# changelog

author: Don Zickus <dzickus@redhat.com> [2.6.18-60.el5]
changelog:
  - [xen] x86: suppress bogus timer warning (Chris Lalancette ) [317201]
  - [xen] ia64: saner default mem and cpu alloc for dom0 (Jarod Wilson ) [248967]
  - [xen] x86_64: add stratus hooks into memory (Kimball Murray ) [247833]
  - [ia64] mm: register backing store bug (Luming Yu ) [310801]
  - [serial] irq -1 assigned to serial port (Luming Yu ) [227728]
  - [utrace] s390 regs fixes (Roland McGrath ) [325451]
  - [x86] use pci=bfsort on Dell R900 (Michal Schmidt ) [242990]
  - [nfs] server support 32-bit client and 64-bit inodes (Peter Staubach ) [253589]
  - [nfs] support 32-bit client and 64-bit inode numbers (Peter Staubach ) [253589]
  - [dlm] Don't overwrite castparam if it's NULL (Patrick Caulfield ) [318061]
  - [s390] panic with lcs interface as dhcp server (Hans-Joachim Picht ) [350861]
  - [s390] qeth: do not free memory on failed init (Hans-Joachim Picht ) [330211]
  - [s390] qeth: default performace_stats attribute to 0 (Hans-Joachim Picht ) [248897]
  - [s390] qeth: create copy of skb for modification (Hans-Joachim Picht ) [354861]
  - [s390] qeth: up sequence number for incoming packets (Hans-Joachim Picht ) [354851]
  - [s390] qeth: use correct MAC address on recovery (Hans-Joachim Picht ) [241276]
  - [s390] cio: handle invalid subchannel setid in stsch (Hans-Joachim Picht ) [354831]
  - [s390] cio: Dynamic CHPID reconfiguration via SCLP (Hans-Joachim Picht ) [253120]
  - [s390] cio: fix memory leak when deactivating (Hans-Joachim Picht ) [213272]
  - [s390] cio: Device status validity (Hans-Joachim Picht ) [354821]
  - [s390] cio: reipl fails after channel path reset (Hans-Joachim Picht ) [231306]
  - [usb] reset LEDs on Dell keyboards (Pete Zaitcev ) [228674]
  - [x86] hotplug: PCI memory resource mis-allocation (Konrad Rzeszutek ) [252260]
  - [ppc64] Make the vDSO handle C++ unwinding correctly (David Howells ) [420551]
  - [ppc64] add AT_NULL terminator to auxiliary vector (Vitaly Mayatskikh ) [231442]
  - [x86] Add Greyhound Event based Profiling support (Bhavana Nagendra ) [314611]
  - [nfs] reset any fields set in attrmask (Jeff Layton ) [242482]
  - [nfs] Set attrmask on NFS4_CREATE_EXCLUSIVE reply (Jeff Layton ) [242482]
  - [fs] proc: add /proc/<pid>/limits (Neil Horman ) [253762]
  - [xen] ia64: make ioremapping work (Jarod Wilson ) [240006]
  - [ia64] bte_unaligned_copy transfers extra cache line (Luming Yu ) [218298]
  - [xen] inteface with stratus platform op (Kimball Murray ) [247841]
  - [mm] xen: export xen_create_contiguous_region (Kimball Murray ) [247839]
  - [mm] xen: memory tracking cleanups (Kimball Murray ) [242514]


author: Don Zickus <dzickus@redhat.com> [2.6.18-59.el5]
changelog:
  - [net] ipv6: backport optimistic DAD (Neil Horman ) [246723]
  - [crypto] aes: Rename aes to aes-generic (Herbert Xu ) [245954]
  - [xen] ia64: fix free_irq_vector: double free (Aron Griffis ) [208599]
  - [selinux] don't oops when using non-MLS policy (Eric Paris ) [223827]
  - [net] qla3xxx: new 4032 does not work with VLAN (Marcus Barrow ) [253785]
  - [ide] SB700 contains two IDE channels (Bhavana Nagendra ) [314571]
  - [edac] fix return code in e752x_edac probe function (Aristeu Rozanski ) [231608]
  - [scsi] cciss: disable refetch on P600 (Aron Griffis ) [251563]
  - [misc] Intel Tolapai SATA and I2C support (Ivan Vecera ) [251086]
  - [net] ibmveth: Checksum offload support (Scott Moser ) [254035]
  - [misc] Allow a hyphenated range for isolcpus (Jonathan Lim ) [328151]
  - [misc] sched: force /sbin/init off isolated cpus (Jonathan Lim ) [328091]
  - [ia64] contig: show_mem cleanup output (George Beshers ) [221612]
  - [ia64] discontig: show_mem cleanup output (George Beshers ) [221612]
  - [ia64] show_mem printk cleanup (George Beshers ) [221612]
  - [net] ppp_mppe: avoid using a copy of interim key (Michal Schmidt ) [248716]
  - [ppc64] mpstat reports wrong per-processor stats (Scott Moser ) [212234]
  - [net] labeled: memory leak calling secid_to_secctx (Eric Paris ) [250442]
  - [misc] /proc/<pid>/environ stops at 4k bytes (Anton Arapov ) [308391]
  - [net] kernel needs to support TCP_RTO_MIN (Anton Arapov ) [303011]
  - [x86_64] kdump: shutdown gart on k8 systems (Prarit Bhargava ) [264601]
  - [input] psmouse: add support to 'cortps' protocol (Aristeu Rozanski ) [248759]
  - [nfs] nfs_symlink: allocate page with GFP_HIGHUSER (Jeff Layton ) [245042]
  - [ia64] enable kprobe's trap code on slot 1 (Masami Hiramatsu ) [207107]
  - [misc] Fix relay read start in overwrite mode (Masami Hiramatsu ) [250706]
  - [misc] Fix relay read start position (Masami Hiramatsu ) [250706]
  - [x86_64] 'ide0=noprobe' crashes the kernel (Michal Schmidt ) [241338]
  - [ia64] proc/iomem wiped out on non ACPI kernel (George Beshers ) [257001]
  - [net] CIPSO packets generate kernel unaligned access (Luming Yu ) [242955]
  - [ia64] ioremap: fail mmaps with incompat attributes (Jarod Wilson ) [240006]
  - [ia64] ioremap: allow cacheable mmaps of legacy_mem (Jarod Wilson ) [240006]
  - [ia64] ioremap: avoid unsupported attributes (Jarod Wilson ) [240006]
  - [ia64] ioremap: rename variables to match i386 (Jarod Wilson ) [240006]
  - [ia64] validate and remap mmap requests (Jarod Wilson ) [240006]
  - [ia64] kdump: deal with empty image (Doug Chapman ) [249724]
  - [net] NetXen: allow module to unload (Konrad Rzeszutek ) [245751]
  - [net] clean up in-kernel socket api usage (Neil Horman ) [246851]
  - [hotplug] slot poweroff problem on systems w/o _PS3 (Prarit Bhargava ) [410611]
  - [PPC64] kdump: fix irq distribution on ppc970 (Jarod Wilson ) [208659]
  - [serial] support PCI Express icom devices (Chris Snook ) [243806]
  - [xen] Rebase HV to 15502 (Bill Burns) [318891]


author: Don Zickus <dzickus@redhat.com> [2.6.18-58.el5]
changelog:
  - Updated: [net] panic when mounting with insecure ports (Anton Arapov ) [294881]
  - [kabitool] - fail on missing symbols (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-57.el5]
changelog:
  - [misc] lockdep: fix seqlock_init (Peter Zijlstra ) [329851]
  - [ppc64] Remove WARN_ON from disable_msi_mode() (Scott Moser ) [354241]
  - [GFS2] sysfs  file should contain device id (Bob Peterson ) [363901]
  - [x86_64] update IO-APIC dest field to 8-bit for xAPIC (Dave Anderson ) [224373]
  - [ia64] add global ACPI OpRegion handler for fw calls (Doug Chapman ) [262281]
  - [ia64] add driver for ACPI methods to call native fw (Doug Chapman ) [262281]
  - [ppc64] eHEA: ibm,loc-code not unique (Scott Moser ) [271821]
  - [ata] SB800 SATA/IDE LAN support (Bhavana Nagendra ) [252961]
  - [net] ibmveth: enable large rx buf pool for large mtu (Scott Moser ) [250827]
  - [net] ibmveth: h_free_logical_lan err on pool resize (Scott Moser ) [250827]
  - [net] ibmveth: fix rx pool deactivate oops (Scott Moser ) [250827]
  - [gfs2] Fix ordering of page lock and transaction lock (Steven Whitehouse ) [303351]
  - [net] panic when mounting with insecure ports (Anton Arapov ) [294881]
  - [ia64] fix vga corruption with term blanking disabled (Jarod Wilson ) [291421]
  - [ppc64] panic on DLPAR remove of eHEA (Scott Moser ) [253767]
  - [ppc64] boot Cell blades with >2GB memory (Scott Moser ) [303001]
  - [x86_64] Add NX mask for PTE entry (Jarod Wilson ) [232748]
  - [hotplug] acpiphp: System error during PCI hotplug (Konrad Rzeszutek ) [243003]
  - [misc] softirq: remove spurious BUG_ON's (Jarod Wilson ) [221554]
  - [audit] collect events for segfaulting programs (Eric Paris ) [239061]
  - [misc] cfq-iosched: fix deadlock on nbd writes (Jarod Wilson ) [241540]
  - [scsi] stale residual on write following BUSY retry (Jonathan Lim ) [300871]
  - ext3: orphan list check on destroy_inode (Eric Sandeen ) [269401]
  - [scsi] always update request data_len with resid (George Beshers ) [282781]
  - [misc] add vmcoreinfo support to kernel (Neil Horman ) [253850]
  - [ia64] remove stack hard limit (Aron Griffis ) [251043]
  - [fs] Fix unserialized task->files changing (Vitaly Mayatskikh ) [253866]
  - [ide] allow disabling of drivers (Gerd Hoffmann ) [247982]
  - [net] fail multicast with connection oriented socket (Anton Arapov ) [259261]
  - [net] fix race condition in netdev name allocation (Neil Horman ) [247128]
  - [char] tty: set pending_signal on return -ERESTARTSYS (Aristeu Rozanski ) [253873]
  - [fs] aio: account for I/O wait properly (Jeff Moyer ) [253337]
  - [x86_64] Switching to vsyscall64 causes oops (Jeff Burke ) [224541]
  - [net] lvs syncdaemon causes high avg load on system (Anton Arapov ) [245715]
  - [i2c] SB600/700/800 use same SMBus controller devID (Bhavana Nagendra ) [252286]
  - [acpi] sbs: file permissions set incorrectly (Vitaly Mayatskikh ) [242565]
  - [net] ipv6: support RFC4193 local unicast addresses (Neil Horman ) [252264]
  - [misc] serial: fix console hang on HP Integrity (Doug Chapman ) [244054]
  - [tux] fix crashes during shutdown (Ernie Petrides ) [244439]
  - [usb] Support for EPiC-based io_edgeport devices (Jarod Wilson ) [249760]
  - [misc] Prevent NMI watchdog triggering during sysrq-T (Konrad Rzeszutek ) [248392]
  - [hotplug] acpiphp: 'cannot get bridge info' with PCIe (Konrad Rzeszutek ) [248571]
  - [misc] serial: assert DTR for serial console devices (Michal Schmidt ) [244728]
  - [net] sctp: rewrite receive buffer management code (Neil Horman ) [246722]
  - [net] NetXen: MSI: failed interrupt after fw enabled (Konrad Rzeszutek ) [246019]
  - [cifs] make demux thread ignore signals from userspace (Jeff Layton ) [245674]
  - [ia64] misc DBS cleanup (Luming Yu ) [245217]
  - [misc] Remove non-existing SB600 raid define (Prarit Bhargava ) [244038]


author: Don Zickus <dzickus@redhat.com> [2.6.18-56.el5]
changelog:
  - [fs] missing dput in do_lookup error leaks dentries (Eric Sandeen ) [363491] {CVE-2007-5494}
  - [ppc] System cpus stuck in H_JOIN after migrating (Scott Moser ) [377901]
  - [scsi] ibmvSCSI: Unable to continue migrating lpar after errors (Scott Moser ) [377891]
  - [scsi] ibmvSCSI: client can't handle deactive/active device from server (Scott Moser ) [257321]
  - [audit] still allocate contexts when audit is disabled (Alexander Viro ) [360841]


author: Don Zickus <dzickus@redhat.com> [2.6.18-55.el5]
changelog:
  - Revert [misc] Denial of service with wedged processes (Jerome Marchand ) [229882] {CVE-2006-6921}
  - [autofs4] fix race between mount and expire (Ian Kent ) [354621]
  - [net] ieee80211: off-by-two integer underflow (Anton Arapov ) [346401] {CVE-2007-4997}
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [nfs] v4: umounts oops in shrink_dcache_for_umount (Steve Dickson ) [254106]
  - [net] tg3: Fix performance regression on 5705 (Andy Gospodarek ) [330181]
  - [net] forcedeth: MSI interrupt bugfix (Andy Gospodarek ) [353281]
  - [ppc] kexec/kdump kernel hung on Power5+ and Power6 (Scott Moser ) [245346]


author: Don Zickus <dzickus@redhat.com> [2.6.18-54.el5]
changelog:
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [229882] {CVE-2006-6921}
  - [alsa] Convert snd-page-alloc proc file to use seq_file (Jerome Marchand ) [297771] {CVE-2007-4571}
  - [x86] Fixes for the tick divider patch (Chris Lalancette ) [315471]
  - [mm] ia64: flush i-cache before set_pte (Luming Yu ) [253356]
  - [fs] jbd: wait for t_sync_datalist buffer to complete (Eric Sandeen ) [250537]
  - [audit] improper handling of audit_log_start return values (Eric Paris ) [335731]
  - [cifs] fix memory corruption due to bad error handling (Jeff Layton ) [336501]
  - [net] bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek ) [317331]


author: Don Zickus <dzickus@redhat.com> [2.6.18-53.el5]
changelog:
  - [GFS2] handle multiple demote requests (Wendy Cheng ) [295641]
  - [scsi] megaraid_sas: kabi fix for /proc entries (Chip Coldwell ) [323231]
  - [sound] allow creation of null parent devices (Brian Maly ) [323771]


author: Don Zickus <dzickus@redhat.com> [2.6.18-52.el5]
changelog:
  - [net] iwlwifi: avoid BUG_ON in tx cmd queue processing (John W. Linville ) [306831]
  - [GFS2] Get super block a different way (Steven Whitehouse ) [306621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-51.el5]
changelog:
  - [GFS2] dlm: schedule during recovery loops (David Teigland ) [250464]
  - Revert: [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]


author: Don Zickus <dzickus@redhat.com> [2.6.18-50.el5]
changelog:
  - Revert: [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [pata] enable IDE (siimage) DRAC4 (John Feeney ) [212391]
  - [GFS2] gfs2_writepage(s) workaround (Wendy Cheng ) [252392]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298381] {CVE-2007-4308}
  - [GFS2] Solve journaling/{release|invalidate}page issues (Steven Whitehouse ) [253008]
  - [x86_64] syscall vulnerability (Anton Arapov ) [297881] {CVE-2007-4573}
  - [GFS2] Fix i_cache stale entry (Wendy Cheng ) [253756]
  - [GFS2] deadlock running revolver load with lock_nolock (Benjamin Marzinski ) [288581]
  - [net] s2io: check for error_state in ISR (more) (Scott Moser ) [276871]


author: Don Zickus <dzickus@redhat.com> [2.6.18-49.el5]
changelog:
  - [sata] libata probing fixes and other cleanups (Jeff Garzik ) [260281]
  - [net] cxgb3: backport fixups and sysfs corrections (Andy Gospodarek ) [252243]


author: Don Zickus <dzickus@redhat.com> [2.6.18-48.el5]
changelog:
  - [net] s2io: check for error_state in ISR (Scott Moser ) [276871]
  - [fs] ext3: ensure do_split leaves enough free space in both blocks (Eric Sandeen ) [286501]
  - [kabi] whitelist GFS2 export symbols to allow driver updates (Jon Masters) [282901]
  - [gfs2] allow process to handle multiple flocks on a file (Abhijith Das ) [272021]
  - [gfs2] operations hang after mount--RESEND (Bob Peterson ) [276631]
  - [scsi] qlogic: fix nvram/vpd update memory corruptions (Marcus Barrow ) [260701]
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra) [251119] {CVE-2007-3848}
  - [gfs2] mount hung after recovery (Benjamin Marzinski ) [253089]
  - [GFS2] Move inode delete logic out of blocking_cb (Wendy Cheng ) [286821]
  - [dlm] Make dlm_sendd cond_resched more (Patrick Caulfield ) [250464]
  - [x86_64] fix 32-bit ptrace access to debug registers (Roland McGrath ) [247427]
  - [autofs4] fix deadlock during directory create (Ian Kent ) [253231]
  - [nfs] enable 'nosharecache' mounts fixes (Steve Dickson ) [243913]
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276011] {CVE-2007-3513}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275971] {CVE-2007-3105}


author: Don Zickus <dzickus@redhat.com> [2.6.18-47.el5]
changelog:
  - [ppc64] Fix SPU slb size and invalidation on hugepage faults (Scott Moser ) [285981]
  - [s390] qdio: Refresh buffer states for IQDIO Asynch output queue (Hans-Joachim Picht ) [222181]
  - [scsi] fusion: allow VMWare's emulator to work again (Chip Coldwell ) [279571]


author: Don Zickus <dzickus@redhat.com> [2.6.18-46.el5]
changelog:
  - [XEN] x86: 32-bit ASID mode hangs dom0 on AMD (Chris Lalancette ) [275371]
  - [scsi] megaraid_sas: intercept cmd timeout and throttle io (Chip Coldwell ) [245184 247581]
  - [s390] hypfs: inode corruption due to missing locking (Brad Hinson ) [254169]
  - [Xen] Allow 32-bit Xen to kdump >4G physical memory (Stephen C. Tweedie ) [251341]
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275991] {CVE-2007-3731}
  - [XEN] ia64: allocating with GFP_KERNEL in interrupt context fix (Josef Bacik ) [279141]


author: Don Zickus <dzickus@redhat.com> [2.6.18-45.el5]
changelog:
  - [XEN] Update spec file to provide specific xen ABI version (Stephen C. Tweedie ) [271981]
  - [scsi] qla2xxx: nvram/vpd updates produce soft lockups and system hangs (Marcus Barrow ) [260701]
  - [scsi] iscsi: borked kmalloc  (Mike Christie ) [255841]
  - [net] qla3xxx: Read iSCSI target disk fail (Marcus Barrow ) [246123]
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [252404]
  - [mm] madvise call to kernel loops forever (Konrad Rzeszutek ) [263281]


author: Don Zickus <dzickus@redhat.com> [2.6.18-44.el5]
changelog:
  - [misc] re-export some symbols as EXPORT_SYMBOL_GPL (Jon Masters ) [252377]
  - [xen] ia64: set NODES_SHIFT to 8 (Doug Chapman ) [254050]
  - [xen] Fix privcmd to remove nopage handler (Chris Lalancette ) [249409]
  - [xen] increase limits to boot on large ia64 platforms (Doug Chapman ) [254062]
  - [autofs] autofs4 - fix race between mount and expire (Ian Kent ) [236875]
  - [nfs] NFS4: closes and umounts are racing (Steve Dickson ) [245062]
  - [GFS2] Fix lock ordering of unlink (Steven Whitehouse ) [253609]
  - [openib] Fix two ipath controllers on same subnet (Doug Ledford ) [253005]
  - [net] tg3: update to fix suspend/resume problems (Andy Gospodarek ) [253988]
  - [GFS2] distributed mmap test cases deadlock (Benjamin Marzinski ) [248480]
  - [GFS2] Fix inode meta data corruption (Wendy Cheng ) [253590]
  - [GFS2] bad mount option causes panic with NULL superblock pointer (Abhijith Das ) [253921]
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253930]
  - [misc] Microphone stops working (John Feeney ) [240716]
  - [GFS2] glock dump dumps glocks for all file systems (Abhijith Das ) [253238]
  - [scsi] qla2xxx: disable MSI-X by default (Marcus Barrow ) [252410]


author: Don Zickus <dzickus@redhat.com> [2.6.18-42.el5]
changelog:
  - [GFS2] More problems unstuffing journaled files (Bob Peterson ) [252191]
  - [DLM] Reuse connections rather than freeing them (Patrick Caulfield ) [251179]
  - [ppc] EEH: better status string detection (Scott Moser ) [252405]
  - [scsi] cciss: set max command queue depth (Tomas Henzl ) [251167]
  - [audit] Stop multiple messages from being printed (Eric Paris ) [252358]
  - [scsi] uninitialized field in gdth.c (Chip Coldwell ) [245550]
  - [scsi] SATA RAID 150-4/6 do not support 64-bit DMA (Chip Coldwell ) [248327]
  - [gfs2] fix truncate panic (Wendy Cheng ) [251053]
  - [gfs2] panic after can't parse mount arguments  (Benjamin Marzinski ) [253289]
  - [fs] CIFS: fix deadlock in cifs_get_inode_info_unix (Jeff Layton ) [249394]
  - [sound] support ad1984 codec (Brian Maly ) [252373]
  - [scsi] fix iscsi write handling regression (Mike Christie ) [247827]
  - [ppc] Fix detection of PCI-e based devices (Doug Ledford ) [252085]
  - [gfs2] unstuff quota inode (Abhijith Das ) [250772]
  - [net] fix DLPAR remove of eHEA logical port (Scott Moser ) [251370]
  - [gfs2] hang when using a large sparse quota file (Abhijith Das ) [235299]
  - [x86_64] Fix MMIO config space quirks (Bhavana Nagendra ) [252397]
  - [misc] Convert cpu hotplug notifiers to use raw_notifier (Peter Zijlstra ) [238571]
  - [sound] fix panic in hda_codec (Brian Maly ) [251854]
  - [mm] separate mapped file and anonymous pages in show_mem() output. (Larry Woodman ) [252033]
  - [misc] Fix broken AltSysrq-F (Larry Woodman ) [251731]
  - [scsi] cciss: increase max sectors to 2048 (Tomas Henzl ) [248121]
  - Revert [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]


author: Don Zickus <dzickus@redhat.com> [2.6.18-40.el5]
changelog:
  - [net] s2io: update to driver version 2.0.25.1 (Andy Gospodarek ) [223033]
  - [XEN] ia64: use panic_notifier list (Kei Tokunaga ) [250456]
  - [XEN] ia64: support nvram (Kei Tokunaga ) [250203]
  - [XEN] Allow dom0 to boot with greater than 2 vcpus (Kei Tokunaga ) [250441]
  - [XEN] Fix MCE errors on AMD-V (Bhavana Nagendra ) [251435]
  - [XEN] set correct paging bit identifier when NP enabled (Chris Lalancette ) [250857]
  - [XEN] ia64: fix for hang when running gdb (Doug Chapman ) [246482]
  - [XEN] AMD-V fix for W2k3 guest w/ Nested paging (Bhavana Nagendra ) [250850]
  - [XEN] blktap tries to access beyond end of disk (Kei Tokunaga ) [247696]
  - [ia64] fsys_gettimeofday leaps days if it runs with nojitter (Luming Yu ) [250825]
  - [x86] Blacklist for HP DL585G2 and HP dc5700 (Tony Camuso ) [248186]
  - [misc] Missing critical phys_to_virt in lib/swiotlb.c (Anton Arapov ) [248102]
  - [mm] Prevent the stack growth into hugetlb reserved regions (Konrad Rzeszutek ) [247658]
  - [scsi] fix qla4xxx underrun and online handling (Mike Christie ) [242828]
  - [sound] Audio playback does not work (John Feeney ) [250269]
  - [XEN] ia64: allow guests to vga install (Jarod Wilson ) [249076]
  - [net] forcedeth: optimize the tx data path (Andy Gospodarek ) [252034]
  - [agp] 945/965GME: bridge id, bug fix, and cleanups (Geoff Gustafson ) [251166]
  - [net] tg3: pci ids missed during backport (Andy Gospodarek ) [245135]
  - [misc] workaround for qla2xxx vs xen swiotlb (Rik van Riel ) [219216]
  - [XEN] netfront: Avoid deref'ing skb after it is potentially freed. (Herbert Xu ) [251905]
  - [ia64] validate and remap mmap requests (Jarod Wilson ) [240006]
  - [ppc] DLPAR REMOVE I/O resource failed (Scott Moser ) [249617]
  - [XEN] ia64: Cannot use e100 and IDE controller (Kei Tokunaga ) [250454]
  - [wireless] iwlwifi: update to version 1.0.0 (John W. Linville ) [223560 250675]
  - [ppc] make eHCA driver use remap_4k_pfn in 64k kernel (Scott Moser ) [250496]
  - [audit] sub-tree signal handling fix (Alexander Viro ) [251232]
  - [audit] sub-tree memory leaks (Alexander Viro ) [251160]
  - [audit] sub-tree cleanups (Alexander Viro ) [248416]
  - [GFS2] invalid metadata block (Bob Peterson ) [248176]
  - [XEN] use xencons=xvc by default on non-x86 (Aron Griffis ) [249100]
  - [misc] i915_dma: fix batch buffer security bit for i965 chipsets (Aristeu Rozanski ) [251188] {CVE-2007-3851}
  - [Xen] Fix restore path for 5.1 PV guests (Chris Lalancette ) [250420]
  - [x86] Support mobile processors in fid/did to frequency conversion (Bhavana Nagendra ) [250833]
  - [dlm] fix basts for granted PR waiting CW (David Teigland ) [248439]
  - [scsi] PCI shutdown for cciss driver (Chip Coldwell ) [248728]
  - [scssi] CCISS support for P700m (Chip Coldwell ) [248735]
  - [net] forcedeth: fix nic poll (Herbert Xu ) [245191]
  - [ppc] 4k page mapping support for userspace 	in 64k kernels (Scott Moser ) [250144]
  - [net] tg3: small update for kdump fix (Andy Gospodarek ) [239782]
  - [ppc] Cope with PCI host bridge I/O window not starting at 0 (Scott Moser ) [242937]
  - [ata]: Add additional device IDs for SB700 (Prarit Bhargava ) [248109]
  - [fs] - fix VFAT compat ioctls on 64-bit systems (Eric Sandeen ) [250666] {CVE-2007-2878}
  - [fs] - Move msdos compat ioctl to msdos dir (Eric Sandeen ) [250666]


author: Don Zickus <dzickus@redhat.com> [2.6.18-39.el5]
changelog:
  - [net] e1000: add support for Bolton NICs (Bruce Allan ) [251221]
  - [net] e1000: add support for HP Mezzanine cards (Bruce Allan ) [251214]
  - [net] igb: initial support for igb netdriver (Andy Gospodarek ) [244758]
  - [net] e1000e: initial support for e1000e netdriver (Andy Gospodarek ) [240086]


author: Don Zickus <dzickus@redhat.com> [2.6.18-38.el5]
changelog:
  - [ppc] No Boot/Hang response for PCI-E errors (Scott Moser ) [249667]
  - [GFS2] Reduce number of gfs2_scand processes to one (Steven Whitehouse ) [249905]
  - [scsi] Adaptec: Add SC-58300 HBA PCI ID (Konrad Rzeszutek ) [249275]
  - [GFS2] Fix bug relating to inherit_jdata flag on inodes (Steven Whitehouse ) [248576]
  - [ppc] Disable PCI-e completion timeouts on I/O Adapters (Scott Moser ) [232004]
  - [x86] Fix tscsync frequency transitions (Bhavana Nagendra ) [245082]
  - [CIFS] respect umask when unix extensions are enabled (Jeff Layton ) [246667]
  - [CIFS] fix signing sec= mount options (Jeff Layton ) [246595]
  - [XEN] netloop: Do not clobber cloned skb page frags (Herbert Xu ) [249683]


author: Don Zickus <dzickus@redhat.com> [2.6.18-37.el5]
changelog:
  - [net] Using mac80211 in ad-hoc mode can result in a kernel panic (John W. Linville ) [223558]
  - [ppc] Axon memory does not handle double bit errors (Scott Moser ) [249910]
  - [xen] x86: HV workaround for invalid PAE PTE clears (Chris Lalancette ) [234375]
  - [scsi] Update stex driver (Jeff Garzik ) [241074]
  - [scsi] cciss: Re-add missing kmalloc (Prarit Bhargava ) [249104]
  - [GFS2] Fix an oops in the glock dumping code (Steven Whitehouse ) [248479]
  - [GFS2] locksmith/revolver deadlocks (Steven Whitehouse ) [249406]
  - [xen] race loading xenblk.ko and scanning for LVM partitions (Richard Jones ) [247265]


author: Don Zickus <dzickus@redhat.com> [2.6.18-36.el5]
changelog:
  - [NFS] Re-enable force umount (Steve Dickson ) [244949]
  - [sata] regression in support for third party modules (Jeff Garzik ) [248382]
  - [utrace] set zombie leader to EXIT_DEAD before release_task (Roland McGrath ) [248621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-35.el5]
changelog:
  - [XEN] fix time going backwards in gettimeofday (Rik van Riel ) [245761]
  - [GFS2] soft lockup in rgblk_search (Bob Peterson ) [246114]
  - [DLM] fix NULL reference in send_ls_not_ready (David Teigland ) [248187]
  - [DLM] Clear othercon pointers when a connection is closed (David Teigland ) [220538]


author: Don Zickus <dzickus@redhat.com> [2.6.18-34.el5]
changelog:
  - [wireless] iwlwifi: add driver (John W. Linville ) [223560]
  - [XEN] make crashkernel=foo@16m work (Gerd Hoffmann ) [243880]
  - [XEN] ia64: HV built with crash_debug=y does not boot on NUMA machine (Kei Tokunaga ) [247843]
  - [edac] allow edac to panic with memory corruption on non-kdump kernels (Don Zickus ) [237950]
  - [GFS2] Mounted file system won't suspend (Steven Whitehouse ) [192082]
  - [GFS2] soft lockup detected in databuf_lo_before_commit (Bob Peterson ) [245832]
  - [sata] Add Hitachi HDS7250SASUN500G 0621KTAWSD to NCQ blacklist (Prarit Bhargava ) [247627]
  - [PCI] unable to reserve mem region on module reload (Scott Moser ) [247701 247400]
  - [PPC] eHEA driver can cause kernel panic on recv of VLAN packets (Scott Moser ) [243009]
  - [PPC] Fix 64K pages with kexec on native hash table (Scott Moser ) [242550]
  - Reverts: Mambo driver on ppc64 [208320]


author: Don Zickus <dzickus@redhat.com> [2.6.18-33.el5]
changelog:
  - [XEN] ia64: Windows guest cannot boot with debug mode (Kei Tokunaga ) [245668]
  - [XEN] ia64: SMP Windows guest boot fails sometimes (Kei Tokunaga ) [243870]
  - [XEN] ia64: Dom0 boot fails on NUMA hardware (Kei Tokunaga ) [245275]
  - [XEN] ia64: Windows guest sometimes panic by incorrect ld4.s emulation (Kei Tokunaga ) [243865]
  - [XEN] ia64: boot 46 GuestOS makes Dom0 hang (Kei Tokunaga ) [245667]
  - [XEN] ia64: HVM guest hangs on vcpu migration (Kei Tokunaga ) [233971]
  - [XEN] ia64: Cannot create guest domain due to rid problem (Kei Tokunaga ) [242040]
  - [XEN] ia64: HVM domain creation panics if xenheap is not enough. (Kei Tokunaga ) [240108]
  - [XEN] ia64: DomU panics by save/restore (Kei Tokunaga ) [243866]
  - [XEN] ia64: Guest OS hangs on IPF montetito (Kei Tokunaga ) [245637]
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [245186]
  - [xen] Windows HVM guest image migration causes blue screen (Bhavana Nagendra ) [245169]
  - [xen] ia64: enable blktap driver (Jarod Wilson ) [216293]
  - [scsi] check portstates before invoking target scan (David Milburn ) [246023]
  - [nfs] NFSd oops when exporting krb5p mount (Steve Dickson ) [247120]
  - [misc] Overflow in CAPI subsystem (Anton Arapov ) [231072] {CVE-2007-1217}
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245892] {CVE-2007-3380}
  - [dm] allow invalid snapshots to be activated (Milan Broz ) [244215]
  - [gfs2] inode size inconsistency (Wendy Cheng ) [243136]
  - [gfs2] Remove i_mode passing from NFS File Handle (Wendy Cheng ) [243136]
  - [gfs2] Obtaining no_formal_ino from directory entry (Wendy Cheng ) [243136]
  - [gfs2] EIO error from gfs2_block_truncate_page (Wendy Cheng ) [243136]
  - [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]
  - [GFS2] igrab of inode in wrong state (Steven Whitehouse ) [245646]
  - [audit] subtree watching cleanups (Alexander Viro ) [182624]


author: Don Zickus <dzickus@redhat.com> [2.6.18-32.el5]
changelog:
  - [ppc64] Data buffer miscompare (Konrad Rzeszutek ) [245332]
  - [xen] fix kexec/highmem failure (Gerd Hoffmann ) [245585]
  - [audit] kernel oops when audit disabled with files watched (Eric Paris ) [245164]
  - [scsi] Update aic94xx and libsas to 1.0.3 (Ryan Powers ) [224694]
  - [xen] ia64: kernel-xen panics when dom0_mem is specified(2) (Kei Tokunaga ) [217593]
  - [md] fix EIO on writes after log failure (Jonathan Brassow ) [236271]
  - [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [scsi] cciss driver updates (Tomas Henzl ) [222852]
  - [sata] combined mode regression fix (Jeff Garzik ) [245052]
  - Reverts: [audit] protect low memory from user mmap operations (Eric Paris ) [233021]


author: Don Zickus <dzickus@redhat.com> [2.6.18-31.el5]
changelog:
  - [firewire] New stack technology preview (Jay Fenlason ) [182183]
  - [xen] kdump/kexec support (Gerd Hoffmann ) [212843]
  - [xen] Add AMD-V support for domain live migration (Chris Lalancette ) [222131]
  - [GFS2] assertion failure after writing to journaled file, umount (Bob Peterson ) [243899]
  - [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]
  - [agp] Fix AMD-64 AGP aperture validation (Bhavana Nagendra ) [236826]
  - [x86_64] C-state divisor not functioning correctly  (Bhavana Nagendra ) [235404]
  - [i2c] SMBus does not work on ATI/AMD SB700 chipset (Bhavana Nagendra ) [244150]
  - [ide] Cannot find IDE device with ATI/AMD SB700 (Bhavana Nagendra ) [244150]
  - [pci] PCI-X/PCI-Express read control interface (Bhavana Nagendra ) [234335]
  - [pata] IDE hotplug support for Promise pata_pdc2027x (Scott Moser ) [184774]


author: Don Zickus <dzickus@redhat.com> [2.6.18-30.el5]
changelog:
  - [md] add dm rdac hardware handler (Mike Christie ) [184635]
  - [sound]  ALSA update (1.0.14) (Brian Maly ) [227671 240713 223133 238004 223142 244672]
  - [xen] : AMD's ASID implementation  (Bhavana Nagendra ) [242932]
  - [x86_64] Fix casting issue in tick divider patch (Prarit Bhargava ) [244861]
  - [fs] setuid program unable to read own /proc/pid/maps file (Konrad Rzeszutek ) [221173]
  - [x86_64] Fixes system panic during boot up with no memory in Node 0 (Bhavana Nagendra ) [218641]
  - [nfs] closes and umounts are racing.  (Steve Dickson ) [225515]
  - [security] allow NFS nohide and SELinux to work together (Eric Paris ) [219837]
  - [ia64] Altix ACPI support (Greg Edwards ) [223577]
  - [net] ixgb: update to driver version 1.0.126-k2 (Bruce Allan ) [223380]
  - [net] Update netxen_nic driver to version 3.x.x (Konrad Rzeszutek ) [244711]
  - [misc] utrace update (Roland McGrath ) [229886 228397 217809 210693]
  - [misc] disable pnpacpi on IBM x460 (Brian Maly ) [243730]
  - [gfs2] posix lock fixes (David Teigland ) [243195]
  - [gfs2] panic in unlink (Steven Whitehouse ) [239737]
  - [input] i8042_interrupt() race can deliver bytes swapped to serio_interrupt() (Markus Armbruster ) [240860]
  - [s390] qdio: system hang with zfcp in case of adapter problems (Jan Glauber ) [241298]
  - [net] Fix tx_checksum flag bug in qla3xxx driver (Marcus Barrow ) [243724]
  - [openib] Update OFED code to 1.2 (Doug Ledford ) [225581]
  - [openib] kernel backports for OFED 1.2 update (Doug Ledford ) [225581]
  - [ppc64] donate cycles from dedicated cpu (Scott Moser ) [242762]
  - [scsi] RAID1 goes 'read-only' after resync (Chip Coldwell ) [231040]
  - [md] move fn call that could block outside spinlock (Jonathan Brassow ) [242069]
  - [fs] FUSE: Minor vfs change (Eric Sandeen ) [193720]
  - [net] s2io: Native Support for PCI Error Recovery (Scott Moser ) [228052]
  - [xen] x86_64: Fix FS/GS registers for VT bootup (Rik van Riel ) [224671]
  - [misc] Add RHEL version info to version.h (Konrad Rzeszutek ) [232534]
  - Revert: [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - Revert: [x86_64] Set CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=n (Konrad Rzeszutek ) [222035]
  - Revert: [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]


author: Don Zickus <dzickus@redhat.com> [2.6.18-29.el5]
changelog:
  - [xen] Expand VNIF number per guest domain to over four (Kei Tokunaga ) [223908]
  - [xen] change interface version for 3.1 (Kei Tokunaga ) [242989]
  - [xen] ia64: Fix PV-on-HVM driver (Kei Tokunaga ) [242144]
  - [xen] ia64: use generic swiotlb.h header (Kei Tokunaga ) [242138]
  - [xen] ia64: xm save/restore does not work (Kei Tokunaga ) [240858]
  - [xen] ia64: Skip MCA setup on domU (Kei Tokunaga ) [242143]
  - [xen] ia64: Cannot measure process time accurately (Kei Tokunaga ) [240107]
  - [xen] Support new xm command: xm trigger (Kei Tokunaga ) [242140]
  - [xen] ia64: Fix for irq_desc() missing in new upstream (Kei Tokunaga ) [242137]
  - [xen] ia64: Set IRQ_PER_CPU status on percpu IRQs (Kei Tokunaga ) [242136]
  - [xen] ia64: improve performance of system call (Kei Tokunaga ) 
  - [xen] ia64: para domain vmcore does not work under crash (Kei Tokunaga ) [224047]
  - [xen] ia64: kernel-xen panics when dom0_mem=4194304 is specified (Kei Tokunaga ) [217593]
  - [xen] ia64: evtchn_callback fix and clean (Kei Tokunaga ) [242126]
  - [xen] ia64: changed foreign domain page mapping semantic (Kei Tokunaga ) [242779]
  - [xen] Change to new interrupt deliver mechanism (Kei Tokunaga ) [242125]
  - [xen] ia64: Uncorrectable error makes hypervisor hung (MCA  support) (Kei Tokunaga ) [237549]
  - [xen] Xen0 can not startX in tiger4 (Kei Tokunaga ) [215536]
  - [xen] ia64: Fix xm mem-set hypercall on IA64 (Kei Tokunaga ) [241976]
  - [xen] ia64: Fix HVM interrupts on IPF (Kei Tokunaga ) [242124]
  - [xen] save/restore fix (Gerd Hoffmann ) [222128]
  - [xen] blkback/blktap: fix id type (Gerd Hoffmann ) [222128]
  - [xen] xen: blktap race #2 (Gerd Hoffmann ) [222128]
  - [xen] blktap: race fix #1 (Gerd Hoffmann ) [222128]
  - [xen] blktap: cleanups. (Gerd Hoffmann ) [242122]
  - [xen] blktap: kill bogous flush (Gerd Hoffmann ) [222128]
  - [xen] binmodal drivers: block backends (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, blkfront driver (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, pvfb frontend (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, protocol header (Gerd Hoffmann ) [222128]


author: Don Zickus <dzickus@redhat.com> [2.6.18-28.el5]
changelog:
  - [net] netxen: initial support for NetXen 10GbE NIC (Andy Gospodarek ) [231724]
  - [net] cxgb3: initial support for Chelsio T3 card (Andy Gospodarek ) [222453]
  - [drm] agpgart and drm support for bearlake graphics (Geoff Gustafson ) [229091]
  - [acpi] acpi_prt list incomplete (Kimball Murray ) [214439]
  - [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - [x86_64] Fix TSC reporting for processors with constant TSC (Bhavana Nagendra ) [236821]
  - [pci] irqbalance causes oops during PCI removal (Kimball Murray ) [242517]
  - [net] Allow packet drops during IPSec larval state resolution (Vince Worthington ) [240902]
  - [net] bcm43xx: backport from 2.6.22-rc1 (John W. Linville ) [213761]
  - [net] softmac: updates from 2.6.21 (John W. Linville ) [240354]
  - [net] e1000: update to driver version 7.3.20-k2 (Andy Gospodarek ) [212298]
  - [net] bnx2: update to driver version 1.5.11 (Andy Gospodarek ) [225350]
  - [net] ipw2[12]00: backports from 2.6.22-rc1 (John W. Linville ) [240868]
  - [net] b44 ethernet driver update (Jeff Garzik ) [244133]
  - [net] sky2: update to version 1.14 from 2.6.21 (John W. Linville ) [223631]
  - [net] forcedeth: update to driver version 0.60 (Andy Gospodarek ) [221941]
  - [net] bonding: update to driver version 3.1.2 (Andy Gospodarek ) [210577]
  - [net] tg3: update to driver version 3.77 (Andy Gospodarek ) [225466 228125]
  - [PPC] Update of spidernet to 2.0.A for Cell (Scott Moser ) [227612]
  - [scsi] SPI DV fixup (Chip Coldwell ) [237889]
  - [audit] audit when opening existing messege queue (Eric Paris ) [223919 ]
  - [audit] audit=0 does not disable all audit messages (Eric Paris ) [231371]
  - [net] mac80211 inclusion (John W. Linville ) [214982 223558]


author: Don Zickus <dzickus@redhat.com> [2.6.18-26.el5]
changelog:
  - [x86_64] sparsemem memmap allocation above 4G (grgustaf) [227426]
  - [net] ip_conntrack_sctp: fix remotely triggerable panic (Don Howard ) [243244] {CVE-2007-2876}
  - [usb] Strange URBs and running out IOMMU (Pete Zaitcev ) [230427]
  - [audit] broken class-based syscall audit (Eric Paris ) [239887]
  - [audit] allow audit filtering on bit & operations (Eric Paris ) [232967]
  - [x86_64] Add L3 cache support to some processors (Bhavana Nagendra ) [236835]
  - [x86_64] disable mmconf for HP dc5700 Microtower (Prarit Bhargava ) [219389]
  - [misc] cpuset information leak (Prarit Bhargava ) [242811] {CVE-2007-2875}
  - [audit] stop softlockup messages when loading selinux policy (Eric Paris ) [231392]
  - [fs] nfs does not support leases, send correct error (Peter Staubach ) [216750]
  - [dlm] variable allocation types (David Teigland ) [237558]
  - [GFS2] Journaled data issues (Steven Whitehouse ) [238162]
  - [ipsec] Make XFRM_ACQ_EXPIRES proc-tunable (Vince Worthington ) [241798]
  - [GFS2] Missing lost inode recovery code (Steven Whitehouse ) [201012]
  - [GFS2] Can't mount GFS2 file system on AoE device (Robert Peterson ) [243131]
  - [scsi] update aacraid driver to 1.1.5-2437 (Chip Coldwell ) [197337]
  - [scsi] cciss: ignore results from unsent commands on kexec boot (Neil Horman ) [239520]
  - [scsi] update iscsi_tcp driver (Mike Christie ) [227739]
  - [x86_64] Fix regression in kexec (Neil Horman ) [242648]
  - [x86] rtc support for HPET legacy replacement mode (Brian Maly ) [220196]
  - [scsi] megaraid_sas update (Chip Coldwell ) [225221]
  - [fs] fix ext2 overflows on filesystems > 8T (Eric Sandeen ) [237188]
  - [x86] MCE thermal throttling (Brian Maly ) [224187]
  - [audit] protect low memory from user mmap operations (Eric Paris ) [233021]
  - [scsi] Add FC link speeds. (Tom Coughlan ) [231888]
  - [pci] I/O space mismatch with P64H2 (Geoff Gustafson ) [220511]
  - [scsi] omnibus lpfc driver update (Chip Coldwell ) [227416]
  - [scsi] Update qla2xxx firmware (Marcus Barrow ) [242534]
  - [ide] Serverworks data corruptor (Alan Cox ) [222653]
  - [scsi] update qla4xxx driver (Mike Christie ) [224435 223087 224203]
  - [scsi] update iser driver (Mike Christie ) [234352]
  - [dlm] fix debugfs ref counting problem (Josef Bacik ) [242807]
  - [md] rh_in_sync should be allowed to block (Jonathan Brassow ) [236624]
  - [md] unconditionalize log flush (Jonathan Brassow ) [235039]
  - [GFS2] Add nanosecond timestamp feature  (Steven Whitehouse ) [216890]
  - [GFS2] quota/statfs sign problem and cleanup _host structures (Steven Whitehouse ) [239686]
  - [scsi] mpt adds DID_BUS_BUSY host status on scsi BUSY status (Chip Coldwell ) [228108]
  - [scsi] fix for slow DVD drive (Chip Coldwell ) [240910]
  - [scsi] update MPT Fusion to 3.04.04 (Chip Coldwell ) [225177]
  - [GFS2] Fix calculation for spare log blocks with smaller block sizes (Steven Whitehouse ) [240435]
  - [gfs2] quotas non-functional (Abhijith Das ) [201011]
  - [gfs2] Cleanup inode number handling (Abhijith Das ) [242584]


author: Don Zickus <dzickus@redhat.com> [2.6.18-25.el5]
changelog:
  - [s390] fix possible reboot hang on s390 (Jan Glauber ) [222181]
  - [cifs] Update CIFS to version 1.48aRH (Jeff Layton ) [238597]
  - [audit] Make audit config immutable in kernel (Eric Paris ) [223530]
  - [dio] invalidate clean pages before dio write (Jeff Moyer ) [232715]
  - [nfs] fixed oops in symlink code.  (Steve Dickson ) [218718]
  - [mm] shared page table for hugetlb  page (Larry Woodman ) [222753]
  - [nfs] Numerous oops, memory leaks and hangs found in upstream (Steve Dickson ) [242975]
  - [misc] include taskstats.h in kernel-headers package (Don Zickus ) [230648]
  - [ide] packet command error when installing rpm (John Feeney ) [229701]
  - [dasd] export DASD status to userspace (Chris Snook ) [242681]
  - [dasd] prevent dasd from flooding the console (Jan Glauber ) [229590]
  - [s390] ifenslave -c causes kernel panic with VLAN and OSA Layer2 (Jan Glauber ) [219826]
  - [s390] sclp race condition (Jan Glauber ) [230598]
  - [audit] SAD/SPD flush have no security check (Eric Paris ) [233387]
  - [audit] Add space in IPv6 xfrm audit record (Eric Paris ) [232524]
  - [audit] Match proto when searching for larval SA (Eric Paris ) [234485]
  - [audit] pfkey_spdget does not audit xrfm policy changes (Eric Paris ) [229720]
  - [audit] collect audit inode information for all f*xattr commands (Eric Paris ) [229094]
  - [audit] Initialize audit record sid information to zero (Eric Paris ) [223918]
  - [audit] xfrm_add_sa_expire return code error (Eric Paris ) [230620]
  - [net] NetLabel: Verify sensitivity level has a valid CIPSO mapping (Eric Paris ) [230255]
  - [audit] pfkey_delete and xfrm_del_sa audit hooks wrong (Eric Paris ) [229732]
  - [block] Fix NULL bio crash in loop worker thread (Eric Sandeen ) [236880]
  - [x86]: Add Greyhound performance counter events (Bhavana Nagendra ) [222126]
  - [dio] clean up completion phase of direct_io_worker() (Jeff Moyer ) [242116]
  - [audit] add subtrees support (Alexander Viro ) [182624]
  - [audit] AVC_PATH handling (Alexander Viro ) [224620]
  - [audit] auditing ptrace (Alexander Viro ) [228384]
  - [x86_64] Fix a cast in the lost ticks code (Prarit Bhargava ) [241781]
  - [PPC64] DMA 4GB boundary protection  (Scott Moser ) [239569]
  - [PPC64] MSI support for PCI-E (Scott Moser ) [228081]
  - [ppc64] Enable DLPAR support for HEA (Scott Moser ) [237858]
  - [ppc64] update ehea driver to latest version. (Janice M. Girouard ) [234225]
  - [PPC64] spufs move to sdk2.1 (Scott Moser ) [242763]
  - [PPC64] Cell SPE and Performance (Scott Moser ) [228128]
  - [cpufreq] Identifies correct number of processors in powernow-k8 (Bhavana Nagendra ) [229716]


author: Don Zickus <dzickus@redhat.com> [2.6.18-24.el5]
changelog:
  - [ipmi] update to latest (Peter Martuccelli ) [241928 212415 231436]
  - [sata] super-jumbo update (Jeff Garzik ) [203781]
  - [sata] move SATA drivers to drivers/ata (Jeff Garzik ) [203781]


author: Don Zickus <dzickus@redhat.com> [2.6.18-23.el5]
changelog:
  - [dlm] Allow unprivileged users to create the default lockspace (Patrick Caulfield ) [241902]
  - [dlm] fix queue_work oops (David Teigland ) [242070]
  - [dlm] misc device removed when lockspace removal fails (David Teigland ) [241817]
  - [dlm] dumping master locks (David Teigland ) [241821]
  - [dlm] canceling deadlocked lock (David Teigland ) [238898]
  - [dlm] wait for config check during join (David Teigland ) [206520]
  - [dlm] fix new_lockspace error exit (David Teigland ) [241819]
  - [dlm] cancel in conversion deadlock (David Teigland ) [238898]
  - [dlm] add lock timeouts and time warning (David Teigland ) [238898]
  - [dlm] block scand during recovery (David Teigland ) [238898]
  - [dlm] consolidate transport protocols (David Teigland ) [219799]
  - [audit] log targets of signals (Alexander Viro ) [228366]


author: Don Zickus <dzickus@redhat.com> [2.6.18-22.el5]
changelog:
  - [scsi] Add kernel support for Areca RAID controllers (Tomas Henzl ) [205897]
  - [s390] runtime switch for qdio performance statistics (Jan Glauber ) [228048]
  - [nfs] enable 'nosharecache' mounts. (Steve Dickson ) [209964]
  - [scsi] scsi_error.c - Fix lost EH commands (Chip Coldwell ) [227586]
  - [s390] zfcp driver fixes (Jan Glauber ) [232002 232006]
  - [misc] synclink_gt: fix init error handling  (Eric Sandeen) [210389]
  - [edac] k8_edac: don't panic on PCC check (Aristeu Rozanski ) [237950]
  - [mm] Prevent OOM-kill of unkillable children or siblings (Larry Woodman ) [222492]
  - [aio] fix buggy put_ioctx call in aio_complete (Jeff Moyer ) [219497]
  - [scsi] 3ware 9650SE not recognized by updated  3w-9xxx module (Chip Coldwell ) [223465]
  - [scsi] megaraid: update version reported by  MEGAIOC_QDRVRVER (Chip Coldwell ) [237151]
  - [nfs] NFS/NLM - Fix double free in __nlm_async_call (Steve Dickson ) [223248]
  - [ppc] EEH is improperly enabled for some Power4  systems (Scott Moser ) [225481]
  - [net] ixgb: update to 1.0.109 to add pci error recovery (Andy Gospodarek ) [211380]
  - [ppc] Fix xmon=off and cleanup xmon initialization (Scott Moser ) [229593]
  - [mm] reduce MADV_DONTNEED contention (Rik van Riel ) [237677]
  - [x86_64] wall time is not compensated for lost timer ticks (Konrad Rzeszutek ) [232666]
  - [PPC] handle <.symbol> lookup for kprobes (Scott Moser ) [238465]
  - [pci] Dynamic Add and Remove of PCI-E (Konrad Rzeszutek ) [227727]
  - [PPC64] Support for ibm,power-off-ups RTAS  call (Scott Moser ) [184681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-21.el5]
changelog:
  - [net] Re-enable and update the qla3xxx networking driver (Konrad Rzeszutek ) [225200]
  - [misc] xen: kill sys_{lock,unlock} dependency on microcode driver (Gerd Hoffmann ) [219652]
  - [acpi] Update ibm_acpi module (Konrad Rzeszutek ) [231176]
  - [nfs] NFSv4: referrals support (Steve Dickson ) [230602]
  - [misc] random: fix error in entropy extraction (Aristeu Rozanski ) [241718] {CVE-2007-2453}
  - [net] fix DoS in PPPOE (Neil Horman ) [239581] {CVE-2007-2525}
  - [GFS2] Fixes related to gfs2_grow (Steven Whitehouse ) [235430]
  - [gfs2] Shrink size of struct gdlm_lock (Steven Whitehouse ) [240013]
  - [misc] Bluetooth setsockopt() information leaks (Don Howard ) [234292] {CVE-2007-1353}
  - [net] RPC/krb5 memory leak (Steve Dickson ) [223248]
  - [mm] BUG_ON in shmem_writepage() is triggered (Michal Schmidt ) [234447]
  - [nfs] protocol V3 :write procedure patch (Peter Staubach ) [228854]
  - [fs] invalid segmentation violation during exec (Dave Anderson ) [230339]
  - [md] dm io: fix panic on large request (Milan Broz ) [240751]
  - [nfs] RPC: when downsizing response buffer, account for checksum (Jeff Layton ) [238687]
  - [md] incorrect parameter to dm_io causes read failures (Jonathan Brassow ) [241006]
  - [ia64] eliminate potential deadlock on XPC disconnects (George Beshers ) [223837]
  - [md] dm crypt: fix possible data corruptions (Milan Broz ) [241272]
  - [ia64] SN correctly update smp_affinity mask (luyu ) [223867]
  - [mm]fix OOM wrongly killing processes through MPOL_BIND (Larry Woodman ) [222491]
  - [nfs] add nordirplus option to NFS client  (Steve Dickson ) [240126]
  - [autofs] fix panic on mount fail - missing autofs module (Ian Kent ) [240307]
  - [scsi] Fix bogus warnings from SB600 DVD drive (Prarit Bhargava ) [238570]
  - [acpi] _CID support for PCI Root Bridge  detection. (Luming Yu ) [230742]
  - [ia64] platform_kernel_launch_event is a noop in non-SN kernel (Luming Yu ) [232657]
  - [net] high TCP latency with small packets (Thomas Graf ) [229908]
  - [misc] xen: fix microcode driver for new firmware (Gerd Hoffmann ) [237434]
  - [GFS2] Bring GFS2 uptodate (Steven Whitehouse ) [239777]
  - [scsi] update for new SAS RAID  (Scott Moser ) [228538]
  - [md] dm: allow offline devices in table (Milan Broz ) [239655]
  - [md] dm: fix suspend error path (Milan Broz ) [239645]
  - [md] dm multipath: rr path order is inverted (Milan Broz ) [239643]
  - [net] RPC: simplify data check, remove BUG_ON (Jeff Layton ) [237374]
  - [mm] VM scalability issues (Larry Woodman ) [238901 238902 238904 238905]
  - [misc] lockdep: annotate DECLARE_WAIT_QUEUE_HEAD (Chip Coldwell ) [209539]
  - [mm] memory-less node support (Prarit Bhargava ) [228564]


author: Don Zickus <dzickus@redhat.com> [2.6.18-19.el5]
changelog:
  - [ia64] MCA/INIT issues with printk/messages/console (Kei Tokunaga ) [219158]
  - [ia64] FPSWA exceptions take excessive system time  (Erik Jacobson ) [220416]
  - [GFS2] flush the glock completely in inode_go_sync (Steven Whitehouse ) [231910]
  - [GFS2] mmap problems with distributed test cases (Steven Whitehouse ) [236087]
  - [GFS2] deadlock running d_rwdirectlarge (Steven Whitehouse ) [236069]
  - [GFS2] panic if you try to rm -rf the lost+found directory (Steven Whitehouse ) [232107]
  - [misc] Fix softlockup warnings during sysrq-t (Prarit Bhargava ) [206366]
  - [pty] race could lead to double idr index free (Aristeu Rozanski ) [230500]
  - [v4l] use __GFP_DMA32 in videobuf_vm_nopage (Aristeu Rozanski ) [221478]
  - [scsi] Update QLogic qla2xxx driver to 8.01.07-k6 (Marcus Barrow ) [225249]
  - [mm] OOM killer breaks s390 CMM (Jan Glauber ) [217968]
  - [fs] stack overflow with non-4k page size (Dave Anderson ) [231312]
  - [scsi] scsi_transport_spi: sense buffer size error (Chip Coldwell ) [237889]
  - [ppc64] EEH PCI error recovery  support (Scott Moser ) [207968]
  - [mm] optimize kill_bdev() (Peter Zijlstra ) [232359]
  - [x86] tell sysrq-m to poke the nmi watchdog (Konrad Rzeszutek ) [229563]
  - [x86] Use CPUID calls to check for mce (Bhavana Nagendra ) [222123]
  - [x86] Fix to nmi to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Fix CPUID calls to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Greyhound cpuinfo output cleanups (Bhavana Nagendra ) [222124]
  - [misc] intel-rng: fix deadlock in smp_call_function (Prarit Bhargava ) [227696]
  - [net] ixgb: fix early TSO completion (Bruce Allan ) [213642]


author: Don Zickus <dzickus@redhat.com> [2.6.18-18.el5]
changelog:
  - [e1000] fix watchdog timeout panics (Andy Gospodarek ) [217483]
  - [net] ipv6_fl_socklist is inadvertently shared (David S. Miller ) [233088] {CVE-2007-1592}
  - [dlm] expose dlm_config_info fields in configfs (David Teigland ) [239040]
  - [dlm] add config entry to enable log_debug (David Teigland ) [239040]
  - [dlm] rename dlm_config_info fields (David Teigland ) [239040]
  - [mm] NULL current->mm dereference in grab_swap_token causes oops (Jerome Marchand ) [231639]
  - [net] Various NULL pointer dereferences in netfilter code (Thomas Graf ) [234287] {CVE-2007-1496}
  - [net] IPv6 fragments bypass in nf_conntrack netfilter code (Thomas Graf ) [234288] {CVE-2007-1497}
  - [net] disallow RH0 by default (Thomas Graf ) [238065] {CVE-2007-2242}
  - [net] fib_semantics.c out of bounds check (Thomas Graf ) [236386]
  - [misc] getcpu system call (luyu ) [233046]
  - [ipc] bounds checking for shmmax (Anton Arapov ) [231168]
  - [x86_64] GATT pages must be uncacheable (Chip Coldwell ) [238709]
  - [gfs2] does a mutex_lock instead of a mutex_unlock (Josef Whiter ) [229376]
  - [dm] failures when creating many snapshots (Milan Broz ) [211516 211525]
  - [dm] kmirrord: deadlock when dirty log on mirror itself (Milan Broz ) [218068]
  - [security] Supress SELinux printk for messages users don't care about (Eric Paris ) [229874]
  - [serial] panic in check_modem_status on 8250 (Norm Murray ) [238394]
  - [net] Fix user OOPS'able bug in FIB netlink (David S. Miller ) [237913]
  - [misc] EFI: only warn on pre-1.00 version (Michal Schmidt ) [223282]
  - [autofs4] fix race between mount and expire (Ian Kent ) [236875]
  - [GFS2] gfs2_delete_inode: 13 (Steven Whitehouse ) [224480]
  - [misc] k8temp (Florian La Roche ) [236205]


author: Don Zickus <dzickus@redhat.com> [2.6.18-17.el5]
changelog:
  - [x86_64] Calgary IOMMU cleanups and fixes (Konrad Rzeszutek ) [222035]
  - [GFS2] lockdump support (Robert Peterson ) [228540]
  - [net] kernel-headers: missing include of types.h (Neil Horman ) [233934]
  - [mm] unmapping memory range disturbs page referenced state (Peter Zijlstra ) [232359]
  - [IA64] Fix stack layout issues when using ulimit -s (Jarod Wilson ) [234576]
  - [CIFS] Windows server bad domain name null terminator fix (Jeff Layton ) [224359]
  - [x86_64] Fix misconfigured K8 north bridge (Bhavana Nagendra ) [236759]
  - [gfs2] use log_error before LM_OUT_ERROR (David Teigland ) [234338]
  - [dlm] fix mode munging (David Teigland ) [234086]
  - [dlm] change lkid format (David Teigland ) [237126]
  - [dlm] interface for purge (David Teigland ) [237125]
  - [dlm] add orphan purging code (David Teigland ) [237125]
  - [dlm] split create_message function (David Teigland ) [237125]
  - [dlm] overlapping cancel and unlock (David Teigland ) [216113]
  - [dlm] zero new user lvbs (David Teigland ) [237124]
  - [PPC64] Handle Power6 partition modes (2) (Janice M. Girouard ) [228091]
  - [ppc64] Handle Power6 partition modes (Janice M. Girouard ) [228091]
  - [mm] oom kills current process on memoryless node. (Larry Woodman ) [222491]
  - [x86] Tick Divider (Alan Cox ) [215403]
  - [GFS2] hangs waiting for semaphore (Steven Whitehouse ) [217356]
  - [GFS2] incorrect flushing of rgrps (Steven Whitehouse ) [230143]
  - [GFS2] Clean up of glock code (Steven Whitehouse ) [235349]
  - [net] IPsec: panic when large security contexts in ACQUIRE (James Morris ) [235475]
  - [ppc64] Cell Platform Base kernel support (Janice M. Girouard ) [228099]
  - [s390] fix dasd reservations (Chris Snook ) [230171]
  - [x86] Fix invalid write to nmi MSR (Prarit Bhargava ) [221671]


author: Don Zickus <dzickus@redhat.com> [2.6.18-16.el5]
changelog:
  - [s390] crypto driver update (Jan Glauber ) [228049]
  - [NMI] change watchdog timeout to 30 seconds (Larry Woodman ) [229563]
  - [ppc64] allow vmsplice to work in 32-bit mode on ppc64 (Don Zickus ) [235184]
  - [nfs] fix multiple dentries pointing to same directory inode (Steve Dickson ) [208862]
  - [ipc] mqueue nested locking annotation (Eric Sandeen ) 
  - [net] expand in-kernel socket api (Neil Horman ) [213287]
  - [XEN] Better fix for netfront_tx_slot_available(). (Herbert Xu ) [224558]
  - [fs] make static counters in new_inode and iunique be 32 bits (Jeff Layton ) [215356]
  - [ppc64] remove BUG_ON() in hugetlb_get_unmapped_area() (Larry Woodman ) [222926]
  - [dm] stalls on resume if noflush is used (Milan Broz ) [221330]
  - [misc]: AMD/ATI SB600 SMBus support (Prarit Bhargava ) [232000]
  - [mm] make do_brk() correctly return EINVAL for ppc64.   (Larry Woodman ) [224261]
  - [agp] agpgart fixes and new pci ids (Geoff Gustafson ) [227391]
  - [net] xfrm_policy delete security check misplaced (Eric Paris ) [228557]
  - [x86]: Fix mtrr MODPOST warnings (Prarit Bhargava ) [226854]
  - [elevator] move clearing of unplug flag  earlier (Eric Sandeen ) [225435]
  - [net] stop leak in flow cache code (Eric Paris ) [229528]
  - [ide] SB600 ide only has one channel (Prarit Bhargava ) [227908]
  - [scsi] ata_task_ioctl should return ata registers (David Milburn ) [218553]
  - [pcie]: Remove PCIE warning for devices with no irq pin (Prarit Bhargava ) [219318]
  - [x86] ICH9 device IDs  (Geoff Gustafson ) [223097]
  - [mm] Some db2 operations cause system to hang (Michal Schmidt ) [222031]
  - [security] invalidate flow cache entries after selinux policy reload (Eric Paris ) [229527]
  - [net] wait for IPSEC SA resolution in socket contexts. (Eric Paris ) [225328]
  - [net] clean up xfrm_audit_log interface (Eric Paris ) [228422]
  - [ipv6]: Fix routing regression. (David S. Miller ) [222122]
  - [tux] date overflow fix (Jason Baron ) [231561]
  - [cifs] recognize when a file is no longer read-only (Jeff Layton ) [231657]
  - [module] MODULE_FIRMWARE support (Jon Masters ) [233494]
  - [misc] some apps cannot use IPC msgsnd/msgrcv larger than 64K (Jerome Marchand ) [232012]
  - [xen] Fix netfront teardown (Glauber de Oliveira Costa ) [219563]


