# changelog

author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-395.el5]
changelog:
  - [fs] gfs2: When glock is freed make sure it gets unlocked in DLM (Abhijith Das) [1022254]
  - [fs] gfs2: Requeue work if reply becomes pending during work_func (Abhijith Das) [1022254]
  - [fs] gfs2: Wait for glock demotes when evicting an inode (Abhijith Das) [1022254]
  - [fs] gfs2: Attempt to close GLF_DIRTY timing windows (Abhijith Das) [1022254]
  - [fs] gfs2: Change truncate page allocation to be GFP_NOFS (Abhijith Das) [1022254]
  - [net] tg3: Poll cpmu link state on APE + ASF enabled devices (Ivan Vecera) [1097866]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [924590]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-396.el5]
changelog:
  - [s390] kernel: fix restore of invalid floating-point-control (Hendrik Brueckner) [1121953]
  - [fs] cifs: Use cifs_set_ops() in fill_in_inode() functions (Sachin Prabhu) [1108624]
  - [fs] cifs: Fix cifs_set_ops() (Sachin Prabhu) [1108624]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-397.el5]
changelog:
  - [fs] gfs2: Detect and release delayed bufdata structures (Robert S Peterson) [516025]
  - [fs] nfs: don't invalidate dentries that act as mountpoints (Steve Dickson) [1117211]
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102703] {CVE-2014-3917}
  - [scsi] Initialize eh_timeout value earlier on probe (Ewan Milne) [1119532]
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1080194]
  - [fs] skip atime update on a frozen filesystem (Aaron Tomlin) [1000836]
  - [xen] x86: check segment descriptor read in 64-bit OUTS emulation (Radim Krcmar) [1012959]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-400.el5]
changelog:
  - [net] bridge: disable snooping if there is no querier (Frantisek Hrbata) [902454]
  - [s390] kernel: sysinfo: convert /proc/sysinfo to seqfile (Alexander Gordeev) [1131283]
  - [net] netlink: verify permisions of socket creator (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: store effective caps at socket() time (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Rename netlink_capable netlink_allowed (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Fix permission check in netlink_connect() (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix possible spoofing from non-root processes (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: Make NETLINK_USERSOCK work again (Jiri Benc) [1094266] {CVE-2014-0181}
  - [net] netlink: fix for too early rmmod (Jiri Benc) [1094266] {CVE-2014-0181}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-402.el5]
changelog:
  - [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
  - [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
  - [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
  - [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
  - [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-403.el5]
changelog:
  - [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
  - [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
  - [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-404.el5]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-405.el5]
changelog:
  - [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
  - [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
  - [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
  - [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
  - [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
  - [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
  - [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
  - [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
  - [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
  - [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-406.el5]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-407.el5]
changelog:
  - [utrace] check ->utrace != NULL in utrace_unsafe_exec() (Oleg Nesterov) [1226967]
  - [s390] zcrypt: Fixed reset and interrupt handling of AP queues (Hendrik Brueckner) [1238991]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-408.el5]
changelog:
  - [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] ipv6/udp: Use correct var to determine non-blocking cond (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}
  - [net] SNMP: Restore Udp6InErrors incrementation (Denys Vlasenko) [1240757] {CVE-2015-5364 CVE-2015-5366}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-409.el5]
changelog:
  - [fs] ext4: limit group search loop for non-extent files (Lukas Czerner) [1301100]
  - [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
  - [sched] prevent division by zero x->cpu_power (Denys Vlasenko) [1209728]
  - [xen] x86: fully ignore segment override for register-only ops (Mateusz Guzik) [1200373] {CVE-2015-2151}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-412.el5]
changelog:
  - [s390] kernel: Fix tlb flushing with idte. (Hendrik Brueckner) [1350541]
  - [fs] Do not double unlock the dcache_lock in d_materialise_unique (Miklos Szeredi) [1198315]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-413.el5]
changelog:
  - [redhat] Disable 'Invalid version (double separator '-')' error (Alexander Gordeev) [1375746]
  - [fs] jbd: Fix oops in journal_remove_journal_head() (Lukas Czerner) [1067708]
  - [fs] jbd: Fix race between CP and journal_get_write_access() (Lukas Czerner) [1067708]
  - [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347100] {CVE-2016-1583}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-415.el5]
changelog:
  - [fs] gfs2: Initialize atime of I_NEW inodes (Andreas Grunbacher) [1374861]
  - [fs] gfs2: Update file times after grabbing glock (Andreas Grunbacher) [1374861]
  - Revert: [fs] gfs2: Only refresh newer in-memory timestamps (Andreas Grunbacher) [1374861]


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-417.el5]
changelog:
  - [virt] hv: do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1391167]
  - [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390044] {CVE-2016-7117}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-419.el5]
changelog:
  - [net] dccp: Use AF-independent rebuild_header routine (Hannes Frederic Sowa) [1424751]
  - [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424633] {CVE-2017-6074}
  - [redhat] kernel.spec.template: disable autoloading for dccp proto (Hannes Frederic Sowa) [1425177]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.4.el5]
changelog:
  - Revert: [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - Revert: [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [net] tg3: Fix performance regression on 5705 (Andy Gospodarek ) [381021]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.5.el5]
changelog:
  - [ia64] ptrace: access to user register backing (Roland McGrath ) [259801]
  - [fs] cifs: buffer overflow due to corrupt response (Jeff Layton ) [372991]
  - [net] s2io: correct VLAN frame reception (Andy Gospodarek ) [426289]
  - [net] s2io: allow VLAN creation on interfaces (Andy Gospodarek ) [426289]
  - [misc] tux: get rid of O_ATOMICLOOKUP (Michal Schmidt ) [426494]
  - [x86_64] fix race conditions in setup_APIC_timer (Geoff Gustafson ) [424181]
  - [fs] core dump file ownership (Don Howard ) [396991]
  - [nfs] let rpciod finish sillyrename then umount (Steve Dickson ) [414041]
  - [nfs] fix a race in silly rename (Steve Dickson ) [414041]
  - [nfs] clean up the silly rename code (Steve Dickson ) [414041]
  - [nfs] infrastructure changes for silly renames (Steve Dickson ) [414041]
  - [nfs] introduce nfs_removeargs and nfs_removeres (Steve Dickson ) [414041]
  - [ia64] remove stack hard limit (Aron Griffis ) [412091]
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [xen] ia64: vulnerability of copy_to_user in PAL emu (Jarod Wilson ) [425938]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.7.el5]
changelog:
  - [misc] enabling a non-hotplug cpu should cause panic (Kei Tokunaga ) [429108]
  - [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [400821]
  - [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [400821]
  - [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [400821]
  - [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [400821]
  - [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [400821]
  - [scsi] fix various lpfc driver issues (Chip Coldwell ) [424271]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.8.el5]
changelog:
  - [scsi] cciss: fix incompatibility with hpacucli (Tomas Henzl ) [429515]
  - [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [429516]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.9.el5]
changelog:
  - Revert: [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [429516]
  - Revert: [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [400821]
  - Revert: [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [400821]
  - Revert: [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [400821]
  - Revert: [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [400821]
  - Revert: [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [400821]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.11.el5]
changelog:
  - [ia64] enable CMCI on hot-plugged processors (Fabio Olive Leite ) [430632]
  - [audit] break execve records into smaller parts (Eric Paris ) [429691]
  - [s390] data corruption on DASD while toggling CHPIDs (Hans-Joachim Picht ) [402911]
  - [xen] ia64: hv hangs on Corrected Platform Errors (Tetsu Yamamoto ) [428290]
  - [xen] ia64: running java-vm causes dom0 to hang (Tetsu Yamamoto ) [424191]


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.13]
changelog:
  - revert to 2.6.18-53.1.6.el5
  - [x86_64] kernel vmsplice_to_pipe flaw (Alexander Viro ) [432252] {CVE-2008-0600}


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.13.el5]
changelog:
  - revert to 2.6.18-53.1.6.el5
  - [x86_64] check permissions in vmsplice_to_pipe (Alexander Viro ) [432252] {CVE-2008-0600}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.14.el5]
changelog:
  - merge from 2.6.18-53.1.13 to 2.6.18-53.1.12
  - [nfs] potential file corruption issue when writing (Jeff Layton ) [432078]
  - [ppc] chrp: fix possible strncmp NULL pointer usage (Vitaly Mayatskikh ) [396821]
  - [isdn] i4l: fix memory overruns (Vitaly Mayatskikh ) [425171]
  - [isdn] fix possible isdn_net buffer overflows (Aristeu Rozanski ) [392151] {CVE-2007-6063}
  - [mm] hugepages: leak due to pagetable page sharing (Larry Woodman ) [431522]
  - [net] NULL dereference in iwl driver (Vitaly Mayatskikh ) [401421] {CVE-2007-5938}
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [221403]
  - [xen] ia64: hvm guest memory range checking (Jarod Wilson ) [408701]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.15.el5]
changelog:
  - [libata] sata_nv: un-blacklist hitachi drives (David Milburn ) [433617]
  - [libata] sata_nv: may send cmds with duplicate tags (David Milburn ) [433617]
  - [s390] qdio: output queue stall on FCP and net devs (Hans-Joachim Picht ) [412071]
  - [xen] ia64: guest has bad network performance (Tetsu Yamamoto ) [433616]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.16.el5]
changelog:
  - [misc] fix range check in fault handlers with mremap (Vitaly Mayatskikh ) [428970]
  - [video] neofb: avoid overwriting fb_info fields (Anton Arapov ) [430253]


author: Don Howard <dhoward@redhat.com> [2.6.18-53.1.17.el5]
changelog:
  - [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - [pci] hotplug: PCI Express problems with bad DLLPs (Kei Tokunaga ) [440438]
  - [nfs] stop sillyrenames and unmounts from racing (Steve Dickson ) [440447]
  - [x86] clear df flag for signal handlers (Jason Baron ) [437316] {CVE-2008-1367}
  - [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}
  - [xen] ia64: fix ssm_i emulation barrier and vdso pv (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.19.el5]
changelog:
  - [xen] check num of segments in block backend driver (Bill Burns ) [378281]
  - [x86_64] update IO-APIC dest field to 8-bit for xAPIC (Dave Anderson ) [442922]
  - Update: [fs] fix race condition in dnotify (Alexander Viro ) [439758] {CVE-2008-1375}
  - Update: [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [427400] {CVE-2008-1619}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.21.el5]
changelog:
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440001]
  - [video] PWC driver DoS (Pete Zaitcev ) [308521]
  - [x86_64] fix unprivileged crash on %cs corruption (Jarod Wilson ) [439787]
  - [net] ESP: ensure IV is in linear part of the skb (Thomas Graf ) [427247]
  - [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [429516]
  - [net] sunrpc: lockd recovery is broken (Steve Dickson ) [445360]
  - [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [400821]
  - [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [400821]
  - [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [400821]
  - [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [400821]
  - [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [400821]


author: Don Zickus <dzickus@redhat.com> [2.6.18-47.el5]
changelog:
  - [ppc64] Fix SPU slb size and invalidation on hugepage faults (Scott Moser ) [285981]
  - [s390] qdio: Refresh buffer states for IQDIO Asynch output queue (Hans-Joachim Picht ) [222181]
  - [scsi] fusion: allow VMWare's emulator to work again (Chip Coldwell ) [279571]


author: Don Zickus <dzickus@redhat.com> [2.6.18-48.el5]
changelog:
  - [net] s2io: check for error_state in ISR (Scott Moser ) [276871]
  - [fs] ext3: ensure do_split leaves enough free space in both blocks (Eric Sandeen ) [286501]
  - [kabi] whitelist GFS2 export symbols to allow driver updates (Jon Masters) [282901]
  - [gfs2] allow process to handle multiple flocks on a file (Abhijith Das ) [272021]
  - [gfs2] operations hang after mount--RESEND (Bob Peterson ) [276631]
  - [scsi] qlogic: fix nvram/vpd update memory corruptions (Marcus Barrow ) [260701]
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra) [251119] {CVE-2007-3848}
  - [gfs2] mount hung after recovery (Benjamin Marzinski ) [253089]
  - [GFS2] Move inode delete logic out of blocking_cb (Wendy Cheng ) [286821]
  - [dlm] Make dlm_sendd cond_resched more (Patrick Caulfield ) [250464]
  - [x86_64] fix 32-bit ptrace access to debug registers (Roland McGrath ) [247427]
  - [autofs4] fix deadlock during directory create (Ian Kent ) [253231]
  - [nfs] enable 'nosharecache' mounts fixes (Steve Dickson ) [243913]
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276011] {CVE-2007-3513}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275971] {CVE-2007-3105}


author: Don Zickus <dzickus@redhat.com> [2.6.18-49.el5]
changelog:
  - [sata] libata probing fixes and other cleanups (Jeff Garzik ) [260281]
  - [net] cxgb3: backport fixups and sysfs corrections (Andy Gospodarek ) [252243]


author: Don Zickus <dzickus@redhat.com> [2.6.18-50.el5]
changelog:
  - Revert: [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [pata] enable IDE (siimage) DRAC4 (John Feeney ) [212391]
  - [GFS2] gfs2_writepage(s) workaround (Wendy Cheng ) [252392]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298381] {CVE-2007-4308}
  - [GFS2] Solve journaling/{release|invalidate}page issues (Steven Whitehouse ) [253008]
  - [x86_64] syscall vulnerability (Anton Arapov ) [297881] {CVE-2007-4573}
  - [GFS2] Fix i_cache stale entry (Wendy Cheng ) [253756]
  - [GFS2] deadlock running revolver load with lock_nolock (Benjamin Marzinski ) [288581]
  - [net] s2io: check for error_state in ISR (more) (Scott Moser ) [276871]


author: Don Zickus <dzickus@redhat.com> [2.6.18-51.el5]
changelog:
  - [GFS2] dlm: schedule during recovery loops (David Teigland ) [250464]
  - Revert: [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]


author: Don Zickus <dzickus@redhat.com> [2.6.18-52.el5]
changelog:
  - [net] iwlwifi: avoid BUG_ON in tx cmd queue processing (John W. Linville ) [306831]
  - [GFS2] Get super block a different way (Steven Whitehouse ) [306621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-53.el5]
changelog:
  - [GFS2] handle multiple demote requests (Wendy Cheng ) [295641]
  - [scsi] megaraid_sas: kabi fix for /proc entries (Chip Coldwell ) [323231]
  - [sound] allow creation of null parent devices (Brian Maly ) [323771]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.2.el5]
changelog:
  - [net] bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek ) [345131]
  - [cifs] fix memory corruption due to bad error handling (Jeff Layton ) [345171]
  - [audit] improper handling of audit_log_start return values (Eric Paris ) [345151]
  - [fs] jbd: wait for t_sync_datalist buffer to complete (Eric Sandeen ) [345141]
  - [mm] ia64: flush i-cache before set_pte (Luming Yu ) [345161]
  - [x86] Fixes for the tick divider patch (Chris Lalancette ) [305011]
  - [alsa] Convert snd-page-alloc proc file to use seq_file (Jerome Marchand ) [297761] {CVE-2007-4571}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-53.1.3.el5]
changelog:
  - [fs] missing dput in do_lookup error leaks dentries (Eric Sandeen ) [363481] {CVE-2007-5494}
  - [ppc] System cpus stuck in H_JOIN after migrating (Scott Moser ) [381151]
  - [scsi] ibmvSCSI: Unable to continue migrating lpar after errors (Scott Moser ) [381141]
  - [scsi] ibmvSCSI: client can't handle deactive/active device from server (Scott Moser ) [381121]
  - [audit] still allocate contexts when audit is disabled (Alexander Viro ) [381001]
  - [autofs4] fix race between mount and expire (Ian Kent ) [381071]
  - [net] ieee80211: off-by-two integer underflow (Anton Arapov ) [346391] {CVE-2007-4997}
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [245777] {CVE-2007-3104}
  - [nfs] v4: umounts oops in shrink_dcache_for_umount (Steve Dickson ) [381111]
  - [net] forcedeth: MSI interrupt bugfix (Andy Gospodarek ) [381131]
  - [ppc] kexec/kdump kernel hung on Power5+ and Power6 (Scott Moser ) [381101]


author: Don Zickus <dzickus@redhat.com> [2.6.18-44.el5]
changelog:
  - [misc] re-export some symbols as EXPORT_SYMBOL_GPL (Jon Masters ) [252377]
  - [xen] ia64: set NODES_SHIFT to 8 (Doug Chapman ) [254050]
  - [xen] Fix privcmd to remove nopage handler (Chris Lalancette ) [249409]
  - [xen] increase limits to boot on large ia64 platforms (Doug Chapman ) [254062]
  - [autofs] autofs4 - fix race between mount and expire (Ian Kent ) [236875]
  - [nfs] NFS4: closes and umounts are racing (Steve Dickson ) [245062]
  - [GFS2] Fix lock ordering of unlink (Steven Whitehouse ) [253609]
  - [openib] Fix two ipath controllers on same subnet (Doug Ledford ) [253005]
  - [net] tg3: update to fix suspend/resume problems (Andy Gospodarek ) [253988]
  - [GFS2] distributed mmap test cases deadlock (Benjamin Marzinski ) [248480]
  - [GFS2] Fix inode meta data corruption (Wendy Cheng ) [253590]
  - [GFS2] bad mount option causes panic with NULL superblock pointer (Abhijith Das ) [253921]
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253930]
  - [misc] Microphone stops working (John Feeney ) [240716]
  - [GFS2] glock dump dumps glocks for all file systems (Abhijith Das ) [253238]
  - [scsi] qla2xxx: disable MSI-X by default (Marcus Barrow ) [252410]


author: Don Zickus <dzickus@redhat.com> [2.6.18-45.el5]
changelog:
  - [XEN] Update spec file to provide specific xen ABI version (Stephen C. Tweedie ) [271981]
  - [scsi] qla2xxx: nvram/vpd updates produce soft lockups and system hangs (Marcus Barrow ) [260701]
  - [scsi] iscsi: borked kmalloc  (Mike Christie ) [255841]
  - [net] qla3xxx: Read iSCSI target disk fail (Marcus Barrow ) [246123]
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [252404]
  - [mm] madvise call to kernel loops forever (Konrad Rzeszutek ) [263281]


author: Don Zickus <dzickus@redhat.com> [2.6.18-46.el5]
changelog:
  - [XEN] x86: 32-bit ASID mode hangs dom0 on AMD (Chris Lalancette ) [275371]
  - [scsi] megaraid_sas: intercept cmd timeout and throttle io (Chip Coldwell ) [245184 247581]
  - [s390] hypfs: inode corruption due to missing locking (Brad Hinson ) [254169]
  - [Xen] Allow 32-bit Xen to kdump >4G physical memory (Stephen C. Tweedie ) [251341]
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275991] {CVE-2007-3731}
  - [XEN] ia64: allocating with GFP_KERNEL in interrupt context fix (Josef Bacik ) [279141]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3002.el5]
changelog:
  - ppc64: initialization of hotplug memory fixes (Janice M. Girouard ) [220065]
  - GFS2: return error for NULL inode (Russell Cattelan ) [217008]
  - scsi: prevent sym53c1510 from claiming the wrong pci id (Chip Coldwell ) [218623]
  - net: Disable the qla3xxx network driver. (Tom Coughlan ) [221328]
  - xen: Disable CONFIG_IDE_GENERIC (Jarod Wilson ) [220099]
  - sound: add support for STAC9205 codec (John Feeney ) [219494]
  - ipv6: panic when bringing up multiple interfaces (Thomas Graf ) [218039]
  - XFRM Audit: correct xfrm auditing panic (Eric Paris ) [222033]
  - edac: fix /proc/bus/pci/devices to allow X to start (John Feeney ) [219288]
  - x86_64: clear_kernel_mapping: mapping has been split. will leak memory. (Larry Woodman ) [218543]
  - xen: >4G guest fix (Steven Rostedt ) [217770]
  -  fs: listxattr syscall can corrupt user space programs (Eric Sandeen ) [220119]
  - CacheFiles: Fix object struct recycling (David Howells ) [215599]
  - Remove capability requirement to reading cap-bound (Eric Paris ) [219230]
  - disable building ppc64iseries (Don Zickus) [219185]
  - update: utrace fixes (Roland McGrath) [214405 215052 216150 209118]
  - PPC config file changes for IPMI and DTLK (Peter Martuccelli ) [210214]
  - update: Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - net: qla3xxx panics when eth1 is sending pings (Konrad Rzeszutek ) [220246]
  - s390: inflate spinlock kabi (Jan Glauber ) [219871]
  - x86: Add panic on unrecovered NMI (Prarit Bhargava ) [220829]
  - ppc64: fix booting kdump env. w/maxcpus=1 on power5 (Jarod Wilson ) [207300]
  - netfilter: iptables stop fails because ip_conntrack cannot unload. (Thomas Graf ) [212839]
  - gfs: Fix gfs2_rename lock ordering (for local filesystem) (Wendy Cheng ) [221237]
  - GFS2: Fix ordering of page disposal vs. glock_dq (Steven Whitehouse ) [220117]
  - xen: fix nosegneg detection (Rik van Riel ) [220675]
  - mm: Fix for shmem_truncate_range() BUG_ON() (Larry Woodman ) [219821]
  - x86_64: enabling lockdep hangs the system (Don Zickus ) [221198]
  - dlm: change some log_error to log_debug (David Teigland ) [221326]
  - dlm: disable debugging output (David Teigland ) [221326]
  - fs: ext2_check_page denial of service (Eric Sandeen ) [217018]
  - CPEI - prevent relocating hotplug irqs (Kei Tokunaga ) [218520]
  - Networking: make inet->is_icsk assignment binary (Eric Paris ) [220482]
  - net: b44: phy reset problem that leads to link flap  (Neil Horman ) [216338]
  - autofs - fix panic on mount fail - missing autofs module update (Ian Kent ) [221118]
  - net: act_gact: division by zero (Thomas Graf ) [218348]
  - ppc64: Avoid panic when taking altivec exceptions from userspace. (David Woodhouse ) [220586]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3014.el5]
changelog:
  - XEN: Replace inappropriate domain_crash_synchronous use (Herbert Xu ) [221239]
  - SATA timeout boot message  (Peter Martuccelli ) [222108]
  - Netlabel: off by one and init bug in netlbl_cipsov4_add_common (Eric Paris ) [221648]
  - NetLabel: fix locking issues (Eric Paris ) [221504]
  - mm: fix statistics in vmscan.c (Peter Zijlstra ) [222030]
  - usb: Sun/AMI virtual floppy issue (Pete Zaitcev ) [219628]
  - bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - Xen: Make HVM hypercall table NR_hypercalls entries big. (Herbert Xu ) [221818]
  - xen: Add PACKET_AUXDATA cmsg (Herbert Xu ) [219681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-2.el5]
changelog:
  - mm: handle mapping of memory without a struct page backing it (Erik Jacobson ) [221029]
  - rng: check to see if bios locked device (Erik Jacobson ) [221029]
  - sata: support legacy IDE mode of SB600 SATA (Bhavana Nagendra ) [221636]
  - xen: quick fix for Cannot allocate memory (Steven Rostedt ) [217056]
  - XEN: Register PIT handlers to the correct domain (Herbert Xu ) [222520]
  - SATA AHCI: support AHCI class code (Jeff Garzik ) [222674]
  - fix vdso in core dumps (Roland McGrath ) [211744]


author: Don Zickus <dzickus@redhat.com> [2.6.18-3.el5]
changelog:
  - scsi: fix EX8350 panic (stex.ko) (Jun'ichi Nick Nomura ) [220783]
  - Audit: Mask upper bits on 32 bit syscall auditing on ppc64 (Eric Paris ) [213276]


author: Don Zickus <dzickus@redhat.com> [2.6.18-4.el5]
changelog:
  - IPSec: incorrect return code in xfrm_policy_lookup (Eric Paris ) [218591]
  - more kabi whitelist updates (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-5.el5]
changelog:
  - x86: /proc/mtrr interface MTRR bug fix (Bhavana Nagendra ) [223821]
  - Revert: bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - ia64: Check for TIO errors on shub2 Altix (George Beshers ) [223529]
  - nfs: Unable to mount more than 1 Secure NFS mount (Steve Dickson ) [220649]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.1.el5]
changelog:
  - [cpufreq] Remove __initdata from tscsync (Prarit Bhargava ) [229887]
  - [security] Fix key serial number collision problem (David Howells ) [229883] {CVE-2007-0006}
  - [fs] Don't core dump read-only binarys (Don Howard ) [229885] {CVE-2007-0958}
  - [xen] Enable booting on machines with > 64G (Chris Lalancette) [230117]
  - Fix potential buffer overflow in cardman 4040 cmx driver (Don Howard) [229884] {CVE-2007-0005}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.2.el5]
changelog:
  - [utrace] exploit and unkillable cpu fixes (Roland McGrath ) [228816] (CVE-2007-0771)
  - [net] IPV6 security holes in ipv6_sockglue.c - 2 (David S. Miller ) [232257] {CVE-2007-1000}
  - [net] IPV6 security holes in ipv6_sockglue.c (David S. Miller ) [232255] {CVE-2007-1388}
  - [audit] GFP_KERNEL allocations in non-blocking context fix (Alexander Viro ) [233157]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.4.el5]
changelog:
  - [ipv6] Fix routing regression. (David S. Miller ) [238046]
  - [mm] Gdb does not accurately output the backtrace. (Dave Anderson ) [235511]
  - [NMI] change watchdog timeout to 30 seconds (Larry Woodman ) [237655]
  - [dlm] fix mode munging (David Teigland ) [238731]
  - [net] kernel-headers: missing include of types.h (Neil Horman ) [238749]
  - [net] fib_semantics.c out of bounds check (Thomas Graf ) [238948] {CVE-2007-2172}
  - [net] disallow RH0 by default (Thomas Graf ) [238949] {CVE-2007-2242}
  - [net] Fix user OOPS'able bug in FIB netlink (David S. Miller ) [238960] {CVE-2007-1861}
  - [net] IPv6 fragments bypass in nf_conntrack netfilter code (Thomas Graf ) [238947] {CVE-2007-1497}
  - [net] ipv6_fl_socklist is inadvertently shared (David S. Miller ) [238944] {CVE-2007-1592}
  - [net] Various NULL pointer dereferences in netfilter code (Thomas Graf ) [238946] {CVE-2007-1496}


author: Jerome Marchand <jmarchan@redhat.com> [2.6.18-8.1.5.el5]
changelog:
  - [fs] prevent oops in compat_sys_mount (Jeff Layton ) [240456] {CVE-2006-7203}
  - [e1000] fix watchdog timeout panics (Andy Gospodarek ) [238048]
  - [ext3] return ENOENT from ext3_link when racing with unlink (Eric Sandeen ) [239787]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.6.el5]
changelog:
  - [bluetooth] close information leaks in setsockopt (Marcel Holtmann ) [241862]{CVE-2007-1353}
  - [net] fix memory leak in PPPoE (Neil Horman ) [241863] {CVE-2007-2525}
  - [random] fix seeding of dev/random (Aristeu Rozanski ) [241888] {CVE-2007-2453}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.9.el5]
changelog:
  - [misc] cpuset information leak (Prarit Bhargava ) [245773] {CVE-2007-2875}
  - [net] ip_conntrack_sctp: fix remotely triggerable panic (Don Howard ) [245774] {CVE-2007-2876}
  - [misc] Overflow in CAPI subsystem (Anton Arapov ) [232260] {CVE-2007-1217}
  - [CIFS] fix signing sec= mount options (Jeff Layton ) [253315] {CVE-2007-3843}
  - [CIFS] respect umask when unix extensions are enabled (Jeff Layton ) [253314] {CVE-2007-3740}
  - [misc] i915_dma: fix batch buffer security bit for i965 chipsets (Aristeu Rozanski ) [252305] {CVE-2007-3851}
  - [fs] - Move msdos compat ioctl to msdos dir (Eric Sandeen ) [253317]
  - [fs] - fix VFAT compat ioctls on 64-bit systems (Eric Sandeen ) [253317] {CVE-2007-2878}


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.10.el5]
changelog:
  - [mm] Prevent the stack growth into hugetlb reserved regions (Konrad Rzeszutek) [253313] {CVE-2007-3739}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.11.el5]
changelog:
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [253312] {CVE-2007-3733}
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245922] {CVE-2007-3380}
  - [ppc] 4k page mapping support for userspace in 64k kernels (Scott Moser ) [275841] {CVE-2007-3850}
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275981] {CVE-2007-3731}
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253929] {CVE-2007-4133}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.12.el5]
changelog:
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [298151] {CVE-2007-4574}
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra ) [252307] {CVE-2007-3848}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275961] {CVE-2007-3105}
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276001] {CVE-2007-3513}
  - [x86_64] Zero extend all registers after ptrace in 32bit entry path (Anton Arapov ) [297871] {CVE-2007-4573}
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [303281]


author: Don Howard <dhoward@redhat.com> [2.6.18-8.1.14.el5]
changelog:
  - Revert changes back to 2.6.18-8.1.10.
  - [x86_64] Zero extend all registers after ptrace in 32bit entry path (Anton Arapov ) [297871] {CVE-2007-4573}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-8.1.15.el5]
changelog:
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245922] {CVE-2007-3380}
  - [ppc] 4k page mapping support for userspace in 64k kernels (Scott Moser ) [275841] {CVE-2007-3850}
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275981] {CVE-2007-3731}
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253929] {CVE-2007-4133}
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [298151] {CVE-2007-4574}
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra ) [252307] {CVE-2007-3848}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275961] {CVE-2007-3105}
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276001] {CVE-2007-3513}
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [303281]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298371] {CVE-2007-4308}
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [253312] {CVE-2007-3733}


author: Don Howard <dhoward@redhat.com> [2.6.18.8-1.6.el5]
changelog:
  - [bluetooth] close information leaks in setsockopt (Marcel Holtmann ) [241862]{CVE-2007-1353}
  - [net] fix memory leak in PPPoE (Neil Horman ) [241863] {CVE-2007-2525}
  - [random] fix seeding of dev/random (Aristeu Rozanski ) [241888]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2961.el5]
changelog:
  - new set of kabi whitelists (Jon Masters) [218682]
  - x86: remove unwinder patches from x86/x86_64 (Don Zickus ) [220238]
  - usb: disable ub and libusual (Pete Zaitcev ) [210026]
  - NetLabel: stricter configuration checking (Eric Paris ) [219393]
  - scsi: fix iscsi sense len handling (Mike Christie ) [217933]
  - Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - VM: Fix nasty and subtle race in shared mmap'ed page writeback (Eric Sandeen ) [220963]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - NFS: system stall on NFS stress under high memory  pressure (Steve Dickson ) [213137]
  - netfilter: IPv6/IP6Tables Vulnerabilities (Thomas Graf ) [220483]
  - acpi: increase ACPI_MAX_REFERENCE_COUNT (Doug Chapman ) [217741]
  - Race condition in mincore can cause ps -ef to hang (Doug Chapman ) [220480]
  - Call init_timer() for ISDN PPP CCP reset state timer (Marcel Holtmann ) [220163]
  - Race condition concerning VLAPIC interrupts (Bhavana Nagendra ) [213858]


author: Don Zickus <dzickus@redhat.com> [2.6.18-85.el5]
changelog:
  - [xen] ia64: fix kprobes slowdown on single step (Tetsu Yamamoto ) [434558]
  - [xen] mprotect performance improvements (Rik van Riel ) [412731]
  - [GFS2] remove assertion 'al->al_alloced' failed (Abhijith Das ) [432824]
  - [misc] remove unneeded EXPORT_SYMBOLS (Don Zickus ) [295491]
  - [net] e1000e: wake on lan fixes (Andy Gospodarek ) [432343]
  - [sound] add support for HP-RP5700 model (Jaroslav Kysela ) [433593]
  - [scsi] hptiop: fixes buffer overflow, adds pci-ids (Chip Coldwell ) [430662]
  - [crypto] xcbc: fix IPsec crash with aes-xcbc-mac (Herbert Xu ) [435377]
  - [misc] fix memory leak in alloc_disk_node (Jerome Marchand ) [395871]
  - [net] cxgb3: rdma arp and loopback fixes (Andy Gospodarek ) [253449]
  - [misc] fix range check in fault handlers with mremap (Vitaly Mayatskikh ) [428971]
  - [ia64] fix userspace compile error in gcc_intrin.h (Doug Chapman ) [429074]
  - [ppc64] fix xics set_affinity code (Brad Peters ) [435126]
  - [scsi] sym53c8xx: use proper struct (Brad Peters ) [434857]
  - [ppc64] permit pci error state recovery (Brad Peters ) [434857]
  - [misc] fix ALIGN macro (Thomas Graf ) [434940]
  - [x86] fix relocate_kernel to not overwrite pgd (Neil Horman ) [346431]
  - [net] qla2xxx: wait for flash to complete write (Marcus Barrow ) [434992]
  - [ppc64] iommu DMA alignment fix (Brad Peters ) [426875]
  - [x86] add HP DL580 G5 to bfsort whitelist (Tony Camuso ) [434792]
  - [video] neofb: avoid overwriting fb_info fields (Anton Arapov ) [430254]
  - [x86] blacklist systems that need nommconf (Prarit Bhargava ) [433671]
  - [sound] add support for AD1882 codec (Jaroslav Kysela ) [429073]
  - [scsi] ibmvscsi: set command timeout to 60 seconds (Brad Peters ) [354611]
  - [x86] mprotect performance improvements (Rik van Riel ) [412731]
  - [fs] nlm: fix refcount leak in nlmsvc_grant_blocked (Jeff Layton ) [432626]
  - [net] igb: more 5.2 fixes and backports (Andy Gospodarek ) [252004]
  - [net] remove IP_TOS setting privilege checks (Thomas Graf ) [431074]
  - [net] ixgbe: obtain correct protocol info on xmit (Andy Gospodarek ) [428230]
  - [nfs] fslocations/referrals broken (Brad Peters ) [432690]
  - [net] sctp: socket initialization race (Neil Horman ) [426234]
  - [net] ipv6: fix IPsec datagram fragmentation (Herbert Xu ) [432314]
  - [audit] fix bogus reporting of async signals (Alexander Viro ) [432400]
  - [cpufreq] xen: properly register notifier (Bhavana Nagendra ) [430940]
  - [x86] fix TSC feature flag check on AMD (Bhavana Nagendra ) [428479]


