when adding symbol for copy
      relocation (BZ#12511)
    - Fix sched_setscheduler call in spawn implementation (BZ#12052)
    - Report write error in addmnt even for cached streams (BZ#12625)
    - Translate kernel error into what pthread_create should return
      (BZ#386)
    - More configurability for secondary group lookup (BZ#11257)
    - Several locale data updates (BZ#11258, BZ#11487, BZ#11532,
      BZ#11578, BZ#11653, BZ#11668, BZ#11945, BZ#11947, BZ#12158,
      BZ#12200, BZ#12178, BZ#12178, BZ#12346, BZ#12449, BZ#12545,
      BZ#12551, BZ#12611, BZ#12660, BZ#12681, BZ#12541, BZ#12711,
      BZ#12738)
    - Fix Linux getcwd for long paths (BZ#12713)
    - static tls memory leak on TLS_DTV_AT_TP archs
    - Actually undefine ARG_MAX from <linux/limits.h>
    - Backport BIND code to query name as TLD (BZ#12734)
    - Allow $ORIGIN to reference trusted directoreis in SUID binaries
      (BZ #12393)
    - Add missing {__BEGIN,__END}_DECLS to sys/sysmacros.h
    - Report if no record is found by initgroups in nss_files
  - Never leave $ORIGIN unexpanded
  - Revert "Ignore origin of privileged program"
  - Reexport RPC interface


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-13
changelog:
  - Update from master
    - Update GB18030 to 2005 version (BZ#11837)
    - Update RE_SYNTAX*_AWK constants in regex.h
    - Handle long variable names in putenv (BZ#11892)
    - Fix test for error_one_per_line mode in error (BZ#12766)
    - Cleanup x86-64 sys/user.h (BZ#11820)
    - Several locale data updates (BZ#11987, BZ#9732, BZ#9730, BZ#4357,
      BZ#12582)
    - Avoid potential deadlock in mtrace (BZ#6420)
    - Fix a few problems in fopen and freopen
    - Provide more helpful error message in getopt (BZ#7101)
    - Make stack canary value harder to read through read overflow (BZ#10149)
    - Use mmap for allocation of buffers used for __abort_msg (BZ#11901)
    - Fix handling of static TLS in dlopen'ed objects (BZ#12453)
    - Fix initialization of optimization values for AIO (BZ#12083)
    - Fix handling of conversion problem in CP932 module (BZ#12601)
    - Fix potential problem with out-of-scope buffer (BZ#12626)
    - Handle recursive calls in backtrace better (BZ#12432)
    - Fix handling of incomplete character storage in state
    - Fix file descriptor position after fclose (BZ#12724)
  - Reinstall NIS RPC headers


author: Andreas Schwab <schwab@redhat.com> - 2.13.90-14
changelog:
  - Update from master
    - Fix conversion to ISO-2022-JP-2 with ISO-8859-7 designation
      (BZ#12814)
    - Undo accidental change in x86-64 user.h
    - Update Japanese translation
    - Define RLIMIT_RTTIME (BZ#12795)
    - Update longlong.h from GCC
    - Add a few more alloca size checks (BZ#12671)
    - Fix flags parameter value passed to pltenter and pltexit
    - Define CLOCK_REALTIME_ALARM and CLOCK_BOOTTIME_ALARM
    - Always fill output buffer in XPG strerror function (BZ#12782)
    - Nicer output for negative error numbers in strerror_r
    - Fix CP1258 conversion (BZ#12777)
    - Fix handling of LC_CTYPE in locale name handling (BZ#12788)
    - Set stream errors in more cases (BZ#12792)
    - Don't unconditionally use alloca in gaih_inet (BZ#11869)
    - Update documentation in regex.h (BZ#11857)
    - Prevent Altivec and VSX insns on PowerPC64 when no FPRs or VRs are
      available
    - Fix typo in x86-64 powl (BZ#12775)
  - Avoid overriding CFLAGS (#703880)


author: Andreas Schwab <schwab@redhat.com> - 2.14-1
changelog:
  - Update to 2.14 release
    - Handle DNS server failures in case of AF_UNSPEC lookups correctly
      (BZ#12684)
    - Prevent loader from loading itself
    - Restore _res correctly (BZ#12350)
    - Interpret numeric values in shadow file as signed (BZ#11099)
    - Recognize use-vc option in resolv.conf (BZ#11558)
    - Mark malloc hook variables as deprecated
    - Declare malloc hook variables as volatile (BZ#11781)
    - Don't document si_code used for raise (BZ#11799)
    - Fix unnecessary overallocation due to incomplete character (BZ#12811)
    - Handle failure of _nl_explode_name in all cases
    - Add support for time syscall in vDSO (BZ#12813)
    - Add sendmmsg and setns syscalls
    - Use getcpu definition from vDSO on x86-64 (BZ#12813)
  - Don't free non-malloced memory and fix memory leak (#709267)


author: Andreas Schwab <schwab@redhat.com> - 2.14-3
changelog:
  - Update from 2.14 branch
    - Fix typo in recent resolver change which causes segvs (#710279)
    - Fix memory leak in getaddrinfo (#712178)
    - Fix <bits/mqueue2.h> for C++ (BZ#12841)
    - Assume Intel Core i3/i5/i7 processor if AVX is available
  - Filter results from gethostbyname4_r according to request flags
    (#711827)
  - Repair GB18030 charmap (#712901)
  - Revert "Use .machine to prevent AS from complaining about z9-109
    instructions in iconv modules" (#711330)


author: Andreas Schwab <schwab@redhat.com> - 2.14-4
changelog:
  - Update from 2.14 branch
    - Fix crash in GB18030 encoder (#712901)
  - Fix more bugs in GB18030 charmap
  - Don't use gethostbyaddr to determine canonical name


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-1
changelog:
  - Update from master
    - Fix quoting in some installed shell scripts (BZ#12935)
    - Fix missing .ctors/.dtors lead word in soinit
    - Improved st{r,p}{,n}cpy for SSE2 and SSSE3 on x86
    - Avoid __check_pf calls in getaddrinfo unless really needed
      (BZ#12907)
    - Rate limit expensive _SC_NPROCESSORS_ONLN computation
    - Add initgroups lookup support to getent
    - Reenable nss_db with a completely new implementation
    - Rewrite makedb to avoid using db library
    - Add pldd program
  - Obsolete nss_db
  - Don't build tzdata-update and build-locale-archive statically


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-2
changelog:
  - Update from master
    - Generalize framework to register monitoring of files in nscd
    - Handle ext4 in {,f}pathconf
    - Handle Lustre filesystem (BZ#12868)
    - Handle W; without long options in getopt (BZ#12922)
    - Change error code for underflows in strtod (BZ#9696)
    - Fix handling of chained netgroups
    - Optimize long-word additions in SHA implementation
    - Handle nscd negtimeout==0
    - nss_compat: query NIS domain only when needed
    - Fix robust mutex handling after fork
    - Make sure RES_USE_INET6 is always restored
  - Add systemd configuration for nscd
  - Be more careful running build-locale-archive


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-3
changelog:
  - Update from master
    - S/390: Don't use r11 in INTERNAL_VSYSCALL_NCS macro
    - Avoid warning in nscd config file parsing code
    - Improve 64 bit strcat functions with SSE2/SSSE3
    - Fix alloca accounting in strxfrm
    - Avoid possible crashes in anormal nscd exits
    - Updated Swedish and Dutch translations


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-4
changelog:
  - Update from master
    - Properly tokenize nameserver line for servers with IPv6 address
    - Fix encoding name for IDN in getaddrinfo (#725755)
    - Fix inline strncat/strncmp on x86
    - Define SEEK_DATA and SEEK_HOLE
    - Define AF_NFC and PF_NFC
    - Update ptrace constants
    - Add read barriers in cancellation initialization
    - Add read barrier protecting DES initialization
    - Fix overflow bug in optimized strncat for x86-64
    - Check for overflows in expressions (BZ#12852)
    - Fix check for AVX enablement (#720176, BZ#13007)
    - Force La_x86_64_ymm to be 16-byte aligned
    - Add const attr to gnu_dev_{major,minor,makedev}
  - Filter out GLIBC_PRIVATE symbols again


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-5
changelog:
  - Update from master
    - Implement LD_DEBUG=scopes
    - Locale-independent parsing in libintl (#726536)
    - Fix stack alignment on x86_64 (#728762)
    - Implement scandirat function


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-6
changelog:
  - Update from master
    - Correct cycle detection during dependency sorting
    - Use ifuncs for time and gettimeofday on x86-64
    - Fix fopen (non-existing-file, "re") errno
    - Fix CFI info in x86-64 trampolines for non-AVX code
    - Build libresolv with SSP flags
    - Avoid executable stack in makedb (#731063)
    - Align x86 TCB to 64 bytes (cache line size), important for Atom


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-7
changelog:
  - Update from master
    - Relocate objects in dependency order (#733462)
  - Avoid assertion failure when first DNS answer was empty (#730856)
  - Don't treat tls_offset == 1 as forced dynamic (#731228)


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-8
changelog:
  - Update from master
    - Use O_CLOEXEC when loading objects and cache in ld.so (BZ#13068)
    - Fix memory leak in case of failed dlopen (BZ#13123)
    - Optimizations for POWER
    - Prefer real syscalls instead of vsyscalls on x86-64 outside libc.so
    - Add Atom-optimized strchr and strrchr for x86-64
    - Try shell in posix_spawn* only in compat mode (BZ#13134)
    - Fix glob.h header by removing gcc 1.x support (BZ#13150)
    - Optimized strchr and strrchr with SSE2 on x86-32
    - Add optimized x86 wcscmp
    - Fixes and optimizations for 32-bit sparc fabs
    - Fix nptl semaphore cleanup invocation
    - Sanitize HWCAP_SPARC_* defines/usage, and add new entries


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-9
changelog:
  - Update from master
    - Define IP_MULTICAST_ALL (BZ#13192)
    - Add fmax and fmin inlines for x86-64
    - Avoid race between {,__de}allocate_stack and __reclaim_stacks
      during fork (#737387)
    - Optimized lrint and llrint for x86-64
    - Also relocate in dependency order when doing symbol dependency
      testing (#737459)
    - Optimize logb code for 64-bit machines
    - Fix jn precision (BZ#11589)
    - Fix boundary conditions in scanf (BZ#13138)
    - Don't lock string streams in stream cleanup code (BZ#12847)
    - Define ELFOSABI_GNU
    - Fix lround loss of precision
    - Add range checking for FD_SET, FD_CLR, and FD_ISSET
  - Make sure AVC thread has capabilities


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-10
changelog:
  - Update from master
    - Correctly reparse group line after enlarging the buffer (#739360)
    - Fix parse error in bits/mathinline.h with --std=c99 (#740235)
  - Update nscd service file (#740284)
  - Drop nscd init file (#740196)


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-11
changelog:
  - Update from master
    - Clean up locarchive mmap reservation code
    - Fix netname2host (BZ#13179)
    - Fix remainder (NaN, 0) (BZ#6779, BZ#6783)
    - S/390: Fix longlong.h inline asms for zarch
    - Improve 64 bit memchr, memrchr, rawmemchr with SSE2
    - Update translations
    - Implement caching of netgroups in nscd
    - Handle OOM in NSS
    - Don't call ifunc functions in trace mode
  - Convert tzdata-update to lua (#729796)
  - Horrible workaround for horribly broken software (#737223)


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-12
changelog:
  - Update from master
    - Correctly handle missing initgroups database (#745675)
    - Optimize many libm functions
    - Optimize access to isXYZ and toXYZ tables
    - Optimized memcmp and wmemcmp for x86-64 and x86-32
    - Add parameter annotation to modf (BZ#13268)
    - Support optimized isXXX functions in C++ code
    - Check for zero size in memrchr for x86_64 (#745739)
    - Optimized memchr, memrchr, rawmemchr for x86-32


author: Andreas Schwab <schwab@redhat.com> - 2.14.90-13
changelog:
  - Update from master
    - Fix linkage conflict with feraiseexcept (#746753)
    - More libm optimisations


author: Jim Meyering <meyering@redhat.com> - 2.14.90-14
changelog:
  - Revert the upstream patch that added the leaf attribute, since it
    caused gcc -O2 to move code past thread primitives and sometimes
    even out of critical sections.  See http://bugzilla.redhat.com/747377


author: Jeff Law <law@redhat.com> - 2.14.90-17
changelog:
  - Revert bogus commits/rebasing of Nov 14, Nov 11 and Nov 8.  Sources
    should be equivalent to Fedora 16's initial release.


author: Jeff Law <law@redhat.com> - 2.14.90-19
changelog:
  - Check malloc arena atomically  (BZ#13071)
  - Don't call reused_arena when _int_new_arena failed (#753601)


author: Jeff Law <law@redhat.com> - 2.14.90-21
changelog:
  - Don't fail in makedb if SELinux is disabled (#750858)
  - Fix access after end of search string in regex matcher (#757887)


author: Jeff Law <law@redhat.com> - 2.14.90-23
changelog:
  - Fix a wrong constant in powerpc hypot implementation (#750811)
      - Truncate time values in Linux futimes when falling back to utime


author: Jeff Law <law@redhat.com> - 2.14.90-24.fc16.3
changelog:
  - Check values from TZ file header (#767696)
  - Handle EAGAIN from FUTEX_WAIT_REQUEUE_PI (#552960)
  - Add {dist}.#
  - Correct return value from pthread_create when stack alloction fails.
    (#767746)


author: Jeff Law <law@redhat.com> - 2.14.90-26.fc17
changelog:
  - Update from master (16c6f99)
  - Fix typo in recent tzfile change (#769476)
  - Make MALLOC_ARENA_MAX and MALLOC_ARENA_TEST match documentation (#740506)
  - Revert "fix" to pthread_cond_wait (#769421)
  - Extract patch for 730856 from fedora-patch into a distinct patchfile


author: Jeff Law <law@redhat.com> - 2.15-3
changelog:
  - Fix cycle detection (#729661)
  - Fix first workday/weekday for it_IT (#446078)
  - Fix first workday/weekday for ca_ES (#454629)


author: Jeff Law <law@redhat.com> - 2.15-4
changelog:
  - Update ports from master.
  - Fix first workday/weekday for it_IT (#622499)
  - Fix type to uint16_t based on upstream comments (729661)
  - Do not cache negative results in nscd if these are transient (#784402)


author: Jeff Law <law@redhat.com> - 2.15-8
changelog:
  - Prevent erroneous inline optimization of initfini.s on PowerPC64 (#783979)
  - Use upstream variant of fix for 740506.
  - Fix month abbreviations for zh_CN (#657588)


author: Jeff Law <law@redhat.com> - 2.15-12
changelog:
  - Add fedfs to /etc/rpc (#691912)
  - Run nscd in the foreground w/ syslogging, fix systemd config (#770869)
  - Avoid mapping past end of shared object (#741105)
  - Turn off -mno-minimal-toc on PPC (#787201)
  - Remove hunk from glibc-rh657588.patch that didn't belong


author: Jeff Law <law@redhat.com> - 2.15-17
changelog:
  - Fix lost wakeups in pthread_cond_*.  (#552960, #769421)
  - Clarify info page for snprintf (#564528)
  - Fix first_weekday and first_workday for ru_UA (#624296)


author: Jeff Law <law@redhat.com> - 2.15-18
changelog:
  - Revert 552960/769421 changes again, still causing problems.
  - Add doi_IN (#791161)
  - Add sat_IN (#790292)
  - Add mni_IN (#790298)


author: Jeff Law <law@redhat.com> - 2.15-21
changelog:
  - Correctly identify all 127.x.y.z addresses (#739743)
  - Don't assign native result if result has no associated interface (#739743)


author: Jeff Law <law@redhat.com> - 2.15-24
changelog:
  - Fix bogus underflow (#760935)
  - Correctly handle dns request where large numbers of A and AAA records
    are returned (#795498)
  - Fix nscd crash when group has many members (#788989)


author: Jeff Law <law@redhat.com> - 2.15-26
changelog:
  - Set errno properly in vfprintf (#794797)
  - Don't kill application when LD_PROFILE is set. (#800224)


author: Jeff Law <law@redhat.com> - 2.15-28
changelog:
  - Add doi_IN, sat_IN and mni_IN to SUPPORTED locals (#803286)
  - Add stap probes in slowpow and slowexp.


author: Patsy Franklin <pfrankli@redhat.com> - 2.15-41
changelog:
  - Fix tzdata trigger (#822200)
  - Make the symlink relative rather than linking into the buildroot (#822200).
  - Changed /etc/localtime to a symlink. 8222000 (#822200)


author: Jeff Law <law@redhat.com> - 2.15.90-2
changelog:
  - Fix option rotate when one IPV6 server is enabled (#804630)
  - Reenable slow/uberslow path taps slowpow/slowexp.


author: Jeff Law <law@redhat.com> - 2.15.90-3
changelog:
  - Work around RPM dropping the contents of /etc/localtime
    when it turns into a symlink with %post common script (#825159).


author: Patsy Franklin <patsy@redhat.com> - 2.15.90-8
changelog:
  - Fix iconv() segfault when the invalid multibyte character 0xffff is input
    when converting from IBM930 (#823905)


author: Jeff Law <law@redhat.com> - 2.15.90-9
changelog:
  - Resync with upstream sources, drop unnecessary patches.
  - Fix DoS in RPC implementation (#767693)
  - Remove deprecated alpha support.
  - Remove redundant hunk from patch. (#823905)


author: Dennis Gilmore <dennis@ausil.us> - 2.15.90-11
changelog:
  - only deal with the arm linker compat hack on armhfp arches
  - armsfp arches do not have a linker change
  - Backward compat hack for armhf binaries.


author: Jeff Law <law@redhat.com> - 2.15.90-13
changelog:
  - Delay setting DECIDED field in locale file structure until
    we have read the file's data (#827510).


author: Jeff Law <law@redhat.com> - 2.16-6
changelog:
  - Revert patch for BZ696143, it made it impossible to use IPV6
    addresses explicitly in getaddrinfo, which in turn broke
    ssh, apache and other code. (#808147)
  - Avoid another unbound alloca in vfprintf (#841318)
  - Remove /etc/localtime.tzupdate in lua scriptlets
  - Revert back to using posix.symlink as posix.link with a 3rd
    argument isn't supported in the lua version embedded in rpm.
  - Revert recent changes to res_send (804630, 835090).
  - Fix memcpy args in res_send (#841787).