author: Don Zickus <dzickus@redhat.com> [2.6.18-15.el5]
changelog:
  - [x86_64] enable calgary support for x86_64 system (Neil Horman ) [221593]
  - [s390] pseudo random number generator (Jan Glauber ) [184809]
  - [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]
  - [GFS2] honor the noalloc flag during block allocation (Steven Whitehouse ) [235346]
  - [GFS2] resolve deadlock when writing and accessing a file (Steven Whitehouse ) [231380]
  - [s390] dump on panic support (Jan Glauber ) [228050, 227841]
  - [pci] include devices in NIC ordering patch and fix whitespace (Andy Gospodarek ) [226902]
  - [ext3] handle orphan inodes vs. readonly snapshots (Eric Sandeen ) [231553]
  - [fs] - Fix error handling in check_partition(), again (Eric Sandeen ) [231518]
  - [ipv6] /proc/net/anycast6 unbalanced inet6_dev refcnt (Andy Gospodarek ) [231310]
  - [s390] kprobes breaks BUG_ON (Jan Glauber ) [231155]
  - [edac] add support for revision F processors (Aristeu Rozanski ) [202622]
  - [scsi] blacklist touch-up (Chip Coldwell ) [232074]
  - [gfs2] remove an incorrect assert (Steven Whitehouse ) [229873]
  - [gfs2] inconsistent inode number lookups (Wendy Cheng ) [229395]
  - [gfs2] NFS cause recursive locking (Wendy Cheng ) [229349]
  - [gfs2] NFS v2 mount failure (Wendy Cheng ) [229345]
  - [s390] direct yield for spinlocks on s390 (Jan Glauber ) [228869]
  - [s390] crypto support for 3592 tape devices (Jan Glauber ) [228035]
  - [cpu-hotplug] make and module insertion script cause a panic (Konrad Rzeszutek ) [217583]
  - [s390] runtime switch for dasd erp logging (Jan Glauber ) [228034]
  - [suspend] Fix x86_64/relocatable kernel/swsusp breakage. (Nigel Cunningham ) [215954]
  - [ext3] buffer: memorder fix (Eric Sandeen ) [225172]
  - [scsi] fix incorrect last scatg length (David Milburn ) [219838]
  - [usb]: airprime driver corrupts ppp session for EVDO card (Jon Masters ) [222443]
  - [misc] Fix race in efi variable delete code (Prarit Bhargava ) [223796]
  - [ext3] return ENOENT from ext3_link when racing with unlink (Eric Sandeen ) [219650]
  - [scsi] Missing PCI Device in aic79xx driver (Chip Coldwell ) [220603]
  - [acpi]: Fix ACPI PCI root bridge querying time (Prarit Bhargava ) [218799]
  - [kdump]: Simple bounds checking for crashkernel args (Prarit Bhargava ) [222314]
  - [misc] longer CD timeout (Erik Jacobson ) [222362]
  - [nfs] Disabling protocols when starting NFS server is broken. (Steve Dickson ) [220894]
  - [s390] page_mkclean causes data corruption on s390 (Jan Glauber ) [235373]


author: Don Zickus <dzickus@redhat.com> [2.6.18-14.el5]
changelog:
  - [ppc] reduce num_pmcs to 6 for Power6 (Janice M. Girouard ) [220114]
  - [sched] remove __cpuinitdata from cpu_isolated_map (Jeff Burke ) [220069]
  - [gfs2] corrrectly display revalidated directories (Robert Peterson ) [222302]
  - [gfs2] fix softlockups (Josef Whiter ) [229080]
  - [gfs2] occasional panic in gfs2_unlink while running bonnie++ (Steven Whitehouse ) [229831]
  - [gfs2] Shrink gfs2 in-core inode size (Steven Whitehouse ) [230693]
  - [GFS2] Fix list corruption in lops.c (Steven Whitehouse ) [226994]
  - [gfs2] fix missing unlock_page() (Steven Whitehouse ) [224686]
  - [dlm] make lock_dlm drop_count tunable in sysfs (David Teigland ) [224460]
  - [dlm] increase default lock limit (David Teigland ) [224460]
  - [dlm] can miss clearing resend flag (David Teigland ) [223522]
  - [dlm] fix master recovery (David Teigland ) [222307]
  - [dlm] fix user unlocking (David Teigland ) [219388]
  - [dlm] saved dlm message can be dropped (David Teigland ) [223102]


author: Don Zickus <dzickus@redhat.com> [2.6.18-13.el5]
changelog:
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [213313]
  - [mm] Gdb does not accurately output the backtrace. (Dave Anderson ) [222826]
  - [net] IPV6 security holes in ipv6_sockglue.c - 2 (David S. Miller ) [231517] {CVE-2007-1000}
  - [net] IPV6 security holes in ipv6_sockglue.c (David S. Miller ) [231668] {CVE-2007-1388}
  - [audit] GFP_KERNEL allocations in non-blocking context fix (Alexander Viro ) [228409]
  - [NFS] version 2 over UDP is not working properly (Steve Dickson ) [227718]
  - [x86] Fix various data declarations in cyrix.c (Prarit Bhargava ) [226855]
  - [sound] Fix various data declarations in sound/drivers (Prarit Bhargava ) [227839]
  - [mm] remove __initdata from initkmem_list3 (Prarit Bhargava ) [226865]


author: Don Zickus <dzickus@redhat.com> [2.6.18-12.el5]
changelog:
  - [xen] move xen sources out of kernel-xen-devel (Don Zickus ) [212968]
  - [net] __devinit & __devexit cleanups for de2104x driver (Prarit Bhargava ) [228736]
  - [video] Change rivafb_remove to __deviexit (Prarit Bhargava ) [227838]
  - [x86] Reorganize smp_alternatives sections in vmlinuz (Prarit Bhargava ) [226876]
  - [atm] Fix __initdata declarations in drivers/atm/he.c (Prarit Bhargava ) [227830]
  - [video] Change nvidiafb_remove to __devexit (Prarit Bhargava ) [227837]
  - [usb] __init to __devinit in isp116x_probe (Prarit Bhargava ) [227836]
  - [rtc] __init to __devinit in rtc drivers' probe functions (Prarit Bhargava ) [227834]
  - [x86] remove __init from sysenter_setup (Prarit Bhargava ) [226852]
  - [irq] remove __init from noirqdebug_setup (Prarit Bhargava ) [226851]
  - [x86] remove __init from efi_get_time (Prarit Bhargava ) [226849]
  - [x86] Change __init to __cpuinit data in SMP code (Prarit Bhargava ) [226859]
  - [x86] apic probe __init fixes (Prarit Bhargava ) [226875]
  - [x86] fix apci related MODPOST warnings (Prarit Bhargava ) [226845]
  - [serial] change serial8250_console_setup to __init (Prarit Bhargava ) [226869]
  - [init] Break init() into two parts to avoid MODPOST warnings (Prarit Bhargava ) [226829]
  - [x86] declare functions __init to avoid  compile warnings (Prarit Bhargava ) [226858]
  - [x86] cpu hotplug/smpboot misc MODPOST warning fixes (Prarit Bhargava ) [226826]
  - [x86] Fix boot_params and .pci_fixup warnings (Prarit Bhargava ) [226824 226874]
  - [xen] Enable Xen booting on machines with > 64G (Chris Lalancette ) [220592]
  - [utrace] exploit and unkillable cpu fixes (Roland McGrath ) [229886]
  - [pcmcia] buffer overflow in omnikey cardman driver    (Don Howard ) [227478]


author: Don Zickus <dzickus@redhat.com> [2.6.18-10.el5]
changelog:
  - [cpufreq] Remove __initdata from tscsync (Prarit Bhargava ) [223017]
  - [security] Fix key serial number collision problem (David Howells ) [227497] {CVE-2007-0006}
  - [fs] core dump of read-only binarys (Don Howard ) [228886] {CVE-2007-0958}


author: Don Zickus <dzickus@redhat.com> [2.6.18-5.el5]
changelog:
  - x86: /proc/mtrr interface MTRR bug fix (Bhavana Nagendra ) [223821]
  - Revert: bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - ia64: Check for TIO errors on shub2 Altix (George Beshers ) [223529]
  - nfs: Unable to mount more than 1 Secure NFS mount (Steve Dickson ) [220649]


author: Don Zickus <dzickus@redhat.com> [2.6.18-4.el5]
changelog:
  - IPSec: incorrect return code in xfrm_policy_lookup (Eric Paris ) [218591]
  - more kabi whitelist updates (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-3.el5]
changelog:
  - scsi: fix EX8350 panic (stex.ko) (Jun'ichi Nick Nomura ) [220783]
  - Audit: Mask upper bits on 32 bit syscall auditing on ppc64 (Eric Paris ) [213276]


