- 4.1 security update (fix CVE-2011-4109 CVE-2011-4576 CVE-2011-4619
    CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2333)

- CVE-2010-0296
  CVE-2011-1095
  CVE-2011-0536

- CVE-2010-2065
  CVE-2011-0192
  CVE-2011-1167

- CVE-2009-0692
  CVE-2011-0997
  CVE-2011-2748-2749

- CVE-2009-3546

- CVE-2006-3619
  CVE-2009-3736

- CVE-2009-3736

- CVE-2009-4022
  CVE-2010-0097
  CVE-2010-3762
  CVE-2011-4313

- CVE-2010-0426 sudo: sudoedit option can possibly allow for arbitrary code execution

- CVE-2010-0624

- fixed CVE-2010-0624

- Fixed build

- Backported for M40.

- Applied upstream fix for integer underflow bug (CVE-2010-0001).

- NMU:
  - Newer kernel headers does not provide PAGE_SIZE constant, backported
    fix from 3.2.6

- Backported to 4.1/branch:
  * Mon Sep 22 2008 Dmitry V. Levin <ldv@altlinux> 1.2-alt2
  - Fixed typo in specfile.

- Bacported to 4.1/branch:
  * Tue May 13 2008 Dmitry V. Levin <ldv@altlinux> 1.4.0-alt2
  - Fixed build to use glibc-kernheaders again.
  - Fixed compilation warnings.
  * Sun May 11 2008 Valery Inozemtsev <shrek@altlinux> 1.4.0-alt1
  - Updated to 1.4.0

- rpmio, rpmbuild: Added support for .xz/.lzma compressed sources and patches.
- Removed old scripts in /usr/lib/rpm.

- Cherry-picked a fix for #18052 from 2.4.32.
- A build for 4.1.

- Resurrected script requirements for M40.

- build for 4.1

- backport to M41

- bug #16375

- Fixed potential heap buffer overflow in strip_escapes(),
  reported by Alfredo Ortega from Core Security Technologies.

- Updated to maint v1.5.5.5.

- gcc-common:
  + Do not package files packaged in libgcj-common (closes: #15854).
- gcc wrapper:
  + Do not strip "gcj-" prefix.
  + Recognize more names: tree1, g77, f95, jar, rmic, rmiregistry.
- Removed redundant %_target_platform-* symlinks:
  gcc-common: cc;
  gcc-c++-common: c++;
  gcc-fortran-common: f77, g77, f95;
  gcc-treelang-common: tree1;
  gcc-java-common: jar.
- gcc-java-common:
  + Removed redundant symlinks: gcj-jar, gcj-rmic.
  + Removed rmiregistry symlink (closes: #15949).
  + Added gjar symlink.

- postcreate.sh:
  + Copy /etc/localtime from HN to VE (closes: #14363).
- vzmigrate:
  + Fixed typo in 'if' statement (closes: #15085).
  + Added -x to rsync options.
- functions (change_hostname):
  + Add comment to /etc/hosts (closes: #15072).
  + Handle multiple 127.0.0.1 names (closes: #15073).

- sshd: In key blacklisting, distinguish public keys and host keys.

- Initial revision.

- make_aliases: Fixed space sensitivity (#15549).

- crontab: Skip the top few comments in "list" mode,
  based on patch from Slava Semushin (#14751).

- Backported a few fixes from development branch.

- Fixed %setup invocation.

- Updated to 2.1.4 release.

- Updated to 0.23.

- Replaced SysVinit conflict with sysvinit-utils requirement.

- Removed explicit pathname provides.
- Removed conflict with SysVinit < 2.85-alt3, with hope that
  all sulogin users already updated their systems to msulogin.

- Moved development documentation to -doc subpackage.
- Require graphviz and fonts-ttf-dejavu for apidocs.

- Dropped explicit pathname provides.
- Require sysvinit-utils instead of versioned conflict with old SysVinit.

- Updated to 1.5.5.
- Updated build dependencies.
- Packaged manpages.
- Moved documentation and examples to -doc subpackage (#9742).

- rc.sysinit:
  + Unlink /dev/mapper/control iff it is going to be re-created right away.
- init.d/halt:
  + Pass -f option to halt.
- Require sysvinit-utils instead of versioned SysVinit.

- Moved commonly used non-boot-specific utilities to sysvinit-utils
  subpackage, based on work made by Dmitry M. Maslennikov.

- Merged fixes from FC and Debian symlinks packages.
- Updated release numbering.

- Merged fixes from Debian giftrans package.
- Updated release numbering.

- Updated to 4.2.4.2.

- Updated release numbering.

- Updated release numbering.

- Updated release numbering.

- Updated release numbering.

- def_load: Silence complains about missing /etc/login.defs file.