author: Jeff Law <law@redhat.com> - 2.16-7
changelog:
  - Pack IPv4 servers at the start of nsaddr_list and
    only track the number of IPV4 servers in EXT(statp->nscounti (#808147)
  - Mark set*uid, set*gid as __wur (warn unused result) (#845960)


author: Jeff Law <law@redhat.com> - 2.16.90-1
changelog:
  - Resync with upstream sources, drop obsolete patches.
  - Drop glibc-ports bits as they're part of the master
    sources now.


author: Jeff Law <law@redhat.com> - 2.16.90-3
changelog:
  - Remove obsolete patches from glibc-fedora.patch.  Explode
    remaining patches into distinct patchfiles.  Thanks to
    Dmitry V. Levin for identifying them!
    Drop ia64 specific patches and specfile fragments


author: Jeff Law <law@redhat.com> - 2.16.90-4
changelog:
  - Move /etc/localtime into glibc-common package since glibc-common
    owns the scriptlets which update it.


author: Jeff Law <law@redhat.com> - 2.16.90-12
changelog:
  - Revert recent upstream strstr changes (#858274)
  - Demangle function pointers before testing them (#816647)
  - Remove handling of /etc/localtime and /var/spool/postfix/etc/localtime
    as systemd will be handling them from now on (#858735).


author: Jeff Law <law@redhat.com> - 2.16.90-15
changelog:
  - Remove most of fedora-nscd patch as we no longer use the
    old init files, but systemd instead.
  - Remove path-to-vi patch.  With the usr-move changes that
    patch is totally unnecessary.
  - Remove i686-nopl patch.  Gas was changed back in 2011 to
    avoid nopl.
  - Move gai-rfc1918 patch to submitted upstream status


author: Jeff Law <law@redhat.com> - 2.16.90-18
changelog:
  - Resync with upstream sources.
  - Drop fedora-cdefs-gnuc.patch, it's not needed anymore.
  - Drop fedora-gai-rfc1918.patch, it's upstream now.
  - Drop fedora-localedata-no_NO.patch, it was supposed to be
    temporary -- that was back in 2003.   This should have been
    sorted out long ago.  We'll just have to deal with the
    fallout.
  - Drop fedora-vfprintf-sw6530.patch, it's upstream now.
  - Drop rh769421.patch; Siddhesh has fixed this properly with 552960.


author: Jeff Law <law@redhat.com> - 2.16.90-22
changelog:
  - Resync with upstream sources
  - Drop local 552960 patch now that it's upstream
  - Drop local stap patch now obsolete
  - Drop local s390 patch which avoided problems with old assemblers
  - Drop old fortify source patch to deal with old compilers


author: Jeff Law <law@redhat.com> - 2.16.90-24
changelog:
  - Rsync with upstream sources
  - Drop local 552960-2 patch now that it's upstream.
  - Drop local 858274 patch now that the root problem is fixed upstream.
  - Repack patchlist.


author: Jeff Law <law@redhat.com> - 2.16.90-25
changelog:
  - Rsync with upstream sources
  - Drop 864820 patch as now that it's upstream.
  - Add sss to /etc/nsswitch.conf (#867473)


author: Jeff Law <law@redhat.com> - 2.16.90-27
changelog:
  - Resync with upstream sources.
  - Don't use distinct patches for 770869, 787201 and 688948
    as they all modify stuff under fedora/
  - Repack patchlist


author: Jeff Law <law@redhat.com> - 2.16.90-32
changelog:
  - Resync with master.
  - Drop local patch for 878913.
  - Drop local patch for 880666.
  - Drop local patch for 767693.
  - Repack patchlist.


author: Jeff Law <law@redhat.com> - 2.16.90-34
changelog:
  - Remove local patch which "temporarily" re-added currences
    obsoleted by the Euro.
  - Remove hunks from strict-aliasing patch that are no longer
    needed.


author: Jeff Law <law@redhat.com> - 2.16.90-35
changelog:
  - Resync with master (#882137).
  - Remove local patch for strict-aliasing warnings that
    is no longer needed.
  - Remove local patch for 730856 that is no longer needed.
  - Repack patchlist.


author: Jeff Law <law@redhat.com> - 2.16.90-36
changelog:
  - Resync with master
  - Drop local patch for 657588 that is no longer needed.
  - Drop local patch for 740682 that is no longer needed.
  - Drop local patch for 770439 that is no longer needed.
  - Drop local patch for 789209 that is no longer needed.
  - Drop local patch for nss-files-overflow that seems useless.
  - Drop localedata-locales-fixes as they were rejected upstream.
  - Drop test-debug-gnuc-hack.patch that seems useless now.
  - Repack patchlist.


author: Jeff Law <law@redhat.com> - 2.16.90-37
changelog:
  - Resync with master
  - Patch for 697421 has been submitted upstream.
  - Drop local patch for 691912 that is no longer needed.


author: Carlos O'Donell <carlos@redhat.com> - 2.17-2
changelog:
  - Fix ownership of /usr/lib[64]/audit (#894307).
  - Support unmarked ARM objects in ld.so.cache and aux cache (#905184).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-3
changelog:
  - Renamed release engineering directory to `releng' (#903754).
  - Fix building with gcc 4.8.0 (#911307).


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-5
changelog:
  - Increase limits on xdr name and record requests (#892777).
  - Consistently MANGLE/DEMANGLE init_fct, end_fct and btow_fct (#952799).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-10
changelog:
  - Preserve errno across _PC_CHOWN_RESTRICTED call on XFS (#977870).
  - Remove PIPE_BUF Linux-specific code (#977872).
  - Fix FPE in memusagestat when malloc utilization is zero (#977874).
  - Accept leading and trailing spaces in getdate input string (#977875).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-12
changelog:
  - Fix stack overflow in getaddrinfo with many results (#980323, CVE-2013-1914).
  - Correct fix to return failure on libio function error (#979363).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-13
changelog:
  - Add build requirement on static libstdc++ library to fix testsuite failures
    for static C++ tests.


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-14
changelog:
  - Disable the use of pt_chown(Bugzilla #15755).  Distributions can re-enable
    building and using pt_chown with`--enable-pt_chown'.  (#984828i, CVE-2013-2207).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-15
changelog:
  - Correctly name the 240-bit slow path sytemtap probe slowpow_p10 for slowpow (#742035).
  - Fix handling of netgroup cache in nscd (#966633).
  - Fix loading of audit libraries when TLS is in use (#970791)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-16
changelog:
  - Add __glibc_likely as alias for __builtin_expect.
  - Fix strcoll() various flaws (#989861, #989862, CVE-2012-4412, CVE-2012-4424).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-20
changelog:
  - Use tmpfilesdir macro instead of hard coding /usr/lib/tmpfiles.d.
  - Backport GLIBC sched_getcpu and gettimeofday vDSO functions for ppc
    (#977110).
  - Backport additional patches from upstream for
    -ftree-loop-distribute-patterns (#911307).
  - Add HW_CAP2 support and add POWER8 enablement code (#731833).
  - Remove useless .eh_frame to prevent gold linker bug (#731833).
  - Add vDSO support or time function (#731833).
  - Add PowerPC platform-specific inlines for shared resource hints (#731833).
  - Reserve TCB space for EBB framework (#731833).
  - Use _dl_static_init to set GLRO(gl_pagesize) (#731833).
  - Rename __kernel_vdso_get_tbfreq to __kernel_get_tbfreq (#731833).
  - Consolidate copies of PowerPC mp code (#731833).
  - Unify math_ldbl.h implementations (#731833).
  - Fix ABI issue for sqrtl and llroundl (#731833).
  - Remove branch prediction from rint implementation (#731833).
  - Optimize modf for PowerPC (#731833).
  - Fix hypot/hypotf check for -INF on PowerPC (#731833).
  - Use __ieee754_sqrl in acoshl for lbdl-128ibm (#731833).
  - Add benchmark framework (#992727).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-32
changelog:
  - The default runtime is now POWER7 with an additional POWER8-tuned
    runtime. No other runtimes are provided by default. (#731833)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-34
changelog:
  - Temporarily generate POWER6 code for the 32-bit POWER7 and POWER8
    runtimes to work around bug 1019549 (#1018072).


author: Carlos O'Donell <carlos@readhat.com> - 2.17-35
changelog:
  - Add support for installing the dynmic loader in an alternate location.
    This is required for AArch64 support (#1023790).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-37
changelog:
  - Fix stack overflow due to large AF_INET6 requests (CVE-2013-4458, #1025612).
  - Fix reads for sizes larger than INT_MAX in AF_INET lookup (#1032435).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-45
changelog:
  - Revert to flushing buffer for ftell if output buffer does not have sufficient
    space for conversion (#1048036).
  - Use first name entry for address in /etc/hosts as the canonical name in
    getaddrinfo (#1047983).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-53
changelog:
  - Fix offset caching for streams and use it for ftell (#1074410).
  - Change offset in fdopen only if setting O_APPEND (#1074410).
  - Fix up return codes for tests in tst-ftell-active-handler (#1074410).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-55.4
changelog:
  - Fix tst-cancel4, tst-cancelx4, tst-cancel5, and tst-cancelx5 for all targets.
  - Fix tst-ildoubl, and tst-ldouble for POWER.
  - Allow LE 64-bit POWER to build with VSX if enabled (#1124048).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-57
changelog:
  - Merge 64-bit ARM (AArch64) support (#1027179).
  - Fix build failure for rtkaio/tst-aiod2.c and rtkaio/tst-aiod3.c.


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-58
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-59
changelog:
  - Provide correct buffer length to netgroup queries in nscd (#1083647).
  - Return NULL for wildcard values in getnetgrent from nscd (#1085290).
  - Avoid overlapping addresses to stpcpy calls in nscd (#1083644).
  - Initialize all of datahead structure in nscd (#1083646).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-60
changelog:
  - Add mmap usage to malloc_info output (#1103856).
  - Fix nscd lookup for innetgr when netgroup has wildcards (#1080766).
  - Fix memory order when reading libgcc handle (#1103874).
  - Fix typo in nscd/selinux.c (#1125306).
  - Do not fail if one of the two responses to AF_UNSPEC fails (#1098047).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-61
changelog:
  - Set CS_PATH to just /use/bin (#1124453).
  - Add systemtap probe in lll_futex_wake for ppc and s390 (#1084089).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-62
changelog:
  - Don't use alloca in addgetnetgrentX (#1138520).
  - Adjust pointers to triplets in netgroup query data (#1138520).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-63
changelog:
  - Build build-locale-archive statically (#1070611).
  - Return failure in getnetgrent only when all netgroups have been searched
    (#1085313).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-65
changelog:
  - PowerPC 32-bit and 64-bit optimized function support using STT_GNU_IFUNC
    (#731837).
  - Support running Intel MPX-enabled applications (#1132518).
  - Support running Intel AVX-512-enabled applications (#1140272).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-75
changelog:
  - Fix permission of debuginfo source files to allow multiarch
    debuginfo packages to be installed and upgraded (#1170110).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-76
changelog:
  - Fix application crashes during calls to gettimeofday on ppc64
    when kernel exports gettimeofday via VDSO (#1077389).
  - Prevent NSS-based file backend from entering infinite loop
    when different APIs request the same service (CVE-2014-8121, #1182272).


author: Martin Sebor <msebor@redhat.com> - 2.17-79
changelog:
  - Restructure spec file to unconditionally apply ppc64le support (#1182355).
  - Fix test failure in test-ildoubl on ppc64 (#1186491).


author: Martin Sebor <msebor@redhat.com> - 2.17-82
changelog:
  - Backport an alternate implementation of strstr and strcasestr for
    x86 that doesn't use the stack for temporaries requiring 16-byte
    alignment (#1150282).


author: Marek Polacek <polacek@redhat.com> - 2.17-85
changelog:
  - Skip logging for DNSSEC responses (#1186620).
  - Also apply the RHEL6.7 Makerules patch (#1189278).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-89
changelog:
  - Avoid deadlock in malloc on backtrace (#1207032).
  - Actually test iconv modules (#1176906).
  - Use calloc to allocate xports (#1159169).
  - Return EAI_AGAIN for AF_UNSPEC when herrno is TRY_AGAIN (#1098042).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.17-90
changelog:
  - Work around kernel netlink bug on some specialized hardware setup (#1089836).
  - Fix invalid file descriptor reuse when sending DNS query
    (CVE-2013-7423, #1194143).
  - Sync netinet/tcp.h with the kernel (#1219891).


author: Martin Sebor <msebor@redhat.com> - 2.17-92
changelog:
  - Backport fixes for various security flaws (#1209107):
    - Prevent heap buffer overflow in swscanf (CVE-2015-1472, CVE-2015-1473,
        - Prevent integer overflow in _IO_wstr_overflow (#1195762).
    - Prevent potential denial of service in internal_fnmatch (#1197730).
    - Prevent buffer overflow in gethostbyname_r and related functions
      with misaligned buffer (CVE-2015-1781, #1199525).


author: Martin Sebor <msebor@redhat.com> - 2.17-93
changelog:
  - Backport fixes and enhancements for ppc64 and ppc64le (#1162895).
    - Correct DT_PPC64_NUM in elf/elf.h.
    - Correct IBM long double frexpl.
    - Correct IBM long double nextafterl.


author: Carlos O'Donell <carlos@redhat.com> - 2.17-96
changelog:
  - Rebase microbenchmarks from upstream for performance testing (#1214326)
  - Fix running microbenchmark script bench.pl from source (#1084395)


author: Martin Sebor <msebor@redhat.com> - 2.17-100
changelog:
  - Prevent tst-rec-dlopen from intermittently failing in parallel
    builds due to a missing makefile dependency (#1225959).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-102
changelog:
  - Remove workaround for kernel netlink bug (#1089836).
  - Use only 32-bit instructions in optimized 32-bit POWER functions (#1240796).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-108
changelog:
  - Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296031).
  - Fix madvise performance issues (#1284959).
  - Avoid "monstartup: out of memory" error on powerpc64le (#1249102).
  - Update malloc testing for 32-bit POWER (#1293976).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-111
changelog:
  - Fix NULL pointer dereference in stub resolver with unconnectable name
    server addresses (#1320596).


author: Martin Sebor <msebor@redhat.com> - 2.17-115
changelog:
  - Configure --with-cpu=power8 on powerpc64 to generate POWER8
    instructions for POWER8 runtime (#1183088, #1213267).


author: DJ Delorie <dj@redhat.com> - 2.17-121
changelog:
  - Build require gcc-c++ for the C++ tests.
  - Add --with/--without controls for building glibc (#1255847)
    - Support --without testsuite option to disable testing after build.
    - Support --without benchtests option to disable microbenchmarks
      (placeholder for upstream compatibility only)
    - Update --with bootstrap to disable valgrind, documentation,
      selinux, and nss-crypt during bootstrap.
    - Support --without werror to disable building with -Werror.
    - Support --without docs to disable build requirement on texinfo.
    - Support --with valgrind to enable testing with valgrind.


author: Carlos O'Donell <carlos@redhat.com> - 2.17-122
changelog:
  - Reorganize POWER7 and POWER8 support (#1213267).
    - Only build POWER7 runtime for ppc64p7.
    - Only build POWER8 runtime for ppc64le.
    - Configure with --with-cpu=power8 for ppc64le.
    - Configure with --with-cpu=power8 for ppc.
    - Configure with --with-cpu=power7 for ppc64 default runtime.


author: Martin Sebor <msebor@redhat.com> - 2.17-130
changelog:
  - Prevent the compiler from clobbering floating point and vector
    registers in S390 symbol resolution functions (#1324427).
  - Improve posix_fallocate behavior with NFS file descriptors (#1140250).


author: Florian Weimer <fweimer@redhat.com> - 2.17-131
changelog:
  - Remove PER_THREAD preprocessor macro from malloc
  - Use final upstream patch for arena free list fix (#1276753)


author: Carlos O'Donell <carlso@redhat.com> - 2.17-146
changelog:
  - s390: Restore signal mask on setcontext/swapcontext (#1249114).
  - s390: Fix backtrace in the presence of makecontext (#1249115).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-158
changelog:
  - Do not set initgroups in default nsswitch.conf (#1366569)
  - nss_db: Request larger buffers for long group entries (#1318890)
  - nss_db: Fix get*ent crash without preceding set*ent (#1213603)
  - nss_db: Fix endless loop in services database processing (#1370630)


author: Patsy Franklin <pfrankl@redhat.com> - 2.17-161
changelog:
  - Fix tst-cancel17/tst-cancelx17 was sometimes segfaulting.
    Wait for the read to finish before returning. (#1337242)


author: Florian Weimer <fweimer@redhat.com> - 2.17-162
changelog:
  - Backport support/ subdirectory from upstream (#1418978)
  - Fix deadlock between fork, malloc, flush (NULL) (#906468)


author: Florian Weimer <fweimer@redhat.com> - 2.17-165
changelog:
  - Fix use of uninitialized data in getaddrinfo with nscd (#1324568)
  - Remove the "power8" AT_PLATFORM directory (#1404435)
  - Fix profil on aarch64 (#1144516)


author: Martin Sebor <msebor@redhat.com> - 2.17-183
changelog:
  - Fix CVE-2015-8776 glibc: Segmentation fault caused by passing
    out-of-range data to strftime() (#1374658)


author: Patsy Franklin <pfrankl@redhat.com> - 2.17-186
changelog:
  - Update patch for glibc-rh1288613.patch to include tst-res_hconf_reorder
    in the list of tests to be built and run. (#1367804)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-188
changelog:
  - Improve exp() and pow() performance in libm (#1409611)
  - Add optimized strcmp and strncmp for IBM POWER9 hardware (#1320947)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-190
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    Intel hardware with support for Intel TSX (#841653).
  - Update dynamic loader trampoline for Intel Skylake server (#1421155).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-191
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    IBM POWER hardware with support for IBM POWER HTM (#731835).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-192
changelog:
  - Exclude lock elision support for older Intel hardware with
    Intel TSX that has hardware errata (#841653).


author: DJ Delorie <dj@redhat.com> - 2.17-197
changelog:
  - Fix compile warnings in malloc (#1347277)
  - Fix occasional tst-malloc-usable failures (#1348000)
  - Additional chunk hardening in malloc (#1447556)
  - Pointer alignment fix in nss group merge (#1463692)
  - Fix SIGSEGV when LD_LIBRARY_PATH only has non-existing paths (#1443236)


author: Florian Weimer <fweimer@redhat.com> - 2.17-202
changelog:
  - Rebase the DNS stub resolver and getaddrinfo to the glibc 2.26 version
  - Support an arbitrary number of search domains in the stub resolver (#677316)
  - Detect and apply /etc/resolv.conf changes in libresolv (#1432085)
  - CVE-2017-1213: Fragmentation attacks possible when ENDS0 is enabled
    (#1487063)
  - CVE-2016-3706: Stack (frame) overflow in getaddrinfo when called
    with AF_INET, AF_INET6 (#1329674)
  - CVE-2015-5180: resolv: Fix crash with internal QTYPE (#1497131)
  - CVE-2014-9402: denial of service in getnetbyname function (#1497132)
  - Fix getaddrinfo to handle certain long lines in /etc/hosts (#1452034)
  - Make RES_ROTATE start with a random name server (#1257639)
  - Stricter IPv6 address parser (#1484034)
  - Remove noip6dotint support from the stub resolver (#1482988)
  - Remove partial bitstring label support from the stub resolver
  - Remove unsupported resolver hook functions from the API
  - Remove outdated RR type classification macros from the API
  - hesiod: Always use TLS resolver state
  - hesiod: Avoid non-trust-boundary crossing heap overflow in get_txt_records


author: Arjun Shankar <arjun@redhat.com> - 2.17-203
changelog:
  - Fix socket system call selection on s390x (#1498566).
  - Use different construct for protected visibility in IFUNC tests (#1445644)


author: Florian Weimer <fweimer@redhat.com> - 2.17-215
changelog:
  - CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504809)
  - CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504809)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-221
changelog:
  - CVE-2018-1000001: Fix realpath() buffer underflow (#1534635)
  - i386: Fix unwinding for 32-bit C++ application (#1529982)
  - Reduce thread and dynamic loader stack usage (#1527904)
  - x86-64: Use XSAVE/XSAVEC more often during lazy symbol binding (#1528418)


author: Florian Weimer <fweimer@redhat.com> - 2.17-234
changelog:
  - Adjust spec file for compiler warnings cleanup (#1505492)
  - Drop ports add-on
  - Do not attempt to disable warnings-as-errors on s390x


author: DJ Delorie <dj@redhat.com> - 2.17-237
changelog:
  - Add O_TMPFILE macro (#1471405)
  - Update syscall names list to kernel 4.16 (#1563747)
  - Include <linux/falloc.h> in bits/fcntl-linux.h. (#1476120)
  - Fix netgroup cache keys. (#1505647)
  - Update ptrace constants. (#1457479)


author: Carlos O'Donell <carlos@redhat.com> 2.17-256
changelog:
  - CVE-2017-16997: Correctly handle DT_RPATH (#1540480).
  - Correctly process "$ORIGIN" element in DT_RPATH or DT_NEEDED (#1447808).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-258
changelog:
  - Fix dynamic string token substitution in DT_RPATH etc. (#1447808, #1540480)
  - Additional robust mutex fixes (#1401665)


author: Patsy Franklin <pfrankli@redhat.com> - 2.17-260
changelog:
  - Update glibc-rh1560641.patch to initialize pad outside
    the conditional eliminating an uninitialized byte warning from
    valgrind. (#1560641)


author: Patsy Griffin <pfrankli@redhat.com> - 2.17-297
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672771)


author: Patsy Griffin <pfrankli@redhat.com> - 2.17-299
changelog:
  - Update glibc headers for Linux 4.0, 4.1 definitions and 
    Linux 4.2 netinet/in.h values. (#1579451)


author: Arjun Shankar <arjun@redhat.com> - 2.17-308
changelog:
  - CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
    LD_PREFER_MAP_32BIT_EXEC (#1775599)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-321
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1812119)


author: Florian Weimer <fweimer@redhat.com> - 2.17-325
changelog:
  - Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
    conversion in strcasecmp, strncasecmp (#1993930)


author: Florian Weimer <fweimer@redhat.com> - 2.17-326.2
changelog:
  - nscd: Do not use sendfile for the netgroup cache
  - nscd: Use-after-free in netgroup cache
  - CVE-2021-27645: nscd: double-free in netgroup cache
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  - CVE-2024-33601: nscd: crash on out-of-memory condition
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules


author: Milind Changire <mchangir@redhat.com> - 6.0-1
changelog:
  - rebase to upstream glusterfs at v6.0
  - fixes bugs bz#1493284 bz#1578703 bz#1600918 bz#1670415 bz#1691620 
    bz#1693935 bz#1695057


author: Milind Changire <mchangir@redhat.com> - 6.0-2
changelog:
  - fixes bugs bz#1471742 bz#1652461 bz#1671862 bz#1676495 bz#1691620 
    bz#1696334 bz#1696903 bz#1697820 bz#1698436 bz#1698728 bz#1699709 bz#1699835 
    bz#1702240


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-3
changelog:
  - fixes bugs bz#1583585 bz#1671862 bz#1702686 bz#1703434 bz#1703753 
    bz#1703897 bz#1704562 bz#1704769 bz#1704851 bz#1706683 bz#1706776 bz#1706893


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-4
changelog:
  - fixes bugs bz#1480907 bz#1702298 bz#1703455 bz#1704181 bz#1707246
    bz#1708067 bz#1708116 bz#1708121 bz#1709087 bz#1711249 bz#1711296 
    bz#1714078 bz#1714124 bz#1716385 bz#1716626 bz#1716821 bz#1716865 bz#1717927


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-5
changelog:
  - fixes bugs bz#1573077 bz#1694595 bz#1703434 bz#1714536 bz#1714588 
    bz#1715407 bz#1715438 bz#1705018


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-6
changelog:
  - fixes bugs bz#1668001 bz#1708043 bz#1708183 bz#1710701 
    bz#1719640 bz#1720079 bz#1720248 bz#1720318 bz#1720461


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-7
changelog:
  - fixes bugs bz#1573077 bz#1600918 bz#1703423 bz#1704207 bz#1708064
    bz#1709301 bz#1713664 bz#1716760 bz#1717784 bz#1720163 bz#1720192
    bz#1720551 bz#1721351 bz#1721357 bz#1721477 bz#1722131 bz#1722331
    bz#1722509 bz#1722801 bz#1720248


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-8
changelog:
  - fixes bugs bz#1698435 bz#1712591 bz#1715447 bz#1720488 bz#1722209
    bz#1722512 bz#1724089 bz#1726991 bz#1727785 bz#1729108


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-12
changelog:
  - fixes bugs bz#1730914 bz#1731448 bz#1732770 bz#1732792 bz#1733531 
    bz#1734305 bz#1734534 bz#1734734 bz#1735514 bz#1737705 bz#1732774
    bz#1732793


author: Sunil Kumar Acharya <sheggodu@redhat.com> - 6.0-14
changelog:
  - fixes bugs bz#1719171 bz#1728673 bz#1731896 bz#1732443 bz#1733970 
    bz#1745107 bz#1746027 bz#1748688 bz#1750241 bz#1572163


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-23
changelog:
  - fixes bugs bz#1344758 bz#1599802 bz#1685406 bz#1686800 bz#1724021 
    bz#1726058 bz#1727755 bz#1731513 bz#1741193 bz#1758923 bz#1761326 bz#1761486 
    bz#1762180 bz#1764095 bz#1766640


author: Rinku Kothiya <rkothiya@redhat.com> - 6.0-38
changelog:
  - fixes bugs bz#1234220 bz#1286171 bz#1487177 bz#1524457 bz#1640573 
    bz#1663557 bz#1667954 bz#1683602 bz#1686897 bz#1721355 bz#1748865 bz#1750211 
    bz#1754391 bz#1759875 bz#1761531 bz#1761932 bz#1763124 bz#1763129 bz#1764091 
    bz#1775637 bz#1776901 bz#1781550 bz#1781649 bz#1781710 bz#1783232 bz#1784211 
    bz#1784415 bz#1786516 bz#1786681 bz#1787294 bz#1787310 bz#1787331 bz#1787994 
    bz#1790336 bz#1792873 bz#1794663 bz#1796814 bz#1804164 bz#1810924 bz#1815434 
    bz#1836099 bz#1837467 bz#1837926 bz#1838479 bz#1839137 bz#1844359


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57
changelog:
  - fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
    bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
    bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
    bz#1945143 bz#1946171 bz#1957191 bz#1957641


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60
changelog:
  - fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
    bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205


author: Florian Müllner <fmuellner@redhat.com> - 3.28.1-13
changelog:
  - Adjust dash-to-dock for classic backports
    Resolves: #1805920
  - Fix inconsistent state in window-list prefs dialog
    Resolves: #1613835
  - Add accessible name to status icons
    Resolves: #1600999


author: Benjamin Berg <bberg@redhat.com> - 3.28.1-9
changelog:
  - Keep auto-logout working inside VMs
    Resolves: #1672998
  - Never log out automatically from greeter sessions
    Resolves: #1729296


author: Carlos Garnacho <cgarnach@redhat.com> - 3.28.1-11
changelog:
  - Fix possible crash on gsd-media-keys startup
    Resolves: #1878167
  - Ignore permission issues during gsd-housekeeping file deletion
    Resolves: #1909954
  - Revert mapping of "XF86RFKill" key
    Resolves: #1888412


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Peter Jones <pjones@redhat.com> - 2.00-22.3
changelog:
  - Use linux16 when appropriate:
    Resolves: rhbz#880840
  - Enable pager by default:
    Resolves: rhbz#985860
  - Don't ask the user to hit keys that won't work.
    Resolves: rhbz#987443
  - Sign grub2 during builds
    Resolves: rhbz#1017855


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.3
changelog:
  - Don't emit "Booting <foo>" message.
    Resolves: rhbz#1023142
  - Don't require a password for booting, only for editing entries.
    Resolves: rhbz#1030176
  - Several network fixes from IBM
    Resolves: rhbz#1056324
  - Support NVMe device names
    Resolves: rhbz#1019660
  - Make control keys work on UEFI systems.
    Resolves: rhbz#1056035


author: Peter Jones <pjones@redhat.com> - 2.02-0.2.5
changelog:
  - Add man pages for common grub utilities.
    Resolves: rhbz#948847
  - Fix shift key behavior on UEFI.
    Resolves: rhbz#1068215


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Make editenv utilities (grub2-editenv, grub2-set-default, etc.) from
    non-UEFI builds work with UEFI builds as well, since they're shared
    from grub2-tools.
    Resolves: rhbz#1119943
  - Make more grub2-mkconfig generate menu entries with the OS name and version
    included.
    Resolves: rhbz#996794
  - Minimize the sort ordering for .debug and -rescue- kernels.
    Resolves: rhbz#1065360
  - Add GRUB_DISABLE_UUID to disable filesystem searching by UUID.
    Resolves: rhbz#1027833
  - Allow "fallback" to specify titles like the documentation says
    Resolves: rhbz#1026084


author: Peter Jones <pjones@redhat.com> - 2.02-0.11
changelog:
  - Fix grub2 segfault when root isn't set.
    Resolves: rhbz#1084536
  - Make the aarch64 loader be SB-aware.
    Related: rhbz#1100048
  - Enable regexp module
    Resolves: rhbz#1125916


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Document network boot paths better
    Resolves: rhbz#1148650
  - Use an rpm-based version sorted in grub2-mkconfig
    Resolves: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Handle ipv6 better
    Resolves: rhbz#1154226
  - On UEFI, use SIMPLE_NETWORK_PROTOCOL when we can.
    Resolves: rhbz#1233378
  - Handle rssd disk drives in grub2 utilities.
    Resolves: rhbz#1087962
  - Handle xfs CRC disk format.
    Resolves: rhbz#1001279
  - Calibrate TCS using the EFI Stall service
    Resolves: rhbz#1150698
  - Fix built-in gpg verification when using TFTP
    Resolves: rhbz#1167977
  - Generate better stanza titles so grubby can find them easier.
    Resolves: rhbz#1177003
  - Don't strip the fw_path variable twice when we're using EFI networking.
    Resolves: rhbz#1211101


author: Peter Jones <pjones@redhat.com> - 2.02-0.19
changelog:
  - Rebuild for Aarch64
  - Deal with some coverity nits.
    Related: rhbz#1215839
    Related: rhbz#1124074


author: Peter Jones <pjones@redhat.com> - 2.02-0.26
changelog:
  - Be more aggressive about trying to make sure we use the configured SNP
    device in UEFI.
    Resolves: rhbz#1257475


author: Peter Jones <pjones@redhat.com> - 2.02-0.27
changelog:
  - Remove multiboot and multiboot2 modules from the .efi builds; they
    should never have been there.
    Resolves: CVE-2015-5281


author: Peter Jones <pjones@redhat.com> - 2.02-0.30
changelog:
  - Fix security issue when reading username and password
    Resolves: CVE-2015-8370
  - Do a better job of handling GRUB_PASSWORD
    Resolves: rhbz#1284370


author: rmarshall@redhat.com 2.02-0.34
changelog:
  - Exit grub-mkconfig with a proper code when the new configuration would be
    invalid.
    Resolves: rhbz#1252311
  - Warn users if grub-mkconfig needs to be run to add support for GRUB
    passwords.
    Resolves: rhbz#1290803
  - Fix the information in the --help and man pages for grub-setpassword
    Resolves: rhbz#1290799
  - Fix issue where shell substitution expected non-translated output when
    setting a bootloader password.
    Resolves: rhbz#1294243
  - Fix an issue causing memory regions with unknown types to be marked available
    through a series of backports from upstream.
    Resolves: rhbz#1288608


author: Peter Jones <pjones@redhat.com> - 2.02-0.35
changelog:
  - Don't use legacy methods to make device node variables.
    Resolves: rhbz#1279599
  - Don't pad initramfs with zeros
    Resolves: rhbz#1219864


author: Peter Jones <pjones@redhat.com> - 2.02-0.36
changelog:
  - Better support for EFI network booting with dhcpv6.
    Resolves: rhbz#1154226
  - Back out a duplicate change resulting in some EFI network firmware drivers
    not working properly.
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765


author: rmarshall@redhat.com - 2.02-0.37
changelog:
  - Update fix for rhbz#1212114 to reflect the move to handling this case
    in anaconda.
    Related: rhbz#1315468
    Resolves: rhbz#1261926
  - Add grub2-get-kernel-settings to allow grub2-mkconfig to take grubby
    configuration changes into account.
    Resolves: rhbz#1226325


author: rmarshall@redhat.com - 2.02-0.39
changelog:
  - Fix all issues discovered during coverity scan. 
    Related: rhbz#1154226
  - Fix a couple compiler and CLANG issues discovered during coverity scan.
    Related: rhbz#1154226
  - Fix the last few CLANG issues and a deadcode issue discovered by the
    coverity scan.
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com>
changelog:
  - Remove our patch to force a paricular uefi network interface
    Related: rhbz#1273974
    Related: rhbz#1277599
    Related: rhbz#1298765
  - Update some more coverity issues
    Related: rhbz#1226325
    Related: rhbz#1154226


author: Peter Jones <pjones@redhat.com> - 2.02-0.44
changelog:
  - Work around tftp servers that don't work with multiple consecutive slashes in
    file paths.
    Resolves: rhbz#1217243


author: Peter Jones <pjones@redhat.com> - 2.02-0.45
changelog:
  - Rework package to make multi-arch EFI easier.
    Resolves: rhbz#1310763
    Related: rhbz#1411748
  - Honor IO alignment on EFI systems
    Resolves: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.48
changelog:
  - grub2-efi-* don't actually need to require grub2-tools-efi (i.e. the mac
    tools), anaconda and lorax can know how to do that.
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.49
changelog:
  - Include unicode.pf2 in the grub-efi-ARCH-cdboot images
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009


author: Peter Jones <pjones@redhat.com> - 2.02-0.50
changelog:
  - Fix where the grub2-ofpathname man page lands
    Related: rhbz#1310763
  - Fix stripping of userland binaries
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.51
changelog:
  - Also be sure to pull in grub2-tools-extras for now, to make upgrades work.
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.52
changelog:
  - Fix our debuginfo filter to not accidentally discard the stripped versions of
    userland binaries.
    Related: rhbz#1310763


author: Peter Jones <pjones@redhat.com> - 2.02-0.53
changelog:
  - Don't manually put an arch in a requires.
    The automatically generated provides won't have it, and all of the
    tools display the packages as if it were there, so you can't ever see
    that they never match up. Meanwhile the auto generator *will* add
    $name($arch)=$evr provides, which aren't quite the same.  We probably
    don't need it anyway.  Maybe.
    Resolves: rhbz#1437450


author: Peter Jones <pjones@redhat.com> - 2.02-0.54
changelog:
  - Make grub2-pc, grub2-ppc64le, etc, also have an Obsoletes for the old grub2
    packages.  Hoping this will solve Jira RCM-14929.
    Related: rhbz#1437450


author: Peter Jones <pjones@redhat.com> - 2.02-0.57
changelog:
  - Make "grub2" require the grub2-efi-... package on arches where there's no
    legacy build.
    Related: rhbz#1440787


author: Peter Jones <pjones@redhat.com> - 2.02-0.58
changelog:
  - Add Aarch64 FDT #address-cells and #size-cells support
    Resolves: rhbz#1436745
  - Fix ppc64 "grub2.chrp" to be "grub.chrp"
    Resolves: rhbz#1442970


author: Peter Jones <pjones@redhat.com> - 2.02-0.60
changelog:
  - Fix ppc64 deciding /boot/efi might somehow be the CHRP partition if it
    exists.  This is also why the bug we fixed in 0.59 showed up at all.
    Resolves: rhbz#1443809
    Resolves: rhbz#1442970
  - Fix a regexp problem where rpm spec parser un-escapes things that
    don't need escaping, which causes our s/-mcpu=power8/-mcpu=power6/
    to fail.
    Related: rhbz#1443809


author: Peter Jones <pjones@redhat.com> - 2.02-0.61
changelog:
  - Fix some minor ia32 booting bugs
    Related: rhbz#1310763
    Related: rhbz#1411748
    Related: rhbz#1300009
  - Add support for non-Ethernet network cards
    Related: rhbz#1232432
  - Add support for http booting
    Resolves: rhbz#1232432
  - Fix efi module subpackage obsoletes/provides
    Resolves: rhbz#1447723
  - Make ppc modules subpackages use different directories on the filesystem.
    Resolves: rhbz#1455243


author: Peter Jones <pjones@redhat.com> - 2.02-0.65.1
changelog:
  - More precise requires and obsoletes on the -tools* subpackages to avoid
    issues with mixing and matching repos the subpackages are split between.