author: Don Zickus <dzickus@redhat.com> [2.6.18-2.el5]
changelog:
  - mm: handle mapping of memory without a struct page backing it (Erik Jacobson ) [221029]
  - rng: check to see if bios locked device (Erik Jacobson ) [221029]
  - sata: support legacy IDE mode of SB600 SATA (Bhavana Nagendra ) [221636]
  - xen: quick fix for Cannot allocate memory (Steven Rostedt ) [217056]
  - XEN: Register PIT handlers to the correct domain (Herbert Xu ) [222520]
  - SATA AHCI: support AHCI class code (Jeff Garzik ) [222674]
  - fix vdso in core dumps (Roland McGrath ) [211744]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3014.el5]
changelog:
  - XEN: Replace inappropriate domain_crash_synchronous use (Herbert Xu ) [221239]
  - SATA timeout boot message  (Peter Martuccelli ) [222108]
  - Netlabel: off by one and init bug in netlbl_cipsov4_add_common (Eric Paris ) [221648]
  - NetLabel: fix locking issues (Eric Paris ) [221504]
  - mm: fix statistics in vmscan.c (Peter Zijlstra ) [222030]
  - usb: Sun/AMI virtual floppy issue (Pete Zaitcev ) [219628]
  - bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - Xen: Make HVM hypercall table NR_hypercalls entries big. (Herbert Xu ) [221818]
  - xen: Add PACKET_AUXDATA cmsg (Herbert Xu ) [219681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3002.el5]
changelog:
  - ppc64: initialization of hotplug memory fixes (Janice M. Girouard ) [220065]
  - GFS2: return error for NULL inode (Russell Cattelan ) [217008]
  - scsi: prevent sym53c1510 from claiming the wrong pci id (Chip Coldwell ) [218623]
  - net: Disable the qla3xxx network driver. (Tom Coughlan ) [221328]
  - xen: Disable CONFIG_IDE_GENERIC (Jarod Wilson ) [220099]
  - sound: add support for STAC9205 codec (John Feeney ) [219494]
  - ipv6: panic when bringing up multiple interfaces (Thomas Graf ) [218039]
  - XFRM Audit: correct xfrm auditing panic (Eric Paris ) [222033]
  - edac: fix /proc/bus/pci/devices to allow X to start (John Feeney ) [219288]
  - x86_64: clear_kernel_mapping: mapping has been split. will leak memory. (Larry Woodman ) [218543]
  - xen: >4G guest fix (Steven Rostedt ) [217770]
  -  fs: listxattr syscall can corrupt user space programs (Eric Sandeen ) [220119]
  - CacheFiles: Fix object struct recycling (David Howells ) [215599]
  - Remove capability requirement to reading cap-bound (Eric Paris ) [219230]
  - disable building ppc64iseries (Don Zickus) [219185]
  - update: utrace fixes (Roland McGrath) [214405 215052 216150 209118]
  - PPC config file changes for IPMI and DTLK (Peter Martuccelli ) [210214]
  - update: Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - net: qla3xxx panics when eth1 is sending pings (Konrad Rzeszutek ) [220246]
  - s390: inflate spinlock kabi (Jan Glauber ) [219871]
  - x86: Add panic on unrecovered NMI (Prarit Bhargava ) [220829]
  - ppc64: fix booting kdump env. w/maxcpus=1 on power5 (Jarod Wilson ) [207300]
  - netfilter: iptables stop fails because ip_conntrack cannot unload. (Thomas Graf ) [212839]
  - gfs: Fix gfs2_rename lock ordering (for local filesystem) (Wendy Cheng ) [221237]
  - GFS2: Fix ordering of page disposal vs. glock_dq (Steven Whitehouse ) [220117]
  - xen: fix nosegneg detection (Rik van Riel ) [220675]
  - mm: Fix for shmem_truncate_range() BUG_ON() (Larry Woodman ) [219821]
  - x86_64: enabling lockdep hangs the system (Don Zickus ) [221198]
  - dlm: change some log_error to log_debug (David Teigland ) [221326]
  - dlm: disable debugging output (David Teigland ) [221326]
  - fs: ext2_check_page denial of service (Eric Sandeen ) [217018]
  - CPEI - prevent relocating hotplug irqs (Kei Tokunaga ) [218520]
  - Networking: make inet->is_icsk assignment binary (Eric Paris ) [220482]
  - net: b44: phy reset problem that leads to link flap  (Neil Horman ) [216338]
  - autofs - fix panic on mount fail - missing autofs module update (Ian Kent ) [221118]
  - net: act_gact: division by zero (Thomas Graf ) [218348]
  - ppc64: Avoid panic when taking altivec exceptions from userspace. (David Woodhouse ) [220586]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2961.el5]
changelog:
  - new set of kabi whitelists (Jon Masters) [218682]
  - x86: remove unwinder patches from x86/x86_64 (Don Zickus ) [220238]
  - usb: disable ub and libusual (Pete Zaitcev ) [210026]
  - NetLabel: stricter configuration checking (Eric Paris ) [219393]
  - scsi: fix iscsi sense len handling (Mike Christie ) [217933]
  - Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - VM: Fix nasty and subtle race in shared mmap'ed page writeback (Eric Sandeen ) [220963]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - NFS: system stall on NFS stress under high memory  pressure (Steve Dickson ) [213137]
  - netfilter: IPv6/IP6Tables Vulnerabilities (Thomas Graf ) [220483]
  - acpi: increase ACPI_MAX_REFERENCE_COUNT (Doug Chapman ) [217741]
  - Race condition in mincore can cause ps -ef to hang (Doug Chapman ) [220480]
  - Call init_timer() for ISDN PPP CCP reset state timer (Marcel Holtmann ) [220163]
  - Race condition concerning VLAPIC interrupts (Bhavana Nagendra ) [213858]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2943.el5]
changelog:
  - CIFS: Explicitly set stat->blksize (Steve Dickson ) [210608]
  - FS-Cache: dueling read/write processes fix (Steve Dickson ) [212831]
  - xen: Use swiotlb mask for coherent mappings too (Herbert Xu ) [216472]
  - ia64: Kexec, Kdump on SGI IA64 NUMA machines fixes (George Beshers ) [219091]
  - splice : Must fully check for fifos (Don Zickus ) [214289]
  - Xen: Fix potential grant entry leaks on error (Herbert Xu ) [217993]
  - e1000: truncated TSO TCP header with 82544, workaround (Herbert Xu ) [206540]
  - scsi: fix bus reset in qla1280 driver (George Beshers ) [219819]
  - scsi: add qla4032 and fix some bugs (Mike Christie ) [213807]
  - XFRM: Config Change Auditing (Eric Paris ) [209520]
  - Xen: ia64 guest networking finally works (Jarod Wilson ) [218895]
  - scsi structs for future known features and fixes (Mike Christie ) [220458]
  - squashfs fixup (Steve Grubb ) [219534]
  - ppc64: DLPAR virtual CPU removal failure - cppr bits (Janice M. Girouard ) [218058]
  - ia64: allow HP ZX1 systems to initalize swiotlb in kdump (Neil Horman ) [220064]
  - export tasklist_lock (David Howells ) [207992]
  - gfs2: Initialization of security/acls (Steven Whitehouse ) [206126]
  - x86: handle _PSS object range corectly in speedstep-centrino (Brian Maly ) [211690]
  - GFS2 change nlink panic (Wendy Cheng ) [215088]
  - scsi: fix oops in iscsi packet transfer path (Mike Christie ) [215381]
  - Fix Emulex lpfc ioctl on PPC (Tom Coughlan ) [219194]
  - Xen: Fix agp on x86_64 under Xen (Stephen C. Tweedie ) [217715]
  - Emulex lpfc update to 8.1.10.2 (Tom Coughlan ) [218243]
  - bluetooth: Add packet size checks for CAPI messages (Marcel Holtmann ) [219139]
  - x86_64: create Calgary boot knob (Konrad Rzeszutek ) [220078]
  - cciss bugfixes (Tom Coughlan ) [185021]
  - ia64: Do not call SN_SAL_SET_CPU_NUMBER twice on cpu 0 on booting (Erik Jacobson ) [219722]
  - scsi: Empty /sys/class/scsi_host/hostX/config  file (Janice M. Girouard ) [210239]
  - refresh: Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - update: Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2910.el5]
changelog:
  - xen: Update xen paravirt framebuffer to upstream protocol (fixes) (Stephen C. Tweedie ) [218048]
  - xen: Update xen paravirt framebuffer to upstream protocol (Stephen C. Tweedie ) [218048]
  - nfs: disable Solaris NFS_ACL version 2  (Steve Dickson ) [215073]
  - xen: EXPORT_SYMBOL(zap_page_range) needs to be moved (Stephen C. Tweedie ) [218476]
  - ppc64: disable unused drivers that cause oops on insmod/rmmod (Janice M. Girouard ) [206658]
  - scsi: GoVault not accessible due to software reset. (Konrad Rzeszutek ) [215567]
  - GFS2 fix DIO deadlock (Steven Whitehouse ) [212627]
  - dlm: fix lost flags in stub replies (David Teigland ) [218525]
  - CacheFiles: Improve/Fix reference counting (David Howells ) [212844]
  - gfs2: Fails back to readpage() for stuffed files (Steven Whitehouse ) [218966]
  - gfs2: Use try locks in readpages (Steven Whitehouse ) [218966]
  - GFS2 Readpages fix (part 2) (Steven Whitehouse ) [218966]
  - gfs2: Readpages fix  (Steven Whitehouse ) [218966]
  - bonding: Don't release slaves when master is admin down (Herbert Xu ) [215887]
  - x86_64: fix execshield randomization for heap (Brian Maly ) [214548]
  - x86_64: check and enable NXbit support during resume (Vivek Goyal ) [215954]
  - GPL export truncate_complete_page (Eric Sandeen ) [216545]
  - mm: reject corrupt swapfiles earlier (Eric Sandeen ) [213118]
  - QLogic qla2xxx - add missing PCI device IDs (Tom Coughlan ) [219350]
  - mpt fusion bugfix and maintainability improvements (Tom Coughlan ) [213736]
  - scsi: make fc transport removal of target configurable (Mike Christie ) [215797]
  - gfs2: don't try to lockfs after shutdown (Steven Whitehouse ) [215962]
  - xen: emulation for accesses faulting on a page boundary (Stephen C. Tweedie ) [219275]
  - gfs2: dirent format compatible with gfs1 (Steven Whitehouse ) [219266]
  - gfs2: Fix size caclulation passed to the allocator. (Russell Cattelan ) [218950]
  - ia64: PAL_GET_PSTATE implementation (Prarit Bhargava ) [184896]
  - CacheFiles: Handle ENOSPC on create/mkdir better (David Howells) [212844]
  - connector: exessive unaligned access (Erik Jacobson ) [218882]
  - revert: Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2876.el5]
changelog:
  - touch softdog during oops (Dave Jones ) [218109]
  - selinux: allow quoted commas for certain catagories in context mounts (Eric Paris ) [211857]
  - xen: oprofile on Intel CORE (Glauber de Oliveira Costa ) [213964]
  - Xen: make ballooning work right (xen part) (Rik van Riel ) [212069]
  - Xen: make ballooning work right (Rik van Riel ) [212069]
  - Xen: HVM crashes on IA32e SMP (Glauber de Oliveira Costa ) [214774]
  - gfs2: Fix uninitialised variable (Steven Whitehouse ) [219212]
  - GFS2: Don't flush everything on fdatasync (Steven Whitehouse ) [218770]
  - Disable PCI mmconf and segmentation on HP xw9300/9400 (Bhavana Nagendra ) [219159]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - Fix time skew on Intel Core 2 processors (Prarit Bhargava ) [213050]
  - Xen : Fix for SMP Xen guest slow boot issue on AMD systems (Bhavana Nagendra ) [213138]
  - GFS2: fix mount failure (Josef Whiter ) [218327]
  - cramfs: fix zlib_inflate oops with corrupted image (Eric Sandeen ) [214705]
  - xen: Fix xen swiotlb for b44 module (xen part) (Stephen C. Tweedie ) [216472]
  - xen: Fix xen swiotlb for b44 module (Stephen C. Tweedie ) [216472]
  - scsi: fix stex_intr signature (Peter Zijlstra ) [219370]
  - GFS2: Fix recursive locking in gfs2_permission (Steven Whitehouse ) [218478]
  - GFS2: Fix recursive locking in gfs2_getattr (Steven Whitehouse ) [218479]
  - cifs: Fix mount failure when domain not specified (Steve Dickson ) [218322]
  - GFS2: Fix memory allocation in glock.c (Steven Whitehouse ) [204364]
  - gfs2: Fix journal flush problem (Steven Whitehouse ) [203705]
  - gfs2: Simplify glops functions (Steven Whitehouse ) [203705]
  - gfs2: Fix incorrect fs sync behaviour (Steven Whitehouse ) [203705]
  - fix check_partition routines to continue on errors (David Milburn ) [210234]
  - fix rescan_partitions to return errors properly (David Milburn ) [210234]
  - gfs2: Tidy up bmap & fix boundary bug (Steven Whitehouse ) [218780]
  - Fix bmap to map extents properly (Steven Whitehouse ) [218780]
  - ide-scsi/ide-cdrom module load race fix (Alan Cox ) [207248]
  - dlm: fix receive_request lvb copying (David Teigland ) [214595]
  - dlm: fix send_args lvb copying (David Teigland ) [214595]
  - device-mapper mirroring - fix sync status change (Jonathan Brassow ) [217582]
  - Xen: Copy shared data before verification (Herbert Xu ) [217992]
  - s390: common i/o layer fixes (Jan Glauber ) [217799]
  - Spurious interrups from ESB2 in native mode (Alan Cox ) [212060]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2839.el5]
changelog:
  - Xen: fix xen/ia64/vti panic when config sets maxmem (Aron Griffis ) [214161]
  - Xen: ia64 making it work (Aron Griffis ) [210637]
  - Xen: upstream patches to make Windows Vista work (Steven Rostedt) [214780]
  - enable PCI express hotplug driver (Kei Tokunaga ) [207203]
  - d80211: kABI pre-compatibility (John W. Linville ) [214982]
  - Xen: ia64 kernel unaligned access (Aron Griffis ) [212505]
  - Xen: getting ia64 working; kernel part (Aron Griffis) [210637]
  - Xen: Properly close block frontend on non-existant file (Glauber de Oliveira Costa ) [218037]
  - SHPCHP driver doesn't work if the system was under heavy load (Kei Tokunaga ) [215561]
  - SHPCHP driver doesn't work in poll mode (Kei Tokunaga) [211679]
  - pciehp: free_irq called twice (Kei Tokunaga ) [216940]
  - pciehp: pci_disable_msi() called to early (Kei Tokunaga ) [216939]
  - pciehp: parallel hotplug operations cause kernel panic (Kei Tokunaga ) [216935]
  - pciehp: info messages are confusing (Kei Tokunaga ) [216932]
  - pciehp: Trying to enable already enabled slot disables the slot (Kei Tokunaga ) [216930]
  - CacheFiles: cachefiles_write_page() shouldn't indicate error twice (David Howells) [204570]
  - IPMI - allow multiple Baseboard Management Centers (Konrad Rzeszutek ) [212572]
  - nfs - set correct mode during create operation (Peter Staubach ) [215011]
  - Xen: blkback: Fix potential grant entry leaks on error (Rik van Riel ) [218355]
  - Xen: blkback: Copy shared data before verification (Rik van Riel) [217994]
  - revert: Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2817.el5]
changelog:
  - Adding in a kabi_whitelist (Jon Masters) [218402]
  - Xen: AMD-V HVM fix for Windows hibernate (Bhavana Nagendra ) [217367]
  - Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]
  - NetLabel: bring current with upstream: cleanup/future work (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: performance (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: bugs (Eric Paris ) [218097]
  - TG3 support Broadcom 5756M/5756ME  Controller (John Feeney ) [213204]
  - tg3: BCM5752M crippled after reset (Andy Gospodarek ) [215765]
  - sata ata_piix map values (Geoff Gustafson ) [204684]
  - e1000: Reset all functions after a PCI error (Janice M. Girouard) [211694]
  - prevent /proc/meminfo's HugePages_Rsvd from going negative. (Larry Woodman ) [217910]
  - netlabel: disallow editing of ip options on packets with cipso options (Eric Paris ) [213062]
  - xen netback: Fix wrap to zero in transmit credit scheduler. (Herbert Xu ) [217574]
  - megaraid initialization fix for kdump (Jun'ichi Nick Nomura ) [208451]
  - HFS: return error code in case of error (Eric Paris ) [217009]
  - Xen: fix 2TB overflow in virtual disk driver (Rik van Riel ) [216556]
  - e1000: fix garbled e1000 stats (Neil Horman ) [213939]
  - dlm: use recovery seq number to discard old replies (David Teigland ) [215596]
  - dlm: resend lock during recovery if master not ready (David Teigland ) [215596]
  - dlm: check for incompatible protocol version (David Teigland ) [215596]
  - NetLabel: Do not send audit messages if audit is off (Eric Paris ) [216244]
  - selinux: give correct response to get_peercon() calls (Eric Paris ) [215006]
  - SELinux: Fix oops with non-mls policies (Eric Paris ) [214397]
  - Xen blkback: Fix first_sect check. (Rik van Riel ) [217995]
  - allow the highest frequency if bios think so. (Dave Jones ) [218106]
  - AGP corruption fixes. (Dave Jones ) [218107]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2789.el5]
changelog:
  - Xen: fix vcpu hotplug statistics (Rik van Riel ) [209534]
  - DLPAR and Hotplug not enabled (Janice M. Girouard ) [207732]
  - Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - e1000: add (2) device ids (Bruce Allan) [184864]
  - power6: illegal instruction errors during install (Janice M. Girouard) [216972]
  - update_flash is broken across PPC (Janice M. Girouard) [214690]
  - write failure on swapout could corrupt data (Peter Zijlstra) [216194]
  - IBM veth panic when buffer rolls over (Janice M. Girouard ) [214486]
  - Make the x86_64 boot gdt limit exact (Steven Rostedt ) [214736]
  - Xen: make netfront device permanent (Glauber de Oliveira Costa ) [216249]
  - lockdep: fix ide/proc interaction (Peter Zijlstra ) [210678]
  - Xen: fix iSCSI root oops on x86_64 xen domU (Rik van Riel ) [215581]
  - Fix flowi clobbering (Chris Lalancette ) [216944]
  - Enable netpoll/netconsole for ibmveth (Neil Horman ) [211246]
  - dlm: fix size of STATUS_REPLY message (David Teigland ) [215430]
  - dlm: fix add_requestqueue checking nodes list (David Teigland ) [214475]
  - dlm: don't accept replies to old recovery messages (David Teigland ) [215430]
  - x86_64: kdump mptable reservation fix  (Vivek Goyal ) [215417]
  - Add Raritan KVM USB dongle to the USB HID blacklist (John Feeney ) [211446]
  - Fix bogus warning in [un]lock_cpu_hotplug (Prarit Bhargava ) [211301]
  - Xen: Avoid touching the watchdog when gone for too long (Glauber de Oliveira Costa ) [216467]
  - add missing ctcmpc Makefile target (Jan Glauber ) [184608]
  - remove microcode size check for i386 (Geoff Gustafson ) [214798]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2769.el5]
changelog:
  - add the latest 2.6.18.4 security patches (Don Zickus) [217904]
  - revert: mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2767.el5]
changelog:
  - disable W1 config (Dave Jones ) [216176]
  - Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]
  - Xen: fix profiling (Rik van Riel ) [214886]
  - bnx2: update firmware to correct rx problem in promisc mode (Neil Horman ) [204534]
  - sound-hda: fix typo in patch_realtek.c (John W. Linville) [210691]
  - Fix sys_move_pages when a NULL node list is passed. (Dave Jones ) [214295]
  - proc: readdir race fix (Nobuhiro Tachino ) [211682]
  - device mapper: /sys/block/dm-* entries remain after removal (Milan Broz ) [214905]
  - Fix 64k page table problems on ppc specific ehca driver (Doug Ledford ) [199765]
  - configfs: mutex_lock_nested() fix (Eric Sandeen ) [211506]
  - CIFS: Explicitly set stat->blksize (Eric Sandeen ) [214607]
  - Compute checksum properly in netpoll_send_udp (Chris Lalancette ) [214542]
  - Noisy stack trace by memory hotplug on memory busy system (Kei Tokunaga ) [213066]
  - catch blocks beyond pagecache limit in __getblk_slow (Eric Sandeen ) [214419]
  - xen privcmd: Range-check hypercall index. (Herbert Xu ) [213178]
  - strange messages around booting and acpi-memory-hotplug (Kei Tokunaga) [212231]
  - Fix panic in CPU hotplug on ia64 (Prarit Bhargava ) [213455]
  - Fix spinlock bad magic when removing xennet device (Chris Lalancette ) [211684]
  - netlabel: various error checking cleanups (Eric Paris ) [210425]
  - mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]
  - Fix autofs creating bad dentries in NFS mount (David Howells ) [216178]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2747.el5]
changelog:
  - Set HZ to 1000 for kernel and 250 for Xen (Don Zickus) [198594] 
  - Custom Diagnostics kernel module fails to load on RHEL5 (Janice Girouard) [213020] 
  - kernel: FS-Cache: error from cache: -105 (2nd part) (Don Zickus) [214678]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2746.el5]
changelog:
  - configure XPC as a loadable kernel module instead of static (Erik Jacobson) [213903] 
  - kernel BUG at drivers/xen/core/evtchn.c:482! (Glauber de Oliveira Costa) [210672] 
  - IPv6 MRT: 'lockdep' annotation is missing? (Thomas Graf) [209313] 
  - sort PCI device list breadth-first (John Feeney) [209484] 
  - reenable xen pae >4GB patch (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2744.el5]
changelog:
  - Kernel Panic on Initial boot of guest (Steven Rostedt) [211633] 
  - kernel unable to read partition (device busy) (Peter Zijlstra) [212191] 
  - QEMU always crashes (Don Zickus) [212625] 
  - kernel: FS-Cache: error from cache: -105 (Steve Dickson) [212831] 
  - DLM oops in kref_put when umounting (Patrick Caulfield) [213005] 
  - gfs umount hung, message size too big (Patrick Caulfield) [213289] 
  - CPU hotplug doesn't work trying to BSP offline (Keiichiro Tokunaga) [213324] 
  - status messages ping-pong between unmounted nodes (Dave Teigland) [213682] 
  - res_recover_locks_count not reset when recover_locks is aborted (Dave Teigland) [213684] 
  - disable CONFIG_ISA (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2740.el5]
changelog:
  - Remove support for ipw3945 driver (Don Zickus) [195534] 
  - acpiphp will not load due to unknown symbols (Prarit Bhargava) [209506] 
  - Can not install rhel5 b1 on ipr dasd. (Janice Girouard) [210851] 
  - Can't make SCTP connections between Xen guests (Don Zickus) [212550] 
  - eHEA update to support 64K pages for Power6 (Janice Girouard) [212041] 
  - Failure to boot second kernel on HP hardware (Don Zickus) [212578] 
  - dlm deadlock during simultaneous mount attempts (Dave Teigland) [211914] 
  - CMT-eligible ipw2200/2915 driver (John W. Linville) [184862] 
  - CVE-2006-5174 copy_from_user information leak on s390 (Jan Glauber) [213568] 
  - NFSv4: fs_locations support (Steve Dickson) [212352] 
  - [IPv6] irrelevant rules break ipv6 routing. (Thomas Graf) [209354] 
  - [IPv6] blackhole and prohibit rule types not working (Thomas Graf) [210216] 
  - [KEXEC] bad offset in icache instruction crashes Montecito systems (Jarod Wilson) [212643] 
  - assertion "FALSE" failed in gfs/glock.c (Dave Teigland) [211622] 
  - I/O DLPAR and Hotplug not enabled in RHEL5 (Janice Girouard) [207732]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2739.el5]
changelog:
  - SHPCHP driver doesn't work (Keiichiro Tokunaga) [210478] 
  - ext3/jbd panic (Eric Sandeen) [209647] 
  - Oops in nfs_cancel_commit_list (Jeff Layton) [210679] 
  - kernel Soft lockup detected on corrupted ext3 filesystem (Eric Sandeen) [212053] 
  - CIFS doesn't work (Steve Dickson) [211070]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2737.el5]
changelog:
  - Grant table operations unsuitable for guest domains (Rik van Riel) [210489] 
  - AMD-V HVM windows guest boot menu timer issue (Steven Rostedt) [209001] 
  - iflags.h is not upstream (Steve Whitehouse) [211583] 
  - ACPIPHP doesn't work (Keiichiro Tokunaga) [209677] 
  - IBMVSCSI does not correctly reenable the CRQ (Janice Girouard) [211304] 
  - librdmacm-utils failures (Doug Ledford) [210711] 
  - Badness in debug_mutex_unlock at kernel/mutex-debug.c:80 (Janice Girouard) [208500] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173, 211604]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2736.el5]
changelog:
  - Can't unload gnbd module, 128 references (Peter Zijlstra) [211905]
  - ddruid does not recognize dasd drives (Peter Zijlstra) [210030]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2732.el5]
changelog:
  - possible recursive locking detected: cachefilesd (David Howells) [204615] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173] 
  - nfs handled rpc error incorrectly (Steve Dickson) [207040] 
  - cachefiles: inode count maintance (Steve Dickson) [209434] 
  - mkinitrd: iSCSI root requires crc32c module (Mike Christie) [210232] 
  - implemented sysrq-w to dump all cpus (Larry Woodman) 
  - enable panic_on_oops (Dave Anderson) 
  - re-enable x86_64 stack unwinder fixes (Don Zickus) 
  - disable kernel debug flags (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2728.el5]
changelog:
  - Update FC transport and Emulex lpfc Fibre Channel Driver (Tom Coughlan) [207551] 
  - NFSv4 using memory after its freed fix (Steve Dickson) [206996] 
  - GFS2 dirents are 'unkown' type (Steve Whitehouse) [210493] 
  - Cachefs double unlock (Steve Dickson) [210701] 
  - tty locking cleanup (Prarit Bhargava) [210249] 
  - ibmveth fails in kdump boot (Janice Girouard - IBM on-site partner) [199129] 
  - Kpobes backport from 2.6.19-rc1 (Anil S Keshavamurthy) [210555] 
  - Ia64 - kprobe opcode must reside on 16 bytes alignment (Anil S Keshavamurthy) [210552] 
  - GFS2 forgets to unmap pages (Steve Whitehouse) [207764] 
  - DIO needs to avoid using page cache (Jeffrey Moyer) [207061] 
  - megaraid_sas: update (Chip Coldwell) [209463] 
  - NFS data corruption (Steve Dickson) [210071] 
  - page align bss sections on x86_64 (Vivek Goyal) [210499] 
  - blkbk/netbk modules don't load (Aron Griffis) [210070] 
  - blktap does not build on ia64 (Aron Griffis) [208895] 
  - blkbk/netbk modules don't load (Rik van Riel) [202971] 
  - patches from xen-ia64-unstable (Rik van Riel) [210637] 
  - Xen version strings need to reflect exact Red Hat build number (Stephen Tweedie) [211003] 
  - updated to 2.6.18.1 stable series (Don Zickus) 
  - updated execshield patch (Don Zickus) 
  - revert CONFIG_PCI_CALGARY_IOMMU config (Don Zickus) 
  - disable CONFIG_MAMBO (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2727.el5]
changelog:
  - I/O errors with dm-multipath when adding new path (Alasdair Kergon) [169302] 
  - Kdump on i386 fails - Second kernel panics (Vivek Goyal) [207598] 
  - patch to qla4xxx for supporting ioctl module (Mike Christie) [207356] 
  - lockdep fixes (Peter Zijlstra) [208165 209135 204767] 
  - printk cleanup (Dave Jones) 
  - spec file cleanup (Dave Jones, Bill Nottingham) 
  - gfs-dlm fix (Patrick Caulfield) 
  - find-provides fix (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2726.el5]
changelog:
  - need to disable all cpu frequency scaling drivers in Xen kernel (Rik van Riel) [210336 208942] 
  - radeon hangs DMA when CONFIG_CALGARY_IOMMU is build in kernel. (Konrad Rzeszutek) [210380] 
  - Got Call Trace message when remove veth module (Janice Girouard) [208938] 
  - cannot generate kABI deps unless kernel is installed (Jon Masters) [203926] 
  - ctcmpc driver (Jan Glauber) [184608] 
  - PTRACE_DETACH doesn't deliver signals under utrace. (Aristeu S. Rozanski F.) [207674] 
  - SG_SCATTER_SZ causing Oops during scsi disk microcode update (Doug Ledford) [207146] 
  - ia64 kprobe fixes (David Smith)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2725.el5]
changelog:
  - Duplicate dput in sysfs_update_file can cause a panic. (Prarit Bhargava) [209454] 
  - Lock issue with 2.6.18-1.2702.el5, NetworkManager and ipw3945 (John W. Linville) [208890] 
  - cpqarray module fails to detect arrays (Chip Coldwell) [205653] 
  - stex.c driver for Promise SuperTrak EX is missing (Jeff Garzik) [209179] 
  - NetLabel does not audit configuration changes (Eric Paris) [208456] 
  - NetLabel has a race problem in the cache (Eric Paris) [209324] 
  - kernel/lockdep.c:1814/trace_hardirqs_on() (Not tainted) for APM (Peter Zijlstra) [209480] 
  -  correct netlabel secid for packets without a known label (Eric Paris) [210032] 
  - IPSec information leak with labeled networking (Eric Paris) [209171] 
  - NetLabel hot-add memory confict pre-beta2 kenrel x86_64 (Konrad Rzeszutek) [208445] 
  - NFS data corruption (Steve Dickson) [210071] 
  - kernel dm multipath: ioctl support (Alasdair Kergon) [207575] 
  - kernel dm: fix alloc_dev error path (Alasdair Kergon) [209660] 
  - kernel dm snapshot: fix invalidation ENOMEM (Alasdair Kergon) [209661] 
  - kernel dm snapshot: chunk_size parameter is not required after creation (Alasdair Kergon) [209840] 
  - kernel dm snapshot: fix metadata error handling (Alasdair Kergon) [209842] 
  - kernel dm snapshot: fix metadata writing when suspending (Alasdair Kergon) [209843] 
  - kernel dm: full snapshot removal attempt causes a seg fault/kernel bug (Alasdair Kergon) [204796] 
  - dm mirror: remove trailing space from table (Alasdair Kergon) [209848] 
  - kernel dm: add uevent change event on resume (Alasdair Kergon) [209849] 
  - kernel dm crypt: Provide a mechanism to clear key while device suspended (Milan Broz) [185471] 
  - kernel dm: use private biosets to avoid deadlock under memory pressure (Alasdair Kergon) [209851] 
  - kernel dm: add feature flags to structures for future kABI compatibility (Alasdair Kergon) [208543] 
  - kernel dm: application visible I/O errors with dm-multipath and queue_if_no_path when adding new path (Alasdair Kergon) [169302] 
  - refresh ia64-kexec-kdump patch (Don Zickus) 
  - update exec-shield patch (Don Zickus) 
  - revert x86 unwinder fixes (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2722.el5]
changelog:
  - update utrace patch to fix s390 build problems
  - ia64 hotswap cpu patch fixes to compile under xen
  - ia64 export fixes


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2718.el5]
changelog:
  - Audit Filtering on PPID for = and != is inverted (Eric Paris) [206425] 
  - Adding Hitachi SANRISE entries into SCSI white list (Chip Coldwell) [206532] 
  - forward port of SCSI blacklist from RHEL4 (Chip Coldwell) [208256] 
  - Need to add ALSA support for Broadwater platform (John W. Linville) [184855] 
  - /proc/<pid>/smaps doesn't give any data (Alexander Viro) [208589] 
  - ACPI based CPU hotplug causes kernel panic (Keiichiro Tokunaga) [208487] 
  - New infiniband 12x power driver opensourced from IBM (Janice Girouard) [184791] 
  - iscsi oops when connection creation fails (Mike Christie) [209006] 
  - nommconf work-around still needed for AMD chipsets (Jim Baker) [207396] 
  - ProPack XPMEM exported symbols (Greg Edwards) [206215] 
  - PCI error recovery bug in e100 and e1000 cards (John W. Linville) [208187] 
  - / on raid fails to boot post-install system (Jan Glauber) [196943] 
  - auditctl fails to reject malformed ARCH filter (Eric Paris) [206427] 
  - oom-killer updates (Larry Woodman) [208583] 
  - NFS is revalidating directory entries too often (Steve Dickson) [205454] 
  - kernel-xen cannot reboot (Stephen Tweedie) [209841] 
  - Unsupported FS's in RHEL 5 Beta 1 (Don Zickus) [206486]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2715.el5]
changelog:
  - RDTSCP Support (Bhavana Nagendra) [185057] 
  - s390 kprobe on larl instruction crashes system (Jan Glauber) [205738] 
  - single stepping is broken when kprobes is configured (Jan Glauber) [205739] 
  - autofs kernel patches resulting from Connectathon testing (Ian Kent) [206952] 
  - Include the qla3xxx networking driver (Konrad Rzeszutek) [208182] 
  - overzealous sanity checking in sys_poll() (Chris Snook) [204705] 
  - automounter cannot shutdown when timeout=0 (Ian Kent) [205836] 
  - Rewrite of journaling data commit code (Eric Sandeen) [207739] 
  - qla4xxx soft lockup when ethernet cable disconnected (Mike Christie) [206063] 
  - hypfs_kill_super() check for initialized root inode (Jan Glauber) [207717] 
  - The Matrox graphics driver is not built (Janice Girouard) [207200]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2714.el5]
changelog:
  - Wrong SELinux context prevents hidd from working (David Woodhouse) [204655] 
  - nfs connectathon component basic test 6 fails.... (Steve Dickson) [208637] 
  - unstick STICKY bit to fix suspend/resume (Dave Jones)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - s390 ccs/ccw subsystem does not have proper uevent support (Pete Zaitcev) [199994] 
  - 'Cannot allocate memory' when cat /proc/scsi/scsi (Chip Coldwell) [200299] 
  - Add support for Kirkwood and Kirkwood LP NICs (John W. Linville) [207776] 
  - remove userspace support from qla4xxx (Mike Christie) [206063] 
  - NetLabel interface has changed in the upstream kernels (Eric Paris) [208119] 
  - lockdep fixes (Peter Zijlstra) [208304 204795]


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Multiple routing tables for IPv6 (Thomas Graf) [179612] 
  -bunch of lockdep fixes (Peter Zijlstra) [200520 208294 208293 208292 208290] 
  -rearrange the cachefs patches for easier future maintance (Steve Dickson) 
  -enable some TCP congestion algorithms (David Miller) 
  -add a test patch (Eric Paris)


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Native SAS and SATA device support - SATA/IDE converter (Janice Girouard) [196336] 
  -kernel unaligned access messages in rhel5a1 (Prarit Bhargava) [198572] 
  -problems with LUNs mapped at LUN0 with iscsi and netapp filers (Mike Christie) [205802] 
  -ext3 fails to mount a 16T filesystem due to overflows (Eric Sandeen) [206721] 
  -possible recursive locking detected - swapper/1 (Peter Zijlstra) [203098] 
  -FS-Cache: error from cache: -28 (David Howells) [204614] 
  -aic94xx driver does not recognise SAS drives in x366 (Konrad Rzeszutek) [206526] 
  -Support for 3945 driver (John W. Linville) [195534] 
  -Memory Hotplug fails due to relocatable kernel patches (Vivek Goyal) [207596] 
  -Potential overflow in jbd for filesystems > 8T (Eric Sandeen) [208024] 
  -2,4-node x460 halts during bootup after installation (Konrad Rzeszutek) [203971]


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix PowerPC audit syscall success/failure check (#204927)
  - Remove offsetof() from <linux/stddef.h> (#207569)
  - One line per header in Kbuild files to reduce conflicts
  - Fix visibility of ptrace operations on ppc32
  - Fix ppc32 SECCOMP


author: Dave Jones <davej@redhat.com>
changelog:
  - reiserfs: make sure all dentry refs are released before
    calling kill_block_super
  - Fix up some compile warnings


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV printf rate limit (rostedt).
  - xen HV update to xen-unstable cset11540:9837ff37e354
  - xen-update:
    * linux-2.6 changeset:   34294:dc1d277d06e0
    * linux-2.6-xen-fedora changeset:   36184:47c098fdce14
    * xen-unstable changeset:   11540:9837ff37e354


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update to 2.6.18-rc7-git4.
    * linux-2.6 changeset: 34288:3fa5ab23fee7
    * linux-2.6-xen-fedora changeset: 36175:275f8c0b6342
    * xen-unstable changeset: 11486:d8bceca5f07d


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update:
    * linux-2.6 changeset: 34228:ea3369ba1e2c
    * linux-2.6-xen-fedora changeset: 36107:47256dbb1583
    * linux-2.6-xen changeset: 22905:d8ae02f7df05
    * xen-unstable changeset: 11460:1ece34466781ec55f41fd29d53f6dafd208ba2fa


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Implement futex primitives on IA64 and wire up [gs]et_robust_list again
    (patch from Jakub, #206613)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - add include/asm-x86_64/const.h to exported header file list
    used by the x86 relocatable patch (inside include/asm-x86_64/page.h)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - sync up beta1 fixes and patches
     - includes infiniband driver
     - aic9400/adp94xx updates
     - squashfs s390 fix
  - include x86 relocatable patch at end of list
  - some /proc/kcore changes for x86 relocatable kernel


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - 2.6.18rc7-git1
  - header file fixups
  - use correct arch for 'make headers_install' when cross-building


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xenoprof upstream fix.
  - update xen HV to cset 11394.
  - xen update (3hypercall incompatibility included)
  - linux-2.6 changeset: 34073:b1d36669f98d
  - linux-2.6-xen-fedora changeset: 35901:b7112196674e
  - xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29
  - fix ia64 (xen & net xen).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen-hv to cset 11256 (pre 3 hypercall breakage).
  - remove debug=y from HV compilation.
  - xen update (pre 3 hypercall breakage)
    * linux-2.6 changeset: 33957:421a6d428e95
    * linux-2.6-xen-fedora changeset: 35756:78332fcbe5b0
    * xen-unstable changeset: 11251:5fc1fe79083517824d89309cc618f21302724e29
    * get new irqflags code from linux-2.6.tip-xen.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen HV to xen-unstable cset 11251.
  - fix ia64 xen HV compilation.
  - linux xen kernel update:
    * linux-2.6 changeset: 33681:2695586981b9
    * linux-2.6-xen-fedora changeset: 35458:b1b8e00e7a17
    * linux-2.6-xen changeset: 22861:0b726fcb6780
    * xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29


author: Don Zickus <dzickus@redhat.com>
changelog:
  - update utrace
  - more gfs2-dlm fixes
  - fix xen-devel build directory issue
  - add x86, x86_64 relocatable kernel patch for rhel only (davej, forgive my sins)
    - applied xen relocatable cleanup on top of it
  - add ia64 kexec/kdump pieces


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update GFS2 patch (from swhiteho)
  - Enable kernel-headers build
  - Enable i386 build _only_ for kernel-headers


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Another lockdep-fix
  - NFS fix for the connectathon test
  - Enable mmtimer for ia64
  - Add support for iscsi qla4xxx


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen kernel update.
    * linux-2.6 changeset: 33525:dcc321d1340a
    * linux-2.6-xen-fedora changeset: 35247:400b0cf28ee4
    * linux-2.6-xen changeset: 22813:80c2ccf5c330
    * xen-unstable changeset: 11069:0340e579f06544431e915d17596ac144145a077e
  - xen big config update.  Every config option is the same than normal kernel
    except MICROCODE, TCG_TPM & CONFIG_DEBUG_SLAB.
  - disable XEN_FRAMEBUFFER & XEN_KEYBOARD.
  - make sysrq c to "crash" all kernels.


author: Don Zickus <dzickus@redhat.com>
changelog:
  - NFS 64-bit inode support
  - QLogic firmware
  - SELinux support for range transitions
  - EHEA ethernet driver
  - ppc irq mapping fix


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - Fix s390 single-step for real this time.
    - Revamp how arch code defines ptrace compatibility.


author: Dave Jones <davej@redhat.com>
changelog:
  - Update to squashfs 3.1 which should fix stack overflows seen
    during installation.
  - Merge framebuffer driver for OLPC.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable ia64 xen again.
  - xen kernel-update linux-2.6-xen-fedora cset 35236:70890e6e4a72.
    * fix ia64 compilation problems.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable ia64 xen, it doesn't compile.
  - xen HV update cset 11057:4ee64035c0a3
    (newer than that don't compile on ia64).
  - update linux-2.6-xen patch to fix sort_regions on ia64.
  - fix %setup for xen HV to work at xen HV upgrades.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV update cset 11061:80f364a5662f.
  - xen kernel update
    * linux-2.6-xen-fedora cset
    * linux-2.6-xen cset 22809:d4b3aba8876df169ffd9fac1d17bd88d87eb67c5.
    * xen-unstable 11060:323eb29083e6d596800875cafe6f843b5627d77b
    * Integrate xen virtual frame buffer patch.
    * Enable CONFIG_CRASH on xen.


author: Dave Jones <davej@redhat.com>
changelog:
  - Another lockdep fix for networking.
  - Change some hotplug PCI options.
  - Daily update from GregKH's git tree.
  - Unbreak SMP locking in oprofile.
  - Fix hotplug CPU locking in workqueue creation.
  - K8 EDAC support.
  - IPsec labelling enhancements for MLS
  - Netlabel: CIPSO labeled networking


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - fix s390 single-step
    - first third of ia64 support, enable CONFIG_UTRACE (no ptrace yet)


author: Juan Quintela <quintela@anano.mitica>
changelog:
  - Update linux-2.6-xen patch.
    * linux-2.6-xen-fedora cset 34931:a3fda906fb82
    * linux-2.6-xen cset 22777:158b51d317b76ebc94d61c25ad6a01d121dff750
    * xen-unstable cset  10866:4833dc75ce4d08e2adc4c5866b945c930a96f225


author: Jon Masters <jcm@redhat.com>
changelog:
  - Copy .config to include/config/auto.conf to avoid unnecessary "make prepare".
  - This should finally fix #197220.
  - Pulled in patch-2.6.18-rc3-git2.bz2.sign to fix SRPM build failure.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc3-git2
  - Readd patch to allow 460800 baud on 16C950 UARTs.
  - Fix backtracing for interrupt stacks


author: Dave Jones <davej@redhat.com>
changelog:
  - s390 kprobes support.
  - Fix oops in libata ata_device_add()
  - Yet more fixes for lockdep triggered bugs.
  - Merge numerous patches from -mm to improve software suspend.
  - Fix incorrect section usage in MCE code that blew up on resume.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable blktap for xen-ia64 (don't compile).
  - enable ia64-xen (it compiles, but still don't boot).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Update xen patch to linux-2.6-xen-fedora cset 34801.
  	* linux-2.6 cset 33175
  	* no linux-2.6-xen updates.
  - Remove xen x86_64 8 cpu limit.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - review all xen related patches.
  - x86_64 dom0, x86_64 domU and i386 domU should work.
  - fix xen i386 dom0 boot (#200382).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Workaround the huge timeouts problems on xen HV x86.
  - xen update and cleanup/reorgatization of xen patches.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc2-git2 & git3
  - Fix PI Futex exit crash.
  - Fix an inotify locking bug.
  - Add device mapper mirroring patches.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Patch from jakub to use sysv style hash for VDSO to fix booting
    on ia64 (#199634, #199595)
  - Fix e1000 crc calculation for things to work with xen
  - Update gfs2 patchset


author: Roland McGrath <roland@redhat.com>
changelog:
  - Clean up spec changes for debuginfo generation to cover Xen case.
  - New version of utrace patch, fixes /proc permissions. (#199014)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Add in support for nfs superblock sharing and cachefs
    patches from David Howells
  - Disable 'make prepare' hack as it is breaking ppc symlinks
  - Added tracking dirty pages patch from Peter Zijlstra
  - Fix for Opteron timer scaling
  - Fix for Calgary pci hang


author: Juan Quintela <quintela@redhat>
changelog:
  - big xen patch.
  - enable xen again.
  - redo xen config.
  - i686 kernel for xen uses PAE now.
  - new xen Hypervisor cset 10711.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Check in new version of kabitool for kernel deps.
  - Fix kabitool for correct location of symvers.
  - Various other fixes when things broke.


author: Dave Jones <davej@redhat.com>
changelog:
  - Support up to 4GB in the 586 kernel again.
  - Drop the FPU optimisation, it may be the reason for
    strange SIGFPE warnings various apps have been getting.


author: Dave Jones <davej@redhat.com>
changelog:
  - Cleaned up a bunch of bogons in the config files.
  - 2.6.18-rc1-git9,git10 & 2.6.18-rc2
  - improvements to linked list debugging.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Temporarily disable -headers subpackage until the problems which
    arise from brew not using older package are dealt with.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - No headers subpackage for noarch build
  - Fix PI-futexes to be properly unlocked on unexpected exit


author: Dave Jones <davej@redhat.com>
changelog:
  - Add sleazy fpu optimisation.   Apps that heavily
    use floating point in theory should get faster.


author: Dave Jones <davej@redhat.com>
changelog:
  - Add lockdep annotate for bdev warning.
  - Enable autofs4 to return fail for revalidate during lookup


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-git10 & git11
  - Enable fake PCI hotplug driver. (#190437)
  - Remove lots of 'modprobe loop's from specfile.


author: Dave Jones <davej@redhat.com>
changelog:
  - Enable profiling for 586 kernels.
  - 2.6.17-git6 & git7
    This required lots of rediffing. SATA suspend, Promise PATA-on-SATA,
    Xen, exec-shield, and more.  Tread carefully, harmful if swallowed etc.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen0/xenU/xen0-PAE/xenU-PAE packages
  - disable xen PAE kernel for i386 for now
  - create xen-PAE kernel
  - remove %requires xen from xen kernels


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Jason Vas Dias <jvdias@redhat.com> - 3.1.8-81
changelog:
  - rebuild for new gcc, glibc, glibc-kernheaders
  - workaround new refusal of /usr/bin/install to chown


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-78
changelog:
  - fix bug 159220: add pam_loginuid to pam session stack in /etc/pam.d/atd 
  - fix bug 102341: add '-r' synonym for '-d' / atrm for POSIX / SuS conformance


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-68
changelog:
  - Put PAM authentication check in 'check_permissions()', so
  - user can know when using at(1) if PAM permission is denied.


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-60
changelog:
  - fix bug 131510: no_export env. var. blacklisting should not
  - remove 'SHELL' when only 'SHELLOPTS' is blacklisted.
  - at(1) man-page should not say 'commands are run with /bin/sh'
  - and should explain usage of SHELL environement variable and
  - details of blacklisted variables.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Had to disable the 'make test' for the build BEFORE
  - any changes were made (building on FC2 - perl issue?)
  - test.pl generates these 'errors' for what looks like
  - valid output to me:
  -   $ ./test.pl 2>&1 | egrep -v '(^ok$)|(time_only)'
  -   1..3656
  -   not ok
  -   'Monday - 1 month': 'Fri Jul  2 18:29:00 2004' =? 'Sat Jul  3 18:29:00 2004'
  -   not ok
  -   'Monday - 10 months': 'Thu Oct  2 18:29:00 2003' =? 'Fri Oct  3 18:29:00 2003'
  -   not ok
  -   'next week - 1 month': 'Mon Jul  5 18:29:00 2004' =? 'Tue Jul  6 18:29:00 2004'
  -   not ok
  -   'next week - 10 months': 'Sun Oct  5 18:29:00 2003' =? 'Mon Oct  6 18:29:00 2003'
  - will investigate and fix for next release.


author: Jens Petersen <petersen@redhat.com> - 3.1.8-49
changelog:
  - replace at-3.1.8-SHELL-91233.patch by at-3.1.8-SHELL-111386.patch which
    now executes $SHELL directly in the at shell script after all the variables
    have been setup with /bin/sh (#91233) [suggested by Göran Uddeborg]
  - this changelog is now in utf-8


author: Dan Walsh <dwalsh@redhat.com> - 3.1.8-47.sel
changelog:
  * Fri Jun 20 2003 Jens Petersen <petersen@redhat.com> - 3.1.8-46
  - add at-3.1.8-atrun.8-typo-97697.patch to fix typo in atrun.8 (#97697)
  - update at.1 description of shell behaviour (#91233)


author: Jens Petersen <petersen@redhat.com> - 3.1.8-41
changelog:
  - update source to at_3.1.8-11 from debian upstream
    - update source url
    - at-debian.patch no longer needed
    - at-3.1.7-paths.patch: the patch to "at.1.in" no longer needed
    - replace at-3.1.8-lexer.patch with at-3.1.8-11-lexer-parser.diff
    - at-3.1.8-dst.patch no longer needed
    - at-3.1.8-lsbdoc.patch no longer needed
    - at-3.1.8-o_excl.patch no longer needed
    - bump release number
  - at-3.1.8-test.patch: move out test.pl to a separate source file
    - apply at-3.1.8-test-fix.patch to it and drop patch
  - at-3.1.8-shell.patch: drop (#22216,#91233)
  - run "make test" after building
  - add "--without check" rpmbuild option
  - fix autoconf comment to point to right patch
  - use _sysconfdir, _sbindir, _bindir, and _localstatedir


author: Bill Huang <bhuang@redhat.com>
changelog:
  - Fixed delaying job execution and missing starting jobs..(bug#69595)
    (Thanks Bujor D Silaghi <bujor@cs.umd.edu> for his patch.)


author: Bill Huang <bhuang@redhat.com>
changelog:
  - Fixed cleaning atq and  multiple atd daemon.(bug#67414)
    (Thanks Bujor D Silaghi <bujor@cs.umd.edu> for his patch.)


author: Adrian Havill <havill@redhat.com> 3.1.8-21
changelog:
  - fix man page (#51253)
  - fix env prop problem (#49491)
  - .SEQ should not be executable (#52626)
  - beefed up file creation perms against symlink exploits (O_EXCL)


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - applied enrico.scholz@informatik.tu-chemnitz.de's change to the env patch to 
  - address bug #46546


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - changed atd.init to start at 95, stop at 5, closing #15915
  - applied mailto:wp@supermedia.pl's environment patch


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - much love to David Kilzer <ddkilzer@lubricants-oil.com>
  - who nailed UTC, Leap year, DST, and some other edge cases down
  - he also wrote a test harness in perl
  - bug #28448


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - Well, we will likely never really close the UTC issues,
  - because of 1) fractional timezones, and 2) daylight savigns time.
  - but there is a slight tweak to the handling of dst in the UTC patch.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move init script
  - add condrestart directive
  - fix post/preun/postun scripts
  - prereq initscripts >= 5.20


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - updated to at version 3.1.7
  - updated lock and sequence file handling with %ghost
  - Use chkconfig and atd, now conflicts with old crontabs packages


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.33-1.13.5.0
changelog:
  - Update to IcedTea 1.13.5
  - Change versioning to match java-1.7.0-openjdk so revisions work.
  - No need to explicitly disable system LCMS any more (bug fixed upstream).
  - Add icedteasnapshot to setup lines so they work with pre-release tarballs.
  - Resolves: rhbz#1148898


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-6.1.13.4
changelog:
  - moved to  icedteaver 1.13.4
  - moved to openjdkver b32 and openjdkdate 15_jul_2014
  - Resolves: rhbz#1115866


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - renmoved upstreamed patch9, 1051245.patch
  - Resolves: rhbz#1085008


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050188


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-1.66.1.13.0
changelog:
  - updated to icedtea 1.13
  - updated to openjdk-6-src-b28-04_oct_2013
  - added --disable-lcms2 configure switch to fix tck
  - removed upstreamed patch7,java-1.6.0-openjdk-jstack.patch
  - added patch7 1.13_fixes.patch to fix 1.13 build issues
  - adapted patch0 java-1.6.0-openjdk-optflags.patch
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - removed useless runtests parts
  - included also java.security.old files
  - adapted patch8 java-1.6.0-openjdk-pstack.patch 
  - Resolves: rhbz#1017616


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911523


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.71-2.5.3.1
changelog:
  - Bump to 2.5.3 with security updates.
  - Remove obsolete patches which are now included upstream.
  - Disable LCMS via environment variables rather than maintaining a patch.
  - Resolves: rhbz#1148890


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115873


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085001


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050193


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.45-2.4.3.0.el5
changelog:
  - fixed and updated tapset
  - removed bootstrap
  - source 11 redeclared to 1111
  - added source12: TestCryptoLevel.java
  - removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - fixed nss 
  - cleaned sources
  - Resolves: rhbz#1017625


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el5
changelog:
  - updated to icedtea 2.4.1
  - improoved handling of patch111 - nss-config-2.patch
  - backported uniquesuffix from 6.5
  - Resolves: rhbz#978421


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added latest Fedora spec changes and nss (disabled) support
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - Added and applied if enable_nss patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied if enable_nss patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied if enable_nss patch115: java-1.7.0-openjdk-nss-split_results.patch
  - Added and applied if enable_nss patch 116 - Patch116: rh905128-non_block_ciphers.patch
  - NSS disabled by default - enable_nss set to 0
  - Added and applied if enable_nss patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - Added and applied if enable_nss patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Added nss.cfg file
  - Resolves: rhbz#950378


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el5
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el5
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895032


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el5.1
changelog:
  - Changed permissions of sa-jdi.jar to correct 644
  - Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
  - Resolves: rhbz#803732


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el5
changelog:
  - Updated to IcedTea7-OpenJDK 2.3.3
  - Removed upstreamed java-1.7.0-openjdk-rhel5-gio.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Updated java-1.7.0-openjdk-remove-gstabs.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.3.el5
changelog:
  - Added patch499: java-1.7.0-openjdk-remove-gstabs.patch, fixing debuginfo package
  - Resolves: rhbz#803732


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el5
changelog:
  - ca-certificates replaced by in-package script
  - Re-added debuginfo package
  - Priority kept as 17xxx
  - Resolves: rhbz#803732


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-30
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-3
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #688923


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-2
changelog:
  - Remove BuildRequires dependency on popt-devel, until the package
    is being shipped with RHEL-5 (resolve build issues)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-1
changelog:
  - Rebase to upstream version 3.0.6
    Resolves: #339971, #471182, #575022, #616093
  - Make "-d, --dirs options" behaviour backward-compatible with 2.6.8
    Resolves: #339971 (comment #5)
  - Truncate a copied sparse file at the end of transaction (-S, --sparse option)
    Resolves: #530866
  - Add -fno-strict-aliasing to CFLAGS
  - Remove obsolete rsync-2.6.8-xattr_bug.patch
  - Switch license to GPLv3+ (upstream change beginning with 3.0.0)


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build
  LANG=C
  export LANG
  unset DISPLAY
  ', removed '%prefix'.


author: Peter Vrabec <pvrabec@redhat.com> 5.8.12-2
changelog:
  - prepare package for dual component situation in RHEL5
  - rename to rsyslog5
  - conflicts with rsyslog
    Resolves: #820396


author: Tomas Heinrich <theinric@redhat.com> 5.8.12-1
changelog:
  - rebase from rsyslog-3.22.1-7 to rsyslog-5.8.12
    fixing: #769599, #820396, #823778, #831539
  - add several directories for storing auxiliary data
  - drop unneeded patches


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-43
changelog:
  - Do not extend allowable epoch values in Time::Local::timelocal to remove
    useless warning on 64-bit platforms (Resolves: rhbz#1149375)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-42
changelog:
  - Fix perl segfaults with custom signal handle (Resolves: rhbz#991854)
  - Reorder AnyDBM_File back-end preference (Resolves: rhbz#1018721)
  - Fix backslash interpolation in Locale::Maketext (Resolves: rhbz#1029016)
  - Enable year 2038 for Time::Local on 64-bit platforms (Resolves: rhbz#1057047)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-40
changelog:
  - Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915691)
  - Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
    Set-Cookie and P3P headers (Resolves: rhbz#915691)
  - Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
    (Resolves: rhbz#915691)
  - Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915691)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-37.el5
changelog:
  - 527275 remove h2ph patch, which didn't work
  - 702389 change rebase of CGI into upstream patch
  - 593752 NDBM_File needs change in Configure to be able find ndbm.h
  - Related: rhbz#702389, rhbz#593752


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-35.el5
changelog:
  - Define number of tests in ext/threads/t/libc.t (Related: rhbz#676050)
  - Redirect CGI::Cookie->bake test output to error output not to pollute TAP
    protocol (Related: rhbz#702389)
  - Reenable tests for s390x and ia64 (Related: rhbz#675863)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-34.el5
changelog:
  - Avoid double free of nested loop variable (RT#70660). Back-ported from
    perl-5.10.1. Reverts code of perl-5.8.8-bug24254.patch as it provides better
    solution. (Resolves: rhbz#625746)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - enlarge length of string in PAD_MAX from 999999999 to U32_MAX
    RT#83364
  - 675863 was accidentaly fixed by update of threads
  - Resolves: rhbz#676547, rhbz#675863


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - re-add NDBM_File support. It was removed in specfile for historical reason.
  - CVE-2010-2761 CVE-2010-4410 fixed by update of CGI to 3.54
  - h2ph produces invalide code
  - Resolves: rhbz#593752, rhbz#702389, rhbz#590644, rhbz#527275


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - newCONTSUB() wasn't thread-safe ([perl #45053]) which lead to crashes of
    string evaluation.
    Patch based on blead 401667e9af6ec282136e4e49614eb18614c5654b
  - update of module threads to 1.71 was also needed
  - Resolves: rhbz#676050


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - update to Unicode 5.1.0 (latest in maint-5.8 branch) lib/unicore/*
    c498a6a0f6c30ec6fd57d25f6fb84f7bdd793e77
  - update Unicode::UCD to 0.25, feature general_categories from Unicode 5.1.0
    was implemented in this release
    e7fbb7a80efd27bfde1ba3c6465ddb9f9357feb3
  - added tests related to strings into: op/pat.t, t/uni/class.t
  - Resolves: rhbz#621542


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5
changelog:
  - change release number according to Zstream, apply in Ystream missing
    security patches below. They were already shipped in Zstream.
  - CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) 
    reintroduced after upstream rebase to 5.8.8-1
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
  - Related: rhbz#548249


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-29.el5
changelog:
  - 548249 Perl threads leak memory when detached
  - 523827 CGI.pm popup_menu if optgroup, $selected is not properly escaped
  - Resolves: rhbz#548249, rhbz#523827


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-28.el5
changelog:
  - 537777 'Attempt to free unreferenced scalar' when running a perl 
   program with threads
  - Resolves: rhbz#537777


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-24.el5
changelog:
  - Fix -Darchname on the Configure line.
  - Do not pack compatibility directories: remove all the mkdirs from %install.
  - Replace perl-5.8.8-incpush.patch by perl-5.8.8-oldarch.patch.
  - Adapt the perl-5.8.8-R-switch.patch; keep it though it probably is not
    useful anymore.
  - Resolves: rhbz#489909


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-23.el5
changelog:
  - libnet.cfg was installed on x86_64 into wron directory because all libnet
    files are stored in /usr/lib/ on both architectures.
  - Resolves: rhbz#490107


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-21.el5
changelog:
  - Time::HiRes version is incompatible with glibc2.5. This is fixed
    with rebase to v1.9715.
  - Resolves: rhbz#453327


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-20.el5
changelog:
  - suidperl binaries shall be owned by the root, reinsert the %defattr
    declaration mistakenly removed at the time of bug 191416


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-19.el5
changelog:
  - fix the # of tests in backport of upstream change 32018
  - fix perl-5.8.8-perlvar-pod.patch again, update expected test results
  - fix a typo causing "make test" to be skipped
  - Related: rhbz#379791 #431041


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#379791


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-14.el5
changelog:
  - add two patches, which...
  - Resolves: #435505, #431041
  - remove %define threading, the non-threading variant is not supported,
    Related: 435376


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-13.el5
changelog:
  - comments are before patches patch22-28
  - turn off tests for s390x. They were succesfully run in scratch, but
  	there's some issue with network, which breaks the brew build.
  - Resolves: #375621, #429491, #438114, #379791, #454602, #217833, #449324


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-4
changelog:
  - Fix bug 183553 / upstream bug 38657: fix -d:Foo=bar processing
  - rebuild with new gcc-4.1.0-1, released today


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-2
changelog:
  - Rebuild again
  - Debian released 5.8.8 patches today; apply only relevant difference:
    03_fix_net_nntp : fix precedence in Net::NNTP::article 
                      from Brendan O'Dea<bod@debian.org>


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.8-0.1_RC1
changelog:
  - fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
  - Add perl(:MODULE_COMPAT_5.8.8) to Provides
  - Fix perlbug patch


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.7
changelog:
  - fix bug 172739: upstream bug 36521 : deep recursion and segfault
    in CGI::Carp::warn with 'use diagnostics' : applied patch 25160.
  - fix CAN-2004-0976: insecure use of temp files (ala Debian)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.6
changelog:
  - fix bug 171111 : define ioctl length macro IOCPARM_LEN(x)
    macro to be _IOC_SIZE(x), not 256 - upstream bug #37535 raised.
  - provide 'perl_debugging' .spec file option to enable -DDEBUGGING
    and disable stripping / debuginfo generation - default: 0


author: Warren Togami <wtogami@redhat.com> - 3:5.8.7-0.1
changelog:
  - patch12 from Marius Feraru (#165907)
    TODO: patch11, patch26 and patch27 clash and need verification
  - Build without -DDEBUGGING (#156113)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-17
changelog:
  - Don't remove the core modules:
      Filter::Util::Call, Filter::Simple, and Time::HiRes.
  - Obsoletes perl-{Filter,Filter-Simple,Time-HiRes}.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-16
changelog:
  - Reformatted the specfile.
  - Added the Source0 URL.
  - Dropped the MANIFEST.all file for the perl package.
  - Dropped the MANIFEST.suidperl file for the suidperl subpackage.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
changelog:
  - New findbin-selinux patch: it now passes the FindBin.t tests
    (patch28 replaces patch23). #118877 #127023
  - Remove 5.8.2 ABI compat (#154295 comments 6 and 7).


author: Chip Turner <cturner@redhat.com> - 3:5.8.6-4
changelog:
  - add patch to put site_perl and vendor_perl before core perl dirs, to
    allow for overriding modules


author: Jose Pedro Oliveira <jpo@di.uminho.pt>
changelog:
  - Corrected the license information (missing GPL).
  - Added the URL tag.
  - Removed empty .bs files.
  - Eliminated several strip generated messages (bug 127025).
  - Corrected problems mentioned in bug 120772
    (updated Ville Skytta)


author: Colin Walters <walters@redhat.com> 3:5.8.3-17
changelog:
  - Apply patch to fix FindBin module when access to cwd is disallowed,
    should solve the MRTG/SELinux cron spam issue


author: Chip Turner <cturner@redhat.com> 3:5.8.3-6
changelog:
  - fix very broken @INC calculations with slightly less broken @INC
    calculations (not perfectly handled but the result is correct)
  - fix broken -Dsitearch declaration


author: Chip Turner <cturner@redhat.com> 3:5.8.1-90.rc2.1
changelog:
  - RC4
  - remove perl-5.8.0-fhs.patch since it is integrated now
  - remove perl-5.8.0-Safe2.09.patch, unnecessary now


author: Chip Turner <cturner@redhat.com> 3:5.8.0-89.pre%{PRELEVEL}.0
changelog:
  - bump epoch since we went from perl 5.8.1-pre to 5.8.0-pre (ie,
    changed what version perl thought of itself as)


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib64 that crept in with multilib


author: Elliot Lee <sopwith@redhat.com> 5.8.0-86
changelog:
  - Fix up multilib handling to use multilib_64_archs macro, add ppc64.
  - Patch100 probably makes sense on all archs, and ifarch'd patches are Bad(tm).


author: Chip Turner <cturner@redhat.com>
changelog:
  - version the Obsoleted on perl-NDBM_File so users can install newer
  - change the Obsoletes on NDBM_File to a Conflicts
    ones than what shipped with 7.3, yet still keep anaconda happy


author: Chip Turner <cturner@redhat.com>
changelog:
  - add rpath fix to prevent building perl from using installed system perl
  - massive re-integration of upstream patches to come to common basis (head of perl-maint branch)


author: Chip Turner <cturner@redhat.com>
changelog:
  - add numerous upstream patches to fix utf8/perlio issues
  - upgrade Storable, Safe, and Encoding to latest CPAN versions


author: Chip Turner <cturner@redhat.com>
changelog:
  - update CPAN, CGI, and DB_File versions; obsolete perl-libnet
  - libnet.cfg supplied, default to passive ftp in all cases


author: Chip Turner <cturner@redhat.com>
changelog:
  - make rpmlint happy, split out NDBM_File, clean up other spots
  - stopped doing grep -v etc in favor of custom script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - replace the deprecated MD5 with Digest::MD5 (has to be here for cleanfeed)
  - obsolete: perl-Digest-MD5
  - use syslog instead of mail to report possible attempts to break into suidperl
  - force syslog on at build-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Owen's fix for #14779/#14863
  - specify cc=gcc; continue to let cpp sort itself out
  - switch shadow support on (#8646)
  - release 7


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable 64-bit file support
  - change name of package that Perl expects gcc to be in from "egcs" to "gcc"
  - move man pages to /usr/share via hints/linux.sh and MM_Unix.pm
  - fix problems prefixifying with empty prefixes
  - disable long doubles on sparc (they're the same as doubles anyway)
  - add an Epoch to make sure we can upgrade from perl-5.00503
  - release 2


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - do not link anymore against the system db library (and make each module
    link against it separately, so that we can have Berkeley db1 and db2 mixed
    up)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.00503
  - make the default man3 install dir be release independent
  - try to link against db1 to preserve compatibility with older databases;
    abandoned idea because perl is too broken to allow such an easy change
    (hardcoded names *everywhere* !!!)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to fix a security race
  - do not use setres[ug]id - those are not implemented on 2.0.3x kernels


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 5.004_04 - 5.004_01 had some nasty memory leaks.
  - fixed the spec file to be version-independent


author: Erik Troan <ewt@redhat.com>
changelog:
  - Use -Darchname=i386-linux 
  - Require csh (for glob)
  - Use RPM_ARCH during configuration and installation for arch independence


author: Remi Collet <rcollet@redhat.com> - 5.3.3-25
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Peter Hatina <phatina@redhat.com> 1.0.15-7
changelog:
  - security patches
  - Resolves: CVE-2014-6421
              CVE-2014-6423
              CVE-2014-6425
              CVE-2014-6428
              CVE-2014-6429


author: Peter Hatina <phatina@redhat.com> 1.0.15-6
changelog:
  - security patches
  - Resolves: CVE-2012-6056
              CVE-2012-6060
              CVE-2012-6061
              CVE-2012-6062
              CVE-2013-3557
              CVE-2013-3559
              CVE-2013-4081
              CVE-2013-4083
              CVE-2013-4927
              CVE-2013-4931
              CVE-2013-4932
              CVE-2013-4933
              CVE-2013-4934
              CVE-2013-4935
              CVE-2013-5721
              CVE-2013-7112
              CVE-2014-2281
              CVE-2014-2299


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-3
changelog:
  - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958 
    CVE-2011-2698 CVE-2011-4102 CVE-2012-0041 CVE-2012-0042 CVE-2012-0066
    CVE-2012-0067


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-2
changelog:
  - fixed tshark -s option (#580513)
  - fixed tshark exit code when dumpcap fails (#580510)
  - fixed editing of columns in Wireshark preferences (#493693)
  - added netdump protocol dissector (#484999)
  - fixed tshark / Wireshark automatic filter when started in ssh connection
    over IPv6 (#438473)


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1.4
changelog:
  - fix few security issues
  - Resolves: CVE -2011-0024 CVE-2011-0538 CVE-2011-1139 CVE-2011-1140
    CVE-2011-1141 CVE-2011-1143 #612240


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612239


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612239


author: Radek Vokál <rvokal@redhat.com> 0.99.7-1
changelog:
  - upgrade to 0.99.7
  - switch to libsmi from net-snmp
  - disable ADNS due to its lack of Ipv6 support
  - Resolves: #397411


author: Radek Vokál <rvokal@redhat.com> 0.99.6-1
changelog:
  - upgrade to 0.99.6
  - Wireshark could crash when dissecting an HTTP chunked response
  - Wireshark could crash while reading iSeries capture files
  - Wireshark could exhaust system memory while reading a
    malformed DCP ETSI packet
  - Wireshark could loop excessively while reading a malformed SSL packet
  - Resolves: #247623


author: Radek Vokál <rvokal@redhat.com> 0.99.5-1
changelog:
  - multiple security issues fixed (#225781)
  - CVE-2007-0459 - The TCP dissector could hang or crash while reassembling HTTP packets
  - CVE-2007-0459 - The HTTP dissector could crash.
  - CVE-2007-0457 - On some systems, the IEEE 802.11 dissector could crash.
  - CVE-2007-0456 - On some systems, the LLT dissector could crash.


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Radek Vokál <rvokal@redhat.com> 0.99.3-1
changelog:
  - upgrade to 0.99.3
  - Wireshark 0.99.3 fixes the following vulnerabilities:
  - the SCSI dissector could crash. Versions affected: CVE-2006-4330
  - the IPsec ESP preference parser was susceptible to off-by-one errors. CVE-2006-4331
  - a malformed packet could make the Q.2931 dissector use up available memory. CVE-2006-4333


author: Florian Festi <ffesti@redhat.com> - 4.8.0-35
changelog:
  - Fix race condidition where unchecked data is exposed in the file system
    (CVE-2013-6435)(#1163057)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-34
changelog:
  - Fix segfault on rpmdb addition when header unload fails (#706935)
  - Fix segfault on invalid OpenPGP packet (#743203)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-33
changelog:
  - Account for excludes and hardlinks wrt payload max size (#716853)
  - Fix payload size tag generation on big-endian systems (#648516)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-30
changelog:
  - Document -D and -E options in man page (#814602)
  - Require matching arch for freshen on colored transactions (#813282)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-29
changelog:
  - Add DWARF 3 and 4 support to debugedit (#808547)
  - No longer add \n to group tag in Python bindings (#783451)
  - Fix typos in Japanese rpm man page (#760552)
  - Bump Geode compatibility up to i686 (#620570)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-28
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-26
changelog:
  - Add support for XZ-compressed sources and patches to rpmbuild (#620674)
  - Avoid unnecessary assert-death when closing NULL fd (#573043)
  - Add scriptlet error notification callbacks (#533831)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-25
changelog:
  - Honor --noscripts for pre- and posttrans scriptlets too (#740345)
  - Avoid bogus error on printing empty ds from python (#628883)
  - File conflicts correctness & consistency fixes (#740291)
  - Create the directory used for transaction lock if necessary (#510469)
  - Only enforce default umask during transaction (#673821)


author: Jindrich Novy <jnovy@redhat.com> - 4.4.2.3-19
changelog:
  - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade (#626708)
  - fix SELinux memory leak (#566746), patch from Florian Festi


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-12
changelog:
  - fix pgp fingerprint calculation (#493777)
  - performance tweaks (#435475)
    - better hash algorithm to speed up initial install
    - avoid crazy memory fragmentation on file fingerprinting
    - eliminate unnecessary allocations from rpmdsCompare() hotpath


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-10
changelog:
  - Filter out timestamp differences of shared files on verify (#472151)
  - Perform verification in real chroot if --root specified (#434150)
  - Check for arch compatibility on colored transactions too (#472065)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-7
changelog:
  - Fix exit code on file not found errors (#463944, #446202)
  - Always honor epoch (no)promote behavior in dependency sets (#466503)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-5
changelog:
  - Disallow creation of packages larger than we can cleanly handle (#448488)
  - Fix retrieval of multiple packages through proxy (#450205)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-4
changelog:
  - Temporarily permit conflicts in /usr/share/doc/ (#460808)
  - Fix --dump usage description in Japanese manual too (#250207)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-2
changelog:
  - Close all file descriptors before running scriptlets (#453645)
  - Tighten up dependencies between sub-packages


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-1
changelog:
  - Rebase to RPM 4.4.2.3 from F9 (#454887)
  - Much cleaned up spec
  - NSS used instead of beecrypt for lowlevel crypto (#444805)
  - Provides no longer treated as implicit obsoletes (#233713, #348971)
  - Use root:root for file ownerships everywhere (#439417)
  - Improved .rpmsave/.rpmnew behavior (#426258)
  - Exit code corrections (#244236, #440595)
  - Improved multilib build support (#257921)
  - Improved debuginfo extraction (#251333)
  - Dozens of other issues resolved


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-22
changelog:
  - put in simple workaround for per-file deps with autoreq off (#190488) 
    while pnasrat works on a real fix


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-21
changelog:
  - run ldconfig in -libs subpackage %post, not main package
  - add patch to generate shared lib deps by following symlinks so that 
    -devel packages sanely depend on main libs


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-17
changelog:
  - remove redundant elfutils-libelf buildrequires
  - rpm-python doesn't require elfutils (related to #188495)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-16
changelog:
  - Skipdirs on erase again (#187308)
  - Make fcntl lock sensitive to --root (#151255)
  - Fix netshared path comparison (#52725)
  - Fix rpm vercmp (#178798)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-8
changelog:
  - Add elfutils Build Requires to rpmbuild (#155129)
  - Don't do conflicts if both files %ghost(#155256)
  - Fix popt charset for various languages (#172155)
  - Don't include .la file (#174261)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.1-19
changelog:
  - Check for symlinks in check-files (#108778)
  - Move zh_CN (#154623)
  - Test fix for signing old rpms (#127113)


author: Miloslav Trmac <mitr@redhat.com> - 4.4.1-12
changelog:
  - Remove $RPM_BUILD_ROOT and $RPM_BUILD_DIR from distribued .la files (#116891)
  - Don't ship static version of _rpmdb.so
  - BuildRequires: readline-devel


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.24
changelog:
  - zlib: uniqify certain symbols to prevent name space pollution.
  - macosx: include <sys/types.h> so that python sees the u_char typedef.
  - macosx: change to --prefix=/usr rather than /opt/local.
  - use waitpid rather than SIGCHLD reaper.
  - rip out DB_PRIVATE revert if not NPTL, it's not the right thing to do.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.16
changelog:
  - fix: length of gpg V4 hash seed was incorrect (#146896).
  - add support for V4 rfc-2440 signatures.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.14
changelog:
  - add sqlite internal (build still expects external sqlite3-3.0.8).
  - sqlite: revert to original narrow scoping of cOpen/cClose.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.10
changelog:
  - more macosx fiddles.
  - move global /var/lock/rpm/transaction to dbpath.
  - permit fcntl path to be configured through rpmlock_path macro.
  - add missing #if defined(ENABLE_NLS) (#146184).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.8
changelog:
  - changes to build on Mac OS X using darwinports neon/beecrypt.
  - add https://svn.uhulinux.hu/packages/dev/zlib/patches/02-rsync.patch


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.6
changelog:
  - mac os x patches (#131943,#131944,#132924,#132926).
  - mac os x patches (#133611, #133612, #134637).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.5
changelog:
  - upgrade to db-4.3.27.
  - revert MAGIC_COMPRESS, real fix is in libmagic (#143782).
  - upgrade to file-4.12 internal.


author: Miloslav Trmač <mitr@redhat.com> - 4.15-2.el5.1
changelog:
  - Fix "protocol = smtp"
    Resolves: #284801
  - Use a clearer error message if an unknown port is specified
    Resolves: #450344


author: Miloslav Trmac <mitr@redhat.com> - 4.11-1
changelog:
  - Update to stunnel-4.11
  - Fix int/size_t mismatches in stack_info ()
  - Update Certificate-Creation for /etc/pki


author: Nalin Dahyabhai <nalin@redhat.com> 3.20-1
changelog:
  - log using LOG_AUTHPRIV facility by default (#47289)
  - make permissions on stunnel binary 0755
  - implicitly trust certificates in %{_datadir}/ssl/trusted (#24034)


author: Nalin Dahyabhai <nalin@redhat.com> 3.19-1
changelog:
  - update to 3.19 to avoid problems with stunnel being multithreaded, but
    tcp wrappers not being thrad-safe


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove explicit requirement on openssl (specific version isn't enough,
    we have to depend on shared library version anyway)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.11
  - chuck the SIGHUP patch (went upstream)
  - chuck parts of the 64-bit clean patch (went upstream)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move to Applications/Internet group
  - clean up %post script
  - make stunnel.pem %ghost %config(noreplace)
  - provide a sample file for use with xinetd


author: Milan Broz <mbroz@redhat.com> - 1.02.67-1
changelog:
  - Update to latest upstream release, see WHATS_NEW_DM for detailed changelog.
    Resolves: #746300 #454618


author: Milan Broz <mbroz@redhat.com> - 1.02.55-2
changelog:
  - Allocate buffer for reporting functions dynamically to support long outputs.
  - Fix regex optimiser not to ignore RHS of OR nodes in _find_leftmost_common.
    Resolves: #649710 #651349


author: Milan Broz <mbroz@redhat.com> - 1.02.39-2
changelog:
  - Change dm_tree_deactivate_children to fail if device is open.
  - Optimize regular expression processing (e.g. lvm.conf filter).
    Resolves: #583646 #581830


author: Milan Broz <mbroz@redhat.com> - 1.02.32-1
changelog:
  - Update to latest upstream release.
  - Source files are now part of LVM2 upstream source tree.
    Resolves: #501752


author: Milan Broz <mbroz@redhat.com> - 1.02.20-1
changelog:
  - Update to latest upstream release.
  - Add tree-based and dependency fields to dmsetup reports.
    Resolves: #168533


author: Alasdair Kergon <agk@redhat.com> - 1.02.13-1
changelog:
  - Update dmsetup man page (setgeometry & message).
  - Suppress encryption key in 'dmsetup table' output unless --showkeys supplied.


author: Alasdair Kergon <agk@redhat.com> - 1.02.12-1.0
changelog:
  - Avoid deptree attempting to suspend a device that's already suspended.
  - Smaller upstream source tarball with files for 2.4 kernel removed.


author: Alasdair Kergon <agk@redhat.com> - 1.02.10-1.0
changelog:
  - Add dm_snprintf(), dm_split_words() and dm_split_lvm_name() to libdevmapper.
  - Reorder mm bounds_check code to reduce window for a dmeventd race.
  - Make dmeventd start/end messages LOG_INFO instead of LOG_DEBUG.
  - Check thread_registry_unused when checking for registered dmeventd device.


author: Alasdair Kergon <agk@redhat.com> - 1.02.02-2.0
changelog:
  - Remove unused event daemon code. (176877)
  - Fix 'dmsetup version'. (176861)
  - Fix hash functions for clvm. (176443)


author: Alasdair Kergon <agk@redhat.com> - 1.02.02-1.0
changelog:
  - Include event daemon in the build.
  - Export dm_task_update_nodes.
  - Use ioctl names instead of numbers in failure error messages.


author: Alasdair Kergon <agk@redhat.com> - 1.02.00-1.0
changelog:
  - Extend library with hash, bitset, pool, dbg_malloc and activation
    tree functions.
  - Add ls --tree to dmsetup.
  - Add nolockfs support for suspend/reload.


author: Alasdair Kergon <agk@redhat.com> - 1.01.02-1
changelog:
  - Add --exec and --target to dmsetup for initrd convenience.
  - Automatically call dm_lib_exit when exiting.


author: Alasdair Kergon <agk@redhat.com> - 1.01.01-1
changelog:
  - Update dmsetup man page.
  - Replicate devmap_name output with dmsetup info -c --noheadings -o name.


author: Alasdair Kergon <agk@redhat.com> - 1.01.00-2
changelog:
  - Reinstate a copy of previous shared library version 1.00 to avoid 
    requiring applications using libdevmapper to be recompiled immediately.


author: Alasdair Kergon <agk@redhat.com> - 1.00.17-1
changelog:
  - Fix non-root build with current version of 'install'.
  - Incorporate last two selinux patches into tarball.


author: Adam Tkac <atkac redhat com> 32:9.7.0-13.P2
changelog:
  - fixed various bind-chroot packaging errors (#829823)
  - generate rndc.key during `service named start` (#829827)
  - nslookup: return non-zero exit code when fail to get answer (#829829)
  - named could fail to send a uncompressable zone


author: Adam Tkac <atkac redhat com> 32:9.7.0-12.P2
changelog:
  - initscript should kill only the "correct" named process
  - don't check MD5, size and mtime of sysconfig/named
  - host utility now honors "attempts", "timeout" and "debug" options
    in resolv.conf
  - add new option DISABLE_ZONE_CHECKING to sysconfig/named
  - improve handling of lame responses with no SOA
  - mount /etc/named.root.key into chroot (#719855)
  - document dig exit codes
  - print "the working directory is not writable" as debug message
  - zero zone->curmaster before return in dns_zone_setmasterswithkeys()
  - fix IDN related statement in dig.1 manpage (#811566)
  - disable broken testsuite tests, they also don't work with upstream
    tarball


author: Adam Tkac <atkac redhat com> 32:9.7.0-7.P2
changelog:
  - work correctly when new DS is introduced in the trusted DNS tree (#675467)
  - include root zone DNSKEY (#693788)


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P2
changelog:
  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-13
changelog:
  - do not crash when using a lot of file descriptors (#958195)
  - fix errors in man page (#891503)
  - fix for command substitutions caused regressions, use different fix (#912443)
  - pipe used in command substitution could affect return codes (#892206)
  - prevent fork bomb trigered by SIGSTP (#910923)
  - fix handling of SIGTTOU signal (#888749)
  - fix memory leak when using arrays in functions (#921138)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-9
changelog:
  - fix exporting of l/r-justified variable (#827522)
  - do not crash when using a lot of file descriptors (#827613)


author: Michal Hlavinka <mhlavink@redhat.com> - 20100621-7
changelog:
  - fix file descriptor leak (#812930)
  - flush output before forking (#811318)
  - do not create extra process when it's not needed (#804925)
  - assigning a right justified typedef'd variable to a smaller one 
    could corrupt the result (#771188)


author: Michal Hlavinka <mhlavink@redhat.com> 20100621-1
changelog:
  - restore tty settings after timed out read (#573936)
  - fix stdin for double command substitution (#584704)
  - fix infinite loop when whence builtin is used with -q option (#587127)
  - ksh did not wait for pipeline to complete when pipefail option was used (#640379)
  - fix bug when here document got sometimes truncated (#644362)
  - completion used after an environment variable reported bad susbstituion error (#647524)
  - do not forget to restore file handles after execution of sourced script (#650998)
  - do not use invalid PID values in ksh kill built-in (#701890)
  - do not change $0 in posix function (#691933)
  - fix man page information about default value for PATH variable (#699641)
  - ksh child exit code not preserved correctly (#699823)
  - ulimit -v limits cpu instead of virtual memory (#712349)
  - wait was returning incorrect value (#726199)
  - fix crash when unsetting IFS inside a function (2nd reproducer) (#727891)
  - Apparent race condition when using pipes in KSH scripts (#736195)
  - lower resolution of file time comparison (#736462)
  - do not create extra process when calling function defined with function
    keyword (#739664)


author: Michal Hlaivnka <mhlavink@redhat.com> 20100202-5
changelog:
  - fix crash when unsetting IFS inside a function
  - don't forget to close files including auto loaded function definition
  - fix file io race condition when file was created, but still does not exist


author: Michal Hlavinka <mhlavink@redhat.com> 20100202-4
changelog:
  - fix crash when ksh get SIGPIPE while already executing signal handler
  - fix wrong output redirection in SIGPIPE trap
  - fix wrong typeset handling of arrays that could caused a crash


author: Michal Hlavinka <mhlavink@redhat.com> 20091206-1
changelog:
  - updated to 20091211
  - fix looped job list (#435159)
  - fix error code when unsetting a variable that was already unset (#508869)
  - restore shell state when return was used in .profile (#506790)
  - wait for output of background process after foreground's completed (#509326)
  - fix parser failure when alias nested in emacs mode (#513967)
  - don't mention unavailable commands in man pages (#514485)
  - ship RELEASE in doc as change log (#541654)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-15
changelog:
  - fix wrong array size caused by typeset (#538857)
  - fix pids of forked commands (#520383)
  - fix memcmp-memcpy typo causing syntax error (#538655)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-12
changelog:
  - make braces non-optional for ${a[i]} inside [[...]] in the case
    where the argument can be a pattern.


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-11
changelog:
  - prevent rpmbuild creating debuginfo for %ghost files (#488798)
  - don't segfault for inaccessible history file (#494363)
  - add COMPATIBILITY file to the %doc (#494534)
  - use old language catalog, because the new one is broken (#493570)


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-7
changelog:
  - fix unexpected behaviour of typeset [options] name=value
  - resolves: #489516
  - fix alternatives for ksh update, when there wasn't alternatives yet


author: Michal Hlavinka <mhlavink@redhat.com> 20080202-5
changelog:
  - fix #488798 - use 'alternatives' for ksh switching
  - fix #485030 - Umask value not restored when returning from a subshell
  - fix #488934 - ksh does not declare shell variables with hyphen


author: Tomas Smetana <tsmetana@redhat.com> 20080202-2
changelog:
  - fix #459228 - option -R not clear
  - fix #459566 - segfault on set -o vi
  - fix #456652 - exit shifts vi to background


author: Tomas Smetana <tsmetana@redhat.com> 20080202-1
changelog:
  - rebase to the new version
  - fix #371441 - can't display international characters
  - fix #429488 - ksh -R can cause segmentation fault
  - fix #435159 - scripts failing under ksh
  - fix #441557 - the -m option removed from the manual page


author: Tomas Smetana <tsmetana@redhat.com> 20060214-1.5
changelog:
  - fix #242879 - memory leak
  - fix #232627 - call to exit(0) returns a status 19 
    to the calling shell script
  - fix #242878 - spins in stopped state
  - fix #243776 - ERR trap causes recursion
  - fix #219420 - unaligned access messages
  - fix #242877 - filesystem acl defaults are ignored
  - fix #278781 - fix handling of sigttou
  - fix #250362 - update manpage about subscript of index array


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.107
changelog:
  - CVE-2014-8091 denial of service due to unchecked malloc in client
    authentication (#1168680)
  - CVE-2014-8092 integer overflow in X11 core protocol requests when
    calculating memory needs for requests (#1168684)
  - CVE-2014-8097 out of bounds access due to not validating length or offset
    values in DBE extension (#1168705)
  - CVE-2014-8095 out of bounds access due to not validating length or offset
    values in XInput extension (#1168694)
  - CVE-2014-8096 out of bounds access due to not validating length or offset
    values in XC-MISC extension(#1168700)
  - CVE-2014-8099 out of bounds access due to not validating length or offset
    values in XVideo extension (#1168710)
  - CVE-2014-8100 out of bounds access due to not validating length or offset
    values in Render extension (#1168711)
  - CVE-2014-8102 out of bounds access due to not validating length or offset
    values in XFixes extension (#1168714)
  - CVE-2014-8101 out of bounds access due to not validating length or offset
    values in RandR extension (#1168713)
  - CVE-2014-8093 xorg-x11-server: integer overflow in GLX extension requests
    when calculating memory needs for requests (#1168688)
  - CVE-2014-8098 xorg-x11-server: out of bounds access due to not validating
    length or offset values in GLX extension (#1168707)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.104
changelog:
  - xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
    fix from upstream RANDR code (#1006076)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.100
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
    being differently broken in different DDXes. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.97
changelog:
  - xserver-1.1.1-x86emu-1.13.patch: Sync x86emu bugfixes with upstream
    xserver. (#858014)
  - xserver-1.1.1-xkb-width-fix.patch: Fix a crash in XKB keymap resize
    across different RHELs. (#822438)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.95
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Fix memory leaks at regeneration in
    XKB, root cursor, and GLX. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.88
changelog:
  - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
  - xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.87
changelog:
  - xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
    across all modes of a certain dimension (#740497)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.86
changelog:
  - xserver-1.1.1-midc-double-free.patch: Don't double-free the picture for
    the root window when using the mi (software) cursor path. (#674741)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.84
changelog:
  - xserver-1.1.1-xinerama-crash.patch: Fix a crash in XineramaQueryScreens
    when client is swapped (#588346)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.78
changelog:
  - cve-2010-1166.patch: Fix broken modulo math in Render and arc code.
    Identical to xserver-1.1.1-mod-macro-parens.patch in 5.5.z. (#582651)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.77
changelog:
  - xserver-1.1.1-dbe-validate-gc.patch: Validate the GC against both front
    and back buffers (#596899)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.71
changelog:
  - fix randr upsizing not resizing pixmap (#515609)
  - fix bug in overlapping bugfix (#530309,#516204,#554571)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.70
changelog:
  - xserver-1.1.1-improve-mode-selection.patch: Improve mode selection when
    validation filters away all modes that exactly match aspect ratio (#507536)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-48.63
changelog:
  - Pull in fixes for x86emu from upstream as x86emu-update.patch.  This
    adds support for RDTSC, CPUID and fixes BSF and BSR and a 64 bit
    bug.  Drop xserver-1.1.1-int10-bsf.patch (#503182).


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.60
changelog:
  - xserver-1.1.1-randr-panning-fix.patch: Install a null PointerMoved hook
    so we don't pan the second head on randrful drivers. (#477177)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.58
changelog:
  - xserver-1.1.1-hw-xfree86-modes-16.patch: Update RANDR code to 1.6ish.
  - xserver-1.1.1-randr-abi.patch: Export the RANDR symbols that the drivers
    use, and compensate for i2c/ddc/ramdac still being loadables in 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.57
changelog:
  - xserver-1.1.1-ddc-update.patch: Update DDC code to xserver 1.6.
  - xserver-1.1.1-hw-xfree86-modes: Add RANDR setup code, equivalent to the
    old randr-source subpackage (Fedora's 1.5.3 ish)
  - drop the randr-* patches, merged into the above.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.56
changelog:
  - Drop the -randr-source subpackage
  - Delete with_developer_utils macro and some boring/misleading comments


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.54
changelog:
  - randr-xinerama.patch - add xinerama support to the randr source code
    tree (#481067)
  - drop the randr source updates for now as the patch fails
  - fix spec file so if patches to randr source fail, build fails


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.53
changelog:
  - xserver-1.1.1-autoreconf-pedantry.patch: Fix autoreconf with new autotools
  - xserver-1.1.1-saturate-trap-walks.patch: Saturate span walks in Render,
    so we don't wrap around. (#448586)
  - xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch,
    xorg-redhat-die-ugly-pattern-die-die-die.patch: Rediff for patch fuzz.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.45
changelog:
  - rebase the source code for drivers to build against and add compat patches
  - xserver-1.1.1-randr-fix.patch - set the -1 to 0 like upstream this fixes some randr1.2 compat output problems


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.44
changelog:
  - xserver-1.1.1-automouse-crash-fix.patch: Fix a rare crash when starting
    under anaconda. (#249567)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.42
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.30
changelog:
  - Sync with zstream 1.1.1-48.26.el5_1.4:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.29
changelog:
  - Add -randr-source subpackage for source compatibility with newer drivers.
  - xserver-1.1.1-mode-bandwidth.patch: Match enums with 1.5 server.
  - randr-source-compat.patch: Fix miscellaneous drift since 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.17
changelog:
  - xserver-1.1.1-silence-warnings.patch: Reduce several harmless warning
    messages to X_DEFAULT or X_INFO. (#227386)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.15
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Allocate pci_devp dynamically, to handle
    machines with more than 128 PCI devices. (#219390 and others)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.12.el5
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: During server
    shutdown, be sure to wait for the VT switch to finish before actually
    terminating.  Works around a race seen in rhgb. (#219184)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.11.el5
changelog:
  - define-xfree86-server.patch: Define XFree86Server even on arches where
    we don't compile the Xorg DDX (ie. s390). Resolves: 219253


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.10.el5
changelog:
  - xorg-x11-server-1.1.1-glcore-visual-matching.patch: When matching GLX to
    X visuals, scan both lists. (#218395)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.7.el5
changelog:
  - xorg-x11-server-1.1.1-xkb-vidmode-switch.patch: Fix string matching on XKB
    actions to be case-insensitive again. (#218336)
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Change behaviour
    to simply exit if we lose the VT switch race. (#218396)
  - Fix OS name from FC5 to RHEL5.


author: Soren Sandmann <sandmann@redhat.coM> 1.1.1-48.6.el5
changelog:
  - Disable composite when xinerama is enabled. 
  - Resolves: #213102
  - Make sure no-pseudocolor-composite.patch is applied
  - Related: #215576


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.5.el5
changelog:
  - xorg-x11-server-1.1.1-maxpixclock-option.patch: Allow the maximum pixel
    clock of a monitor to be specified in the config file. (#214869)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.4.el5
changelog:
  - xorg-x11-server-1.1.1-no-pseudocolor-composite.patch: Don't attempt to
    initialize Composite when the default visual is < 16bpp. (#215576)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.3.el5
changelog:
  - randr-disabled-fb.patch
    Add patch to prevent RandR from disabling (and then enabling) access to
    the framebuffer. Bug 214739.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.2.el5
changelog:
  - Build both x86emu and vm86 backends on x86.  Prefer x86emu when running
    in Xen dom0.  Add "Int10Backend" option to the ServerLayout section to
    allow runtime configuration.  (#213151)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.1.el5
changelog:
  - Deliver SecurityPolicy in the Xvfb subpackage on arches without hardware
    servers (s390{,x} atm).  (#213026)


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-48.el
changelog:
  - Add xorg-x11-server-1.1.1-ia64-int10.patch to not define -DPC_ on
    ia64. Bugs 210149 and 210153.
  - Add xorg-x11-server-1.1.1-ia64-pci-chipsets.patch to probe
    ia64 specific chipsets. Bug 210150


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-45.fc6
changelog:
  - xorg-x11-server-1.1.1-graphics-expose.patch: call
    miHandleExposures() in CopyArea/CopyPlane explicitly in cw to
    generate GraphicsExposes correctly. (#209336).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-44.fc6
changelog:
  - xorg-x11-server-1.1.1-offscreen-pixmaps.patch: Take the server lock
    before calling back into XAA to evict pixmaps (#204810).


author: Adam Jackson <ajackson@redhat.com> 1.1.1-43.fc6
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Since the
    VT_ACTIVATE/VT_WAITACTIVE pair are never guaranteed to successfully
    complete, set a 5 second timeout on the WAITACTIVE, and retry the pair
    until we win.  (#207746)
  - xorg-x11-server-1.1.0-pci-scan-fixes.patch: Partial revert to unbreak some
    (but not all) domainful machines, including Pegasos. (#207659)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-41.fc6
changelog:
  - xorg-x11-server-1.1.1-vbe-filter-less.patch: Be gentler about rejecting
    VESA modes early, since xf86ValidateModes should handle them just fine.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-40.fc6
changelog:
  - xorg-x11-server-1.1.1-pclose-confusion.patch: Be sure to call Pclose()
    on pipes created with Popen(), since the additional magic done by Popen()
    relative to popen() is not undone by plain pclose().  (Third base!)
  - xorg-x11-server-1.1.1-edid-hex-dump.patch: Backport EDID hex dump code
    from git.


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-39.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires version and add Conflict
    line for older mesa releases, so GLX_EXT_texture_from_pixmap opcodes
    match.


author: Adam Jackson <ajackson@redhat.coM> - 1.1.1-38.fc6
changelog:
  - xorg-x11-server-1.1.1-believe-monitor-rb-modes.patch: Always believe the
    monitor when it reports a reduced-blanking mode, even over VGA.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-35.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: Fix the check to look
    for mouse/void drivers in the running layout, as opposed to the config file,
    so as not to synthesize two mouse devices.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-34.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Be slightly more paranoid about
    setting line pitch, and rescan the mode list after pruning to re-validate
    the estimated virtual size.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-33.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to evict pixmap
    when GLX_EXT_texture_from_pixmap is first used.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-32.fc6
changelog:
  - Drop xorg-x11-server-1.1.0-gl-include-inferiors.patch now that
    compiz can uses the composite overlay window.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-31.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to log transitions.
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to always bind to
    GL_TEXTURE_RECTANGLE_ARB target.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-30.fc6
changelog:
  - xorg-x11-server-1.1.1-pci-paranoia.patch: In xf86MatchPciInstances, fail
    gracefully if xf86PciVideoInfo is NULL (like, on Xen).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-29.fc6
changelog:
  - Add xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch to fix VT
    switching (and suspend/resume) when using AIGLX. (#199692, fdo #7916).
  - Bump mesa source and libGL BuildRequires.
  - Update mesa-6.5.1 patch to work with 6.5.1 rc1 (slang_version_syn.h
    renamed to slang_pp_version_syn.h).


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-28.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Only flag modes as preferred
    if the EDID block says to.
  - xorg-x11-server-1.1.1-mode-sort-kung-fu.patch: Enforce a sort order on
    modes during lookup: builtin before driver before userdef before other,
    and preferred modes within a class before others in that class.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-27.fc6
changelog:
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Don't set an arbitrary
    pixclock limit if the monitor didn't claim to have one.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-25.fc6
changelog:
  - xorg-x11-server-1.1.1-xvfb-composite-crash.patch: Fix Xvfb's -render flag
    to also disable the Composite extension.
  - xorg-x11-server-1.1.1-mesa-6.5.1.patch: Update build system to account for
    Mesa 6.5.1 snapshots.
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Add all available
    standard timings from EDID rather than just the first five.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-22.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: When no modes or virtual size
    are given in the config file, attempt to pick a sensible one by examining
    the EDID modes and physical geometry.  Also generally make the server
    aware of driver-provided modes.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Redo, since the property I was
    checking for is both fairly common and fairly predictable.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-20.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: If we lack a mouse
    device in the config, and the user hasn't asked for any void devices,
    synthesize a mouse section.  (#200347)
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Better formatting.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-19.fc6
changelog:
  - xorg-x11-server-1.1.1-builderstring.patch: Enable the builder info
    string at configure time;
  - ... and use it to print the package name and version.
  - xorg-x11-server-1.1.1-defaultdepth-24.patch: Set default depth to 24.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Add EDID quirks list as
    an experiment; needs a better solution though.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-17.fc6
changelog:
  - Add xorg-x11-server-1.1.1-offscreen-pixmaps.patch to default
    XaaNoOffscreenPixmaps to false, for now.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-15.fc6
changelog:
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Allow HorizSync and
    VertRefresh to be overridden independently.


author: Kevin E Martin <kem@redhat.com> - 1.1.1-14.fc6
changelog:
  - xorg-x11-server-1.1.1-revert-xkb-change.patch: Revert change to xkb that
    broke XkbGetKeyboard().


author: Adam Jackson <ajackson@redhat.com> 1.1.1-13.fc6
changelog:
  - Comment out the 848x480 modes from the extramodes patch.  Any panel that
    wants it should be doing EDID injection by now, and it screws up
    autoconfig by _just_ fitting in the ranges for 800x600.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-12.fc6
changelog:
  - Added "1920x1080" CVT modes to Red-Hat-extramodes patch for (#195272)
  - Sorted the extramodes file by X res, then Y res for ease of maintenance.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-10.fc6
changelog:
  - xorg-x11-server-1.1.1-selinux-awareness.patch: Added for new Mesa
    selinux code.
  - xorg-x11-server-1.1.1-Xdmx-render-fix-fdo7482.patch: Backport a Render
    fix for Xdmx.
  - xorg-x11-server-1.1.1-no-composite-in-xnest.patch: Disable Composite in
    Xnest, as it's known not to work.
  - Fix default font path to match the config file we used to generate.
  - Fix default module set to match the config file we used to generate.
  - Disable use of TLS GLX dispatch to match Mesa selinux nonsense.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-7.fc6
changelog:
  - Only ship pcitweak manpage if we are building it (#199653)
  - Fix dist tag usage (Was {dist}, should be {?dist})
  - Added xorg-x11-server-libxf86config-dont-write-empty-sections.patch to
    prevent config file parser/writer from writing out empty sections (#198653)
  - Add dependency on xorg-x11-fonts-base to all X server subpackages (#186091)


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-5.fc5.aiglx
changelog:
  - Enable composite by default.
  - Split spiffiffity patch into one patch per change:
    xorg-x11-server-1.1.0-no-move-damage.patch and
    xorg-x11-server-1.1.0-dont-backfill-bg-none.patch.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-26
changelog:
  - Add xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch to hook up the
    GLX_MESA_copy_sub_buffer extension.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-25.fc6
changelog:
  - Start using the new %{dist} tag <http://fedoraproject.org/wiki/DistTag>
    experimentally in the package Release field to help prevent problems like
    (#197266) from occuring in the future.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-24
changelog:
  - Don't (uselessly) link the server against zlib.
  - Fix the 1680x1050 modes to be the CVT timings instead of GTF.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-23
changelog:
  - Fix an open-coded check for reduced-blanking modes to only apply to analog
    connectors.
  - Reorder the EDID patches slightly.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-22
changelog:
  - Added xorg-xserver-1.1.0-setuid.diff to fix potential security issue (#196094)
  - Disable DRI on ppc64 builds.
  - Conditionalize inclusion of DRI related X server modules to with_dri builds.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-21
changelog:
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to use glTexSubImage2D
    to only update the part of the texture that changed, based on damage
    regions.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-20
changelog:
  - Remove with_xnest_server conditional, and fix more BuildRequires to pull
    in libX11-devel, libXext-devel, zlib-devel, etc. for Xnest and Xephyr.
  - Remove unwanted files leftover in buildroot for s390/s390x builds.
  - Add Xserver.1x manpage to multiple subpackages, as it applies equally to
    Xorg, Xnest, Xvfb, Xephyr.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-19
changelog:
  - Add with_xnest_server conditional and disable on s390, since Xnest
    fails to build on there (Xlib doesn't get added to the link line).
  - Add -f to removal of xorgconfig and others which may or may not be built.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-18
changelog:
  - Add xorg-x11-server-1.1.0-convolution-filter-fix.patch and
    xorg-x11-server-1.1.0-tfp-damage.patch backported to make compiz go
    faster and make compiz shadows work.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-17
changelog:
  - Disable filling in monitor gamma info from EDID momentarily, since drivers
    will use that field to set the card's gamma ramp.
  - Backport some stuff from git: cw crash fix, faster pci scanning, some
    log message cleanup.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-16
changelog:
  - