# changelog

author: Don Zickus <dzickus@redhat.com> [2.6.18-45.el5]
changelog:
  - [XEN] Update spec file to provide specific xen ABI version (Stephen C. Tweedie ) [271981]
  - [scsi] qla2xxx: nvram/vpd updates produce soft lockups and system hangs (Marcus Barrow ) [260701]
  - [scsi] iscsi: borked kmalloc  (Mike Christie ) [255841]
  - [net] qla3xxx: Read iSCSI target disk fail (Marcus Barrow ) [246123]
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [252404]
  - [mm] madvise call to kernel loops forever (Konrad Rzeszutek ) [263281]


author: Don Zickus <dzickus@redhat.com> [2.6.18-44.el5]
changelog:
  - [misc] re-export some symbols as EXPORT_SYMBOL_GPL (Jon Masters ) [252377]
  - [xen] ia64: set NODES_SHIFT to 8 (Doug Chapman ) [254050]
  - [xen] Fix privcmd to remove nopage handler (Chris Lalancette ) [249409]
  - [xen] increase limits to boot on large ia64 platforms (Doug Chapman ) [254062]
  - [autofs] autofs4 - fix race between mount and expire (Ian Kent ) [236875]
  - [nfs] NFS4: closes and umounts are racing (Steve Dickson ) [245062]
  - [GFS2] Fix lock ordering of unlink (Steven Whitehouse ) [253609]
  - [openib] Fix two ipath controllers on same subnet (Doug Ledford ) [253005]
  - [net] tg3: update to fix suspend/resume problems (Andy Gospodarek ) [253988]
  - [GFS2] distributed mmap test cases deadlock (Benjamin Marzinski ) [248480]
  - [GFS2] Fix inode meta data corruption (Wendy Cheng ) [253590]
  - [GFS2] bad mount option causes panic with NULL superblock pointer (Abhijith Das ) [253921]
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253930]
  - [misc] Microphone stops working (John Feeney ) [240716]
  - [GFS2] glock dump dumps glocks for all file systems (Abhijith Das ) [253238]
  - [scsi] qla2xxx: disable MSI-X by default (Marcus Barrow ) [252410]


author: Don Zickus <dzickus@redhat.com> [2.6.18-42.el5]
changelog:
  - [GFS2] More problems unstuffing journaled files (Bob Peterson ) [252191]
  - [DLM] Reuse connections rather than freeing them (Patrick Caulfield ) [251179]
  - [ppc] EEH: better status string detection (Scott Moser ) [252405]
  - [scsi] cciss: set max command queue depth (Tomas Henzl ) [251167]
  - [audit] Stop multiple messages from being printed (Eric Paris ) [252358]
  - [scsi] uninitialized field in gdth.c (Chip Coldwell ) [245550]
  - [scsi] SATA RAID 150-4/6 do not support 64-bit DMA (Chip Coldwell ) [248327]
  - [gfs2] fix truncate panic (Wendy Cheng ) [251053]
  - [gfs2] panic after can't parse mount arguments  (Benjamin Marzinski ) [253289]
  - [fs] CIFS: fix deadlock in cifs_get_inode_info_unix (Jeff Layton ) [249394]
  - [sound] support ad1984 codec (Brian Maly ) [252373]
  - [scsi] fix iscsi write handling regression (Mike Christie ) [247827]
  - [ppc] Fix detection of PCI-e based devices (Doug Ledford ) [252085]
  - [gfs2] unstuff quota inode (Abhijith Das ) [250772]
  - [net] fix DLPAR remove of eHEA logical port (Scott Moser ) [251370]
  - [gfs2] hang when using a large sparse quota file (Abhijith Das ) [235299]
  - [x86_64] Fix MMIO config space quirks (Bhavana Nagendra ) [252397]
  - [misc] Convert cpu hotplug notifiers to use raw_notifier (Peter Zijlstra ) [238571]
  - [sound] fix panic in hda_codec (Brian Maly ) [251854]
  - [mm] separate mapped file and anonymous pages in show_mem() output. (Larry Woodman ) [252033]
  - [misc] Fix broken AltSysrq-F (Larry Woodman ) [251731]
  - [scsi] cciss: increase max sectors to 2048 (Tomas Henzl ) [248121]
  - Revert [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]


author: Don Zickus <dzickus@redhat.com> [2.6.18-40.el5]
changelog:
  - [net] s2io: update to driver version 2.0.25.1 (Andy Gospodarek ) [223033]
  - [XEN] ia64: use panic_notifier list (Kei Tokunaga ) [250456]
  - [XEN] ia64: support nvram (Kei Tokunaga ) [250203]
  - [XEN] Allow dom0 to boot with greater than 2 vcpus (Kei Tokunaga ) [250441]
  - [XEN] Fix MCE errors on AMD-V (Bhavana Nagendra ) [251435]
  - [XEN] set correct paging bit identifier when NP enabled (Chris Lalancette ) [250857]
  - [XEN] ia64: fix for hang when running gdb (Doug Chapman ) [246482]
  - [XEN] AMD-V fix for W2k3 guest w/ Nested paging (Bhavana Nagendra ) [250850]
  - [XEN] blktap tries to access beyond end of disk (Kei Tokunaga ) [247696]
  - [ia64] fsys_gettimeofday leaps days if it runs with nojitter (Luming Yu ) [250825]
  - [x86] Blacklist for HP DL585G2 and HP dc5700 (Tony Camuso ) [248186]
  - [misc] Missing critical phys_to_virt in lib/swiotlb.c (Anton Arapov ) [248102]
  - [mm] Prevent the stack growth into hugetlb reserved regions (Konrad Rzeszutek ) [247658]
  - [scsi] fix qla4xxx underrun and online handling (Mike Christie ) [242828]
  - [sound] Audio playback does not work (John Feeney ) [250269]
  - [XEN] ia64: allow guests to vga install (Jarod Wilson ) [249076]
  - [net] forcedeth: optimize the tx data path (Andy Gospodarek ) [252034]
  - [agp] 945/965GME: bridge id, bug fix, and cleanups (Geoff Gustafson ) [251166]
  - [net] tg3: pci ids missed during backport (Andy Gospodarek ) [245135]
  - [misc] workaround for qla2xxx vs xen swiotlb (Rik van Riel ) [219216]
  - [XEN] netfront: Avoid deref'ing skb after it is potentially freed. (Herbert Xu ) [251905]
  - [ia64] validate and remap mmap requests (Jarod Wilson ) [240006]
  - [ppc] DLPAR REMOVE I/O resource failed (Scott Moser ) [249617]
  - [XEN] ia64: Cannot use e100 and IDE controller (Kei Tokunaga ) [250454]
  - [wireless] iwlwifi: update to version 1.0.0 (John W. Linville ) [223560 250675]
  - [ppc] make eHCA driver use remap_4k_pfn in 64k kernel (Scott Moser ) [250496]
  - [audit] sub-tree signal handling fix (Alexander Viro ) [251232]
  - [audit] sub-tree memory leaks (Alexander Viro ) [251160]
  - [audit] sub-tree cleanups (Alexander Viro ) [248416]
  - [GFS2] invalid metadata block (Bob Peterson ) [248176]
  - [XEN] use xencons=xvc by default on non-x86 (Aron Griffis ) [249100]
  - [misc] i915_dma: fix batch buffer security bit for i965 chipsets (Aristeu Rozanski ) [251188] {CVE-2007-3851}
  - [Xen] Fix restore path for 5.1 PV guests (Chris Lalancette ) [250420]
  - [x86] Support mobile processors in fid/did to frequency conversion (Bhavana Nagendra ) [250833]
  - [dlm] fix basts for granted PR waiting CW (David Teigland ) [248439]
  - [scsi] PCI shutdown for cciss driver (Chip Coldwell ) [248728]
  - [scssi] CCISS support for P700m (Chip Coldwell ) [248735]
  - [net] forcedeth: fix nic poll (Herbert Xu ) [245191]
  - [ppc] 4k page mapping support for userspace 	in 64k kernels (Scott Moser ) [250144]
  - [net] tg3: small update for kdump fix (Andy Gospodarek ) [239782]
  - [ppc] Cope with PCI host bridge I/O window not starting at 0 (Scott Moser ) [242937]
  - [ata]: Add additional device IDs for SB700 (Prarit Bhargava ) [248109]
  - [fs] - fix VFAT compat ioctls on 64-bit systems (Eric Sandeen ) [250666] {CVE-2007-2878}
  - [fs] - Move msdos compat ioctl to msdos dir (Eric Sandeen ) [250666]


author: Don Zickus <dzickus@redhat.com> [2.6.18-39.el5]
changelog:
  - [net] e1000: add support for Bolton NICs (Bruce Allan ) [251221]
  - [net] e1000: add support for HP Mezzanine cards (Bruce Allan ) [251214]
  - [net] igb: initial support for igb netdriver (Andy Gospodarek ) [244758]
  - [net] e1000e: initial support for e1000e netdriver (Andy Gospodarek ) [240086]


author: Don Zickus <dzickus@redhat.com> [2.6.18-38.el5]
changelog:
  - [ppc] No Boot/Hang response for PCI-E errors (Scott Moser ) [249667]
  - [GFS2] Reduce number of gfs2_scand processes to one (Steven Whitehouse ) [249905]
  - [scsi] Adaptec: Add SC-58300 HBA PCI ID (Konrad Rzeszutek ) [249275]
  - [GFS2] Fix bug relating to inherit_jdata flag on inodes (Steven Whitehouse ) [248576]
  - [ppc] Disable PCI-e completion timeouts on I/O Adapters (Scott Moser ) [232004]
  - [x86] Fix tscsync frequency transitions (Bhavana Nagendra ) [245082]
  - [CIFS] respect umask when unix extensions are enabled (Jeff Layton ) [246667]
  - [CIFS] fix signing sec= mount options (Jeff Layton ) [246595]
  - [XEN] netloop: Do not clobber cloned skb page frags (Herbert Xu ) [249683]


author: Don Zickus <dzickus@redhat.com> [2.6.18-37.el5]
changelog:
  - [net] Using mac80211 in ad-hoc mode can result in a kernel panic (John W. Linville ) [223558]
  - [ppc] Axon memory does not handle double bit errors (Scott Moser ) [249910]
  - [xen] x86: HV workaround for invalid PAE PTE clears (Chris Lalancette ) [234375]
  - [scsi] Update stex driver (Jeff Garzik ) [241074]
  - [scsi] cciss: Re-add missing kmalloc (Prarit Bhargava ) [249104]
  - [GFS2] Fix an oops in the glock dumping code (Steven Whitehouse ) [248479]
  - [GFS2] locksmith/revolver deadlocks (Steven Whitehouse ) [249406]
  - [xen] race loading xenblk.ko and scanning for LVM partitions (Richard Jones ) [247265]


author: Don Zickus <dzickus@redhat.com> [2.6.18-36.el5]
changelog:
  - [NFS] Re-enable force umount (Steve Dickson ) [244949]
  - [sata] regression in support for third party modules (Jeff Garzik ) [248382]
  - [utrace] set zombie leader to EXIT_DEAD before release_task (Roland McGrath ) [248621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-35.el5]
changelog:
  - [XEN] fix time going backwards in gettimeofday (Rik van Riel ) [245761]
  - [GFS2] soft lockup in rgblk_search (Bob Peterson ) [246114]
  - [DLM] fix NULL reference in send_ls_not_ready (David Teigland ) [248187]
  - [DLM] Clear othercon pointers when a connection is closed (David Teigland ) [220538]


author: Don Zickus <dzickus@redhat.com> [2.6.18-34.el5]
changelog:
  - [wireless] iwlwifi: add driver (John W. Linville ) [223560]
  - [XEN] make crashkernel=foo@16m work (Gerd Hoffmann ) [243880]
  - [XEN] ia64: HV built with crash_debug=y does not boot on NUMA machine (Kei Tokunaga ) [247843]
  - [edac] allow edac to panic with memory corruption on non-kdump kernels (Don Zickus ) [237950]
  - [GFS2] Mounted file system won't suspend (Steven Whitehouse ) [192082]
  - [GFS2] soft lockup detected in databuf_lo_before_commit (Bob Peterson ) [245832]
  - [sata] Add Hitachi HDS7250SASUN500G 0621KTAWSD to NCQ blacklist (Prarit Bhargava ) [247627]
  - [PCI] unable to reserve mem region on module reload (Scott Moser ) [247701 247400]
  - [PPC] eHEA driver can cause kernel panic on recv of VLAN packets (Scott Moser ) [243009]
  - [PPC] Fix 64K pages with kexec on native hash table (Scott Moser ) [242550]
  - Reverts: Mambo driver on ppc64 [208320]


author: Don Zickus <dzickus@redhat.com> [2.6.18-33.el5]
changelog:
  - [XEN] ia64: Windows guest cannot boot with debug mode (Kei Tokunaga ) [245668]
  - [XEN] ia64: SMP Windows guest boot fails sometimes (Kei Tokunaga ) [243870]
  - [XEN] ia64: Dom0 boot fails on NUMA hardware (Kei Tokunaga ) [245275]
  - [XEN] ia64: Windows guest sometimes panic by incorrect ld4.s emulation (Kei Tokunaga ) [243865]
  - [XEN] ia64: boot 46 GuestOS makes Dom0 hang (Kei Tokunaga ) [245667]
  - [XEN] ia64: HVM guest hangs on vcpu migration (Kei Tokunaga ) [233971]
  - [XEN] ia64: Cannot create guest domain due to rid problem (Kei Tokunaga ) [242040]
  - [XEN] ia64: HVM domain creation panics if xenheap is not enough. (Kei Tokunaga ) [240108]
  - [XEN] ia64: DomU panics by save/restore (Kei Tokunaga ) [243866]
  - [XEN] ia64: Guest OS hangs on IPF montetito (Kei Tokunaga ) [245637]
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [245186]
  - [xen] Windows HVM guest image migration causes blue screen (Bhavana Nagendra ) [245169]
  - [xen] ia64: enable blktap driver (Jarod Wilson ) [216293]
  - [scsi] check portstates before invoking target scan (David Milburn ) [246023]
  - [nfs] NFSd oops when exporting krb5p mount (Steve Dickson ) [247120]
  - [misc] Overflow in CAPI subsystem (Anton Arapov ) [231072] {CVE-2007-1217}
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245892] {CVE-2007-3380}
  - [dm] allow invalid snapshots to be activated (Milan Broz ) [244215]
  - [gfs2] inode size inconsistency (Wendy Cheng ) [243136]
  - [gfs2] Remove i_mode passing from NFS File Handle (Wendy Cheng ) [243136]
  - [gfs2] Obtaining no_formal_ino from directory entry (Wendy Cheng ) [243136]
  - [gfs2] EIO error from gfs2_block_truncate_page (Wendy Cheng ) [243136]
  - [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]
  - [GFS2] igrab of inode in wrong state (Steven Whitehouse ) [245646]
  - [audit] subtree watching cleanups (Alexander Viro ) [182624]


author: Don Zickus <dzickus@redhat.com> [2.6.18-32.el5]
changelog:
  - [ppc64] Data buffer miscompare (Konrad Rzeszutek ) [245332]
  - [xen] fix kexec/highmem failure (Gerd Hoffmann ) [245585]
  - [audit] kernel oops when audit disabled with files watched (Eric Paris ) [245164]
  - [scsi] Update aic94xx and libsas to 1.0.3 (Ryan Powers ) [224694]
  - [xen] ia64: kernel-xen panics when dom0_mem is specified(2) (Kei Tokunaga ) [217593]
  - [md] fix EIO on writes after log failure (Jonathan Brassow ) [236271]
  - [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [scsi] cciss driver updates (Tomas Henzl ) [222852]
  - [sata] combined mode regression fix (Jeff Garzik ) [245052]
  - Reverts: [audit] protect low memory from user mmap operations (Eric Paris ) [233021]


author: Don Zickus <dzickus@redhat.com> [2.6.18-31.el5]
changelog:
  - [firewire] New stack technology preview (Jay Fenlason ) [182183]
  - [xen] kdump/kexec support (Gerd Hoffmann ) [212843]
  - [xen] Add AMD-V support for domain live migration (Chris Lalancette ) [222131]
  - [GFS2] assertion failure after writing to journaled file, umount (Bob Peterson ) [243899]
  - [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]
  - [agp] Fix AMD-64 AGP aperture validation (Bhavana Nagendra ) [236826]
  - [x86_64] C-state divisor not functioning correctly  (Bhavana Nagendra ) [235404]
  - [i2c] SMBus does not work on ATI/AMD SB700 chipset (Bhavana Nagendra ) [244150]
  - [ide] Cannot find IDE device with ATI/AMD SB700 (Bhavana Nagendra ) [244150]
  - [pci] PCI-X/PCI-Express read control interface (Bhavana Nagendra ) [234335]
  - [pata] IDE hotplug support for Promise pata_pdc2027x (Scott Moser ) [184774]


author: Don Zickus <dzickus@redhat.com> [2.6.18-30.el5]
changelog:
  - [md] add dm rdac hardware handler (Mike Christie ) [184635]
  - [sound]  ALSA update (1.0.14) (Brian Maly ) [227671 240713 223133 238004 223142 244672]
  - [xen] : AMD's ASID implementation  (Bhavana Nagendra ) [242932]
  - [x86_64] Fix casting issue in tick divider patch (Prarit Bhargava ) [244861]
  - [fs] setuid program unable to read own /proc/pid/maps file (Konrad Rzeszutek ) [221173]
  - [x86_64] Fixes system panic during boot up with no memory in Node 0 (Bhavana Nagendra ) [218641]
  - [nfs] closes and umounts are racing.  (Steve Dickson ) [225515]
  - [security] allow NFS nohide and SELinux to work together (Eric Paris ) [219837]
  - [ia64] Altix ACPI support (Greg Edwards ) [223577]
  - [net] ixgb: update to driver version 1.0.126-k2 (Bruce Allan ) [223380]
  - [net] Update netxen_nic driver to version 3.x.x (Konrad Rzeszutek ) [244711]
  - [misc] utrace update (Roland McGrath ) [229886 228397 217809 210693]
  - [misc] disable pnpacpi on IBM x460 (Brian Maly ) [243730]
  - [gfs2] posix lock fixes (David Teigland ) [243195]
  - [gfs2] panic in unlink (Steven Whitehouse ) [239737]
  - [input] i8042_interrupt() race can deliver bytes swapped to serio_interrupt() (Markus Armbruster ) [240860]
  - [s390] qdio: system hang with zfcp in case of adapter problems (Jan Glauber ) [241298]
  - [net] Fix tx_checksum flag bug in qla3xxx driver (Marcus Barrow ) [243724]
  - [openib] Update OFED code to 1.2 (Doug Ledford ) [225581]
  - [openib] kernel backports for OFED 1.2 update (Doug Ledford ) [225581]
  - [ppc64] donate cycles from dedicated cpu (Scott Moser ) [242762]
  - [scsi] RAID1 goes 'read-only' after resync (Chip Coldwell ) [231040]
  - [md] move fn call that could block outside spinlock (Jonathan Brassow ) [242069]
  - [fs] FUSE: Minor vfs change (Eric Sandeen ) [193720]
  - [net] s2io: Native Support for PCI Error Recovery (Scott Moser ) [228052]
  - [xen] x86_64: Fix FS/GS registers for VT bootup (Rik van Riel ) [224671]
  - [misc] Add RHEL version info to version.h (Konrad Rzeszutek ) [232534]
  - Revert: [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - Revert: [x86_64] Set CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=n (Konrad Rzeszutek ) [222035]
  - Revert: [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]


author: Don Zickus <dzickus@redhat.com> [2.6.18-29.el5]
changelog:
  - [xen] Expand VNIF number per guest domain to over four (Kei Tokunaga ) [223908]
  - [xen] change interface version for 3.1 (Kei Tokunaga ) [242989]
  - [xen] ia64: Fix PV-on-HVM driver (Kei Tokunaga ) [242144]
  - [xen] ia64: use generic swiotlb.h header (Kei Tokunaga ) [242138]
  - [xen] ia64: xm save/restore does not work (Kei Tokunaga ) [240858]
  - [xen] ia64: Skip MCA setup on domU (Kei Tokunaga ) [242143]
  - [xen] ia64: Cannot measure process time accurately (Kei Tokunaga ) [240107]
  - [xen] Support new xm command: xm trigger (Kei Tokunaga ) [242140]
  - [xen] ia64: Fix for irq_desc() missing in new upstream (Kei Tokunaga ) [242137]
  - [xen] ia64: Set IRQ_PER_CPU status on percpu IRQs (Kei Tokunaga ) [242136]
  - [xen] ia64: improve performance of system call (Kei Tokunaga ) 
  - [xen] ia64: para domain vmcore does not work under crash (Kei Tokunaga ) [224047]
  - [xen] ia64: kernel-xen panics when dom0_mem=4194304 is specified (Kei Tokunaga ) [217593]
  - [xen] ia64: evtchn_callback fix and clean (Kei Tokunaga ) [242126]
  - [xen] ia64: changed foreign domain page mapping semantic (Kei Tokunaga ) [242779]
  - [xen] Change to new interrupt deliver mechanism (Kei Tokunaga ) [242125]
  - [xen] ia64: Uncorrectable error makes hypervisor hung (MCA  support) (Kei Tokunaga ) [237549]
  - [xen] Xen0 can not startX in tiger4 (Kei Tokunaga ) [215536]
  - [xen] ia64: Fix xm mem-set hypercall on IA64 (Kei Tokunaga ) [241976]
  - [xen] ia64: Fix HVM interrupts on IPF (Kei Tokunaga ) [242124]
  - [xen] save/restore fix (Gerd Hoffmann ) [222128]
  - [xen] blkback/blktap: fix id type (Gerd Hoffmann ) [222128]
  - [xen] xen: blktap race #2 (Gerd Hoffmann ) [222128]
  - [xen] blktap: race fix #1 (Gerd Hoffmann ) [222128]
  - [xen] blktap: cleanups. (Gerd Hoffmann ) [242122]
  - [xen] blktap: kill bogous flush (Gerd Hoffmann ) [222128]
  - [xen] binmodal drivers: block backends (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, blkfront driver (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, pvfb frontend (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, protocol header (Gerd Hoffmann ) [222128]


author: Don Zickus <dzickus@redhat.com> [2.6.18-28.el5]
changelog:
  - [net] netxen: initial support for NetXen 10GbE NIC (Andy Gospodarek ) [231724]
  - [net] cxgb3: initial support for Chelsio T3 card (Andy Gospodarek ) [222453]
  - [drm] agpgart and drm support for bearlake graphics (Geoff Gustafson ) [229091]
  - [acpi] acpi_prt list incomplete (Kimball Murray ) [214439]
  - [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - [x86_64] Fix TSC reporting for processors with constant TSC (Bhavana Nagendra ) [236821]
  - [pci] irqbalance causes oops during PCI removal (Kimball Murray ) [242517]
  - [net] Allow packet drops during IPSec larval state resolution (Vince Worthington ) [240902]
  - [net] bcm43xx: backport from 2.6.22-rc1 (John W. Linville ) [213761]
  - [net] softmac: updates from 2.6.21 (John W. Linville ) [240354]
  - [net] e1000: update to driver version 7.3.20-k2 (Andy Gospodarek ) [212298]
  - [net] bnx2: update to driver version 1.5.11 (Andy Gospodarek ) [225350]
  - [net] ipw2[12]00: backports from 2.6.22-rc1 (John W. Linville ) [240868]
  - [net] b44 ethernet driver update (Jeff Garzik ) [244133]
  - [net] sky2: update to version 1.14 from 2.6.21 (John W. Linville ) [223631]
  - [net] forcedeth: update to driver version 0.60 (Andy Gospodarek ) [221941]
  - [net] bonding: update to driver version 3.1.2 (Andy Gospodarek ) [210577]
  - [net] tg3: update to driver version 3.77 (Andy Gospodarek ) [225466 228125]
  - [PPC] Update of spidernet to 2.0.A for Cell (Scott Moser ) [227612]
  - [scsi] SPI DV fixup (Chip Coldwell ) [237889]
  - [audit] audit when opening existing messege queue (Eric Paris ) [223919 ]
  - [audit] audit=0 does not disable all audit messages (Eric Paris ) [231371]
  - [net] mac80211 inclusion (John W. Linville ) [214982 223558]


author: Don Zickus <dzickus@redhat.com> [2.6.18-26.el5]
changelog:
  - [x86_64] sparsemem memmap allocation above 4G (grgustaf) [227426]
  - [net] ip_conntrack_sctp: fix remotely triggerable panic (Don Howard ) [243244] {CVE-2007-2876}
  - [usb] Strange URBs and running out IOMMU (Pete Zaitcev ) [230427]
  - [audit] broken class-based syscall audit (Eric Paris ) [239887]
  - [audit] allow audit filtering on bit & operations (Eric Paris ) [232967]
  - [x86_64] Add L3 cache support to some processors (Bhavana Nagendra ) [236835]
  - [x86_64] disable mmconf for HP dc5700 Microtower (Prarit Bhargava ) [219389]
  - [misc] cpuset information leak (Prarit Bhargava ) [242811] {CVE-2007-2875}
  - [audit] stop softlockup messages when loading selinux policy (Eric Paris ) [231392]
  - [fs] nfs does not support leases, send correct error (Peter Staubach ) [216750]
  - [dlm] variable allocation types (David Teigland ) [237558]
  - [GFS2] Journaled data issues (Steven Whitehouse ) [238162]
  - [ipsec] Make XFRM_ACQ_EXPIRES proc-tunable (Vince Worthington ) [241798]
  - [GFS2] Missing lost inode recovery code (Steven Whitehouse ) [201012]
  - [GFS2] Can't mount GFS2 file system on AoE device (Robert Peterson ) [243131]
  - [scsi] update aacraid driver to 1.1.5-2437 (Chip Coldwell ) [197337]
  - [scsi] cciss: ignore results from unsent commands on kexec boot (Neil Horman ) [239520]
  - [scsi] update iscsi_tcp driver (Mike Christie ) [227739]
  - [x86_64] Fix regression in kexec (Neil Horman ) [242648]
  - [x86] rtc support for HPET legacy replacement mode (Brian Maly ) [220196]
  - [scsi] megaraid_sas update (Chip Coldwell ) [225221]
  - [fs] fix ext2 overflows on filesystems > 8T (Eric Sandeen ) [237188]
  - [x86] MCE thermal throttling (Brian Maly ) [224187]
  - [audit] protect low memory from user mmap operations (Eric Paris ) [233021]
  - [scsi] Add FC link speeds. (Tom Coughlan ) [231888]
  - [pci] I/O space mismatch with P64H2 (Geoff Gustafson ) [220511]
  - [scsi] omnibus lpfc driver update (Chip Coldwell ) [227416]
  - [scsi] Update qla2xxx firmware (Marcus Barrow ) [242534]
  - [ide] Serverworks data corruptor (Alan Cox ) [222653]
  - [scsi] update qla4xxx driver (Mike Christie ) [224435 223087 224203]
  - [scsi] update iser driver (Mike Christie ) [234352]
  - [dlm] fix debugfs ref counting problem (Josef Bacik ) [242807]
  - [md] rh_in_sync should be allowed to block (Jonathan Brassow ) [236624]
  - [md] unconditionalize log flush (Jonathan Brassow ) [235039]
  - [GFS2] Add nanosecond timestamp feature  (Steven Whitehouse ) [216890]
  - [GFS2] quota/statfs sign problem and cleanup _host structures (Steven Whitehouse ) [239686]
  - [scsi] mpt adds DID_BUS_BUSY host status on scsi BUSY status (Chip Coldwell ) [228108]
  - [scsi] fix for slow DVD drive (Chip Coldwell ) [240910]
  - [scsi] update MPT Fusion to 3.04.04 (Chip Coldwell ) [225177]
  - [GFS2] Fix calculation for spare log blocks with smaller block sizes (Steven Whitehouse ) [240435]
  - [gfs2] quotas non-functional (Abhijith Das ) [201011]
  - [gfs2] Cleanup inode number handling (Abhijith Das ) [242584]


author: Don Zickus <dzickus@redhat.com> [2.6.18-25.el5]
changelog:
  - [s390] fix possible reboot hang on s390 (Jan Glauber ) [222181]
  - [cifs] Update CIFS to version 1.48aRH (Jeff Layton ) [238597]
  - [audit] Make audit config immutable in kernel (Eric Paris ) [223530]
  - [dio] invalidate clean pages before dio write (Jeff Moyer ) [232715]
  - [nfs] fixed oops in symlink code.  (Steve Dickson ) [218718]
  - [mm] shared page table for hugetlb  page (Larry Woodman ) [222753]
  - [nfs] Numerous oops, memory leaks and hangs found in upstream (Steve Dickson ) [242975]
  - [misc] include taskstats.h in kernel-headers package (Don Zickus ) [230648]
  - [ide] packet command error when installing rpm (John Feeney ) [229701]
  - [dasd] export DASD status to userspace (Chris Snook ) [242681]
  - [dasd] prevent dasd from flooding the console (Jan Glauber ) [229590]
  - [s390] ifenslave -c causes kernel panic with VLAN and OSA Layer2 (Jan Glauber ) [219826]
  - [s390] sclp race condition (Jan Glauber ) [230598]
  - [audit] SAD/SPD flush have no security check (Eric Paris ) [233387]
  - [audit] Add space in IPv6 xfrm audit record (Eric Paris ) [232524]
  - [audit] Match proto when searching for larval SA (Eric Paris ) [234485]
  - [audit] pfkey_spdget does not audit xrfm policy changes (Eric Paris ) [229720]
  - [audit] collect audit inode information for all f*xattr commands (Eric Paris ) [229094]
  - [audit] Initialize audit record sid information to zero (Eric Paris ) [223918]
  - [audit] xfrm_add_sa_expire return code error (Eric Paris ) [230620]
  - [net] NetLabel: Verify sensitivity level has a valid CIPSO mapping (Eric Paris ) [230255]
  - [audit] pfkey_delete and xfrm_del_sa audit hooks wrong (Eric Paris ) [229732]
  - [block] Fix NULL bio crash in loop worker thread (Eric Sandeen ) [236880]
  - [x86]: Add Greyhound performance counter events (Bhavana Nagendra ) [222126]
  - [dio] clean up completion phase of direct_io_worker() (Jeff Moyer ) [242116]
  - [audit] add subtrees support (Alexander Viro ) [182624]
  - [audit] AVC_PATH handling (Alexander Viro ) [224620]
  - [audit] auditing ptrace (Alexander Viro ) [228384]
  - [x86_64] Fix a cast in the lost ticks code (Prarit Bhargava ) [241781]
  - [PPC64] DMA 4GB boundary protection  (Scott Moser ) [239569]
  - [PPC64] MSI support for PCI-E (Scott Moser ) [228081]
  - [ppc64] Enable DLPAR support for HEA (Scott Moser ) [237858]
  - [ppc64] update ehea driver to latest version. (Janice M. Girouard ) [234225]
  - [PPC64] spufs move to sdk2.1 (Scott Moser ) [242763]
  - [PPC64] Cell SPE and Performance (Scott Moser ) [228128]
  - [cpufreq] Identifies correct number of processors in powernow-k8 (Bhavana Nagendra ) [229716]


author: Don Zickus <dzickus@redhat.com> [2.6.18-24.el5]
changelog:
  - [ipmi] update to latest (Peter Martuccelli ) [241928 212415 231436]
  - [sata] super-jumbo update (Jeff Garzik ) [203781]
  - [sata] move SATA drivers to drivers/ata (Jeff Garzik ) [203781]


author: Don Zickus <dzickus@redhat.com> [2.6.18-23.el5]
changelog:
  - [dlm] Allow unprivileged users to create the default lockspace (Patrick Caulfield ) [241902]
  - [dlm] fix queue_work oops (David Teigland ) [242070]
  - [dlm] misc device removed when lockspace removal fails (David Teigland ) [241817]
  - [dlm] dumping master locks (David Teigland ) [241821]
  - [dlm] canceling deadlocked lock (David Teigland ) [238898]
  - [dlm] wait for config check during join (David Teigland ) [206520]
  - [dlm] fix new_lockspace error exit (David Teigland ) [241819]
  - [dlm] cancel in conversion deadlock (David Teigland ) [238898]
  - [dlm] add lock timeouts and time warning (David Teigland ) [238898]
  - [dlm] block scand during recovery (David Teigland ) [238898]
  - [dlm] consolidate transport protocols (David Teigland ) [219799]
  - [audit] log targets of signals (Alexander Viro ) [228366]


author: Don Zickus <dzickus@redhat.com> [2.6.18-22.el5]
changelog:
  - [scsi] Add kernel support for Areca RAID controllers (Tomas Henzl ) [205897]
  - [s390] runtime switch for qdio performance statistics (Jan Glauber ) [228048]
  - [nfs] enable 'nosharecache' mounts. (Steve Dickson ) [209964]
  - [scsi] scsi_error.c - Fix lost EH commands (Chip Coldwell ) [227586]
  - [s390] zfcp driver fixes (Jan Glauber ) [232002 232006]
  - [misc] synclink_gt: fix init error handling  (Eric Sandeen) [210389]
  - [edac] k8_edac: don't panic on PCC check (Aristeu Rozanski ) [237950]
  - [mm] Prevent OOM-kill of unkillable children or siblings (Larry Woodman ) [222492]
  - [aio] fix buggy put_ioctx call in aio_complete (Jeff Moyer ) [219497]
  - [scsi] 3ware 9650SE not recognized by updated  3w-9xxx module (Chip Coldwell ) [223465]
  - [scsi] megaraid: update version reported by  MEGAIOC_QDRVRVER (Chip Coldwell ) [237151]
  - [nfs] NFS/NLM - Fix double free in __nlm_async_call (Steve Dickson ) [223248]
  - [ppc] EEH is improperly enabled for some Power4  systems (Scott Moser ) [225481]
  - [net] ixgb: update to 1.0.109 to add pci error recovery (Andy Gospodarek ) [211380]
  - [ppc] Fix xmon=off and cleanup xmon initialization (Scott Moser ) [229593]
  - [mm] reduce MADV_DONTNEED contention (Rik van Riel ) [237677]
  - [x86_64] wall time is not compensated for lost timer ticks (Konrad Rzeszutek ) [232666]
  - [PPC] handle <.symbol> lookup for kprobes (Scott Moser ) [238465]
  - [pci] Dynamic Add and Remove of PCI-E (Konrad Rzeszutek ) [227727]
  - [PPC64] Support for ibm,power-off-ups RTAS  call (Scott Moser ) [184681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-21.el5]
changelog:
  - [net] Re-enable and update the qla3xxx networking driver (Konrad Rzeszutek ) [225200]
  - [misc] xen: kill sys_{lock,unlock} dependency on microcode driver (Gerd Hoffmann ) [219652]
  - [acpi] Update ibm_acpi module (Konrad Rzeszutek ) [231176]
  - [nfs] NFSv4: referrals support (Steve Dickson ) [230602]
  - [misc] random: fix error in entropy extraction (Aristeu Rozanski ) [241718] {CVE-2007-2453}
  - [net] fix DoS in PPPOE (Neil Horman ) [239581] {CVE-2007-2525}
  - [GFS2] Fixes related to gfs2_grow (Steven Whitehouse ) [235430]
  - [gfs2] Shrink size of struct gdlm_lock (Steven Whitehouse ) [240013]
  - [misc] Bluetooth setsockopt() information leaks (Don Howard ) [234292] {CVE-2007-1353}
  - [net] RPC/krb5 memory leak (Steve Dickson ) [223248]
  - [mm] BUG_ON in shmem_writepage() is triggered (Michal Schmidt ) [234447]
  - [nfs] protocol V3 :write procedure patch (Peter Staubach ) [228854]
  - [fs] invalid segmentation violation during exec (Dave Anderson ) [230339]
  - [md] dm io: fix panic on large request (Milan Broz ) [240751]
  - [nfs] RPC: when downsizing response buffer, account for checksum (Jeff Layton ) [238687]
  - [md] incorrect parameter to dm_io causes read failures (Jonathan Brassow ) [241006]
  - [ia64] eliminate potential deadlock on XPC disconnects (George Beshers ) [223837]
  - [md] dm crypt: fix possible data corruptions (Milan Broz ) [241272]
  - [ia64] SN correctly update smp_affinity mask (luyu ) [223867]
  - [mm]fix OOM wrongly killing processes through MPOL_BIND (Larry Woodman ) [222491]
  - [nfs] add nordirplus option to NFS client  (Steve Dickson ) [240126]
  - [autofs] fix panic on mount fail - missing autofs module (Ian Kent ) [240307]
  - [scsi] Fix bogus warnings from SB600 DVD drive (Prarit Bhargava ) [238570]
  - [acpi] _CID support for PCI Root Bridge  detection. (Luming Yu ) [230742]
  - [ia64] platform_kernel_launch_event is a noop in non-SN kernel (Luming Yu ) [232657]
  - [net] high TCP latency with small packets (Thomas Graf ) [229908]
  - [misc] xen: fix microcode driver for new firmware (Gerd Hoffmann ) [237434]
  - [GFS2] Bring GFS2 uptodate (Steven Whitehouse ) [239777]
  - [scsi] update for new SAS RAID  (Scott Moser ) [228538]
  - [md] dm: allow offline devices in table (Milan Broz ) [239655]
  - [md] dm: fix suspend error path (Milan Broz ) [239645]
  - [md] dm multipath: rr path order is inverted (Milan Broz ) [239643]
  - [net] RPC: simplify data check, remove BUG_ON (Jeff Layton ) [237374]
  - [mm] VM scalability issues (Larry Woodman ) [238901 238902 238904 238905]
  - [misc] lockdep: annotate DECLARE_WAIT_QUEUE_HEAD (Chip Coldwell ) [209539]
  - [mm] memory-less node support (Prarit Bhargava ) [228564]


author: Don Zickus <dzickus@redhat.com> [2.6.18-19.el5]
changelog:
  - [ia64] MCA/INIT issues with printk/messages/console (Kei Tokunaga ) [219158]
  - [ia64] FPSWA exceptions take excessive system time  (Erik Jacobson ) [220416]
  - [GFS2] flush the glock completely in inode_go_sync (Steven Whitehouse ) [231910]
  - [GFS2] mmap problems with distributed test cases (Steven Whitehouse ) [236087]
  - [GFS2] deadlock running d_rwdirectlarge (Steven Whitehouse ) [236069]
  - [GFS2] panic if you try to rm -rf the lost+found directory (Steven Whitehouse ) [232107]
  - [misc] Fix softlockup warnings during sysrq-t (Prarit Bhargava ) [206366]
  - [pty] race could lead to double idr index free (Aristeu Rozanski ) [230500]
  - [v4l] use __GFP_DMA32 in videobuf_vm_nopage (Aristeu Rozanski ) [221478]
  - [scsi] Update QLogic qla2xxx driver to 8.01.07-k6 (Marcus Barrow ) [225249]
  - [mm] OOM killer breaks s390 CMM (Jan Glauber ) [217968]
  - [fs] stack overflow with non-4k page size (Dave Anderson ) [231312]
  - [scsi] scsi_transport_spi: sense buffer size error (Chip Coldwell ) [237889]
  - [ppc64] EEH PCI error recovery  support (Scott Moser ) [207968]
  - [mm] optimize kill_bdev() (Peter Zijlstra ) [232359]
  - [x86] tell sysrq-m to poke the nmi watchdog (Konrad Rzeszutek ) [229563]
  - [x86] Use CPUID calls to check for mce (Bhavana Nagendra ) [222123]
  - [x86] Fix to nmi to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Fix CPUID calls to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Greyhound cpuinfo output cleanups (Bhavana Nagendra ) [222124]
  - [misc] intel-rng: fix deadlock in smp_call_function (Prarit Bhargava ) [227696]
  - [net] ixgb: fix early TSO completion (Bruce Allan ) [213642]


author: Don Zickus <dzickus@redhat.com> [2.6.18-18.el5]
changelog:
  - [e1000] fix watchdog timeout panics (Andy Gospodarek ) [217483]
  - [net] ipv6_fl_socklist is inadvertently shared (David S. Miller ) [233088] {CVE-2007-1592}
  - [dlm] expose dlm_config_info fields in configfs (David Teigland ) [239040]
  - [dlm] add config entry to enable log_debug (David Teigland ) [239040]
  - [dlm] rename dlm_config_info fields (David Teigland ) [239040]
  - [mm] NULL current->mm dereference in grab_swap_token causes oops (Jerome Marchand ) [231639]
  - [net] Various NULL pointer dereferences in netfilter code (Thomas Graf ) [234287] {CVE-2007-1496}
  - [net] IPv6 fragments bypass in nf_conntrack netfilter code (Thomas Graf ) [234288] {CVE-2007-1497}
  - [net] disallow RH0 by default (Thomas Graf ) [238065] {CVE-2007-2242}
  - [net] fib_semantics.c out of bounds check (Thomas Graf ) [236386]
  - [misc] getcpu system call (luyu ) [233046]
  - [ipc] bounds checking for shmmax (Anton Arapov ) [231168]
  - [x86_64] GATT pages must be uncacheable (Chip Coldwell ) [238709]
  - [gfs2] does a mutex_lock instead of a mutex_unlock (Josef Whiter ) [229376]
  - [dm] failures when creating many snapshots (Milan Broz ) [211516 211525]
  - [dm] kmirrord: deadlock when dirty log on mirror itself (Milan Broz ) [218068]
  - [security] Supress SELinux printk for messages users don't care about (Eric Paris ) [229874]
  - [serial] panic in check_modem_status on 8250 (Norm Murray ) [238394]
  - [net] Fix user OOPS'able bug in FIB netlink (David S. Miller ) [237913]
  - [misc] EFI: only warn on pre-1.00 version (Michal Schmidt ) [223282]
  - [autofs4] fix race between mount and expire (Ian Kent ) [236875]
  - [GFS2] gfs2_delete_inode: 13 (Steven Whitehouse ) [224480]
  - [misc] k8temp (Florian La Roche ) [236205]


author: Don Zickus <dzickus@redhat.com> [2.6.18-17.el5]
changelog:
  - [x86_64] Calgary IOMMU cleanups and fixes (Konrad Rzeszutek ) [222035]
  - [GFS2] lockdump support (Robert Peterson ) [228540]
  - [net] kernel-headers: missing include of types.h (Neil Horman ) [233934]
  - [mm] unmapping memory range disturbs page referenced state (Peter Zijlstra ) [232359]
  - [IA64] Fix stack layout issues when using ulimit -s (Jarod Wilson ) [234576]
  - [CIFS] Windows server bad domain name null terminator fix (Jeff Layton ) [224359]
  - [x86_64] Fix misconfigured K8 north bridge (Bhavana Nagendra ) [236759]
  - [gfs2] use log_error before LM_OUT_ERROR (David Teigland ) [234338]
  - [dlm] fix mode munging (David Teigland ) [234086]
  - [dlm] change lkid format (David Teigland ) [237126]
  - [dlm] interface for purge (David Teigland ) [237125]
  - [dlm] add orphan purging code (David Teigland ) [237125]
  - [dlm] split create_message function (David Teigland ) [237125]
  - [dlm] overlapping cancel and unlock (David Teigland ) [216113]
  - [dlm] zero new user lvbs (David Teigland ) [237124]
  - [PPC64] Handle Power6 partition modes (2) (Janice M. Girouard ) [228091]
  - [ppc64] Handle Power6 partition modes (Janice M. Girouard ) [228091]
  - [mm] oom kills current process on memoryless node. (Larry Woodman ) [222491]
  - [x86] Tick Divider (Alan Cox ) [215403]
  - [GFS2] hangs waiting for semaphore (Steven Whitehouse ) [217356]
  - [GFS2] incorrect flushing of rgrps (Steven Whitehouse ) [230143]
  - [GFS2] Clean up of glock code (Steven Whitehouse ) [235349]
  - [net] IPsec: panic when large security contexts in ACQUIRE (James Morris ) [235475]
  - [ppc64] Cell Platform Base kernel support (Janice M. Girouard ) [228099]
  - [s390] fix dasd reservations (Chris Snook ) [230171]
  - [x86] Fix invalid write to nmi MSR (Prarit Bhargava ) [221671]


author: Don Zickus <dzickus@redhat.com> [2.6.18-16.el5]
changelog:
  - [s390] crypto driver update (Jan Glauber ) [228049]
  - [NMI] change watchdog timeout to 30 seconds (Larry Woodman ) [229563]
  - [ppc64] allow vmsplice to work in 32-bit mode on ppc64 (Don Zickus ) [235184]
  - [nfs] fix multiple dentries pointing to same directory inode (Steve Dickson ) [208862]
  - [ipc] mqueue nested locking annotation (Eric Sandeen ) 
  - [net] expand in-kernel socket api (Neil Horman ) [213287]
  - [XEN] Better fix for netfront_tx_slot_available(). (Herbert Xu ) [224558]
  - [fs] make static counters in new_inode and iunique be 32 bits (Jeff Layton ) [215356]
  - [ppc64] remove BUG_ON() in hugetlb_get_unmapped_area() (Larry Woodman ) [222926]
  - [dm] stalls on resume if noflush is used (Milan Broz ) [221330]
  - [misc]: AMD/ATI SB600 SMBus support (Prarit Bhargava ) [232000]
  - [mm] make do_brk() correctly return EINVAL for ppc64.   (Larry Woodman ) [224261]
  - [agp] agpgart fixes and new pci ids (Geoff Gustafson ) [227391]
  - [net] xfrm_policy delete security check misplaced (Eric Paris ) [228557]
  - [x86]: Fix mtrr MODPOST warnings (Prarit Bhargava ) [226854]
  - [elevator] move clearing of unplug flag  earlier (Eric Sandeen ) [225435]
  - [net] stop leak in flow cache code (Eric Paris ) [229528]
  - [ide] SB600 ide only has one channel (Prarit Bhargava ) [227908]
  - [scsi] ata_task_ioctl should return ata registers (David Milburn ) [218553]
  - [pcie]: Remove PCIE warning for devices with no irq pin (Prarit Bhargava ) [219318]
  - [x86] ICH9 device IDs  (Geoff Gustafson ) [223097]
  - [mm] Some db2 operations cause system to hang (Michal Schmidt ) [222031]
  - [security] invalidate flow cache entries after selinux policy reload (Eric Paris ) [229527]
  - [net] wait for IPSEC SA resolution in socket contexts. (Eric Paris ) [225328]
  - [net] clean up xfrm_audit_log interface (Eric Paris ) [228422]
  - [ipv6]: Fix routing regression. (David S. Miller ) [222122]
  - [tux] date overflow fix (Jason Baron ) [231561]
  - [cifs] recognize when a file is no longer read-only (Jeff Layton ) [231657]
  - [module] MODULE_FIRMWARE support (Jon Masters ) [233494]
  - [misc] some apps cannot use IPC msgsnd/msgrcv larger than 64K (Jerome Marchand ) [232012]
  - [xen] Fix netfront teardown (Glauber de Oliveira Costa ) [219563]


author: Don Zickus <dzickus@redhat.com> [2.6.18-15.el5]
changelog:
  - [x86_64] enable calgary support for x86_64 system (Neil Horman ) [221593]
  - [s390] pseudo random number generator (Jan Glauber ) [184809]
  - [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]
  - [GFS2] honor the noalloc flag during block allocation (Steven Whitehouse ) [235346]
  - [GFS2] resolve deadlock when writing and accessing a file (Steven Whitehouse ) [231380]
  - [s390] dump on panic support (Jan Glauber ) [228050, 227841]
  - [pci] include devices in NIC ordering patch and fix whitespace (Andy Gospodarek ) [226902]
  - [ext3] handle orphan inodes vs. readonly snapshots (Eric Sandeen ) [231553]
  - [fs] - Fix error handling in check_partition(), again (Eric Sandeen ) [231518]
  - [ipv6] /proc/net/anycast6 unbalanced inet6_dev refcnt (Andy Gospodarek ) [231310]
  - [s390] kprobes breaks BUG_ON (Jan Glauber ) [231155]
  - [edac] add support for revision F processors (Aristeu Rozanski ) [202622]
  - [scsi] blacklist touch-up (Chip Coldwell ) [232074]
  - [gfs2] remove an incorrect assert (Steven Whitehouse ) [229873]
  - [gfs2] inconsistent inode number lookups (Wendy Cheng ) [229395]
  - [gfs2] NFS cause recursive locking (Wendy Cheng ) [229349]
  - [gfs2] NFS v2 mount failure (Wendy Cheng ) [229345]
  - [s390] direct yield for spinlocks on s390 (Jan Glauber ) [228869]
  - [s390] crypto support for 3592 tape devices (Jan Glauber ) [228035]
  - [cpu-hotplug] make and module insertion script cause a panic (Konrad Rzeszutek ) [217583]
  - [s390] runtime switch for dasd erp logging (Jan Glauber ) [228034]
  - [suspend] Fix x86_64/relocatable kernel/swsusp breakage. (Nigel Cunningham ) [215954]
  - [ext3] buffer: memorder fix (Eric Sandeen ) [225172]
  - [scsi] fix incorrect last scatg length (David Milburn ) [219838]
  - [usb]: airprime driver corrupts ppp session for EVDO card (Jon Masters ) [222443]
  - [misc] Fix race in efi variable delete code (Prarit Bhargava ) [223796]
  - [ext3] return ENOENT from ext3_link when racing with unlink (Eric Sandeen ) [219650]
  - [scsi] Missing PCI Device in aic79xx driver (Chip Coldwell ) [220603]
  - [acpi]: Fix ACPI PCI root bridge querying time (Prarit Bhargava ) [218799]
  - [kdump]: Simple bounds checking for crashkernel args (Prarit Bhargava ) [222314]
  - [misc] longer CD timeout (Erik Jacobson ) [222362]
  - [nfs] Disabling protocols when starting NFS server is broken. (Steve Dickson ) [220894]
  - [s390] page_mkclean causes data corruption on s390 (Jan Glauber ) [235373]


author: Don Zickus <dzickus@redhat.com> [2.6.18-14.el5]
changelog:
  - [ppc] reduce num_pmcs to 6 for Power6 (Janice M. Girouard ) [220114]
  - [sched] remove __cpuinitdata from cpu_isolated_map (Jeff Burke ) [220069]
  - [gfs2] corrrectly display revalidated directories (Robert Peterson ) [222302]
  - [gfs2] fix softlockups (Josef Whiter ) [229080]
  - [gfs2] occasional panic in gfs2_unlink while running bonnie++ (Steven Whitehouse ) [229831]
  - [gfs2] Shrink gfs2 in-core inode size (Steven Whitehouse ) [230693]
  - [GFS2] Fix list corruption in lops.c (Steven Whitehouse ) [226994]
  - [gfs2] fix missing unlock_page() (Steven Whitehouse ) [224686]
  - [dlm] make lock_dlm drop_count tunable in sysfs (David Teigland ) [224460]
  - [dlm] increase default lock limit (David Teigland ) [224460]
  - [dlm] can miss clearing resend flag (David Teigland ) [223522]
  - [dlm] fix master recovery (David Teigland ) [222307]
  - [dlm] fix user unlocking (David Teigland ) [219388]
  - [dlm] saved dlm message can be dropped (David Teigland ) [223102]


author: Don Zickus <dzickus@redhat.com> [2.6.18-13.el5]
changelog:
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [213313]
  - [mm] Gdb does not accurately output the backtrace. (Dave Anderson ) [222826]
  - [net] IPV6 security holes in ipv6_sockglue.c - 2 (David S. Miller ) [231517] {CVE-2007-1000}
  - [net] IPV6 security holes in ipv6_sockglue.c (David S. Miller ) [231668] {CVE-2007-1388}
  - [audit] GFP_KERNEL allocations in non-blocking context fix (Alexander Viro ) [228409]
  - [NFS] version 2 over UDP is not working properly (Steve Dickson ) [227718]
  - [x86] Fix various data declarations in cyrix.c (Prarit Bhargava ) [226855]
  - [sound] Fix various data declarations in sound/drivers (Prarit Bhargava ) [227839]
  - [mm] remove __initdata from initkmem_list3 (Prarit Bhargava ) [226865]


author: Don Zickus <dzickus@redhat.com> [2.6.18-12.el5]
changelog:
  - [xen] move xen sources out of kernel-xen-devel (Don Zickus ) [212968]
  - [net] __devinit & __devexit cleanups for de2104x driver (Prarit Bhargava ) [228736]
  - [video] Change rivafb_remove to __deviexit (Prarit Bhargava ) [227838]
  - [x86] Reorganize smp_alternatives sections in vmlinuz (Prarit Bhargava ) [226876]
  - [atm] Fix __initdata declarations in drivers/atm/he.c (Prarit Bhargava ) [227830]
  - [video] Change nvidiafb_remove to __devexit (Prarit Bhargava ) [227837]
  - [usb] __init to __devinit in isp116x_probe (Prarit Bhargava ) [227836]
  - [rtc] __init to __devinit in rtc drivers' probe functions (Prarit Bhargava ) [227834]
  - [x86] remove __init from sysenter_setup (Prarit Bhargava ) [226852]
  - [irq] remove __init from noirqdebug_setup (Prarit Bhargava ) [226851]
  - [x86] remove __init from efi_get_time (Prarit Bhargava ) [226849]
  - [x86] Change __init to __cpuinit data in SMP code (Prarit Bhargava ) [226859]
  - [x86] apic probe __init fixes (Prarit Bhargava ) [226875]
  - [x86] fix apci related MODPOST warnings (Prarit Bhargava ) [226845]
  - [serial] change serial8250_console_setup to __init (Prarit Bhargava ) [226869]
  - [init] Break init() into two parts to avoid MODPOST warnings (Prarit Bhargava ) [226829]
  - [x86] declare functions __init to avoid  compile warnings (Prarit Bhargava ) [226858]
  - [x86] cpu hotplug/smpboot misc MODPOST warning fixes (Prarit Bhargava ) [226826]
  - [x86] Fix boot_params and .pci_fixup warnings (Prarit Bhargava ) [226824 226874]
  - [xen] Enable Xen booting on machines with > 64G (Chris Lalancette ) [220592]
  - [utrace] exploit and unkillable cpu fixes (Roland McGrath ) [229886]
  - [pcmcia] buffer overflow in omnikey cardman driver    (Don Howard ) [227478]


author: Don Zickus <dzickus@redhat.com> [2.6.18-10.el5]
changelog:
  - [cpufreq] Remove __initdata from tscsync (Prarit Bhargava ) [223017]
  - [security] Fix key serial number collision problem (David Howells ) [227497] {CVE-2007-0006}
  - [fs] core dump of read-only binarys (Don Howard ) [228886] {CVE-2007-0958}


author: Don Zickus <dzickus@redhat.com> [2.6.18-5.el5]
changelog:
  - x86: /proc/mtrr interface MTRR bug fix (Bhavana Nagendra ) [223821]
  - Revert: bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - ia64: Check for TIO errors on shub2 Altix (George Beshers ) [223529]
  - nfs: Unable to mount more than 1 Secure NFS mount (Steve Dickson ) [220649]


author: Don Zickus <dzickus@redhat.com> [2.6.18-4.el5]
changelog:
  - IPSec: incorrect return code in xfrm_policy_lookup (Eric Paris ) [218591]
  - more kabi whitelist updates (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-3.el5]
changelog:
  - scsi: fix EX8350 panic (stex.ko) (Jun'ichi Nick Nomura ) [220783]
  - Audit: Mask upper bits on 32 bit syscall auditing on ppc64 (Eric Paris ) [213276]


author: Don Zickus <dzickus@redhat.com> [2.6.18-2.el5]
changelog:
  - mm: handle mapping of memory without a struct page backing it (Erik Jacobson ) [221029]
  - rng: check to see if bios locked device (Erik Jacobson ) [221029]
  - sata: support legacy IDE mode of SB600 SATA (Bhavana Nagendra ) [221636]
  - xen: quick fix for Cannot allocate memory (Steven Rostedt ) [217056]
  - XEN: Register PIT handlers to the correct domain (Herbert Xu ) [222520]
  - SATA AHCI: support AHCI class code (Jeff Garzik ) [222674]
  - fix vdso in core dumps (Roland McGrath ) [211744]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3014.el5]
changelog:
  - XEN: Replace inappropriate domain_crash_synchronous use (Herbert Xu ) [221239]
  - SATA timeout boot message  (Peter Martuccelli ) [222108]
  - Netlabel: off by one and init bug in netlbl_cipsov4_add_common (Eric Paris ) [221648]
  - NetLabel: fix locking issues (Eric Paris ) [221504]
  - mm: fix statistics in vmscan.c (Peter Zijlstra ) [222030]
  - usb: Sun/AMI virtual floppy issue (Pete Zaitcev ) [219628]
  - bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - Xen: Make HVM hypercall table NR_hypercalls entries big. (Herbert Xu ) [221818]
  - xen: Add PACKET_AUXDATA cmsg (Herbert Xu ) [219681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3002.el5]
changelog:
  - ppc64: initialization of hotplug memory fixes (Janice M. Girouard ) [220065]
  - GFS2: return error for NULL inode (Russell Cattelan ) [217008]
  - scsi: prevent sym53c1510 from claiming the wrong pci id (Chip Coldwell ) [218623]
  - net: Disable the qla3xxx network driver. (Tom Coughlan ) [221328]
  - xen: Disable CONFIG_IDE_GENERIC (Jarod Wilson ) [220099]
  - sound: add support for STAC9205 codec (John Feeney ) [219494]
  - ipv6: panic when bringing up multiple interfaces (Thomas Graf ) [218039]
  - XFRM Audit: correct xfrm auditing panic (Eric Paris ) [222033]
  - edac: fix /proc/bus/pci/devices to allow X to start (John Feeney ) [219288]
  - x86_64: clear_kernel_mapping: mapping has been split. will leak memory. (Larry Woodman ) [218543]
  - xen: >4G guest fix (Steven Rostedt ) [217770]
  -  fs: listxattr syscall can corrupt user space programs (Eric Sandeen ) [220119]
  - CacheFiles: Fix object struct recycling (David Howells ) [215599]
  - Remove capability requirement to reading cap-bound (Eric Paris ) [219230]
  - disable building ppc64iseries (Don Zickus) [219185]
  - update: utrace fixes (Roland McGrath) [214405 215052 216150 209118]
  - PPC config file changes for IPMI and DTLK (Peter Martuccelli ) [210214]
  - update: Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - net: qla3xxx panics when eth1 is sending pings (Konrad Rzeszutek ) [220246]
  - s390: inflate spinlock kabi (Jan Glauber ) [219871]
  - x86: Add panic on unrecovered NMI (Prarit Bhargava ) [220829]
  - ppc64: fix booting kdump env. w/maxcpus=1 on power5 (Jarod Wilson ) [207300]
  - netfilter: iptables stop fails because ip_conntrack cannot unload. (Thomas Graf ) [212839]
  - gfs: Fix gfs2_rename lock ordering (for local filesystem) (Wendy Cheng ) [221237]
  - GFS2: Fix ordering of page disposal vs. glock_dq (Steven Whitehouse ) [220117]
  - xen: fix nosegneg detection (Rik van Riel ) [220675]
  - mm: Fix for shmem_truncate_range() BUG_ON() (Larry Woodman ) [219821]
  - x86_64: enabling lockdep hangs the system (Don Zickus ) [221198]
  - dlm: change some log_error to log_debug (David Teigland ) [221326]
  - dlm: disable debugging output (David Teigland ) [221326]
  - fs: ext2_check_page denial of service (Eric Sandeen ) [217018]
  - CPEI - prevent relocating hotplug irqs (Kei Tokunaga ) [218520]
  - Networking: make inet->is_icsk assignment binary (Eric Paris ) [220482]
  - net: b44: phy reset problem that leads to link flap  (Neil Horman ) [216338]
  - autofs - fix panic on mount fail - missing autofs module update (Ian Kent ) [221118]
  - net: act_gact: division by zero (Thomas Graf ) [218348]
  - ppc64: Avoid panic when taking altivec exceptions from userspace. (David Woodhouse ) [220586]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2961.el5]
changelog:
  - new set of kabi whitelists (Jon Masters) [218682]
  - x86: remove unwinder patches from x86/x86_64 (Don Zickus ) [220238]
  - usb: disable ub and libusual (Pete Zaitcev ) [210026]
  - NetLabel: stricter configuration checking (Eric Paris ) [219393]
  - scsi: fix iscsi sense len handling (Mike Christie ) [217933]
  - Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - VM: Fix nasty and subtle race in shared mmap'ed page writeback (Eric Sandeen ) [220963]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - NFS: system stall on NFS stress under high memory  pressure (Steve Dickson ) [213137]
  - netfilter: IPv6/IP6Tables Vulnerabilities (Thomas Graf ) [220483]
  - acpi: increase ACPI_MAX_REFERENCE_COUNT (Doug Chapman ) [217741]
  - Race condition in mincore can cause ps -ef to hang (Doug Chapman ) [220480]
  - Call init_timer() for ISDN PPP CCP reset state timer (Marcel Holtmann ) [220163]
  - Race condition concerning VLAPIC interrupts (Bhavana Nagendra ) [213858]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2943.el5]
changelog:
  - CIFS: Explicitly set stat->blksize (Steve Dickson ) [210608]
  - FS-Cache: dueling read/write processes fix (Steve Dickson ) [212831]
  - xen: Use swiotlb mask for coherent mappings too (Herbert Xu ) [216472]
  - ia64: Kexec, Kdump on SGI IA64 NUMA machines fixes (George Beshers ) [219091]
  - splice : Must fully check for fifos (Don Zickus ) [214289]
  - Xen: Fix potential grant entry leaks on error (Herbert Xu ) [217993]
  - e1000: truncated TSO TCP header with 82544, workaround (Herbert Xu ) [206540]
  - scsi: fix bus reset in qla1280 driver (George Beshers ) [219819]
  - scsi: add qla4032 and fix some bugs (Mike Christie ) [213807]
  - XFRM: Config Change Auditing (Eric Paris ) [209520]
  - Xen: ia64 guest networking finally works (Jarod Wilson ) [218895]
  - scsi structs for future known features and fixes (Mike Christie ) [220458]
  - squashfs fixup (Steve Grubb ) [219534]
  - ppc64: DLPAR virtual CPU removal failure - cppr bits (Janice M. Girouard ) [218058]
  - ia64: allow HP ZX1 systems to initalize swiotlb in kdump (Neil Horman ) [220064]
  - export tasklist_lock (David Howells ) [207992]
  - gfs2: Initialization of security/acls (Steven Whitehouse ) [206126]
  - x86: handle _PSS object range corectly in speedstep-centrino (Brian Maly ) [211690]
  - GFS2 change nlink panic (Wendy Cheng ) [215088]
  - scsi: fix oops in iscsi packet transfer path (Mike Christie ) [215381]
  - Fix Emulex lpfc ioctl on PPC (Tom Coughlan ) [219194]
  - Xen: Fix agp on x86_64 under Xen (Stephen C. Tweedie ) [217715]
  - Emulex lpfc update to 8.1.10.2 (Tom Coughlan ) [218243]
  - bluetooth: Add packet size checks for CAPI messages (Marcel Holtmann ) [219139]
  - x86_64: create Calgary boot knob (Konrad Rzeszutek ) [220078]
  - cciss bugfixes (Tom Coughlan ) [185021]
  - ia64: Do not call SN_SAL_SET_CPU_NUMBER twice on cpu 0 on booting (Erik Jacobson ) [219722]
  - scsi: Empty /sys/class/scsi_host/hostX/config  file (Janice M. Girouard ) [210239]
  - refresh: Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - update: Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2910.el5]
changelog:
  - xen: Update xen paravirt framebuffer to upstream protocol (fixes) (Stephen C. Tweedie ) [218048]
  - xen: Update xen paravirt framebuffer to upstream protocol (Stephen C. Tweedie ) [218048]
  - nfs: disable Solaris NFS_ACL version 2  (Steve Dickson ) [215073]
  - xen: EXPORT_SYMBOL(zap_page_range) needs to be moved (Stephen C. Tweedie ) [218476]
  - ppc64: disable unused drivers that cause oops on insmod/rmmod (Janice M. Girouard ) [206658]
  - scsi: GoVault not accessible due to software reset. (Konrad Rzeszutek ) [215567]
  - GFS2 fix DIO deadlock (Steven Whitehouse ) [212627]
  - dlm: fix lost flags in stub replies (David Teigland ) [218525]
  - CacheFiles: Improve/Fix reference counting (David Howells ) [212844]
  - gfs2: Fails back to readpage() for stuffed files (Steven Whitehouse ) [218966]
  - gfs2: Use try locks in readpages (Steven Whitehouse ) [218966]
  - GFS2 Readpages fix (part 2) (Steven Whitehouse ) [218966]
  - gfs2: Readpages fix  (Steven Whitehouse ) [218966]
  - bonding: Don't release slaves when master is admin down (Herbert Xu ) [215887]
  - x86_64: fix execshield randomization for heap (Brian Maly ) [214548]
  - x86_64: check and enable NXbit support during resume (Vivek Goyal ) [215954]
  - GPL export truncate_complete_page (Eric Sandeen ) [216545]
  - mm: reject corrupt swapfiles earlier (Eric Sandeen ) [213118]
  - QLogic qla2xxx - add missing PCI device IDs (Tom Coughlan ) [219350]
  - mpt fusion bugfix and maintainability improvements (Tom Coughlan ) [213736]
  - scsi: make fc transport removal of target configurable (Mike Christie ) [215797]
  - gfs2: don't try to lockfs after shutdown (Steven Whitehouse ) [215962]
  - xen: emulation for accesses faulting on a page boundary (Stephen C. Tweedie ) [219275]
  - gfs2: dirent format compatible with gfs1 (Steven Whitehouse ) [219266]
  - gfs2: Fix size caclulation passed to the allocator. (Russell Cattelan ) [218950]
  - ia64: PAL_GET_PSTATE implementation (Prarit Bhargava ) [184896]
  - CacheFiles: Handle ENOSPC on create/mkdir better (David Howells) [212844]
  - connector: exessive unaligned access (Erik Jacobson ) [218882]
  - revert: Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2876.el5]
changelog:
  - touch softdog during oops (Dave Jones ) [218109]
  - selinux: allow quoted commas for certain catagories in context mounts (Eric Paris ) [211857]
  - xen: oprofile on Intel CORE (Glauber de Oliveira Costa ) [213964]
  - Xen: make ballooning work right (xen part) (Rik van Riel ) [212069]
  - Xen: make ballooning work right (Rik van Riel ) [212069]
  - Xen: HVM crashes on IA32e SMP (Glauber de Oliveira Costa ) [214774]
  - gfs2: Fix uninitialised variable (Steven Whitehouse ) [219212]
  - GFS2: Don't flush everything on fdatasync (Steven Whitehouse ) [218770]
  - Disable PCI mmconf and segmentation on HP xw9300/9400 (Bhavana Nagendra ) [219159]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - Fix time skew on Intel Core 2 processors (Prarit Bhargava ) [213050]
  - Xen : Fix for SMP Xen guest slow boot issue on AMD systems (Bhavana Nagendra ) [213138]
  - GFS2: fix mount failure (Josef Whiter ) [218327]
  - cramfs: fix zlib_inflate oops with corrupted image (Eric Sandeen ) [214705]
  - xen: Fix xen swiotlb for b44 module (xen part) (Stephen C. Tweedie ) [216472]
  - xen: Fix xen swiotlb for b44 module (Stephen C. Tweedie ) [216472]
  - scsi: fix stex_intr signature (Peter Zijlstra ) [219370]
  - GFS2: Fix recursive locking in gfs2_permission (Steven Whitehouse ) [218478]
  - GFS2: Fix recursive locking in gfs2_getattr (Steven Whitehouse ) [218479]
  - cifs: Fix mount failure when domain not specified (Steve Dickson ) [218322]
  - GFS2: Fix memory allocation in glock.c (Steven Whitehouse ) [204364]
  - gfs2: Fix journal flush problem (Steven Whitehouse ) [203705]
  - gfs2: Simplify glops functions (Steven Whitehouse ) [203705]
  - gfs2: Fix incorrect fs sync behaviour (Steven Whitehouse ) [203705]
  - fix check_partition routines to continue on errors (David Milburn ) [210234]
  - fix rescan_partitions to return errors properly (David Milburn ) [210234]
  - gfs2: Tidy up bmap & fix boundary bug (Steven Whitehouse ) [218780]
  - Fix bmap to map extents properly (Steven Whitehouse ) [218780]
  - ide-scsi/ide-cdrom module load race fix (Alan Cox ) [207248]
  - dlm: fix receive_request lvb copying (David Teigland ) [214595]
  - dlm: fix send_args lvb copying (David Teigland ) [214595]
  - device-mapper mirroring - fix sync status change (Jonathan Brassow ) [217582]
  - Xen: Copy shared data before verification (Herbert Xu ) [217992]
  - s390: common i/o layer fixes (Jan Glauber ) [217799]
  - Spurious interrups from ESB2 in native mode (Alan Cox ) [212060]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2839.el5]
changelog:
  - Xen: fix xen/ia64/vti panic when config sets maxmem (Aron Griffis ) [214161]
  - Xen: ia64 making it work (Aron Griffis ) [210637]
  - Xen: upstream patches to make Windows Vista work (Steven Rostedt) [214780]
  - enable PCI express hotplug driver (Kei Tokunaga ) [207203]
  - d80211: kABI pre-compatibility (John W. Linville ) [214982]
  - Xen: ia64 kernel unaligned access (Aron Griffis ) [212505]
  - Xen: getting ia64 working; kernel part (Aron Griffis) [210637]
  - Xen: Properly close block frontend on non-existant file (Glauber de Oliveira Costa ) [218037]
  - SHPCHP driver doesn't work if the system was under heavy load (Kei Tokunaga ) [215561]
  - SHPCHP driver doesn't work in poll mode (Kei Tokunaga) [211679]
  - pciehp: free_irq called twice (Kei Tokunaga ) [216940]
  - pciehp: pci_disable_msi() called to early (Kei Tokunaga ) [216939]
  - pciehp: parallel hotplug operations cause kernel panic (Kei Tokunaga ) [216935]
  - pciehp: info messages are confusing (Kei Tokunaga ) [216932]
  - pciehp: Trying to enable already enabled slot disables the slot (Kei Tokunaga ) [216930]
  - CacheFiles: cachefiles_write_page() shouldn't indicate error twice (David Howells) [204570]
  - IPMI - allow multiple Baseboard Management Centers (Konrad Rzeszutek ) [212572]
  - nfs - set correct mode during create operation (Peter Staubach ) [215011]
  - Xen: blkback: Fix potential grant entry leaks on error (Rik van Riel ) [218355]
  - Xen: blkback: Copy shared data before verification (Rik van Riel) [217994]
  - revert: Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2817.el5]
changelog:
  - Adding in a kabi_whitelist (Jon Masters) [218402]
  - Xen: AMD-V HVM fix for Windows hibernate (Bhavana Nagendra ) [217367]
  - Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]
  - NetLabel: bring current with upstream: cleanup/future work (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: performance (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: bugs (Eric Paris ) [218097]
  - TG3 support Broadcom 5756M/5756ME  Controller (John Feeney ) [213204]
  - tg3: BCM5752M crippled after reset (Andy Gospodarek ) [215765]
  - sata ata_piix map values (Geoff Gustafson ) [204684]
  - e1000: Reset all functions after a PCI error (Janice M. Girouard) [211694]
  - prevent /proc/meminfo's HugePages_Rsvd from going negative. (Larry Woodman ) [217910]
  - netlabel: disallow editing of ip options on packets with cipso options (Eric Paris ) [213062]
  - xen netback: Fix wrap to zero in transmit credit scheduler. (Herbert Xu ) [217574]
  - megaraid initialization fix for kdump (Jun'ichi Nick Nomura ) [208451]
  - HFS: return error code in case of error (Eric Paris ) [217009]
  - Xen: fix 2TB overflow in virtual disk driver (Rik van Riel ) [216556]
  - e1000: fix garbled e1000 stats (Neil Horman ) [213939]
  - dlm: use recovery seq number to discard old replies (David Teigland ) [215596]
  - dlm: resend lock during recovery if master not ready (David Teigland ) [215596]
  - dlm: check for incompatible protocol version (David Teigland ) [215596]
  - NetLabel: Do not send audit messages if audit is off (Eric Paris ) [216244]
  - selinux: give correct response to get_peercon() calls (Eric Paris ) [215006]
  - SELinux: Fix oops with non-mls policies (Eric Paris ) [214397]
  - Xen blkback: Fix first_sect check. (Rik van Riel ) [217995]
  - allow the highest frequency if bios think so. (Dave Jones ) [218106]
  - AGP corruption fixes. (Dave Jones ) [218107]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2789.el5]
changelog:
  - Xen: fix vcpu hotplug statistics (Rik van Riel ) [209534]
  - DLPAR and Hotplug not enabled (Janice M. Girouard ) [207732]
  - Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - e1000: add (2) device ids (Bruce Allan) [184864]
  - power6: illegal instruction errors during install (Janice M. Girouard) [216972]
  - update_flash is broken across PPC (Janice M. Girouard) [214690]
  - write failure on swapout could corrupt data (Peter Zijlstra) [216194]
  - IBM veth panic when buffer rolls over (Janice M. Girouard ) [214486]
  - Make the x86_64 boot gdt limit exact (Steven Rostedt ) [214736]
  - Xen: make netfront device permanent (Glauber de Oliveira Costa ) [216249]
  - lockdep: fix ide/proc interaction (Peter Zijlstra ) [210678]
  - Xen: fix iSCSI root oops on x86_64 xen domU (Rik van Riel ) [215581]
  - Fix flowi clobbering (Chris Lalancette ) [216944]
  - Enable netpoll/netconsole for ibmveth (Neil Horman ) [211246]
  - dlm: fix size of STATUS_REPLY message (David Teigland ) [215430]
  - dlm: fix add_requestqueue checking nodes list (David Teigland ) [214475]
  - dlm: don't accept replies to old recovery messages (David Teigland ) [215430]
  - x86_64: kdump mptable reservation fix  (Vivek Goyal ) [215417]
  - Add Raritan KVM USB dongle to the USB HID blacklist (John Feeney ) [211446]
  - Fix bogus warning in [un]lock_cpu_hotplug (Prarit Bhargava ) [211301]
  - Xen: Avoid touching the watchdog when gone for too long (Glauber de Oliveira Costa ) [216467]
  - add missing ctcmpc Makefile target (Jan Glauber ) [184608]
  - remove microcode size check for i386 (Geoff Gustafson ) [214798]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2769.el5]
changelog:
  - add the latest 2.6.18.4 security patches (Don Zickus) [217904]
  - revert: mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2767.el5]
changelog:
  - disable W1 config (Dave Jones ) [216176]
  - Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]
  - Xen: fix profiling (Rik van Riel ) [214886]
  - bnx2: update firmware to correct rx problem in promisc mode (Neil Horman ) [204534]
  - sound-hda: fix typo in patch_realtek.c (John W. Linville) [210691]
  - Fix sys_move_pages when a NULL node list is passed. (Dave Jones ) [214295]
  - proc: readdir race fix (Nobuhiro Tachino ) [211682]
  - device mapper: /sys/block/dm-* entries remain after removal (Milan Broz ) [214905]
  - Fix 64k page table problems on ppc specific ehca driver (Doug Ledford ) [199765]
  - configfs: mutex_lock_nested() fix (Eric Sandeen ) [211506]
  - CIFS: Explicitly set stat->blksize (Eric Sandeen ) [214607]
  - Compute checksum properly in netpoll_send_udp (Chris Lalancette ) [214542]
  - Noisy stack trace by memory hotplug on memory busy system (Kei Tokunaga ) [213066]
  - catch blocks beyond pagecache limit in __getblk_slow (Eric Sandeen ) [214419]
  - xen privcmd: Range-check hypercall index. (Herbert Xu ) [213178]
  - strange messages around booting and acpi-memory-hotplug (Kei Tokunaga) [212231]
  - Fix panic in CPU hotplug on ia64 (Prarit Bhargava ) [213455]
  - Fix spinlock bad magic when removing xennet device (Chris Lalancette ) [211684]
  - netlabel: various error checking cleanups (Eric Paris ) [210425]
  - mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]
  - Fix autofs creating bad dentries in NFS mount (David Howells ) [216178]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2747.el5]
changelog:
  - Set HZ to 1000 for kernel and 250 for Xen (Don Zickus) [198594] 
  - Custom Diagnostics kernel module fails to load on RHEL5 (Janice Girouard) [213020] 
  - kernel: FS-Cache: error from cache: -105 (2nd part) (Don Zickus) [214678]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2746.el5]
changelog:
  - configure XPC as a loadable kernel module instead of static (Erik Jacobson) [213903] 
  - kernel BUG at drivers/xen/core/evtchn.c:482! (Glauber de Oliveira Costa) [210672] 
  - IPv6 MRT: 'lockdep' annotation is missing? (Thomas Graf) [209313] 
  - sort PCI device list breadth-first (John Feeney) [209484] 
  - reenable xen pae >4GB patch (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2744.el5]
changelog:
  - Kernel Panic on Initial boot of guest (Steven Rostedt) [211633] 
  - kernel unable to read partition (device busy) (Peter Zijlstra) [212191] 
  - QEMU always crashes (Don Zickus) [212625] 
  - kernel: FS-Cache: error from cache: -105 (Steve Dickson) [212831] 
  - DLM oops in kref_put when umounting (Patrick Caulfield) [213005] 
  - gfs umount hung, message size too big (Patrick Caulfield) [213289] 
  - CPU hotplug doesn't work trying to BSP offline (Keiichiro Tokunaga) [213324] 
  - status messages ping-pong between unmounted nodes (Dave Teigland) [213682] 
  - res_recover_locks_count not reset when recover_locks is aborted (Dave Teigland) [213684] 
  - disable CONFIG_ISA (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2740.el5]
changelog:
  - Remove support for ipw3945 driver (Don Zickus) [195534] 
  - acpiphp will not load due to unknown symbols (Prarit Bhargava) [209506] 
  - Can not install rhel5 b1 on ipr dasd. (Janice Girouard) [210851] 
  - Can't make SCTP connections between Xen guests (Don Zickus) [212550] 
  - eHEA update to support 64K pages for Power6 (Janice Girouard) [212041] 
  - Failure to boot second kernel on HP hardware (Don Zickus) [212578] 
  - dlm deadlock during simultaneous mount attempts (Dave Teigland) [211914] 
  - CMT-eligible ipw2200/2915 driver (John W. Linville) [184862] 
  - CVE-2006-5174 copy_from_user information leak on s390 (Jan Glauber) [213568] 
  - NFSv4: fs_locations support (Steve Dickson) [212352] 
  - [IPv6] irrelevant rules break ipv6 routing. (Thomas Graf) [209354] 
  - [IPv6] blackhole and prohibit rule types not working (Thomas Graf) [210216] 
  - [KEXEC] bad offset in icache instruction crashes Montecito systems (Jarod Wilson) [212643] 
  - assertion "FALSE" failed in gfs/glock.c (Dave Teigland) [211622] 
  - I/O DLPAR and Hotplug not enabled in RHEL5 (Janice Girouard) [207732]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2739.el5]
changelog:
  - SHPCHP driver doesn't work (Keiichiro Tokunaga) [210478] 
  - ext3/jbd panic (Eric Sandeen) [209647] 
  - Oops in nfs_cancel_commit_list (Jeff Layton) [210679] 
  - kernel Soft lockup detected on corrupted ext3 filesystem (Eric Sandeen) [212053] 
  - CIFS doesn't work (Steve Dickson) [211070]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2737.el5]
changelog:
  - Grant table operations unsuitable for guest domains (Rik van Riel) [210489] 
  - AMD-V HVM windows guest boot menu timer issue (Steven Rostedt) [209001] 
  - iflags.h is not upstream (Steve Whitehouse) [211583] 
  - ACPIPHP doesn't work (Keiichiro Tokunaga) [209677] 
  - IBMVSCSI does not correctly reenable the CRQ (Janice Girouard) [211304] 
  - librdmacm-utils failures (Doug Ledford) [210711] 
  - Badness in debug_mutex_unlock at kernel/mutex-debug.c:80 (Janice Girouard) [208500] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173, 211604]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2736.el5]
changelog:
  - Can't unload gnbd module, 128 references (Peter Zijlstra) [211905]
  - ddruid does not recognize dasd drives (Peter Zijlstra) [210030]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2732.el5]
changelog:
  - possible recursive locking detected: cachefilesd (David Howells) [204615] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173] 
  - nfs handled rpc error incorrectly (Steve Dickson) [207040] 
  - cachefiles: inode count maintance (Steve Dickson) [209434] 
  - mkinitrd: iSCSI root requires crc32c module (Mike Christie) [210232] 
  - implemented sysrq-w to dump all cpus (Larry Woodman) 
  - enable panic_on_oops (Dave Anderson) 
  - re-enable x86_64 stack unwinder fixes (Don Zickus) 
  - disable kernel debug flags (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2728.el5]
changelog:
  - Update FC transport and Emulex lpfc Fibre Channel Driver (Tom Coughlan) [207551] 
  - NFSv4 using memory after its freed fix (Steve Dickson) [206996] 
  - GFS2 dirents are 'unkown' type (Steve Whitehouse) [210493] 
  - Cachefs double unlock (Steve Dickson) [210701] 
  - tty locking cleanup (Prarit Bhargava) [210249] 
  - ibmveth fails in kdump boot (Janice Girouard - IBM on-site partner) [199129] 
  - Kpobes backport from 2.6.19-rc1 (Anil S Keshavamurthy) [210555] 
  - Ia64 - kprobe opcode must reside on 16 bytes alignment (Anil S Keshavamurthy) [210552] 
  - GFS2 forgets to unmap pages (Steve Whitehouse) [207764] 
  - DIO needs to avoid using page cache (Jeffrey Moyer) [207061] 
  - megaraid_sas: update (Chip Coldwell) [209463] 
  - NFS data corruption (Steve Dickson) [210071] 
  - page align bss sections on x86_64 (Vivek Goyal) [210499] 
  - blkbk/netbk modules don't load (Aron Griffis) [210070] 
  - blktap does not build on ia64 (Aron Griffis) [208895] 
  - blkbk/netbk modules don't load (Rik van Riel) [202971] 
  - patches from xen-ia64-unstable (Rik van Riel) [210637] 
  - Xen version strings need to reflect exact Red Hat build number (Stephen Tweedie) [211003] 
  - updated to 2.6.18.1 stable series (Don Zickus) 
  - updated execshield patch (Don Zickus) 
  - revert CONFIG_PCI_CALGARY_IOMMU config (Don Zickus) 
  - disable CONFIG_MAMBO (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2727.el5]
changelog:
  - I/O errors with dm-multipath when adding new path (Alasdair Kergon) [169302] 
  - Kdump on i386 fails - Second kernel panics (Vivek Goyal) [207598] 
  - patch to qla4xxx for supporting ioctl module (Mike Christie) [207356] 
  - lockdep fixes (Peter Zijlstra) [208165 209135 204767] 
  - printk cleanup (Dave Jones) 
  - spec file cleanup (Dave Jones, Bill Nottingham) 
  - gfs-dlm fix (Patrick Caulfield) 
  - find-provides fix (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2726.el5]
changelog:
  - need to disable all cpu frequency scaling drivers in Xen kernel (Rik van Riel) [210336 208942] 
  - radeon hangs DMA when CONFIG_CALGARY_IOMMU is build in kernel. (Konrad Rzeszutek) [210380] 
  - Got Call Trace message when remove veth module (Janice Girouard) [208938] 
  - cannot generate kABI deps unless kernel is installed (Jon Masters) [203926] 
  - ctcmpc driver (Jan Glauber) [184608] 
  - PTRACE_DETACH doesn't deliver signals under utrace. (Aristeu S. Rozanski F.) [207674] 
  - SG_SCATTER_SZ causing Oops during scsi disk microcode update (Doug Ledford) [207146] 
  - ia64 kprobe fixes (David Smith)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2725.el5]
changelog:
  - Duplicate dput in sysfs_update_file can cause a panic. (Prarit Bhargava) [209454] 
  - Lock issue with 2.6.18-1.2702.el5, NetworkManager and ipw3945 (John W. Linville) [208890] 
  - cpqarray module fails to detect arrays (Chip Coldwell) [205653] 
  - stex.c driver for Promise SuperTrak EX is missing (Jeff Garzik) [209179] 
  - NetLabel does not audit configuration changes (Eric Paris) [208456] 
  - NetLabel has a race problem in the cache (Eric Paris) [209324] 
  - kernel/lockdep.c:1814/trace_hardirqs_on() (Not tainted) for APM (Peter Zijlstra) [209480] 
  -  correct netlabel secid for packets without a known label (Eric Paris) [210032] 
  - IPSec information leak with labeled networking (Eric Paris) [209171] 
  - NetLabel hot-add memory confict pre-beta2 kenrel x86_64 (Konrad Rzeszutek) [208445] 
  - NFS data corruption (Steve Dickson) [210071] 
  - kernel dm multipath: ioctl support (Alasdair Kergon) [207575] 
  - kernel dm: fix alloc_dev error path (Alasdair Kergon) [209660] 
  - kernel dm snapshot: fix invalidation ENOMEM (Alasdair Kergon) [209661] 
  - kernel dm snapshot: chunk_size parameter is not required after creation (Alasdair Kergon) [209840] 
  - kernel dm snapshot: fix metadata error handling (Alasdair Kergon) [209842] 
  - kernel dm snapshot: fix metadata writing when suspending (Alasdair Kergon) [209843] 
  - kernel dm: full snapshot removal attempt causes a seg fault/kernel bug (Alasdair Kergon) [204796] 
  - dm mirror: remove trailing space from table (Alasdair Kergon) [209848] 
  - kernel dm: add uevent change event on resume (Alasdair Kergon) [209849] 
  - kernel dm crypt: Provide a mechanism to clear key while device suspended (Milan Broz) [185471] 
  - kernel dm: use private biosets to avoid deadlock under memory pressure (Alasdair Kergon) [209851] 
  - kernel dm: add feature flags to structures for future kABI compatibility (Alasdair Kergon) [208543] 
  - kernel dm: application visible I/O errors with dm-multipath and queue_if_no_path when adding new path (Alasdair Kergon) [169302] 
  - refresh ia64-kexec-kdump patch (Don Zickus) 
  - update exec-shield patch (Don Zickus) 
  - revert x86 unwinder fixes (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2722.el5]
changelog:
  - update utrace patch to fix s390 build problems
  - ia64 hotswap cpu patch fixes to compile under xen
  - ia64 export fixes


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2718.el5]
changelog:
  - Audit Filtering on PPID for = and != is inverted (Eric Paris) [206425] 
  - Adding Hitachi SANRISE entries into SCSI white list (Chip Coldwell) [206532] 
  - forward port of SCSI blacklist from RHEL4 (Chip Coldwell) [208256] 
  - Need to add ALSA support for Broadwater platform (John W. Linville) [184855] 
  - /proc/<pid>/smaps doesn't give any data (Alexander Viro) [208589] 
  - ACPI based CPU hotplug causes kernel panic (Keiichiro Tokunaga) [208487] 
  - New infiniband 12x power driver opensourced from IBM (Janice Girouard) [184791] 
  - iscsi oops when connection creation fails (Mike Christie) [209006] 
  - nommconf work-around still needed for AMD chipsets (Jim Baker) [207396] 
  - ProPack XPMEM exported symbols (Greg Edwards) [206215] 
  - PCI error recovery bug in e100 and e1000 cards (John W. Linville) [208187] 
  - / on raid fails to boot post-install system (Jan Glauber) [196943] 
  - auditctl fails to reject malformed ARCH filter (Eric Paris) [206427] 
  - oom-killer updates (Larry Woodman) [208583] 
  - NFS is revalidating directory entries too often (Steve Dickson) [205454] 
  - kernel-xen cannot reboot (Stephen Tweedie) [209841] 
  - Unsupported FS's in RHEL 5 Beta 1 (Don Zickus) [206486]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2715.el5]
changelog:
  - RDTSCP Support (Bhavana Nagendra) [185057] 
  - s390 kprobe on larl instruction crashes system (Jan Glauber) [205738] 
  - single stepping is broken when kprobes is configured (Jan Glauber) [205739] 
  - autofs kernel patches resulting from Connectathon testing (Ian Kent) [206952] 
  - Include the qla3xxx networking driver (Konrad Rzeszutek) [208182] 
  - overzealous sanity checking in sys_poll() (Chris Snook) [204705] 
  - automounter cannot shutdown when timeout=0 (Ian Kent) [205836] 
  - Rewrite of journaling data commit code (Eric Sandeen) [207739] 
  - qla4xxx soft lockup when ethernet cable disconnected (Mike Christie) [206063] 
  - hypfs_kill_super() check for initialized root inode (Jan Glauber) [207717] 
  - The Matrox graphics driver is not built (Janice Girouard) [207200]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2714.el5]
changelog:
  - Wrong SELinux context prevents hidd from working (David Woodhouse) [204655] 
  - nfs connectathon component basic test 6 fails.... (Steve Dickson) [208637] 
  - unstick STICKY bit to fix suspend/resume (Dave Jones)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - s390 ccs/ccw subsystem does not have proper uevent support (Pete Zaitcev) [199994] 
  - 'Cannot allocate memory' when cat /proc/scsi/scsi (Chip Coldwell) [200299] 
  - Add support for Kirkwood and Kirkwood LP NICs (John W. Linville) [207776] 
  - remove userspace support from qla4xxx (Mike Christie) [206063] 
  - NetLabel interface has changed in the upstream kernels (Eric Paris) [208119] 
  - lockdep fixes (Peter Zijlstra) [208304 204795]


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Multiple routing tables for IPv6 (Thomas Graf) [179612] 
  -bunch of lockdep fixes (Peter Zijlstra) [200520 208294 208293 208292 208290] 
  -rearrange the cachefs patches for easier future maintance (Steve Dickson) 
  -enable some TCP congestion algorithms (David Miller) 
  -add a test patch (Eric Paris)


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Native SAS and SATA device support - SATA/IDE converter (Janice Girouard) [196336] 
  -kernel unaligned access messages in rhel5a1 (Prarit Bhargava) [198572] 
  -problems with LUNs mapped at LUN0 with iscsi and netapp filers (Mike Christie) [205802] 
  -ext3 fails to mount a 16T filesystem due to overflows (Eric Sandeen) [206721] 
  -possible recursive locking detected - swapper/1 (Peter Zijlstra) [203098] 
  -FS-Cache: error from cache: -28 (David Howells) [204614] 
  -aic94xx driver does not recognise SAS drives in x366 (Konrad Rzeszutek) [206526] 
  -Support for 3945 driver (John W. Linville) [195534] 
  -Memory Hotplug fails due to relocatable kernel patches (Vivek Goyal) [207596] 
  -Potential overflow in jbd for filesystems > 8T (Eric Sandeen) [208024] 
  -2,4-node x460 halts during bootup after installation (Konrad Rzeszutek) [203971]


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix PowerPC audit syscall success/failure check (#204927)
  - Remove offsetof() from <linux/stddef.h> (#207569)
  - One line per header in Kbuild files to reduce conflicts
  - Fix visibility of ptrace operations on ppc32
  - Fix ppc32 SECCOMP


author: Dave Jones <davej@redhat.com>
changelog:
  - reiserfs: make sure all dentry refs are released before
    calling kill_block_super
  - Fix up some compile warnings


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV printf rate limit (rostedt).
  - xen HV update to xen-unstable cset11540:9837ff37e354
  - xen-update:
    * linux-2.6 changeset:   34294:dc1d277d06e0
    * linux-2.6-xen-fedora changeset:   36184:47c098fdce14
    * xen-unstable changeset:   11540:9837ff37e354


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update to 2.6.18-rc7-git4.
    * linux-2.6 changeset: 34288:3fa5ab23fee7
    * linux-2.6-xen-fedora changeset: 36175:275f8c0b6342
    * xen-unstable changeset: 11486:d8bceca5f07d


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update:
    * linux-2.6 changeset: 34228:ea3369ba1e2c
    * linux-2.6-xen-fedora changeset: 36107:47256dbb1583
    * linux-2.6-xen changeset: 22905:d8ae02f7df05
    * xen-unstable changeset: 11460:1ece34466781ec55f41fd29d53f6dafd208ba2fa


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Implement futex primitives on IA64 and wire up [gs]et_robust_list again
    (patch from Jakub, #206613)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - add include/asm-x86_64/const.h to exported header file list
    used by the x86 relocatable patch (inside include/asm-x86_64/page.h)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - sync up beta1 fixes and patches
     - includes infiniband driver
     - aic9400/adp94xx updates
     - squashfs s390 fix
  - include x86 relocatable patch at end of list
  - some /proc/kcore changes for x86 relocatable kernel


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - 2.6.18rc7-git1
  - header file fixups
  - use correct arch for 'make headers_install' when cross-building


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xenoprof upstream fix.
  - update xen HV to cset 11394.
  - xen update (3hypercall incompatibility included)
  - linux-2.6 changeset: 34073:b1d36669f98d
  - linux-2.6-xen-fedora changeset: 35901:b7112196674e
  - xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29
  - fix ia64 (xen & net xen).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen-hv to cset 11256 (pre 3 hypercall breakage).
  - remove debug=y from HV compilation.
  - xen update (pre 3 hypercall breakage)
    * linux-2.6 changeset: 33957:421a6d428e95
    * linux-2.6-xen-fedora changeset: 35756:78332fcbe5b0
    * xen-unstable changeset: 11251:5fc1fe79083517824d89309cc618f21302724e29
    * get new irqflags code from linux-2.6.tip-xen.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen HV to xen-unstable cset 11251.
  - fix ia64 xen HV compilation.
  - linux xen kernel update:
    * linux-2.6 changeset: 33681:2695586981b9
    * linux-2.6-xen-fedora changeset: 35458:b1b8e00e7a17
    * linux-2.6-xen changeset: 22861:0b726fcb6780
    * xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29


author: Don Zickus <dzickus@redhat.com>
changelog:
  - update utrace
  - more gfs2-dlm fixes
  - fix xen-devel build directory issue
  - add x86, x86_64 relocatable kernel patch for rhel only (davej, forgive my sins)
    - applied xen relocatable cleanup on top of it
  - add ia64 kexec/kdump pieces


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update GFS2 patch (from swhiteho)
  - Enable kernel-headers build
  - Enable i386 build _only_ for kernel-headers


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Another lockdep-fix
  - NFS fix for the connectathon test
  - Enable mmtimer for ia64
  - Add support for iscsi qla4xxx


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen kernel update.
    * linux-2.6 changeset: 33525:dcc321d1340a
    * linux-2.6-xen-fedora changeset: 35247:400b0cf28ee4
    * linux-2.6-xen changeset: 22813:80c2ccf5c330
    * xen-unstable changeset: 11069:0340e579f06544431e915d17596ac144145a077e
  - xen big config update.  Every config option is the same than normal kernel
    except MICROCODE, TCG_TPM & CONFIG_DEBUG_SLAB.
  - disable XEN_FRAMEBUFFER & XEN_KEYBOARD.
  - make sysrq c to "crash" all kernels.


author: Don Zickus <dzickus@redhat.com>
changelog:
  - NFS 64-bit inode support
  - QLogic firmware
  - SELinux support for range transitions
  - EHEA ethernet driver
  - ppc irq mapping fix


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - Fix s390 single-step for real this time.
    - Revamp how arch code defines ptrace compatibility.


author: Dave Jones <davej@redhat.com>
changelog:
  - Update to squashfs 3.1 which should fix stack overflows seen
    during installation.
  - Merge framebuffer driver for OLPC.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable ia64 xen again.
  - xen kernel-update linux-2.6-xen-fedora cset 35236:70890e6e4a72.
    * fix ia64 compilation problems.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable ia64 xen, it doesn't compile.
  - xen HV update cset 11057:4ee64035c0a3
    (newer than that don't compile on ia64).
  - update linux-2.6-xen patch to fix sort_regions on ia64.
  - fix %setup for xen HV to work at xen HV upgrades.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV update cset 11061:80f364a5662f.
  - xen kernel update
    * linux-2.6-xen-fedora cset
    * linux-2.6-xen cset 22809:d4b3aba8876df169ffd9fac1d17bd88d87eb67c5.
    * xen-unstable 11060:323eb29083e6d596800875cafe6f843b5627d77b
    * Integrate xen virtual frame buffer patch.
    * Enable CONFIG_CRASH on xen.


author: Dave Jones <davej@redhat.com>
changelog:
  - Another lockdep fix for networking.
  - Change some hotplug PCI options.
  - Daily update from GregKH's git tree.
  - Unbreak SMP locking in oprofile.
  - Fix hotplug CPU locking in workqueue creation.
  - K8 EDAC support.
  - IPsec labelling enhancements for MLS
  - Netlabel: CIPSO labeled networking


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - fix s390 single-step
    - first third of ia64 support, enable CONFIG_UTRACE (no ptrace yet)


author: Juan Quintela <quintela@anano.mitica>
changelog:
  - Update linux-2.6-xen patch.
    * linux-2.6-xen-fedora cset 34931:a3fda906fb82
    * linux-2.6-xen cset 22777:158b51d317b76ebc94d61c25ad6a01d121dff750
    * xen-unstable cset  10866:4833dc75ce4d08e2adc4c5866b945c930a96f225


author: Jon Masters <jcm@redhat.com>
changelog:
  - Copy .config to include/config/auto.conf to avoid unnecessary "make prepare".
  - This should finally fix #197220.
  - Pulled in patch-2.6.18-rc3-git2.bz2.sign to fix SRPM build failure.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc3-git2
  - Readd patch to allow 460800 baud on 16C950 UARTs.
  - Fix backtracing for interrupt stacks


author: Dave Jones <davej@redhat.com>
changelog:
  - s390 kprobes support.
  - Fix oops in libata ata_device_add()
  - Yet more fixes for lockdep triggered bugs.
  - Merge numerous patches from -mm to improve software suspend.
  - Fix incorrect section usage in MCE code that blew up on resume.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable blktap for xen-ia64 (don't compile).
  - enable ia64-xen (it compiles, but still don't boot).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Update xen patch to linux-2.6-xen-fedora cset 34801.
  	* linux-2.6 cset 33175
  	* no linux-2.6-xen updates.
  - Remove xen x86_64 8 cpu limit.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - review all xen related patches.
  - x86_64 dom0, x86_64 domU and i386 domU should work.
  - fix xen i386 dom0 boot (#200382).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Workaround the huge timeouts problems on xen HV x86.
  - xen update and cleanup/reorgatization of xen patches.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc2-git2 & git3
  - Fix PI Futex exit crash.
  - Fix an inotify locking bug.
  - Add device mapper mirroring patches.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Patch from jakub to use sysv style hash for VDSO to fix booting
    on ia64 (#199634, #199595)
  - Fix e1000 crc calculation for things to work with xen
  - Update gfs2 patchset


author: Roland McGrath <roland@redhat.com>
changelog:
  - Clean up spec changes for debuginfo generation to cover Xen case.
  - New version of utrace patch, fixes /proc permissions. (#199014)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Add in support for nfs superblock sharing and cachefs
    patches from David Howells
  - Disable 'make prepare' hack as it is breaking ppc symlinks
  - Added tracking dirty pages patch from Peter Zijlstra
  - Fix for Opteron timer scaling
  - Fix for Calgary pci hang


author: Juan Quintela <quintela@redhat>
changelog:
  - big xen patch.
  - enable xen again.
  - redo xen config.
  - i686 kernel for xen uses PAE now.
  - new xen Hypervisor cset 10711.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Check in new version of kabitool for kernel deps.
  - Fix kabitool for correct location of symvers.
  - Various other fixes when things broke.


author: Dave Jones <davej@redhat.com>
changelog:
  - Support up to 4GB in the 586 kernel again.
  - Drop the FPU optimisation, it may be the reason for
    strange SIGFPE warnings various apps have been getting.


author: Dave Jones <davej@redhat.com>
changelog:
  - Cleaned up a bunch of bogons in the config files.
  - 2.6.18-rc1-git9,git10 & 2.6.18-rc2
  - improvements to linked list debugging.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Temporarily disable -headers subpackage until the problems which
    arise from brew not using older package are dealt with.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - No headers subpackage for noarch build
  - Fix PI-futexes to be properly unlocked on unexpected exit


author: Dave Jones <davej@redhat.com>
changelog:
  - Add sleazy fpu optimisation.   Apps that heavily
    use floating point in theory should get faster.


author: Dave Jones <davej@redhat.com>
changelog:
  - Add lockdep annotate for bdev warning.
  - Enable autofs4 to return fail for revalidate during lookup


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-git10 & git11
  - Enable fake PCI hotplug driver. (#190437)
  - Remove lots of 'modprobe loop's from specfile.


author: Dave Jones <davej@redhat.com>
changelog:
  - Enable profiling for 586 kernels.
  - 2.6.17-git6 & git7
    This required lots of rediffing. SATA suspend, Promise PATA-on-SATA,
    Xen, exec-shield, and more.  Tread carefully, harmful if swallowed etc.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen0/xenU/xen0-PAE/xenU-PAE packages
  - disable xen PAE kernel for i386 for now
  - create xen-PAE kernel
  - remove %requires xen from xen kernels


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Remi Collet <rcollet@redhat.com> - 5.3.3-24
changelog:
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
    CVE-2014-2497
  - fileinfo: fix incomplete fix for CVE-2012-1571 in
    cdf_read_property_info. CVE-2014-3587
  - core: fix incomplete fix for CVE-2014-4049 DNS TXT
    record parsing. CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.3.3-23
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-17
changelog:
  - reorder security patches
  - add security fixes for CVE-2012-2688, CVE-2012-0831,
    CVE-2011-1398, CVE-2013-1643


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#951075)
  - fix double free when destroy_zend_class fails (#951076)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-14
changelog:
  - fix possible buffer overflow in pdo_odbc (#869694)
  - rename php-5.3.3-extrglob.patch and reorder
  - php script hangs when it exceeds max_execution_time
    when inside an ODBC call (#864954)
  - fix zend garbage collector (#892695)
  - fix transposed memset arguments in libzip (#953818)
  - fix possible segfault in pdo_mysql (#869693)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369)
  - fix stream support in fileinfo (#869697)
  - fix setDate when DateTime created from timestamp (#869691)
  - fix permission on source files (#869688)
  - add php(language) and missing provides (#837044)
  - fix copy doesn't report failure on partial copy (#951413)


author: Joe Orton <jorton@redhat.com> - 5.3.3-9
changelog:
  - add security fixes for CVE-2011-4153, CVE-2012-0057, CVE-2012-0789,
    CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Joe Orton <jorton@redhat.com> - 5.3.3-2
changelog:
  - add php-$subpkg = V-R provides (#717158)
  - add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 (#670464)
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1471,
    CVE-2011-1938, CVE-2011-2202 (#740734)
  - fix negative keys with var_export (#700724)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)
  - provide php-devel from -devel (#642701)


author: Joe Orton <jorton@redhat.com> - 5.3.2-2
changelog:
  - add LGPLv2{,+} to License; ship text in -bcmath, -mbstring
  - apply phar patch correctly
  - fix permissions on sources, README.namespaces
  - drop EXTENSIONS from %doc
  - fix Provides for php-cli
  - drop inappropriate/obsolete Obsoletes


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Benjamin Tissoires <btissoir@redhat.com> 1.2.2-1.0.6
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Soren Sandmann <ssp@redhat.com> 1.2.2-1.0.5.el5
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148898


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115866


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085008


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050188


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - adapted patch8 java-1.6.0-openjdk-pstack.patch 
  - Resolves: rhbz#1017616


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911523


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 with security updates.
  - Remove obsolete patches which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148890


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115873


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085001


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050193


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.45-2.4.3.0.el5
changelog:
  - fixed and updated tapset
  - removed bootstrap
  - source 11 redeclared to 1111
  - added source12: TestCryptoLevel.java
  - removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - fixed nss 
  - cleaned sources
  - Resolves: rhbz#1017625


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el5
changelog:
  - updated to icedtea 2.4.1
  - improoved handling of patch111 - nss-config-2.patch
  - backported uniquesuffix from 6.5
  - Resolves: rhbz#978421


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added latest Fedora spec changes and nss (disabled) support
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - Added and applied if enable_nss patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied if enable_nss patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied if enable_nss patch115: java-1.7.0-openjdk-nss-split_results.patch
  - Added and applied if enable_nss patch 116 - Patch116: rh905128-non_block_ciphers.patch
  - NSS disabled by default - enable_nss set to 0
  - Added and applied if enable_nss patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - Added and applied if enable_nss patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Added nss.cfg file
  - Resolves: rhbz#950378


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el5
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el5
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895032


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el5.1
changelog:
  - Changed permissions of sa-jdi.jar to correct 644
  - Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
  - Resolves: rhbz#803732


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el5
changelog:
  - Updated to IcedTea7-OpenJDK 2.3.3
  - Removed upstreamed java-1.7.0-openjdk-rhel5-gio.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Updated java-1.7.0-openjdk-remove-gstabs.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.3.el5
changelog:
  - Added patch499: java-1.7.0-openjdk-remove-gstabs.patch, fixing debuginfo package
  - Resolves: rhbz#803732


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el5
changelog:
  - ca-certificates replaced by in-package script
  - Re-added debuginfo package
  - Priority kept as 17xxx
  - Resolves: rhbz#803732


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-30
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Remi Collet <rcollet@redhat.com> - 5.3.3-25
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Peter Hatina <phatina@redhat.com> 1.0.15-7
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6425
              CVE-2014-6428
              CVE-2014-6429


author: Peter Hatina <phatina@redhat.com> 1.0.15-6
changelog:
  - security patches
  - Resolves: CVE-2012-6056
              CVE-2012-6060
              CVE-2012-6061
              CVE-2012-6062
              CVE-2013-3557
              CVE-2013-3559
              CVE-2013-4081
              CVE-2013-4083
              CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-5721
              CVE-2013-7112
              CVE-2014-2281
              CVE-2014-2299


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-3
changelog:
  - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
    CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
    CVE-2012-0067


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-2
changelog:
  - fixed tshark -s option (#580513)
  - fixed tshark exit code when dumpcap fails (#580510)
  - fixed editing of columns in Wireshark preferences (#493693)
  - added netdump protocol dissector (#484999)
  - fixed tshark / Wireshark automatic filter when started in ssh connection
    over IPv6 (#438473)


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1.4
changelog:
  - fix few security issues
  - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140
    CVE-2011-1141 CVE-2011-1143 #612240


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612239


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-7
changelog:
  - permissions of deliver and dovecot.conf from 1.0.7-5 reverted
  - password can be stored in different file readable only for root now
  - Resolves: #436287, CVE-2008-4870


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-5
changelog:
  - change permissions of deliver and dovecot.conf to prevent possible password exposure
  - Resolves: #436287


author: Dan Horak <dhorak@redhat.com> - 1.0.7-3
changelog:
  - fix package ownership for /etc/pki/dovecot/private (#448089)
  - update init script (#238016)
  - ask for SSL cert password during start-up (#436287)
  - fix for illegal characters in passwd (#439369)
  - Resolves: #448089, #238016, #436287, #439369


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-2
changelog:
  - LDAP+auth cache user login mixup (CVE-2007-6598, #427575)
  - insecure mail_extra_groups option (CVE-2008-1199, #436927)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-1
changelog:
  - update to latest upstream, fixes a few bugs (#331441, #245249), plus two
    security vulnerabilities (CVE-2007-2231, CVE-2007-4211)
  - increased default login_process_size to 64 (#253363)


author: Petr Rockai <prockai@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216510, CVE-2006-5973)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to /usr/share/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.107
changelog:
  - CVE-2014-8091 denial of service due to unchecked malloc in client
    authentication (#1168680)
  - CVE-2014-8092 integer overflow in X11 core protocol requests when
    calculating memory needs for requests (#1168684)
  - CVE-2014-8097 out of bounds access due to not validating length or offset
    values in DBE extension (#1168705)
  - CVE-2014-8095 out of bounds access due to not validating length or offset
    values in XInput extension (#1168694)
  - CVE-2014-8096 out of bounds access due to not validating length or offset
    values in XC-MISC extension(#1168700)
  - CVE-2014-8099 out of bounds access due to not validating length or offset
    values in XVideo extension (#1168710)
  - CVE-2014-8100 out of bounds access due to not validating length or offset
    values in Render extension (#1168711)
  - CVE-2014-8102 out of bounds access due to not validating length or offset
    values in XFixes extension (#1168714)
  - CVE-2014-8101 out of bounds access due to not validating length or offset
    values in RandR extension (#1168713)
  - CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
    when calculating memory needs for requests (#1168688)
  - CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
    length or offset values in GLX extension (#1168707)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.104
changelog:
  - xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
    fix from upstream RANDR code (#1006076)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.100
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
    being differently broken in different DDXes. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.97
changelog:
  - xserver-1.1.1-x86emu-1.13.patch: Sync x86emu bugfixes with upstream
    xserver. (#858014)
  - xserver-1.1.1-xkb-width-fix.patch: Fix a crash in XKB keymap resize
    across different RHELs. (#822438)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.95
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Fix memory leaks at regeneration in
    XKB, root cursor, and GLX. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.88
changelog:
  - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
  - xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.87
changelog:
  - xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
    across all modes of a certain dimension (#740497)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.86
changelog:
  - xserver-1.1.1-midc-double-free.patch: Don't double-free the picture for
    the root window when using the mi (software) cursor path. (#674741)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.84
changelog:
  - xserver-1.1.1-xinerama-crash.patch: Fix a crash in XineramaQueryScreens
    when client is swapped (#588346)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.78
changelog:
  - cve-2010-1166.patch: Fix broken modulo math in Render and arc code.
    Identical to xserver-1.1.1-mod-macro-parens.patch in 5.5.z. (#582651)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.77
changelog:
  - xserver-1.1.1-dbe-validate-gc.patch: Validate the GC against both front
    and back buffers (#596899)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.71
changelog:
  - fix randr upsizing not resizing pixmap (#515609)
  - fix bug in overlapping bugfix (#530309,#516204,#554571)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.70
changelog:
  - xserver-1.1.1-improve-mode-selection.patch: Improve mode selection when
    validation filters away all modes that exactly match aspect ratio (#507536)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-48.63
changelog:
  - Pull in fixes for x86emu from upstream as x86emu-update.patch.  This
    adds support for RDTSC, CPUID and fixes BSF and BSR and a 64 bit
    bug.  Drop xserver-1.1.1-int10-bsf.patch (#503182).


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.60
changelog:
  - xserver-1.1.1-randr-panning-fix.patch: Install a null PointerMoved hook
    so we don't pan the second head on randrful drivers. (#477177)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.58
changelog:
  - xserver-1.1.1-hw-xfree86-modes-16.patch: Update RANDR code to 1.6ish.
  - xserver-1.1.1-randr-abi.patch: Export the RANDR symbols that the drivers
    use, and compensate for i2c/ddc/ramdac still being loadables in 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.57
changelog:
  - xserver-1.1.1-ddc-update.patch: Update DDC code to xserver 1.6.
  - xserver-1.1.1-hw-xfree86-modes: Add RANDR setup code, equivalent to the
    old randr-source subpackage (Fedora's 1.5.3 ish)
  - drop the randr-* patches, merged into the above.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.56
changelog:
  - Drop the -randr-source subpackage
  - Delete with_developer_utils macro and some boring/misleading comments


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.54
changelog:
  - randr-xinerama.patch - add xinerama support to the randr source code
    tree (#481067)
  - drop the randr source updates for now as the patch fails
  - fix spec file so if patches to randr source fail, build fails


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.53
changelog:
  - xserver-1.1.1-autoreconf-pedantry.patch: Fix autoreconf with new autotools
  - xserver-1.1.1-saturate-trap-walks.patch: Saturate span walks in Render,
    so we don't wrap around. (#448586)
  - xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch,
    xorg-redhat-die-ugly-pattern-die-die-die.patch: Rediff for patch fuzz.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.45
changelog:
  - rebase the source code for drivers to build against and add compat patches
  - xserver-1.1.1-randr-fix.patch - set the -1 to 0 like upstream this fixes some randr1.2 compat output problems


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.44
changelog:
  - xserver-1.1.1-automouse-crash-fix.patch: Fix a rare crash when starting
    under anaconda. (#249567)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.42
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.30
changelog:
  - Sync with zstream 1.1.1-48.26.el5_1.4:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.29
changelog:
  - Add -randr-source subpackage for source compatibility with newer drivers.
  - xserver-1.1.1-mode-bandwidth.patch: Match enums with 1.5 server.
  - randr-source-compat.patch: Fix miscellaneous drift since 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.17
changelog:
  - xserver-1.1.1-silence-warnings.patch: Reduce several harmless warning
    messages to X_DEFAULT or X_INFO. (#227386)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.15
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Allocate pci_devp dynamically, to handle
    machines with more than 128 PCI devices. (#219390 and others)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.12.el5
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: During server
    shutdown, be sure to wait for the VT switch to finish before actually
    terminating.  Works around a race seen in rhgb. (#219184)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.11.el5
changelog:
  - define-xfree86-server.patch: Define XFree86Server even on arches where
    we don't compile the Xorg DDX (ie. s390). Resolves: 219253


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.10.el5
changelog:
  - xorg-x11-server-1.1.1-glcore-visual-matching.patch: When matching GLX to
    X visuals, scan both lists. (#218395)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.7.el5
changelog:
  - xorg-x11-server-1.1.1-xkb-vidmode-switch.patch: Fix string matching on XKB
    actions to be case-insensitive again. (#218336)
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Change behaviour
    to simply exit if we lose the VT switch race. (#218396)
  - Fix OS name from FC5 to RHEL5.


author: Soren Sandmann <sandmann@redhat.coM> 1.1.1-48.6.el5
changelog:
  - Disable composite when xinerama is enabled. 
  - Resolves: #213102
  - Make sure no-pseudocolor-composite.patch is applied
  - Related: #215576


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.5.el5
changelog:
  - xorg-x11-server-1.1.1-maxpixclock-option.patch: Allow the maximum pixel
    clock of a monitor to be specified in the config file. (#214869)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.4.el5
changelog:
  - xorg-x11-server-1.1.1-no-pseudocolor-composite.patch: Don't attempt to
    initialize Composite when the default visual is < 16bpp. (#215576)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.3.el5
changelog:
  - randr-disabled-fb.patch
    Add patch to prevent RandR from disabling (and then enabling) access to
    the framebuffer. Bug 214739.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.2.el5
changelog:
  - Build both x86emu and vm86 backends on x86.  Prefer x86emu when running
    in Xen dom0.  Add "Int10Backend" option to the ServerLayout section to
    allow runtime configuration.  (#213151)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.1.el5
changelog:
  - Deliver SecurityPolicy in the Xvfb subpackage on arches without hardware
    servers (s390{,x} atm).  (#213026)


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-48.el
changelog:
  - Add xorg-x11-server-1.1.1-ia64-int10.patch to not define -DPC_ on
    ia64. Bugs 210149 and 210153.
  - Add xorg-x11-server-1.1.1-ia64-pci-chipsets.patch to probe
    ia64 specific chipsets. Bug 210150


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-45.fc6
changelog:
  - xorg-x11-server-1.1.1-graphics-expose.patch: call
    miHandleExposures() in CopyArea/CopyPlane explicitly in cw to
    generate GraphicsExposes correctly. (#209336).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-44.fc6
changelog:
  - xorg-x11-server-1.1.1-offscreen-pixmaps.patch: Take the server lock
    before calling back into XAA to evict pixmaps (#204810).


author: Adam Jackson <ajackson@redhat.com> 1.1.1-43.fc6
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Since the
    VT_ACTIVATE/VT_WAITACTIVE pair are never guaranteed to successfully
    complete, set a 5 second timeout on the WAITACTIVE, and retry the pair
    until we win.  (#207746)
  - xorg-x11-server-1.1.0-pci-scan-fixes.patch: Partial revert to unbreak some
    (but not all) domainful machines, including Pegasos. (#207659)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-41.fc6
changelog:
  - xorg-x11-server-1.1.1-vbe-filter-less.patch: Be gentler about rejecting
    VESA modes early, since xf86ValidateModes should handle them just fine.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-40.fc6
changelog:
  - xorg-x11-server-1.1.1-pclose-confusion.patch: Be sure to call Pclose()
    on pipes created with Popen(), since the additional magic done by Popen()
    relative to popen() is not undone by plain pclose().  (Third base!)
  - xorg-x11-server-1.1.1-edid-hex-dump.patch: Backport EDID hex dump code
    from git.


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-39.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires version and add Conflict
    line for older mesa releases, so GLX_EXT_texture_from_pixmap opcodes
    match.


author: Adam Jackson <ajackson@redhat.coM> - 1.1.1-38.fc6
changelog:
  - xorg-x11-server-1.1.1-believe-monitor-rb-modes.patch: Always believe the
    monitor when it reports a reduced-blanking mode, even over VGA.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-35.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: Fix the check to look
    for mouse/void drivers in the running layout, as opposed to the config file,
    so as not to synthesize two mouse devices.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-34.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Be slightly more paranoid about
    setting line pitch, and rescan the mode list after pruning to re-validate
    the estimated virtual size.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-33.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to evict pixmap
    when GLX_EXT_texture_from_pixmap is first used.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-32.fc6
changelog:
  - Drop xorg-x11-server-1.1.0-gl-include-inferiors.patch now that
    compiz can uses the composite overlay window.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-31.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to log transitions.
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to always bind to
    GL_TEXTURE_RECTANGLE_ARB target.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-30.fc6
changelog:
  - xorg-x11-server-1.1.1-pci-paranoia.patch: In xf86MatchPciInstances, fail
    gracefully if xf86PciVideoInfo is NULL (like, on Xen).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-29.fc6
changelog:
  - Add xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch to fix VT
    switching (and suspend/resume) when using AIGLX. (#199692, fdo #7916).
  - Bump mesa source and libGL BuildRequires.
  - Update mesa-6.5.1 patch to work with 6.5.1 rc1 (slang_version_syn.h
    renamed to slang_pp_version_syn.h).


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-28.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Only flag modes as preferred
    if the EDID block says to.
  - xorg-x11-server-1.1.1-mode-sort-kung-fu.patch: Enforce a sort order on
    modes during lookup: builtin before driver before userdef before other,
    and preferred modes within a class before others in that class.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-27.fc6
changelog:
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Don't set an arbitrary
    pixclock limit if the monitor didn't claim to have one.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-25.fc6
changelog:
  - xorg-x11-server-1.1.1-xvfb-composite-crash.patch: Fix Xvfb's -render flag
    to also disable the Composite extension.
  - xorg-x11-server-1.1.1-mesa-6.5.1.patch: Update build system to account for
    Mesa 6.5.1 snapshots.
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Add all available
    standard timings from EDID rather than just the first five.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-22.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: When no modes or virtual size
    are given in the config file, attempt to pick a sensible one by examining
    the EDID modes and physical geometry.  Also generally make the server
    aware of driver-provided modes.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Redo, since the property I was
    checking for is both fairly common and fairly predictable.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-20.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: If we lack a mouse
    device in the config, and the user hasn't asked for any void devices,
    synthesize a mouse section.  (#200347)
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Better formatting.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-19.fc6
changelog:
  - xorg-x11-server-1.1.1-builderstring.patch: Enable the builder info
    string at configure time;
  - ... and use it to print the package name and version.
  - xorg-x11-server-1.1.1-defaultdepth-24.patch: Set default depth to 24.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Add EDID quirks list as
    an experiment; needs a better solution though.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-17.fc6
changelog:
  - Add xorg-x11-server-1.1.1-offscreen-pixmaps.patch to default
    XaaNoOffscreenPixmaps to false, for now.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-15.fc6
changelog:
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Allow HorizSync and
    VertRefresh to be overridden independently.


author: Kevin E Martin <kem@redhat.com> - 1.1.1-14.fc6
changelog:
  - xorg-x11-server-1.1.1-revert-xkb-change.patch: Revert change to xkb that
    broke XkbGetKeyboard().


author: Adam Jackson <ajackson@redhat.com> 1.1.1-13.fc6
changelog:
  - Comment out the 848x480 modes from the extramodes patch.  Any panel that
    wants it should be doing EDID injection by now, and it screws up
    autoconfig by _just_ fitting in the ranges for 800x600.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-12.fc6
changelog:
  - Added "1920x1080" CVT modes to Red-Hat-extramodes patch for (#195272)
  - Sorted the extramodes file by X res, then Y res for ease of maintenance.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-10.fc6
changelog:
  - xorg-x11-server-1.1.1-selinux-awareness.patch: Added for new Mesa
    selinux code.
  - xorg-x11-server-1.1.1-Xdmx-render-fix-fdo7482.patch: Backport a Render
    fix for Xdmx.
  - xorg-x11-server-1.1.1-no-composite-in-xnest.patch: Disable Composite in
    Xnest, as it's known not to work.
  - Fix default font path to match the config file we used to generate.
  - Fix default module set to match the config file we used to generate.
  - Disable use of TLS GLX dispatch to match Mesa selinux nonsense.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-7.fc6
changelog:
  - Only ship pcitweak manpage if we are building it (#199653)
  - Fix dist tag usage (Was {dist}, should be {?dist})
  - Added xorg-x11-server-libxf86config-dont-write-empty-sections.patch to
    prevent config file parser/writer from writing out empty sections (#198653)
  - Add dependency on xorg-x11-fonts-base to all X server subpackages (#186091)


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-5.fc5.aiglx
changelog:
  - Enable composite by default.
  - Split spiffiffity patch into one patch per change:
    xorg-x11-server-1.1.0-no-move-damage.patch and
    xorg-x11-server-1.1.0-dont-backfill-bg-none.patch.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-26
changelog:
  - Add xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch to hook up the
    GLX_MESA_copy_sub_buffer extension.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-25.fc6
changelog:
  - Start using the new %{dist} tag <http://fedoraproject.org/wiki/DistTag>
    experimentally in the package Release field to help prevent problems like
    (#197266) from occuring in the future.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-24
changelog:
  - Don't (uselessly) link the server against zlib.
  - Fix the 1680x1050 modes to be the CVT timings instead of GTF.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-23
changelog:
  - Fix an open-coded check for reduced-blanking modes to only apply to analog
    connectors.
  - Reorder the EDID patches slightly.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-22
changelog:
  - Added xorg-xserver-1.1.0-setuid.diff to fix potential security issue (#196094)
  - Disable DRI on ppc64 builds.
  - Conditionalize inclusion of DRI related X server modules to with_dri builds.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-21
changelog:
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to use glTexSubImage2D
    to only update the part of the texture that changed, based on damage
    regions.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-20
changelog:
  - Remove with_xnest_server conditional, and fix more BuildRequires to pull
    in libX11-devel, libXext-devel, zlib-devel, etc. for Xnest and Xephyr.
  - Remove unwanted files leftover in buildroot for s390/s390x builds.
  - Add Xserver.1x manpage to multiple subpackages, as it applies equally to
    Xorg, Xnest, Xvfb, Xephyr.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-19
changelog:
  - Add with_xnest_server conditional and disable on s390, since Xnest
    fails to build on there (Xlib doesn't get added to the link line).
  - Add -f to removal of xorgconfig and others which may or may not be built.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-18
changelog:
  - Add xorg-x11-server-1.1.0-convolution-filter-fix.patch and
    xorg-x11-server-1.1.0-tfp-damage.patch backported to make compiz go
    faster and make compiz shadows work.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-17
changelog:
  - Disable filling in monitor gamma info from EDID momentarily, since drivers
    will use that field to set the card's gamma ramp.
  - Backport some stuff from git: cw crash fix, faster pci scanning, some
    log message cleanup.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-16
changelog:
  - Enable spec support for s390, s390x, alpha, sparc, and sparc64 architectures.
  - Add with_hw_servers conditional to disable hardware servers on s390/s390x.
  - Add with_dmx_server to disable DMX on s390/s390x.
  - Added "release" number to "BuildRequires: freetype-devel >= 2.1.9-1" for
    dependency futureproofing.
  - Force "--disable-dri" on s390/s390x, to attempt to work around ./configure
    failure to find libdrm, which should not be needed on s390 builds anyway.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-15
changelog:
  - Add loader infrastructure for publishing PCI ID lists in the drivers, and
    autodetecting drivers based on that.  Currently unused since no drivers
    publish such a list yet.
  - Fix mouse autoconfig to use /dev/input/mice instead of /dev/mouse.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-14
changelog:
  - Change selection atom to _COMPIZ_GL_INCLUDE_INFERIORS in
    xorg-x11-server-1.1.0-gl-include-inferiors.patch.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-7
changelog:
  - Change "BuildRequires: freetype-devel >= 2.1.10" to 2.1.9, as Xorg 7.0
    contains 2.1.9 in "extras" and 7.1 does not appear to have a requirement on
    a newer freetype.
  - Janitorial cleanups for spec file changelog consistency.
  - Call aclocal before automake, otherwise automake >= 1.9.6 is required in
    order to rebuild the package.
  - Build 1.1.0-4, 1.1.0-5, and 1.1.0-6 appear to have failed in brew but nobody
    fixed them.  It appears automake 1.9 breaks the build.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-4
changelog:
  - Hack the kdrive makefile to only attempt to build Xephyr, avoids linking
    sixteen extra servers just to delete them.
  - Move cvt to the default install set, same as gtf.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-3
changelog:
  - Drop the libxf86config -fPIC patch, just build the whole thing with
    --with-pic instead.  Add void and evdev to the required driver list for
    upcoming autoconfig magic.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Add "Requires: xorg-x11-proto-devel >= 7.1-1" to sdk for numerous (52) bug
    reports of drivers failing to build with mock.


author: Mike A. Harris <mharris@redhat.com> 1.0.99.903-2
changelog:
  - Disable dependency on xorg-x11-drivers package, for OLPC.  (#191781)
  - Add "BuildRequires: freetype-devel >= 2.1.10" for bug (#192021)


author: Adam Jackson <ajackson@redhat.com> 1.0.99.902-1
changelog:
  - Update to 7.1RC2 plus fix for CVE 2006-1526.  Disable the fastpathing
    patch for fdo bug #4320 since that should be covered in the generic
    Render code now.


author: Kristian Høgsberg <krh@redhat.com> 1.0.99.2-1
changelog:
  - Update to 1.0.99.2 snapshot and go back to using mesa-source package.
  - Drop xorg-server-1.0.99-composite-visibility.patch.
  - Drop xorg-server-1.0.1-backtrace.patch.
  - Drop xorg-server-0.99.3-rgb.txt-dix-config-fix.patch.
  - Add xorg-server-1.0.99.2-spiffiffity.patch.


author: Soren Sandmann <sandmann@redhat.com> 1.0.99.1-2
changelog:
  - Add xorg-server-1.0.99-composite-visibility.patch to get rid of flashing
    titlebars in compositing metacity.


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Added xorg-server-1.0.1-backtrace.patch which enables the Xorg server's
    built in backtrace support by default, as it was inadvertently disabled in
    7.0.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-6
changelog:
  - Added xorg-x11-server-1.0.1-Red-Hat-extramodes.patch which is a merger of
    XFree86-4.2.99.2-redhat-custom-modelines.patch and
    xorg-x11-6.8.2-laptop-modes.patch from FC4 for (#180301)
  - Install a copy of the vesamodes and extramodes files which contain the list
    of video modes that are built into the X server, so that the "rhpxl" package
    does not have to carry around an out of sync copy for itself. (#180301)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xorg-x11-server-1.0.1-composite-fastpath-fdo4320.patch with changes
    suggested by ajax to fix (fdo#4320).
  - Cosmetic cleanups to satiate the banshees.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added xorg-x11-server-1.0.1-fbpict-fix-rounding.patch from CVS HEAD.
  - Added xorg-x11-server-1.0.1-SEGV-on-null-interface.patch which prevents a
    SEGV on null interfaces (#174279,178986)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-2
changelog:
  - Added xserver-1.0.0-parser-add-missing-headers-to-sdk.patch to provide the
    necessary libxf86config.a headers to be able to use the library. (#173084)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xserver 1.0.0 from X11R7 RC4
  - Removed the following patches, which are now integrated upstream:
    - xorg-server-0.99.3-rgb.txt-dix-config-fix.patch,
    - xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch
  - Changed manNx directories to manN to match upstream defaults.
  - Added libxf86config.a to sdk subpackage.
  - Updated build dependency of "mesa-libGL-devel >= 6.4.1-1"
  - Added "BuildRequires: xorg-x11-font-utils >= 1.0.0-1" to be able to query
    the fontdir from fontutil.pc which is implemented currently by a custom
    patch.
  - Enable xtrap, xcsecurity, xevie, and lbx on all builds, not just DRI builds.
  - Fix sdk installation path, so that drivers can find the files again.
  - Update file manifest, to deal with X server modules that have moved to
    a subdir, etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-9
changelog:
  - Added "Requires: xorg-x11-drivers >= 0.99.2-4" as a dependency of the Xorg
    subpackage, to ensure that anaconda installs all of the drivers during OS
    installs and upgrades, as requested by Jeremy Katz.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-8
changelog:
  - Added xorg-server-0.99.3-rgb.txt-dix-config-fix.patch which fixes the
    --with-rgb-path option to actually *work*.
  - Updated libdrm dep to 1.0.5


author: Mike A. Harris <mharris@redhat.com> 0.99.2-7
changelog:
  - Update xorg-x11-server-utils dep to 0.99.2-5 to ensure rgb.txt is installed
    in correct location - _datadir/X11/rgb
  - Added --with-rgb-path configure option to specify _datadir/X11/rgb so the
    X server finds the rgb.txt database properly, for bugs (#173453, 173435,
    173428, 173483, 173734, 173737, 173594)
  - Added xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch to prevent SSE/MMX
    code from being activated on non-capable VIA CPU. (#173384,fdo#5093)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-6
changelog:
  - Add the missing rpm pre script from monolithic xorg-x11 packaging,
    clean it up a bit, reorder it for slight performance gain.
  - Add some perl magic to pre script to remove RgbPath from xorg.conf,
    in order to fix bug (#173036, 173435, 173453, 173428)
  - Add more perl magic to pre script to update ModulePath to the new
    location if it is specified in xorg.conf.
  - Added xorg-x11-server-0.99.3-init-origins-fix.patch ported from monolithic
    xorg-x11 package to fix Xinerama bug.
  - Added xorg-redhat-die-ugly-pattern-die-die-die.patch to kill the ugly grey
    stipple once again for bug (#173423).
  - Added "BuildRequires: libdrm-devel" for DRI enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added temporary "BuildRequires: libXfont-devel >= 0.99.2-3" and
    "Requires: libXfont-devel >= 0.99.2-3" to ensure early-testers of
    pre-rawhide modular X have installed the work around for (#172997).
  - Added implementation specific "Requires: xkbdata" to Xorg subpackage, as
    we want to ensure the xkb data files are present, but allow us the option
    of easily switching implementations to "xkeyboard-config" at a future
    date, if we decide to go that route.
  - Re-enable _smp_mflags during build.
  - Added "Requires: xorg-x11-drv-vesa" to Xorg subpackage (#173060)


author: Jeremy Katz <katzj@redhat.com> 0.99.3-2
changelog:
  - add some deps to the Xorg subpackage for base fonts, keyboard and mouse 
    drivers, and rgb.txt that the server really wont work without


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Update to xorg-server-0.99.3 from X11R7 RC2.
  - Add xorg-server.m4 to sdk subpackage, and "X" symlink to Xorg subpackage.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added versioning to Xorg virtual Provide, to allow config tools and driver
    packages to have version based requires.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Update to xorg-server-0.99.2 from X11R7 RC1.
  - Add "BuildRequires: xorg-x11-util-macros >= 0.99.1".
  - Add "BuildRequires: mesa-source >= 6.4-4" for DRI builds.
  - Added dmx related utilities to Xdmx subpackage.
  - Individually list each X server module in file manifest.
  - Hack man1 manpages to be installed into man1x.
  - Add the following ./configure options --disable-dependency-tracking,
    --enable-composite, --enable-xtrap, --enable-xcsecurity, --enable-xevie,
    --enable-lbx, --enable-dri, --with-mesa-source, --with-module-dir,
    --with-os-name, --with-os-vendor, --with-xkb-output, --disable-xorgcfg
  - Added getconfig, scanpci et al to Xorg subpackage
  - Added inb, inl, inw, ioport, outboutl, outw, pcitweak utils to Xorg package
    conditionally, defaulting to "off".  These utilities are potentially
    dangerous and can physically damage hardware and/or destroy data, so are
    not shipped by default.
  - Added "BuildRequires: libdmx-devel" for dmx utilities
  - Added "BuildRequires: libXres-devel" for Xres examples
  - Added {_libdir}/xserver/SecurityPolicy to Xorg subpackage for XSECURITY


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.2
changelog:
  - Fix license tag to be "MIT/X11"
  - Change Xdmx subpackage to Obsolete xorg-x11-Xdmx instead of xorg-x11-Xnest


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.1
changelog:
  - Update BuildRequires for new library package naming (libX...)
  - Use Fedora Extras style BuildRoot tag
  - Invoke make with _smp_mflags to take advantage of SMP systems


author: Kristian Hogsberg <krh@redhat.com> 0.99.1-2.cvs20050830
changelog:
  - Go back to %spec -n, use new cvs snapshot that supports overriding
    moduledir during make install, use %makeinstall.
  - Drop %{moduledir}/multimedia globs.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050825.0
changelog:
  - Added build dependency on xorg-x11-libfontenc-devel, as the build fails
    half way through without it, even though upstream dependencies do not
    specify it as required.


author: Florian Festi <ffesti@redhat.com> - 4.8.0-35
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163057)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-34
changelog:
  - Fix segfault on rpmdb addition when header unload fails (#706935)
  - Fix segfault on invalid OpenPGP packet (#743203)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-33
changelog:
  - Account for excludes and hardlinks wrt payload max size (#716853)
  - Fix payload size tag generation on big-endian systems (#648516)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-30
changelog:
  - Document -D and -E options in man page (#814602)
  - Require matching arch for freshen on colored transactions (#813282)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-29
changelog:
  - Add DWARF 3 and 4 support to debugedit (#808547)
  - No longer add \n to group tag in Python bindings (#783451)
  - Fix typos in Japanese rpm man page (#760552)
  - Bump Geode compatibility up to i686 (#620570)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-28
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-26
changelog:
  - Add support for XZ-compressed sources and patches to rpmbuild (#620674)
  - Avoid unnecessary assert-death when closing NULL fd (#573043)
  - Add scriptlet error notification callbacks (#533831)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-25
changelog:
  - Honor --noscripts for pre- and posttrans scriptlets too (#740345)
  - Avoid bogus error on printing empty ds from python (#628883)
  - File conflicts correctness & consistency fixes (#740291)
  - Create the directory used for transaction lock if necessary (#510469)
  - Only enforce default umask during transaction (#673821)


author: Jindrich Novy <jnovy@redhat.com> - 4.4.2.3-19
changelog:
  - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade (#626708)
  - fix SELinux memory leak (#566746), patch from Florian Festi


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-12
changelog:
  - fix pgp fingerprint calculation (#493777)
  - performance tweaks (#435475)
    - better hash algorithm to speed up initial install
    - avoid crazy memory fragmentation on file fingerprinting
    - eliminate unnecessary allocations from rpmdsCompare() hotpath


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-10
changelog:
  - Filter out timestamp differences of shared files on verify (#472151)
  - Perform verification in real chroot if --root specified (#434150)
  - Check for arch compatibility on colored transactions too (#472065)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-7
changelog:
  - Fix exit code on file not found errors (#463944, #446202)
  - Always honor epoch (no)promote behavior in dependency sets (#466503)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-5
changelog:
  - Disallow creation of packages larger than we can cleanly handle (#448488)
  - Fix retrieval of multiple packages through proxy (#450205)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-4
changelog:
  - Temporarily permit conflicts in /usr/share/doc/ (#460808)
  - Fix --dump usage description in Japanese manual too (#250207)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-2
changelog:
  - Close all file descriptors before running scriptlets (#453645)
  - Tighten up dependencies between sub-packages


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-1
changelog:
  - Rebase to RPM 4.4.2.3 from F9 (#454887)
  - Much cleaned up spec
  - NSS used instead of beecrypt for lowlevel crypto (#444805)
  - Provides no longer treated as implicit obsoletes (#233713, #348971)
  - Use root:root for file ownerships everywhere (#439417)
  - Improved .rpmsave/.rpmnew behavior (#426258)
  - Exit code corrections (#244236, #440595)
  - Improved multilib build support (#257921)
  - Improved debuginfo extraction (#251333)
  - Dozens of other issues resolved


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-22
changelog:
  - put in simple workaround for per-file deps with autoreq off (#190488) 
    while pnasrat works on a real fix


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-21
changelog:
  - run ldconfig in -libs subpackage %post, not main package
  - add patch to generate shared lib deps by following symlinks so that 
    -devel packages sanely depend on main libs


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-17
changelog:
  - remove redundant elfutils-libelf buildrequires
  - rpm-python doesn't require elfutils (related to #188495)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-16
changelog:
  - Skipdirs on erase again (#187308)
  - Make fcntl lock sensitive to --root (#151255)
  - Fix netshared path comparison (#52725)
  - Fix rpm vercmp (#178798)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-8
changelog:
  - Add elfutils Build Requires to rpmbuild (#155129)
  - Don't do conflicts if both files %ghost(#155256)
  - Fix popt charset for various languages (#172155)
  - Don't include .la file (#174261)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.1-19
changelog:
  - Check for symlinks in check-files (#108778)
  - Move zh_CN (#154623)
  - Test fix for signing old rpms (#127113)


author: Miloslav Trmac <mitr@redhat.com> - 4.4.1-12
changelog:
  - Remove $RPM_BUILD_ROOT and $RPM_BUILD_DIR from distribued .la files (#116891)
  - Don't ship static version of _rpmdb.so
  - BuildRequires: readline-devel


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.24
changelog:
  - zlib: uniqify certain symbols to prevent name space pollution.
  - macosx: include <sys/types.h> so that python sees the u_char typedef.
  - macosx: change to --prefix=/usr rather than /opt/local.
  - use waitpid rather than SIGCHLD reaper.
  - rip out DB_PRIVATE revert if not NPTL, it's not the right thing to do.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.16
changelog:
  - fix: length of gpg V4 hash seed was incorrect (#146896).
  - add support for V4 rfc-2440 signatures.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.14
changelog:
  - add sqlite internal (build still expects external sqlite3-3.0.8).
  - sqlite: revert to original narrow scoping of cOpen/cClose.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.10
changelog:
  - more macosx fiddles.
  - move global /var/lock/rpm/transaction to dbpath.
  - permit fcntl path to be configured through rpmlock_path macro.
  - add missing #if defined(ENABLE_NLS) (#146184).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.8
changelog:
  - changes to build on Mac OS X using darwinports neon/beecrypt.
  - add https://svn.uhulinux.hu/packages/dev/zlib/patches/02-rsync.patch


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.6
changelog:
  - mac os x patches (#131943,#131944,#132924,#132926).
  - mac os x patches (#133611, #133612, #134637).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.5
changelog:
  - upgrade to db-4.3.27.
  - revert MAGIC_COMPRESS, real fix is in libmagic (#143782).
  - upgrade to file-4.12 internal.


author: Adam Tkac <atkac redhat com> 30:9.3.6-20.P1
changelog:
  - zone->curmaster before return in dns_zone_setmasterswithkeys()
  - named could fail to send a uncompressable zone


author: Adam Tkac <atkac redhat com> 30:9.3.6-18.P1
changelog:
  - document `dig` return codes
  - bind-chroot-admin: don't create symlinks with double "//" in the paths
  - nslookup failed to resolve name in certain cases


author: Adam Tkac <atkac redhat com> 30:9.3.6-17.P1
changelog:
  - adjust max-open-files limit correctly (#663112)
  - fix rare race condition in request.c
  - decrease severity of the "the working directory is not writable" msg
    from error to debug(1)
  - liblwres could fail to parse empty options in resolv.conf
  - nsupdate: return nonzero exit code when target zone doesn't exist


author: Adam Tkac <atkac redhat com> 30:9.3.6-11.P1
changelog:
  - /etc/sysconfig/named can be modified, don't verify it's md5/size/mtime (#556770)
  - resolver could have destroyed fetch too early (#555848)
  - replace bind-9.3.1-next_server_on_referral.patch by bind93-rh625240.patch (#625240)


author: Adam Tkac <atkac redhat com> 30:9.3.6-10.P1
changelog:
  - add possibility not to call named-checkzone for every zone during startup (#500896)
  - bind-chroot-admin: don't touch chroot environment when modified by user (#517279)


author: Adam Tkac <atkac redhat com> 30:9.3.6-9.P1
changelog:
  - don't crash due use-after-free in D-Bus related code (#523052)
  - if connection to PG database failed, retry it during every lookup (#533229)
  - initscript: terminate only the correct named process (#500535)


author: Adam Tkac <atkac redhat com> 30:9.3.6-8.P1
changelog:
  - handle broken DNSSEC chains better (#572848)
  - host: handle "debug", "attempts" and "timeout" options in resolv.conf (#570851)
  - host/dig: query servers specified on commandline instead of in resolv.conf (#561299)


author: Adam Tkac <atkac redhat com> 30:9.3.6-7.P1
changelog:
  - add manpages for binaries in -sdb subpkg (#556798)
  - drop useless bind-9.3.1beta2-openssl-suffix.patch (#546477)
  - fix "service named configtest" return value (#530214)


author: Adam Tkac <atkac redhat com> 30:9.3.6-6.P1
changelog:
  - NSEC validation code could cause wrong NXDOMAIN responses (#554851,
    CVE-2010-0097)
  - improve fix for CVE-2009-4022 (#538744)
    - {C,D}NAMEs could be returned to clients without proper DNSSEC validation
    - don't validate + cache out-of-bailiwick data returned with a secure answer.
      Refetch it instead.


author: Adam Tkac <atkac redhat com> 30:9.3.6-1.P1
changelog:
  - backport allow-query-cache option to control access for all non-authoritative
    data (#483708)
  - add support for dynamically loadable database backends (#479273)
  - named-checkconf now checks ACLs validity (#496495)
  - update sample configuration file to address "DNS reflector" attacks (#485393)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.3.P1
changelog:
  - handle named_write_master_zones SELinux boolean and /var/named perms
    relationship as documented (#494370)
  - handle unknown DLV algorithms well (#491655)
  - remove useless glibc-kernheaders BuildReq
  - print nicer error message when configuration file is directory (#490837)
  - named-checkconf handles "check-names" directive well (#491400)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.2.P1
changelog:
  - select correct nameservers when dig/host is called with -4 param (#469441)
  - add support for "master-only" notify type (#477651)
  - own chroot/var/log directory (#481803)
  - don't call bind-chroot-admin automatically during installation/update/remove
    of bind-chroot package. It broke too many configurations (#480156)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.1.P1
changelog:
  - rebased to 9.3.6-P1 (#457036), updated patches
  - patches merged
    - bind-bsdcompat.patch
    - bind-9.2.2-nsl.patch
    - bind-9.3-CVE-2008-1447.patch
    - bind93-rh458932.patch
    - bind-9.3-dbus-race.patch
    - bind-9.3-l_server.patch
    - bind-9.3-CVE-2008-0122.patch
    - bind93-dsa_verify.patch
    - bind-9.3.1-dbus_archdep_libdir.patch
    - bind-9.3.2-prctl_set_dumpable.patch
    - libbind-9.3.1rc1-fix_h_errno.patch


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.9.P1
changelog:
  - don't crash when certain subdomain is used as rndc reload argument (#457533)
  - return nonzero value from initscript when named fails to reload (#457984)
  - accept krb5-self and krb5-subdomain update-policy matches (#457932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.2.P1
changelog:
  - bind-sdb scripplet sets /etc/openldap/slapd.conf ownership correcly (#437789)
  - revised permissions of executables and scripts (#441495)
  - set open files limit to unlimited by default as described in documentation
    (#458932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Adam Tkac <atkac redhat com> 30:9.3.4-0.9.P1
changelog:
  - fixed building of SDB stuff (#240788)
  - fixed race condition during DBUS initialization (#240876)
  - initscript LSD standardization (#242734)
  - improved rndc freeze/thaw <zonename> command (#247148)
  - fixed wrong perms of named's ldap schema (#250118)
  - supressed errors from chroot's specfile scripts (#252334)
  - fixed ${chroot}/dev/random SELinux labelling
  - added configtest to usage report from named initscript (#250744)
  - fixed rndc stop return value handler (#250901)
  - fixed named.log sync in bind-chroot-admin (#247486)
  - rebased to latest 9.3 maintenance release (9.3.4-P1, #353741)
  - updated named.root file (new L.ROOT-SERVERS.NET, #363531)
  - added GSS-TSIG support to named (#251528)
    - dropped patches (upstream)
      - bind-9.3.4.P1-query-id.patch
      - bind-9.3.3rc2-dbus-0.6.patch
      - bind-9.3.4-validator.patch
      - bind-9.3.4-nqueries.patch
    - updated patches
      - bind-9.3.2-tmpfile.patch


author: Adam Tkac <atkac redhat com> - 30:9.3.3-9
changelog:
  - added fix for #224445 - CVE-2007-0493 BIND might crash after 
    attempting to read free()-ed memory (stransky@redhat.com)
  - added fix for #225229 - CVE-2007-0494 BIND dnssec denial of service
    (stransky@redhat.com)
  - initscript now unmounts /proc filesystem correctly
    (#212549, stransky@redhat.com)
  - dnssec-signzone now accepts -d option correctly (#230667)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - added fix for #213630: EDNS is globally enabled,
    crashing CheckPoint FW-1
  - Resolves: rhbz##213630


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use gcc for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
  		  host and nslookup now by default try next server on SERVFAIL
  		  (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-32
changelog:
  - New SSLOptions directive to enable SSL3 and/or RC4, which are now
    disabled by default (bug #1161218).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-31
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-29
changelog:
  - The imageto* filters could crash with bad GIF files
    (CVE-2011-2896, STR #3867, STR #3914, bug #752118).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-28
changelog:
  - Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
  - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #660518)


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-25
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-24
changelog:
  - Try to avoid overwriting text with page labels (STR #3415,
    bug #527187).
  - Reverted patch for bug #572338 as that and related bugs need a
    solution that can guarantee no regressions.


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to avoid endless loop in
    socket backend process (bug #605584, STR #3001).
  - Applied patch to avoid infinite loop in
    mailto notifier (bug #608392, STR #3609).
  - Fixed typo in undo-str2537 patch (bug #608016).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-22
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-21
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180294


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Also includes PR2180, so patch dropped from RPM.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180289


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-402.el5]
changelog:
  - [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
  - [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
  - [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
  - [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
  - [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-5
changelog:
  - resolves: #1112151 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1112151 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-3
changelog:
  - resolves: #1100658 - Allocate the server_info on the correct context.
  - resolves: #1101922 - Add config variables to set spoolss os version.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-2
changelog:
  - related: #976637 - More cleanup for 'force user' with 'security = ads'.
  - resolves: #1069571 - Fix memory leak reading printer list.
  - resolves: #1067608 - Fix wbinfo -i with one-way trusts.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-0.1
changelog:
  - resolves: #1035006 - Rebase Samba to 3.6.22.
  - resolves: #1034161 - Do not build Samba with fam support:
  - resolves: #1033773 - Fix AD group lookups with non-utf8 locale settings.
  - resolves: #1026796 - Fix connect to samba share from Mac Finder.
  - resolves: #996656 - Fix printing failing in function cups_job_submit.
  - resolves: #991528 - Fix Windows 8 Roaming profiles.
  - resolves: #989894 - Fix net ads join segmentation fault.
  - resolves: #981369 - Fix winbind which does not update information in cache
                        about a group from a trusted domain even after the
                        information has expired.
  - resolves: #1040475 - Fix group expansion in service path.
  - resolves: #1050889 - Fix 100% CPU utilization in winbindd when trying to
                         free memory in winbindd_reinit_after_fork.
  - resolves: #1063694 - Fix %G substitution in 'template homedir'.
  - resolves: #1037273 - Add timeout option to smbclient.
  - resolves: #976637 - Fix 'force user' with 'security = ads'.


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.136
changelog:
  - resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.135
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #982484


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.134
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #869295


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.130
changelog:
  - Fix netlogon failover for LogonSamLogon.
  - resolves: #862872
  - Fix write operations as guest with security = share
  - resolves: #905071
  - Disable building cifs idmap and acl binaries.
  - resolves: #873692
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948614
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #948923
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949611
  - Fix the username map optimization.
  - resolves: #917564
  - Fix leaking sockets of smb dc connection.
  - resolves: #883861
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955680
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #947999


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.128
changelog:
  - Fix loading the imap hash module.
  - resolves: #863192
  - Fix raw printing support.
  - related: #855312


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.125
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845761
  - Fix printing regression with builtin forms.
  - resolves: #860965


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.123
changelog:
  - Fix rap printing access to spoolss (smbclient print queue access).
  - resolves: #855312
  - Fix mount.cifs return codes.
  - resolves: #856168


author: Simo Sorce <ssorce@redhat.com> 3.5.4-0.84
changelog:
  - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678,
    CVE-2011-2724
  - resolves: #722556


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.74
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #679066


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.63
changelog:
  - Make sure samba3x provides samba and also versions the conflicts
  - resolves: #582756
  - resolves: #609578


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.43
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526663


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.42
changelog:
  - Add appropriate licensing information to samba3-common, libsmbclient, libtalloc,
    libtdb and tdb-tools
  - resolves: #520652


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.40
changelog:
  - Fix password expiry calculation in pam_winbind
  - Remove popt dependency from mount/umount.cifs
  - Fix libsmbclient packaging
  - resolves: #506932


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.4-0.34
changelog:
  - Add new package samba3x
  - Fix various Requires and Provides tags in order to meet conflict and update
    requirements
  - resolves: #454460


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-14
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-10
changelog:
  - fix bug when unselect command on proxy mode caused segmentation fault (#679253)
  - fix lmtp ignorequota on ia64 (#584088)
  - replace instances of #!/usr/bin/env python with #!/usr/bin/python (#521338)
  - don't require lm_sensors-devel, net-snmp-devel is enough (#437999)
  - fix file descriptor leak when moving mailbox folder with quota set (#253854)
  - document that client ignores mupdate_port option (#504813)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-5
changelog:
  - don't modify imapd.conf if not necessary, 
    fix different time for source files across archs (#497317)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-4
changelog:
  - fix mupdate connection (#326511)
  - fix tls and authentication for LMTP (#250189)
  - extend ctl_cyrusdb man page (#463230)


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - testing build for RHEL5
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - hardcoded a bunch of build parameters for RHEL-5
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib for symlinks
  - remove /usr/lib pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: Dave Anderson <anderson@redhat.com> - 5.1.8-2.el5
changelog:
  - Fix to handle xen dom0 dumpfiles created with "makedumpfile -d1" on very
    large systems, where the ELF vmcore may be mistakenly determined to be
    an old-style netdump vmcore.  
    Resolves: rhbz#876046


author: Dave Anderson <anderson@redhat.com> - 5.1.8-1.el5
changelog:
  - Rebase to upstream version 5.1.8.
    Resolves: rhbz#715072

  - Fix for the x86_64 "bt" command if the shutdown NMI is issued to a
    32-bit task that has executed a "sysenter" instruction and the RSP
    still contains the zero value loaded from the MSR_IA32_SYSENTER_ESP
    register.  The backtrace issued a warning message indicating 
    "WARNING: possibly bogus exception frame", and was unable to make a 
    transition from the NMI exception stack back to the process stack. 
    Resolves: rhbz#676408

  - Fix for the x86 "bt" command for several backtraces of non-crashing
    active tasks that fail with "bt: cannot resolve stack trace" errors
    due to the failure to properly transition from the shutdown NMI stack 
    back to the process stack.
    Resolves: rhbz#713050

  - Fix to more correctly determine the KVM I/O hole size and location.
    The I/O hole size to this point in time is either 1GB or 512MB, but
    its setting is hardwired into the Qemu code that was used to create 
    the dumpfile.  The dumpfile is a "savevm" file that is designed to be
    used for guest migration, and since inter-version save/load is not 
    supported, the I/O hole information does not have to be encoded into the
    dumpfile.  Without the patch, the I/O hole for dumpfiles created by 
    older Qemu version was not being set to 1GB, so if the KVM guest was 
    configured with more than 3GB of memory, the crash session would 
    typically display numerous "read error" messages during session 
    initialization.
    Resolves: rhbz#715070

  - Fix for KVM dumpfiles from guests that were provisioned with more
    than 3.5GB of RAM.  KVM virtual systems contain an I/O hole in the
    physical memory region from 0xe0000000 to 0x100000000 (3.5GB to 4GB).
    If a guest is provisioned with more than 3.5GB of RAM, then the
    memory above 3.5GB is "pushed up" to start at 0x100000000 (4GB).
    But the "ram" device headers in the KVM dumpfiles do not reflect
    that, and so without the patch, numerous error messages would be
    displayed during invocation, and in all probability, the session
    would fail.
    Resolves: rhbz#716327


author: Dave Anderson <anderson@redhat.com> - 4.1.2-8.el5
changelog:
  - Fix for potential segmentation violation in glibc malloc/free when 
    running "kmem -s" on a large, active, live system.
    Resolves: rhbz#659593


author: Dave Anderson <anderson@redhat.com> - 4.1.2-7.el5
changelog:
  - Fix for the x86 "bt" command for potential backtrace error of a
    NMI-interrupted idle task.
    Resolves: rhbz#653288
  - Fix for the x86 "bt" command to fix Xen hypervisor backtrace errors 
    generated when a NMI-interrupted VCPU is running within the hypercall
    entry point, and when a NMI-interrupted VCPU is running within an
    interrupt handler entry point.
    Resolves: rhbz#653823


author: Dave Anderson <anderson@redhat.com> - 4.1.2-6.el5
changelog:
  - Support for "__rhel5" marker device in KVM dumpfile header.
    Resolves: rhbz#603027
  - Fix for the x86 "bt" command to generically recognize the end of trace
    condition for user-space tasks without having to hardwire any more 
    kernel entry point function names.
    Resolves: rhbz#608714
  - Fix for the x86_64 "bt" command if the kdump-generated NMI interrupts
    a multi-threaded task that has just entered kernel space but has not
    changed the RSP stack pointer register from its user-space per-thread
    stack location to the kernel stack.
    Resolves: rhbz#608171


author: Dave Anderson <anderson@redhat.com> - 4.1.2-5.el5
changelog:
  - Fix for backtrace of x86 NMI-interrupted task with a user exception frame
    from a syscall exception that had not called the requested system call 
    function.
    Fix for backtrace when a newly-forked x86 task's resumption EIP address 
    value is set to the "ret_from_fork" entry point by copy_thread().
    Resolves: rhbz#572605
  - Fix for segmentation violation with the "mach -m" command option on x86 
    or x86_64 systems whose BIOS-provided e820 map contains EFI-related memory
    type value that has not been mapped to an E820 type.
    Resolves: rhbz#569164
  - Fix for the "kmem -s list" command option to prevent it from attempting
    to gather a slab cache name string from the "cache_chain" list_head.
    Resolves: rhbz#580589
  - Change the ppc64 cpu count displayed by the initial system banner
    and by the "sys" and "mach" commands to be the number of cpus online.
    Resolves: rhbz#580599
  - Fix for backtrace of an x86_64 NMI-interrupted task which had not 
    swapped its RSP from the user-space stack to the kernel stack.
    Resolves: rhbz#593066


author: Dave Anderson <anderson@redhat.com> - 4.1.2-4.el5
changelog:
  - Fix for very large xendump core files whose ELF sections are located
    beyond a file offset of 4GB.
  - Resolves: rhbz#561767


author: Dave Anderson <anderson@redhat.com> - 4.1.2-3.el5
changelog:
  - Fix for the "bt" command on an ia64 "INIT" process that interrupted
    a task that was running in user space, but was unable to modify the
    original (interrupted) task's stack.  Without the patch, the "INIT"
    task's backtrace would not display the task that was interrupted,
    and would display the error message "bt: unwind: failed to locate
    return link (ip=<user-virtual-address>)!".  With the patch, the
    interrupted task information is displayed in the same manner as if
    the original stack had been modified.
  - Resolves: rhbz#553353


author: Dave Anderson <anderson@redhat.com> - 4.1.2-2.el5
changelog:
  - Fix for a 4.0-8.11 regression that introduced a bug in determining
    the number of cpus in ppc64 kernels when the cpu_possible_[map/mask]
    has more cpus than the cpu_online_[map/mask].  In that case, the
    kernel contains per-cpu runqueue data and "swapper" tasks for the
    extra cpus.  Without the patch, on systems with a possible cpu count
    that is larger than its online cpu count:
     (1) the "sys" command will reflect the possible cpu count.
     (2) the "ps" command will show the existent-but-unused "swapper"
         tasks as active on the extra cpus.
     (3) the "set" command will allow the current context to be set to
         any of the existent-but-unused "swapper" tasks.
     (4) the "runq" command will display existent-but-unused runqueue
         data for the extra cpus.
     (5) the "bt" command on the existent-but-unused "swapper" tasks will
         indicate: "bt: cannot determine NT_PRSTATUS ELF note for active
         task: <task>" on dumpfiles, and "(active)" on live systems
  - Resolves: rhbz#550419


author: Dave Anderson <anderson@redhat.com> - 4.1.2-1.el5
changelog:
  - Re-based package to upstream version 4.1.2.
  - Resolves: rhbz#528184
  - If a kdump NMI issued to a non-crashing x86_64 cpu was received while
    running in schedule(), after having set the next task as "current" in
    the cpu's runqueue, but prior to changing the kernel stack to that of
    the next task, then a backtrace would fail to make the transition
    from the NMI exception stack back to the process stack, with the
    error message "bt: cannot transition from exception stack to current
    process stack".  This patch will report inconsistencies found between
    a task marked as the current task in a cpu's runqueue, and the task
    found in the per-cpu x8664_pda "pcurrent" field.  If it can be safely
    determined that the runqueue setting (used by default) is premature,
    then the crash utility's internal per-cpu active task will be changed
    to be the task indicated by the appropriate architecture specific value.
    Also, a new "set -a <task>" option has been added to manually set a task
    to be the "active" task on its cpu.
  - Resolves: rhbz#504952
  - Fix for a potential segmentation violation during invocation if a
    vmcore file, a System.map file, and a non-matching vmlinux file are
    used as command line arguments.  The problem is that whenever a
    System.map file is used, it is presumed that the user knows what he
    is doing, and that the vmlinux file is not the same as the kernel
    that generated the vmcore; therefore the vmlinux/vmcore matching and
    verification routines are not performed.  However, if the kernel data
    structures in the non-matching vmlinux vary widely enough from the
    kernel that generated the vmcore, all manners of bogus data may be
    read and consumed.  The reported segmentation violation occurred when
    using a vmcore created from a "stock" Red Hat kernel with a vmlinux
    file from a Red Hat "debug" kernel, where the kernel data structures
    are significantly different.  The patch adds a several new defensive
    mechanisms, and displays additional warning messages, when invalid or
    questionable data is read, and as a result the crash session will fail
    in a more reasonable manner.
  - Resolves: rhbz#508156
  - Fix for "bt" command when run against a Xen hypervisor, which showed
    a "cannot resolve stack trace" warning message if the cpu received its
    shutdown NMI while running in an interrupt handler.
  - Resolves: rhbz#510505
  - Support for dumpfile format of "virsh dump" of KVM kernels.
  - Resolves: rhbz#510519
  - Fix for initialization-time failure when running against ppc64 vmcores
    if the dump was collected when there were one or more cpus offline in
    the system at the time of the crash.
  - Resolves: rhbz#520506
  - Fix for the x86_64 "bt" command that may possibly start the backtrace
    of an active non-crashing task on its per-cpu IRQ stack instead of
    starting from the NMI exception stack, causing a faulty transition  
    back to the process stack, the dumping of a bogus exception fame and
    the message "bt: WARNING: possibly bogus exception frame".
  - Resolves: rhbz#523512


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.1.el5
changelog:
  - Fix for running "foreach bt" on a live system, where a backtrace that
    is attempted on a task that no longer exists may cause a segmentation
    violation due to the use of stale/invalid kernel stack pointer.
  - Resolves: rhbz#504796


author: Dave Anderson <anderson@redhat.com> - 4.0-8.9.el5
changelog:
  - Re-based package to upstream version 4.0-8.9.
  - Resolves: rhbz#494028
  - Fix for nonsensical usage of the "set" command when running
    against the xen hypervisor binary.  If entered alone on the
    command line, the command would cause a segmentation violation,
    because there is no concept of a "context" in the xen hypervisor.
    In addition, more reasonable error messages are displayed if
    "set", "set -c <cpu>", "set -p", or "set <address>" are
    attempted when running against a xen hypervisor.
  - Resolves: rhbz#462819
  - Fix for "irq -d" option when run on x86_64 xen kernels.  Without the
    patch it would indicate: "irq: invalid structure size: gate_struct"
    and dump a stack trace leading to x86_64_display_idt_table().  Now it
    will indicate that the -d option is not applicable.
  - Resolves: rhbz#464116
  - Fixes for the "bt" command when running against the xen hypervisor
    binary.  The "bt -o" option, and setting it to run by default with
    "bt -O", would fail with the vmlinux-specific error message "bt:
    invalid structure size: desc_struct" with a stack trace leading
    to read_idt_table(); with the patch it will display the generic
    error message "bt: -o option not supported or applicable on this
    architecture or kernel".  The "bt -e" or "bt -E" will also display
    the same error message, as opposed to the command usage message.
    Lastly, the "bt -R" option would cause a segmentation violation;
    it has been fixed to work as it was designed.
  - Resolves: rhbz#464288
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#466724
  - Fix for "bt -a" command when running against the xen hypervisor where
    the number of physical cpus outnumber the MAX_VIRT_CPUS value for the
    processor type.  Without the patch on such a system, "bt -a" would
    fail after displaying backtraces for the first 32 (MAX_VIRT_CPUS)
    pcpus with the the error message: "bt: invalid vcpu".  The patch also
    corrects the "vcpus" command output to show the vcpus associated with
    pcpus 32 through 63, and the "doms" command output to show the second
    idle domain associated with pcpus 32 through 63.
  - Resolves: rhbz#471790
  - Fix for the "bt" command when run on a xen hypervisor in which the
    backtrace leads to either "process_softirqs" or "page_fault".
    Without the patch, the backtrace indicates: "bt: cannot resolve stack
    trace", and then the recovery code terminates the command with the
    nonsensical error message: "bt: invalid structure size: task_struct".
  - Resolves: rhbz#474712
  - Fix for "mod -[sS]" command if the target module object filename
    contains both underscore and dash characters.  Without the patch
    the module load would fail with the error message: "mod: cannot
    find or load object file for <name> module".  Examples are
    the "aes_x86_64" module from the "aes-x86_64.ko" object file, and
    the "dm_region_hash" module from the "dm-region_hash.ko" object file.
  - Resolves: rhbz#480136
  - Changed the manner in which the "bt" command determines which PID 0
    swapper task was interrupted by an ia64 INIT or MCA exception.
    There is an existing ia64 INIT/MCA handler bug which incorrectly
    writes the pseudo task's command name in its comm[] name string
    such that the cpu number may not be part of the string.  If that
    happens without this patch, the "bt" command fails to make the link
    back to the interrupted task, and displays the error message:
    "bt: unwind: failed to locate return link (ip=0x0)!"
  - Resolves: rhbz#487429
  - The starting backtrace location of active, non-crashing, xen dom0
    tasks are not available in kdump dumpfiles, nor is there anything
    that can be searched for in their respective stacks.  Therefore, for
    those those tasks, the "bt" command will indicate: "bt: starting
    backtrace locations of the active (non-crashing) xen tasks cannot be
    determined: try -t or -T options".  Without the patch, the backtrace
    would either be empty, or it would show an invalid backtrace starting
    at the last location where schedule() had been called. 
  - Fix for potentially empty "bt -t" output, and for "bt -T" potentially
    dumping the text return addresses in the hard or soft IRQ stacks
    instead of the process stack.  This could occur if the targeted task
    was the last task that used the hard or soft IRQ stack (x86 only).
  - Resolves: rhbz#495586


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.4
changelog:
  Fix for a "bt" command segmentation violation by correctly 
    handling the transition from the IRQ stack back to the process 
    stack running when running against a Xen kernel.
  - Resolves: rhbz#478904


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.3
changelog:
  Fix for the incomplete resolution for the "search -k" option when 
    run on RHEL5 ia64 CONFIG_SPARSEMEM kernels.  The initial fix
    addressed the segmentation violation, but on certain physical 
    memory configurations, it would prematurely bail out when making
    the transition from the kernel mapped region to the vmalloc region.
  - Resolves: rhbz#458417


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.2
changelog:
  Fix for x86 "bt" command to correctly handle the transition from
    the hard IRQ stack back to the process stack and then display
    the interrupt exception frame.
  - Resolves: rhbz#462624


author: Dave Anderson <anderson@redhat.com> - 4.0-7.2.1
changelog:
  - Fix to prevent a potential divide-by-zero SIGFPE exception when 
    using a vmlinux that does not match the vmcore being analyzed.  
    This is a bad, but acceptable, practice, although when done, it
    usually requires adding a System.map file to the command line 
    so that the correct symbol values are used; that was not done
    in this case.  
  - Resolves: rhbz#457371  
  - Fix for the crash utility's "search -u" option, which searches 
    the current context's user virtual address space for a given value.
    It would cause a SIGSEGV when run on a xen-syms hypervisor binary, 
    and gives a somewhat misleading error message when run on vmlinux 
    binary on a kernel thread.  Both of these usages are nonsensical 
    because the xen-syms hypervisor and vmlinux kernel threads do not 
    have user address space regions.  Fix for the "search -k" option, 
    which searches the kernel virtual address space for a given value. 
    When run on a xen-syms hypervisor binary, it would display a 
    nonsensical vmlinux-based error message.  That option should not 
    be used with the xen-syms hypervisor, which requires that a starting
    virtual address be supplied.  The fix now displays error messages 
    that are applicable to the incorrect command usage.
  - Resolves: rhbz#457373
    Fix for the "search -k" option when run on RHEL5 ia64 CONFIG_SPARSEMEM
    kernels.  It would cause a segmentation violation, because it would 
    start the search at the base of the ia64 processor's identity-mapped 
    region, which is not necessarily backed by physical memory, and result
    in a SIGSEGV.  The fix sets the start of the ia64 kernel virtual address
    space search to the appropriate virtual address. 
  - Resolves: rhbz#458417
    Enhancement for invoking crash with an input-file of crash commands 
    using the -i command-line option, as in "crash -i <input-file> ...", 
    and doing so from inside a script file instead of the command line.
    It would indicates "crash: /dev/tty: No such device or address", run 
    the commands in the input-file, but then would hang.  The fix terminates
    the crash session after all of the commands in the input-file have 
    completed.
  - Resolves: rhbz#458422


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.2
changelog:
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101


author: Dave Anderson <anderson@redhat.com> - 4.0-5.0.1
changelog:
  - Fix for initialization-time failure when analyzing a vmcore of
    an i386-HVM guest that was taken when running on an x86_64 host
  - Resolves: rbhz#288691
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack, 
    corrupting the process thread_info structure, which is used by 
    the crash utility for determining the process cpu.
  - Resolves: rbhz#405101
  - Fix for "mod" command when analyzing ppc64 kernels with 64K pages.
  - Resolves: rbhz#414881


author: Dave Anderson <anderson@redhat.com> - 4.0-4.6.1
changelog:
  - Fix for "bt" command segmentation violation when run against
    an x86 xen-syms hypervisor.
  - Resolves: rhbz#252198


author: Dave Anderson <anderson@redhat.com> - 4.0-4.3.1
changelog:
  - Fix for "dev -p" command for ppc64 machines with virtual devices
    and for kernels that don't have the "pci_device" symbol.
  - Resolves: rhbz#220929 
  - Fix for "crash: cannot resolve "init_task_union" errors due to
    to "__per_cpu_start" and "__per_cpu_end" symbols changing from
    type 'A' to type 'D'.
  - Resolves: rhbz#221901 
  - Fix for segmentation fault when attempting to read a xen core dump
    from a 6 GB guest.
  - Resolves: rhbz#224535 
  - Fix for crash session initialization failure indicating "crash:
    cannot read/find cr3 page" in xendumps where the cr3 register
    value in the dumpfile header is overloaded to be able to use
    page directory pages that are greater than 4GB.
  - Resolves: rhbz#223454 
  - Support for determining the physical base address in FV relocatable
    x86_64 xendump dumpfiles run as xen guests. 
  - Resolves: rhbz#233151 
    Create a new crash-devel package for extension modules, which installs
    defs.h in /usr/include/crash. 
  - Resolves: rhbz#241045 
    Reasonable backtraces for x86_64.
  - Resolves: rhbz#221355


author: Dave Anderson <anderson@redhat.com> - 4.0-3.14
changelog:
  - Fix for s390x live system analysis to recognize debuginfo vmlinux
    file that contains an ASCII char adjacent to the Linux version
    string.
  - Resolves: rhbz#216973


author: Dave Anderson <anderson@redhat.com> - 4.0-3.12
changelog:
  - Fix for ia64 kdump vmcore backtraces when crash was generated
    via INIT switch or due to an MCA exception.
  - Resolves: rhbz#216037


author: Dave Anderson <anderson@redhat.com> - 4.0-3.11
changelog:
  - Revisited fix for BZ #213929; when crash is run in a small
    terminal window, gdb does line-wrapping that breaks the fix
    for x86_64 backtraces.


author: Dave Anderson <anderson@redhat.com> - 4.0-3.10
changelog:
  - Updated crash.patch to match upstream version 4.0-3.9, bumped
    by 1 to differentiate from RHEL4-5 errata version.
  - Fixes for x86_64 "bt" command for tasks that have transitioned
    to the IRQ stack from the process stack via hardware interrupt
    or call_softirq entry point, and to the NMI stack from the 
    process stack.
  - Resolves: rhbz#213929


author: Dave Anderson <anderson@redhat.com> - 4.0-3.3
changelog:
  - Updated crash.patch to match upstream version 4.0-3.3.
  - Support for x86_64 relocatable kernels.  BZ #204557


author: Dave Anderson <anderson@redhat.com> - 4.0-3.1
changelog:
  - Updated crash.patch to match upstream version 4.0-3.1.
  - Added kdump reference to description.
  - Added s390 and s390x to ExclusiveArch list.  BZ #199125
  - Removed LKCD v1 pt_regs references for s390/s390x build.
  - Removed LKCD v2_v3 pt_regs references for for s390/s390x build.


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.4
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by s390_dump.c; IBM did not make the file s390[s] only; BZ #192719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.3
changelog:
  - Updated crash.patch such that <asm/page.h> is not #include'd
    by vas_crash.h; only ia64 build complained; BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.2
changelog:
  - Updated crash.patch such that <asm/segment.h> is not #include'd
    by lkcd_x86_trace.c; also for BZ #191719


author: Dave Anderson <anderson@redhat.com> - 4.0-2.26.1
changelog:
  - Updated crash.patch to bring it up to 4.0-2.26, which should 
    address BZ #191719 - "crash fails to build in mock"


author: Dave Anderson <anderson@redhat.com> 3.10-13
changelog:
  - Compiler error- and warning-related fixes for gcc 4 build.
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 3.10-9
changelog:
  - Updated source package to crash-3.10.tar.gz, containing
    IBM's final ppc64 processor support for RHEL4
  - Fixes potential "bt -a" hang on dumpfile where netdump IPI interrupted
    an x86 process while executing the instructions just after it had entered
    the kernel for a syscall, but before calling the handler.  BZ #139437
  - Update to handle backtraces in dumpfiles generated on IA64 with the
    INIT switch (functionality intro'd in RHEL3-U5 kernel).  BZ #139429
  - Fix for handling ia64 and x86_64 machines booted with maxcpus=1 on
    an SMP kernel.  BZ #139435
  - Update to handle backtraces in dumpfiles generated on x86_64 from the
    NMI exception stack (functionality intro'd in RHEL3-U5 kernel).
  - "kmem -[sS]" beefed up to more accurately verify slab cache chains
    and report errors found.
  - Fix for ia64 INIT switch-generated backtrace handling when
    init_handler_platform() is inlined into ia64_init_handler();
    properly handles both RHEL3 and RHEL4 kernel patches.
    BZ #138350
  - Update to enhance ia64 gdb disassembly output so as to
    symbolically display call targets from kernel module
    text without requiring module debuginfo data.


author: Dave Anderson <anderson@redhat.com> 3.8-3
changelog:
  - remove (harmless) error message during ia64 diskdump invocation when
    an SMP system gets booted with maxcpus=1
  - several 2.6 kernel specific updates


author: Jay Fenlason <fenlason@redhat.com> 3.5-2
changelog:
  - remove ppc from arch list, since it doesn't work with ppc64 kernels
  - remove alpha from the arch list since we don't build it any more


author: Miroslav Lichvar <mlichvar@redhat.com> 8.13.8-6.el5
changelog:
  - fix verification of SSL certificate with NUL in name (#553618, CVE-2009-4565)
  - do not accept localhost.localdomain as valid address from smtp (#449391)
  - skip colon separator when parsing service name in ServiceSwitchFile (#512871)
  - exit with non-zero error code when free space is low (#299951)
  - fix -qG description in man page (#250552)
  - fix comments in sendmail.mc to use correct certs path (#244012)
  - add MTA to provides (#494408)
  - fix %dist macro use (#440616)
  - compile with -fno-strict-aliasing
  - skip t-sem test as it doesn't allow parallel testing


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-3
changelog:
  - using new syntax for access database (#177566)
  - fixed failure message while shutting down sm-client (#119429)
    resolution: stop sm-client before sendmail
  - fixed method to specify persistent queue runners (#126760)
  - removed patch backup files from sendmail-cf tree (#152955)
  - fixed missing dnl on SMART_HOST define (#166680)
  - fixed wrong location of aliases and aliases.db file in aliases man page
    (#166744)
  - enabled CipherList config option for sendmail (#172352)
  - added user chowns for /etc/mail/authinfo.db and move check for cf files
    (#184341)
  - fixed Makefile of vacation (#191396)
    vacation is not included in this sendmail package
  - /var/log/mail now belongs to sendmail (#192850)


author: Thomas Woerner <twoerner@redhat.com> 8.13.7-1
changelog:
  - new version 8.13.7 (#195282)
  - fixes CVE-2006-1173 (VU#146718): possible denial of service issue caused by
    malformed multipart messages (#195776)


author: Thomas Woerner <twoerner@redhat.com> 8.13.5-3
changelog:
  - fixed selinuxenabled path in initscript
  - fixed error handling with sigwait (#137709)
    Thanks to Jonathan Kamens for the patch
  - fixed prereq for cyrus-sasl: now using /usr/sbin/saslauthd
  - appended 'dnl' to cert tags in sendmail.mc


author: Thomas Woerner <twoerner@redhat.com> 8.13.4-1
changelog:
  - new version 8.13.4
  - added requires for the sendmail base package in sendmail-cf, sendmail-devel
    and sendmail-doc
  - dropped upstream close_wait.p2 patch


author: Thomas Woerner <twoerner@redhat.com> 8.13.3-1.1
changelog:
  - fixed gcc4 build: use double quotes for confOPTIMIZE to avoid m4 confusion
    with ','
  - fix for ppc: using tripple-quotes


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1.1
changelog:
  - fixed init script to not complain missing sendmail-cf package (#126975)
  - better message in /etc/mail/Makefile for missing sendmail-cf package.


author: Thomas Woerner <twoerner@redhat.com> 8.13.0-1
changelog:
  - new version 8.13.0
  - made /etc/mail/Makefile complain missing sendmail-cf package (#123348)
  - fixed ownership of %{_includedir}/libmilter (#73977)
  - moved back to /usr/share/ssl/certs as certificate directory (see sendmail.mc)
  - extended sendmail.mc for spam protection


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-4.1
changelog:
  - added authinfo to possible sendmail maps: /etc/mail/Makefile (#119010)
  - fixed minor version in changelog


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-3
changelog:
  - RH3.0E version: sasl1, no pie, old_setup (provide /etc/aliases)
  - new switches for pie and old_setup


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-2
changelog:
  - added information for saslauthd and AUTH (#113463)
  - fixed STATUS_FILE in sendmail-redhat.mc (#114302)
  - reset mta after update if mta was sendmail (#114257)
  - enabled pie for ia64 again


author: Thomas Woerner <twoerner@redhat.com> 8.12.11-1.2
changelog:
  - /usr/lib/sendmail is in alternatives, now
  - removed trailing / from stdir
  - fixed define for STATUS_FILE


author: Thomas Woerner <twoerner@redhat.com> 8.12.10-6
changelog:
  - reverted to sasl1 for 3.0E: added with_sasl1
  - spec file cleanup
  - new location for statistics file (/var/log/)


author: Karsten Hopp <karsten@redhat.de> 8.12.10-3
changelog:
  - fix usage of RPM_OPT_FLAGS variable in spec file
  - add makecert.sh script to -doc subpackage
  - add cert paths to sendmail.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - move debug information from sendmail into debuginfo rpm
  - on %post make sure /etc/aliases.db and /etc/mail/*.db is correctly
    owned by root
  - do not set confTRUSTED_USER to smmsp in sendmail-redhat.mc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - run "make -C /etc/mail" (maybe generating new sendmail.cf, then newaliases
  - added $SENDMAIL_OPTARG that could be set by /etc/sysconfig/sendmail #99224


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-6
changelog:
  - move Sendmail.conf from /usr/lib/sasl to /usr/lib/sasl2 and change the
    default pwcheck method to "saslauthd"


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.9-5
changelog:
  - configure to use libsasl2 instead of libsasl to avoid linking with both
    (we also link to libldap, which now uses libsasl2)
  - link with -ldb instead of -ldb-4.0 on all releases after RHL 7.3 instead
    of just 7.3 (all versions of db4-devel thereafter are expected to provide
    the right linking setup)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mark /etc/mail/Makefile as config(noreplace) #87688
  - mark /etc/pam.d/smtp as config(noreplace) #87731


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - call make with the target "all" #86005
  - add start/stop/restart as Makefile targets
  - add another security patch


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add correct db4-devel requirements for newer releases
  - completely re-do many ifdef code in the spec-file
  - fix some issues building for older RHL releases


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add a confTRUSTED_USER line into sendmail.mc, submit.mc is already ok
  - add patch from sendmail.org for cf/m4/proto.m4


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - do not reject all numeric login names if hesiod support is
    compiled in.   #80060
  - remove reference to non-existing man-pages #74552


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sendmail-8.12.7-etrn.patch from Jos Vos <jos@xos.nl>
  - submit.mc: enable "use_ct_file" by default  #80519
  - add _FFR_MILTER_ROOT_UNSAFE  #78223


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add openssl-devel as a build-time requirement
  - preprocess the config file to add the right version of %{_lib}
  - add kerberos -I and -L flags to build configuration, needed for newer
    versions of libssl


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - always have a queue run interval for sm-msp-queue   #81424
  - Jos Vos suggests adding another variable for sm-client queue-run


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add the following changes from Adrian Havill <havill@redhat.com>
    to our default sendmail.mc file:
  	- added commented-out-by-default common AUTH/SSL examples
  	- updated m4 example and rpm reference
  	- added more comment documentation
  	- add commented out confAUTO_REBUILD example
  	- improve description about MASQUERADE_AS


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add to submit.mc: define(`_MTA_HOST_', `[127.0.0.1]')
    to deliver directly to localhost IP instead of going through DNS
  - submit.mc: exchange msp and use_ct_file to better enable it
  - do not undefine UUCP_RELAY and BITNET_RELAY
  - sendmail.mc: use LOCAL_DOMAIN instead of "Cw" directly
  - sendmail.mc: add commented out MASQUERADE_AS example
  - re-enable DAEMON variable for now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove absolute path names from the PAM configuration, allowing it to be
    used by any arch on a multilib system


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Changed the behaviour in /etc/mail/Makefile to generate the sendmail.cf and
    submit.cf from the mc files if they changed.
  - Added a small README.redhat that descibed the new mc file behaviour and the
    split into sendmail.cf and submit.cf.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - suggestions form Stephane Lentz:
  	- add correct include statement into submit.mc (like sendmail.mc)
  	- add commented out further suggestions into submit.mc
  	- disable ident lookups


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - make sure more version information is in the cf file #54418
  - do not use "-b" flag when patching in spec file
  - require newer chkconfig version #61035
  - fix preun script #60880
  - add TMPF to access file creation #60956


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - mv include files to /usr/include/libmilter/ #60795
  - do not use "-f" option to virtusertable #60196
  - ad an example smarthost entry to config file #58298


author: Nalin Dahyabhai <nalin@redhat.com> 8.12.2-1
changelog:
  - update to 8.12.2 (adds STARTTLS support without need for sfio)
  - don't forcibly strip binaries; let the build root handle it
  - add creation of the smmsp account (51/51) in %pre
  - enable hesiod map support
  - modify default config to use an MSP
  - comment out 'O AutoRebuildAliases' in %post, otherwise sendmail will
    fail to restart on upgrades


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - integrate ugly logic to compile this src.rpm also on older Red Hat
    Linux releases
  - clean up spec file and patches a bit
  - add db4 support


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix another path to correct docu
  - include sendmail/README in the docu
  - compile with -D_FFR_WORKAROUND_BROKEN_NAMESERVERS, but do not
    enable this at runtime
  - devel subpackage files owned by root now


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change "-q" to "-s" as option to make #57216
  - move milter lib into separate "devel" sub-package
  - add include files to devel sub-package #56064
  - fix pointer in access file to docu #54351


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add libmilter docu
  - add support for userdb to /etc/mail/Makefile
  - use "btree" database files if a userdb is used
  - buildrequires tcp_wrappers


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 8.11.3
  - add "localhost.localdomain" to the list of hostnames accepted
    for local delivery "Cw" in /etc/mail/sendmail.mc
  - add patches from Pekka Savola <pekkas@netcore.fi>
  	- Enable IPv6 at compile time, patch for glibc 2.2 from PLD
  	- Add a commented-out IPv6 daemon .mc line to sendmail.mc
  	- buildrequire: openldap-devel, cyrus-sasl-devel


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add changes from Christopher McCrory <chrismcc@pricegrabber.com>:
  	- prepare /etc/mail/Makefile for more maps not shipped with this rpm
  	- changed sendmail.mc to include some more commented out options,
  	  so that people are directly pointed at important options
  	- add /etc/pam.d/smtp for AUTH
  	- add FEATURE(use_ct_file) and /etc/mail/trusted-users


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - enable daemon mode again, but only listen to the loopback device
    instead of all devices.
  - do not include check.tar with old anti-spam rules


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to (security release) 8.11.2
  - build also on RHL 6.x #16061
  - include smrsh man-page #17901
  - use the "-f" flag for makemap to preserve case for virtusertable
    and userdb in /etc/mail/Makefile - suggested by Harald Hoyer
  - fix /usr/doc -> usr/share/doc in docu #20611
  - wrong path in sendmail.mc #20691
  - tcp-wrapper support wasn't enabled correctly #21642
  - do not expose user "root" when masquerading like in older releases #21643
  - disable the VRFY and EXPN smtp commands #21801
  - disable queue-runs for normal users (restrictqrun privacy flag)
  - fix typo in sendmail.mc #21880, #22682
  - disable daemon mode to see what needs fixing


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - install man pages, not groff output (#3746).
  - use dnl not '#' in m4 comment (#3749).
  - add FEATURE(mailtertable) to the config -- example file needs this (#4649).
  - use db2 not db1.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fox the awk scripts in the postinstall
  - enable FEATURE(accept_unresolvable_domains) by default to make laptop
    users happy.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - make the redhat.mc be a separate source files. Sanitize patches that used
    to touch it.
  - install redhat.mc as /etc/sendmail.mc so that people can easily modify
    their sendmail.cf configurations.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - provide a more sane /etc/mail/access default config file
  - use makemap to initializa the empty databases, not touch
  - added a small, but helpful /etc/mail/Makefile


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Allow empty QUEUE in /etc/sysconfig/sendmail for those who
    want to run sendmail in daemon mode without processing the
    queue regularly.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - added chkconfig support
  - various spec file cleanups
  - changed group to Networking/Daemons (from Daemons).  Sure, it runs on
    non networked systems, but who really *needs* it then?


author: Donnie Barnes <djb@redhat.com>
changelog:
  - made /etc/mail/deny.db a ghost
  - removed preun that used to remove deny.db (ghost handles that now)
  - NOTE: upgrading from the sendmail packages in 4.8, 4.8.1, and possibly
    4.9 (all Red Hat betas between 4.2 and 5.0) could cause problems.  You
    may need to do a makemap in /etc/mail and a newaliases after upgrading
    from those packages.  Upgrading from 4.2 or prior should be fine.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - updated to 8.8.7
  - added some spam filtration
  - combined some makefile patches
  - added BuildRoot support


author: Jan Kaluza <jkaluza@redhat.com> - 3:2.1.9-5
changelog:
  - fix #290661 - use relative symlink in /etc/smrsh
  - fix #461707 - break CC field correctly
  - fix #453377 - don't parse problematic mails many times, but isolate them
  - fix #521888 - fix instances of #!/usr/bin/env python in mailman
  - fix #515157 - fixed traceback when changing email address globally


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.9-4
changelog:
  - fix #252185 init script prevents proper SELinux domain transitions
  - fix #242672 wrong init script return value


author: John Dennis <jdennis@redhat.com> - 3:2.1.6-1.fc4
changelog:
  - initial port of 2.1.6
    remove mailman-2.1.5-moderator-request.patch, present in new release
    remove mailman-2.1-CAN-2005-0202.patch,       present in new release
    remove mailman-2.1-CAN-2004-1177.patch,       present in new release


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-31.fc4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use /usr/bin/python when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in /var/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under /var/www
  - move files from /usr/share to /usr/share
  - integrate spot-fixes from mailman lists via gnome.org


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-404.el5]
changelog:
  - [infiniband] core: Prevent integer overflow in ib_umem_get (Doug Ledford) [1179353] {CVE-2014-8159}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-403.el5]
changelog:
  - [s390] zcrypt: Toleration of new crypto hardware (Hendrik Brueckner) [1182522]
  - [fs] cifs: Use pid from cifsFileInfo in wrt pages/set_file_size (Sachin Prabhu) [1169304]
  - [xen] x86: confine internally handled MMIO to solitary regions (Denys Vlasenko) [1164256] {CVE-2014-8867}


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-33
changelog:
  - fix CVE-2014-8275 (without introduction of CVE-2015-0286) - various
    certificate fingerprint issues
  - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export
    ciphersuites and on server
  - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption
  - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference
  - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data
  - fix CVE-2015-0292 - integer underflow in base64 decoder
  - fix CVE-2015-0293 - triggerable assert in SSLv2 server


author: Elio Maldonado <emaldona@redhat.com> - 4.10.8-1
changelog:
  - Rebase to nspr-4.10.8
  - Resolves: Bug 1200921 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-2
changelog:
  - Remove an unused patch
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.2-1
changelog:
  - Update to nspr-4.10.2
  - Resolves: rhbz#1032468 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 4.10.0-2
changelog:
  - Retagging to fix an inconsitency in the release tags
  - Resolves: rhbz#1002641 - Rebase RHEL 5 to NSPR 4.10 (for FF 24.x)


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Kai Engert <kaie@redhat.com> - 3.18.0-6
changelog:
  - On RHEL 6.x keep the TLS version defaults unchanged.
  - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1)


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-5
changelog:
  - Copy PayPalICA.cert and PayPalRootCA.cert to nss/tests/libpkix/certs
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-4
changelog:
  - Update and reeneable nss-646045.patch on account of the rebase
  - Enable additional ssl test cycles and document why some aren't enabled
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-3
changelog:
  - Fix shell syntax error on nss/tests/all.sh
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Elio Maldonado <emaldona@redhat.com> - 3.18.0-2
changelog:
  - Replace expired PayPal test certificate that breaks the build
  - Resolves: Bug 1200905 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-5.11]


author: Kai Engert <kaie@redhat.com> 0.9.8e-34
changelog:
  - Rebase ca-bundle.crt to the upstream version 2.4 with legacy
    modifications. For compatibility reasons, several CA certificates with
    RSA sizes of 1024 bits are still included.
  - Add a patch to the source RPM that documents the changes from the
    upstream version.


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-406.el5]
changelog:
  - [fs] pipe: fix pipe corruption and iovec overrun on partial copy (Mateusz Guzik) [1203787] {CVE-2015-1805}


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-405.el5]
changelog:
  - [net] tcp: zero retrans_stamp if all retrans were acked (Marcelo Leitner) [1205521]
  - [net] tcp: fix retrans_stamp advancing in error cases (Marcelo Leitner) [1205521]
  - [net] tcp: Fix inconsistency source (Marcelo Leitner) [1205521]
  - [ipc] sem: fix the potential use-after-free in freeary() (Oleg Nesterov) [1124574]
  - [scsi] lpfc: Fix crash in device reset handler (Rob Evers) [1070964]
  - [mm] fix broken max_reclaims_in_progress memory reclaim throttle (Lachlan McIlroy) [1164105]
  - [x86_64] fpu: save_i387() must clr TS_USEDFPU along with stts() (Oleg Nesterov) [1193505]
  - [block] virtio: Call revalidate_disk() upon online disk resize (Stefan Hajnoczi) [1200855]
  - [block] virtio: fix config handler race (Stefan Hajnoczi) [1200855]
  - [block] virtio: allow re-reading config space at runtime (Stefan Hajnoczi) [1200855]


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-12
changelog:
  - better keep also the regular environment variables for backwards
    compatibility with old pam_exec scripts


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-10
changelog:
  - optimize pam_listfile to use pam_modutil_user_in_group_nam_nam() (#551312)
  - export environment variables in pam_exec (#554518)
  - fix user name matching in pam_unix remember feature (#768087)
  - added pam_cracklib options maxclassrepeat and gecos_check
  - pam_pwhistory now always saves the old password even for root


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-9
changelog:
  - distinguish groups and users with the () syntax in pam_access
    if nodefgroup option is specified
  - do not truncate /var/log/faillog and /var/log/tallylog on upgrade
  - remove superfluous plurals in .po files


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-8
changelog:
  - fix insecure dropping of priviledges in pam_xauth
    and pam_mail - CVE-2010-3316 (#637898), CVE-2010-3435 (#641335)
  - fix insecure executing of scripts with user supplied environment
    variables in pam_namespace - CVE-2010-3853 (#643043)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.99.6.2, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-35
changelog:
  - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time
  - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent
  - fix CVE-2015-4000 - prevent the logjam attack on client - restrict
    the DH key size to at least 768 bits (limit will be increased in future)


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-19
changelog:
  - Server correctly parses Relay-Forward message (bug #512399).
  - Client correctly handles NotOnLink error in REPLY (bug #511323).
  - Server doesn't send NotOnlink error in REPLY
    when more range statements configured (bug #598439).


author: Jiri Popelka <jpopelka@redhat.com> - 1.0.10-18
changelog:
  - Get new address when moving into a new link (bug #466251).
  - Windows 2008 interoperability fix in dhcp6c (bug #476974).
  - Check DAD necessity by the interface type to prevent dhcp6c
    from segfaulting when run for second time (bug #515644).


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-16
changelog:
  - Remove the ADVERTISE/REPLY patch for option 24 as it is unnecessary,
    the problem was in our test driver scripts for the TAHI suite
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-15
changelog:
  - Allow users to configure dhcp6s to return only option 24 for
    ADVERTISE and REPLY messages
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-14
changelog:
  - Add directive for dhcp6s.conf that lets users enable the 'only
    send option 23 for ADVERTISE messages' setting
    Related: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-10
changelog:
  - Keep DUID consistent
    Resolves: rhbz#377101
  - Match DUID LLT time field on client-server communications
    Resolves: rhbz#365501


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-8
changelog:
  - Make sure DUID is saved in dhcp6s as it is in dhcp6c.  This keeps the DUID
    consistent in dhcp6s and keeps the DUID time field correct.
    Resolves: rhbz#377101
    Resolves: rhbz#365501
  - Do not send the domain list to the client unless it's a requested option
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-6
changelog:
  - Support multiple IA options
    Resolves: rhbz#439526
    Resolves: rhbz#365531
    Resolves: rhbz#365651
    Resolves: rhbz#426899
    Resolves: rhbz#365661
  - DUID type 1 time is time since January 1, 2000 (UTC), modulo 2^32
    Resolves: rhbz#365501


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-5
changelog:
  - Do not dereference a possible NULL pointer in dhcp6c
    Resolves: rhbz#439942
  - Check DUID and IAID for duplicate hosts
    Resolves: rhbz#440330
  - Add error handling during initialization of dhcp6c
    Resolves: rhbz#449052
  - Log correct PID after daemonizing in dhcp6c
    Resolves: rhbz#449051
  - Handle multiple nameservers in option-23
    Resolves: rhbz#449053
  - Use last 4 bytes of MAC address to generate IAID
    Resolves: rhbz#449054


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-4
changelog:
  - Do not send Message-ID from dhcp6r except for RELAY-FORWARD and RELAY-REPL
    Resolves: rhbz#440440


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-3
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
    Related: rhbz#426899
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
    Related: rhbz#365521
    Related: rhbz#365531
    Related: rhbz#365541
    Related: rhbz#365581
    Related: rhbz#365591
    Related: rhbz#365601
    Related: rhbz#365631
    Related: rhbz#365641
    Related: rhbz#365651
    Related: rhbz#376871
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.10-2
changelog:
  - Fix hwtype in calculate_duid_len()
    Resolves: rhbz#377101
  - Do not return IA_NA option with status code set to NoAddrAvail
    Resolves: rhbz#365531
  - Add domain list option check to specify DNS list
    Related: rhbz#377131
  - Update 'now' whenever checking expiration for each timer
    Resolves: rhbz#365501
  - Verify length of buffer for RELAY_REPL correctly
    Resolves: rhbz#365551
  - Support updating /etc/resolv.conf when network-functions is not available
    Related: rhbz#377131
  - Remove gcc_intrin.h workaround for ia64
    Related: rhbz#429074


author: David Cantrell <dcantrell@redhat.com> - 1.0.7-1
changelog:
  - Fix dhcp6c re-assign of IPv6 global address after Confirm/Reply msg exchange
    Resolves: rhbz#249466
  - Make dhcp6c retransmit Confirm message in expected duration
    Resolves: rhbz#251192
  - Fix value dhcp6c stores to elapsed time option in Solicit message
    Resolves: rhbz#249451
  - Make dhcp6c ignore Reply message that contains IA_NA with T1 > T2
    Resolves: rhbz#254194
  - Do not let dhcp6c remove leases that are not on the updated list
    Resolves: rhbz#265761
  - Fix RFC 3646 compliance
    Resolves: rhbz#382331
  - /etc/init.d/dhcp6s line continuation in description fix
    Resolves: rhbz#204713
  - Avoid global library symbol collisions in libdhcp6client
    Resolves: rhbz#216188
  - Init script fixes (LSB compliance)
    Resolves: rhbz#237970
  - Match time field of received DHCPv6 Advertise message
    Resolves: rhbz#365501
  - Include Advertise message in Relay-Repl message
    Resolves: rhbz#365521
  - Include valid IA_Address option in Reply messages
    Resolves: rhbz#365531
  - Do not return Reply message when receiving a Confirm message via unicast
    Resolves: rhbz#365541
  - Set status code of Reply message to NotOnLink when necessary
    Resolves: rhbz#365551
  - Do not send unexpected Reply messages to client
    Resolves: rhbz#365551
  - Set lifetime of Reply messages to zero
    Resolves: rhbz#365581
  - Include NoBinding status in the IA_NA option in Reply messages when needed
    Resolves: rhbz#365591
  - Do not return Reply message when receiving a Rebind message via unicast
    Resolves: rhbz#365601
  - Do not return Advertise message when receiving a Solicit message with SID
    Resolves: rhbz#365621
  - Do not return Reply message when receiving a Confirm message with SID
    Resolves: rhbz#365631
  - Do not return Reply message when receiving a Rebind message with SID
    Resolves: rhbz#365641
  - Check IA options of the received Advertise message
    Resolves: rhbz#365651
  - Set status code of Advertise message to NoAddrAvail when necessary
    Resolves: rhbz#365661
  - Fix About RT(Retransmission Time) problem
    Resolves: rhbz#376901
  - Fix About RD(Retransmission Duration) problem
    Resolves: rhbz#376921
  - Send Rebind messages correctly
    Resolves: rhbz#376931
  - Send Renew messages correctly
    Resolves: rhbz#376941
  - Send Echo Reply to calling server correctly
    Resolves: rhbz#377091
  - Keep DUID consistent between reboots and such
    Resolves: rhbz#377101
  - Honor requested options from the client
    Resolves: rhbz#377111
  - Send DNS Query message correctly
    Resolves: rhbz#377131
  - Send Information Request message correctly
    Resolves: rhbz#377161
  - Find correct option code
    Resolves: rhbz#377191
  - Do not return Reply message when receiving an Information Request message
    via unicast
    Resolves: rhbz#377221
  - Do not display invalid error messages on terminal when running dhcp6r
    Resolves: rhbz#377231
  - Do not include non-requested options in Reply messages
    Resolves: rhbz#426899


author: David Cantrell <dcantrell@redhat.com> - 1.0.4-1
changelog:
  - Rebase to dhcpv6-1.0.4
  - Renamed dhcpv6_client package to dhcpv6-client
  - Added libdhcp6client-static package
  - BR kernel-headers


author: David Cantrell <dcantrell@redhat.com> - 0.10-34
changelog:
  - Store elapsed time value correctly in solicit message
    Resolves: rhbz#249451
  - Reassign global address after confirm/reply in dhcp6c
    Resolves: rhbz#249466
  - Retransmit confirm message in expected duration in dhcp6c
    Resolves: rhbz#251192
  - In dhcp6c, ignore reply message that contains IA_NA with T1 > T2
    Resolves: rhbz#254194
  - Do not let dhcp6c remove leases that are not on the updated list
    Resolves: rhbz#265761


author: David Cantrell <dcantrell@redhat.com> - 0.10-33
changelog:
  - server6_addr.conf is not required for dhcp6s
  - Resolves: rhbz#217309
  - Man page for dhcp6s.conf should reference server-preference
  - Resolves: rhbz#217308


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-30
changelog:
  - fix bug 196429: 
    Allow clients from dhcpv6-0.10<=16 to get addresses. 
    >16, the server sent the prefix length; this is now
    conditional on the client sending the DHC6OPT_REQUEST_PREFIX,
    and can be disabled by the 'use-ra-prefix' dhcp6c.conf or 
    dhcp6s.conf setting. With the upstream version, the only
    way to set the clients' address prefixes was by router
    advertisement.


author: Jason Vas Dias<jvdias@redhat.com> 0.10-26
changelog:
  - libdhcp6client fix to retry bind() to linklocal address
    on EADDRNOTAVAIL for up to 5 seconds to give kernel time
    to create linklocal address.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-18
changelog:
  - Make server send client the IPv6 address prefix in address lease;
    make client use it 
  - prevent netlink.c generating error log message for NLMSG_DONE
  - fix netlink.c IFLA_PROTINFO handling now that kernel defines it
  - fix memory leak in client6_addr create_iaid
  - disable 'install -s' for binaries


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - fix bug 165882: allow client to configure an interface which
    does not have an IPv4 address ( use getifaddrs instead of
    ioctl(sockfd, SIOGIFCONF, ...)
  - fix bug 165884 (possibly!): force use of glibc's getifaddrs,
    not internal getifaddrs implementation


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-11
changelog:
  - Add 'prefix-delegation-interface' option to allow write
  - of radvd interface configuration other than that for 
  - the interface the lease was received on.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-10
changelog:
  - Add Relay Agent support. Thanks to  Brian Bluesker<bbuesker@qualcomm.com>
  - for the patch to add relay support to the server and for submitting the 
  - patch originally contributed by Cristian Cadar of NEC Europe to 
  - DHCPv6-developer  mailing list.


author: Jason Vas Dias <jvdias@redhat.com> - 0.10-2
changelog:
  - Split into two packages: dhcpv6-*, containing server only,
  - and dhcpv6_client-*, containing client only.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.85-2.6.1.3
changelog:
  - Check return value of gio_init in gsettings_init and return false if necessary.
  - Re-enable the use of system GConf.
  - Only ifdef g_type_init&g_free if USE_SYSTEM_GIO and USE_SYSTEM_GCONF are undefined.
  - Resolves: rhbz#1242587


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - The RHEL 5 version of libsctp is too old for the OpenJDK SCTP implementation.
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Remove libxslt and mercurial dependencies pulled in from IcedTea builds.
  - Reduce redhat-lsb dependency to redhat-lsb-core (lsb_release)
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.80-2.6.0.0
changelog:
  - Bump to 2.6.0 and u80b32.
  - Drop upstreamed patches and separate AArch64 HotSpot.
  - Add dependencies on pcsc-lite-devel (PR2496) and lksctp-tools-devel (PR2446)
  - Add dependency on GConf2-devel (PR2320)
  - Only run -Xshare:dump on JIT archs other than power64 as port lacks support
  - Update remove-intree-libraries script to cover LCMS and PCSC headers and SunEC.
  - Resolves: rhbz#1235155


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.36-1.13.8.0
changelog:
  - Update to IcedTea 1.13.8
  - Update no_pr2125.patch to work against new version.
  - Resolves: rhbz#1235149


author: Matej Muzila <mmuzila@redhat.com> - 5.5.45-1
changelog:
  - Rebase to 5.5.45
    Includes fixes for: CVE-2014-6568 CVE-2015-0374
    CVE-2015-0381 CVE-2015-0382 CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    CVE-2015-0501 CVE-2015-2568 CVE-2015-0499 CVE-2015-2571 CVE-2015-0433
    CVE-2015-0441 CVE-2015-0505 CVE-2015-2573 CVE-2015-2582 CVE-2015-2620
    CVE-2015-2643 CVE-2015-2648 CVE-2015-4737 CVE-2015-4752 CVE-2015-4757
    Resolves: #1247020


author: Matej Muzila <mmuzila@redhat.com> - 5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160514


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089203


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    CVE-2014-0001
    Resolves: #1055876


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