author: Peter Jones <pjones@redhat.com> - 2.02-0.66
changelog:
  - Fix EFI UGA driver when the framebuffer is above 4G
    Resolves: rhbz#1457988
  - Handle XFS filesystems with sparse inodes
    Resolves: rhbz#1402716
  - Support HTTP booting
    Resolves: rhbz#1490981


author: Peter Jones <pjones@redhat.com> - 2.02-0.67
changelog:
  - Make the permissions on /boot/efi/... match the filesystem's requirements.
    Resolves: rhbz#1496952


author: Peter Jones <pjones@redhat.com> - 2.02-0.68
changelog:
  - More work on /boot/efi/... permissions
    Resolves: rhbz#1496952
  - Rework grubenv symlinks and handle them on upgrades
    Resolves: rhbz#1497918
  - Make grub2-setpassword -o work
    Resolves: rhbz#1512749


author: Peter Jones <pjones@redhat.com> - 2.02-0.71
changelog:
  - The change from 2.02-0.65.el7_4.2 never made it onto the main branch,
    so one more build to avoid the regression.
    Related: rhbz#1340893


author: Peter Jones <pjones@redhat.com> - 2.02-0.74
changelog:
  - Fix symlink issues with grubenv
    Resolves: rhbz#1602773
    Related: rhbz#1497918
  - Make the common subpackage only build on x86_64 to avoid timestamp
    mismatches.
    Related: rhbz#1602773
    Related: rhbz#1497918


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.78
changelog:
  - Prevent errors from diskfilter scan of removable drives
    Resolves: rhbz#1446418
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1497918
  - Remove glibc32 and glibc-static(x86-32) BuildRequires
    Resolves: rhbz#1614259


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.79
changelog:
  - Ignore the modification time when doing RPM verification of /boot/efi files
    Resolves: rhbz#1496952


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.82
changelog:
  - Prepend prefix when HTTP path is relative
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1616395
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1732765


author: Peter Jones <pjones@redhat.com> - 2.02-0.83
changelog:
  - Fix several CVEs:
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-0.84
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-0.85
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311
    Resolves: CVE-2020-15705


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-0.87.el7.2
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Colin Walters <walters@verbum.org> 0.10.23-17
changelog:
  - Hack the gtk-doc to remove plugin docs that are not shipped
  - Drop mythtv, opencv sources that are no longer buildable


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-21
changelog:
  - Remove insecure NSF plugin
  - vmncdec: Sanity-check width/height before using it
  Resolves: rhbz#1400839


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-22
changelog:
  - h264parse: Ensure codec_data has the required size when reading number of SPS
  Resolves: rhbz#1400839


author: Wim Taymans <wtaymans@redhat.com> - 0.10.23-24
changelog:
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Disable gtk-doc to fix the build
  - Resolves: RHEL-16792


author: Wim Taymans <wtaymans@redhat.com> - 1.4.5-6
changelog:
  - Fix h264 and h265 buffer size checks
  - Fix mpegts pat parsing and add more size checks
  Resolves: rhbz#1400898


author: Wim Taymans <wtaymans@redhat.com> - 1.10.4-4
changelog:
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Disable gtk-doc to fix build
  - Resolves: RHEL-16793


author: Tomas Bzatek <tbzatek@redhat.com> - 0.2.1-2
changelog:
  - Added libarchive dependency for archive backend
  - Require new libsmbclient in order to get smb backend working again


author: David Zeuthen <davidz@redhat.com> - 0.2.3-9
changelog:
  - Ensure archive mounts are read-only and turn on thumbnailing on them
  - Update fuse threading patch


author: Alexander Larsson <alexl@redhat.com> - 1.0.2-2
changelog:
  - Don't return generic fallback icons for files,
    as this means custom mimetypes don't work (from svn)


author: David Zeuthen <davidz@redhat.com> - 1.2.1-3
changelog:
  - Clean up gdu patches and bump BR for gdu to 0.3
  - Avoiding showing volume for ignored mounts (#495033)


author: David Zeuthen <davidz@redhat.com> - 1.2.2-4
changelog:
  - Don't show drives that are supposed to be hidden (#498649)
  - Only automount if media or drive was just inserted - this fixes
    a problem with spurious automounts when partitioning/formatting


author: Tomas Bzatek <tbzatek@redhat.com> - 1.2.2-5
changelog:
  - Require separate libtalloc to fix libsmbclient
  - Ref the infos in next_files_finish (gnome #582195)
  - FTP: parse file sizes > 4GB correctly (#499286)
  - CDDA: allow query well-formed filenames only (#499266)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-2
changelog:
  - Fix gedit crashed with SEGV in strlen()
  - Fix SMB protocol not handled when opening from a bookmark (#509832)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.3.3-3
changelog:
  - Fix bad mount prefix stripping (part of #509612)
  - Fix gvfsd-sftp segfault when asking a question
  - Enable tar+xz in the archive mounter


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-4
changelog:
  - Fix Nautilus not displaying friendly icons for SSH-connected system (#526892)
  - Actually apply the logical partitions patch


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-5
changelog:
  - Don't always overwrite on trash restore
  - Separate "Safely Remove Drive" from "Eject"
  - Don't advertise can_poll for drives not using removable media
  - Disallow mounting empty drives
  - Disallow ejecting empty drives
  - Silently drop eject error messages when detaching drive


author: Tomas Bzatek <tbzatek@redhat.com> - 1.4.0-7
changelog:
  - HTTP: Support g_file_input_stream_query_info()
  - HTTP: Use libsoup header parsing function
  - Set correct MIME type for MTP music players


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-2
changelog:
  - Metadata fixes
  - SMB: Fix free space calculation for older samba servers
  - fuse: Fix setting timestamps


author: Tomas Bzatek <tbzatek@redhat.com> - 1.5.1-4
changelog:
  - Don't leak mount job operation (#552842)
  - Recognize gphoto2 cameras which don't implement get storageinfo (#552856)
  - ObexFTP: Use a private D-Bus connection for obex-data-server (#539347)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.8.0-2
changelog:
  - Fix threadsafety of closing channels
  - Fix d-bus messages leaks
  - Fix /dev symlink checks in gdu volume monitor


author: Ondrej Holy <oholy@redhat.com> - 1.22.4-1
changelog:
  - Update to 1.22.4
  - Remove obsolete upstream patches
  - Add translations updates from upstream
  - Resolves: #1174716


author: Ondrej Holy <oholy@redhat.com> - 1.30.3-1
changelog:
  - Update to 1.30.3
  - Disable nfs support (#1387270)
  - Revert desktop database scriplets
  - Resolves: #1386993, #1399343, #1306146, #1259746, #1344317


author: Ondrej Holy <oholy@redhat.com> - 1.36.2-2
changelog:
  - Prevent spawning new daemons if outgoing operation exists (#1632960)
  - CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)


author: Petr Stodulka <pstodulk@redhat.com> - 1.5-8
changelog:
  - Gzip overwrite existing files when user choose "no" on yes/no question.
    It's due to wrong dupicit declaration of yesno() function in gzip.h
    which is compiled wrong with -O2 option.
    Resolves: rhbz#1201689


author: Jakub Martisko <jamartis@redhat.com> - 1.5-10
changelog:
  - doc change: missing grep options are now mentioned in the zgrep 
    man pages/help message
    Resolves: #1437002


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.7
changelog:
  - Fix: "Argument list too long" when using virt-v2v on Windows guest
    with French copy of Citrix installed
    related: rhbz#1145056


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.10-5.8
changelog:
  - Tolerate corruption in some hives
    resolves: rhbz#1423436
  - Switch to using git to manage patches.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:1.8.1.3-14
changelog:
  - Remove dependency on initscripts
  - Add After=network.target to systemd service
  - Resolves: rhbz#1283893, rhbz#1269717


author: Joe Orton <jorton@redhat.com> - 2.2.15-3
changelog:
  - default config tweaks:
   * harden httpd.conf w.r.t. .htaccess restriction (#591293)
   * load mod_substitute, mod_version by default
   * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
   * add commented list of shipped-but-unloaded modules
   * bump up worker defaults a little
   * drop KeepAliveTimeout to 5 secs per upstream
  - fix LSB compliance in init script (#522074)
  - bundle NOTICE in -tools
  - use init script in logrotate postrotate to pick up PIDFILE
  - drop some old Obsoletes/Conflicts


author: Joe Orton <jorton@redhat.com> - 2.2.17-7
changelog:
  - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
  - add man page stubs for httpd.event, httpd.worker
  - drop distcache support
  - add STOP_TIMEOUT support to init script


author: Joe Orton <jorton@redhat.com> - 2.2.21-6
changelog:
  - complete conversion to systemd, drop init script (#770311)
  - fix comments in /etc/sysconfig/httpd (#771024)
  - enable PrivateTmp in service file (#781440)
  - set LANG=C in /etc/sysconfig/httpd


author: Joe Orton <jorton@redhat.com> - 2.4.1-1
changelog:
  - update to 2.4.1
  - adopt upstream default httpd.conf (almost verbatim)
  - split all LoadModules to conf.modules.d/*.conf
  - include conf.d/*.conf at end of httpd.conf
  - trim %changelog


author: Joe Orton <jorton@redhat.com> - 2.4.1-2
changelog:
  - clean docroot better
  - ship proxy, ssl directories within /var/cache/httpd
  - default config:
   * unrestricted access to (only) /var/www
   * remove (commented) Mutex, MaxRanges, ScriptSock
   * split autoindex config to conf.d/autoindex.conf
  - ship additional example configs in docdir


author: Joe Orton <jorton@redhat.com> - 2.4.1-3
changelog:
  - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
  - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage


author: Joe Orton <jorton@redhat.com> - 2.4.2-4
changelog:
  - pull from upstream:
    * use TLS close_notify alert for dummy_connection (r1326980+)
    * cleanup symbol exports (r1327036+)


author: Joe Orton <jorton@redhat.com> - 2.4.2-15
changelog:
  - move tmpfiles.d fragment into /usr/lib per new guidelines
  - package /run/httpd not /var/run/httpd
  - set runtimedir to /run/httpd likewise


author: Joe Orton <jorton@redhat.com> - 2.4.2-18
changelog:
  - avoid use of "core" GIF for a "core" directory (#168776)
  - drop use of "syslog.target" in systemd unit file


author: Joe Orton <jorton@redhat.com> - 2.4.3-7
changelog:
  - use systemd scriptlets if available (#850149)
  - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists


author: Joe Orton <jorton@redhat.com> - 2.4.3-13
changelog:
  - filter mod_*.so auto-provides (thanks to rcollet)
  - pull in syslog logging fix from upstream (r1344712)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
changelog:
  - execute systemctl reload as result of apachectl graceful
  - mod_ssl: ignore SNI hints unless required by config
  - mod_cache: forward-port CacheMaxExpire "hard" option
  - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
    is not configured.


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
changelog:
  - htpasswd/htdbm: fix hash generation bug (#956344)
  - do not dump vhosts twice in httpd -S output (#928761)
  - mod_cache: fix potential crash caused by uninitialized variable (#954109)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
changelog:
  - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
  - apxs: mention -p option in manpage


author: Joe Orton <jorton@redhat.com> - 2.4.6-13
changelog:
  - mod_ssl: sanity-check use of "SSLCompression" (#1036666)
  - mod_proxy_http: fix brigade memory usage (#1040447)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-17
changelog:
  - mod_dav: add security fix for CVE-2013-6438 (#1077907)
  - mod_log_config: add security fix for CVE-2014-0098 (#1077907)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-18
changelog:
  - mod_cgid: add security fix for CVE-2014-0231 (#1120608)
  - mod_proxy: add security fix for CVE-2014-0117 (#1120608)
  - mod_deflate: add security fix for CVE-2014-0118 (#1120608)
  - mod_status: add security fix for CVE-2014-0226 (#1120608)
  - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-19
changelog:
  - fix build on ppc64le by using configure macro (#1125545)
  - compile httpd with -O3 on ppc64le (#1123490)
  - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-30
changelog:
  - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
  - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-31
changelog:
  - mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled
    instead of hardcoding it (#1168050)
  - mod_proxy: support Unix Domain Sockets (#1168081)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32
changelog:
  - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_status: honor remote_ip as documented (#1169081)
  - mod_deflate: fix decompression of files larger than 4GB (#1170214)
  - core: improve error message for inaccessible DocumentRoot (#1170220)
  - ab: try all addresses instead of failing on first one when not available (#1125276)
  - mod_proxy_wstunnel: add support for SSL (#1180745)
  - mod_proxy_wstunnel: load this module by default (#1180745)
  - mod_rewrite: add support for WebSockets (#1180745)
  - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1170206)
  - mod_ssl: fix memory leak on httpd reloads (#1181690)
  - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
  - mod_cgi: return error code 408 on timeout (#1162152)
  - mod_dav_fs: set default value of DAVLockDB (#1176449)
  - add Documentation= to the httpd.service and htcacheclean.service (#1184118)
  - do not display "bomb" icon for files ending with "core" (#1170215)
  - add missing Reason-Phrase in HTTP response headers (#1162159)
  - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
  - apachectl: ignore HTTPD variable from sysconfig (#1214401)
  - apachectl: fix "graceful" documentation (#1214398)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34
changelog:
  - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
  - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
  - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219)
  - mod_ssl: do not send NPN extension with not configured (#1226015)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35
changelog:
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_dav: send complete response when resource is created (#1235383)
  - apachectl: correct the apachectl status man page (#1231924)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36
changelog:
  - Revert fix for #1162152, it is not needed in RHEL7
  - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37
changelog:
  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)


author: Jan Kaluza <jkaluza@redhat.com> - 2.4.6-41
changelog:
  - mod_cache: merge r->err_headers_out into r->headers when the response
    is cached for the first time (#1264989)
  - mod_ssl: Do not send SSL warning when SNI hostname is not found as per
    RFC 6066 (#1298148)
  - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038)
  - fix apache user creation when apache group already exists (#1299889)
  - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757)
  - mod_proxy: fix slow response time for reponses with error status code
    when using ProxyErrorOverride (#1283653)
  - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149)
  - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495)
  - rotatelogs: improve support for localtime (#1244545)
  - ab: fix read failure when targeting SSL server (#1255331)
  - mod_log_debug: fix LogMessage example in documentation (#1279465)
  - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime
    of DB lookup entries independently of the selected DB engine (#1287844)
  - mod_ssl: fix hardware crypto support with custom DH parms (#1291865)
  - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)


author: Joe Orton <jorton@redhat.com> - 2.4.6-47
changelog:
  - prefork: fix delay completing graceful restart (#1327624)
  - mod_ldap: fix authz regression, failing to rebind (#1415257)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-48
changelog:
  - Resolves: #1406184 - stapling_renew_response: abort early
    (before apr_uri_parse) if ocspuri is empty


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-50
changelog:
  - Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed
    worker to be retried before the retry period is over


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-53
changelog:
  - Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple
    successive graceful reloads


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-54
changelog:
  - Resolves: #1372692 - Apache httpd does not log status code "413" in
    access_log when exceeding LimitRequestBody


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-55
changelog:
  - Resolves: #1371876 - Apache httpd returns "200 OK" for a request
    exceeding LimitRequestBody when enabling mod_ext_filter


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-56
changelog:
  - Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi
    spamming non-errors: AH01075: Error dispatching request to : (passing
    brigade to output filters)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-58
changelog:
  - Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves
    with mod_proxy_http and mod_proxy_ajp


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-59
changelog:
  - Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
    are broken during buffer resize


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-60
changelog:
  - Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-61
changelog:
  - Related: #1414258 - Crash during restart or at startup in mod_ssl,
    in certinfo_free() function registered by ssl_stapling_ex_init()


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-62
changelog:
  - Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
    patch to set worker secret passed to tomcat


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-64
changelog:
  - Resolves: #1442872 - apache user is not created during httpd installation
    when apache group already exist with GID other than 48


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-68
changelog:
  - Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread
  - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-73
changelog:
  - Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
    with absoluteURI instead of abs_path


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-74
changelog:
  - Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
    when it's defined outside <Proxy> setting


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-75
changelog:
  - Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
    using SetEnv or PassEnv. Needs documentation.


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-90
changelog:
  - Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
    in mod_auth_digest
  - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
    bypass due to race condition
  - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-91
changelog:
  - Resolves: #1630886 - scriptlet can fail if hostname is not installed
  - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
    mod_authnz_ldap when using too small Accept-Language values
  - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
    failure in reading the HTTP request
  - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
    directive
  - Resolves: #1633152 - mod_session missing apr-util-openssl
  - Resolves: #1649470 - httpd response contains garbage in Content-Type header
  - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-94
changelog:
  - Resolves: #1565491 - CVE-2017-15715 httpd: <FilesMatch> bypass with a trailing
    newline in the file name
  - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
  - Resolves: #1724879 - httpd terminates all SSL connections using an abortive
    shutdown
  - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
  - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
    mod_cache_socache can allow a remote attacker to cause a denial of service
  - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
    mod_session can allow a remote user to modify session data for CGI applications


author: Lubos Uhliarik <luhliari@redhat.com> - 2.4.6-97
changelog:
  - Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.1
changelog:
  - Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
    request uri-path containing "unix:"


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.3
changelog:
  - Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Luboš Uhliarik <luhliari@redhat.com>
changelog:
  - Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
    malformed requests
  - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
    ap_escape_quotes() via malicious input
  - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session


author: CentOS Sources <bugs@centos.org> - 2.4.6-97.el7.centos.4
changelog:
  - Remove index.html, add centos-noindex.tar.gz
  - change vstring
  - change symlink for poweredby.png
  - update welcome.conf with proper aliases


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.5
changelog:
  - Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
    vulnerability in Apache HTTP Server 2.4.52 and earlier


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.6
changelog:
  - Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
    corrupt and mixed-up responses


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.6-97.7
changelog:
  - Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Jarod Wilson <jarod@redhat.com> 22.1-1
changelog:
  - Update to upstream v22.1 release with stable-v22 branch fixes
  - Add support for Broadcom 57500 RoCE adapter
  - Resolves: rhbz#1678274


author: Jarod Wilson <jarod@redhat.com> 22.4-1
changelog:
  - Update to v22.4 stable release
  - Support mlx5 scatter to CQE over DCT QP
  - Fix ibacm segfault on non-IB hardware
  - Resolves: rhbz#1715489
  - Resolves: rhbz#1712296


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-1
changelog:
  - Add --xim argument in xinput-ibus
  - Add Obsoletes:  ibus-qt <= 1.1.0
  - Move libibus.so.* to ibus-libs to make ibus multilib.
  - Update to 1.1.0.20090211.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-6
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - The new patch fixes ibus-x11 segfault (#485661).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090211-10
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Put 'Select an input method' in engine select combobox (#485861).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090225-1
changelog:
  - Update to ibus-1.1.0.20090225.
  - Fix problems in %post and %postun scripts.
  - Hide ibus & ibus preferences menu items.


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-1
changelog:
  - Update to ibus-1.1.0.20090311.
  - Update setup ui follow GNOME Human Interface Guidelines 2.2 (#489497).


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-2
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree.
  - Fix bug 490009 - Deleting Next Engine shortcuts doesn't work
  - Fix bug 490381 - Change "Next/Previous engine" labels


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090311-3
changelog:
  - Recreate the ibus-HEAD.patch from upstream git source tree
  - Fix bug 491999 - up/down arrow keys broken in xchat


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090331-1
changelog:
  - Update to ibus-1.1.0.20090331.
  - Fix bug 492956 - screws up keyboard input in firefox
  - Fix bug 490143 - ibus issue with gnome-keyring


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-1
changelog:
  - Update to ibus-1.1.0.20090407.
  - Fix bug 491042 - ibus default trigger hotkeys
  - Fix bug 492929 - ibus-hangul can cause gtk app to lockup
  - Fix bug 493701 -  (ibus) imsettings disconnect/reconnect kills gtk app
  - Fix bug 493687 -  ibus-hangul should default to vertical candidate selection
  - Fix bug 493449 -  ibus broke Alt-F2 command auto-completion


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090407-3
changelog:
  - Update the tarball.
  - Fix bug 494511 - ibus-gtk makes gnome-terminal abort 
    when a key is pressed


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-2
changelog:
  - Update ibus-HEAD.patch.
  - Change the mode of /tmp/ibus-$USER to 0700 to improve security
  - Change the mode of /tmp/ibus-$USER/socket-address to 0600 to improve security
  - Update as.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090413-3
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 495431 -  ibus Release modifier doesn't work with Alt
  - Fix bug 494445 -  ibus-hangul missing Hangul Han/En mode
    (and Alt_R+release hotkey)
  - Update te.po


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090417-1
changelog:
  - Update to ibus-1.1.0.20090417.
  - Fix bug 496199 -  cannot remove Ctrl+Space hotkey with ibus-setup


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-1
changelog:
  - Update to ibus-1.1.0.20090423.
  - Fix bug 497265 - [mai_IN] Maithili language name is not correct.
  - Fix bug 497279 - IBus does not works with evolution correctly.
  - Enhance authentication both in daemon & clients


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090423-2
changelog:
  - Fix bug 498141 - new ibus install needs gtk immodules
  - Separate ibus document from ibus-devel to ibus-devel-docs


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-1
changelog:
  - Update to 1.1.0.20090508
  - Fix bug 499533 - [Indic] ibus should allow input in KDE using all supported Indic locales
  - Fix bug 498352 - hotkey config table should list keys in same order as on main setup page
  - Fix bug 497707 - ibus French translation update


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-2
changelog:
  - Remove requires notification-daemon
  - Fix bug 500588 - Hardcoded requirement for notification-daemon


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-4
changelog:
  - Update ibus-HEAD.patch.
  - Fix bug 501211 - ibus-setup window should be raised if running or just stay on top/grab focus
  - Fix bug 501640 - ibus should adds new IMEs at end of engine list not beginning
  - Fix bug 501644 - [IBus] focus-out and disabled IME should hide language panel


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090508-5
changelog:
  - Update ibus-HEAD.patch.
  - Show the default input method with bold text
  - Add information text below input methods list


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090609-1
changelog:
  - Update to Update to 1.1.0.20090609
  - Fix bug 502414 - Implemented on-screen help facility
  - Fix bug 502561 - iBus should show keymap name on iBus panel
  - Fix bug 498043 - ibus Alt-grave trigger conflicts with openoffice.org
  - Implemented API for setting labels for candidates in LookupTable


author: Peng Huang <phuang@redhat.com> - 1.1.0.20090612-1
changelog:
  - Update to 1.1.0.20090612
  - Fix bug 504942 - PageUp and PageDown do not work in candidate list
  - Fix bug 491040 - Implememnt mouse selection in candidate list


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090828-1
changelog:
  - Update to 1.2.0.20090828
  - Change the icon on systray.
  - Fix segment fault in ibus_hotkey_profile_destroy
  - Fix some memory leaks.


author: Peng Huang <phuang@redhat.com> - 1.2.0.20090915-1
changelog:
  - Update to 1.2.0.20090915
  - Fix bug 521591 - check if the icon filename is a real file before trying to open it
  - Fix bug 522310 - Memory leak on show/hide
  - Fix bug 509518 - ibus-anthy should only override to jp layout for kana input


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091124-1
changelog:
  - Update to 1.2.0.20091124
  - Update some translations.
  - Fix bug 538147 - [abrt] crash detected in firefox-3.5.5-1.fc12


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091204-1
changelog:
  - Update to 1.2.0.20091204
  - Fix Bug 529920 - language panel pops up on the wrong monitor
  - Fix Bug 541197 - Ibus crash


author: Peng Huang <phuang@redhat.com> - 1.2.0.20091225-1
changelog:
  - Update to 1.2.0.20091225
  - Fix bug 513895 - new IME does not show up in ibus-setup
  - Fix bug 531857 - applet order should correspond with preferences order
  - Fix bug 532856 - should not list already added input-methods in Add selector


author: Peng Huang <phuang@redhat.com> - 1.3.0-3
changelog:
  - Update ibus-HEAD.patch
  - Fix bug - some time panel does not show candidates.
  - Update some po files


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.8-1
changelog:
  - Updated to 1.3.8
  - Added ibus-541492-xkb.patch
    Fixes Bug 541492 - ibus needs to support some xkb layout switching
  - Added ibus-435880-surrounding-text.patch
    Fixes Bug 435880 - ibus-gtk requires surrounding-text support
  - Added ibus-xx-workaround-gtk3.patch
    Workaround for f14 http://koji.fedoraproject.org/koji/taskinfo?taskID=2516604


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20101202-1
changelog:
  - Updated to 1.3.99.20101202
  - Added ibus-530711-preload-sys.patch
    Fixed Bug 530711 - Reload preloaded engines by login


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110117-1
changelog:
  - Updated to 1.3.99.20110117
  - Fixed Bug 666427 - ibus requires dbus-x11
  - Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110228-1
changelog:
  - Updated to 1.3.99.20110228
  - Integrated the part of gjs in Bug 657165 ibus for gnome-shell.
    Added ibus-657165-panel-libs.patch
    Added gnome-shell-ibus-plugins-20110304.tar.bz2
  - Fixed Bug 675503 - a regression in sync mode
    Added ibus-675503-gnome-shell-workaround.patch until gnome-shell is updated.
  - Fixed Bug 677856 - left ibus snooper when im client is switched.
  - Fixed Bug 673047 - abrt ibus_xkb_get_current_layout for non-XKB system
    Updated ibus-541492-xkb.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110408-1
changelog:
  - Updated to 1.3.99.20110408
    Fixed Bug 683484 - Timed out SetEngine when select an engine from panel.
    Fixed Bug 657165 - IBus for gnome-shell for Fedora 15.
  - Upstreamed ibus-657165-panel-libs.patch
  - Removed ibus-675503-gnome-shell-workaround.patch
  - Added ibus-xx-setup-frequent-lang.patch
  - Updated ibus-541492-xkb.patch
    Fixed Bug 696481 - no the variant maps without language codes
  - Added dependency of imsettings-gnome.
    Fixed Bug 696510 - need a dependency in ibus-gtk3 for imsettings-gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110419-1
changelog:
  - Updated to 1.3.99.20110419
  - Added ibus-HEAD.patch
    Fixed Bug 697471 - ibus-gconf zombie when restart ibus from ibus panel.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 701202 - us(dvorak) does not show up in list
    Updated ibus-1.0.pc for ibus-xkb
    Showed XKB variant descriptions only without layout descriptions.
  - Updated ibus-xx-setup-frequent-lang.patch
    Updated UI strings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-3
changelog:
  - Fixed Bug 700472 Use a symbol icon instead of an image icon.
  - Updated ibus-HEAD.patch for upstream.
  - Removed ibus-435880-surrounding-text.patch as upstream.
  - Added ibus-711632-fedora-fallback-icon.patch
    Fixed SEGV with no icon in oxygen-gtk icon theme.
  - Added ibus-xx-bridge-hotkey.patch
    Triaged Bug 707370 SetEngine timeout
    Fixed Bug 731610 Keep IM state when text input focus changes
  - Added transitional ibus-gnome3 package.
    Fixed Bug 718110 Use a shell icon instead of pygtk2 icon.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.3.99.20110817-4
changelog:
  - Updated ibus-gjs 3.1.91.20110908 and 3.0.2.20110908 for gnome-shell.
    Fixed preedit active segments on gnome-shell and X11 apps.
  - Added ibus-xx-g-s-disable-preedit.patch
    Disabled preedit on gnome-shell for a workaround.
  - Updated ibus.spec
    Fixed Bug 735879 pre/postun scripts


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-2
changelog:
  - Updated to 1.4.0
  - Updated ibus-gjs 3.0.2.20110928 for f15.
  - Updated ibus-gjs 3.2.0.20110928 for f16. (#740588)
  - Updated ibus-530711-preload-sys.patch
    Fixed not to show duplicated engine names in setup treeview (#740447)
  - Updated bus-gjs-xx-gnome-shell-3.1.4-build-failure.patch for f16.
  - Updated ibus-xx-bridge-hotkey.patch
    Fixed a XKB configuration without the input focus for f16 (#739165)
    Fixed not to show null strings in case of no variants (#738130)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-9
changelog:
  - Updated ibus-HEAD.patch
    Fixed prev/next keys without global engine.
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed Bug 747902 - mouse and ctrl+space not working
    Fixed Bug 749770 - IME hotkey after Control + Space
  - Updated ibus-711632-fedora-fallback-icon.patch
    Fixed Bug 717831 - use old icon for desktops other than gnome


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-10
changelog:
  - Updated ibus-xx-bridge-hotkey.patch for f16
    Fixed no XKB languages from layout only. e.g. in(eng).
  - Updated ibus-541492-xkb.patch
    Fixed not to show 'eng' on GUI for in(eng).


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-11
changelog:
  - Updated ibus-541492-xkb.patch
    Fixed Bug 750484 - support reloading Xmodmap
  - Updated ibus-HEAD.patch
    Fixed Bug 753781 - ibus-x11 needs async for hangul ibus_commit_text.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-14
changelog:
  - Enabled dconf.
  - Updated ibus-HEAD.patch
    Fixed Bug 618229 - engine setup buton on ibus-setup.
  - Removed ibus-711632-fedora-fallback-icon.patch as upstreamed.
  - Updated ibus-xx-bridge-hotkey.patch
    Removed Enable/Disable buttons on ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-16
changelog:
  - Enhanced ibus-gnome3 shell lookup window.
  - Updated ibus-HEAD.patch from upstream
    Fixed Bug 769135 - ibus-x11 SEGV in _process_key_event_done.
  - Updated ibus-541492-xkb.patch
    Fixed Bug 757889 - ibus-setup SEGV without active engine.
    Fixed Bug 760213 - ibus-setup saves XKB variants correctly.
    Fixed Bug 769133 - ibus-engine-xkb returns FALSE for ASCII typings.
  - Updated ibus-xx-bridge-hotkey.patch for an enhancement.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.0-17
changelog:
  - Added ibus-771115-property-compatible.patch for f16
    Fixed Bug 771115 - IBusProperty back compatibility.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-1
changelog:
  - Updated to 1.4.99.20120203
  - Removed ibus-xx-bridge-hotkey.patch
  - Updated ibus-541492-xkb.patch to use libgnomekbd.
  - Updated ibus-xx-setup-frequent-lang.patch for 1.4.99.20120203


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120203-3
changelog:
  - Fixed ibus-setup on C locale
  - Fixed to show no registered engines from g-c-c.
  - Enabled Alt_R keybinding on ko locales for ibus gtk only.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120303-3
changelog:
  - Bumped to ibus-gjs 3.3.90.20120308 to work with gnome-shell 3.3.90
  - Fixed Bug 786906 - Added ifnarch ppc ppc64 s390 s390x
  - Updated ibus-HEAD.patch
    Fixed Bug 800897 - After doing "ctrl+space", ibus tray icon freezes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120317-1
changelog:
  - Bumped to 1.4.99.20120317
    Fixed Bug 718668 - focus move is slow with ibus-gnome3
    Fixed Bug 749497 - Enhance IME descriptions in status icon active menu
  - Bumped to ibus-gjs 3.3.90.20120317
  - Added ibus-xx-no-use.diff
    Fixed Bug 803260 - Disable non-global input method mode
  - Updated ibus-HEAD.patch
    Fixed Bug 803250 - ibus lookup window font customization
    Fixed Bug 803177 - language id on ibus-ui-gtk3 switcher
  - Update ibus-530711-preload-sys.patch
    Fixed Bug 797023 - port preload engines


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-1
changelog:
  - Bumped to 1.4.99.20120428
    Fixed Bug 799571 - no IME list at the session login.
    Fixed Bug 810415 - ibus does not handle Ctrl+space with BUTTON_PRESS.
  - Bumped to ibus-gjs 3.4.1.20120428
    Fixed Bug 802052 - no modifiers trigger keys.
    Fixed Bug 803244 - IME switch Ctrl+space not working on shell text entry.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120428-2
changelog:
  - Updated ibus-HEAD.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-branding-switcher-ui.patch
    Fixed Bug 810211 - Cancel Control + space pressing Control key.
  - Updated ibus-xx-no-use.diff
    Enabled to customize trigger keys with non-modifier trigger keys.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-1
changelog:
  - Bumped to 1.4.99.20120822
  - Bumped to ibus-gjs 3.4.1.20120815
    Fixed Bug 845956 - ibus backward trigger key is not customized
    Fixed Bug 844580 - ibus-dconf does not load the system gvdb
  - Separated ibus-810211-no-switch-by-no-trigger.patch from ibus-HEAD.patch


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20120822-2
changelog:
  - Updated ibus-530711-preload-sys.patch
  - Updated ibus-541492-xkb.patch
  - Updated ibus-xx-no-use.diff
    Fixed Bug 854161 - not able to add keymap with ibus-setup


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.4.99.20121109-1
changelog:
  - Bumped to 1.4.99.20121109
  - Removed im-chooser, imsettings-gnome, gnome-icon-theme-symbolic
    dependencies in f18 because ibus gnome integration is done.
    Use ibus-keyboard instead of input-keyboard-symbolic.
  - Disabled ibus-gjs build because of ibus gnome integration.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-1
changelog:
  - Bumped to 1.5.2
  - Created noarch packages for python files due to .pyc and .pyo.
  - Added man pages.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.2-4
changelog:
  - Updated ibus-HEAD.patch for upstream.
  - Added ibus-xx-1.5.2.patch until 1.5.3 will be released.
  - Added ibus-xx-ctrl-space.patch for back compatible triggers.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-1
changelog:
  - Bumped to 1.5.3
  - Deleted ibus-xx-g-s-disable-preedit.patch as EOL.
  - Deleted ibus-gjs as EOL.
  - Removed imsettings-gnome, im-chooser, libgnomekbd dependencies.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-6
changelog:
  - Resolves: #1051389, #1051391, #1051408, #1051397, #1051398, #1051415,
                Updated ibus-HEAD.patch for upstream
  - Resolves: #1050813
    Deleted notify-python in Requires


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.3-12
changelog:
  - Resolves: #1183909 - programs using "PreeditType: OverTheSpot" is stalled
  - Resolves: #1191825 - gtk2's immodules.cache won't be updated in some cases


author: Jiri Vanek <jvanek@redhat.com> 1.6.2-3
changelog:
  - added --family to make it part of javas alternatives alignment
  - java-javaver-openjdk collected into preffered_java 
  - Resolves: rhbz#1299537


author: Jiri Vanek <jvanek@redhat.com> 1.7-1
changelog:
  - updated to itw 1.7 and sync from fedora
  - added forgotten slaves of itweb-settings policyeditor
  - Own %{_datadir}/%{name} dir
  - Mark non-English man pages with %lang
  - Install COPYING as %license
  - last three by Ville Skytta <ville.skytta@iki.fi> via 1481270
  - for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
  - removed maven macros in favour of manual handling (bug)
  - Resolves: rhbz#1475411


author: Jiri Vanek <jvanek@redhat.com> 1.7.1-2
changelog:
  - added patch1, patch4 and patch11 to fix CVE-2019-10182
  - added patch2 to fix CVE-2019-10181
  - added patch3 and patch33 to fix CVE-2019-10185
  - Resolves: rhbz#1724958 
  - Resolves: rhbz#1725928 
  - Resolves: rhbz#1724989


author: Richard Brantley <rbrantle@redhat.com> - 3.0.2-2
changelog:
  - Resolves BZ1498650, BZ1500008, BZ1501545, BZ1501552, BZ1501556, BZ1501561, BZ1501565, BZ1501566
  - Fixes version migration logic
  - Fixes symlink issues to old binary
  - Fixes short ID analysis for images and containers
  - Fixes Docker library detection
  - Fixes image and container detection
  - Fixes registration execution flow
  - Fixes --version flag to print to stdout and include additional versioning information
  - Includes Insights Core 3.0.3-1


author: Kyle Lape <klape@redhat.com> - 3.0.3-1
changelog:
  - RHEL 7 RPM now uses systemd service and timer instead of cron
  - Addition of IO and CPU cgroup constraints
  - Fixed memory cgroup constraint


author: Link Dupont <link@redhat.com> - 3.0.14-1
changelog:
  - Removed printing to stdout in cron script (RHBZ#1828778)
  - Add deprecation message when running legacy redhat-access-insights (RHCLOUD-5409)
  - Update systemd timer to use timers.target (RHBZ#1798373)
  - Fix an issue updating motd.d on relevant systems (RHCLOUD-6144)
  - Update shipped core to version 3.0.161 (RHCLOUD-4457)
  - Enable automatic checking for advisor results (RHCLOUD-4558)
  - Ensure dependency on coreutils for timeout (RHCLOUD-5131)
  - Build system converted to autotools (RHCLOUD-4333)


author: Rob Crittenden <rcritten@redhat.com> - 0.1.0-2
changelog:
  - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
  - Remove references to admin server in ipa-server-setupssl
  - Generate a client certificate for the XML-RPC server to connect to LDAP with
  - Create a keytab for Apache
  - Create an ldif with a test user
  - Provide a certmap.conf for doing SSL client authentication


author: Karl MacMillan <kmacmill@redhat.com> - 0.4.0-2
changelog:
  * Fri Sep 7 2007 Karl MacMillan <kmacmill@redhat.com> - 0.3.0-1
  - Added support for libipa-dna-plugin


author: Rob Crittenden <rcritten@redhat.com> - 0.4.1-2
changelog:
  - Broke invididual Requires and BuildRequires onto separate lines and
    reordered them
  - Added python-tgexpandingformwidget as a dependency
  - Require at least fedora-ds-base 1.1


author: Rob Crittenden <rcritten@redhat.com> 0.99-3
changelog:
  - Included LICENSE and README in all packages for documentation
  - Move user-modifiable content to /etc/ipa and linked back to
    /usr/share/ipa/html
  - Changed some references to /usr to the {_usr} macro and /etc
    to {_sysconfdir}
  - Added popt-devel to BuildRequires for Fedora 8 and higher and
    popt for Fedora 7
  - Package the egg-info for Fedora 9 and higher for ipa-python


author: Rob Crittenden <rcritten@redhat.com> 0.99-7
changelog:
  - Ensure that /etc/ipa exists before moving user-modifiable html files there
  - Put html files into /etc/ipa/html instead of /etc/ipa


author: Rob Crittenden <rcritten@redhat.com> 0.99-9
changelog:
  - Pull upstream changelog 641
  - Require minimum version of krb5-server on F-7 and F-8
  - Package some new files


author: Rob Crittenden <rcritten@redhat.com> 0.99-10
changelog:
  - Pull upstream changelog 678
  - Add new subpackage, ipa-server-selinux
  - Add Requires: authconfig to ipa-python (bz #433747)
  - Package i18n files


author: Rob Crittenden <rcritten@redhat.com> 0.99-11
changelog:
  - Pull upstream changelog 698
  - Fix ownership of /var/log/ipa_error.log during install (435119)
  - Add pwpolicy command and man page


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-2
changelog:
  - Fix Requires for krb5-server that was missing for Fedora versions > 9
  - Remove quotes around test for fedora version to package egg-info


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-4
changelog:
  - Add missing entry for /var/cache/ipa/kpasswd (444624)
  - Added patch to fix permissions problems with the Apache NSS database.
  - Added patch to fix problem with DNS querying where the query could be
    returned as the answer.
  - Fix spec error where patch1 was in the wrong section


author: Rob Crittenden <rcritten@redhat.com> - 1.0.0-5
changelog:
  - Set fedora-ds-base minimum version to 1.1.0.1-4 and mod_nss minimum
    version to 1.0.7-4 so we pick up the NSS fixes.
  - Add selinux-policy-base(post) to Requires (446496)


author: Rob Crittenden <rcritten@redhat.com> - 1.1.0-1
changelog:
  - Update to upstream version 1.1.0
  - Patch for indexing memberof attribute
  - Patch for indexing uidnumber and gidnumber
  - Patch to change DNA default values for replicas
  - Patch to fix uninitialized variable in ipa-getkeytab


author: Simo Sorce <ssorce@redhat.com> - 1.1.0-3
changelog:
  - Fix for CVE-2008-3274
  - Fix segfault in ipa-kpasswd in case getifaddrs returns a NULL interface
  - Add fix for bug #453185
  - Rebuild against openldap libraries, mozldap ones do not work properly
  - TurboGears is currently broken in rawhide. Added patch to not build
    the UI locales and removed them from the ipa-server files section.


author: Rob Crittenden <rcritten@redhat.com> - 1.2.0-1
changelog:
  - Update to upstream version 1.2.0
  - Set fedora-ds-base minimum version to 1.1.3 for winsync header
  - Set the minimum version for SELinux policy
  - Remove references to Fedora 7


author: Simo Sorce <ssorce@redhat.com> - 1.2.0-3
changelog:
  - Respin after the tarball has been re-released upstream
    New hash is 506c9c92dcaf9f227cba5030e999f177


author: Jason Gerard DeRose <jderose@redhat.com> - 1.99-8
changelog:
  - Removed python-cherrypy from BuildRequires and Requires
  - Added Requires python-assets, python-wehjit


author: Rob Crittenden <rcritten@redhat.com> - 1.99-23
changelog:
  - Change Requires from fedora-ds-base to 389-ds-base
  - Set minimum level of 389-ds-base to 1.2.6 for the replication
    version plugin.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-27
changelog:
  - Set minimum version of certmonger to 0.26 (to pck up #621670)
  - Set minimum version of pki-silent to 1.3.4 (adds -key_algorithm)
  - Set minimum version of pki-ca to 1.3.6
  - Set minimum version of sssd to 1.2.1


author: Rob Crittenden <rcritten@redhat.com> - 1.99-28
changelog:
  - Drop conflicts on mod_nss
  - Require nss-pam-ldapd on F-14 or higher instead of nss_ldap (#606847)
  - Drop a slew of conditionals on older Fedora releases (< 12)
  - Add a few conditionals against RHEL 6
  - Add Requires of nss-tools on ipa-client


author: Rob Crittenden <rcritten@redhat.com> - 1.99-29
changelog:
  - Drop requires on python-configobj (not used any more)
  - Drop ipa-ldap-updater message, upgrades are done differently now


author: Simo Sorce <ssorce@redhat.com> - 1.99-39
changelog:
  - Remove dependency on nss_ldap/nss-pam-ldapd
  - The official client is sssd and that's what we use by default.


author: Rob Crittenden <rcritten@redhat.com> - 1.99-41
changelog:
  - Re-arrange doc and defattr to clean up rpmlint warnings
  - Remove conditionals on older releases
  - Move some man pages into admintools subpackage
  - Remove some explicit Requires in client that aren't needed
  - Consistent use of buildroot vs RPM_BUILD_ROOT


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.2.beta.git80e87e7
changelog:
  - Remove unnecessary moving of v1 CA serial number file in post script
  - Add Obsoletes for server-selinxu subpackage
  - Using git snapshot 442d6ad30ce1156914e6245aa7502499e50ec0da


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.beta2
changelog:
  - Set min version of 389-ds-base to 1.2.8
  - Set min version of mod_nss 1.0.8-10
  - Set min version of selinux-policy to 3.9.7-27
  - Add dogtag themes to Requires
  - Update to upstream freeipa-2.0.0.pre2


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.1.rc1
changelog:
  - Set minimum version of sssd to 1.5.1
  - Update to upstream freeipa-2.0.0.rc1
  - Move server-only binaries from admintools subpackage to server


author: Rob Crittenden <rcritten@redhat.com> - 2.0.0-0.4.rc2
changelog:
  - Update to upstream freeipa-2.0.0.rc2
  - Set minimum version of python-nss to 0.11 to make sure IPv6 support is in
  - Set minimum version of sssd to 1.5.1
  - Patch to include SuiteSpotGroup when setting up 389-ds instances
  - Move a lot of BuildRequires so this will build with ONLY_CLIENT enabled


author: Rob Crittenden <rcritten@redhat.com> - 2.0.1-1
changelog:
  - Update minimum selinux-policy to 3.9.16-18
  - Update minimum pki-ca and pki-selinux to 9.0.7
  - Update minimum 389-ds-base to 1.2.8.0-1
  - Update to upstream 2.0.1


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.3-6
changelog:
  - Introduce upgrade script to recover existing configuration after systemd migration
    as user has no means to recover FreeIPA from systemd migration
  - Upgrade script:
    - recovers symlinks in Dogtag instance install
    - recovers systemd configuration for FreeIPA's directory server instances
    - recovers freeipa.service
    - migrates directory server and KDC configs to use proper keytabs for systemd services


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-2
changelog:
  - Allow longer dirsrv startup with systemd:
    - IPAdmin class will wait until dirsrv instance is available up to 10 seconds
    - Helps with restarts during upgrade for ipa-ldap-updater
  - Fix pylint warnings from F16 and Rawhide


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-3
changelog:
  - Allow Web-based migration to work with tightened SE Linux policy (#769440)
  - Rebuild slapi plugins against re-enterant version of libldap


author: Martin Kosek <mkosek@redhat.com> - 2.1.4-4
changelog:
  - Fix ipa-replica-install crashes
  - Fix ipa-server-install and ipa-dns-install logging
  - Set minimum version of pki-ca to 9.0.17 to fix sslget problem
    caused by FEDORA-2011-17400 update (#771357)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.4-5
changelog:
  - Force to use 389-ds 1.2.10-0.8.a7 or above
  - Improve upgrade script to handle systemd 389-ds change
  - Fix freeipa to work with python-ldap 2.4.6


author: Rob Crittenden <rcritten@redhat.com> - 2.1.90-0.2
changelog:
  - Update to upstream 2.2.0 beta 1 (2.1.90.rc1)
  - Set minimum n-v-r for pki-ca and pki-silent to 9.0.18.
  - Add Conflicts on mod_ssl
  - Update minimum n-v-r of 389-ds-base to 1.2.10.4
  - Update minimum n-v-r of sssd to 1.8.0
  - Update minimum n-v-r of slapi-nis to 0.38
  - Update minimum n-v-r of pki-* to 9.0.18
  - Update conflicts on bind-dyndb-ldap to < 1.1.0-0.9.b1
  - Update conflicts on bind to < 9.9.0-1
  - Drop requires on krb5-server-ldap
  - Add patch to remove escaping arguments to pkisilent


author: Rob Crittenden <rcritten@redhat.com> - 2.2.0-1
changelog:
  - Updated to upstream 2.2.0 GA
  - Update minimum n-v-r of certmonger to 0.53
  - Update minimum n-v-r of slapi-nis to 0.40
  - Add Requires in client to oddjob-mkhomedir and python-krbV
  - Update minimum selinux-policy to 3.10.0-110


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.8
changelog:
  - Updated to upstream 3.0.0 rc 1
  - Update BR for 389-ds-base to 1.2.11.14
  - Update BR for krb5 to 1.10
  - Update BR for samba4-devel to 4.0.0-139 (rc1)
  - Add BR for python-polib
  - Update BR and Requires on sssd to 1.9.0
  - Update Requires on policycoreutils to 2.1.12-5
  - Update Requires on 389-ds-base to 1.2.11.14
  - Update Requires on selinux-policy to 3.11.1-21
  - Update Requires on dogtag to 10.0.0-0.33.a1
  - Update Requires on certmonger to 0.60
  - Update Requires on tomcat to 7.0.29
  - Update minimum version of bind to 9.9.1-10.P3
  - Update minimum version of bind-dyndb-ldap to 1.1.0-0.16.rc1
  - Remove Requires on authconfig from python sub-package


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-0.10
changelog:
  - Updated to upstream 3.0.0 rc 2
  - Include new FF configuration extension
  - Set minimum Requires of selinux-policy to 3.11.1-33
  - Set minimum Requires dogtag to 10.0.0-0.43.b1
  - Add new optional strict sub-package to allow users to limit other
    package upgrades.


author: Rob Crittenden <rcritten@redhat.com> - 3.0.0-1
changelog:
  - Updated to upstream 3.0.0 GA
  - Set minimum for samba to 4.0.0-153.
  - Make sure server-trust-ad subpackage alternates winbind_krb5_locator.so
    plugin to /dev/null since they cannot be used when trusts are configured
  - Restrict krb5-server to 1.10.
  - Update BR for 389-ds-base to 1.3.0
  - Add directory /var/lib/ipa/pki-ca/publish for CRL published by pki-ca
  - Add Requires on zip for generating FF browser extension


author: Rob Crittenden <rcritten@redhat.com> - 3.1.0-1
changelog:
  - Updated to upstream 3.1.0 GA
  - Set minimum for sssd to 1.9.2
  - Set minimum for pki-ca to 10.0.0-1
  - Set minimum for 389-ds-base to 1.3.0
  - Set minimum for selinux-policy to 3.11.1-60
  - Remove unneeded dogtag package requires


author: Martin Kosek <mkosek@redhat.com> - 3.1.0-2
changelog:
  - Remove redundat Requires versions that are already in Fedora 17
  - Replace python-crypto Requires with m2crypto
  - Add missing Requires(post) for client and server-trust-ad subpackages
  - Restart httpd service when server-trust-ad subpackage is installed
  - Bump selinux-policy Requires to pick up PKI/LDAP port labeling fixes


author: Rob Crittenden <rcritten@redhat.com> - 3.1.2-1
changelog:
  - Update to upstream 3.1.2
  - CVE-2012-4546: Incorrect CRLs publishing
  - CVE-2012-5484: MITM Attack during Join process
  - CVE-2013-0199: Cross-Realm Trust key leak
  - Updated strict dependencies to 389-ds-base = 1.3.0.2 and
    pki-ca = 10.0.1


author: Martin Kosek <mkosek@redhat.com> - 3.2.0-0.1.pre1
changelog:
  - Update to upstream 3.2.0 Prerelease 1
  - Use upstream reference spec file as a base for Fedora spec file


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-0.3.beta1
changelog:
  - Add a Requires for java-atk-wrapper until we can determine which package
    should be pulling it in, dogtag or tomcat.


author: Rob Crittenden <rcritten@redhat.com> - 3.2.0-1
changelog:
  - Update to upstream 3.2.0 GA
  - ipa-client-install fails if /etc/ipa does not exist (#961483)
  - Certificate status is not visible in Service and Host page (#956718)
  - ipa-client-install removes needed options from ldap.conf (#953991)
  - Handle socket.gethostbyaddr() exceptions when verifying hostnames (#953957)
  - Add triggerin scriptlet to support OpenSSH 6.2 (#953617)
  - Require nss 3.14.3-12.0 to address certutil certificate import
    errors (#953485)
  - Require pki-ca 10.0.2-3 to pull in fix for sslget and mixed IPv4/6
    environments. (#953464)
  - ipa-client-install removes 'sss' from /etc/nsswitch.conf (#953453)
  - ipa-server-install --uninstall doesn't stop dirsrv instances (#953432)
  - Add requires for openldap-2.4.35-4 to pickup fixed SASL_NOCANON behavior for
    socket based connections (#960222)
  - Require libsss_nss_idmap-python
  - Add Conflicts on nss-pam-ldapd < 0.8.4. The mapping from uniqueMember to
    member is now done automatically and having it in the config file raises
    an error.
  - Add backup and restore tools, directory.
  - require at least systemd 38 which provides the journal (we no longer
    need to require syslog.target)
  - Update Requires on policycoreutils to 2.1.14-37
  - Update Requires on selinux-policy to 3.12.1-42
  - Update Requires on 389-ds-base to 1.3.1.0
  - Remove a Requires for java-atk-wrapper


author: Martin Kosek <mkosek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream 3.2.2
  - Drop ipa-server-selinux subpackage
  - Drop redundant directory /var/cache/ipa/sessions
  - Do not create /var/lib/ipa/pki-ca/publish, retain reference as ghost
  - Run ipa-upgradeconfig and server restart in posttrans to avoid inconsistency
    issues when there are still old parts of software (like entitlements plugin)


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-2
changelog:
  - Remove ipa-server-selinux obsoletes as upgrades from version prior to
    3.3.0 are not allowed
  - Wrap server-trust-ad subpackage description better
  - Add (noreplace) flag for %{_sysconfdir}/tmpfiles.d/ipa.conf
  - Change permissions on default_encoding_utf8.so to fix ipa-python Provides


author: Martin Kosek <mkosek@redhat.com> - 3.3.0-4
changelog:
  - ipa-server-install fails if --subject parameter is other than default
    realm (#983075)
  - do not allow configuring bind-dyndb-ldap without persistent search (#967876)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-2
changelog:
  - Unable to remove replica by ipa-replica-manage (#1001662)
  - Before uninstalling a server, warn about active replicas (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-3
changelog:
  - Replica installation fails for RHEL 6.4 master (#1004680)
  - Server uninstallation crashes if DS is not available (#998069)


author: Martin Kosek <mkosek@redhat.com> - 3.3.1-5
changelog:
  - Remove dependency on python-paramiko (#1002884)
  - Broken redirection when deleting last entry of DNS resource
    record (#1006360)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-1
changelog:
  - Update to upstream 3.3.2 (#991064)
  - Add delegation info to MS-PAC (#915799)
  - Warn about incompatibility with AD when IPA realm and domain
    differs (#1009044)
  - Allow PKCS#12 files with empty password in install tools (#1002639)
  - Privilege "SELinux User Map Administrators" did not list
    permissions (#997085)
  - SSH key upload broken when client joins an older server (#1009024)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-2
changelog:
  - Deprecate --serial-autoincrement option (#1016645)
  - CA installation always failed on replica (#1005446)
  - Re-initializing a winsync connection exited with error (#994980)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-4
changelog:
  - Server install failure during client enrollment shouldn't
    roll back (#1023086)
  - nsds5ReplicaStripAttrs are not set on agreements (#1023085)
  - ipa-server conflicts with mod_ssl (#1018172)


author: Martin Kosek <mkosek@redhat.com> - 3.3.2-5
changelog:
  - Temporarily move ipa-backup and ipa-restore functionality
    back to make them available in public Beta (#1003933)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-3
changelog:
  - Installer did not detect different server and IPA domain (#1026845)
  - Allow kernel keyring CCACHE when supported (#1026861)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-5
changelog:
  - Trust add tries to add same value of --base-id for sub domain,
    causing an error (#1033068)
  - Improved error reporting for adding trust case (#1029856)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-6
changelog:
  - Remove "Listen 443 http" hack from deployed nss.conf (#1029046)
  - Re-adding existing trust fails (#1033216)
  - IPA uninstall exits with a samba error (#1033075)
  - Added RELRO hardening on /usr/libexec/ipa-otpd (#1026260)
  - Fixed ownership of /usr/share/ipa/ui/js (#1026260)
  - ipa-tests: support external names for hosts (#1032668)
  - ipa-client-install fail due fail to obtain host TGT (#1029354)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-8
changelog:
  - Fix status trust-add command status message (#910453)
  - NetBIOS was not trimmed at 15 characters (#1030517)
  - Harden CA subsystem certificate renewal on CA clones (#1040018)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-12
changelog:
  - Missing objectclasses when empty password passed to host-add (#1052979)
  - sudoOrder missing in sudoers (#1052983)
  - Missing examples in sudorule help (#1049464)
  - Client automount does not uninstall when fstore is empty (#910899)
  - Error not clear for invalid realm given to trust-fetch-domains (#1052981)
  - trust-fetch-domains does not add idrange for subdomains found (#1049926)
  - Add option to show if an AD subdomain is enabled/disabled (#1052973)
  - ipa-adtrust-install still failed with long NetBIOS names (#1030517)
  - Error not clear for invalid relam given to trustdomain-find (#1049455)
  - renewed client cert not recognized during IPA CA renewal (#1033273)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-13
changelog:
  - Do not add krbPwdPolicyReference for new accounts, hardcode it (#1045218)
  - Increase default timeout for IPA services (#1033273)
  - Error while running trustdomain-find (#1054376)
  - group-show lists SID instead of name for external groups (#1054391)
  - Fix IPA server NetBIOS name in samba configuration (#1030517)
  - dnsrecord-mod produces missing API version warning (#1054869)
  - Hide trust-resolve command as internal (#1052860)
  - Add Trust domain Web UI (#1054870)
  - ipasam cannot delete multiple child trusted domains (#1056120)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-16
changelog:
  - Fallback to global policy in ipa lockout plugin (#912725)
  - Migration does not add users to default group (#903232)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-18
changelog:
  - Display server name in ipa command's verbose mode (#1061703)
  - Remove sourcehostcategory from default HBAC rule (#1061187)
  - dnszone-add cannot add classless PTR zones (#1058688)
  - Move ipa-otpd socket directory to /var/run/krb5kdc (#1063850)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-20
changelog:
  - trustdomain-find with pkey-only fails (#1068611)
  - Invalid credential cache in trust-add (#1069182)
  - ipa-replica-install prints unexpected error (#1069722)
  - Too big font in input fields in details facet in Firefox (#1069720)
  - trust-add for POSIX AD does not fetch trustdomains (#1070925)
  - Misleading trust-add error message in some cases (#1070926)
  - Access is not rejected for disabled domain (#1070924)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-22
changelog:
  - ipa-replica-install never checks for 7389 port (#1075165)
  - Non-terminated string may be passed to LDAP search (#1075091)
  - ipa-sam may fail to translate group SID into GID (#1073829)
  - Excessive LDAP calls by ipa-sam during Samba FS operations (#1075132)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-26
changelog:
  - When IdM server trusts multiple AD forests, IPA client returns invalid group
    membership info (#1079498)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-28
changelog:
  - ipa-client-automount fails with incompatibility error when installed against
    older IPA server (#1083108)


author: Martin Kosek <mkosek@redhat.com> - 3.3.3-29
changelog:
  - Server installation fails using external signed certificates with
    "IndexError: list index out of range" (#1111320)
  - Add rhino to BuildRequires to fix Web UI build error


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-4
changelog:
  - Update Requires on pki-ca to 10.1.2-4 (#1129558)
  - build: increase java stack size for all arches
  - Add ipaSshPubkey and gidNumber to the ACI to read ID user overrides (#891984)
  - Fix dns zonemgr validation regression (#1056202)
  - Handle profile changes in dogtag-ipa-ca-renew-agent (#886645)
  - Do not wait for new CA certificate to appear in LDAP in ipa-certupdate
    (#886645)
  - Add bind-dyndb-ldap working dir to IPA specfile
  - Fail if certmonger can't see new CA certificate in LDAP in ipa-cacert-manage
    (#886645)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - Deadlock in schema compat plugin (#1161131)
  - ipactl stop should stop dirsrv last (#1161129)
  - Upgrade 3.3.5 to 4.1 failed (#1161128)
  - CVE-2014-7828 freeipa: password not required when OTP in use (#1160877)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-5
changelog:
  - Update slapi-nis dependency to pull 0.54-2 (#891984)
  - ipa-restore: Don't crash if AD trust is not installed (#951581)
  - Prohibit setting --rid-base for ranges of ipa-trust-ad-posix type (#1138791)
  - Trust setting not restored for CA cert with ipa-restore command (#1159011)
  - ipa-server-install fails when restarting named (#1162340)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-6
changelog:
  - Fix: DNS installer adds invalid zonemgr email (#1056202)
  - ipaplatform: Use the dirsrv service, not target (#951581)
  - Fix: DNS policy upgrade raises asertion error (#1161128)
  - Fix upgrade referint plugin (#1161128)
  - Upgrade: fix trusts objectclass violationi (#1161128)
  - group-add doesn't accept gid parameter (#1149124)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-7
changelog:
  - ipa-csreplica-manage connect fails (#1157735)
  - error message which is not understandable when IDNA2003 characters are
    present in --zonemgr (#1163849)
  - Fix warning message should not contain CLI commands (#1114013)
  - Renewing the CA signing certificate does not extend its validity period end
    (#1163498)
  - RHEL7.1 ipa-server-install --uninstall Could not set SELinux booleans for
    httpd (#1159330)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-8
changelog:
  - Improve otptoken help messages (#919228)
  - Ensure users exist when assigning tokens to them (#919228)
  - Enable QR code display by default in otptoken-add (#919228)
  - Show warning instead of error if CA did not start (#1158410)
  - CVE-2014-7850 freeipa: XSS flaw can be used to escalate privileges (#1165774)
  - Traceback when adding zone with long name (#1164859)
  - Backup & Restore mechanism (#951581)
  - ignoring user attributes in migrate-ds does not work if uppercase characters
    are returned by ldap (#1159816)
  - Allow ipa-getkeytab to optionally fetch existing keys (#1007367)
  - Failure when installing on dual stacked system with external ca (#1128380)
  - ipa-server should keep backup of CS.cfg (#1059135)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - webui: use domain name instead of domain SID in idrange adder dialog
    (#891984)
  - webui: normalize idview tab labels (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-9
changelog:
  - schema update on RHEL-6.6 using latest copy-schema-to-ca.py from RHEL-7.1
    build fails (#1167196)
  - Investigate & fix Coverity defects in IPA DS/KDC plugins (#1160756)
  - "ipa trust-add ... " cmd says : (Trust status: Established and verified)
    while in the logs we see "WERR_ACCESS_DENIED" during verification step.
    (#1144121)
  - POODLE: force using safe ciphers (non-SSLv3) in IPA client and server
    (#1156466)
  - Add support/hooks for a one-time password system like SecureID in IPA
    (#919228)
  - Tracebacks with latest build for --zonemgr cli option (#1167270)
  - ID Views: Support migration from the sync solution to the trust solution
    (#891984)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-11
changelog:
  - Throw zonemgr error message before installation proceeds (#1163849)
  - Winsync: Setup is broken due to incorrect import of certificate (#1169867)
  - Enable last token deletion when password auth type is configured (#919228)
  - ipa-otp-lasttoken loads all user's tokens on every mod/del (#1166641)
  - add --hosts and --hostgroup options to allow/retrieve keytab methods
    (#1007367)
  - Extend host-show to add the view attribute in set of default attributes
    (#1168916)
  - Prefer TCP connections to UDP in krb5 clients (#919228)
  - [WebUI] Not able to unprovisioning service in IPA 4.1 (#1168214)
  - webui: increase notification duration (#1171089)
  - RHEL7.1 ipa automatic CA cert renewal stuck in submitting state (#1166931)
  - RHEL7.1 ipa-cacert-manage cannot change external to self-signed ca cert
    (#1170003)
  - Improve validation of --instance and --backend options in ipa-restore
    (#951581)
  - RHEL7.1 ipa replica unable to replicate to rhel6 master (#1167964)
  - Disable TLS 1.2 in nss.conf until mod_nss supports it (#1156466)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-12
changelog:
  - RHEL7.1 ipa-cacert-manage renewed certificate from MS ADCS not compatible
    (#1169591)
  - CLI doesn't show SSHFP records with SHA256 added via nsupdate (regression)
    (#1172578)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-13
changelog:
  - Expand the token auth/sync windows (#919228)
  - Access is not rejected for disabled domain (#1172598)
  - krb5kdc crash in ldap_pvt_search (#1170695)
  - RHEL7.1 IPA server httpd avc denials after upgrade (#1164896)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-14
changelog:
  - IPA Replicate creation fails with error "Update failed! Status: [10 Total
    update abortedLDAP error: Referral]" (#1166265)
  - running ipa-server-install --setup-dns results in a crash (#1072502)
  - DNS zones are not migrated into forward zones if 4.0+ replica is added
    (#1175384)
  - gid is overridden by uid in default trust view (#1168904)
  - When migrating warn user if compat is enabled (#1177133)
  - Clean up debug log for trust-add (#1168376)
  - No error message thrown on restore(full kind) on replica from full backup
    taken on master (#1175287)
  - ipa-restore proceed even IPA not configured (#1175326)
  - Data replication not working as expected after data restore from full backup
    (#1175277)
  - IPA externally signed CA cert expiration warning missing from log (#1178128)
  - ipa-upgradeconfig fails in CA-less installs (#1181767)
  - IPA certs fail to autorenew simultaneouly (#1173207)
  - More validation required on ipa-restore's options (#1176034)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-16
changelog:
  - PassSync does not sync passwords due to missing ACIs (#1181093)
  - ipa-replica-manage list does not list synced domain (#1181010)
  - Do not assume certmonger is running in httpinstance (#1181767)
  - ipa-replica-manage disconnect fails without password (#1183279)
  - Put LDIF files to their original location in ipa-restore (#1175277)
  - DUA profile not available anonymously (#1184149)
  - IPA replica missing data after master upgraded (#1176995)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-17
changelog:
  - Wrong directories created on full restore (#1186398)
  - ipa-restore crashes if replica is unreachable (#1186396)
  - idoverrideuser-add option --sshpubkey does not work (#1185410)


author: Martin Kosek <mkosek@redhat.com> - 4.1.0-18
changelog:
  - Fix ipa-pwd-extop global configuration caching (#1187342)
  - group-detach does not add correct objectclasses (#1187540)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.1
changelog:
  - "an internal error has occurred" during ipa host-del --updatedns (#1198431)
  - Renamed patch 1013 to 0114, as it was merged upstream
  - Fax number not displayed for user-show when kinit'ed as normal user.
    (#1198430)
  - Replication agreement with replica not disabled when ipa-restore done without
    IPA installed (#1199060)
  - Limit deadlocks between DS plugin DNA and slapi-nis (#1199128)


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.1.0-18.2
changelog:
  - IPA extdom plugin fails when encountering large groups (#1193759)
  - CVE-2015-0283 ipa: slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()
    (#1202998)


author: Jan Cholasta <jcholast@redhat.com> - 4.1.0-18.3
changelog:
  - [ipa-python] ipalib.errors.LDAPError: failed to decode certificate:
    (SEC_ERROR_INVALID_ARGS) security library: invalid arguments. (#1194312)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.1.alpha1
changelog:
  - Resolves: #805188  [RFE] "ipa migrate-ds" ldapsearches with scope=1
  - Resolves: #1019272 With 20000+ users, adding a user to a group intermittently
    throws Internal server error
  - Resolves: #1035494 Unable to add Kerberos principal via kadmin.local
  - Resolves: #1045153 ipa-managed-entries --list -p <badpassword> still requires
    DM password
  - Resolves: #1125950 ipa-server-install --uinstall doesn't remove port 7389
    from ldap_port_t
  - Resolves: #1132540 [RFE] Expose service delegation rules in UI and CLI
  - Resolves: #1145584 ipaserver/install/cainstance.py creates pkiuser not
    matching uidgid
  - Resolves: #1176036 IDM client registration failure in a high load environment
  - Resolves: #1183116 Remove Requires: subscription-manager
  - Resolves: #1186054 permission-add does not prompt to enter --right option in
    interactive mode
  - Resolves: #1187524 Replication agreement with replica not disabled when
    ipa-restore done without IPA installed
  - Resolves: #1188195 Fax number not displayed for user-show when kinit'ed as
    normal user.
  - Resolves: #1189034 "an internal error has occurred" during ipa host-del
    --updatedns
  - Resolves: #1193554 ipa-client-automount: failing with error LDAP server
    returned UNWILLING_TO_PERFORM. This likely means that minssf is enabled.
  - Resolves: #1193759 IPA extdom plugin fails when encountering large groups
  - Resolves: #1194312 [ipa-python] ipalib.errors.LDAPError: failed to decode
    certificate: (SEC_ERROR_INVALID_ARGS) security library: invalid arguments.
  - Resolves: #1194633 Default trust view can be deleted in lower case
  - Resolves: #1196455 ipa-server-install step [8/27]: starting certificate
    server instance - confusing CA staus message on TLS error
  - Resolves: #1198263 Limit deadlocks between DS plugin DNA and slapi-nis
  - Resolves: #1199527 [RFE] Use datepicker component for datetime fields
  - Resolves: #1200867 [RFE] Make OTP validation window configurable
  - Resolves: #1200883 [RFE] Switch apache to use mod_auth_gssapi
  - Resolves: #1202998 CVE-2015-1827 ipa: memory corruption when using
    get_user_grouplist() [rhel-7.2]
  - Resolves: #1204637 slow group operations
  - Resolves: #1204642 migrate-ds: slow add o users to default group
  - Resolves: #1208461 IPA CA master server update stuck on checking getStatus
    via https
  - Resolves: #1211602 Hide ipa-server-install KDC master password option (-P)
  - Resolves: #1211708 ipa-client-install gets stuck during NTP sync
  - Resolves: #1215197 ipa-client-install ignores --ntp-server option during time
    sync
  - Resolves: #1215200 ipa-client-install configures IPA server as NTP source
    even if IPA server has not ntpd configured
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0.alpha1


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-0.2.alpha1
changelog:
  - Resolves: #1228671 pkispawn fails in ipa-ca-install and ipa-kra-install
  - Related:  #1204809 Rebase ipa to 4.2
    - Fix minimum version of slapi-nis
    - Require python-sss and python-sss-murmur (provided by sssd-1.13.0)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-1
changelog:
  - Resolves: #846033  [RFE] Documentation for JSONRPC IPA API
  - Resolves: #989091  Ability to manage IdM/IPA directly from a standard LDAP
    client
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
  - Resolves: #1115294 [RFE] Add support for DNSSEC
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
  - Resolves: #1199520 [RFE] Introduce single upgrade tool - ipa-server-upgrade
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
  - Resolves: #1200728 [RFE] Replicate PKI Profile information
  - Resolves: #1200735 [RFE] Allow issuing certificates for user accounts
  - Resolves: #1204054 SSSD database is not cleared between installs and
    uninstalls of ipa
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
  - Resolves: #1204504 [RFE] Add access control so hosts can create their own
    services
  - Resolves: #1206534 [RFE] Offer Kerberos over HTTP (kdcproxy) by default
  - Resolves: #1206613 [RFE] Configure IPA to be a trust agent by default
  - Resolves: #1209476 package ipa-client does not require package dbus-python
  - Resolves: #1211589 [RFE] Add option to skip the verify_client_version
  - Resolves: #1211608 [RFE] Generic support for unknown DNS RR types (RFC 3597)
  - Resolves: #1215735 ipa-replica-prepare automatically adds a DNS zone
  - Resolves: #1217010 OTP Manager field is not exposed in the UI
  - Resolves: #1222475 krb5kdc : segfault at 0 ip 00007fa9f64d82bb sp
    00007fffd68b2340 error 6 in libc-2.17.so
  - Related:  #1204809 Rebase ipa to 4.2
    - Update to upstream 4.2.0
    - Move /etc/ipa/kdcproxy to the server subpackage


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-2
changelog:
  - Resolves: #1131907 [ipa-client-install] cannot write certificate file
    '/etc/ipa/ca.crt.new': must be string or buffer, not None
  - Resolves: #1195775 unsaved changes dialog internally inconsistent
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - Stageusedr-activate: show username instead of DN
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prevent to rename certprofile profile id
  - Resolves: #1222047 IPA to AD Trust: IPA ERROR 4016: Remote Retrieve Error
  - Resolves: #1224769 copy-schema-to-ca.py does not overwrites schema files
    - copy-schema-to-ca: allow to overwrite schema files
  - Resolves: #1241941 kdc component installation of IPA failed
    - spec file: Update minimum required version of krb5
  - Resolves: #1242036 Replica install fails to update DNS records
    - Fix DNS records installation for replicas
  - Resolves: #1242884 Upgrade to 4.2.0 fails when enabling kdc proxy
    - Start dirsrv for kdcproxy upgrade


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-3
changelog:
  - Resolves: #1170770 [AD TRUST]IPA should detect inconsistent realm domains
    that conflicts with AD DC
    - trusts: Check for AD root domain among our trusted domains
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - sysrestore: copy files instead of moving them to avoind SELinux issues
  - Resolves: #1196656 [ipa-client][rhel71] enable debugging for spawned
    commands / ntpd -qgc $tmpfile hangs
    - enable debugging of ntpd during client installation
  - Resolves: #1205264 Migration UI Does Not Work When Anonymous Bind is Disabled
    - migration: Use api.env variables.
  - Resolves: #1212719 abort-clean-ruv subcommand should allow
    replica-certifyall: no
    - Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand
  - Resolves: #1216935 ipa trust-add shows ipa: ERROR: an internal error has
    occurred
    - dcerpc: Expand explanation for WERR_ACCESS_DENIED
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1222778 idoverride group-del can delete user and user-del can
    delete group
    - dcerpc: Add get_trusted_domain_object_type method
    - idviews: Restrict anchor to name and name to anchor conversions
    - idviews: Enforce objectclass check in idoverride*-del
  - Resolves: #1234919 Be able to request certificates without certmonger service
    running
    - cermonger: Use private unix socket when DBus SystemBus is not available.
    - ipa-client-install: Do not (re)start certmonger and DBus daemons.
  - Resolves: #1240939 Please add dependency on bind-pkcs11
    - Create server-dns sub-package.
    - ipaplatform: Add constants submodule
    - DNS: check if DNS package is installed
  - Resolves: #1242914 Bump minimal selinux-policy and add booleans to allow
    calling out oddjobd-activated services
    - selinux: enable httpd_run_ipa to allow communicating with oddjobd services
  - Resolves: #1243261 non-admin users cannot search hbac rules
    - fix hbac rule search for non-admin users
    - fix selinuxusermap search for non-admin users
  - Resolves: #1243652 Client has missing dependency on memcache
    - do not import memcache on client
  - Resolves: #1243835 [webui] user change password dialog does not work
    - webui: fix user reset password dialog
  - Resolves: #1244802 spec: selinux denial during kdcproxy user creation
    - Fix selinux denial during kdcproxy user creation
  - Resolves: #1246132 trust-fetch-domains: Do not chown keytab to the sssd user
    - oddjob: avoid chown keytab to sssd if sssd user does not exist
  - Resolves: #1246136 Adding a privilege to a permission avoids validation
    - Validate adding privilege to a permission
  - Resolves: #1246141 DNS Administrators cannot search in zones
    - DNS: Consolidate DNS RR types in API and schema
  - Resolves: #1246143 User plugin - user-find doesn't work properly with manager
    option
    - fix broken search for users by their manager


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-4
changelog:
  - Resolves: #1072383 [RFE] Provide ability to map CAC identity certificates to
    users in IdM
    - store certificates issued for user entries as
    - user-show: add --out option to save certificates to file
  - Resolves: #1145748 [RFE] IPA running with One Way Trust
    - Fix upgrade of sidgen and extdom plugins
  - Resolves: #1195339 ipa-client-install changes the label on various files
    which causes SELinux denials
    - Use 'mv -Z' in specfile to restore SELinux context
  - Resolves: #1198796 Text in UI should describe differing LDAP vs Krb behavior
    for combinations of "User authentication types"
    - webui: add LDAP vs Kerberos behavior description to user auth
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - ULC: Fix stageused-add --from-delete command
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - certprofile-import: do not require profileId in profile data
    - Give more info on virtual command access denial
    - Allow SAN extension for cert-request self-service
    - Add profile for DNP3 / IEC 62351-8 certificates
    - Work around python-nss bug on unrecognised OIDs
  - Resolves: #1204501 [RFE] Add Password Vault (KRA) functionality
    - Validate vault's file parameters
    - Fixed missing KRA agent cert on replica.
  - Resolves: #1225866 display browser config options that apply to the browser.
    - webui: add Kerberos configuration instructions for Chrome
    - Remove ico files from Makefile
  - Resolves: #1246342 Unapply idview raises internal error
    - idviews: Check for the Default Trust View only if applying the view
  - Resolves: #1248102 [webui] regression - incorrect/no failed auth messages
    - webui: fix regressions failed auth messages
  - Resolves: #1248396 Internal error in DomainValidator.__search_in_dc
    - dcerpc: Fix UnboundLocalError for ccache_name
  - Resolves: #1249455 ipa trust-add failed CIFS server configuration does not
    allow access to \\pipe\lsarpc
    - Fix selector of protocol for LSA RPC binding string
    - dcerpc: Simplify generation of LSA-RPC binding strings
  - Resolves: #1250192 Error in ipa trust-fecth-domains
    - Fix incorrect type comparison in trust-fetch-domains
  - Resolves: #1251553 Winsync setup fails with unexpected error
    - replication: Fix incorrect exception invocation
  - Resolves: #1251854 ipa aci plugin is not parsing aci's correctly.
    - ACI plugin: correctly parse bind rules enclosed in
  - Resolves: #1252414 Trust agent install does not detect available replicas to
    add to master
    - adtrust-install: Correctly determine 4.2 FreeIPA servers


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-5
changelog:
  - Resolves: #1199530 [RFE] Provide user lifecycle managment capabilities
    - user-undel: Fix error messages.
  - Resolves: #1200694 [RFE] Support for multiple cert profiles
    - Prohibit deletion of predefined profiles
  - Resolves: #1232819 testing ipa-restore on fresh system install fails
    - Backup/resore authentication control configuration
  - Resolves: #1243331 pkispawn fails when migrating to 4.2 server from 3.0
    server
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1245225 Asymmetric vault drops traceback when the key is not
    proper
    - Asymmetric vault: validate public key in client
  - Resolves: #1248399 Missing DNSSEC related files in backup
    - fix typo in BasePathNamespace member pointing to ods exporter config
    - ipa-backup: archive DNSSEC zone file and kasp.db
  - Resolves: #1248405 PassSync should be disabled after ipa-winsync-migrate is
    finished
    - winsync-migrate: Add warning about passsync
    - winsync-migrate: Expand the man page
  - Resolves: #1248524 User can't find any hosts using "ipa host-find $HOSTNAME"
    - adjust search so that it works for non-admin users
  - Resolves: #1250093 ipa certprofile-import accepts invalid config
    - Require Dogtag PKI >= 10.2.6
  - Resolves: #1250107 IPA framework should not allow modifying trust on AD trust
    agents
    - trusts: Detect missing Samba instance
  - Resolves: #1250111 User lifecycle - preserved users can be assigned
    membership
    - ULC: Prevent preserved users from being assigned membership
  - Resolves: #1250145 Add permission for user to bypass caacl enforcement
    - Add permission for bypassing CA ACL enforcement
  - Resolves: #1250190 idrange is not added for sub domain
    - idranges: raise an error when local IPA ID range is being modified
    - trusts: harden trust-fetch-domains oddjobd-based script
  - Resolves: #1250928 Man page for ipa-server-install is out of sync
    - install: Fix server and replica install options
  - Resolves: #1251225 IPA default CAACL does not allow cert-request for services
    after upgrade
    - Fix default CA ACL added during upgrade
  - Resolves: #1251561 ipa vault-add Unknown option: ipavaultpublickey
    - validate mutually exclusive options in vault-add
  - Resolves: #1251579 ipa vault-add --user should set container owner equal to
    user on first run
    - Fixed vault container ownership.
  - Resolves: #1252517 cert-request rejects request with correct
    krb5PrincipalName SAN
    - Fix KRB5PrincipalName / UPN SAN comparison
  - Resolves: #1252555 ipa vault-find doesn't work for services
    - vault: Add container information to vault command results
    - Add flag to list all service and user vaults
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - Added CLI param and ACL for vault service operations.
  - Resolves: #1252557 certprofile: improve profile format documentation
    - certprofile-import: improve profile format documentation
    - certprofile: add profile format explanation
  - Resolves: #1253443 ipa vault-add creates vault with invalid type
    - vault: validate vault type
  - Resolves: #1253480 ipa vault-add-owner does not fail when adding an existing
    owner
    - baseldap: Allow overriding member param label in LDAPModMember
    - vault: Fix param labels in output of vault owner commands
  - Resolves: #1253511 ipa vault-find does not use criteria
    - vault: Fix vault-find with criteria
  - Resolves: #1254038 ipa-replica-install pk12util error returns exit status 10
    - install: Fix replica install with custom certificates
  - Resolves: #1254262 ipa-dnskeysync-replica crash cannot contact kdc
    - improve the handling of krb5-related errors in dnssec daemons
  - Resolves: #1254412 when dirsrv is off ,upgrade from 7.1 to 7.2 fails with
    starting CA and named-pkcs11.service
    - Server Upgrade: Start DS before CA is started.
  - Resolves: #1254637 Add ACI and permission for managing user userCertificate
    attribute
    - add permission: System: Manage User Certificates
  - Resolves: #1254641 Remove CSR allowed-extensions restriction
    - cert-request: remove allowed extensions check
  - Resolves: #1254693 vault --service does not normalize service principal
    - vault: normalize service principal in service vault operations
  - Resolves: #1254785 ipa-client-install does not properly handle dual stacked
    hosts
    - client: Add support for multiple IP addresses during installation.
    - Add dependency to SSSD 1.13.1
    - client: Add description of --ip-address and --all-ip-addresses to man page


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-6
changelog:
  - Resolves: #1249226 IPA dnssec-validation not working for AD dnsforwardzone
    - DNSSEC: fix forward zone forwarders checks
  - Resolves: #1250190 idrange is not added for sub domain
    - trusts: format Kerberos principal properly when fetching trust topology
  - Resolves: #1252334 User life cycle: missing ability to provision a stage user
    from a preserved user
    - Add user-stage command
  - Resolves: #1252863 After applying RHBA-2015-1554 errata, IPA service fails to
    start.
    - spec file: Add Requires(post) on selinux-policy
  - Resolves: #1254304 Changing vault encryption attributes
    - Change internal rsa_(public|private)_key variable names
    - Added support for changing vault encryption.
  - Resolves: #1256715 Executing user-del --preserve twice removes the user
    pernamently
    - improve the usability of `ipa user-del --preserve` command


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-7
changelog:
  - Resolves: #1256840 [webui] majority of required fields is no longer marked as
    required
    - fix missing information in object metadata
  - Resolves: #1256842 [webui] no option to choose trust type when creating a
    trust
    - webui: add option to establish bidirectional trust
  - Resolves: #1256853 Clear text passwords in KRA install log
    - Removed clear text passwords from KRA install log.
  - Resolves: #1257072 The "Standard Vault" MUST not be the default and must be
    discouraged
    - vault: change default vault type to symmetric
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: prevent rename (modrdn)


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-8
changelog:
  - Resolves: #1254689 Storing big file as a secret in vault raises traceback
    - vault: Limit size of data stored in vault
  - Resolves: #1255880 ipactl status should distinguish between different
    pki-tomcat services
    - ipactl: Do not start/stop/restart single service multiple times


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-9
changelog:
  - Resolves: #1257074 The KRA agent cert is stored in a PEM file that is not
    tracked
    - cert renewal: Include KRA users in Dogtag LDAP update
    - cert renewal: Automatically update KRA agent PEM file
  - Resolves: #1257163 renaming certificatte profile with --rename option leads
    to integrity issues
    - certprofile: remove 'rename' option
  - Resolves: #1257968 kinit stop working after ipa-restore
    - Backup: back up the hosts file
  - Resolves: #1258926 Remove 'DNSSEC is experimental' warnings
    - DNSSEC: remove "DNSSEC is experimental" warnings
  - Resolves: #1258929 Uninstallation of IPA leaves extra entry in /etc/hosts
    - Installer: do not modify /etc/hosts before user agreement
  - Resolves: #1258944 DNSSEC daemons may deadlock when processing more than 1
    zone
    - DNSSEC: backup and restore opendnssec zone list file
    - DNSSEC: remove ccache and keytab of ipa-ods-exporter
    - DNSSEC: prevent ipa-ods-exporter from looping after service auto-restart
    - DNSSEC: Fix deadlock in ipa-ods-exporter <-> ods-enforcerd interaction
    - DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when running on DNSSEC
      key master
    - DNSSEC: Fix key metadata export
    - DNSSEC: Wrap master key using RSA OAEP instead of old PKCS v1.5.
  - Resolves: #1258964 revert to use ldapi to add kra agent in KRA install
    - Using LDAPI to setup CA and KRA agents.
  - Resolves: #1259848 server closes connection and refuses commands after
    deleting user that is still logged in
    - ldap: Make ldap2 connection management thread-safe again
  - Resolves: #1259996 AttributeError: 'NameSpace' object has no attribute
    'ra_certprofile' while ipa-ca-install
    - load RA backend plugins during standalone CA install on CA-less IPA master


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-10
changelog:
  - Resolves: #1260663 crash of ipa-dnskeysync-replica component during
    ipa-restore
    - IPA Restore: allows to specify files that should be removed
  - Resolves: #1261806 Installing ipa-server package breaks httpd
    - Handle timeout error in ipa-httpd-kdcproxy
  - Resolves: #1262322 Failed to backup CS.cfg message in upgrade.
    - Server Upgrade: backup CS.cfg when dogtag is turned off


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-11
changelog:
  - Resolves: #1258965 ipa vault: set owner of vault container
    - baseldap: make subtree deletion optional in LDAPDelete
    - vault: add vault container commands
    - vault: set owner to current user on container creation
    - vault: update access control
    - vault: add permissions and administrator privilege
    - install: support KRA update
  - Resolves: #1261586 ipa config-mod addattr fails for ipauserobjectclasses
    - config: allow user/host attributes with tagging options
  - Resolves: #1262315 Unable to establish winsync replication
    - winsync: Add inetUser objectclass to the passsync sysaccount


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-12
changelog:
  - Resolves: #1204205 [RFE] ID Views: Automated migration tool from Winsync to
    Trusts
    - winsync-migrate: Convert entity names to posix friendly strings
    - winsync-migrate: Properly handle collisions in the names of external groups
  - Resolves: #1261074 Adjust Firefox configuration to new extension signing
    policy
    - webui: use manual Firefox configuration for Firefox >= 40
  - Resolves: #1263337 IPA Restore failed with installed KRA
    - ipa-backup: Add mechanism to store empty directory structure
  - Resolves: #1264793 CVE-2015-5284 ipa: ipa-kra-install includes certificate
    and private key in world readable file [rhel-7.2]
    - install: fix KRA agent PEM file permissions
  - Resolves: #1265086 Mark IdM API Browser as experimental
    - WebUI: add API browser is experimental warning
  - Resolves: #1265277 Fix kdcproxy user creation
    - install: create kdcproxy user during server install
    - platform: add option to create home directory when adding user
    - install: fix kdcproxy user home directory
  - Resolves: #1265559 GSS failure after ipa-restore
    - destroy httpd ccache after stopping the service


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-13
changelog:
  - Resolves: #1217009 OTP sync in UI does not work for TOTP tokens
    - Fix an integer underflow bug in libotp
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - install: always export KRA agent PEM file
    - vault: select a server with KRA for vault operations
  - Resolves: #1269777 IPA restore overwrites /etc/passwd and /etc/group files
    - do not overwrite files with local users/groups when restoring authconfig
  - Renamed patch 1011 to 0138, as it was merged upstream


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-14
changelog:
  - Resolves: #1262996 ipa vault internal error on replica without KRA
    - upgrade: make sure ldap2 is connected in export_kra_agent_pem
  - Resolves: #1270608 IPA upgrade fails for server with CA cert signed by
    external CA
    - schema: do not derive ipaVaultPublicKey from ipaPublicKey


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-15
changelog:
  - Resolves: #1252556 Missing CLI param and ACL for vault service operations
    - vault: fix private service vault creation


author: Jan Cholasta <jcholast@redhat.com> - 4.2.0-16
changelog:
  - Resolves: #1277696 IPA certificate auto renewal fail with "Invalid
    Credential"
    - cert renewal: make renewal of ipaCert atomic
  - Resolves: #1278330 installer options are not validated at the beginning of
    installation
    - install: fix command line option validation
  - Resolves: #1282845 sshd_config change on ipa-client-install can prevent sshd
    from starting up
    - client install: do not corrupt OpenSSH config with Match sections
  - Resolves: #1282935 ipa upgrade causes vault internal error
    - install: export KRA agent PEM file in ipa-kra-install
  - Resolves: #1283429 Default CA ACL rule is not created during
    ipa-replica-install
    - TLS and Dogtag HTTPS request logging improvements
    - Avoid race condition caused by profile delete and recreate
    - Do not erroneously reinit NSS in Dogtag interface
    - Add profiles and default CA ACL on migration
    - disconnect ldap2 backend after adding default CA ACL profiles
    - do not disconnect when using existing connection to check default CA ACLs
  - Resolves: #1283430 ipa-kra-install: fails to apply updates
    - suppress errors arising from adding existing LDAP entries during KRA
      install
  - Resolves: #1283748 Caching of ipaconfig does not work in framework
    - fix caching in get_ipa_config
  - Resolves: #1283943 IPA DNS Zone/DNS Forward Zone details missing after
    upgrade from RHEL 7.0 to RHEL 7.2
    - upgrade: fix migration of old dns forward zones
    - Fix upgrade of forwardzones when zone is in realmdomains
  - Resolves: #1284413 ipa-cacert-manage renew fails on nonexistent ldap
    connection
    - ipa-cacert-renew: Fix connection to ldap.
  - Resolves: #1284414 ipa-otptoken-import fails on nonexistent ldap connection
    - ipa-otptoken-import: Fix connection to ldap.
  - Resolves: #1286635 IPA server upgrade fails from RHEL 7.0 to RHEL 7.2 using
    "yum update ipa* sssd"
    - Set minimal required version for openssl
  - Resolves: #1286781 ipa-nis-manage does not update ldap with all NIS maps
    - Upgrade: Fix upgrade of NIS Server configuration
  - Resolves: #1289311 umask setting causes named-pkcs11 issue with directory
    permissions on /var/lib/ipa/dnssec
    - DNS: fix file permissions
    - Explicitly call chmod on newly created directories
    - Fix: replace mkdir with chmod
  - Resolves: #1290142 Broken 7.2.0 to 7.2.z upgrade - flawed version comparison
    - Fix version comparison
    - use FFI call to rpmvercmp function for version comparison
  - Resolves: #1292595 In IPA-AD trust environment some secondary IPA based Posix
    groups are missing
    - ipa-kdb: map_groups() consider all results
  - Resolves: #1293870 User should be notified for wrong password in password
    reset page
    - Fixed login error message box in LoginScreen page
  - Resolves: #1296196 Sysrestore did not restore state if a key is specified in
    mixed case
    - Allow to used mixed case for sysrestore
  - Resolves: #1296214 DNSSEC key purging is not handled properly
    - DNSSEC: Improve error reporting from ipa-ods-exporter
    - DNSSEC: Make sure that current state in OpenDNSSEC matches key state in
      LDAP
    - DNSSEC: Make sure that current key state in LDAP matches key state in BIND
    - DNSSEC: remove obsolete TODO note
    - DNSSEC: add debug mode to ldapkeydb.py
    - DNSSEC: logging improvements in ipa-ods-exporter
    - DNSSEC: remove keys purged by OpenDNSSEC from master HSM from LDAP
    - DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP
    - DNSSEC: ipa-ods-exporter: add ldap-cleanup command
    - DNSSEC: ipa-dnskeysyncd: call ods-signer ldap-cleanup on zone removal
    - DNSSEC: Log debug messages at log level DEBUG
  - Resolves: #1296216 ipa-server-upgrade fails if certmonger is not running
    - prevent crash of CA-less server upgrade due to absent certmonger
    - always start certmonger during IPA server configuration upgrade
  - Resolves: #1297811 The ipa -e skip_version_check=1 still issues
    incompatibility error when called against RHEL 6 server
    - ipalib: assume version 2.0 when skip_version_check is enabled
  - Resolves: #1298289 install fails when locale is "fr_FR.UTF-8"
    - Do not decode HTTP reason phrase from Dogtag
  - Resolves: #1300252 shared certificateProfiles container is missing on a
    freshly installed RHEL7.2 system
    - upgrade: unconditional import of certificate profiles into LDAP
  - Resolves: #1301674 --setup-dns and other options is forgotten for using an
    external PKI
    - installer: Propagate option values from components instead of copying them.
    - installer: Fix logic of reading option values from cache.
  - Resolves: #1301687 issues with migration from RHEL 6 self-signed to RHEL 7 CA
    IPA setup
    - ipa-ca-install: print more specific errors when CA is already installed
    - cert renewal: import all external CA certs on IPA CA cert renewal
    - CA install: explicitly set dogtag_version to 10
    - fix standalone installation of externally signed CA on IPA master
    - replica install: validate DS and HTTP server certificates
    - replica install: improvements in the handling of CA-related IPA config
      entries
  - Resolves: #1301901 [RFE] compat tree: show AD members of IPA groups
    - slapi-nis: update configuration to allow external members of IPA groups
  - Resolves: #1305533 ipa trust-add succeded but after that ipa trust-find
    returns "0 trusts matched"
    - upgrade: fix config of sidgen and extdom plugins
    - trusts: use ipaNTTrustPartner attribute to detect trust entries
    - Warn user if trust is broken
    - fix upgrade: wait for proper DS socket after DS restart
    - Insure the admin_conn is disconnected on stop
    - Fix connections to DS during installation
    - Fix broken trust warnings
  - Resolves: #1321092 Installers fail when there are multiple versions of the
    same certificate
    - certdb: never use the -r option of certutil
  - Related: #1317381 Crash during IPA upgrade due to slapd
    - spec file: update minimum required version of slapi-nis
  - Related: #1322691 CVE-2015-5370 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112
    CVE-2016-2113 CVE-2016-2114 CVE-2016-2115 CVE-2016-2118 samba: various flaws
    [rhel-7.3]
    - Rebuild against newer Samba version