author: Don Zickus <dzickus@redhat.com> [2.6.18-86.el5]
changelog:
  - [sound] HDMI device IDs for AMD ATI chipsets (Bhavana Nagendra ) [435658]
  - [scsi] fusion: 1078 corrupts data in 36GB mem region (Chip Coldwell ) [436210]
  - [GFS2] gfs2_adjust_quota has broken unstuffing code (Abhijith Das ) [434736]
  - [docs] add oom_adj and oom_score use to proc.txt (Larry Woodman ) [277151]
  - [GFS2] optimise loop in gfs2_bitfit (Bob Peterson ) [435456]
  - [crypto] fix SA creation with ESP encryption-only (Thomas Graf ) [436267]
  - [crypto] fix SA creation with AH (Thomas Graf ) [435243]
  - [ppc64] spufs: invalidate SLB then add a new entry (Brad Peters ) [436336]
  - [ppc64] SLB: serialize invalidation against loading (Brad Peters ) [436336]
  - [ppc64] cell: remove SPU_CONTEXT_SWITCH_ACTIVE flag (Brad Peters ) [434155]
  - Revert: [net] sunrpc: fix hang due to eventd deadlock (Jeff Layton ) [438044]
  - [ppc64] broken MSI on cell blades when IOMMU is on (Brad Peters ) [430949]
  - [cpufreq] powernow: blacklist bad acpi tables (Chris Lalancette ) [430947]
  - [firmware] ibft_iscsi: prevent misconfigured iBFTs (Konrad Rzeszutek ) [430297]
  - [xen] HV inside a FV guest, crashes the host (Bill Burns ) [436351]


author: Don Zickus <dzickus@redhat.com> [2.6.18-87.el5]
changelog:
  - [scsi] qla4xxx: negotiation issues with new switches (Marcus Barrow ) [438032]
  - [net] qla3xxx: have link SM use work threads (Marcus Barrow ) [409171]
  - [scsi] qla4xxx: fix completion, lun reset code (Marcus Barrow ) [438214]
  - [scsi] lpfc: update driver to 8.2.0.22 (Chip Coldwell ) [437050]
  - [scsi] lpfc: update driver to 8.2.0.21 (Chip Coldwell ) [437050]
  - [block] sg: cap reserved_size values at max_sectors (David Milburn ) [433481]
  - Revert: [xen] idle=poll instead of hypercall block (Bill Burns ) [437252]
  - [scsi] lpfc: update driver to 8.2.0.20 (Chip Coldwell ) [430600]
  - [xen] add warning to 'time went backwards' message (Prarit Bhargava ) [436775]
  - [x86] clear df flag for signal handlers (Jason Baron ) [436131]
  - [usb] fix iaa watchdog notifications (Bhavana Nagendra ) [435670]
  - [usb] new iaa watchdog timer (Bhavana Nagendra ) [435670]


author: Don Zickus <dzickus@redhat.com> [2.6.18-88.el5]
changelog:
  - [pci] hotplug: PCI Express problems with bad DLLPs (Kei Tokunaga ) [433355]
  - [net] bnx2x: update 5.2 to support latest firmware (Andy Gospodarek ) [435261]
  - [ipsec] use hmac instead of digest_null (Herbert Xu ) [436267]
  - [utrace] race crash fixes (Roland McGrath ) [428693 245429 245735 312961]
  - [x86_64] EXPORT smp_call_function_single (George Beshers ) [438720]
  - [s390] FCP/SCSI write IO stagnates (Jan Glauber ) [437099]
  - [net] ipv6: check ptr in ip6_flush_pending_frames (Neil Horman ) [439059]
  - [nfs] stop sillyrenames and unmounts from racing (Steve Dickson ) [437302]
  - [ppc64] oprofile: add support for Power5+ and later (Brad Peters ) [244719]
  - [agp] add cantiga ids (Geoff Gustafson ) [438919]
  - [x86] oprofile: support for Penryn-class processors (Geoff Gustafson ) [253056]
  - [net] ipv6: fix default address selection rule 3 (Neil Horman ) [438429]
  - [audit] fix panic, regression, netlink socket usage (Eric Paris ) [434158]
  - [net] eHEA: checksum error fix (Brad Peters ) [438212]
  - [s390] fix qeth scatter-gather (Jan Glauber ) [438180]
  - [ata] fix SATA IDE mode bug upon resume (Bhavana Nagendra ) [432652]
  - [openib] update ipath driver (Doug Ledford ) [253023]
  - [openib] update the nes driver from 0.4 to 1.0 (Doug Ledford ) [253023]
  - [openib] IPoIB updates (Doug Ledford ) [253023]
  - [openib] cleanup of the xrc patch removal (Doug Ledford ) [253023]
  - [openib] remove srpt and empty vnic driver files (Doug Ledford ) [253023]
  - [openib] enable IPoIB connect mode support (Doug Ledford ) [253023]
  - [openib] SDP accounting fixes (Doug Ledford ) [253023]
  - [openib] add improved error handling in srp driver (Doug Ledford ) [253023]
  - [openib] minor core updates between rc1 and final (Doug Ledford ) [253023]
  - [openib] update ehca driver to version 0.25 (Doug Ledford ) [253023]
  - [openib] remove xrc support (Doug Ledford ) [253023]
  - [ppc64] hardware watchpoints: add DABRX init (Brad Peters ) [438259]
  - [ppc64] hardware watchpoints: add DABRX definitions (Brad Peters ) [438259]
  - [x86_64] address space randomization (Peter Zijlstra ) [222473]
  - [ppc64] fixes removal of virtual cpu from dlpar (Brad Peters ) [432846]
  - [mm] inconsistent get_user_pages and memory mapped (Brad Peters ) [408781]
  - [s390] add missing TLB flush to hugetlb_cow (Hans-Joachim Picht ) [433799]
  - [xen] HV ignoring extended cpu model field (Geoff Gustafson ) [439254]
  - [xen] oprofile: support for Penryn-class processors (Geoff Gustafson ) [253056]
  - [xen] ia64: HV messages are not shown on VGA console (Tetsu Yamamoto ) [438789]
  - [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [426015]
  - [xen] ia64: fix kernel panic on systems w/<=4GB RAM (Jarod Wilson ) [431001]


author: Don Zickus <dzickus@redhat.com> [2.6.18-89.el5]
changelog:
  - [xen] memory corruption due to VNIF increase (Tetsu Yamamoto ) [441390]
  - [crytpo] use scatterwalk_sg_next for xcbc (Thomas Graf ) [439874]
  - [video] PWC driver DoS (Pete Zaitcev ) [308531]
  - [s390] cio: fix vary off of paths (Hans-Joachim Picht ) [436106]
  - [pci] fix MSI interrupts on HT1000 based machines (Doug Ledford ) [438776]
  - [s390] cio: CHPID configuration event is ignored (Hans-Joachim Picht ) [431858]
  - [x86_64] add phys_base to vmcoreinfo (Muuhh IKEDA ) [439304]
  - [wd] disable hpwdt due to nmi problems (Prarit Bhargava ) [438741]
  - [nfs] fix the fsid revalidation in nfs_update_inode (Steve Dickson ) [431166]
  - [ppc64] SLB shadow buffer error cause random reboots (Brad Peters ) [440085]
  - [xen] check num of segments in block backend driver (Bill Burns ) [378291]
  - [sata] SB600: add 255-sector limit (Bhavana Nagendra ) [434741]
  - [x86_64] fix unprivileged crash on %cs corruption (Jarod Wilson ) [439788]
  - [scsi] qla4xxx: update driver version number (Marcus Barrow ) [439316]
  - [acpi] only ibm_acpi.c should report bay events (Prarit Bhargava ) [439380]
  - [x86] xen: fix SWIOTLB overflows (Stephen C. Tweedie ) [433554]
  - [x86] fix mprotect on PROT_NONE regions (Stephen C. Tweedie ) [437412]
  - [net] ESP: ensure IV is in linear part of the skb (Thomas Graf ) [427248]
  - [x86] fix 4 bit apicid assumption (Geoff Gustafson ) [437820]
  - [sata] SB700/SB800 64bit DMA support (Bhavana Nagendra ) [434741]


author: Don Zickus <dzickus@redhat.com> [2.6.18-90.el5]
changelog:
  - [x86_64] page faults from user mode are user faults (Dave Anderson ) [442101]
  - [ia64] kdump: add save_vmcore_info to INIT path (Neil Horman ) [442368]
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440002]
  - [net] add aes-ctr algorithm to xfrm_nalgo (Neil Horman ) [441425]
  - [x86_64] 32-bit address space randomization (Peter Zijlstra ) [213483]
  - Revert: [scsi] qla2xxx: pci ee error handling support (Marcus Barrow ) [441779]
  - [pci] revert 'PCI: remove transparent bridge sizing' (Ed Pollard ) [252260]
  - [ppc64] eHEA: fixes receive packet handling (Brad Peters ) [441364]


author: Don Zickus <dzickus@redhat.com> [2.6.18-91.el5]
changelog:
  - [scsi] cciss: allow kexec to work (Chip Coldwell ) [230717]
  - [xen] ia64: set memory attribute in inline asm (Tetsu Yamamoto ) [426015]
  - [xen] fix VT-x2 FlexPriority (Bill Burns ) [252236]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.1.el5]
changelog:
  - [xen] netfront: send fake arp when link gets carrier (Herbert Xu ) [447684 441716]
  - [net] fix xfrm reverse flow lookup for icmp6 (Neil Horman ) [447688 446250]
  - [net] negotiate all algorithms when id bit mask zero (Neil Horman ) [447685 442820]
  - [net] 32/64 bit compat MCAST_ sock options support (Neil Horman ) [447687 444582]
  - [misc] add CPU hotplug support for relay functions (Kei Tokunaga ) [447522 441523]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.2.el5]
changelog:
  - [misc] ttyS1 loses interrupt and stops transmitting (Simon McGrath ) [443071 440121]
  - [net] DCCP sanity check feature length (Anton Arapov ) [447395 447396] {CVE-2008-2358}
  - [misc] fix possible buffer overflow in ASN.1 parsing routine (Anton Arapov ) [444464 444465] {CVE-2008-1673}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.3.el5]
changelog:
  - [x86_64] fix possible data leaks in copy_from_user() routine (Anton Arapov ) [433944 433945] {CVE-2008-0598}


author: Anton Arapov <aarapov@redhat.com> [2.6.18-92.1.5.el5]
changelog:
  - [x86_64] copy_user doesn't zero tail bytes on page fault (Vitaly Mayatskikh) [451275 451276] {CVE-2008-2729}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.7.el5]
changelog:
  - [x86_64]: extend MCE banks support for Dunnington, Nehalem (Prarit Bhargava ) [451941 446673]
  - [nfs] address nfs rewrite performance regression in RHEL5 (Eric Sandeen ) [448685 436004]
  - [mm] Make mmap() with PROT_WRITE on RHEL5 (Larry Woodman ) [450758 448978]
  - [i386]: Add check for supported_cpus in powernow_k8 driver (Prarit Bhargava ) [450866 443853]
  - [i386]: Add check for dmi_data in powernow_k8 driver (Prarit Bhargava ) [450866 443853]
  - [net] fix recv return zero (Thomas Graf ) [452231 435657]
  - [misc] kernel crashes on futex (Anton Arapov ) [450336 435178]
  - [net] Fixing bonding rtnl_lock screwups (Fabio Olive Leite ) [451939 450219]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.8.el5]
changelog:
  - [net] randomize udp port allocation (Eugene Teo ) [454571 454572]
  - [tty] add NULL pointer checks (Aristeu Rozanski ) [453425 453154] {CVE-2008-2812}
  - [net] sctp: make sure sctp_addr does not overflow (David S. Miller ) [452482 452483] {CVE-2008-2826}
  - [sys] sys_setrlimit: prevent setting RLIMIT_CPU to 0 (Neil Horman ) [437121 437122] {CVE-2008-1294}
  - [net] sit: exploitable remote memory leak (Jiri Pirko ) [446038 446039] {CVE-2008-2136}
  - [misc] ttyS1 lost interrupt, stops transmitting v2 (Brian Maly ) [455256 451157]
  - [misc] ttyS1 loses interrupt and stops transmitting (Simon McGrath ) [443071 440121]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.9.el5]
changelog:
  - [misc] signaling msgrvc() should not pass back error (Jiri Pirko ) [455278 452533]
  - [ia64] properly unregister legacy interrupts (Prarit Bhargava ) [450337 445886]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.11.el5]
changelog:
  - [mm] xpmem: inhibit page swapping under heavy mem use (George Beshers ) [456946 456574]
  - [xen] HV: memory corruption with large number of cpus (Chris Lalancette ) [455768 449945]
  - [fs] missing check before setting mount propagation (Eugene Teo ) [454392 454393]
  - [openib] small ipoib packet can cause an oops (Doug Ledford ) [447913 445731]
  - [misc] fix race in switch_uid and user signal accounting (Vince Worthington ) [456235 441762 440830]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.12.el5]
changelog:
  - [mm] tmpfs: restore missing clear_highpage (Eugene Teo ) [426082 426083]{CVE-2007-6417}
  - [fs] vfs: fix lookup on deleted directory (Eugene Teo ) [457865 457866]{CVE-2008-3275}
  - [net] ixgbe: remove device ID for unsupported device (Andy Gospodarek ) [457484 454910]
  - [ppc] Event Queue overflow on eHCA adapters (Brad Peters ) [458779 446713]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.13.el5]
changelog:
  - [md] fix crashes in iterate_rdev (Doug Ledford ) [460128 455471]
  - [sound] snd_seq_oss_synth_make_info info leak (Eugene Teo ) [458000 458001] {CVE-2008-3272}
  - [ipmi] control BMC device ordering (peterm@redhat.com ) [459071 430157]
  - [ia64] fix to check module_free parameter (Masami Hiramatsu ) [460639 457961]
  -  [misc] NULL pointer dereference in kobject_get_path (Jiri Pirko ) [459776 455460]
  - [xen] ia64: SMP-unsafe with XENMEM_add_to_physmap on HVM (Tetsu Yamamoto ) [459780 457137]
  - [net] bridge: eliminate delay on carrier up (Herbert Xu ) [458783 453526]
  - [fs] dio: lock refcount operations (Jeff Moyer ) [459082 455750]
  - [misc]  serial: fix break handling for i82571 over LAN (Aristeu Rozanski ) [460509 440018]
  - [fs] dio: use kzalloc to zero out struct dio (Jeff Moyer ) [461091 439918]
  - [fs] lockd: nlmsvc_lookup_host called with f_sema held (Jeff Layton ) [459083 453094]
  - [net] bnx2x: chip reset and port type fixes (Andy Gospodarek ) [441259 442026]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.14.el5]
changelog:
  - [libata] ata_scsi_rbuf_get check for scatterlist usage (David Milburn ) [460638 455445]
  - [net] random32: seeding improvement (Jiri Pirko ) [458021 458019]
  - [x86_64] xen: local DOS due to NT bit leakage (Eugene Teo ) [457721 457722] {CVE-2006-5755}
  - [fs] cifs: fix O_APPEND on directio mounts (Jeff Layton ) [462591 460063]
  - [openib] race between QP async handler and destroy_qp (Brad Peters ) [458781 446109]
  - [net] dccp_setsockopt_change integer overflow (Vitaly Mayatskikh ) [459232 459235] {CVE-2008-3276}
  - [acpi] error attaching device data (peterm@redhat.com ) [460868 459670]
  - [mm] optimize ZERO_PAGE in 'get_user_pages' and fix XIP (Anton Arapov ) [452667 452668] {CVE-2008-2372}
  - [xen] xennet: coordinate ARP with backend network status (Herbert Xu ) [461457 458934]
  - [xen] event channel lock and barrier (Markus Armbruster ) [461099 457086]
  - [fs] fix bad unlock_page in pip_to_file() error path (Larry Woodman ) [462436 439917]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.15.el5]
changelog:
  - [pci] fix problems with msi interrupt management (Neil Horman ) [461894 428696]
  - [x86_64] revert time syscall changes (Prarit Bhargava ) [466427 461184]
  - [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378471 378481] {CVE-2007-5907}
  - [scsi] qla2xxx: additional residual-count correction (Marcus Barrow ) [465741 462117]
  - [char] add range_is_allowed check to mmap_mem (Eugene Teo ) [460858 460857]
  - [fs] binfmt_misc: avoid potential kernel stack overflow (Vitaly Mayatskikh ) [459464 459463]
  - [misc] cpufreq: fix format string bug (Vitaly Mayatskikh ) [459461 459460]
  - [dlm] user.c input validation fixes (David Teigland ) [458759 458760]
  - [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [450335 435291]
  - [x86_64] gettimeofday fixes for HPET, PMTimer, TSC (Prarit Bhargava ) [462860 250708]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.16.el5]
changelog:
  - [i386] vDSO: use install_special_mapping (Peter Zijlstra ) [460275 460276] {CVE-2008-3527}
  - [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl ) [466885 453472]
  - [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464451 464452] {CVE-2008-3833}
  - [fs] open() allows setgid bit when user is not in group (Eugene Teo ) [463867 463687] {CVE-2008-4210}
  - [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [467105 464445]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.19.el5]
changelog:
  - Revert: [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378471 378481] {CVE-2007-5907}
  - Revert: [xen] x86: allow the kernel to boot on pre-64 bit hw (Chris Lalancette ) [470040 468083]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.20.el5]
changelog:
  - [input] atkbd: cancel delayed work before freeing struct (Jiri Pirko ) [461232 461233]
  - [drm] i915 driver arbitrary ioremap (Eugene Teo ) [464508 464509] {CVE-2008-3831}
  - [fs] don't allow splice to files opened with O_APPEND (Eugene Teo ) [466709 466710] {CVE-2008-4554}
  - [xen] x86: allow the kernel to boot on pre-64 bit hw (Chris Lalancette ) [470040 468083]
  - [net] ipv4: fix byte value boundary check (Jiri Pirko ) [469649 468148]
  - [ia64] fix ptrace hangs when following threads (Denys Vlasenko ) [469150 461456]
  - [net] sctp: INIT-ACK indicates no AUTH peer support oops (Eugene Teo ) [466081 466082] {CVE-2008-4576}
  - [input] atkbd: delay executing of LED switching request (Jiri Pirko ) [461232 461233]
  - [xen] ia64: make viosapic SMP-safe by adding lock/unlock (Tetsu Yamamoto ) [467727 466552]
  - [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378471 378481] {CVE-2007-5907}
  - [nfs] v4: don't reuse expired nfs4_state_owner structs (Jeff Layton ) [469650 441884]
  - [nfs] v4: credential ref leak in nfs4_get_state_owner (Jeff Layton ) [469650 441884]
  - [nfs] v4: Poll aggressively when handling NFS4ERR_DELAY (Jeff Layton ) [469650 441884]
  - [xen] ia64: speed up hypercall for guest domain creation (Tetsu Yamamoto ) [459080 456171]
  - [xen] use unlocked_ioctl in evtchn, gntdev and privcmd (Tetsu Yamamoto ) [459080 456171]
  - [xen] page scrub: serialise softirq with a new lock (Tetsu Yamamoto ) [459080 456171]
  - [xen] serialize scrubbing pages (Tetsu Yamamoto ) [459080 456171]
  - [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [450335 435291]
  - [x86_64] xen: fix syscall return when tracing (Chris Lalancette ) [470853 453394]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.22.el5]
changelog:
  - [misc] hugepages: ia64 stack overflow and corrupt memory (Larry Woodman ) [474347 472802]
  - [misc] allow hugepage allocation to use most of memory (Larry Woodman ) [474760 438889]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.23.el5]
changelog:
  - [net] atm: prevent local denial of service (Eugene Teo ) [473700 473701] {CVE-2008-5079}
  - [audit] race between inotify watch removal and unmount (Josef Bacik ) [472328 472329] {CVE-2008-5182}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.26.el5]
changelog:
  - [net] sctp: overflow with bad stream ID in FWD-TSN chunk (Eugene Teo ) [478803 478805] {CVE-2009-0065}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.28.el5]
changelog:
  - [net] udp: socket NULL ptr dereference (Vitaly Mayatskikh ) [519701 518043] {CVE-2009-2698}
  - [net] make sock_sendpage use kernel_sendpage (Jiri Pirko ) [519700 516955] {CVE-2009-2692}
  - [net] r8169: fix crash when large packets are received (Jiri Pirko ) [520007 504732] {CVE-2009-1389}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.29.el5]
changelog:
  - [nfs] r/w I/O perf degraded by FLUSH_STABLE page flush (Peter Staubach ) [521242 498433]
  - [x86_64] suspend to disk fails with >4GB of RAM (Matthew Garrett ) [522737 459980]


author: Jiri Olsa <jolsa@redhat.com> [2.6.18-92.1.31.el5]
changelog:
  - [security] require root for mmap_min_addr (Eric Paris ) [531718 518143] {CVE-2009-2695}
  - [fs] fix pipe null pointer dereference (Jeff Moyer) [533098 530939] {CVE-2009-3547}
  - [scsi] qla2xxx: reduce DID_BUS_BUSY failover errors (Marcus Barrow ) [524179 244967]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.33.el5]
changelog:
  - [scsi] qla2xxx: don't failfast device errors and fix qla2xxx queue full handling (Mike Christie ) [524179 244967]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.34.el5]
changelog:
  - [char] tty: prevent an O_NDELAY writer from blocking (Mauro Carvalho Chehab ) [548074 506806]
  - [fs] fix softlockup in posix_locks_deadlock (Josef Bacik ) [546230 476659]
  - [fs] keep eventpoll from locking up the box (Josef Bacik ) [546231 487585]
  - [nfs] fix hung clients from deadlock in flush_workqueue (David Jeffery ) [546234 483627]
  - [ia64] use current_kernel_time/xtime in hrtimer_start() (Prarit Bhargava ) [546228 485323]
  - [net] fix icmp_send and icmpv6_send host re-lookup code (Jiri Pirko ) [549237 439670] {CVE-2009-0778}
  - [nfs] fix hangs during heavy write workloads (Peter Staubach ) [546233 469848]
  - [sched] fix clock_gettime monotonicity (Peter Zijlstra ) [546227 477763]
  - [nfs] create rpc clients with proper auth flavor (Jeff Layton ) [546236 465456]
  - [net] deadlock in Hierarchical token bucket scheduler (Neil Horman ) [546229 474797]
  - [x86_64] copy_user_c assembler can leave garbage in rsi (Larry Woodman ) [553133 456682]
  - [misc] setpgid returns ESRCH in some situations (Oleg Nesterov ) [546226 472433]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.35.el5]
changelog:
  - [net] e1000: fix rx length check errors (Cong Wang ) [552135 552138] {CVE-2009-4536}
  - [net] r8169: improved frame length filtering (Neil Horman ) [550912 550915] {CVE-2009-4537}
  - [net] e1000e: fix rx length check errors (Jiri Pirko ) [551220 551223] {CVE-2009-4538}
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang ) [549225 548643] {CVE-2007-4567}
  - [misc] personality handling: fix PER_CLEAR_ON_SETID (Vitaly Mayatskikh ) [549236 508842] {CVE-2009-1895}
  - [misc] hrtimer: fix a soft lockup (Amerigo Wang ) [549235 418071] {CVE-2007-5966}
  - [net] e1000: fix skb_over_panic (Neil Horman ) [549234 503441] {CVE-2009-1385}
  - [ia64] fix regression in nanosleep syscall (Prarit Bhargava ) [547299 499289]
  - [misc] hrtimer: check relative timeouts for overflow (AMEET M. PARANJAPE ) [555052 492230]
  - [ptrace] audit_syscall_entry to use right syscall number (Jiri Pirko ) [549238 488002] {CVE-2009-0834}
  - [nfs] handle attribute timeout and u32 jiffies wrap (Jiri Pirko ) [546232 460133]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-92.1.36.el5]
changelog:
  - [net] sctp: backport cleanups for ootb handling V2 (Neil Horman) [555664 555667] {CVE-2010-0008}
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557682 557092]
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [563783 552354]
  - [net] e1000e: fix broken wol (Andy Gospodarek) [559333 557974]
  - [fs] inotify: remove debug code (Danny Feng ) [568662 499019]
  - [fs] inotify: fix race (Danny Feng ) [568662 499019]
  - [x86_64] copy_user_c can zero more data than needed (Vitaly Mayatskikh ) [568305 490938]


author: Don Zickus <dzickus@redhat.com> [2.6.18-83.el5]
changelog:
  - [xen] x86: fix change frequency hypercall (Bhavana Nagendra ) [430938]
  - [xen] resync TSC extrapolated frequency (Bhavana Nagendra ) [430938]
  - [xen] new vcpu lock/unlock helper functions (Bhavana Nagendra ) [430938]


author: Jarod Wilson <jwilson@redhat.com> - 1.101-155.el5
changelog:
  - Fix ia64/elilo boot param updating in firstboot module (bz 220351)
  - Set min/max mem in firstboot module to zero if running on xen kernel


author: Neil Horman <nhorman@redhat.com> - 1.101-156.el5
changelog:
  - Fixing ppc64 memory range sizing (bz 220626)
  - Adding doc content to prevent use of vfat/msdos fs as dump targets


author: Jarod Wilson <jwilson@redhat.com> - 1.101-164.el5
changelog:
  - Touch kdump.conf when kernel-kdump is installed to trigger
    proper kdump initrd creation on ppc64 (bz 217908)


author: Neil Horman <nhorman@redhat.com> - 1.101-192.el5
changelog:
  - Update makedumpfile to version 1.1.1 (bz 248235)
  - reconcile mkdumprd options w/ man page (bz 247493)
  - Fix some doc formatting (bz 247552)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.el5
changelog:
  - Update kdump init script to look for crash kernel reservation in
    /proc/iomem so we can start up on xen kernels too (bz 250803)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.1.el5
changelog:
  - Add support for dumping to partitions on drives attached to cciss
    and cpqarray controllers (bz 228685)
  - Minor updates to kdump initscript for xen kdump support (bz 244301)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.4
changelog:
  - Use PAE kernel for i686 xen kdump if mem > 4GB (bz 284821)
  - Warn users in firstboot if they need kernel-PAE (bz 284841)


author: Dave Young <dyoung@redhat.com> - 1.102pre-156
changelog:
  - check raw partition before starting kdump service, resolve bug 716386.
  - unify network starting code for iscsi, resolve bug 771829.


author: Dave Young <dyoung@redhat.com> - 1.102pre-157
changelog:
  - Handle /var partition automatically, Resolves: bz788678
  - Avoid parsing kdump.conf twice, Resolves: bz788678
  - Replace $config_val with $DUMP_TARGET in net dump, Resolves: bz788678
  - Replace $config_val with $DUMP_TARGET in raw dump, Resolves: bz788678
  - Replace $config_val and $config_opt with $DUMP_TARGET and $DUMP_FSTYPE , Resolves: bz788678
  - document crashkernel=X does not work on RHEL5, Resolves: bz732128
  - add ext* kernel modules, Resolves: bz809983
  - Always add IP address in the crash directory, Resolves: bz752930
  - Add missing default action "shell" in kexec-kdump-howto.txt, Resolves: bz770758


author: Dave Young <dyoung@redhat.com> - 1.102pre-158
changelog:
  - document the supported fs types in kdump.conf man page, Resolves: Bug 813345
  - Add document to suggest using label and uuid, Resolves: bz716340
  - remote dumping fix for restricted shell on remote machine, Resolves: bz801496
  - Warn on non-makedumpfile core collectors for raw dump, Resolves:  Bug 832017


author: Dave Young <dyoung@redhat.com> - 1.102pre-159
changelog:
  - Support multipath dump target, Resolves: bz587361
  - do not add same network device multiple time to "interface" file, Resolves: bz587361


author: Baoquan He <bhe@redhat.com> - 1.102pre-163
changelog:
  - Add makedumpfile manual into rhel5, Resolves: bz919962
  - kdump.init: modify wrongly computing MEMSZ, Resolves: bz919369


author: Jarod Wilson <jarod@redhat.com> -1.102pre-52
changelog:
  - Abort mkdumprd if devices in fstab can't be found (bz 472575)
  - Fix IDE CD-ROM hang fix further, add hdX=noprobe for the
    non-cdrom hdX's (bz 254163)


author: Neil Horman <nhorman@redhat.com> - 1.102pre-72
changelog:
  - Picked up some more fixes for HP systems (bz 277531)
  - Initialized machdep info for dump-dmesg (bz 475414)


author: David Howells <dhowells@redhat.com> - 1.0-1
changelog:
  - Rename library and header file "keyutil" -> "keyutils" for consistency
  - Fix shared library version naming to same way as glibc.
  - Add versioning for shared library symbols
  - Create new keyutils-libs package and install library and main symlink there
  - Install base library symlink in /usr/lib and place in devel package
  - Added a keyutils archive library
  - Shorten displayed key permissions list to just those we actually have


author: David Howells <dhowells@redhat.com> - 1.2-1
changelog:
  - Remove syscall manual pages (section 2) to man-pages package [BZ 203582]
  - Don't write to serial port in debugging script


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-21
changelog:
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-25
changelog:
  - add patch to fix buffer overflow and double-free in rpc library (#239073,
    CVE-2007-2442/CVE-2007-2443)


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-28
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#436460)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#436465)
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#436467)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#436468)
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#436470)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5_1.1
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_2.1
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #461908)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_2.2
changelog:
  - add a backported patch which adds a check on credentials obtained from
    the KDC to make sure that they're of an acceptable type, and if not, retry to
    the request to get one of the right type (Sadique Puthen, #473104)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5_2.3
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546654)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442716)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-28.el5
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)
  - telnet: remove the proviso in the man page which says that the "z" command
    only works in csh, as this is only true on systems where other shells don't
    implement job control (#433947)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.1
changelog:
  - add backport of svn patch to fix a bug in how the gssapi library
    handles certain error cases in gss_accept_sec_context (CVE-2009-0845,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490635, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490635, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#490635, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.4
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546655)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-32.el5
changelog:
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461902)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490636, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491036, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix typo in ksu's reporting of errors getting credentials (#462890)
  - kadmind.init: stop setting up a keytab, as kadmind's been able to use
    the database directly for a while now (#473151)
  - pull up patch to set PAM_RHOST (James Leddy, #479071)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: perform PAM account and session management for the target user;
    authentication is still performed as before (#477033)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-33.el5
changelog:
  - kdb5_util: when renaming a database, if the new name's associated lock
    files don't exist, go ahead and create them (#442879)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_4.1
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_4.2
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#574387)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.3
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578185)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.4
changelog:
  - add candidate patch to correct KDC null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583703)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#602967, #615261)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-36.el5_5.6
changelog:
  - incorporate candidate patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652307)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-46.el5
changelog:
  - add aes256-cts:normal and aes128-cts:normal to the list of keysalts
    in the default kdc.conf (part of #565941)
  - add a note to kdc.conf(5) pointing to the admin guide for the list of
    recognized key and salt types (the rest of #565941)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-47.el5
changelog:
  - pull in fix for RT#5551 to treat the referral realm when seen in a ticket
    as though it were the local realm (#498554, also very likely #450122)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-49.el5
changelog:
  - ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
    accept GSSAPI auth to any service for which we have a matching key (#538075)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-52.el5
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#611713)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5
changelog:
  - incorporate upstream patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5_6.1
changelog:
  - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
    backend (CVE-2011-0281, CVE-2011-0282, #671096)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5_6.2
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#714188)


author: Huzaifa Sidhpurwala <huzaifas@redhat.com> 1.6.1-55.el5_6.3
changelog:
  * Fri Jun 17 2011 Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5_6.2
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#714188)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
    backend (CVE-2011-0281, CVE-2011-0282, #671097)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-57.el5
changelog:
  - ftp: add modified patch from Rogan Kyuseok Lee to report the number of
    bytes transferred correctly when transferring large files on 32-bit
    systems (#648404)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-58.el5
changelog:
  - ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
    lines in /etc/ftpusers (#644215, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-59.el5
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-60.el5
changelog:
  - don't bail halfway through an unlock operation when the result will
    be discarded and the end-result not cleaned up (Martin Osvald, #586032)
  - add a versioned dependency between krb5-server-ldap and krb5-libs (internal
    tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-62.el5
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#712453)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-63.el5
changelog:
  - unbreak processing of multi-line macros (#735363,#736132), broken by the
    original fix for #665833


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-65.el5
changelog:
  - ftpd: add backported patch to check for errors when calling setegid
    (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-66.el5
changelog:
  - add backported patch by way of several people to better avoid false
    detection of replay attacks when talking to systems with coarse time
    resolution (#713500)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-67.el5
changelog:
  - add backported patch by way of jbarbuc to free subkeys created by the
    KDC while processing TGS requests (#708516)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-68.el5
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time, revised
    (#701444, RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-71.el5_10.1
changelog:
  - add patch based on one from Filip Krska to not call poll() with a negative
    timeout when the caller's intent is for us to just stop calling it (#1089732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-72.el5
changelog:
  - add part-backported fix to avoid possible use-after-free when encrypting
    delegated creds (Jatin Nansi, #1004632)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-73.el5
changelog:
  - incorporate backported upstream patch for remote crash of KDCs which serve
    multiple realms simultaneously (RT#7756, CVE-2013-1418/CVE-2013-6800,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-75.el5
changelog:
  - pull in backported fix for denial of service by injection of malformed
    GSSAPI tokens (CVE-2014-4341, #1121509)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-78.el5
changelog:
  - gssapi: pull in upstream fix for a possible NULL dereference in spnego
    (CVE-2014-4344, #1121509)


author: Tomas Smetana <tsmetana@redhat.com> 20060214-1.5
changelog:
  - fix #242879 - memory leak
  - fix #232627 - call to exit(0) returns a status 19 
    to the calling shell script
  - fix #242878 - spins in stopped state
  - fix #243776 - ERR trap causes recursion
  - fix #219420 - unaligned access messages
  - fix #242877 - filesystem acl defaults are ignored
  - fix #278781 - fix handling of sigttou
  - fix #250362 - update manpage about subscript of index array


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-5
changelog:
  - fix #488798 - use 'alternatives' for ksh switching
  - fix #485030 - Umask value not restored when returning from a subshell
  - fix #488934 - ksh does not declare shell variables with hyphen


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-7
changelog:
  - fix unexpected behaviour of typeset [options] name=value
  - resolves: #489516
  - fix alternatives for ksh update, when there wasn't alternatives yet


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-11
changelog:
  - prevent rpmbuild creating debuginfo for %ghost files (#488798)
  - don't segfault for inaccessible history file (#494363)
  - add COMPATIBILITY file to the %doc (#494534)
  - use old language catalog, because the new one is broken (#493570)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-12
changelog:
  - make braces non-optional for ${a[i]} inside [[...]] in the case
    where the argument can be a pattern.


author: Tomas Smetana <tsmetana@redhat.com> 20080202-1
changelog:
  - rebase to the new version
  - fix #371441 - can't display international characters
  - fix #429488 - ksh -R can cause segmentation fault
  - fix #435159 - scripts failing under ksh
  - fix #441557 - the -m option removed from the manual page


author: Tomas Smetana <tsmetana@redhat.com> 20080202-2
changelog:
  - fix #459228 - option -R not clear
  - fix #459566 - segfault on set -o vi
  - fix #456652 - exit shifts vi to background


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-15
changelog:
  - fix wrong array size caused by typeset (#538857)
  - fix pids of forked commands (#520383)
  - fix memcmp-memcpy typo causing syntax error (#538655)


author: Michal Hlavinka <mhlavink@redhat.com> 20091206-1
changelog:
  - updated to 20091211
  - fix looped job list (#435159)
  - fix error code when unsetting a variable that was already unset (#508869)
  - restore shell state when return was used in .profile (#506790)
  - wait for output of background process after foreground's completed (#509326)
  - fix parser failure when alias nested in emacs mode (#513967)
  - don't mention unavailable commands in man pages (#514485)
  - ship RELEASE in doc as change log (#541654)


author: Michal Hlavinka <mhlavink@redhat.com> 20100202-1.3
changelog:
  - fix crash when ksh get SIGPIPE while already executing signal handler
  - fix wrong output redirection in SIGPIPE trap
  - fix wrong typeset handling of arrays that could caused a crash


author: Michal Hlaivnka <mhlavink@redhat.com> 20100202-1.4
changelog:
  - fix crash when unsetting IFS inside a function
  - don't forget to close files including auto loaded function definition
  - fix file io race condition when file was created, but still does not exist


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - fix file descriptor leak (#812930)
  - flush output before forking (#811318)
  - do not create extra process when it's not needed (#804925)
  - assigning a right justified typedef'd variable to a smaller one 
    could corrupt the result (#771188)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-9
changelog:
  - fix exporting of l/r-justified variable (#827522)
  - do not crash when using a lot of file descriptors (#827613)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-13
changelog:
  - do not crash when using a lot of file descriptors (#958195)
  - fix errors in man page (#891503)
  - fix for command substitutions caused regressions, use different fix (#912443)
  - pipe used in command substitution could affect return codes (#892206)
  - prevent fork bomb trigered by SIGSTP (#910923)
  - fix handling of SIGTTOU signal (#888749)
  - fix memory leak when using arrays in functions (#921138)


author: Michal Hlavinka <mhlavink@redhat.com> 20100621-1
changelog:
  - restore tty settings after timed out read (#573936)
  - fix stdin for double command substitution (#584704)
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - ksh did not wait for pipeline to complete when pipefail option was used (#640379)
  - fix bug when here document got sometimes truncated (#644362)
  - completion used after an environment variable reported bad susbstituion error (#647524)
  - do not forget to restore file handles after execution of sourced script (#650998)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - do not change $0 in posix function (#691933)
  - fix man page information about default value for PATH variable (#699641)
  - ksh child exit code not preserved correctly (#699823)
  - ulimit -v limits cpu instead of virtual memory (#712349)
  - wait was returning incorrect value (#726199)
  - fix crash when unsetting IFS inside a function (2nd reproducer) (#727891)
  - Apparent race condition when using pipes in KSH scripts (#736195)
  - lower resolution of file time comparison (#736462)
  - do not create extra process when calling function defined with function
    keyword (#739664)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.5-1
changelog:
  - fix network matching some. Theoretically fixes #212837
  - more SUBCHANNELS related fixing (#204803)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.6-1
changelog:
  - don't actively write configurations on s390, as any new devices already have configs (#204803, continued)
  - correctly ignore backup network device configs


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.9-1
changelog:
  - fix crash on powermac (#216173)
  - fix network configuration for devices that have firmware (#214235)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.12-1
changelog:
  - treat qla4xxx devices as HBAs, even if their PCI class is network (#216881)
  - sync translation (#216600)
  - don't leak fds in scsi probe (#214878, #217742)
  - fix segfault (#217818, #217823)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.14-1
changelog:
  - add support for FBA-DASD (#215423, <dlehman@redhat.com>)
  - forward-port EHEA ethernet support (#226600)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.16-1
changelog:
  - don't edit/move/etc. network configurations with no HWADDR (#288441)
  - handle quoted HWADDR, SUBCHANNELS (#243653)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.18-1
changelog:
  - don't unconfigure s390 network devices (#429594)
  - add support for virtio devices (#446230, <markmc@redhat.com>)
  - blacklist netxen management module (#455041, <mranweil@us.ibm.com>)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.20-1
changelog:
  - ignore network devices such as wmasterX that aren't what we want (#466048, #239825)
  - don't crash looking to see if non-existent modules are loaded (#466501)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.22-1
changelog:
  - add ibmvfc support (#503235, <brking@linux.vnet.ibm.com>)
  - fix USB handling for LG GE20-LU10 drives, among others. (#481799)
  - handle cases where single PCI devices have multiple ethernet devices. (#471657)


author: Bill Nottingham <notting@redhat.com> - 1.2.57.1.25-1
changelog:
  - don't increment internal index for things we can't configure (#579852)
  - always treat devices with identical hw address as the same (#636263)


author: Jaromir Capik <jcapik@redhat.com> - 1.2.57.1.26-2
changelog:
  - fixes #695388 - Kudzu does not report network capabilities of Infiniband devices
  - Resolves: rhbz#695388


author: Jaromir Capik <jcapik@redhat.com> - 1.2.57.1.26-4
changelog:
  - fixes #748481 - Kudzu skips X11 config for video cards w/o a kernel module
  - Resolves: rhbz#748481


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-4
changelog:
  - Remove Apple Public Source License licensed files from the tarball (they
    aren't used anyway since we aren't the Darwin OS, but the license language
    is problematic for people distributing the files regardless) (bz205998)
  - Fix up file conflicts for lam_build_info.h and lam_config.h (bz205218)


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-6
changelog:
  - Fix alternatives setup of mpi.conf in /etc/ld.so.conf.d so we find both
    sets of libs on multilib arches


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-10
changelog:
  - Fix the sed substitutions to be global so they catch all the items
    that need to be substituted
  - RESOLVES: bz240457


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-11
changelog:
  - On upgrade we loose our alternatives links.  This is because of a bug in
    the previous lam package.  Correct our pre/post scripts so the bug will
    no longer exist, but it will require running upgrade twice in order to
    recreate the missing alternatives links.


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-12
changelog:
  - Convert over to use mpi-selector and resolve the alternatives links
    issue once and for all
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-14
changelog:
  - Oops, I had the post/preun scripts attached to the -libs packages, while
    the mpivars.* files mpi-selector needed was installed in the base
    package.  This presented a race condition where the mpivars.* files might
    or might not be present by the time the post script ran.  We attach to the
    right package now.
  - Resolves: bz440397
  - Related: bz428199


author: Jason Vas Dias<jvdias@redhat.com> - 2:7.1.2-1.fc6
changelog:
  - Upgrade to upstream version 7.1.2
  - fix bug 191433 - Split into -libs and -devel packages
    ( apply .spec file patch from Orion Poplawski <orion@cora.nwra.com> )
  - fix bug 194747 - fix BuildRequires for mock


author: Tom "spot" Callaway <tcallawa@redhat.com> 3.0-32
changelog:
  - move to latest upstream 3.0 tarballs
  - add 8 missing BLAS functions from upstream blas tarball (bz 143340)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.15-1.2.2.el5_2.1
changelog:
  - Fix insufficient input validation in ReadEmbeddedTextTag
  - Fix unsigned -> signed integer cast issue in cmsAllocGamma
  - Resolves: #473469


author: Tomas Bzatek <tbzatek@redhat.com> - 1.18-beta1.1.el5_3.1
changelog:
  - Rebase to upstream 1.18beta1
  - CVE-2009-0581 LittleCms memory leak
  - CVE-2009-0723 LittleCms integer overflow
  - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes
  - Resolves: #487513


author: David Walluck <david@anti-microsoft.org> 0:4.1-5jpp
changelog:
  - add Distribution and Vendor tags
  - fix jpackage-utils requirement
  - change gmake to %__make
  - break %description lines


author: Nathan Kinder <nkinder@redhat.com> 0:4.18-1jpp_1rh
changelog:
  - Upgrade to 4.18
  - Use Ant to build instead of make
  - Added ldapfilt and ldapbeans jars to the package


author: Vivek Lakshmanan <vivekl@redhat.com> 0:4.18-2jpp.2
changelog:
  - Add gcj aot-compilation
  - Replace packaged jars with build-system's jars
  - Bring upto Jpackage standards


author: Jindrich Novy <jnovy@redhat.com> 394-2
changelog:
  - apply better fix for #120916 from Avi Kivity (#177819)
    to avoid flickering when '>' is pressed multiple times


author: Nikola Pajkovsky <npajkovs@redhat.com> - 436-3
changelog:
  - Resolves: #579251 - less fails to decompress empty files
  - Resolves: #578289 - less online help is incorrect for the
    descriptions of some options(Jeff Bastian <jbastian@redhat.com>)[IT603793]


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 436-9
changelog:
  - Fix debuginfo source files permissions
  - Fix gcc warning: type-punning to incomplete type might break strict-aliasing rules


author: Jiri Skala <jskala@redhat.com> - 3.7.3-1
changelog:
  - Resolves: #308721 rebase to latest upstream
  - Resolves: #239334 solves CVE-2007-2348
  - Resolves: #422881 fixes bug with -c options
  - Resolves: #434294 fixes bug in (m)put with usage -c option


author: Jiri Skala <jskala@redhat.com> - 3.7.11-1
changelog:
  - Resolves: #468858 - Clean up lftp source code - corrected licensing
  - Resolves: #458777 - License conflict between OpenSSL and GNU GPL v2 licenses in lftp
  - Resolves: #461922 - lftp 'help mirror' does not display all options defined in manpage
  - Resolves: #308721 - re-base to latest upstream 3.7.11


author: Jiri Skala <jskala@redhat.com> - 3.7.11-2
changelog:
  - Resolves: #504591 - Problems with spaces in file names over HTTP
  - Resolves: #504594 - Alias ''edit' has multiple flaws


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.2
changelog:
  - Related: CVE-2010-2251 - describe new option xfer:auto-rename 
    which could restore old behaviour in manpage


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.3
changelog:
  - Related: CVE-2010-2251 - document change of xfer:clobber default
    value in manpage, respect xfer:clobber on with xfer:auto-rename on
    (old behaviour)


author: Ondrej Vasik <ovasik@redhat.com> - 3.7.11-5
changelog:
  - Resolves: CVE-2010-2251 - multiple HTTP client download filename
    vulnerability (#617871)
  - describe new option xfer:auto-rename  which could restore old
    behaviour in manpage


author: Jiri Skala <jskala@redhat.com> - 3.7.11-6
changelog:
  - Resolves: #532099 - lftp doesn't work with ssl
  - Resolves: #570495 - lftp in RHEL 5 doesn't properly implement CCC


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libFS to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libFS to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package.
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libICE to version 0.99.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libICE to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: xorg-x11-proto-devel"
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Adam Jackson <ajax@redhat.com> 1.0.3-8.el5
changelog:
  - libX11-GB18030.patch: Fix the previous patch to unbreak input for non-UTF8
    locales (BIG5, etc.) (#220040)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.3-10.el5
changelog:
  - increase_makekeys.patch: Increase size of working arrays in the makekeys
    utility program to prevent build errors.
  - keysyms.patch: add key symbols for various multimedia keys (#496184)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2.fc6
changelog:
  - Added libX11-nls-indic-locales-bug185376.patch to add support for various
    indic locales which have now been committed upstream (#185376)


author: Mike A. Harris <mharris@redhat.com> 1.0.3-1.fc6
changelog:
  - Updated libX11 to version 1.0.3
  - Remove libX11-1.0.1-setuid.diff as it is included in the 1.0.3 release.
  - Added 'dist' tag to "Release:"


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXScrnSaver to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193424)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-3
changelog:
  - Update build dep to "xorg-x11-proto-devel >= 7.0-9" for scrnsaverproto 1.1
  - Added "Requires: xorg-x11-proto-devel >= 7.0-9" to devel package, to match
    what is listed as required in xscrnsaver.pc


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXTrap to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" for xtrap.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXau to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193422)
  - Replace "makeinstall" with "make install DESTDIR=..." to fix (#192718)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: xorg-x11-proto-devel" needed by xau.pc


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193423)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "BuildRequires: libXt-devel" for (#190169)


author: Mike A. Harris <mharris@redhat.com> 0.3-5
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel >= 7.0-10, libXfixes-devel to devel
    subpackage needed by xcomposite.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.5.1-1
changelog:
  - Updated libXcursor to version 1.1.5.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added default index.theme file to set BlueCurve as the default cursor theme
    to fix bug (#175532).


author: Mike A. Harris <mharris@redhat.com> 1.1.6-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-1
changelog:
  - Updated libXdamage to version 1.0.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 1.0.2.1-1
changelog:
  - Updated libXdamage to version 1.0.2.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.3-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-1" as xcursor.pc indicates
    "damageproto >= 1.0" is required.
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1, libXfixes-devel" to devel
    package also, as per xcursor.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXdmcp to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel"
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xdmcp.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXevie to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package, needed by xevie.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXext to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-3
changelog:
  - Added "Requires: xorg-x11-proto-devel >= 7.0-1" to devel package (#173713)
  - Added "libX11-devel" to devel package (#176078)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 3.0.1-1
changelog:
  - Updated libXfixes to version 3.0.1 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.0.1.1-1
changelog:
  - Updated libXfixes to version 3.0.1.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 4.0.1-2
changelog:
  - Added "BuildRequires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
  - Added "Requires: xorg-x11-proto-devel >= 7.0-7" for "fixesproto >= 4.0"
    to devel package, needed by xfixes.pc
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Soren Sandmann <ssp@redhat.com> 1.2.2-1.0.5.el5
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Benjamin Tissoires <btissoir@redhat.com> 1.2.2-1.0.6
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as twm fails without it, but does not
    check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfontcache to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added new manpages to file manifest.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192720)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 2.1.8.1-1
changelog:
  - Updated libXft to version 2.1.8.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libXrender-devel" to -devel subpackage for (#175465)


author: Mike A. Harris <mharris@redhat.com> 2.1.10
changelog:
  - Updated libXft to version 2.1.10
  - Specify freetype dependencies as >= 2.1.9-1
  - Futureproof builds by adding release number to fontconfig dependencies.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXinerama to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for xinerama.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel, libX11-devel, libXt-devel" to devel
    subpackage needed by xmu.pc, xmuu.pc
  - Remove package ownership of mandir/libdir/etc.


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-5
changelog:
  - Moved Print.h, Printstr.h and printproto.pc into the devel package here
    (they used to be in xorg-x11-proto-devel).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add patch to not check for printproto.pc. (Since it's part of this
    package now, it isn't installed at the time libXp is configured).


author: Soren Sandmann <sandmann@redhat.com> - 1.0.0-6
changelog:
  - Add the proto files directly instead of attempting to build a separate
    tarball. Also remove last traces of printproto-1.0.3.tar.gz


author: Mike A. Harris <mharris@redhat.com> 1.0.0-4
changelog:
  - Renamed libXp_deprecated rpm macro to "with_devel" to avoid confusion.  This
    library is still deprecated, we just decided to remove the word "deprecated"
    from the package name for library naming consistency.


author: Mike A. Harris <mharris@redhat.com> 3.5.4-1
changelog:
  - Updated libXpm to version 3.5.4 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 3.5.4.1-1
changelog:
  - Updated libXpm to version 3.5.4.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libX11-devel" to devel subpackage as xpm.h includes various
    X headers. (#174163)
  - Added missing build dep libXau-devel


author: Mike A. Harris <mharris@redhat.com> 3.5.5-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193427)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.1.0.1-1
changelog:
  - Updated libXrandr to version 1.1.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193428)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192724)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.9.0.1-1
changelog:
  - Updated libXrender to version 0.9.0.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.9.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193429)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXres to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193502)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192725)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193503)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Adam Jackson <ajackson@redhat.com> 1.0.2-2
changelog:
  - Added libXt-1.0.2-libsm-fix.patch to remove libSM from the Requires: line
    in the installed pkgconfig file.  Apps should link against libSM if they
    need it, but we shouldn't force them to link against it if they don't.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3.fc6
changelog:
  - Add the {_datadir}/X11/app-defaults directory to the file manifest, as
    libXt is the canonical owner of the directory.  Discovered in (#198025).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXtst to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXtst to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193504)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXvMC to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193506)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Touch XvMCConfig during install phase, and add to file manifest as a ghost
    file, so that it is owned by the package if the user creates it. (#192254)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXxf86dga to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193507)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192728)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86misc to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193508)
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192729)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXxf86vm to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193509)
  - Use "make install DESTDIR=..." instead of makeinstall macro, to fix (#192731)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-4
changelog:
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  This fixes the wrong SONAME problem by keeping a library around with
    the wrong name (libaio.so.1.0.0) and generating a new one (libaio.so.1.0.1).


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.106-2
changelog:
  - Update to the latest sources, which contain the following change:
    Add a .proc directive for the ia64_aio_raw_syscall macro.  This sounds a lot
    like the previous entry, but that one fixed the __ia64_raw_syscall macro,
    located in syscall-ia64.h.  This macro is in raw_syscall.c, which pretty much
    only exists for ia64.  This bug prevented the package from building with
    newer version of gcc.


author: Florian La Roche <laroche@redhat.com>
changelog:
  - make sure librom1394 is linked to libraw1394 and also
    libavc1394 is linked to librom1394 (also bz 156938)


author: Ray Strode <rstrode@redhat.com> 2.16.0-1.1
changelog:
  - Tie bonobo-activation-server to session if the
    BONOBO_ACTIVATION_RUN_SERVER_PER_SESSION environment variable
    is set.
    Resolves: #641814


author: Nalin Dahyabhai <nalin@redhat.com> 2002e-17
changelog:
  - account for the /usr/share/ssl -> /etc/pki/tls move in the patch which
    sets the locations at compile-time (more of #165967)


author: Jonathan Kamens <jik@kamens.brookline.ma.us> 2004g-1
changelog:
  - Upstream version 2004g (#176974)
  - Remove obsolete doc file "WARNING"
  - Remove security patch included in new upstream version
  - Custom flock code no longer necessary; included in upstream


author: Karsten Hopp <karsten@redhat.de> 1.10-24
changelog:
  - added development manpages
  - as there are no manpages for the executables available, added at least
    a FAQ (#172324)


author: Caius Chance <cchance@redhat.com> - 0.3.0-8.el5
changelog:
  - Resolves: rhbz#219431 (Up arrow button in candidate window doesn't work.)
  - Resolves: rhbz#220290 (Candidate list (symbol) page change inaccuracy.)
  - Resolves: rhbz#218565 (Candidate list not cleared before re-display.)
    <<< rhbz#220288 is replaced by rhbz#218565.


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2
changelog:
  - Obsolete the old -devel package (which really was just a static
    lib, no real devel environment, hence the name change to -static)
  - Resolves: bz432769


author: Doug Ledford <dledford@redhat.com> - 1.1.4-1
changelog:
  - Update to 1.1.4 to match OFED 1.3
  - Add a modprobe conf file in /etc/modprobe.d so that the iw_cxgb3 module
    will always be loaded after the cxgb3 net module
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.3.1-2.el5
changelog:
  - Bump and rebuild against latest libibverbs
  - Modify Provides for libibverbs-driver to be arch specific to match
    what libibverbs expects
  - Related: bz802619


author: Doug Ledford <dledford@redhat.com> - 1.2.0-2
changelog:
  - Bump and rebuild against new libibvers
  - Update Provides libibverbs-driver to include arch as libibverbs expects
  - Related: bz802620


author: Tom Lane <tgl@redhat.com> 0.7.2-1
changelog:
  - Import new libdbi version, splitting libdbi-drivers into a separate SRPM
    so we can track new upstream packaging.


author: David Cantrell <dcantrell@redhat.com> - 1.9-1
changelog:
  - Added IP_STRLEN() macro to ip_addr.h
  - In pumpSetupInterface(), removed return_ok, make close/free calls as
    needed
  - Close and free nic stuff in the right order in pumpSetupInterface()
  - Removed unnecessary relinquish_timeout() calls in pumpSetupInterface()


author: David Cantrell <dcantrell@redhat.com> - 1.10-1
changelog:
  - Make the README file a little more readable
  - Set char pointers to NULL after free() in dhcpv4_control_free()
  - In dhcp4_nic_callback(), set state string for DHC_TIMEDOUT
  - In dhcp6_nic_callback(), set state string for DHC_TIMEDOUT
  - Don't free null pointers in dhcp_nic_va()


author: David Cantrell <dcantrell@redhat.com> - 1.13-1
changelog:
  - Use NULL for pointer initialization rather than 0
  - Code readability cleanups
  - Do not generate Doxygen docs or examples subdir for each build, which
    corrects the multilib RPM conflicts (#210574).


author: David Cantrell <dcantrell@redhat.com> - 1.20-2
changelog:
  - Request and handle static-routes option for IPv4 requests
  - Resolves: rhbz#236936
  - libdhcp-devel obsoletes pump-devel <= 0.8.24
  - Resolves: rhbz#238866


author: David Cantrell <dcantrell@redhat.com> - 1.20-10
changelog:
  - Fix loader SIGSEGV when getting an IP address
    Resolves: rhbz#500775
  - Fix problem when configuring interface and receiving EBUSY from libnl
    Resolves: rhbz#444919


author: David Cantrell <dcantrell@redhat.com> - 1.20-12
changelog:
  - Do not pass invalid flags to rtnl_link_set_flags()
    Resolves: rhbz#616865
  - Iterate over libnl nic cache use nl_cache_get_first() and
    nl_cache_get_next() to keep index numbers in sequence.
    Resolves: rhbz#599633


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libdmx to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.2-3
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Added "Requires: xorg-x11-proto-devel" to devel for dmx.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 2.0-1
changelog:
  - Updated libdrm to version 2.0 from dri.sf.net.  This is an ABI incompatible
    release, meaning everything linked to it needs to be recompiled.


author: Mike A. Harris <mharris@redhat.com> 2.0-2
changelog:
  - Replaced the temporary tongue-in-cheek humourous package summary and
    description with the proper package descriptions, as many people didn't get
    the joke, while others felt it was getting old.  Ah well, I had my fun for
    a while anyway.  ;o)


author: Mike A. Harris <mharris@redhat.com> 2.0.1-4
changelog:
  - Added "Exclusivearch: ix86, x86_64, ia64, ppc, alpha, sparc, sparc64" to
    restrict build to DRI-enabled architectures.


author: Matthias Saou <http://freshrpms.net/> 0.104-1
changelog:
  - Update to 0.104 at last (#147311)
  - Include no-exec-stack, pic-fix, amd64reloc and gtk2 patches from Gentoo
    and PLD (merge gcc4 fix to the pic-fix patch).
  - Now build against gtk2 (thanks to the patch above).
  - Exclude static library.


author: Richard Hughes <rhughes@redhat.com> - 0.6.20-1.el5_7.1
changelog:
  - Update to 0.6.20
  - Repackage a newer version of libexif-docs
  - Convert doc files to utf-8
  - Update the license field
  - Resolves: #689614


author: Richard Hughes <rhughes@redhat.com> - 0.6.21-1
changelog:
  - Update to version 0.6.21 fixing many bugs and CVEs
  - Remove upstreamed patches
  - Resolves: #839913


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libfontenc to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated libfontenc to version 1.0.0 from X11R7 RC4
  - Added libfontenc-1.0.0-get-fontdir-from-pkgconfig.patch which now replaces
    libfontenc-0.99.2-use-datadir-for-encodings.patch by using pkgconfig to
    query fontutil.pc for fontdir.
  - Added "BuildRequires: font-utils >= 1.0.0" to find fontutil.pc
  - Removed libfontenc-0.99.2-use-datadir-for-encodings.patch


author: Mike A. Harris <mharris@redhat.com> 1.0.2-2
changelog:
  - Remove package ownership of mandir/libdir/etc.
  - Added "BuildRequires: autoconf" temporarily as long as autoconf is needed


author: Stepan Kasal <skasal@redhat.com> - 2.12.3-2
changelog:
  - Move the pkgconfig file to the devel package.
  - BuildRequire docbook-utils and java-1.4.2-gcj-compat-devel
  - BuildReq gtk2-devel (a temporary workaround).


author: Stepan Kasal <skasal@redhat.com> - 2.12.4-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - The -devel subpackage now requires several -devel packages.
  - Update requires and buildrequires.
  - Remove macros c_pkg_prefix and java_pkg_prefix and the code for optional
    instalation under /opt/frysk prefix.


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-2
changelog:
  - remove file conflicts in libgcrypt-config by making the 64-bit version
    think the libraries are in /usr/lib (which is wrong, but which it also
    prunes from the suggest --libs output, so no harm done, hopefully)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1
  - bump libgpgerror-devel requirement to 1.4, matching the requirement enforced
    by the configure script


author: Tomas Mraz <tmraz@redhat.com> 1.4.4-1
changelog:
  - update to 1.4.4 (#444803)
  - do not abort when the fips mode kernel flag is inaccessible
    due to permissions
  - hobble the library to drop the ECC support
  - add hmac FIPS integrity verification check


author: Stepan Kasal <skasal@redhat.com> - 2.12.5-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel subpackage.
  - The -devel subpackage now requires several -devel packages.
  - Update requires and buildrequires.


author: Mike A. Harris <mharris@redhat.com> 2.15.1-3.fc6
changelog:
  - Update utempter dependency and rebuild to ensure new libutempter is used.
  - Change BuildRoot to comply with Fedora packaging guidelines.
  - Change legacy style PreReqs to Requires({pre,post,postun}) style and update


author: Ben Konrath <bkonrath@redhat.com> - 2.12.2-1
changelog:
  - Add -X to src zip and ensure Config.java has the same mod time across
    platforms - needed for multilib.


author: Kristian Høgsberg <krh@redhat.com> 2.12.1-4
changelog:
  - Spec file clean-ups from from Matthias Saou (#172923):
    - Explicitly disable rpath.
    - Exclude static modules from the main package.
    - Exclude static libraries from the devel package (useless).
    - Don't own entire /usr/share/gtk-doc.
    - Remove explicit pre/post /sbin/ldconfig deps (they're automatic with -p).
    - Change PreReqs to more correct Requires.
    - Fix devel summary.
    - Add _smp_mflags to build.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-3
changelog:
  - give gpg-error-config libdir=@exec_prefix@/lib instead of @libdir@, so that
    it agrees on 32- and 64-bit arches (it suppresses the -L argument if @libdir@
    is /usr/lib, so this should be cleaner than adding a non-standard .pc file
    which upstream developers might inadvertently think they can depend to be on
    every system which provides this library)


author: Stepan Kasal <skasal@redhat.com> - 2.8.6-4
changelog:
  - Fix the source packing: preserve source timestamps and prevent multilib
    conflicts. (#192709)
  - Add BuildRequires: antlr, at least temporarily.


author: Stepan Kasal <skasal@redhat.com> - 2.8.7-1
changelog:
  - Fix multilib conflicts in %{docdir}. (#210566)
  - New upstream version, contains only doc changes.
  - Move development documentation to -devel.


author: Andrew Cagney <cagney@redhat.com> - 2.8.7-2
changelog:
  - Fix Drawwable.c so that regions are eventually free'd using
    gdk_region_destroy, and not g_free. (#210680)


author: Stepan Kasal <skasal@redhat.com> - 2.8.7-3
changelog:
  - Add libgtk-java-no-libdir.patch and do not pack doc/api to resolve
    multilib problems.
  - Resolves: #222726.


author: Jan Zeleny <jzeleny@redhat.com> - 2.2-3
changelog:
  - minor changes in spec file - filenames change, removal of
    duplicate patch files (included in build source tarball)


author: Jan Zeleny <jzeleny@redhat.com> - 1.0.7-3
changelog:
  - replaced unofficial 1.0.7 source tarball with official one
  - update of Makefile, part of it moved to postinstall section
    of spec file


author: Nils Philippsen <nphilipp@redhat.com> - 1.2-1
changelog:
  - version 1.2 (#253115)
  - move libraries back to main package as hugetlbd was removed, obsolete and
    conflict libhugetlb-lib


author: Nils Philippsen <nphilipp@redhat.com> - 1.2-4
changelog:
  - add "Provides/Requires: libhugetlbfs-%{arch} ..." to base and -devel
    packages to avoid upgrade problems on multilib systems (#432799)
  - change license tag to LGPLv2+


author: Doug Ledford <dledford@redhat.com> - 1.2.0-1.el5
changelog:
  - Update to the latest (and last) upstream release.  This library is now
    deprecated and users should not expect any further updates.  In addtion,
    users are strongly encouraged to discontinue use of this library as it may
    disappear in the future.
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.3.3-1.el5
changelog:
  - Update to latest upstream source
  - Remove dependence on libibcommon since we no longer use it
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.3.7-1.el5
changelog:
  - Backport rhel6.3 version to rhel5.9 (adds FDR support)
  - Related: bz771441 (updated mlx4 driver with FDR support)


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Initial import to RHEL-4 based upon Roland Drier's FC-4 package
  - Add /usr/lib/infiniband as an rpm owned directory and add a
    config entry to /etc/ld.so.conf.d


author: Doug Ledford <dledford@redhat.com> - 1.1.2-1
changelog:
  - Update to latest upstream version
  - Add ppc wmb patch
  - Add requires on openib base package
  - Resolves: bz451453, bz459521


author: Doug Ledford <dledford@redhat.com> - 1.1.2-2.el5.xrc
changelog:
  - Update to ofed-1.4.1-rc3 libibverbs, which has xrc support in the tarball
    even though it has the same version release as Roland's upstream tarball,
    and Roland's upstream tarball does *not* have xrc support yet, so
    rename the tarball appropriately.
  - Remove unneeded patch
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.1.2-3.el5
changelog:
  - Remove XRC support since it's likely to change during integration with
    upstream sources
  - Compile with valgrind support (all except ia64 where valgrind doesn't
    exist)
  - Resolves: bz506258, bz504284


author: Doug Ledford <dledford@redhat.com> - 1.1.6-1.el5
changelog:
  - Backport latest rhel6 libibverbs to rhel5
  - Update build requires for new valgrind packaging
  - Related: bz787610
  - Resolves: bz578640


author: Doug Ledford <dledford@redhat.com> - 1.1.6-2.el5
changelog:
  - Change the static package back to the right name so that the multilib
    setup is not fooled (build system requirement)
  - Related: bz771441


author: Doug Ledford <dledford@redhat.com> - 1.1.6-3.el5
changelog:
  - Keep ibv_rc_pingpong test from failing when given a size argument
    outside of reason
  - Resolves: bz571779


author: Doug Ledford <dledford@redhat.com> - 1.0-3
changelog:
  - Add a modprobe conf file so that the mlx4 IB driver will get loaded after
    the core driver is loaded
  - Related: bz428197


author: Doug Ledford <dledford@redhat.com> - 1.0-5.el5.xrc
changelog:
  - Add xrc support from OFED 1.4.1-rc3
  - Add support for setting port types at core module load time
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.0.1-1.el5
changelog:
  - Update to upstream bug fix release
  - Compile against non-XRC libibverbs
  - Enable valgrind annotations
  - Related: bz506258, bz504284
  - Resolves: bz505553


author: Doug Ledford <dledford@redhat.com> - 1.0.1-3.el5
changelog:
  - Pull various fixes out of upstream git repo that are queued for next release
  - Resolves: bz511190
  - Related: bz518218


author: Jay Fenlason <fenlason@redhat.com> 1.0.1-6.el5
changelog:
  - change build-requires from valgrind to valgrind-devel to make this
    actually build
    Related: bz670887 Add new PCI IDs to libmlx4


author: Doug Ledford <dledford@redhat.com> - 1.0.5-2.el5.xrc
changelog:
  - Update tarball to ofed 1.4.1-rc3 tarball so it compiles cleanly with the
    xrc enabled libibverbs
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.0.5-5.el5
changelog:
  - Update to new libibverbs API
  - Pick up currently accepted but not yet released patches from upstream repo
  - Related: bz518218


author: John (J5) Palmieri <johnp@redhat.com> 2.1.1-1
changelog:
  - Update to upstream version 2.1.1
  - Removed libmusicbrainz-2.0.2-missing-return.patch
  - Removed libmusicbrainz-2.0.2-conf.patch


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Upstream has updated the libnes tarball without changing the version.  Pick
    up the libnes-0.5.tar.gz tarball that's dated 13-Jun-2008
  - Resolves: bz451470


author: Doug Ledford <dledford@redhat.com> - 0.5-5.el5
changelog:
  - Fix a minor memleak (from upstream)
  - Rebuild against libibverbs that has xrc support
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 0.6-1.el5
changelog:
  - Build against non-XRC libibverbs
  - Update to ofed 1.4.1 final bits
  - Remove no longer needed memleak patch
  - Related: bz506258, bz506097


author: Jason Vas Dias <jvdias@redhat.com> 1.0-0.9.pre5
changelog:
  - Allow build to succeed with new gcc / glibc-kernheaders
    (compile failed on __u64 redefinition on x86_64).
  - Add a static /usr/lib/libnl.a library to libnl-devel for
    programs that might need to do a static link to libnl.
    Added after consultation with Christopher Aillon.


author: Luke Macken <lmacken@redhat.com> - 0.4.2-3
changelog:
  - Add upstream patch libnotify-0.4.2-status-icon.patch to emit the correct
    property change notification 'status-icon' instead of 'attach-icon'


author: Christopher Aillon <caillon@redhat.com> - 0.4.2-4
changelog:
  - Add upstream patch (r2899) to correct an invalid assertion when
    creating notifications using status icons


author: Colin Walters <walters@redhat.com> 2:1.1.2-1
changelog:
  - Update to 1.1.2
  - Delete upstreamed libogg-1.1-64bit.patch
  - Delete upstreamed libogg-underquoted.patch


author: Matthias Saou <http://freshrpms.net/> 0.3.5-3
changelog:
  - Sync spec files across branches.
  - Parallel make seems to have worked for 0.3.5 on devel, but just in case...


author: Matthias Saou <http://freshrpms.net/> 0.3.7.1-1
changelog:
  - Update to today's CVS code which should fix the PPC build issue.
  - Include new oil-bugreport tool in the devel package.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Make sure that CFLAGS in pfmlib/lib/ is used.
  - Separate build and install processes.
  - Clean up the descriptions.


author: Will Cohen <wcohen@redhat.com>
changelog:
  - Avoid pulling in the example ELF executable into /usr/share. (#198001)
  - Mark man pages as documentation.


author: Tom Lane <tgl@redhat.com> 2:1.2.10-10
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337531
  - Update License tag and some other obsolete bits in specfile


author: Tom Lane <tgl@redhat.com> 2:1.2.10-12
changelog:
  - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
    CVE-2010-2249
  Resolves: #609922


author: Tom Lane <tgl@redhat.com> 2:1.2.10-13
changelog:
  - Back-port fixes for CVE-2011-2690, CVE-2011-2692
    Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
    likewise for CVE-2011-2501
  Resolves: #721304


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.0.3
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337521
  - Update License tag and some other obsolete bits in specfile


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.1.el5_5.3
changelog:
  - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
    CVE-2010-2249
  Resolves: #609921


author: Tom Lane <tgl@redhat.com> 2:1.2.10-7.1.el5_7.4
changelog:
  - Back-port fixes for CVE-2011-2690, CVE-2011-2692
    Note: CVE-2011-2691, announced at the same time, does not apply to 1.2.10;
    likewise for CVE-2011-2501
  Resolves: #721303


author: Doug Ledford <dledford@redhat.com> - 1.0.8-4.el5
changelog:
  - Rename tarball to reflect that it's from the OFED 1.4.1 package as the md5sum
    of the ofed version of this tarball and the upstream version of the
    same tarball differ


author: Doug Ledford <dledford@redhat.com> - 1.1.99-10
changelog:
  - Add an epoch back in (evidently when libsdp was part of the openib package
    it had an epoch that was missed when it was split out)
  - Resolves: bz448733


author: Doug Ledford <dledford@redhat.com> - 1.1.99-10
changelog:
  - Add an epoch back in (evidently when libsdp was part of the openib package
    it had an epoch that was missed when it was split out)
  - Resolves: bz451637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
changelog:
  - Fix python selinux module segfault in getfilecon
  - Fix get_default_context_with_level
  Resolves: #224637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-5.1
changelog:
  - Break out utilities into separate package so rpm -V libselinux will work
  - Stop writing to stderr when matchpathcon has an error
  Resolves: #190314


author: Miroslav Grepl <mgrepl@redhat.com> - 1.33.4-5.6
changelog:
  - Add
    - selinux_virtual_domain_context_path
    - selinux_virtual_image_context_path
  Resolves:#582612


author: Dan Walsh <dwalsh@redhat.com> - 1.6.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged separate local file contexts patch from Chris PeBenito.
  	* Merged patch to make most copy errors non-fatal from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.16-1
changelog:
  - Upgrade to latest from NSA
  	* Make most copy errors fatal, but allow exceptions for
  	  file_contexts.local, seusers, and netfilter_contexts if
  	  the source file does not exist in the store.


author: Dan Walsh <dwalsh@redhat.com> - 1.6.17-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to skip reload if no active store exists and
  	  the store path doesn't match the active store path from Dan Walsh.
  	* Merged patch to not destroy sepol handle on error path of
  	  connect from James Athey.
  	* Merged patch to add genhomedircon path to semanage.conf from
  	  James Athey.


author: Dan Walsh <dwalsh@redhat.com> - 1.9.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to compile wit -fPIC instead of -fpic from
  	  Manoj Srivastava to prevent hitting the global offest table
  	  limit. Patch changed to include libselinux and libsemanage in
  	  addition to libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.12.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged libsepol unit tests from Joshua Brindle.
  	* Merged symtab datum patch from Karl MacMillan.
  	* Merged netfilter contexts support from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.12.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged conditionally expand neverallows patch from Jeremy Mowery.
  	* Merged refactor expander patch from Jeremy Mowery.


author: Dan Walsh <dwalsh@redhat.com> 1.12.26-1
changelog:
  - Upgrade to latest from NSA
  	* Merged range transition enhancements and user format changes
  	  Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.12.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged mls user and range_transition support in modules
  	  from Darrel Goeddel


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix for version comparison that was preventing range
  	  transition rules from being written for a version 5 base policy
  	  from Darrel Goeddel.


author: Dan Walsh <dwalsh@redhat.com> 1.15.2-1.el5
changelog:
  - Upgrade to latest from NSA
  	* Merged fix from Karl MacMillan for a segfault when linking
  	  non-MLS modules with users in them.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-3
changelog:
  - Mark libtalloc as conflicting with samba3x
  - The custom version of libtalloc required by samba3x is custom and
  - incompatible with the compat lib.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-11
changelog:
  - Resolves: rhbz#643038 - libtalloc needs to support the older library for
  -                         backward compatibility


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-13
changelog:
  - Run 'make test' during RPM build
  - Resolves: rhbz#837853 - talloc doesn't ensure that the sibling linked list
                            remains valid during a free


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-1
changelog:
  - Rebase to 2.0.7
  - Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                            the latest bug fixes


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.7-2
changelog:
  - Mark libraries as executable so that they are stripped and included
    in the -debuginfo
  - Resolves: rhbz#855862 - Rebase libtalloc to version 2.0.7 to pick
                            the latest bug fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-6
changelog:
  - Resolves: rhbz#693785 - tdb_extend() can cause a memory-usage explosion if
  -                         the size of its entries are very large


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.10-1
changelog:
  - Rebase to version 1.2.10 to support new samba 3.6.6
  - Resolves: rhbz#837865 - Rebase libtdb to version 1.2.10 in RHEL 5.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-41
changelog:
  - don't trip over capabilities which end in '^' or '\'
  - don't accept numbers with '8' or '9' in them as valid octal numbers


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-1
changelog:
  - Resolves: rhbz#951045 - Rebase libtevent to version 0.9.18
  - Relax libtalloc requirements - only require 2.0.7 and do not check for
    pytalloc presence if python is disabled
  - Drop the ABI compatibility patch (no longer needed)
  - Drop the tevent_signal segv patch (upstreamed)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.18-2
changelog:
  - Resolves: rhbz#975488 - Additional flags might have no effect
                            on 32bit architectures


author: Colin Walters <walters@redhat.com> - 1.0alpha4-1
changelog:
  - New upstream version 1.0alpha4 
  - Remove upstreamed patch libtheora-1.0alpha3-include.patch 
  - Use Theora_I_spec.pdf for spec
  - Add in .pc file (yay! another library sees the light)


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Tom Lane <tgl@redhat.com>
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458813
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460034


author: Tom Lane <tgl@redhat.com> 3.8.2-9
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507726
  - Update upstream URL


author: Tom Lane <tgl@redhat.com> 3.8.2-13
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688828
  - Add fix for CVE-2011-1167
  Resolves: #688745


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885308


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885309


author: Petr Hracek <phracek@redhat.com> - 3.8.2-19
changelog:
  - Resolves: #1063460 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244
    libtiff various flaws


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.1
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458812
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460120


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5.3
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507725
  - Update upstream URL


author: Tom Lane <tgl@redhat.com> 3.8.2-7.el5_6.7
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688827
  - Add fix for CVE-2011-1167
  Resolves: #688744


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Karsten Hopp <karsten@redhat.com> 1.5.22-7
changelog:
  - add fix for CVE-2009-3736,
    libltdl may load and execute code from a library in the current directory


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-1
changelog:
  - 0.1.11
  - require pkgconfig, package libusb.pc
  - fix printf format in linux.c so that libusb can be built with -Werror (default)


author: Jindrich Novy <jnovy@redhat.com> 0.1.11-2
changelog:
  - change device search order, /dev/bus/usb is tried first,
    then /proc/bus/usb, and never try /sys/bus/usb (#178994)


author: Jindrich Novy <jnovy@redhat.com> 0.1.12-3
changelog:
  - use pkg-config calls in libusb-config instead of hardcoded
    defaults to avoid multiarch conflicts (#192714)


author: Miloslav Trmač <mitr@redhat.com> - 0.54.7-2.el5.3
changelog:
  - When changing passwords, only silently ignore known shadow markers, not all
    invalid hashes
    Resolves: #225495
  - Update the last password change date field when changing passwords
    Resolves: #243854


author: Miloslav Trmac <mitr@redhat.com> - 0.54.6-1
changelog:
  - Fix bugs in handling of invalid lines in the files and shadow modules
  - Fix pattern matching in lu_*_enumerate_full in the files and shadow modules
  - Add more error reporting, return non-zero exit status on error from utils
  - Use the skeleton directory specified in libuser.conf by Python
    admin.createHome and admin.addUser, add parameter skeleton= to admin.addUser
    (#189984)


author: Miloslav Trmač <mitr@redhat.com> - 0.54.7-3
changelog:
  - Default commonName to user name if gecos is empty
    Resolves: #670279
  - Fix segfault when reading database files with certain sizes
    Resolves: #758117


author: Dmitry V. Levin <ldv@altlinux.org> 1.1.4-alt1
changelog:
  - Enabled almost all diagnostics supported by gcc and fixed all
    issues found by gcc-3.4.4-alt3.
  - Added FreeBSD support, based on patches from Gentoo/FreeBSD.
  - Makefile:
    + Fixed few portability issues reported by Gentoo developers.
  - libutempter: Linked with -Wl,-z,defs.
  - utempter:
    + Fixed struct utmp initialization on 64-bit architectures
      with 32-bit backwards compatibility enabled (like x86_64).
    + Linked with -Wl,-z,now, i.e., marked it to tell the dynamic
      linker to resolve all symbols when the program is started.
      Suggested by Gentoo developers.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-1.fc6
changelog:
  - Initial build of Dimitry's libutempter replacement for Fedora Core.
  - Reworked the upstream spec file for Fedora packaging compliance.
  - Removed static lib subpackage as we dont ship those.


author: Mike A. Harris <mharris@redhat.com> 1.1.4-2.fc6
changelog:
  - Removed usage of rpm macros inside the spec changelog (#200051)
  - Removed non-UTF-8 chars from changelog.


author: Dan Smith <danms@us.ibm.com> - 0.3-4
changelog:
  - Fixed loader config for 64-bit systems
  - Added missing root/interop schema install
  - Added RegisteredProfile.registration to install


author: Daniel Veillard <veillard@redhat.com> - 0.5.1-1.el5
changelog:
  - Updated to 0.5.1 upstream release
  - added a bunch of extra patches present upstream and in Fedora
  - Resolves: rhbz#438555


author: Daniel Veillard <veillard@redhat.com> - 0.5.5-1.el5
changelog:
  - Rebase against new upstream release 0.5.5 fixing some leaks
  - Resolves: rhbz#474681
  - fix an unowned directory
  - Resolves: rhbz#481810


author: Daniel Veillard <veillard@redhat.com> - 0.5.7-1.el5
changelog:
  - Update to 0.5.7 upstream
  - update spec file accordingly
  - 4 patches for plugging leaks and a segfault
  - add support for ACPI, PAE and APIC
  - Resolves: rhbz#512233


author: Daniel Veillard <veillard@redhat.com> 0.1.8-6.el5
changelog:
  - save the amount of current memory used when dumping XML if different from
    maximum amount, and use that when restarting the domain from the XML,
    rhbz#214354
  - when using a pygrub bootloader, strip the os informations because xend
    assumes they take precedence over bootloader, rhbz#214741
  - Resolves: rhbz#214354 rhbz#214741


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Veillard <veillard@redhat.com> 0.2.3-1.el5
changelog:
  - Upgrade to version 0.2.3 for RHEL-5.1
  - Resolves: rhbz#243463
  - Resolves: rhbz#222704
  - Resolves: rhbz#224415
  - Resolves: rhbz#225566
  - Resolves: rhbz#225567
  - Resolves: rhbz#229176
  - Note: 0.2.3 is really supposed to work with dnsmask which is not 
    available at the moment in RHEL-5


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-8.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - removal of extra_release macro
  - Resolves: rhbz#436803
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - fix a hash table bug
  - Resolves: rhbz#448533


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-9.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - XML string escaping in xm driver
  - Resolves: rhbz#428879


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-14.el5_3.1
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1.el5
changelog:
  - Update to 0.3.3
  - Avahi support
  - NUMA support
  - APIs for collecting statistics on disks and interfaces
  - API for domains migration
  - localtime clock support
  - PS/2 and USB input devices
  - Secure remote access support
  - unification of daemons
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements
  - Resolves: rhbz#223833
  - Resolves: rhbz#235851
  - Resolves: rhbz#251641
  - Resolves: rhbz#251706
  - Resolves: rhbz#253494
  - Resolves: rhbz#254051
  - Resolves: rhbz#273421
  - Resolves: rhbz#306931
  - Resolves: rhbz#328841
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-2.el5
changelog:
  - add 3 patches fixing NUMA disk detach for tap devices, setting cpu
    parameter on inactive domains and an escaping bug
  - Resolves: rhbz#251641
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-11.el5
changelog:
  - NPIV didn't work due to different paths in /sys for older kernels
  - Resolves: rhbz#496925
  - the domain info API would fail due to the absence of a security model
  - Resolves: rhbz#506688


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-12.el5
changelog:
  - fix bogus WWNs when HBA kernel modules are (re)loaded
  - remove a small leak with SCSI node device conf
  - Resolves: rhbz#496925


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-14.el5
changelog:
  - fix broken behavior on wrong pool creation
  - Resolves: rhbz#496616
  - fix hang of libvirt daemon on node device XML dump
  - Resolves: rhbz#509261


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-24.el5
changelog:
  - guest host present two NIC with duplicate MAC addresses, only one configured
  - Resolves: rhbz#483884
  - implement core dump API for QEMU driver
  - Resolves: rhbz#507551
  - reset a PCI function even if other unused devices/functions are reset
  - Resolves: rhbz#500213
  - avoid a crash with virsh vol-key volname
  - Resolves: rhbz#509293


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-25.el5
changelog:
  - fix python binding generator to avoid clashes in method names
  - Resolves: rhbz#510427
  - nodedev-destroy can hang libvirtd
  - Resolves: rhbz#510430
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324
  - node device APIs should expose the relationship between SR-IOV VFs and PFs
  - Resolves: rhbz#481748
  - implement --pool option for virsh vol-path
  - Resolves: rhbz#509306
  - cannot delete storage pool problem
  - Resolves: rhbz#496579
  - Can not hotplug vtd device to Xen guest
  - Resolves: rhbz#546671
  - Inactive KVM guest memory reporting via 'info' is strange
  - Resolves: rhbz#508266
  - command 'virsh nodedev-create' fails with out of memory error
  - Resolves: rhbz#510426
  - Command 'virsh find-storage-pool-sources' failure unknown error
  - Resolves: rhbz#509979


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-26.el5
changelog:
  - avoid some unknown failure error reports
  - Resolves: rhbz#531729
  - avoid "error: unknown procedure" when querying older libvirt
  - Resolves: rhbz#531735
  - remove limit on number of tap devices and guest
  - Resolves: rhbz#519729
  - avoid crashes when having concurrent TLS connections
  - Resolves: rhbz#512367


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-30.el5
changelog:
  - fix crash in xenUnifiedNodeDeviceReset
  - Resolves: rhbz#555309
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-31.el5
changelog:
  - Fix ACS with root devices (rhbz 526713)
  - Fix PCI device re-assignment (rhbz 500217)
  - Fix a race between KVM and libvirt (rhbz 500217)
  - Fix state bug in libvirtd (rhbz 500217)
  - Set machine type to "rhel5.4.0" by default (rhbz 542665)
  - Correct erroneous expression in pciDeviceDownstreamLacksACS (rhbz 526713)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-32.el5
changelog:
  - Make numa errors non-fatal (rhbz 559755)
  - Create raw storage files with O_DSYNC (rhbz 563151)
  - Increase qemu guest startup timeout to 30 seconds (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5
changelog:
  - Conflict with kvm release older than kvm-83-142.el5 (rhbz 569372)
  - Call fsync() at the end instead of opening raw files with O_DSYNC (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.2
changelog:
  - Fix discrepancy between xm list and virsh list (rhbz 618200)
  - Set a stable & high MAC addr for guest TAP devices on host (rhbz 617243)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5_5.3
changelog:
  - Explicitly set qcow2 backing store format (CVE-2010-2239)
  - Remap privileged source ports from guests behind NAT (CVE-2010-2242)
  - Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 619711)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-6.el5
changelog:
  - Turn dynamic ownership off by default (rhbz #636477)
  - Rename libvirtd.qemu in /etc/logrotate.d back to libvirtd (rhbz #636460)
  - Start libvirt-guests late and stop it early to solve dependency on xend (rhbz #636447)
  - Fix failure when host kernel doesn't support CPU hot-plugging (rhbz #636347)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-7.el5
changelog:
  - Fix bogus error when attaching a device to xen guest (rhbz #638472)
  - Fix device hotplug on xen (rhbz #638520)
  - Don't fail on missing D-Bus (rhbz #642650)
  - Prohibit migration of qemu guests with host devices (rhbz #573940)
  - Remove explicit dependency on qcow-create and qemu-img tools (rhbz #642026)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-8.el5
changelog:
  - Add 'current' attribute to <vcpu> element (rhbz #545118)
  - Don't build xenapi driver even if libxenserver is found (rhbz #643118)
  - Audit support (rhbz #587280)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-9.el5
changelog:
  - Reworked audit support (rhbz #587280)
  - Fix incorrect use of private data in remote driver (rhbz #646717)
  - Fix detection of qemu's drive readonly option (rhbz #510612)
  - Fix Xen domain dump (rhbz #646755)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-13.el5
changelog:
  - Fix warnings in text monitor events (rhbz #574017)
  - Fix host CPU counting on unusual NUMA topologies (rhbz #654540)
  - Properly escape & character in xen driver (rhbz #472437)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-15.el5_6.3
changelog:
  - Properly report error in virConnectDomainXMLToNative (CVE-2011-1146)
  - Guess rhel macro based on dist macro (rhbz#688728)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-17.el5
changelog:
  - Fix event-handling data race (rhbz#671569)
  - Add support for multiple serial ports into the Xen driver (rhbz#670789)
  - Add missing checks for read only connections (CVE-2011-1146)
  - Guess rhel macro based on dist macro (rhbz#665325)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-18.el5
changelog:
  - xen: Prevent updating device when attaching a device (rhbz#662908)
  - Add PCI sysfs reset access (rhbz#689880)
  - xencapstest: Don't fail when Xen is installed (rhbz#690459)
  - Make error reporting in libvirtd thread safe (rhbz#690733)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-19.el5
changelog:
  - xen: Plug memory leak in multiple serial ports support (rhbz#670789)
  - Manually kill gzip if restore fails before starting qemu (rhbz#681623)
  - qemu: Avoid double close on domain restore (rhbz#681623)
  - virterror: Avoid API breakage with vmware (rhbz#665075)
  - nwfilter: Resolve deadlock between VM ops and filter update (rhbz#697749)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-20.el5
changelog:
  - Support enabling or disabling the HPET for Xen domains (rhbz#703193)
  - SMBIOS support (rhbz#661365)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-23.el5
changelog:
  - network: Only attempt removal of the rule allowing tftp if it was added (rhbz#676622)
  - Prevent crash from dlclose() of libvirt.so (rhbz#735127)
  - Fix order of disks and controllers (rhbz#719435)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-24.el5
changelog:
  - qemuConnectMonitor: Fix a bug that would have masked SELinux failure (rhbz#747514)
  - xml: Avoid compiler warning (rhbz#747514)
  - Fixes for several memory leaks (rhbz#747514)
  - storage: Avoid memory leak (rhbz#747514)
  - Add missing error reporting when loading mac filter config for QEMU (rhbz#747514)
  - qemu: Avoid memory leaks (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)
  - qemu: Avoid leaking uninit data from hotplug to dumpxml (rhbz#747514)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-26.el5
changelog:
  - Fix off-by-1 in virFileAbsPath. (rhbz#680289)
  - Fix autostart flag when loading running domains (rhbz#675319)
  - node_device: Avoid null dereference on error (rhbz#772848)
  - util: Avoid null deref on qcowXGetBackingStore (rhbz#772848)
  - docs: Improve virsh domxml-*-native command docs (rhbz#783001)
  - Clarify the purpose of domxml-from-native (rhbz#783001)
  - qemu: Add return value check (rhbz#772821)
  - storage: Avoid mishandling backing store > 2GB (rhbz#772821)
  - util: Avoid PATH_MAX-sized array (rhbz#816601)
  - qemu: Keep list of USB devices attached to domains (rhbz#816601)
  - qemu: Don't leak temporary list of USB devices (rhbz#816601)
  - usb: Create functions to search usb device accurately (rhbz#816601)
  - qemu: Call usb search function for hostdev initialization and hotplug (rhbz#816601)
  - usb: Fix crash when failing to attach a second usb device (rhbz#816601)


author: Daniel Veillard <veillard@redhat.com> - libvirt-0.8.2-28.el5
changelog:
  - qemu: Rollback on used USB devices (rhbz#816601)
  - qemu: Don't delete USB device on failed qemuPrepareHostdevUSBDevices (rhbz#816601)


author: Stepan Kasal <skasal@redhat.com> - 0.12.0-0
changelog:
  - New version.
  - Remove libgnomeui{,-devel} and libgnomecanvas{,-devel}; upstream have
    removed them from configure.ac.
  - Try to build on s390x again.


author: Stepan Kasal <skasal@redhat.com> - 0.12.1-1
changelog:
  - New upstream version.
  - Use the %{?dist} tag.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel subpackage.
  - The -devel subpackage now requires several -devel packages.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libxkbfile to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Ray Strode <rstrode@redhat.com> - 3.0-3
changelog:
  - use long instead of CARD32 to XChangeProperty to fix
    unaligned access problem on ia64 (bug 215027)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.12.el5_7.2
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771906


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771907


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.3
changelog:
  - Fix parser local buffers size problems (rhbz#843739)
  - Fix entities local buffers size problems (rhbz#843739)
  - Fix an error in previous commit (rhbz#843739)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5_8.5
changelog:
  - Implement some default limits in the XPath module (CVE-2011-1944)
  - Change the XPath code to percolate allocation errors (CVE-2011-1944)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.18.el5
changelog:
  - Fix parser local buffers size problems (rhbz#843740)
  - Fix entities local buffers size problems (rhbz#843740)
  - Fix an error in previous commit (rhbz#843740)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.21.el5_9.2
changelog:
  - Fix some Relax-NG and XSD validation failures (rhbz#915350)
  - xmlDOMWrapCloneNode discards namespace of the node parameter(rhbz#915837)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.21.el5_9.3
changelog:
  - fixed one regexp bug and added a (rhbz#987321)
  - Another small change on the algorithm for the elimination of epsilon (rhbz#987321)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.22.el5
changelog:
  - fix validation issues with some XSD (rhbz#877348)
  - xmlDOMWrapCloneNode discards namespace of the node parameter (rhbz#884707)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.24.el5
changelog:
  - fixed one regexp bug and added a (rhbz#922450)
  - Another small change on the algorithm for the elimination of epsilon (rhbz#922450)


author: Daniel Veillard <veillard@redhat.com> - 1.1.17-4.el5_8.1
changelog:
  - fixes CVE-2011-1202 CVE-2011-3970 CVE-2012-2825 CVE-2012-2871 CVE-2012-2870
  - Fix portability to upcoming libxml2-2.9.0
  - Fix generate-id() to not expose object addresses (CVE-2011-1202)
  - Fix some case of pattern parsing errors (CVE-2011-3970)
  - Fix a bug in selecting XSLT elements (CVE-2012-2825)
  - Fix default template processing on namespace nodes (CVE-2012-2871)
  - Fixed problem with namespace on compound predicate
  - Fix direct pattern matching bug
  - Big fixes of pattern compilations
  - Fixes #527297 general patter comps fix and cleanup other cleanups Daniel
  - QName parsing fix for patterns
  - Cleanup of the pattern compilation code (CVE-2012-2870)
  - Hardening of code checking node types in various entry point (CVE-2012-2870)
  - Hardening of code checking node types in EXSLT (CVE-2012-2870)
  - Fix system-property with unknown namespace
  - Xsltproc should return an error code if xinclude fails
  - Fix a dictionary string usage
  - Avoid a heap use after free error


author: Tim Waugh <twaugh@redhat.com> 0:0.7.0-2
changelog:
  - More SDK path fixes.
  - Don't build input driver with -fstack-protector since the X loader
    doesn't like it.


author: Kristian Høgsberg <krh@redhat.com> 0:0.7.2-1
changelog:
  - Update to version 0.7.2.
  - Drop linuxwacom-0.6.4-linux-input.patch since the kernel headers now
    define EV_SYN.
  - Update SDK patch to work with new modular paths.


author: Kristian Høgsberg <krh@redhat.com> 0:0.7.4_1-1
changelog:
  - Update to 0.7.4-1 release.
  - Change udev rule to use == instead of = for matching kernel name
    (#191248).
  - Drop linuxwacom-0.7.2-modular-sdk.patch and pass --with-xorg-sdk=/usr.
  - Change udev rule to be 60-wacom.rules instead of 10-wacom.rules.
  - Update linuxwacom-fsp.patch to patch Makefile.in instead so we avoid
    rerunning auto*.


author: Aristeu Rozanski <arozansk@redhat.com> 0.7.8.3-2.el5
changelog:
  - added development package: customer uses it and it's present on RHEL-4 (feature
    regression) (BZ#436889)


author: Aristeu Rozanski <arozansk@redhat.com> 0.7.8.3-6.el5
changelog:
  - wacomcpl: show device name on windows' description
  - udev rules updated to create symbolic links to PnP serial tablets


author: Aristeu Rozanski <aris@redhat.com> 0.7.8.3-11.1.el5
changelog:
  - fixed maximum distance for cursor device [843859]
  - fixed initial tool value for when the server starts and the tool is in proximity [843859]


author: Matthias Saou <http://freshrpms.net/> 1.0.4-1
changelog:
  - Update to 1.0.4.
  - Update syntax patch.
  - Execute bootstrap if no configure script is found.
  - Don't own entire man? directories.
  - Own data and lib lksctp-tools directories.
  - Move devel libs in _libdir/lksctp-tools/ to devel package.
  - Exclude .la files.
  - Minor spec file cleanups.


author: Phil Knirsch <pknirsch@redhat.com> 2.9.2-1
changelog:
  - Update to lm_sensors-2.9.2
  - Fixed wrong subsys locking (#176965)
  - Removed lm_sensors pwmconfig, has been fixed upstream now


author: Phil Knirsch <pknirsch@redhat.com> 2.10.0-1
changelog:
  - Update to lm_sensors-2.10.0
  - Added missing buildprereq on sysfsutils-devel (#189196)
  - Added missing prereq on chkconfig (#182838)
  - Some fiddling to make it build on latest kernels


author: Phil Knirsch <pknirsch@redhat.com> - 2.10.7-5
changelog:
  - Reneabled drivers that are now supported by the kernel driver update
  - Add support for it8718 chips
  - Add support for w83793 chips
  - Fixed uninitialized value warning in sensors-detect
  - Resolves: #473119,#448223,#443742,#474383


author: Nikola Pajkovsky <npajkovs@redhat.com> 2.10.7-7
changelog:
  - Resolves: #513099	Add support for new chip models supported by fschmd to lm_sensors
  - add FSC Syleus
  - add FSC Hades


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-3.el5
changelog:
  - fix log4cpp needs rebuild to increase version number to be greater than version used in RHEVH branch (#502047)
  Resolves: #502047


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-4.el5
changelog:
  - limit rpm to x86_64, because it is used only by qspice, to fix #513407: "stack smashing detected" error on ia64 
  Workaround: #513407


author: Yuval Kashtan <ykashtan@redhat.com> - 1.0-5.el5
changelog:
  - add i386, for qspice-xpi, to fix #552566: log4cpp is not built for i386 
  - resolve: #502679: multilib conflict in log4cpp-1.0-3.el5


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-2jpp_1fc
changelog:
  - Merge spec and patches with latest from JPP.
  - Clean source tar ball off prebuilt jars and classes.
  - Use classpathx-jaf and jms for buildrequires for the time being.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-3jpp.1
changelog:
  - Re-sync with latest from JPP.
  - Update patch for BZ #157585 to apply cleanly.
  - Partially adopt new naming convention.


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-8
changelog:
  - fix #247410 - logrotate does not honor size directive
  - fix #250059 - logrotate manual page bug
  - fix #259281 - logrotates default config rotates wtmp irrationally often


author: Tomas Smetana <tsmetana@redhat.com> - 3.7.4-9
changelog:
  - fix #431836 - memory error on corrupted status file
  - fix #445554 - lgrotate ignores pre/postrotating scripts arguments
  - fix #447022 - logrotate doesn't rotate logs if status file is corrupted


author: Jan Kaluza <jkaluza@redhat.com> - 3.7.4-12
changelog:
  - fix #474013 - mention scripts arguments in man page
  - fix #461494 - proper exit code when logrotate.status is corrupted
  - fix #484075 - logrotate "size" directive can exceed 1895825408 bytes
  - fix #485553 - add proper /var/log/btmp pattern into default logrotaet config
  - fix #540119 - fixed missingok problem with globs
  - fix #567365 - handle errors during rename call
  - fix #638591 - better documentation of "size" parameter
  - fix #622059 - mention authors in man page
  - fix #579680 - fixed logrotate postrotate script args with nosharedscripts
  - fix #642936 - mention all options in manpage
  - fix #574784 - prevent recursive include


author: Jan Kaluza <jkaluza@redhat.com> - 3.7.4-13
changelog:
  - fix #795405 - added .rhn-cfg-tmp-* to default taboext
  - fix #736045 - check for brackets order in config file


author: Peter Schiffer <pschiffe@redhat.com> 4.78-4
changelog:
  - resolves: #733684
    [RFE] Add ability to exclude a file descriptors corresponding to a particular file system


author: Peter Schiffer <pschiffe@redhat.com> 4.78-5
changelog:
  - resolves: #513613
    lsof fails to suppress warning messages if -b -w option is used and some nfs volume mounted
  - related: #733684
    fixed bug when multiple +|-e options were ignored


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390
  - fix testsuite for interaction of -c and -o
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - fix handling of the case where forked child is reported before
    parent's fork event
  - Resolves: #265941
  - Resolves: #426352
  - Resolves: #485779


author: Petr Machata <pmachata@redhat.com> - 0.5-12.45svn
changelog:
  - support tracing of 31-bit binaries with 64-bit ltrace on s390
  - remove bogus "wrong pid" message from earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn
changelog:
  - fix tracing of fork of 64-bit binaries with 64-bit ltrace on ppc
  - improve earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn.12
changelog:
  - Add clone support patch that was ported by Martin Osvald
  - Rebase upstream patchset for tracing multi-threaded processes
  - Rebase upstream attach/detach fixes
  - Fix syscall detection
  - Rebase upstream patches for tracing across vfork
  - Add RHEL-6 patch for SIGTRAP masked as SIGILL
  - Resolves: #733216


author: Petr Machata <pmachata@redhat.com> - 0.5-16.45svn
changelog:
  - Add clone support patch that was ported by Martin Osvald
  - Rebase upstream patchset for tracing multi-threaded processes
  - Rebase upstream attach/detach fixes
  - Fix syscall detection
  - Rebase upstream patches for tracing across vfork
  - Add RHEL-6 patch for SIGTRAP masked as SIGILL
  - Resolves: #526007


author: Petr Machata <pmachata@redhat.com> - 0.5-17.45svn
changelog:
  - Add support for tracing PPC32 processes with secure PLT
    (ltrace-0.5-ppc-glink.patch)
  - Add support for PIE binaries (ltrace-0.5-pie.patch)
  - Fix a double free when tracing across fork
    (ltrace-0.5-clone-filename.patch)
  - Fix SIGSEGV on PPC where -e was given, but no symbols matched
    (ltrace-0.5-no-events-sigsegv.patch)


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Deepak Bhole <dbhole@redhat.com> 1.4.3-1jpp.15
changelog:
  - Resolves: bz222736. Just a rebuild is needed.
  - Added guards around calls to rebuild-gcj-db in post and postun.


author: Akira TAGOH <tagoh@redhat.com> - 4.51-7
changelog:
  - lv-+num-option.patch: applied a patch to allow +num option to jump to the specific line.
  - lv-fastio.patch: applied a patch to improve the performance to read the files.
  - lv-lfs.patch: applied a patch for Lerge File Summit support.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-1.0
changelog:
  - Change package suffix to use dist variable.
  - Fall back to internal locking if external locking lib is missing or fails.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-4
changelog:
  - Make spec file closer to lvm2.spec for easier maintenance.
  - Use the built-in cluster support (locking_type 3) by default,
    replacing the shared library, removing ldconfig and updating
    the lvmconf script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-2
changelog:
  - Adjust some alignments for ia64. 
  - Fix VG clustered read locks to use PR not CR. 
  - Add startup timeout to clvmd startup script.


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Milan Broz <mbroz@redhat.com> - 2.02.40-6
changelog:
  - Avoid overwriting in-use on-disk text metadata.
  - Fix mirror upconvert for active mirrors.
    Resolves: #467435 #455670


author: Milan Broz <mbroz@redhat.com> - 2.02.46-3
changelog:
  - Fix crash when calculating readahead on missing device in vgreduce.
  - Fix mirror log allocation when smallest PV has only 1 extent.
    Related: #502899 #502671


author: Milan Broz <mbroz@redhat.com> - 2.02.46-4
changelog:
  - Fix virtual origin snapshot manipulation.
  - Implement mirror repair policies.
    Related: #249478 #503708


author: Milan Broz <mbroz@redhat.com> - 2.02.46-6
changelog:
  - Fix partial activation and lvconvert --repair on clusters.
    Resolves: #505141
    Related:  #505143


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8.el5_4.1
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Related: #523440 #523441


author: Milan Broz <mbroz@redhat.com> - 2.02.54-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #536817 #528208 #517900


author: Milan Broz <mbroz@redhat.com> - 2.02.55-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Related: #536817


author: Milan Broz <mbroz@redhat.com> - 2.02.56-2
changelog:
  - Fix problems with mirror repair handling.
  - Fix cluster locking flags.
    Related: #536817
    Resolves: #543146


author: Milan Broz <mbroz@redhat.com> - 2.02.56-4
changelog:
  - Fix precommitted metadata cache handling on remote nodes.
  - Fix mirror repair policies and automatic missing PV removal.
  - Fix possible stack overflow in persistent filter dump.
    Resolves: #538571 #538620 #547891 #547842 #552723


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Related: #528208 #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7.el5_5.1
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Fix thread race in clvmd.
    Related: #580831 #584705 #583995
    Resolves: #584706


author: Milan Broz <mbroz@redhat.com> - 2.02.56-10
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Fix thread race in clvmd.
    Related: #580486 #575173 #571963
    Resolves: #561226


author: Milan Broz <mbroz@redhat.com> - 2.02.73-1
changelog:
  - Update to latest upstream release, see WHATS_NEW for detailed changelog.
  - CVE-2010-2526: Fix insecurity when communicating between lvm2 and clvmd.
  - Fix conflict when both lvm and lvm2-cluster debuginfo installed.
  - Add lvmconf man page.
    Resolves: #627541 #616047 #586980 #622755 #498436


author: Milan Broz <mbroz@redhat.com> - 2.02.74-3
changelog:
  - Align code to changes in lvm2 and device-mapper library.
    Related: #486994 #643365 #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 2.02.74-3.el5_6.1
changelog:
  - Always use O_DIRECT when opening block devices in filters.
    Resolves: #673980
    Related: #673986 #673981


author: Milan Broz <mbroz@redhat.com> - 2.02.74-4
changelog:
  - Always use O_DIRECT when opening block devices in filters.
    Resolves: #673615
    Related: #673083 #672816


author: Milan Broz <mbroz@redhat.com> - 2.02.84-1
changelog:
  - Update to latest upstream release, see WHATS_NEW for detailed changelog.
    Related: #680961
    Resolves: #673615 #667517


author: Milan Broz <mbroz@redhat.com> - 2.02.84-2
changelog:
  - Allow to specify PV minimal size.
  - Fix return code for unknown option in clvmd.
    Resolves: #644578 #666991


author: Milan Broz <mbroz@redhat.com> - 2.02.88-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #746687


author: Milan Broz <mbroz@redhat.com> - 2.02.88-2
changelog:
  - Fix redundant dmevent snapshot monitoring messages.
  - Fix lvextend and fsadm ext4 resize.
    Related: #746302 #707056 #708444 #720971


author: Milan Broz <mbroz@redhat.com> - 2.02.88-3
changelog:
  - Add ability to extend mirrors with '--nosync' option.
  - Fix extent-count divisibility requirements for striped mirrors.
    Related: #537369 #749650


author: Milan Broz <mbroz@redhat.com> - 2.02.88-4
changelog:
  - Avoid scan of device if it is part of active multipath.
  - Fix mirrored log creation and log size calculation.
  - Fix split mirror in cluster.
    Resolves: #597010 #749359 #750882 #750613


author: Milan Broz <mbroz@redhat.com> - 2.02.88-5
changelog:
  - Fix mirror log conversion and vgsplit for mirrored logs.
  - Fix dmeventd automatic snapshot extension.
    Related: #754598 #755762 #754198


author: Milan Broz <mbroz@redhat.com> - 2.02.88-6
changelog:
  - Fix lvm1 format snapshot handling.
  - Make memory lock error message clearer.
    Related: #758833 #769053


author: Milan Broz <mbroz@redhat.com> - 2.02.88-8
changelog:
  - Do not print warning for pv_min_size set in range between 512KB and 2MB.
  - Fix division by zero if PV with zero PE count is used during vgcfgrestore.
    Related: #786009 #820237 #824813


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9
changelog:
  - Fix alloc cling to cling to PVs already found with contiguous policy.
  - Fix cling policy not to behave like normal policy if no previous LV seg.
  - Fix allocation loop not to use later policies when --alloc cling without tags.
  - Append _TO_LVSEG to names of internal A_CONTIGUOUS and A_CLING flags.
    Resolves: #821013


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-10
changelog:
  - Always send the whole clvmd packet header in refresh commands.
  - Fix 3-thread clvmd deadlock triggered by cleanup on EOF from client.
  - Verify clvmd message validity before processing and log error if incorrect.
  - Ensure clvmd mesage is always NUL-terminated after read.
  - Limit the max size of processed clvmd message to ~8KB.
  - Do not send uninitialised bytes in cluster error reply messages.
  - Fix clvmd processing of invalid request on local socket.
  - Remove unused and wrongly set cluster VG flag from clvmd lock query command.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-9.el5_10.1
changelog:
  - Verify clvmd message validity before processing and log error if incorrect.
  - Ensure clvmd mesage is always NUL-terminated after read.
  - Limit the max size of processed clvmd message to ~8KB.
  - Do not send uninitialised bytes in cluster error reply messages.
  - Fix clvmd processing of invalid request on local socket.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-3
changelog:
  - Remove no-longer-used ldconfig from lvm2-cluster and fix lvmconf
    to cope without the shared library.
    Resolves: #211632


author: Milan Broz <mbroz@redhat.com> - 2.02.26-1
changelog:
  - Update to latest upstream release.
  - Add conflict with lvm2-cluster package from different update.
    Resolves: #210365 #224468 #232238 #203745 
    Resolves: #244791 #244792 #244793 #244794 #244795 #244796


author: Milan Broz <mbroz@redhat.com> - 2.02.26-2
changelog:
  - Fix spec to create /etc/lvm/cache correctly.
  - Fix warning for unsupported mirror configuration.
  - Fix lvm2-monitor initscript to not display some invalid errors.
    Resolves: #246272 #219189 #245174


author: Milan Broz <mbroz@redhat.com> - 2.02.30-1
changelog:
  - Update to latest upstream release.
    Resolves: #252150 #210724 #245563 #363931 #291411 #246115
    Resolves: #427360 #421191 #180436 #220568 #429122 #429124
    Resolves: #429118 #427294 #251992


author: Milan Broz <mbroz@redhat.com> - 2.02.32-4
changelog:
  - Fix vgsplit locking of new VG.
  - Fix another allocation bug with clvmd and large node IDs.
    Resolves: #438434 #438249


author: Milan Broz <mbroz@redhat.com> - 2.02.39-1
changelog:
  - Update to latest upstream release.
    Resolves: #453753 #452813 #447905 #446228 #444795 #443419
    Resolves: #443060 #428005


author: Milan Broz <mbroz@redhat.com> - 2.02.40-2
changelog:
  - Fix vgreduce --force --removemissing hangling.
  - Do not print warning for old stripe_filler default setting.


author: Milan Broz <mbroz@redhat.com> - 2.02.46-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #470560 #488059 #490298 #493311 #494414 #220567
    Resolves: #477040 #431760 #454645 #476117 #501473 #501756


author: Milan Broz <mbroz@redhat.com> - 2.02.46-3
changelog:
  - Fix crash when calculating readahead on missing device in vgreduce.
  - Fix mirror log allocation when smallest PV has only 1 extent.
    Resolves: #502899 #502671


author: Milan Broz <mbroz@redhat.com> - 2.02.46-4
changelog:
  - Fix virtual origin snapshot manipulation.
  - Implement mirror repair policies.
    Resolves: #249478 #503708


author: Milan Broz <mbroz@redhat.com> - 2.02.46-7
changelog:
  - Ignore suspended devices during repair.
  - Call vgreduce --removemissing automatically.
    Resolves: #505604


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8
changelog:
  - Reintruduce old mirror repair behaviour.
  - Fix various memory leaks in command context manipulation 
  - Enhance and fix various problems in vgimportclone.
    Resolves: #504699 #504877


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8.el5_4.1
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Resolves: #523440 #523441


author: Milan Broz <mbroz@redhat.com> - 2.02.54-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #536817 #186437 #463272 #481793 #500177 #529668


author: Milan Broz <mbroz@redhat.com> - 2.02.55-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Related: #536817
    Resolves: #537942 #537954 #537947


author: Milan Broz <mbroz@redhat.com> - 2.02.56-2
changelog:
  - Fix problems with mirror repair handling.
  - Fix cluster locking flags.
    Related: #536817
    Resolves: #543146 #500899


author: Milan Broz <mbroz@redhat.com> - 2.02.56-3
changelog:
  - Fix missing flag device handling.
  - Revert the dmeventd mirror repair logic to use vgreduce (548223).
    Resolves: #537954 #543225


author: Milan Broz <mbroz@redhat.com> - 2.02.56-6
changelog:
  - Fix dmeventd crash if both snapshot and mirror monitoring DSO are used.
  - Fix pvmove abort to be cluster-aware when temporary mirror activation fails.
    Resolves: #538571 #557104


author: Milan Broz <mbroz@redhat.com> - 2.02.56-7
changelog:
  - Make mirror repair exit with success when no action is needed.
  - Fix inappropriate second resync when adding mimage to core-logged mirror.
    Resolves: #562004 #510526


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.1
changelog:
  - Mask LCK_HOLD flag in cluster VG locks for compatibility reasons.
  - Always use blocking lock for VGs and orphan locks.
    Resolves: #582218 #582232


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.2
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Disallow primary mirror image removal when mirror is not in-sync.
    Resolves: #580831 #584705 #583995 #581611


author: Milan Broz <mbroz@redhat.com> - 2.02.56-8.el5_5.5
changelog:
  - Fix initialisation of logging to file to not cause boot failure.
  - Fix lvchange --refresh to require partial flag if PVs are missing.
    Resolves: #601079 #601078


author: Milan Broz <mbroz@redhat.com> - 2.02.56-10
changelog:
  - Fix incorrect removal of symlinks after LV deactivation fails.
  - Only do one full device scan during each read of text format metadata.
  - Disallow primary mirror image removal when mirror is not in-sync.
    Resolves: #580486 #575173 #571963 #581611


author: Milan Broz <mbroz@redhat.com> - 2.02.56-12
changelog:
  - Fix initialisation of logging to file to not cause boot failure.
  - Fix lvchange --refresh to require partial flag if PVs are missing.
    Resolves: #592967 #598886


author: Milan Broz <mbroz@redhat.com> - 2.02.73-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
  - CVE-2010-2526: Fix insecurity when communicating between lvm2 and clvmd.
    Resolves: #627541 #589805 #474914 #585328 #588441 #568138
    Resolves: #232499 #235095 #547895 #616150 #486994 #560105
    Resolves: #560111 #590017 #549174 #559351 #582330 #627701
    Resolves: #564516 #617972 #552721 #592428


author: Milan Broz <mbroz@redhat.com> - 2.02.74-1
changelog:
  - Convey need for snapshot-merge target in lvconvert error message.
  - Give correct error message when creating a too-small snapshot.
  - Implement vgextend --restoremissing.
  - Fix --force and --yes flags in lvconvert.
  - Fix possible data corruption when using fsadm and resizing device.
  - Allow to set limit for repeated access to broken devices.
  - Fix hang when repairing a mirrored-log that had both devs fail.
    Resolves: #638283 #587063 #537913 #252420 #642055 #643365
    Resolves: #637936


author: Milan Broz <mbroz@redhat.com> - 2.02.74-2
changelog:
  - Fix error message if unable to activate lv due to tags.
  - Fix online resize in fsadm to not try to run filesystem check.
    Resolves #486994 #643365
    Related: #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 2.02.74-5.el5_6.1
changelog:
  - Always use O_DIRECT when opening block devices in filters.
  - Do not scan devices unnecessarily in dev_reset_error_count().
  - Do not print lock warnings with --ignorelockingfailure.
    Resolves: #673981 #673986 #673975


author: Milan Broz <mbroz@redhat.com> - 2.02.74-6
changelog:
  - Always use O_DIRECT when opening block devices in filters.
  - Do not scan devices unnecessarily in dev_reset_error_count().
  - Do not print lock warnings with --ignorelockingfailure.
    Resolves: #672816 #673083 #671459


author: Milan Broz <mbroz@redhat.com> - 2.02.84-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #680961 #672816 #673083 #671459 #433768 #656394
    Resolves: #427298 #653643 #667174 #659264 #643500 #640101
    Resolves: #644079 #640051 #501437


author: Milan Broz <mbroz@redhat.com> - 2.02.88-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #746302  #707779 #719760 #636991 #706036 #745522
    Resolves: #711185  #654447 #523324 #575967


author: Milan Broz <mbroz@redhat.com> - 2.02.88-2
changelog:
  - Fix redundant dmevent snapshot monitoring messages.
  - Fix lvextend and fsadm ext4 resize.
    Related: #746302
    Resolves: #707056 #708444 #720971


author: Milan Broz <mbroz@redhat.com> - 2.02.88-3
changelog:
  - Add ability to extend mirrors with '--nosync' option.
  - Fix extent-count divisibility requirements for striped mirrors.
    Resolves: #537369 #749650


author: Milan Broz <mbroz@redhat.com> - 2.02.88-5
changelog:
  - Fix mirror log conversion and vgsplit for mirrored logs.
  - Fix dmeventd automatic snapshot extension.
    Resolves: #754598 #755762 #754198


author: Milan Broz <mbroz@redhat.com> - 2.02.88-6
changelog:
  - Fix lvm1 format snapshot handling.
  - Make memory lock error message clearer.
    Resolves: #758833 #769053


author: Milan Broz <mbroz@redhat.com> - 2.02.88-8
changelog:
  - Do not print warning for pv_min_size set in range between 512KB and 2MB.
  - Fix division by zero if PV with zero PE count is used during vgcfgrestore.
    Resolves: #786009 #820237


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-11
changelog:
  - Refuse to init a snapshot merge in lvconvert if there's no kernel support.
  - Remove warning that manual cleanup is needed after mirror up-convert failure.
  - vgimport '--force' now allows users to import VGs with missing PVs.
  - Mirrored log is now fixed before its mirror when double-fault occurs.
  - Allow lvconvert --stripes/stripesize only with --mirrors and --repair.
  - Increase limit for major:minor to 4095:1048575 when using -My option.


author: Peter Rajnoha <prajnoha@redhat.com> - 2.02.88-13
changelog:
  - Keep exclusive activation in pvmove if LV is already active.
  - Disallow pvmove for exclusive LV if some affected LVs are not exclusively activated.
  - Add internal tags command to display any tags defined on the host.
  - Don't require --major to be specified when using -My option on kernels > 2.4.


author: Tomas Hoger <thoger@redhat.com> - 2.8.5-28.1.1
changelog:
  - add patch for CVE-2008-4690 (rhbz#468184)
    - prompt user before executing commands from the lynxcgi: handler,
      even in the advanced user mode
    - mark all lynxcgi: URIs as untrusted in the default lynx.cfg
  - add patch to prevent lynx from opening configuration files in the
    current working directory (CVE to be assigned) (rhbz#214205)


author: Jens Petersen <petersen@redhat.com> - 1.3.1-1
changelog:
  - update to 1.3.1 release
    - rename use_otf and use_anthy macros to with_gui and with_examples
    - build --with-gui=no and replace m17n-lib-1.2.0-core-libs-only.patch
      with m17n-lib-no-gui-headers.patch and m17n-lib-nobuild-examples.patch


author: Mayank Jain <majain@redhat.com> - m17n-lib-1_3_3-1_fc6
changelog:
  - Updated spec file for changes mentioned in RH bug 193524, comment 4
  - Thanks to Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp>


author: Miloslav Trmac <mitr@redhat.com> - 0.16-4
changelog:
  - Drop Obsoletes: openssl-python, openssl-python was last shipped in RHL 7.1
  - Fix interpreter paths in demos


author: Miloslav Trmac <mitr@redhat.com> - 0.16-5
changelog:
  - Backport the urllib2 wrapper (code by James Bowes <jbowes@redhat.com>)
    Resolves: #210956
  - Add proxy support for https using CONNECT (original patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #210963


author: Miloslav Trmac <mitr@redhat.com> - 0.16-6
changelog:
  - Add support for SSL socket timeouts (based on a patch by James Bowes
    <jbowes@redhat.com>)
    Resolves: #219966


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.2
changelog:
  - Send the Host: header when using a HTTP/1.1 proxy for https (patch by Karl
    Grindley)
    Resolves: #239034
  - Backport support of multiple CN values and multiple patterns in subjectAltName
    from m2crypto-0.18
    Resolves: #363591


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.4
changelog:
  - Drop the Python lock around operations that can block for a long time.
    Resolves: #472690
  - Only send the "selector" part of URL in requests sent over a proxy.  Patch by
    James Bowes <jbowes@redhat.com>.
    Resolves: #491674
  - Explicitly close sockets underlying https connections.
    Resolves: #460692


author: Miloslav Trmač <mitr@redhat.com> - 0.16-6.el5.7
changelog:
  - Don't use '!# /usr/bin/env python'
    Resolves: #521887
  - Allow overriding SSL.Connection.postConnectionCheck from m2urllib2
    Resolves: #524855


author: Miloslav Trmač <mitr@redhat.com> - 0.16-8
changelog:
  - Fix handling of large ASN.1 integers
    Resolves: #703648
  - Fix a memory leak in AES_crypt
    Resolves: #659881


author: Miloslav Trmač <mitr@redhat.com> - 0.16-9
changelog:
  - Add a missing string parameter to M2Crypto.SSL.SSLTimeoutError
    Resolves: #520817
  - Support IPv6 in M2Crypto.httpslib
    Resolves: #761596


author: Miloslav Trmac <mitr@redhat.com> - 1.4.5-3
changelog:
  - Use the install-info scriptlets recommended in the Fedora Extras wiki
  - Move $RPM_BUILD_ROOT cleaning from %prep to %install


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-4
changelog:
  - fix #252185 init script prevents proper SELinux domain transitions
  - fix #242672 wrong init script return value


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.9-5
changelog:
  - fix #290661 - use relative symlink in /etc/smrsh
  - fix #461707 - break CC field correctly
  - fix #453377 - don't parse problematic mails many times, but isolate them
  - fix #521888 - fix instances of #!/usr/bin/env python in mailman
  - fix #515157 - fixed traceback when changing email address globally


author: Jakub Jelinek <jakub@redhat.com> 3.80-8
changelog:
  - make sure errno for error reporting is not lost accross _() calls
  - report EOF on read pipe differently from read returning < 0 reporting


author: Petr Machata <pmachata@redhat.com> 1:3.80-11
changelog:
  - Applied (five years old) patch from Jonathan Kamens to allow make to
    handle several pattern-specific variables (#52962).

    The patch was changed so that it forces make to process pattern
    specific variables in the same order as they appear in file.
    (Upstream make behaves this way, too.)  This is change from old make
    behavior, which processed the variables in reverse order.  In case
    you used only x=a assignments, this had the effect of using the
    first pattern specific variable that matched.  For x+=a this just
    doesn't work, and it produces absolutely nonintuitive results.

  - (It would be great if make's target-specific variables were handled
    the same way as pattern-specific ones, just without the pattern
    component.  However current handling is documented and considered a
    feature.)


author: Petr Machata <pmachata@redhat.com> - 1:3.81-1
changelog:
  - Upstream 3.81:
    - Contains several backwards incompatible changes.  See NEWS inside
      the source package to find out more.
  - memory patch and error reporting patch were ported to this version.


author: Ivana Hutarova Varekova <varekova@redhat.com> - 1.6d-2
changelog:
  - Resolves: #558732
    enable the man-page-overrides subdirectory
  - Resolves: #560585
    fix TMP variable name


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-27.fc6
changelog:
  - display hex values correctly even for non-UTF8 locales, thanks
    to Egmont Koblinger
  - fix BuildRoot


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-32
changelog:
  - fix ftpfs which didn't work with IPv6 patch (#217510)
  - don't crash when there is no more space in /tmp (#217159)
  - sh vfs won't disconnect when there is a special character
    in the name (#217507)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-33
changelog:
  - attempt to fcntl() descriptors appropriatelly so that subshell
    doesn't leave them open while execve()ing commands (#217027)


author: Jindrich Novy <jnovy@redhat.com> 4.6.1a-35
changelog:
  - allow mc to enter directories containing '_' (#236550)
  - search in viewer remembers its last search string (#238417)
  Resolves: #236550, #238417


author: Dan Walsh <dwalsh@redhat.com> 0.1.4-1
changelog:
  - Add patch from sgrubb
  - 	Fix 64 bit size problems
  - 	Increase the open file limit
  -	Make sure maximum size is not exceeded


author: Steve Conklin <sconklin@redhat.com> - 0.2.7-1
changelog:
  - Fixed a translation error
  - Folded the init script patch into the source tarball.
  - Fixed a memory leak I found
  Resolves: #339951


author: Dan Walsh <dwalsh@redhat.com> 0.2.11-1
changelog:
  - Jump to latest in rawhide
    - Eliminate memory leaks
    - More fixes from Jim Meyering
    - More error checking on failed strdup
    - Start mcstrans before netlabel
    - Fix error handling
  Resolves: #457179


author: Doug Ledford <dledford@redhat.com> - 2.5.4-1
changelog:
  - Update to 2.5.4 (listed as a bugfix update by upstream)
  - Remove previous bitmap patch that's now part of 2.5.4


author: Doug Ledford <dledford@redhat.com> - 2.6.4-1
changelog:
  - Update to 2.6.4
  - Fix init script issues
  - Remove patches accepted upstream
  - Fix mdadm -Q output
  - Resolves: bz242686, bz335911, bz233372


author: Doug Ledford <dledford@redhat.com> - 2.6.9-1
changelog:
  - Update to 2.6.9 (latest in the 2.6 stable series)
  - Add automatic weekly data scrubbing of active raid arrays (bz233972)
  - Various mdadm.8 man page edits (bz434670, bz434671, bz489476)
  - Fix recognition of short options -Y and -N (bz478977)
  - Resolves: bz233972, bz434670, bz434671, bz489476, bz478977


author: Doug Ledford <dledford@redhat.com> - 2.6.9-2
changelog:
  - Update the raid-check script to run last, modify script to get config
    from sysconfig/raid-check, make sure we don't do a check operation on
    a device that doesn't support it, wait for the checks to complete in
    order to check the mismatch_count on the devices and notify sysadmin
    if any mismatches were found.
  - Resolves: bz513200, bz513473


author: Doug Ledford <dledford@redhat.com> - 2.6.9-3
changelog:
  - If we have more than one array per drive, then the raid-check script will
    only check one of the arrays, the others will get skipped.  Correct that.
  - Resolves: bz523000


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 2.6.9-4
changelog:
  - Fix /sbin/raid-check to not report non-0 mismatch counts on raid1
    arrays, as these can happen legitimately on raid1 arrays.
  - Fix build problem due to CVS Revision ID change in mdmpd due to
    switch from CVS to git.
  - Resolves: bz566828


author: Jes Sorensen <Jes.Sorensen@redhat.com> - 2.6.9-5
changelog:
  - Update the raid-check script to run checks on arrays that are clean
    and either 'idle' or 'active' as opposed to just 'idle'. Otherwise
    checks will often be missed on arrays that are regularly busy.
  - Resolves: bz735803


author: Adam Jackson <ajax@redhat.com> 6.5.1-7.10
changelog:
  - mesa-6.5.1-nonconformant-visual.patch: Don't warn about the non-
    conformant synthetic Composite visual (#442738)


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-3.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires to 7.1-8 so we pick up the
    latest GLX_EXT_texture_from_pixmap opcodes.


author: Kristian <krh@redhat.com> - 6.5.1-6.fc6
changelog:
  - Add -fno-strict-aliasing to compiler flags for i965 driver.
  - Add post-6.5.1-i965-fixes.patch backport of i965 fixes from mesa CVS.


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Remove GL dependencies.
  - Remove static-cm patch
  - add patch to fix more CurrentTime race conditions (bug 206263)


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-9
changelog:
  - Add patch from http://bugzilla.gnome.org/show_bug.cgi?id=348305 to fix
    https://bugzilla.redhat.com/show_bug.cgi?id=220283. Basically a big 
    s/Time/guint32/ due to braindamage in Xlib.


author: Soren Sandmann <sandmann@redhat.com> - 2.16.0-12
changelog:
  - Add patch to drop the grab on the focused window in click-to-focus
    mode without click to raise. Bug 442769


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-12.1
changelog:
  - Add patch to allow the focused client to raise any of its windows,
    not just windows in the same group.
    Resolves: bug 537023
  - Add patch to trap errors fixing BadWindow when closing windows
    Resolves: bug 537024


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-13
changelog:
  - Add patch to allow the focused client to raise any of its windows,
    not just windows in the same group.
    Resolves: bug 503522


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-14
changelog:
  - Add patch to allow apps to raise windows even when raise_on_click is false
    Resolves: bug 526045
  - Add patch to fix flicker when moving windows between monitors
    Resolves: bug 495939
  - Add patch to trap errors fixing BadWindow when closing windows
    Resolves: bug 523777
  - Add patch to fix problems when moving window with a modal dialog
    to another workspace
    Resolves: bug 237158
  - Add patch to fix KDE windows flashing when switching workspaces
    Resolves: bug 506537
  - Add patch to fix strict focus mode to check for terminals
    by res_class, not by res_name
    Resolves: bug 504223
  - Add patch to add a config option:
    /apps/general/metacity/place_on_current_monitor
    to enable the metacity >= 2.20 behavior where new windows are always
    placed on the current monitor
    Resolves: bug 523841
  - Add a patch so that when the pointer moves, and the window under
    the pointer isn't focused, it will be focused.
    Resolves: bug 530261
  - Add a patch to add a config option:
    /apps/general/metacity/no_focus_windows
    Which allows specifying expressions to match new windows that
    shouldn't be focused.
    Resolves: bug 530262
  - Add a patch to add a config option:
    /apps/general/metacity/new_windows_always_on_top
    Which, when set, will result in new windows always being placed on top.
    Resolves: bug 530263


author: Owen Taylor <otaylor@redhat.com> - 2.16.0-16
changelog:
  - Add patch to apply new_windows_always_on_top to windows that
    are raised or activated but denied focus as well.
    Resolves: bug 582769
  - Add patch to exclude the current application from the effect of
    no_focus_windows preference
    Resolves: bug 591944


author: Jason Vas Dias <jvdias@redhat.com> 1.1.33-3_FC5
changelog:
  - fix bug 162174: prevent uninterruptable hang on exit() when
                    direct line disconnected (kernel bug 164002)
  		  do tcflush(1,TCOFLUSH) before exit() in sig_goodbye()
  	  	  block signals before entering syslog()
    workaround build system 'buffer overflow checks' bug:
                    use memcpy instead of sprintf in record.c, line 53


author: Nalin Dahyabhai <nalin@redhat.com> - 1.1.33-9
changelog:
  - add /usr/sbin/useradd as a prereq for the -sendfax subpackage, because
    we call it during the -sendfax %pre scriptlet (#203266)


author: Jon Masters <jcm@redhat.com>
changelog:
  - Update to microcode 1.15 for real this time (now kernel patch is in and we
    - both RH and Intel - think this should be ok to go now).
  - Resolves: #214807, #209455.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update microcode data file to 20080131 revision.
  - Resolves: #431566.


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix memory leak (Kamil Dudka )
  - Update microcode data file to 20110428 revision.
  - Resolves: #690414, #713653


author: Anton Arapov <anton@redhat.com>
changelog:
  - Fix the paths to microcode (Petr Holasek )
  - Update microcode data file to 20111110 revision.
  - Resolves: #760323


author: Peter Jones <pjones@redhat.com> - 5.1.19-1
changelog:
  - Fix booting on non-LVM devices where sysfs uses a '!' in the device path,
    such as cciss.  (#201875, #196360)


author: Jeremy Katz <katzj@redhat.com> - 5.1.19.3-1
changelog:
  - don't create /dev/tty* on s390 (#209204)
  - handle multi-line options (#209447)
  - ensure that scsi devices have stabilized to ensure the rootdev 
    is available (#213039)
  - iscsi tools changed their syntax somewhat (#221088)


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-11
changelog:
  - Remove unnecessary text
    Resolves: rhbz#238019
  - Handle EMC storage arrays when gathering WWIDs for multipath devices
    Related: rhbz#185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-12
changelog:
  - Don't try to guess a module path if modprobe can find it
    Resolves: #218452
  - Load sd_mod explicitly during iscsi boot.
    Resolves: #222685


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-13
changelog:
  - Fix "--without-usb"
    Resolves: #230852
  - Make /lib/firmware before trying to put things there
    Related: #218452


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-14
changelog:
  - Add support for disabling dmraid from a config file so we don't regress
    Related: #185852
  - Clean up new mpath code.
    Related: #185852


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-16
changelog:
  - Invoke kpartx the same was as rc.sysinit to maintain naming consistency
    Related: rhbz#185852
  - Remove unused code
    Related: rhbz#185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-20
changelog:
  - Add iSCSI Boot Firmware Table support
    Resolves: rhbz#307771
  - Handle empty dm rules better
    Resolves: rhbz#244202
  - Load usb modules in correct order
    Resolves: rhbz#234847
  - Fix multipath on iscsi
    Resolves: rhbz#428723


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-21
changelog:
  - Fix firmware loader completion logic
    Resolves: rhbz#235277
  - Support spaces in the kernel command line
    Resolves: rhbz#240779
  - Clarify module option documentation
    Resolves: rhbz#241763


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-27
changelog:
  - Fix initialization of "withusb" on s390/s390x
    Resolves: rhbz#432776
  - Fix application of patch 15
    Resolves: rhbz#428723
  - Fix netdev naming with drivers specified on the command line
    Resolves: rhbz#436509


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-28
changelog:
  - Fix bad regexp in devicemapper dependency resolution code
    Resolves: rhbz#439371
  - Re-do workaround for gfs2/lock_nolock dep brokenness
    Resolves: rhbz#438743


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-39
changelog:
  - Revert the fix to rhbz#276911, as it causes more bugs.
    Resolves: rhbz#466848
  - Improve handling of encrypted cciss devices. (dlehman)
    Resolves: rhbz#467839


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-41
changelog:
  - Don't treat the first iteration of stabilized as a change
    Resolves: rhbz#464636
  - Revert "fix" in -40, as it breaks dmraid and multipath.


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-46
changelog:
  - Add integrity checking of the kernel image to the generated initrd when in
    fips mode.
    Resolves: rhbz#467497


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-47
changelog:
  - Force loading of all crypto modules in fips mode, so that they all get
    integrity checked before any of them are used.
    Resolves: rhbz#467497


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-48
changelog:
  - Fix swsuspdev label/uuid handling
    Resolves: rhbz#489836
  - Fix symlink generation in installkernel on ia64
    Resolves: rhbz#227711
  - Make netname command handle environmental variables correctly.
    Resolves: rhbz#474422


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-49
changelog:
  - When in fips mode load tcrypt module to self test all crypto algorithms
    Resolves: rhbz#499639
  - Add --rm_partitions to dmraid invocation to stop IO-errors when booting
    from striped dmraid.
    Resolves: rhbz#475384


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-54
changelog:
  - Handle cciss controllers correctly in fips mode
    Resolves: rhbz#505108
  - IA64 has /boot/efi instead of /boot, handle this correctly in fips mode
    Resolves: rhbz#505111
  - Don't require prelink in fips mode
    Resolves: rhbz#505113


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-55
changelog:
  - Stop local loop variable clobbering global rootdev
    Resolves: rhbz#503567
  - Don't try to activate RAID sub sets
    Resolves: rhbz#526246


author: Peter Jones <pjones@redhat.com>
changelog:
  - Handle options with spaces in /etc/modprobe.conf
    Resolves: rhbz#467850
  - Handle root vg spanning multiple multipaths
    Resolves: rhbz#501535
  - Use lvm --dumpconfig to retrieve the lvm configuration
    Resolves: rhbz#517868


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-64
changelog:
  - Set up each network interface only once.
    Resolves: rhbz#499781
  - Don't fail on s390* when dmraid.static isn't there but withdmraid is true
    Resolves: rhbz#513961


author: Brian C. Lane <bcl@redhat.com> - 5.1.19.6-72
changelog:
  - Add multipath to the list of FIPS limitations. (#700102) (bcl)
    Resolves: rhbz#700102
  - rootdev should be a dev node (#532207) (bcl)
    Resolves: rhbz#532207
  - exit() from nash-hotplug when the parent pid dies (#700592) (oblin)
    Resolves: rhbz#700592
  - Add test for updating an existing arg on ALL kernels (#696971) (bcl)
    Resolves: rhbz#696971
  - Allow args changes to affect all kernel entries (#696971) (bcl)
    Resolves: rhbz#696971
  - Fix segfault on other sections (#679581) (bcl)
    Resolves: rhbz#679581
  - Support dirsync option in nash's mount command (#602409) (cdahlin)
    Resolves: rhbz#602409
  - Clear lvm command_names and prefix (#593096) (bcl)
    Resolves: rhbz#593096
  - Add channel bonding support when root is on iscsi (#529158) (bcl)
    Resolves: rhbz#529158
  - Only add a module once (#512892) (bcl)
    Resolves: rhbz#512892
  - s390 now requires dmraid (#620699) (bcl)
    Resolves: rhbz#620699
  - libdhcp-1.20-12 or later now required (#660731) (bcl)
    Resolves: rhbz#660731


author: Brian C. Lane <bcl@redhat.com> 5.1.19.6-78
changelog:
  - Use multipath -B to prevent it from writing to bindings file in the initrd (bcl)
    Resolves: rhbz#782615


author: Brian C. Lane <bcl@redhat.com> 5.1.19.6-82
changelog:
  - Use ! instead of / when searching sysfs for ccis device
    Resolves: rhbz#988020
  - Always include ahci module (except on s390) (bcl)
    Resolves: rhbz#978245
  - Prompt to recreate default initrd (karsten)
    Resolves: rhbz#472764


author: Miloslav Trmač <mitr@redhat.com> - 0.15-1.el5.1
changelog:
  - Don't stat() paths to all excluded filesystems when encountering a mount point
    Resolves: #237120


author: Joe Orton <jorton@redhat.com> 2.0.1-5
changelog:
  - merge from Taroon:
   * don't re-use database connections (#115496)
   * make functions static
   * downgrade "not configured" log message from warning to debug


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-1
changelog:
  - Rebase to upstream mod_nss 1.0.8 (#588858)
  - Use remote hostname set by mod_proxy to compare to CN in peer cert (#591901)
  - Patch to add configuration options for new NSS negotiation API (#574187)
  - Set minimum version of nss to 3.12.6 to pick up renegotiation fix
  - Add (pre) for Requires on httpd so we can be sure the user and group are
    already available
  - Use _sysconfdir macro instead of /etc
  - Remove unused variable and perl substitution for gencert. gencert used to
    have separate variables for NSS & NSPR libraries, that is gone now so this
    variable and substitution aren't needed.
  - Added comments to patch to identify what they do
  - The location of libnssckbi.so moved from /lib[64] to /usr/lib[64] (#558545)
  - Don't generate output when the default NSS database is generated (#538859)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-2
changelog:
  - Don't call PK11_ListCerts for every server (#635324)
  - Fix hang when handling large POST under some conditions (#634685)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4.1
changelog:
  - Execute the postinstall script on upgrades so database ownership is
    correct (#679748)
  - Z-Stream patch for 'mod_nss' (RHEL 5.6)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-4.2
changelog:
  - Bugzilla Bug #849044 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Z-Stream patch for 'mod_nss' (RHEL 5.8)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-5
changelog:
  - Bugzilla Bug #692868 - https (with mod_nss) fails with reverse proxy when
    using with mod_proxy
  - Bugzilla Bug #677698 - Lack of interlock between nss processes to pcache
    causes httpd failure
  - Bugzilla Bug #714255 - overrunning array when executing nss_pcache


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-6
changelog:
  - Bugzilla Bug #749401 - https://server.testrelm/ipa/xml: Bad Request
    intermittent errors
  - Bugzilla Bug #749402 - may be possible to spoof mod_nss FakeBasicAuth
  - Bugzilla Bug #749405 - mod_nss fails debug assertion
  - Bugzilla Bug #749406 - Add 'libnssckbi.so' runtime dependency . .


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.8-7
changelog:
  - Fix 'Bugzilla Bug #749405 - mod_nss fails debug assertion' by removing
    'mod_nss-no_shutdown_if_not_init.patch' and applying
    'mod_nss-no_shutdown_if_not_init_2.patch' instead
  - The 'mod_nss-no_shutdown_if_not_init_2.patch' patch also fixes
    Bugzilla Bug #784548 - File descriptor leak after "service httpd reload"
    or httpd doesn't reload


author: Rob Crittenden <rcritten@redhat.com> - 1.0.8-8
changelog:
  - Resolves: CVE-2013-4566
  - Bugzilla Bug #989724 - mod_nss does not respect `NSSVerifyClient` in
    Directory [rhel-5.10.z]


author: Joe Orton <jorton@redhat.com> 3.1.4-3
changelog:
  - rebuild for httpd 2.2
  - build with -fno-strict-aliasing
  - don't use deprecated APR_STATUS_IS_SUCCESS() macro


author: Rob Crittenden <rcritten@redhat.com> 1.0.2-4
changelog:
  - The nss package changed the location of the NSS shared libraries to /lib from
    /usr/lib. Static libraries remained in /usr/lib. They then updated their
    devel package to put symlinks back from /lib to /usr. Respin to pick that up.
    BZ 434395.


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-4
changelog:
  - Updated mod_revocator-kill patch. The ownership of the semaphore used to
    control access to crlhelper was not always changed to the Apache user
    (#648546)


author: Rob Crittenden <rcritten@redhat.com> - 1.0.3-5
changelog:
  - Fix shutting down Apache if CRLUpdateCritical is on and a CRL
    is not available at startup (#654378)


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-6
changelog:
  - Bugzilla Bug #737556 - CRLS are not downloaded when mod_revocator module
    is loaded successfully. And no error was thrown in httpd error_log
  - Add 'autoreconf -fvi' to build section


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-7
changelog:
  - Bugzilla Bug #716355 - mod_revocator does not shut down httpd server if
    expired CRL is fetched
  - Bugzilla Bug #716361 - mod_revocator does not bring down httpd server if
    CRLUpdate fails


author: Matthew Harmsen <mharmsen@redhat.com> - 1.0.3-9
changelog:
  - Bugzilla Bug #716874 - httpd (32 bit) failed to start if mod_revocator
    (32 bit) is installed on ppc64


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.9
changelog:
  - Modify weak-modules to handle module removal against multiple kABI compat.
    kernels at the same time, removing the correct module links.
  - Resolves: #216645.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.10
changelog:
  - Modify weak-modules to handle kmod removal and the need to create
    compatible kernel module links to other compatible modules.
  - Resolves: #215272.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.15
changelog:
  - Prevent modifying existing grub entries (always add them).
  - Don't ask for new entries to be default by default.
  - Resolves: #222085, #222084.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.27
changelog:
  - Make naming of Driver Update Program grub entry more friendly to RHEL users than the previous entries were.
  - Make the resultant grub entry default bootable.
  - Related: #224076.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.31
changelog:
  - Overhaul logic for bootpath driver handling to work with new-kernel-pkg
    grubby better in keeping with their design.
  - Resolves: #252210.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.32
changelog:
  - Update fix to pipe issue and use same logic in other place we call "head -n 1"
  - just in case it would ever also cause similarly noisy output.
  - Resolves: #249537.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.34
changelog:
  - Update to fix inter-module symbol references on 64-bit platforms.
  - (fix wasn't properly in the build yesterday).
  - Resolves: #247986.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.37
changelog:
  - Sort modules alphabetically.
  - Resolves: #249449.
  - Check override of modules.
  - Resolves: #253512.
  - Fix "--dry-run" option.
  - Resolves: #254141.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.39
changelog:
  - Make modprobe operate in nonblocking mode by default
  - Resolves: #280411.
  - Add a --delete-modules to weak-modules to avoid linking compat
  - Resolves: #432959.


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.46
changelog:
  - Correct use of 'nm' to avoid unnecessary warning messages.
  - Also add a dependency on binutils and mkinitrd.
  - Resolves: #463777


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.50
changelog:
  - Update weak-modules script to use newer logic on add_modules to
  - avoid occasional creation of needless subdirectories.
  - Resolves: #484762


author: Jon Masters <jcm@redhat.com> - 3.3-0.pre3.1.60
changelog:
  - Add SYSV locking in the case of a read-only filesystem.
  - Resolves: #430942
  - Do not create Xen grub boot entries for a running domU.
  - Resolves: #509568
  - Do not re-link compatible module when also removing it.
  - Resolves: #477089


author: Richard Megginson <richm@stanforalumni.org> - 5.17-3
changelog:
  - make more Fedora Core friendly - move each requires and buildrequires to a separate line
  - remove --with-nss since svrcore implies it; fix some macro errors; macro-ize nspr and nss names
  - fix directory attrs in devel package


author: Axel Thimm <Axel.Thimm@ATrpms.net> - 6.0.0-2
changelog:
  - Rename to mozldap.
  - move configure step to %build section.
  - clean up excessive use of %defines, make more Fedora like.
  - fix mismatching soname issue.
  - generic specfile cosmetics.


author: Rich Megginson <richm@stanfordalumni.org> - 6.0.2-1
changelog:
  - Fixed exports file generation for Solaris and Windows - no effect on linux
  - bumped version to 6.0.2


author: Rich Megginson <rmeggins@redhat.com> - 6.0.4-1
changelog:
  - bump version to 6.0.4 - this version has some memory leak
  - fixes for SASL related code, fixes for control handling with
  - referral chasing, and packaging improvements
  - use -p when installing include files to preserve timestamps


author: Rich Megginson <rmeggins@redhat.com> - 6.0.5-2
changelog:
  - Resolves: Bug 753014 - el5 el4 mozldap-tools - anonymous bind ldapsearch segfault on smart referrals


author: Jitka Kudrnacova <jkudrnac@redhat.com> 2.5.4-6
changelog:
  - Fixed page scaling (bug #173276) and modified the manpage
    (the bug was mentioned in the manpage)


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-5
changelog:
  - dead code elimination
  - updated spec link to recent source
  - removed spec link to obsolete URL
  - rebuilt


author: Jindrich Novy <jnovy@redhat.com> 1.2.18-8
changelog:
  - fix type confusion in SCSI_writet(), SCSI_readt(), slow_memcopy()
    and slow_bzero()
  - rebuilt with gcc4


author: Dan Horák <dhorak@redhat.com> - 1.2.18-9
changelog:
  - fixed segfault when scsitape is run with an unknown command-line option (#513984)
  - Resolves: #513984


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-1
changelog:
  - update to 1.4.2.2
  - fix directories in manual.txt (#162207)
  - drop bcc patch (#197408)
  - don't package flea


author: Miroslav Lichvar <mlichvar@redhat.com> 5:1.4.2.2-3.el5
changelog:
  - fix POP authentication with latest cyrus-sasl (#213271)
  - fix insecure temp file creation on NFS (#213274, CVE-2006-5297)


author: Honza Horak <hhorak@redhat.com> 5:1.4.2.2-6.el5
changelog:
  - fix overflow in gecos field handling (#241652, CVE-2007-2683)
    patch mutt-gecos.patch hasn't been committed into RHEL-5 branch 
    while fixing in RHEL-5.0.z, adding now


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.1
changelog:
  - Rearrange the position of the svn tag in the n-v-r so z stream updates
    won't be so ugly should they ever be needed


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.2931.2
changelog:
  - Incorporate fixups to Requires(post) and Requires(preun) from openmpi
  - Fix up post/preun scripts to work like the scripts from openmpi11
  - Resolves: bz465448


author: Doug Ledford <dledford@redhat.com> - 1.1.0-0.3355.1.el5
changelog:
  - Update to final ofed 1.4.1 bits
  - Compile against non-XRC libibverbs
  - Related: bz506258, bz506097


author: Doug Ledford <dledford@redhat.com> - 1.0.3-2
changelog:
  - Make scriptlets match mvapich
  - Include a Requires(post) and Requires(preun) so installs work properly
  - Resolves: bz465448


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #256501, #240813, #246309, #254012
  Resolves: #280811, #316451, #349121, #367131
  - Synchronize with current Fedora package, which is pretty well tested by now;
    see past bzs 245770, 241912, 233771, 221085, 223713, 203910, 193559, 199368


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Adjust thread stack requests to allow for platform-specific guard page size;
    necessary to prevent stack overrun on PPC with RHEL5's 64K page size.
  Resolves: #435391
  - Remove calendar-dependent queries from "view" test; necessary to get
    regression tests to pass after 2007.


author: Tom Lane <tgl@redhat.com> 5.0.77-1
changelog:
  - Update to MySQL 5.0.77, for numerous fixes described at
    http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-77.html
    including low-priority security issues CVE-2008-2079, CVE-2008-3963
  Resolves: #448487, #448534, #452824, #453156, #455619, #456875
  Resolves: #457218, #462534, #470036, #476896, #479615
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Resolves: #450178
  - Fix mysql.init to wait correctly when socket is not in default place
  Resolves: #435494


author: Tom Lane <tgl@redhat.com> 5.0.77-3
changelog:
  - Add fix for CVE-2009-2446 (format string vulnerability in COM_CREATE_DB and
    COM_DROP_DB processing)
  Resolves: #512200


author: Tom Lane <tgl@redhat.com> 5.0.77-4.2
changelog:
  - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030
  Resolves: #556505
  - Use non-expired certificates for SSL testing (upstream bug 50702)
  - Emit explicit error message if user tries to build RPM as root
  - Add comment suggesting disabling symbolic links in /etc/my.cnf


author: Tom Lane <tgl@redhat.com> 5.0.77-4.4
changelog:
  - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682,
    CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,
    CVE-2010-3839, CVE-2010-3840
  Resolves: #645642
  - Backpatch strmov fix so that code can be tested on more recent platforms


author: Tom Lane <tgl@redhat.com> 5.0.77-4.5
changelog:
  - Add fix for crash during SHOW CREATE TABLE
  Resolves: #659609
  - Add fix for corruption of large BLOB values during dump/reload
  Resolves: #658863


author: Tom Lane <tgl@redhat.com> 5.0.77-4.el5_6.6
changelog:
  - Add fix for regression with input lines over 1MB (caused by fix for 658863)
  Resolves: #700497
  - Add fix for memory leak with DISTINCT, ORDER BY in subquery
  Resolves: #692953


author: Tom Lane <tgl@redhat.com> 5.0.95-1.el5_7.1
changelog:
  - Update to 5.0.95, to get the last upstream bugfixes in this release series
    including numerous CVEs announced in January 2012
  Resolves: #787140


author: Tom Lane <tgl@redhat.com> 5.0.77-5
changelog:
  - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030
  Resolves: #556506
  - Use non-expired certificates for SSL testing (upstream bug 50702)
  - Emit explicit error message if user tries to build RPM as root
  - Add comment suggesting disabling symbolic links in /etc/my.cnf


author: Tom Lane <tgl@redhat.com> 5.0.77-7
changelog:
  - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682,
    CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,
    CVE-2010-3839, CVE-2010-3840
  Resolves: #645643
  - Backpatch strmov fix so that code can be tested on more recent platforms


author: Tom Lane <tgl@redhat.com> 5.0.95-1
changelog:
  - Update to 5.0.95, to get the last upstream bugfixes in this release series
    including numerous CVEs announced in January 2012
  Resolves: #787141


author: Tom Lane <tgl@redhat.com> 5.0.95-2
changelog:
  - Support rotation of mysqld log (though this is not enabled by default)
  Resolves: #647223
  - Fix crash with EXPLAIN and prepared statements
  Resolves: #654000
  - Adopt init script updates from the last Fedora init script (F-15)
  Resolves: #703476
  - Re-enable profiling feature, unintentionally disabled in 5.0.95-1
  Resolves: #806365


author: Honza Horak <hhorak@redhat.com> 5.1.67-4
changelog:
  - Fix checking scl environment in the init script
  - Fix checking daemon process status
  - Fix log file path in logrotate script


author: Honza Horak <hhorak@redhat.com> 5.1.67-6
changelog:
  - Spec file fixes found in Package Review #950050
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.1.69-1
changelog:
  - Update to 5.1.69
  - Do not set SSL option SSL_OP_NO_COMPRESSION that does not
    exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.1.69-2
changelog:
  - Fix reporting of service starting
    Related: #958098
  - Include mysqlhotcopy script
  - Use correct service name in the init script
  - Test suite sanity fixes


author: Honza Horak <hhorak@redhat.com> 5.1.69-6
changelog:
  - Restore SELinux context after installing -server package
  - Sub-package -test should require -libs
  - Added BuildRequire: scl-utils-build for any case


author: Honza Horak <hhorak@redhat.com> 5.1.70-1
changelog:
  - Update to MySQL 5.1.70, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.1/en/news-5-1-70.html
    Resolves: #986138


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    Resolves: #1055875


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089202


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1055876


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089203


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160514


author: Matej Muzila <mmuzila@redhat.com> - 5.5.45-1
changelog:
  - Rebase to 5.5.45
    Includes fixes for: CVE-2014-6568 CVE-2015-0374
    CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
    CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
    CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
    Resolves: #1247020


author: Jindrich Novy <jnovy@redhat.com> 0.98.39-1
changelog:
  - update to 0.98.39
  - add BuildRequires ghostscript, texinfo to doc subpackage (#110584)
  - generate also PDF documentation for nasm (#88431)
  - new release fixes CAN-2004-1287 (#143052)


author: Matthias Clasen <mclasen@redhat.com> - 2.16.0-7
changelog:
  - Fix scripts according to the packaging guidelines
  - Require GConf2 for the scripts
  - Require pkgconfig for the -devel package


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-5
changelog:
  - Require libgnome in the glade file, so that the GNOME
    stock icons can be used
  Related: rhbz#250403


author: Bastien Nocera <bnocera@redhat.com> 1.0.1-6
changelog:
  - Using the libgnomeui stock icons requires to link against
    libgnomeui and init our app as a GNOME app, which we don't
    want to do. Use the evolution icon instead
  Related: rhbz#250403


author: Radek Vokal <rvokal@redhat.com> - 1.84-7
changelog:
  - add dist tag
  - add '-C' option and behaviour for sending CRLFs as line-ending (#203931) <koszorus@reidea.hu>


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-20
changelog:
  - update to patch 20060701
  - don't strip libraries, chmod +x them
  - move .so links to devel package
  - add gpm-devel to buildrequires
  - spec cleanup


author: Miroslav Lichvar <mlichvar@redhat.com> 5.5-24.20060715
changelog:
  - modify tgetstr to make screen happy (#202480)
  - use CFLAGS when linking (#199369)
  - change BuildRoot tag to comply with Fedora packaging guidelines


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-24.1
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449897)
  - fix SNMPv3 authentication checks (unknown CVE) (#449897)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-7.1
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#516183)
  - fix memory leak in ipNetToPhysicalTable (#517041)


author: Radek Vokál <rvokal@redhat.com> - 1.60-76
changelog:
  - make sctp quiet on systems without sctp and also add description to netstat.8
  - fixed arp unaligned access error
  - netplugd init script fixed
  - Resolves: #242916, #220438, #229232


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-79
changelog:
  - fixed warning: Interface eth0 still in ALLMULTI mode (#477876)
  - fixed german man page for arp (#322901)
  - fixed tcp timers info in netstat (#466845)
  - fixed ifconfig's man page (#453918)
  - fixed buffers lengths in statistics.c (#493314)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-82
changelog:
  - hostname -s returns short host name even if the host name doesn't resolve (#319981)
  - mii-tool now checks only generic MII registers defined in <linux/mii.h> (#531980)
  - fixed statistics.c to use unsigned long long (instead of int)
    to handle 64 bit integers (#622734)
  - prevent 'netstat -nr -A inet6' from smashing stack
    when /proc/net/ipv6_route is broken (#668047)
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#699698)
  - patch netstat to separate basename of -p only if it is absolute path in order
    to make argv[0]="sshd pty/0" display as sshd, and not as /0 (#707427)
  - plipconfig man page and usage output fixes (#707460)
  - improved netstat_stop_trim.patch to not truncate IPV6 UDP sockets (#732983)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-83
changelog:
  - make net-tools actually build after dist-git conversion
  - correct 'netstat --sctp -n' output (#982179)
  - 'netstat --sctp -n' was crashing on bad input (#982638)


author: Jindrich Novy <jnovy@redhat.com> 10.34-8
changelog:
  - readd pbmtols, author claims it's LGPL (#202519)
  - add .l1 suffixes to tarball names to reflect legal fixes
    in the upstream release with the same NVR


author: Jindrich Novy <jnovy@redhat.com> 10.35-1
changelog:
  - update to 10.35
  - drop .pnmtopng, .rgbtxt patches, fixed upstream
  - sync .xwidfix, .ppmtompeg patches
  - regenerate man pages


author: Jindrich Novy <jnovy@redhat.com> 10.34-6.fc6
changelog:
  - regenerate man pages so that makewhatis isn't confused (#204991)
    (upstream makeman script was broken -> now fixed)


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-7.el5
changelog:
  - rebase to 10.35.58 (#479017)
  - fix ppmfade, ppmrainbow
  - fix doublefree corruption and couple of memleaks in pnmtofiasco
  - fix cmuwmtopbm and other utilities by making endianess
    functions work correctly on 64bit systems (#476863)
  - fix ppmdfont and ppmddumpfont and svgtopam (thanks to Jiri Moskovcak)
  - add BR: ghostscript
  - use correct macro arguments (#246707)
  - fix segfault in ximtoppm (#482867)
  - fix options in pamperspective, pbmtoepson, ppmpat, pamaddnoise,
    cameratopam, fiascotopnm so that they match their man pages
    (#483011, #483070, #483243, #483245, #482829, #482839)
  Resolves: #246707, #479017, #476864, #476867, #483011, #483070
  Resolves: #483243, #483245, #482867, #482829, #482839


author: Jindrich Novy <jnovy@redhat.com> 10.35.58-9.el5
changelog:
  - fix pnmtofiasco failures on ppc and s390x (#509366)
  - fix typos in pamperspective man pages (#510501)
  - fix pgmtopbm (#510759)
  - fix buffer overlow in xpmtoppm (#567597)
  - fix endianess issue with xwdtopnm (#574362)


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -10.el5 to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-15.el5
changelog:
  - fix typos in whiptail usage message (#456307)
  - include whiptail man page (#456307)
  - improve --noitem description (#456305)
  - bind \E[Z to back-tab in built-in keymap (#468046)
  - include tutorial in txt format


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = 0.52.2 instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -9 to snack's Provides: line (just in case).


author: Steve Dickson <steved@redhat.com> 1.0.9-14
changelog:
  - Doing a connect on UDP sockets causes the linux network
    stack to reject UDP patches from multi-home server with
    nic on the same subnet. (bz 208244)


author: Steve Dickson <steved@redhat.com> 1.0.9-18
changelog:
  - Fix mount.nfs4 to display correct error message (bz 227212)
  - Fix mount.nfs so mtab is updated (bz 227988)
  - Eliminate timeout on nfsd shutdowns (bz 222001)
  - Eliminate memory leak in mountd (bz 239536)
  - Make sure statd uses correct uid/gid by chowning
    the /var/lib/nfs/statd with the rpcuser id. (bz 235216)
  - Correct some sanity checking in rpc.nfsd. (bz 220887)
  - Fixed mount.nfs mtab lock (bz 227985)
  - Have mountd hold open etab file to force inode number to change (bz 236823)
  - Create a /etc/sysconfig/nfs with all the possible init script
    variables (bz 234543)
  - Changed nfs initscript to exit with correct value (bz 221874)
  - Added userlevel support for v4 relocation support (bz 223053)


author: Steve Dickson <steved@redhat.com> 1.0.9-19
changelog:
  - Make sure the condrestarts exit with a zero value (bz 240352)
  - Added -o nordirplus mount option to disable READDIRPLUS (bz 240357)
  - Stopped /etc/sysconfig/nfs from being overwritten on updates (bz 234543)


author: Steve Dickson <steved@redhat.com> 1.0.10-22
changelog:
  - Reworked returns values of the init scripts (bz 243703)
  - Reworked rpc init scripts so they are not dependent
    loading modules. (bz 241015).


author: Steve Dickson <steved@redhat.com> 1.0.10-23
changelog:
  - Changed rpcidmapd and rpcgssd stop priority levels so
    those daemons would be stoppped after autofs (bz 245376)
  - Updated some out-of-date man pages (bz 233903)
  - Stoppped mount.nfs from wasting reserve ports (bz 246254)


author: Jeff Layton <jlayton@redhat.com> 1.0.9-26
changelog:
  - Add new mountd mode for handling many netgroups (bz 250609)
  - Change nfs init script to not reset lockd ports on stop (bz 313671)
  - Change nfslock script to use sysctls to set lockd ports (bz 313671)


author: Steve Dickson <steved@redhat.com> 1.0.9-27
changelog:
  - Fixed nfs initscript to fail with rpc.mound fails (bz 250622) 
  - Fixed typo in rpc.mountd man page (bz 248543)
  - Turn on 'nohide' automatically for all refer exports (bz 313561)


author: Steve Dickson <steved@redhat.com> 1.0.9-29
changelog:
  - Added SECINFO support (bz 315401)
  - Reworked init scripts so service will be able to
    stop when some of the checks fail. (bz 295911)


author: Steve Dickson <steved@redhat.com> 1.0.9-30
changelog:
  - Added in a number of bug fixes (esp in crossmnt code) that were 
    exposed during the secinfo testing. (bz 315401)


author: Steve Dickson <steved@redhat.com> 1.0.9-33
changelog:
  - In both rpcgssd and rpcsvcgssd initscrips move the 
    SECURE_NFS check back to be a global check. This
    stops false failures from happen when the services
    are stopped when they are not configured to start (bz 435267)


author: Steve Dickson <steved@redhat.com> 1.0.9-35z
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2008:0486)


author: Steve Dickson <steved@redhat.com> 1.0.9-36
changelog:
  - Incorrect exit codes from nfs init script (bz 431891)
  - Incorrect a typo in nfsstat --mounted arg (bz 433741)
  - Fixed statd callbacks with the -n arg (bz 451057)
  - Do not display zero stats with nfsstat (bz 437242)
  - Pre-load nfsd when args to rpc.nfsd are given (bz 441983)
  - Increase the number simultaneous krb5 mounts (bz 432879)
  - Have rpc.gssd use file ownership vs uid on cred file (bz 433751)


author: Steve Dickson <steved@redhat.com> 1.0.9-37
changelog:
  - Added the warning.patch to fix some warning which were
    flaged by rpmdiff during the errata phasea (Errata 2009:8187)

  - Re-enabled tcp wrappers. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-38
changelog:
  - The fix to bz 438418 introduced a regression that caused
    mount.nfs to exit with zero on failed mounts. (bz 465966)


author: Steve Dickson <steved@redhat.com> 1.0.9-39
changelog:
  - Fixed typo in nfs initscript that caused rpc.rquotad daemons
    to be started but not stoppped (bz 470483)


author: Steve Dickson <steved@redhat.com> 1.0.9-40
changelog:
  - Fixed arguments to the hosts_ctl() call in the good_client() 
    routine used in the tcpwrapper support. (bz 440120)


author: Steve Dickson <steved@redhat.com> 1.0.9-42
changelog:
  - mountd: Check host alias with netgroups (bz 478952)
  - exportfs: fixed typo in man page (bz 474848)
  - nfs.init: NFS server reboot results in "Stale NFS file handle" (bz 474449) 
  - nfslock.init: options not correctly parsed (bz 459591)
  - mount.nfs: mounts fail with read-only /etc (bz 450646)
  - nfslock.init: lockd not using settings in sysconfig/nfs (bz 434795)
  - tcpwrappers: updated code to correctly use api  (bz 494878)
  - nhfsstone: added v3 and v4 support (bz 465933)
  - mount.nfs: add support for lookupcache= option (bz 489335).


author: Steve Dickson <steved@redhat.com> 1.0.9-50
changelog:
  - Reverted the removal of idmapd.conf and its manpage
    since bz 502707 was not make the RHEL5.6 release


author: Steve Dickson <steved@redhat.com> 1.0.9-51
changelog:
  - Fixed verification on runtime configuration file (bz 471401)
  - Ensured all init script are LSB compliant (bz 485905)
  - Added static user mapping to idmapd.conf (bz 502707)


author: Steve Dickson <steved@redhat.com> 1.0.9-52
changelog:
  - Fixed retry= to handle lack of reserved port situation (bz 240790)
  - Stopped rpc.statd is running as root (bz 495066)
  - Fixed rpc.gssd ccachedir option (bz 498134)
  - Make sure the uid/gid of nfsnobody is the
    correct value for all archs (bz 511876)
  - Fixed nfsstat's mislabled output (bz 617669)
  - Add support for lookupcache= option in nfsv4 (bz 511312)
  - Fixed UDP only mounts (bz 513466)
  - Fixed mounts when mount v1 is not supported (bz 595675)
  - Added sane timeout to svcgssd (bz 507341)


author: Steve Dickson <steved@redhat.com> 1.0.9-55
changelog:
  - mount: fixed the -o retry option to retry the given amount (bz 736677)
  - manpage: removed the -o fsc option (bz 715523)
  - nfsstat: show v4 mounts with -m flag (bz 712438)
  - mount: allow insecure ports with mounts (bz 513094)
  - gss: turned off excessive syslogs (bz 593097)
  - mountd: allow v2 and v3 to be disabled (bz 529588)
  - specfile: make sure nfsnobodys gid changes when it exists (bz 729603)
  - initfiles: initscripts improvements (bz 710020)


author: Steve Dickson <steved@redhat.com> 1.0.9-56
changelog:
  - Removed sim crash support (bz 600497)
  - initfiles: more initscripts improvements (bz 710020)
  - mount: Don't wait for TCP to timeout twice  (bz 736677)


author: Steve Dickson <steved@redhat.com> 1.0.9-58
changelog:
  - gss: turned off more excessive syslogs (bz 593097)
  - initfiles: more initscripts improvements (bz 710020)
  - specfile: correct typo when nfsnobodys gid already exists (bz 729603)


author: Steve Dickson <steved@redhat.com> 1.0.9-59
changelog:
  - gss: turned of even more excessive syslogs (bz 593097)
  - mount.nfs: Ignored the SIGXFSZ when handling RLIMIT_FSIZE changes (bz 697979)


author: Steve Dickson <steved@redhat.com> 1.0.9-60
changelog:
  - Updated idmapd.conf and idmapd.conf.man to reflect the 
    static user name mapping (502707)
  - Fixed an umount regression introduced by bz 513094 (bz 781931)


author: Steve Dickson <steved@redhat.com> 1.0.9-61
changelog:
  - Added a time out arugment to gssd (bz 507341)
  - Added mount.nfs4 and umount.nfs4 man pages (bz 760019)
  - Removed gss_clnt_send_err and gss_destroy_creds (bz 760019)
  - Remove typo in in nfslock.init (bz 803667)
  - UDP mounts need to fall back to TCP mounts on timeouts (bz 769098)
  - Avoid etab corruption by sync-ing up calls to exportfs (bz 800365)
  - Fixed regression caused by bz 595675 (bz 745730) 
  - Added resvport/noresvport to nfs man page (bz 772170)


author: Steve Dickson <steved@redhat.com> 1.0.9-64
changelog:
  - Fixed umounts when MOUNTD_NFS_V2=no (bz 804681)
  - Fixed typo in nfs init script (bz 819373)
  - Fixed rpc.idmapd warning with v4 mounts (bz 708253)
  - Fixed rpc.gssd warning with v4 mounts (bz 769744)
  - Make sure statd's backup dir has correct permissions (bz 782455)


author: Harshula Jayasuriya <harshula@redhat.com> 1.0.9.68
changelog:
  - Need to use /var/lock/subsys/nfs not /var/lock/subsys/nfsd.
    Use "status -l nfs nfsd" for status check. The "-l" option
    was introduced in initscripts >= 8.45.43. (bz 873307)


author: Steve Dickson <steved@redhat.com> 1.0.9-70
changelog:
  - Have showmount try the highest mount version first (bz 947552)
  - Switch the mount version umount tries first (bz 947552)


author: Steve Dickson <steved@redhat.com> - 0.3.0-1
changelog:
  - Updated to latest upstream version 0.3.0
  - Fixed minor issues in spec file from the package review


author: Tom "spot" Callaway <tcallawa@redhat.com> 0.3.0-1.1
changelog:
  - lose the BR for autotools
  - Patch in support for destdir
  - use %configure macro, make DESTDIR= install
  - add sparc to -fPIE (trivial, but correct)
  - destdir revealed missing/poorly created symlink, patch fixes it, add nfs4_editfacl to files
  - LDFLAGS passed to configure/exported were being blindly overwritten, patch fixes


author: Steve Dickson <steved@redhat.com> - 0.3.1-1.1
changelog:
  - Updated to latest upstream version 0.3.1 which eliminated the 
    need for the patches introduced in the previous commit.


author: Karsten Hopp <karsten@redhat.de> 4.03-1
changelog:
  - update to 4.03, this fixes #184286
  - remove duplicate menu entry in 'Internet' (#183056)
  - fix possible tmpdir race condition during build (#158996)


author: Luke Macken <lmacken@redhat.com> - 0.1.0-3
changelog:
  - Add notify-python-0.1.0-attach_to_status_icon.patch to allow the attaching
    notifications to status icons.


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Remove an unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Fix changelog comments
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-2
changelog:
  - Resolves: Bug 1269359 - CVE-2015-7183
  - nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption [rhel-5.11.z]


author: Elio Maldonado <emaldona@redhat.com> - 4.11.0-0.1
changelog:
  - Rebase to NSPR 4.11
  - Resolves: Bug 1297943 - Rebase RHEL 5.11.z to NSPR 4.11 in preparation for Firefox 45


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: rhbz#788672 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#834219 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#834219 - Fix postinstall scriptlet failures
  - Fix %post and %postun lines per packaging guidelines
  - Updated License: to MPLv2.0 per upstream


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Kai Engert <kengert@redhat.com> - 3.11.5-3
changelog:
  - Prevent .chk files from being modified by prelink and rpm building
    by generating chk files at install time and setting immutable
    filesystem attribute (230546, 231367).


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Kai Engert <kengert@redhat.com> - 3.12.3.99.3-1.el5_2
changelog:
  - create 5.2.z-stream version
  - updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75
  - adjust ssl cipher count constant (bug 505650)
  - add a patch to seckey
  - remove references to SEED
  - exclude binary db files from change detection
  - Add dependency to pkgconfig to devel package (bug456849)
  - Use system zlib
  - Enable loading of external ECC modules


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-5
changelog:
  - Update builtins certs to those from NSSCKBI_1_87_RTM
  - Resolves: rhbz#807272 - [RHEL 5.6.Z] Backport 'nspr' and 'nss' fix in RHSA-2011-1282, MFSA 2011-34


author: Elio Maldonado <emaldona@redhat.com> - 3.12.8-8
changelog:
  - Fix typo in extension used for backup file when patching
  - Resolves: rhbz#1035655 - CVE-2013-5605 nss: Null_Cipher does not respect maxOutputLen


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.12.10-9
changelog:
  - Resolves: Bug 713373 - File descriptor leak after service httpd reload
  - Don't initialize nss if already initialized or if there are no dbs


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-2
changelog:
  - Resolves: rhbz#834219 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#834219 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#834219 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#830304 - Update RHEL 5.x to NSS 3.13.5 and NSPR 4.9.1 for Mozilla 10.0.6


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#830304 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#830304 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-5
changelog:
  - Related: rhbz#830304 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Robert Relyea <rrelyea@redhat.com> - 3.13.5-7
changelog:
  - Resolves: rhbz#820684
  - Enable certutil handle user supplied flags for PKCS #11 attributes.
  - This will enable certutil to generate keys in fussy hardware tokens.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Resolves: rhbz#820684
  - Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}


author: Elio Maldonado <emaldona@redhat.com> - 3.13.6-3
changelog:
  - Fix changelog inconsistencies with commit and bug resolved
  - Resolves: rhbz#891149 [CVE-2013-0743]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-2
changelog:
  - Restore the freebl-softoken source tar ball updated to 3.14.3
  - Renumbering of some sources for clarity
  - Resolves: rhbz#918870 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-3
changelog:
  - Update to NSS_3_14_3_RTM
  - Rework the rebase to preserve needed idiosynchracies
  - Ensure we install frebl/softoken from the extra build tree
  - Don't include freebl static library or its private headers
  - Add patch to deal with system sqlite not being recent enough
  - Don't install nss-sysinit nor sharedb
  - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Fix rpmdiff test reported failures and remove other unwanted changes
  - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-5
changelog:
  - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
  - Remove the unused and obsolete nss-nochktest.patch
  - Resolves: rhbz#949845 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Resolves: rhbz#1035654 - CVE-2013-5605 nss: Null_Cipher does not respect maxOutputLen
  - Update the test certificates


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Fix typo in extension used for backup file when patching
  - Resolves: rhbz#1035654 - CVE-2013-5605 nss: Null_Cipher does not respect maxOutputLen


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-10
changelog:
  - Resolves: Bug 1145497 - CVE-2014-1568
  - Adjust softokn patch to be compatible with legacy softokn API
  - Replace expired PayPalEE.cert test certificate with current one


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-9
changelog:
  - Apply upstream fixes for ecc enabling and aes gcm
  - Rename two macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Apply several upstream AES GCM fixes
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl
  - Resolves: rhbz#918948 - [RFE][RHEL5]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Restore 'export NO_FORK_CHECK=1' required for binary compatibility on RHEL-5
  - Remove an unused patch
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Resolves: rhbz#983766 - nssutil_ReadSecmodDB leaks memory
  - Add patch to get rid of sporadic blapitest core dumps


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-13
changelog:
  - Roll back to 79c87e69caa7454cbcf5f8161a628c538ff3cab3
  - Peviously added patch hasn't solved the sporadic core dumps
  - Related: rhbz#983766 - nssutil_ReadSecmodDB leaks memory


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-14
changelog:
  - Resolves: rhbz#987131 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Add disable_hw_gcm.patch and in the spec file export NSS_DISABLE_HW_GCM=1
  - Disable HW GCM on RHEL-5 as the older kernel lacks support for it
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Adjust the patches to complete the syncup with upstrean nss
  - Use NSS_DISABLE_HW_GCM on the patch as we do on the spec file
  - Ensure softoken/freebl code is the same on nss side as on the softoken side
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to nss-3.15.1
  - Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)
  - Resolves: rhbz#1033499 - [Regression] NSS no longer trusts MD5 certificates
  - Split %check section tests in two: freebl/softoken and rest of nss tests
  - Adjust various patches and spec file steps on account of the rebase
  - Add various patches and remove obsoleted ones on account of the rebase
  - Renumber patches so freeb/softoken ones match the corresponding ones in rhel-6 nss-softokn


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Remove unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Kai Engert <kaie@redhat.com> - 3.15.3-3
changelog:
  - remove unnecessary and problematic template-removal patch
    which was added as part of the 3.15.1 rebase
  - bump release number


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Remove two unused patches
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to nss-3.15.1
  - Resolves: rhbz#1002642 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)
  - Resolves: rhbz#1015864 - [Regression] NSS no longer trusts MD5 certificates
  - Split %check section tests in two: freebl/softoken and rest of nss tests
  - Adjust various patches and spec file steps on account of the rebase
  - Add various patches and remove obsoleted ones on account of the rebase
  - Renumber patches so freeb/softoken ones match the corresponding ones in rhel-6 nss-softokn


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-2
changelog:
  - Remove unused patch and retag for update to nss-3.15.3
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-3
changelog:
  - Pick up corrections made in the rhel-10.Z branch, remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042684 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Improve shell code for error detection on %check section
  - Resolves: Bug 1035281 - Suboptimal shell code in nss.spec


author: Elio Maldonado <emaldona@redhat.com> - 3.16.1-1
changelog:
  - Rebase to nss-3.16.1 for FF31
  - Resolves: Bug 1110860 - Rebase nss in RHEL 5.11 to NSS 3.16.1, required for FF 31


author: Kai Engert <kaie@redhat.com> - 3.16.1-4
changelog:
  - Adjust softokn patch to be compatible with legacy softokn API.
  - Resolves: Bug 1145430 - CVE-2014-1568


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Enable additional ssl test cycles and document why some aren't enabled
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Kai Engert <kaie@redhat.com> - 3.18.0-6
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-7
changelog:
  - Pick up upstream patch from nss-3.19.1
  - Resolves: Bug 1236954 - CVE-2015-2730 NSS: ECDSA signature validation fails to handle some signatures correctly (MFSA 2015-64)
  - Resolves: Bug 1236967 - CVE-2015-2721 NSS: incorrectly permited skipping of ServerKeyExchange (MFSA 2015-71)


author: Elio Maldonado <emaldona@redhat.com> - 3.19.1-1
changelog:
  - Rebase nss to 3.19.1
  - Pick up upstream fix for client auth. regression caused by 3.19.1
  - Revert upstream change to minimum key sizes
  - Remove patches that rendered obsolote by the rebase
  - Update existing patches on account of the rebase


author: Elio Maldonado <emaldona@redhat.com> - 3.21.0-1
changelog:
  - Rebase to nss 3.21
  - Resolves: Bug 1297944 - Rebase RHEL 5.11.z to NSS 3.21 in preparation for Firefox 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.4
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580542, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-36
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580543, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13.el5_2.1
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#455271)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #529376)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.1
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #660236)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #660236)
  - fix an uninitialized variable error (Mark Goodwin, part of #660236)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.2
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#660456, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25.3
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#662939)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 253-30
changelog:
  - report the remaining life of soon-to-be-expired passwords with granularity
    in hours, if possible (Masahiro Matsuya, #537358)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-31
changelog:
  - add testing patch to postpone the connection drop in a newly-forked child
    until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-32
changelog:
  - add revised testing patch to postpone the connection drop in a newly-forked
    child until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-34
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #511238)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
  - fix an uninitialized variable error (Mark Goodwin, part of #511238)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37.1
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#703831)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-38
changelog:
  - add a build-time requirement on a sufficiently-new openssl-devel to ensure
    that we get SHA-2 hashes when we're using TLS, because we still static-link
    the nss_ldap module (#683349)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-42.1
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#743193)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-42.2
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#743193)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-43
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#705841)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-45
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#705841)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-46
changelog:
  - Require openldap libs with a fix for #609722 - libldap ignores a directory
    of CA certificates if any of them can't be read (#593242)
  - when closing a context, clean it up so that we won't try to issue an abandon
    when we go to use it again for something else (#696707)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-50
changelog:
  - Free ldap_result when search does not return anything (#835555)
  - Use contents of ldap.secret even if it does not contain a newline (#797410)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-51.1
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#905908 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#772273 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.1
changelog:
  - Use TLS_X_CALLBACK to terminate idle SSL connections after ldc_timeout
    seconds
  - Resolves: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Jakub Hrozek <jhrozek@redhat.com> - 253-52.2
changelog:
  - Only set the TLS_X_CALLBACK if timeout is > 0
  - Related: rhbz#1035945: nss_ldap does not reconnect to alternate ldap
                            server when using SSL


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5
changelog:
  - fix selecting multicast interface (#444106)
  - disable kernel discipline when -x option is used (#431729)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-11.el5
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500784, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500784, CVE-2009-0159)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-13.el5
changelog:
  - don't crash with more than 512 local addresses (#661934)
  - add -I option (#528799)
  - fix -L option to not require argument (#460434)
  - move ntpd and ntpdate to /sbin and start earlier on boot (#470945, #689636)
  - increase memlock limit (#575874)
  - ignore tentative addresses (#489835)
  - print synchronization distance instead of dispersion in ntpstat (#679034)
  - fix typos in ntpq and ntp-keygen man pages (#664524, #664525)
  - clarify ntpd -q description (#591838)
  - don't verify ntp.conf (#481151)
  - replace Prereq tag


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-15.el5
changelog:
  - revert init script priority (#470945, #689636)
  - drop tentative patch (#489835)
  - move restorecon call to %posttrans


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-18.el5
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5_3.2
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500783, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500783, CVE-2009-0159)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-8
changelog:
  - backport change to block SIGPIPE in oddjobd, so that if a helper exits
    early, we get a write error rather than catastrophe (#246681)
  - oddjob_mkhomedir: spew an error message if the umask can't be parsed into
    a number properly (#246681)
  - pam_oddjob_mkhomedir.8: note that the module doesn't take arguments


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-10
changelog:
  - backport changes to prevent the configuration files from conflicting on
    multilib systems (#476255)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-11
changelog:
  - backport changes to not bother asking about SELinux contexts when we're
    not going to be using that information (#510457)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-12
changelog:
  - backport patch to stop trying to close a stale connection to the bus,
    which used to generate a warning from libdbus, but which now causes an
    assertion failure (#628683)


author: Nalin Dahyabhai <nalin@redhat.com> 0.27-1
changelog:
  - update to 0.27-1:
    - don't attempt to subscribe to all possible messages -- the message bus
      will already route to us messages addressed to us, and if we try for
      more than that we may run afoul of SELinux policy, generating spewage
  - add a build dependency on pkgconfig, for the sake of FC3
  - update docs and comments because D-BUS is now called D-Bus


author: Phil Knirsch <pknirsch@redhat.com> - 2.2.4-12.el5
changelog:
  - Moved the .so lib to the devel package (#219242)
  - Added proper multilib requirements for devel package (#219242)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-17.el5
changelog:
  - Added the CCA STDLL for s390(x) arch (#253059)
  - Fixed a file descriptor leak for spin locks (#371021)


author: Phil Knirsch <pknirsch@redhat.com> 2.2.4-22.el5
changelog:
  - Fixed memcmp problem for pkcsconf validation of PINs (#415931)
  - Fixed double free problem in key store (#435462)


author: Dan Horák <dhorak@redhat.com> 2.2.4-22.el5_4.1
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#540471)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#540474)
  - Resolves: #540471, #540474


author: Dan Horák <dhorak@redhat.com> 2.2.4-23.el5
changelog:
  - fixed CKR_TEMPLATE_INCOMPLETE exception on an unwrap of an AES key (#538879)
  - fixed MAC computing during offload of MAC-hashing to CPACF using PKCS11 (#539168)
  - Resolves: #538879, #539168


author: Steven Dake <sdake@redhat.com> - 0.80.1-16
changelog:
  - Add upstream revision 1307 - Remove flow control compile warning.
  - Add upstream revision 1306 - Make clean now really makes clean.
  - Add upstream revision 1305 - Set scheduler SCHED_RR to max priority available
    in system.
  - Add upstream revision 1300 - Improve behavior of flow control of CPG service
    during configuration changes.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-18
changelog:
  - Add upstream revision 1315 - Fix compile error in libcpg.
  - Add upstream revision 1314 - Change rundir to /var/openais.
  - Add upstream revision 1313 - Flow control fixes for the CPG service.
  - Add upstream revision 1312 - Correct usage of ERR_LIBRARY to SA_AIS_ERR_LIBRARY.
  - Add upstream revision 1311 - handle case where POLLHUP and POLLERR are not uspported by OS.
  - Add upstream revision 1309 - set default downcheck value to 1000ms.
  - Add upstream revision 1308 - Remove invalid code and warnings detected by Intel compiler.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.1-21
changelog:
  - Resolves: rhbz#216492
  - Add upstream revision 1319 - Increase outbound buffer size to 5000 messages.
  - Add upstream revision 1316 - Improvements on segfault logging.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.2-0
changelog:
  - Resolves: rhbz#211357
  - New upstream version including all prevision revisions.
  - Fixes cpg ordering problem.
  - Fixes ia64 unaligned problem.
  - This is the fc6 version.


author: Steven Dake <sdake@redhat.com> - 0.80.3-5
changelog:
  - Resolves: rhbz#302341
  - Add upstream revision 1455 - Fix loss of node joins in commit state resulting in looping of membership protocol.
  - Add upstream revision 1453 - Fix assertion if component registration occurs during certain phases of instantation.
  - Add upstream revision 1450 - Fix reference counting in lcr code so that lcr_ifact_release works properly.
  - Add upstream revision 1449 - Allow missing services in synchronization to not cause a segfault.k
  - Add upstream revision 1446 - Remove inadvertant commit of changes to totemsrp which happened when security changes were patched in revision 1426.
  - Add upstream revision 1426 - Patch to log security warnings when invalid identifier is used in message header for a totem header.


author: Steven Dake <sdake@redhat.com> - 0.80.3-8
changelog:
  - Resolves: rhbz#249287
  - Add non-merged IPC changes for fixing operation with cluster mirror
  - Resolves: rhbz#403901
  - Add upstream revision 1498 - enhance openais_exit_error to report string instead of error code
  - Resolves: rhbz#309621
  - Add upstream revision 1497 - Follow LSB guidelines for initscript
  - Add upstream revision 1496 - Revert patch 1480 since it causes problems with cman
  - Add upstream revision 1493 - Backport of patch 1379 to remove this_ip and replace with accessor functoins for use by ipc system
  - Add upstream revision 1486 - Unlock mutex on error condition of no memory when creating handle
  - Add upstream revision 1480 - Endian fixes for the totempg code
  - Add upstream revision 1479 - Remove & when regular reference works properly.
  - Add upstream revision 1478 - Patch to set system_from properly in retransmitted messages
  - Add upstream revision 1473 - Fix pthread_equal for timer_delete operation
  - Add upstream revision 1471 - Endian convert cpg downlist messages properly
  - Add upstream revision 1469 - change initialDataSize paramter from saUint32gt to SaSizeT to match specifications


author: Steven Dake <sdake@redhat.com> - 0.80.3-11
changelog:
  - Resolves: rhbz#429920
  - Add upstream revision 1500 - IPC locks up if a POLLERR is returned in certain circumstances.
  - Resolves: rhbz#433839
  - Add upstream revision 1501 - A mcast is delivered before a join in some circumstances.


author: Steven Dake <sdake@redhat.com> - 0.80.3-13
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1504 - Fixes checkpoint synchronization issue when a new node is started.
  - Add upstream revision 1503 - backport -f foreground option.
  - Add upstream revision 1502 - Revert revision 1477 which exhibits problems with cman.
  - Add revision 1477 - This was reverted in a previous version but cherrypicked.  Now the patch has been applied and reverted in the rpm build process to match upstream.


author: Steven Dake <sdake@redhat.com> - 0.80.3-14
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1506 - Resolves incomplete checkpoing synchronization when totem queue is full.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15
changelog:
  - Resolves: rhbz#432531
  - Add upstream revision 1514 - Remove extra log_printf.
  - Add upstream revision 1513 - Remove comparison with zero and replace with comparison with NULL in handle database code.
  - Add upstream revision 1512 - Remove early commit of synchronization data when a synchronization in progress is followed by a node leaving or joining the cluster.
  - Add upstream revision 1511 - Remove double pthread_mutex_destroy from evt service.
  - Add upstream revision 1510 - Remove double pthread_mutex_destroy from evs service.
  - Add upstream revision 1509 - Remove double pthread_mutex_destroy from cpg service.
  - Add upstream revision 1508 - Remove double pthread_mutex_destroy from clm service.
  - Add upstream revision 1507 - Remove double pthread_mutex_destroy from checkpoint service.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15.1
changelog:
  - Resolves: rhbz#509890
  - Resolves: rhbz#509887
  - Resolves: rhbz#509888
  - Resolves: rhbz#509889
  - Resolves: rhbz#509885
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven Dake <sdake@redhat.com> - 0.80.3-15.2
changelog:
  - Resolves: rhbz#509894
  - Resolves: rhbz#509893
  - Add upstream revision 1742 cherrypicked - Support on-wire compatibility for ckpt service.
  - Add upstream revision 1677 cherrypicked - Remove problem where some messages are ignored.


author: Steven Dake <sdake@redhat.com> 0.80.3-16
changelog:
  - Resolves: rhbz#400491
  - Add upstream revision 1521 - Compile on latest glibc.
  - Add upstream revision 1524 - Fix syscall usage in keygen application.
  - Add upstream revision 1546 - Fix build for authentication on bsd platforms.
  - Add upstream revision 1548 - Fix synchronization of checkpoint global id.


author: Steven dake <sdake@redhat.com> 0.80.3-8
changelog:
  - Resolves: rhbz#444909
  - Add upstream revision 1647 - Change log level output of a logging message.
  - Add upstream revision 1646 - Add test case.
  - Add upstream revision 1645 - Remove ipc deadlock in overload conditions.
  - Add upstream revision 1644 - Make lib_exit_fn work properly.
  - Add upstream revision 1643 - Remove checkpoint expiration assertions.
  - Add upstream revision 1642 - Remove checkpoint close assertion.


author: Steven Dake <sdake@redhat.com> 0.80.3-19
changelog:
  - Resolves: rhbz#442102
  - Add upstream revision 1653 - Schedule ipc dispatch thread at same priority as aisexec.
  - Add upstream revision 1652 - Remove more signal flooding problems in ipc dispatch thread.
  - Add upstream revision 1651 - Remove signal flooding of the ipc dispatch thread.


author: Steven dake <sdake@redhat.com> 0.80.3-20
changelog:
  - Resolves: rhbz#441413
  - Add upstream revision 1661 - Fix a message lost during delivery which resulted in checkpoing service segfaulting.
  - Add upstream revision 1660 - Fix commit token received_flg being incorrect in some rare circumstances.
  - Add upstream revision 1659 - Fix rare problem where checkpoint synchronizatoin database could be thrown away.
  - Add upstream revision 1655 - Allow 31 bit nodeid's which default to off.


author: Steven Dake <sdake@redhat.com> 0.80.3-22
changelog:
  - Resolves: rhbz#471896
  - Add upstream revision 1665 - Compare local address with bindnetaddr properly.
  - Add upstream revision 1664 - Use node's full ipv4 address when generating nodeids.
  - Add upstream revision 1662 - Fix segfault when user with inappropriate access permissions accessed aisexec.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.2
changelog:
  - Resolves: rhbz#486382
  - Resolves: rhbz#486388
  - Resolves: rhbz#486389
  - Resolves: rhbz#486108
  - Fix backport error in 1737-1738 patch.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.3
changelog:
  - Resolves: rhbz#486382
  - Resolves: rhbz#486388
  - Resolves: rhbz#486389
  - Resolves: rhbz#486108
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.3-2.4
changelog:
  - Resolves: rhbz#490307
  - Resolves: rhbz#491391
  - Resolves: rhbz#491395
  - Add upstream revision 1761 - More serialization work.
  - Add upstream revision 1755 - Fix segfault with cpg_leave followed by cpg_finalize.
  - Add upstream revision 1754 - reenable commented out code in previous comment.
  - Add upstream revision 1753 - Serialize service engine access.
  - Add upstream revision 1749 - Remove extra debug output from 1747 commit.
  - Add upstream revision 1747 - Fix reference counting from leaving node.
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Revision 1739 from 0.80.3-22.3 fixes #488095.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.5
changelog:
  - Resolves: rhbz#500918
  - Resolves: rhbz#500917
  - Resolves: rhbz#500914
  - Resolves: rhbz#500916
  - Add upstream revision 1896 - resolves warnings with cpg compiles.
  - Add upstream revision 1894 - resolves bug regarding cpg segfaults.
  - Add upstream revision 1893 - Return ERR_SECURITY for invalid user connections.
  - Add upstream revision 1891 - Remove compile error.
  - Add upstream revision 1890 - Fix PPC64 IPC regression.
  - Add upstream revision 1831 - Fix totempg throw away bug.
  - Add upstream revision 1774 - Fix leak that occurs in dispatch.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.7
changelog:
  - Resolves: rhbz#502940
  - Add upstream revision 1928 - fix race condition in cpg_join and cpg_leave
    resulting in serious regressions in cpg use cases.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.8
changelog:
  - Resolves: rhbz#504867
  - Add upstream revision 1947 - fix regression in CPG related to ordering of
    configuration changes.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.8
changelog:
  - Resolves: rhbz#504867
  - Add upstream revision 1947 - fix regression in CPG related to ordering of
    configuration changes.
  - Had to duplicate entry to work around bugzilla checking entry and invalid
    spec file commit.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.9
changelog:
  - Resolves: rhbz#508303
  - Add upstream revision 1998 - fix regression in totempg handling of new
    buffers.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.10
changelog:
  - Resolves: rhbz#521097
  - Add upstream revision 2053 - Make large MTU sizes not sigabort under heavy
    load.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.11
changelog:
  - Resolves: rhbz#554486
  - Resolves: rhbz#554487
  - Resolves: rhbz#567372
  - Add upstream revision 2095 - Remove stack overflow under rare conditions.
  - Add upstream revision 2096 - Do not allow checkpoint iteration during synchronization
  - Add upstream revision 2117 - Fix problem where ipc doesn't distinguish between full and empty dispatch buffer properly


author: Steven Dake <sdake@redhat.com> 0.80.3-22.12
changelog:
  - rebuild to fix spec file problem from 0.80.3-22.11.
  - Resolves: rhbz#554486
  - Resolves: rhbz#554487
  - Resolves: rhbz#567372
  - Add upstream revision 2095 - Remove stack overflow under rare conditions.
  - Add upstream revision 2096 - Do not allow checkpoint iteration during synchronization
  - Add upstream revision 2117 - Fix problem where ipc doesn't distinguish between full and empty dispatch buffer properly


author: Steven Dake <sdake@redhat.com> 0.80.3-22.13
changelog:
  - Resolves: rhbz#577885
  - Add upstream revision 2122 - Fix problem that can result in failed to receive state.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.14
changelog:
  - Resolves: rhbz#584559
  - Add upstream revision 2089 - originating many messages in recovery results
    in lockup.
  - Add upstream revision 2090 - originating many messages in recovery results
    in lockup.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.15
changelog:
  - Resolves: rhbz#619536
  - Resolves: rhbz#624517
  - Resolves: rhbz#624488
  - Add upstream revision 2153 - make openais more resilient to delayed
    multicast packets.
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent
    instead of CPG_REASON_PROCDOWN.
  - Add upstream revision 2149 - support compatibility with corosync.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.16
changelog:
  - Resolves: rhbz#647290
  - Add upstream revision 2129 - Fix problem where openais sigaborts if more then
    500 messages are originated in recovery.


author: Steven Dake <sdake@redhat.com> 0.80.3-22.1
changelog:
  - Resolves: rhbz#486382
  - Resolves: rhbz#486388
  - Resolves: rhbz#486389
  - Resolves: rhbz#486108
  - Add upstream revision 1737-1738 cherrypicked+backported - Remove send_ok and replace with reserve/release mechanism to avoid assertion.
  - Add upstream revision 1735 cherrypicked - change ipc system to allow reference counting in lib_init_fn and lib_exit_fn for services such as cpg which record conn_info data structure.
  - Add upstream revision 1734 cherrypicked - add refcounting to lib_init_fn of cpg servie.
  - Add upstream revision 1698 - IPC redesign and rework.
  - Add upstream revision 1697 - Fix ip address for nodeid under BSD.
  - Add upstream revision 1694 - Ensure BSD platform compiles because of API changes.
  - Add upstream revision 1692 - Avoid totem overlfow in send_ok.
  - Add upstream revision 1691 - Execute a list init for the expiry entry.
  - Add upstream revision 1690 - Execute a list_del operation when unlinking checkpoint.
  - Add upstream revision 1682 - Ensure high bit is masked properly.
  - Add upstream revision 1681 - Fix secauth to work properly on s390x.
  - Add upstream revision 1680 - Fix regression in open async of event service.
  - Add upstream revision 1679 - convert notice to debug message.
  - Add upstream revision 1678 - throw away incomplete message on startup to avoid segfault.
  - Add upstream revision 1677 - Fix message rejection problem.
  - Add upstream revision 1676 - Make poll_stop work properly.
  - Add upstream revision 1675 - Make ckptbench work properly.
  - Add upstream revision 1673 - Cancel token hold mode when a token callback is added.


author: Steven Dake <sdake@redhat.com> - 0.80.3-0
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the rhel5 version of 0.80.3-0.


author: Steven Dake <sdake@redhat.com> - 0.80.3-1
changelog:
  - Resolves: rhbz#243119
  - Resolves: rhbz#221190
  - Resolves: rhbz#224190
  - Resolves: rhbz#233892
  - Resolves: rhbz#236549
  - New upstream version including all previous revisions.
  - This is the fc6 version of 0.80.3-1.


author: Steven Dake <sdake@redhat.com> - 0.80.3-2
changelog:
  - Resolves: rhbz#209862
  - Add upstream revision 1406 - Filter commit token when it is retransmitted.
  - Resolves: rhbz#249506
  - Add upstream revision 1407 - Reset consensus array on entering operational mode.
  - Resolves: rhbz#249509
  - Add upstream revision 1408 - Store the ring id information properly when it changes.
  - Resolves: rhbz#247733
  - Add upstream revision 1409 - Add subtractor to availability of message entries for the totem message queue
  - This is the rhel5 version of 0.80.3-0 with some upstream patches.


author: Steven Dake <sdake@redhat.com> - 0.80.3-4
changelog:
  - Resolves: rhbz#251082
  - Add upstream revision 1423 - Fix synchronization defect resulting in segfault.
  - This is the fc6 build.


author: Steven Dake <sdake@redhat.com> - 0.80.3-6
changelog:
  - Resolved: rhbz#314641
  - Add upstream revision 1464 - Fix schedule of timer within the same thread to prevent deadlock


author: Steven Dake <sdake@redhat.com> 0.80.6-7
changelog:
  - Resolves: rhbz#506778
  - Add upstream revision 1959 - fix leaking of shared memory objects during
    shutdown of cman.


author: Steven Dake <sdake@redhat.com> 0.80.6-8
changelog:
  - Resolves: rhbz#506119
  - Add upstream revision 1998 - Ensure that leaving processors in totempg have
    their assembly state reset.


author: Steven Dake <sdake@redhat.com> 0.80.6-10
changelog:
  - Resolves: rhbz#520012
  - Add upstream revision 2053 - Ensure 9000 MTU doesn't assert totemsrp.
  - Actually apply patch during build.


author: Steven Dake <sdake@redhat.com> 0.80.6-11
changelog:
  - Resolves: rhbz#509180
  - Resolves: rhbz#526069
  - Resolves: rhbz#474400
  - Resolves: rhbz#520164
  Add upstream revision 2039 - Remove implicit declartion in code.
  Add upstream revision 2040 - Don't segfault with ais group doesn't exist in system. 
  Add upstream revision 2043 - Properly shutdown service engines on ctrl-c.
  Add upstream revision 2044 - Resolve cpg race condition during synchronization.
  Add upstream revision 2054 - Resolve random error code returned by saCkptCheckpointOpen.


author: Steven Dake <sdake@redhat.com> 0.80.6-12
changelog:
  - Resolves: rhbz#529054
  - Resolves: rhbz#525280
  - Resolves: rhbz#519159
  - Resolves: rhbz#540267
  - Resolves: rhbz#540490
  - Resolves: rhbz#544680
  - Resolves: rhbz#544682
  - Resolves: rhbz#545151
  - Resolves: rhbz#547828
  - Resolves: rhbz#525280
  - Resolves: rhbz#515159
  Add upstream revision 2079 - remove segfault from calling saClmTrackStart more then one time.
  Add upstream revision 2081 - cpg can use a variable after it is freed.
  Add upstream revision 2081 - netmask was being anded with broadcast address, not interface address resulting in invalid binding if netmask was not 255.255.255.x.
  Add upstream revision 2089 - originating many messages in recovery results in lockup.
  Add upstream revision 2090 - originating many messages in recovery results in lockup.
  Add upstream revision 2091 - recovery protocol implementation doesn't reset variable properly.
  Add upstream revision 2092 - String buffer overflow can occur if many messsages are originated during recovery.
  Add upstream revision 2094 - Remove invalid assertion in totemsrp.

  Add upstream revision 2095 - Remove stack overflow within aisexec.
  Add upstream revision 2096 - Prevent ckpt iterations from occuring during sync.


author: Steven Dake <sdake@redhat.com> 0.80.6-14
changelog:
  - Resolves: rhbz#515590
  - Add upstream revision 2097 - Ensure IPC memory is 1mb instead of 477k.
  - actually apply patch in spec file.


author: Steven Dake <sdake@redhat.com> 0.80.6-15
changelog:
  - Resolves: rhbz#560313
  - Add upstream revision 2117 - fix problem where ipc doesn't differentiate
    between full buffer and empty buffer properly resulting in cpg message
    corruption


author: Steven Dake <sdake@redhat.com> 0.80.6-16
changelog:
  - Resolves: rhbz#566467
  - Add upstream revision 2121 - Fix lockup in atexit handler registered by
    print.c that occurs less then 1% of the time.  This is resolved by calling
    a special version of log_flush before calling exit, and not relying on the
    atexit handler to call pthread_cond_wait.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.1
changelog:
  - Resolves: rhbz#577887
  - Add upstream revision 2122 - Fix problem that can result in failed to receive state.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.2
changelog:
  - Resolves: rhbz#588897
  - Resolves: rhbz#588895
  - Resolves: rhbz#588628
  - Resolves: rhbz#588627
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.3
changelog:
  - Resolves: rhbz#601077
  - Resolves: rhbz#601086
  - Add upstream revision 2145 - Resolve problems with failed to receive logic
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted


author: Steven Dake <sdake@redhat.com> 0.80.6-16.4
changelog:
  - Resolves: rhbz#603615
  - Resolves: rhbz#603623
  - Add upstream revision 2143 - Avoid problem where library users block forever
     when server fails.
  - Add upstream revision 2146 - Fix problem where dispatch returning -1 in
    library functions results in segfaults.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.6
changelog:
  - Resolves: rhbz#618766
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-16.7
changelog:
  - Reverts: rhbz#601077
  - Remove upstream revision 2144 - don't reset last_aru when token is
    retransmitted - patch was incomplete


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-16.8
changelog:
  - Resolves: rhbz#621264
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-18.19
changelog:
  - Resolves: rhbz#60107
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted
  - Add upstream revision 2152 - fix merge error with 2144


author: Steven Dake <sdake@redhat.com> 0.80.6-18.10
changelog:
  - Resolves: rhbz#638609
  - Add upstream revision 2159 - fix segfault that can happen without null
    terminated checkpoint names.


author: Steven Dake <sdake@redhat.com> 0.80.6-18
changelog:
  - Resolves: rhbz#586519
  - Resolves: rhbz#588500
  - Resolves: rhbz#588494
  - Resolves: rhbz#588489
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-19
changelog:
  - Resolves: rhbz#598689
  - Resolves: rhbz#594480
  - Add upstream revision 2145 - Resolve problems with failed to receive logic
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted


author: Steven Dake <sdake@redhat.com> 0.80.6-20
changelog:
  - Resolves: rhbz#579081
  - Resolves: rhbz#596359
  - Add upstream revision 2143 - Avoid problem where library users block forever
    when server fails.
  - Add upstream revision 2146 - Fix problem where dispatch returning -1 in
    library functions results in segfaults.


author: Steven Dake <sdake@redhat.com> 0.80.6-21
changelog:
  - Resolves: rhbz#599654
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-22
changelog:
  - Resolves: rhbz#611129
  - Resolves: rhbz#606028
  - Add upstream revision 2148 - Fix membership algorithm failure which can result
    in singleton rings forming in rare circumstances.
  - Add upstream revision 2149 - support compatibility with corosync.


author: Steven Dake <sdake@redhat.com> 0.80.6-23
changelog:
  - Resolves: rhbz#614222
  - Add upstream revision 2150 - don't reset token timer on each received
    retransmitted token


author: Steven Dake <sdake@redhat.com> 0.80.6-25
changelog:
  - Resolves: rhbz#619570
  - Add upstream revision 2151 - resolve problem where out of order messages
    can result in token loss in very rare circumstances.


author: Angus Salkeld <asalkeld@redhat.com> 0.80.6-27
changelog:
  - Resolves: rhbz#619536
  - Add upstream revision 2153 - make openais more resilient to
    delayed multicast packets.


author: Steven Dake <sdake@redhat.com> 0.80.6-28
changelog:
  - Resolves: rhbz#568650
  - Resolves: rhbz#625947
  - Add upstream revision 2160 - first part of remove stale pid members from confchg.
  - Add upstream revision 2161 - second part of remove stale pid members from confchg.
  - Add upstream revision 2159 - prevent non-null terminated strings in checkpoint names or section from triggering stack protector


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-28.1
changelog:
  - Resolves: rhbz#694180
  - Resolves: rhbz#694183
  - Resolves: rhbz#694182
  - Resolves: rhbz#694181
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-28.3
changelog:
  - Resolves: rhbz#731458
  - Resolves: rhbz#739082
  - Resolves: rhbz#739085

  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations
  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-28.4
changelog:
  - Resolves: rhbz#754716

  - Add upstream revision 2182 - Solve problems with aisexec and big time changes, by using clock_gettime


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-29
changelog:
  - Resolves: rhbz#561546
  - Resolves: rhbz#611434
  - Resolves: rhbz#623176
  - Resolves: rhbz#645299
  - Add upstream revision 2162 - speed up the case where a lot of nodes leave at the same time.
  - Add upstream revision 2165 - fix abort when token is lost in RECOVERY state.
  - Add upstream revision 2166 - resolve abort during simulatenous stopping of atleast 4 nodes.
  - Add upstream revision 2167 - totemsrp: Remove recv_flush code.
  - Add upstream revision 2168 - totemsrp: Only restore old ring id information one time.
  - Add upstream revision 2169 - totemsrp: free messages originated in recovery rather then rely on messages_free.
  - Add upstream revision 2170 - return error if there is no space for semaphore.
  - Add upstream revision 2171 - IPC: handle maximum use of file descriptors gracefully.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30
changelog:
  - Resolves: rhbz#675206
  - Add upstream revision 2172 - don't assert when ring id file is less then 8 bytes.


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30.2
changelog:
  - Resolves: rhbz#731460
  - Resolves: rhbz#739083
  - Resolves: rhbz#739086

  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations
  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-30.4
changelog:
  - Resolves: rhbz#754717

  - Add upstream revision 2182 - Solve problems with aisexec and big time changes, by using clock_gettime


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-31
changelog:
  - Resolves: rhbz#703162
  - Resolves: rhbz#718773
  - Add upstream revision 2173 - Add missing man pages for binaries
  - Add upstream revision 2177 - Revert "totemsrp: Remove recv_flush code"


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-32
changelog:
  - Resolves: rhbz#708335
  - Resolves: rhbz#726142
  - Resolves: rhbz#729081
  - Resolves: rhbz#734865
  - Add upstream revision 2174 - Fix coredump when rolling upgrade to Corosync 1.3
  - Add upstream revision 2178 - Fix problem where openais will segfault if there are gaps in recovery queue
  - Add upstream revision 2179 - whitetank ipc: handle EINTR in msg_send
  - Add upstream revision 2180 - whitetank ipc: Don't deadlock in ipc_disconnect
  - Add upstream revision 2181 - Ignore memb_join messages during flush operations


author: Steven Dake <sdake@redhat.com> 0.80.6-33
changelog:
  - Resolves: rhbz#738468
  - Add upstream revision 2182 - replace gettimeofday with monotonic clock_gettime


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-34
changelog:
  - Resolves: rhbz#729081
  - Resolves: rhbz#737100

  - Add upstream revision 2183 - Deliver all messages from my_high_seq_recieved to the last gap
  - Add upstream revision 2184 - evt: Put correct handle in lib_evt_event_subscribe


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-36
changelog:
  - Resolves: rhbz#752952

  - Add upstream revision 2186 - Call freeaddrinfo in totemip to remove memleak


author: Jan Friesse <jfriesse@redhat.com> 0.80.6-37
changelog:
  - Resolves: rhbz#671575
  - Resolves: rhbz#794837
  - Resolves: rhbz#806901

  - Add upstream revision 2187 - Handle syslog stack overflow
  - Add upstream revision 2188 - totemconfig: Change default FAIL_TO_RECV_CONST
  - Add upstream revision 2189 - Don't check range value in update_aru


author: Steven Dake <sdake@redhat.com> 0.80.5-2
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - openais-0.80.5.tar.gz was missing three commits that I expected were in the tarball.
  - Add upstream revision 1692 - Add to message size in totempg operation.
  - Add upstream revision 1691 - Execute proper list_init operation.
  - Add upstream revision 1690 - Execute proper list_del operation.


author: Steven Dake <sdake@redhat.com> 0.80.5-3
changelog:
  - Resolves: rhbz#474277
  - Resolves: rhbz#477243
  - Resolves: rhbz#480684
  - Resolves: rhbz#261381
  - Add upstream revision 1737-1738 cherrypicked & backported - Fix assertion in totempg usage.
  - Add upstream revision 1735 cherrypicked - Allow lib_exit_fn to be called early so that lib_init_fn can use refcounting ipc functions.
  - Add upstream revision 1734 cherrypicked - Add IPC refcounting to CPG service.


author: Steven Dake <sdake@redhat.com> 0.80.5-4
changelog:
  - Resolves: rhbz#487214
  - Resolves: rhbz#488095
  - Resolves: rhbz#489451
  - Add upstream revision 1743 - autogenerated node ids cause CPG not to issue synchronization of the process group information.
  - Add upstream revision 1742 - 5.2->5.3 rolling upgrades.
  - Add upstream revision 1740 - removes segfault in cpg service when ipc connection disconnects and no groups are joined to the cpg group (ipc regression).
  - Add upstream revision 1739 - removes assert in multicast operations under overload.


author: Steven Dake <sdake@redhat.com> 0.80.5-5
changelog:
  - Resolves: rhbz#490098
  - Resolves: rhbz#490099
  - Add upstream revision 1753 - Serialize ipc access.
  - Add upstream revision 1752 - Remove break from cpgbench.
  - Add upstream revision 1750 - Remove pass by value in the ckpt ervice.
  - Add upstream revision 1749 - Remoe extra debugging output.
  - Add upstream revision 1747 - Fix reference counting problem in ckpt service.


author: Steven Dake <sdake@redhat.com> 0.80.6-1
changelog:
  - Resolves: rhbz#494347
  - Resolves: rhbz#494035
  - Resolves: rhbz#496985
  - Resolves: rhbz#497419
  - Resolves: rhbz#497420
  - Resolves: rhbz#499767
  - Fixes problem with cpg_init not returning security error code.
  - Fixes problem with not starting redundant ring
  - Fixes regression with cluster mirror and in general DOA openais rpm.
  - Fix problem where first message is thrown away in new configuration.
  - Fixes problem where ipc connect/disconnect in cpg service segfaults aisexec.
  - Fixes problem where openais segfaults on ppc64 platforms.


author: Steven Dake <sdake@redhat.com> 0.80.6-2
changelog:
  - Resolves: rhbz#501561
  - Resolves: rhbz#501337
  - Resolves: rhbz#492808
  - Resolves: rhbz#497480
  - Add upstream revision 1928 - Fix race condition in cpg join/leave operations.
  - Add upstream revision 1926 - Adds feature to allow uidgid files to be added
    to /etc/ais directory to allow external users to specify uid and gids to
    access the system.
  - Add upstream revision 1925 - Adds feature to allow rolling crypto upgrades
    from openais-0.80.6-2 to corosync.
  - Add upstream revision 1924 - Adds feature to use broadcast instead of
    multicast.  To enable this feature, the broadcast: yes option should be
    specified.


author: Steven Dake <sdake@redhat.com> 0.80.6-9
changelog:
  - Resolves: rhbz#521098
  - Add upstream revision 2053 - Remove sigabort from networks running with
    netmtu parameter set to 9000 under heavy load.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.1
changelog:
  - Resolves: rhbz#521098
  - Add upstream revision 2053 - Remove sigabort from networks running with
    netmtu parameter set to 9000 under heavy load.
  - Follow proper nvr policy.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.3
changelog:
  - Resolves: rhbz#548480
  - Resolves: rhbz#554488
  - Resolves: rhbz#565402
  - Add upstream revision 2095 - Remove stack overflow under rare conditions.
  - Add upstream revision 2096 - Do not allow checkpoint iteration during synchronization
  - Add upstream revision 2117 - Fix problem where ipc doesn't distinguish between full and empty dispatch buffer properly


author: Steven Dake <sdake@redhat.com> 0.80.6-8.4
changelog:
  - Resolves: rhbz#577886
  - Add upstream revision 2122 - Fix problem that can result in failed to receive state.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.5
changelog:
  - Resolves: rhbz#584560
  - Add upstream revision 2089/2090 - originating many messages in recovery causes totem to lockup


author: Steven Dake <sdake@redhat.com> 0.80.6-8.6
changelog:
  - Resolves: rhbz#588894
  - Resolves: rhbz#588896
  - Resolves: rhbz#588898
  - Resolves: rhbz#588899
  - Add upstream revision 2130 - Resolve problem where ring id is not saved
    and restored when recovery is interrupted.
  - Add upstream revision 2129 - Resolve problem where highly lossy networks
    will sigabort (assert) if 512 or more entries are originated in recovery.
  - Add upstream revision 2128 - Use proper typing for retransmit token storage
    area.
  - Add upstream revision 2127 - Fix stack corruption that happens because of
    invalid length in memmove operation on highly lossy networks.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.7
changelog:
  - Resolves: rhbz#581604
  - Resolves: rhbz#601076
  - Add upstream revision 2145 - Resolve problems with failed to receive logic
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted


author: Steven Dake <sdake@redhat.com> 0.80.6-8.8
changelog:
  - Resolves: rhbz#581604
  - Add upstream revision 2121 - atexit handler uses pthread_cond_wait which results in lockup


author: Steven Dake <sdake@redhat.com> 0.80.6-8.9
changelog:
  - Resolves: rhbz#618765
  - Add upstream revision 2147 - Fix problem where CPG_REASON_LEAVE is sent instead of CPG_REASON_PROCDOWN.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.10
changelog:
  - Resolves: rhbz#601076
  - Revert upstream revision 2144 - don't reset last_aru when token is
    retransmitted - patch incomplete


author: Steven Dake <sdake@redhat.com> 0.80.6-8.11
changelog:
  - Resolves: rhbz#601076
  - Resolves: rhbz#611930
  - Resolves: rhbz#624518
  - Add upstream revision 2153 - make openais more resilient to delayed multicast
     packets.
  - Add upstream revision 2152 - fix merge error with revision 2144.
  - Add upstream revision 2144 - don't reset last_aru when token is retransmitted
  - Add upstream revision 2149 - support compatibility with corosync.


author: Steven Dake <sdake@redhat.com> 0.80.6-8.12
changelog:
  - Resolves: rhbz#638608
  - Add upstream revision 2159 - make openais handle non-null terminated checkpoints


author: Dan Horak <dhorak@redhat.com> - 2.14.0-1
changelog:
  - update to 2.14.0 (#474176)
  - run the included test suite during build process
  - add missing initscript scriptlets
  - Resolves: #474176


author: Dan Horak <dhorak@redhat.com> - 2.14.0-4
changelog:
  - add Requires for scriptlets
  - update the subagent's initscript to RHEL/Fedora standards
  - Related: #474176


author: Phil Knirsch <pknirsch@redhat.com> - 2.4.1-5
changelog:
  - Had to disable sysfs support due to new libsysfs and incompatible API.
  - Added missing ncurses-devel buildrequires


author: Doug Ledford <dledford@redhat.com> 1.0-10
changelog:
  - Add a logrotate file for /var/log/osm.log to opensm
  - Fix a %post/%postun script problem with dapl


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.2
changelog:
  - Bump version numbers on all the packages to allow for updates
    from previous installations
  - Remove arpingib, it's not needed
  - Add ipoibha init script
  - Rename ipoibha.pl ipoibha for ease of use in init script
  - Drop hpage patch set from ./configure invocation


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.3
changelog:
  - The bug fix to make the udev rules file correct for udev 095 got lost,
    readd it.
  - Updates from the old OFED 1.0 code didn't grab all the RPMs because I
    forgot to update the libmthca{,-devel} versions so that the reset
    release number wouldn't cause it to match as older instead of newer.


author: Doug Ledford <dledford@redhat.com> 1.1-2
changelog:
  - Remove a dead patch from the src rpm and rebuild
  - Move the ipoibha tools to /usr/sbin instead of /sbin.  Since they
    require perl to run, and perl resides in /usr, it's safe for them
    to be there instead of /sbin


author: Doug Ledford <dledford@redhat.com> 1.1-3
changelog:
  - Make openib, opensm, and ipoibtools Require(post): chkconfig (182845,182846)
  - Make ipoibha script have an interpreter tag
  - Fix the ipoibha script so it uses arping instead of arpingib and
    passes a functional set of arguments
  - Make ipoibha script require an IP broadcast address on the interface
    we are serving in ha mode
  - Make rdma_ping print rdma_ping instead of rping in it's usage output
  - Make rdma_ping only print the usage info once (213171)
  - Update openibd init script to work whether ipath driver is in one module
    or two (212401)


author: Doug Ledford <dledford@redhat.com> 1.1-4
changelog:
  - Change all the scriptlets to be multiline so that they don't cause problems
    on ppc arch
  - Related: #213848, #222227


author: Doug Ledford <dledford@redhat.com> 1.1-5
changelog:
  - Fix an unterminated if statement in the ipoibha init script
  - Disable the ipoibtools package since arping is not yet modified to
    support ipoib interfaces and so the package is guaranteed not to work
  - Resolves: #227396


author: Doug Ledford <dledford@redhat.com> 1.2-1
changelog:
  - Update to final OFED 1.2 release
  - Fix init scripts to be standards compliant
  - Related: bz229298, bz182202, bz225581, bz243126


author: Doug Ledford <dledford@redhat.com> - 1.2-5
changelog:
  - Further tweaking of init scripts to make them LSB compliant
  - Bump number to keep this package up to date with the rhel5 openib package


author: Doug Ledford <dledford@redhat.com> - 1.3-1
changelog:
  - Remove the obsolete of the mstflint package to resolve a circular obsolete
    issue
  - Related: bz451638


author: Tim Waugh <twaugh@redhat.com> 1.3.2-20
changelog:
  - Use --enable-splibdir to prevent ambiguity.
  - Move 'install-catalog --remove' to %preun section (bug #60409).


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-12.1
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-12.8
changelog:
  - new feature: honor priority/weight with ldap_domain2hostlist (#734143)
  - fix: strict aliasing warnings during package build (#734145)
  - fix: OpenLDAP packages lack debug data (#734144)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2.1
changelog:
  - fixed BadDrawable error (rhbz#569907)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#569906)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#569906)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#569908)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-16
changelog:
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Doug Ledford <dledford@redhat.com> - 1.1-2
changelog:
  - Various lint cleanups
  - Switch to using the standard alternatives mechanism instead of a home
    grown one


author: Doug Ledford <dledford@redhat.com> - 1.1-3
changelog:
  - Don't ghost the mpi.conf file as that means it will get removed when
    you remove 1 out of a number of alternatives based packages
  - Put the .mod file in -devel


author: Doug Ledford <dledford@redhat.com> - 1.1-4
changelog:
  - Make sure the post/preun scripts only add/remove alternatives on initial
    install and final removal, otherwise don't touch.


author: Doug Ledford <dledford@redhat.com> - 1.1-6
changelog:
  - Bump rev to match fc6 rev
  - Fixup some issue with alternatives support
  - Split the 32bit and 64bit libs ld.so.conf.d files into two files so
    multilib or single lib installs both work properly
  - Put libs into their own package
  - Add symlinks to /usr/share/openmpi/bin32 so that opal_wrapper-32
    can be called even if it isn't the currently selected default method in
    the alternatives setup (opal_wrapper needs to be called by mpicc, mpic++,
    etc. in order to determine compile mode from argv[0]).


author: Doug Ledford <dledford@redhat.com> - 1.1.1-7
changelog:
  - Bump version to be at least as high as the RHEL4U5 openmpi
  - Integrate fixes made in RHEL4 openmpi into RHEL5 (fix a multilib conflict
    for the openmpi.module file by moving from _datadir to _libdir, make sure
    all sed replacements have the g flag so they replace all instances of
    the marker per line, not just the first, and add a %defattr tag to the
    files section of the -libs package to avoid install errors about
    brewbuilder not being a user or group)
  - Resolves: bz229298


author: Doug Ledford <dledford@redhat.com> - 1.2.3-1
changelog:
  - Update to latest upstream version
  - Compile against updated openib libraries
  - Add udapl as a transport mechanism
  - Fix file ownership on -libs package
  - Take a swing at solving the multi-install compatibility issues
  - Resolves: bz229298, bz245818


author: Doug Ledford <dledford@redhat.com> - 1.2.5-3
changelog:
  - Openmpi had the same bug as lam in regards to alternatives link management.
    Fix the bug by protecting the uninstall scriptlets from running unless we
    are doing an actual erase of the package.


author: Doug Ledford <dledford@redhat.com> - 1.2.5-4
changelog:
  - Update to use mpi-selector for mpi package runtime priority selection
  - Use mpi-selector change to fix bz433841 for real this time
  - Related: bz428199


author: Doug Ledford <dledford@redhat.com> - 1.2.7-1
changelog:
  - Update to latest upstream version
  - Make the mandir be {mpidir}/man so that we don't need to futz with the
    manpath at all, man will automatically find our man pages for us
  - buildrequire compat-dapl-devel so we find dapl and build a dapl transport
  - Seriously rework the scriptlets to avoid the issue that was release noted
    with openmpi-1.2.5
  - Resolves: bz447436, bz448388, bz455885, bz451469


author: Doug Ledford <dledford@redhat.com> - 1.2.7-6
changelog:
  - Minor fix ups to the Requires(preun) and Requires(post)
  - Add a Provides mpi to base package
  - Resolves: bz465447


author: Doug Ledford <dledford@redhat.com> - 1.3.1-1
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Improve the multi compiler support in the spec file
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 1.3.2-1.el5
changelog:
  - Update to 1.3.2...this should be the last binary incompatible update
  - Build against non-XRC libibverbs
  - Enable valgrind annotations
  - Related: bz506258, bz504284


author: Jay Fenlason <fenlason@redhat.com> - 1.3.2-3.el5
changelog:
  - Add librdmacm librdmacm-devel to build-requires so that rdmacm support
    gets compiled in, so it works withiWARP devices.
  - Resolves: bz515565
  - Add openmpi-bz515567.patch from Steve Wise (swise@opengridcomputing.com)
    to add support for the latest Chelsio devices.
  - Resolves: bz515567


author: Doug Ledford <dledford@redhat.com> - 1.4-1
changelog:
  - Update to latest upstream version
  - Drop no longer needed patch
  - Add libibcm support so users can choose either librdmacm or libibcm for
    connection management
  - Related: bz518218


author: Doug Ledford <dledford@redhat.com> - 1.4-3
changelog:
  - Don't build against dapl as the udapl btl transport causes copious warnings
    that we don't care about (bz479941) and if no hardware is ever found,
    instead of gracefully moving on to the next available btl method it very
    ungracefully bails out of the program entirely (bz543453).
  - Related: bz479941, bz543453


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.9
changelog:
  - Resolves: rhbz#217321 openoffice.org-2.1.0.ooo72014.officecfg.malayammenu.patch
  - Resolves: rhbz#217361 wrong libjvm on ppc32/ppc64 multiarch installed libgcj's
  - Resolves: rhbz#217490 don't add underline to preedit if not necessary
  - Resolves: rhbz#217521 extend grapheme cluster on ranges \u0c01-\u0c03 \u0c41-\u0c44


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.12
changelog:
  - Resolves: rhbz#218253 openoffice.org-2.1.0.oooXXXXX.vcl.filterzwatrender.patch
  - Resolves: rhbz#217348 openoffice.org-2.1.0.ooo70042.wmfoverflow.svtools.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.14
changelog:
  - Resolves: rhbz#216094 openoffice.org-2.1.0.ooo72349.svx.scriptrange.patch
  - Resolves: rhbz#216094 openoffice.org-2.1.0.ooo72350.svx.showsizes.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.17
changelog:
  - Resolves: rhbz#216094 patches not applied
  - Resolves: rhbz#216089 if there is no font at all to handle something


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.17.1
changelog:
  - Resolves: CVE-2007-0239 rhbz#228002 shell escape
  - Resolves: CVE-2007-0238 rhbz#226967 starcalc overflow


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.19
changelog:
  - Resolves: rhbz#226967 starcalc overflow
  - Resolves: rhbz#222779 openoffice.org-2.2.0.ooo73863.vcl.imcommit.patch
  - Resolves: rhbz#222423 openoffice.org-2.1.0.ooo73485.vcl.filterzwatrender.patch


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.21
changelog:
  - Resolves: rhbz#222800 utf-8 hyperlink export
  - Resolves: rhbz#222817 sorting glyphs causes spacing mismatch
  - Resolves: rhbz#226737 combining character cursor positioning
  - Resolves: rhbz#228254 crash if print a document as .pdf and then print as .ps
  - Resolves: rhbz#234421 printing current spreadsheet prints all sheets
  - Resolves: rhbz#233964 pa_IN column delete translation incorrect
  - Resolves: rhbz#222681 implement vba LIKE keyword
  - Resolves: rhbz#223190 make a final fallback to a font with a notdef glyph


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.4.22
changelog:
  - Resolves: rhbz#228629 or_IN print dialog translation incorrect
  - Resolves: rhbz#237649 crash on undo in impress


author: Caolan McNamara <caolanm@redhat.com> - 1:2.3.0-6.7
changelog:
  - Resolves: rhbz#442535 allow arbitrary sheet names
  - Resolves: rhbz#363301 allow canvas to function without XRender
  - Resolves: rhbz#441128 a11y crash in impress
  - Resolves: rhbz#450842 crash on insert file with passworded file
  - Resolves: rhbz#442537 don't let vertical cells overflow
  - Resolves: rhbz#206400 backport margin notes implementation


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.8
changelog:
  - CVE-2008-3282 numeric truncation error in OOo memory allocator
  - Resolves: rhbz#458065 Handle memory allocation exceptions in bitmap handling code
  - Resolves: rhbz#439050 Calc--Differing behavior in opening some
    hyperlink protocols


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.9
changelog:
  - CVE-2008-2237 OpenOffice.org WMF integer overflow
  - Resolves: rhbz#462645 integer overflow in WMF parser


author: Caolán McNamara <caolanm@redhat.com> - 1:2.3.0-6.11
changelog:
  - Resolves: rhbz#461984 Cannot use -headless with wrapper scripts
  - Resolves: rhbz#469302 add openoffice.org-3.0.0.ooo88446.ucb.rename.patch
  - Resolves: rhbz#469330 Euro Converter type detection
  - Resolves: rhbz#470210 Failed to save refresh property of native format
  - Resolves: rhbz#469990 Crash in numbering during html import
  - Resolves: rhbz#456845 Fix GdkPixbuf warning on launch of math
  - Resolves: rhbz#462055 Better rtf export encodings for CJK text
  - Resolves: rhbz#469321 Import newer format .odbs
  - Resolves: rhbz#469615 Allow .met files to be opened from command-line
  - Resolves: rhbz#480829 Writer layout crash in certain tables
  - Resolves: rhbz#476959 Better .doc TOC export
  - Resolves: rhbz#476221 Retain use mods to psprint.conf
  - Resolves: rhbz#480369 Don't keep print dialog around after closed
  - Resolves: rhbz#469630 Don't have a non-functional next button in formula wizard
  - Resolves: rhbz#469145 The whole paragraph words cut are displayed at "Undo" line


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.11.2
changelog:
  - Resolves: rhbz#529750 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.11.4
changelog:
  - Resolves: rhbz#529750 openoffice.org various flaws
  - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption
  - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption


author: Caolan McNamara <caolanm@redhat.com> - 1:2.3.0-6.5.2
changelog:
  - CVE-2008-3282 numeric truncation error in OOo memory allocator
  - Resolves: rhbz#458064 Handle memory allocation exceptions in bitmap handling code


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.5.3
changelog:
  - CVE-2008-2237 OpenOffice.org WMF integer overflow
  - Resolves: rhbz#462644 integer overflow in WMF parser


author: David Tardon <dtardon@redhat.com> - 1:2.3.0-6.12
changelog:
  - Resolves: rhbz#519167 openoffice.org various flaws
  - CVE-2009-0200, CVE-2009-0201
  - Resolves: rhbz#529751 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1:3.1.1-19.9
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10
changelog:
  - Resolves: rhbz#642185 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.2
changelog:
  - Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer
    overflows in JPEG, PNG and BMP reader implementations


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.10.3
changelog:
  - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by
    processing invalid Escher graphics records length in the Powerpoint
    documents


author: David Tardon <dtardon@redhat.com> - 1:3.1.1-19.5.4
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files
  - CVE-2010-3689 soffice insecure LD_LIBRARY_PATH setting


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.5.5
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-4253 heap based buffer overflow in PPT import


author: David Tardon <dtardon@redhat.com> - 1:3.2.1-19.5.6
changelog:
  - Resolves: rhbz#642184 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Split the libs out from the programs in case anyone needs 32bit libs
    on 64bit arches
  - Add an init script to start the subnet manager, defaults to off, must
    be enabled on at least one machine in the subnet.


author: Doug Ledford <dledford@redhat.com> - 3.2.2-3
changelog:
  - Fix a botched port of the Fedora opensmd init script that failed to replace
    all instances of /etc/rdma with /etc/ofed
  - Resolves: bz465150


author: Doug Ledford <dledford@redhat.com> - 3.2.6-1.el5
changelog:
  - Update to ofed 1.4.1-rc3 version
  - Remove dead patch
  - Update conf file format to version 3 format
  - Update init script for conf file usage change
  - Update logrotat file for log file name change
  - Related: bz459652


author: Doug Ledford <dledford@redhat.com> - 3.2.6-2.el5
changelog:
  - Fix an incorrect use of #elif that makes later gcc versions give an error
  - Fix compile flags to include -fno-strict-aliasing that is also needed on
    later gcc versions


author: Doug Ledford <dledford@redhat.com> - 3.3.3-1.el5
changelog:
  - Update to latest upstream version
  - Own the var/cache/opensm directory
  - don't include the bare .so file in the libs package, put it in devel
  - Related: bz518218


author: Ville Skyttä <ville.skytta at iki.fi> - 1.5.2-0.1.pre1
changelog:
  - Fix build dependencies.
  - Require exact version of main package in -devel.
  - Build with dependency tracking disabled.
  - Add %{_datadir}/xml to default search path.
  - Run test suite during build.
  - Add URL tag.
  - Use %find_lang.
  - Cosmetic improvements.


author: Tim Waugh <twaugh@redhat.com> 1.5.2-4
changelog:
  - Give IDs to nodes in the release notes source to prevent releasenotes.html
    having multilib conflicts (bug #210570).


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-38
changelog:
  - set better buffer length in latency patch (#508914)
  - close error file descriptor before running external subsystem (#530358)
  - prevent initscript from hanging when generates the keys (#531738)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-78
changelog:
  - set cloexec on accept socket (#642935)
  - add umask to sftp (#720598)
  - enable lastolg for big uids (#706315)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-79
changelog:
  - add LANGUAGE to the sent/accepted evvironment (#710229)
  - ssh-copy-id copies now id_rsa.pub by default (#731930)
  - repairs man pages (#731925)


author: Petr Lautrbach <plautrba@redhat.com> 4.3p2-81
changelog:
  - make ssh(1)'s ConnectTimeout option apply to both the TCP connection and
    SSH banner exchange (#750725)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-8.3.1
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#322891)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309871)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321211)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.1
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.2
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.4
changelog:
  - do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.5
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.7
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.10
changelog:
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-20.1
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22.1
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-26.1
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-33
changelog:
  - fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Kai Engert <kaie@redhat.com> 0.9.8e-34
changelog:
  - Rebase ca-bundle.crt to the upstream version 2.4 with legacy
    modifications. For compatibility reasons, several CA certificates with
    RSA sizes of 1024 bits are still included.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-35
changelog:
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-38
changelog:
  - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
  - disable SSLv2 in the generic TLS method (can be reenabled
    by setting environment variable OPENSSL_ENABLE_SSL2)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-9
changelog:
  - cleanup some init problems
  Resolves: rhbz#430149 openswan init script errors
  Resolves: rhbz#430150 openswan emits spurious warnings


author: Steve Conklin <sconklin@redhat.com> - 2.6.05-1
changelog:
  - Latest upstream
  - remove selinux test and message from verify script
  - forgot the following bz earlier
  Resolves: rhbz#253052 Request for IPSec IKEv2


author: Steve Conklin <sconklin@redhat.com> - 2.6.09-1
changelog:
  Resolves: rhbz#432315
  Resolves: rhbz#432805
  Resolves: rhbz#432821
  - Moved to latest upstream
  - removed init script patch and will use upstream
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Steve Grubb <sgrubb@redhat.com> - 2.6.11-1
changelog:
  - new upstream release
  Resolves: #438826 openswan IKEv2 hangs between intel and ppc64 machines
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024


author: Steve Grubb <sgrubb@redhat.com> - 2.6.12-1
changelog:
  - new upstream release
  Resolves: #432821 left/rightsourceip tags not working
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024
  Resolves: #441588 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #442333 AVC denials on start of openswan host-to-host tunnel


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14-1
changelog:
  - new upstream release
  Resolves: #450125 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #450126 openswan should negotiate CCM algorithm
  Resolves: #450127 openswan doesn't accept null esp auth alg
  Resolves: #450128 openswan logging segfault when phase2alg=null
  Resolves: #450129 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #450334 openswan doesn't delete expired SA's


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14rc7-1
changelog:
  - new upstream release
  Resolves: #439771 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #441383 openswan should negotiate CCM algorithm
  Resolves: #442955 openswan doesn't accept null esp auth alg
  Resolves: #442956 openswan logging segfault when phase2alg=null
  Resolves: #444166 openswan IKEv2 crashes when interoperating with racoon2


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - Upstream release
  - Major patches for support of NSS and fipscheck libraries
  Resolves: #444801 FIPS-140-2: Meet certification requirements for pluto
  Resolves: #469763 FIPS-140: Add integrity checking
  Resolves: #438998 Openswan's 'cannot route...' problem
  Resolves: #449725 Openswan seg fault using manual keying.
  Resolves: #463931 /etc/ipsec.conf includes /etc/ipsec.d/*.conf which is missing
  Resolves: #466861 avc: denied { write } for pid=2193 comm="ip" path="/var/run/pluto/ipsec_setup.out"
  Resolves: #487708 Misleading package description


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-2
changelog:
  - Revised patch to support fips integrity check functionality
  Resolves: #469763 FIPS-140: Add integrity checking


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Added support for using PSK with NSS (rhbz 507844)
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)
  Resolves: CVE-2009-2185
  Resolves: #507844


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-6
changelog:
  - Addresses bzs 524189 and 524191
  - Addresses key zeroization
  - Updates package description 
  Resolves: #524191


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-9
changelog:
  - Missed some changes in spec file, and because of that, changes
    for the bz 584987 did not get enabled. Rechecking correct spec
    file.
  Resolves: #584987


author: Will Cohen <wcohen@redhat.com> - 0.9.2-6
changelog:
  - Correct backtrace documentation. Resolves: rhbz#214793.
  - Correct race condition. Resolves: rhbz#220116.


author: Will Cohen <wcohen@redhat.com> - 0.9.3-7
changelog:
  - Rebase on 0.9.3 release. Resoves: rhbz #253109, 
  - Add Greyhound family 0x10 support to oprofile. Resolves: rhbz #232956
  - Cell support for oProfile. Resolves: rhbz #226085
  - 970MP must be treated as a different target. Resolves: rhbz#232041
  - Default POWER6 oprofile event incorrect. Resolves: rhbz #238132
  - typo in opreport man page. Resolves: rhbz #222481
  - Oprofile cant demangle 64bit c++ symbols. Resolves: rhbz #244399
  - OProfile on DD3.0 or later POWER5+ fails. Resolves: rhbz #244717
  - LoP Toolchain, OProfile XML output. Resolves: rhbz #253106
  - Add support for POWER5+ revision 3.0 an.... Resolves: rhbz #253410


author: Will Cohen <wcohen@redhat.com> - 0.9.4-7
changelog:
  - Rebase on 0.9.4 release to provide java support. Resolves: rhbz #474666
  - Correct handling of --verbose. Resolves: rhbz #454969


author: Will Cohen <wcohen@redhat.com> - 0.9.4-12
changelog:
  - Resolves: rhbz518480 Correct daemonization of oprofiled on ia64.
  - Resolves: rhbz450642 Handle possible null sym table.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-14
changelog:
  - Resolves: rhbz498619 Oprofile: Add support for Nehalem-EP processors.
  - Resolves: rhbz527679 Rebuild with fixed version of binutils.


author: Will Cohen <wcohen@redhat.com> - 0.9.4-19
changelog:
  - Resolves: rhbz643476 Oprofile: Add support for Intel Westmere.
  - Resolves: rhbz713667 Oprofile: Add support for Intel Sandy Bridge.


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2
changelog:
  - Add requirements on gnome-mag and newer version of control-center
  - remove .desktop file and make control-center start and configure orca


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-9
changelog:
  - distinguish groups and users with the () syntax in pam_access
    if nodefgroup option is specified
  - do not truncate /var/log/faillog and /var/log/tallylog on upgrade
  - remove superfluous plurals in .po files


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-10
changelog:
  - optimize pam_listfile to use pam_modutil_user_in_group_nam_nam() (#551312)
  - export environment variables in pam_exec (#554518)
  - fix user name matching in pam_unix remember feature (#768087)
  - added pam_cracklib options maxclassrepeat and gecos_check
  - pam_pwhistory now always saves the old password even for root


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-12
changelog:
  - better keep also the regular environment variables for backwards
    compatibility with old pam_exec scripts


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> - 3-1
changelog:
  - new upstream version
  - added patch (slightly modified) by W. Michael Petullo to support
    operation from non-root accounts (#151914)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.8-1
changelog:
  - don't try to validate creds in a password-changing situation, because the
    attempt will always fail unless the matching key is in the keytab, which
    should never be the case for the password-changing service (#187303, rbasch)
  - if v4 has been disabled completely, go ahead and try to set 2b tokens
    because we're going to end up having to do that anyway (#182378)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.9-1
changelog:
  - return PAM_IGNORE instead of PAM_SERVICE_ERR when we're called in
    an unsafe situation and told to refresh credentials (#197428)
  - drop from setuid to "normal" before calling our storetmp helper, so that
    it doesn't freak out except when *it* is setuid (#190159)
  - fix handling of "external" cases where the forwarded creds don't belong to
    the principal name we guessed for the user (#182239,#197660)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0
changelog:
  - rework prompting so that we stop getting stray prompts every now and then,
    and so that use_first_pass will *never* prompt for any information


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.10-0.1
changelog:
  - revert previous changes to how prompting works, and add a
    no_subsequent_prompt option to suppress libkrb5-based prompts during
    authentication, providing the PAM_AUTHTOK for all questions which
    libkrb5 asks


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.14-1.el5_2.1
changelog:
  - add backported fix for ccache permissions bypass when the "existing_ticket"
    option is used (CVE-2008-3825, #462112)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.14-4
changelog:
  - skip second and third auth attempts whenever we already know that the
    client is unknown to the KDC (#400611)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.14-5
changelog:
  - backport fixes from 2.2.15 to return user-unknown instead of auth-error
    when the client in a password change doesn't match a known client principal,
    and to avoid prompting for a new password unless we've previously gotten
    password-changing creds (#402721)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.14-6
changelog:
  - when erroneously called with "use_first_pass" and no previously-supplied
    password, ensure that we make at least one attempt to authenticate to the
    KDC so that we can at least tell the difference between an unknown user
    and other types of errors (more of #400611)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport change to use LOG_AUTHPRIV instead of the default facility when
    logging messages (#354291)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-7
changelog:
  - backport the "null_afs"/"nullafs" option from 2.3.0, based on Jan Iven's
    patch, which instructs pam_krb5 to guess "afs@REALM" before "afs/cell@REALM"
    when forced to guess the principal name of a given cell (#249558)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport change to link directly with libpam.so to keep applications which
    dlopen libpam from failing to load pam_krb5.so (#460998)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-8
changelog:
  - fix a packaging error: we were including the unpatched version of README
    after it had been patched


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-9
changelog:
  - add backported fix for ccache permissions bypass when the "existing_ticket"
    option is used (CVE-2008-3825, #462113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-10
changelog:
  - add workaround for libpam returning success from pam_get_user() when it
    returns a NULL user name (#467208)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-11
changelog:
  - don't enforce minimum_uid when no_user_check is also used, from
    HEAD (#490404)
  - don't try to get password-changing creds with all of the flags set
    that we'd request for a TGT (#489015)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-12
changelog:
  - don't vary the password prompt depending on whether or not the user exists
    or is known to the KDC (CVE-2009-1384, #505265)
  - prefer using the "host" service when verifying that a TGT isn't forged,
    from HEAD (#450776)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-13
changelog:
  - add patch to add the "chpw_prompt" option, to allow the older behavior
    of attempting a password-change during authentication if libkrb5 detects
    an expired password, based on patch from Olivier Fourdan (#509092)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-14
changelog:
  - backport the "multiple_ccaches" option from HEAD, requiring that it
    be enabled to not immediately remove an old ccache when asked to create
    a new one (#463417)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-15
changelog:
  - update backport for selecting which key to use for validation so that it
    prefers services with the local host name as the instance, from HEAD (more
    of #450776)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-16
changelog:
  - backport fixes to make the libdefaults verify_ap_req_nofail setting
    control what happens when we can't read keytabs, and enable TGT validation
    by default (#541177)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-17
changelog:
  - recognize "novalidate" as an option which takes a list of services for
    which TGT validation shouldn't be attempted (more of #541177)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-18
changelog:
  - backport infrastructure for handling translations (part of #526067)
  - patch in current translations (the rest of #526067)
  - add build-time dependency on gettext-devel (more of #526067)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-19
changelog:
  - link pam_krb5 with -z nodelete so that memory allocated by library
    dependencies which is lost at unload doesn't leak, for the sake of
    applications which call PAM for authentication many times over (#643962)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-21
changelog:
  - backport: during password change, only set PAM_AUTHTOK when we have
    answered both a new password prompt and a new password confirmation
    prompt with the same value (#713967)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.14-22
changelog:
  - refuse to supply non-password information via prompter callback when
    obtaining password-changing credentials (#715073)


author: Solar Designer <solar@owl.openwall.com> 0.7.5-owl1
changelog:
  - Assume invocation by root only if both the UID is 0 and the PAM service
    name is "passwd"; this should solve changing expired passwords on Solaris
    and HP-UX and make "enforce=users" safe.
  - Produce proper English explanations for a wider variety of settings.
  - Moved the "-c" out of CFLAGS, renamed FAKEROOT to DESTDIR.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-15
changelog:
  - add l10n support
  - correct mapper order.
  - login should allow SSL Client Auth certs rather than restricting to Email
    Signing certs.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-17
changelog:
  - restrict reauthentication to the token used in the inital login.
  - don't require reauthentication apps to log into a token if the user
    didn't initally log into the token.
  - handle the case where we have more than one token.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-19
changelog:
  - Fix problem where pin was not being passed in the pam password variable
    correctly. Needed for Kerberos PKInit


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-20
changelog:
  - Use pam_syslog rather than syslog (patch by Tmraz).
  - Signal to the user that change password is not supported by pam_pkcs11.


author: Robert Relyea <rrelyea@redhat.com> 0.5.3-21
changelog:
  - update password supported patch.
  - fix bug where the user and smart card prompt was coming up in login after
    the username had been entered.
  - use pam_ignore for the case where we always want to drop to the other
    pam_modules.
  - add environment variables for the certificate used to authenticate.


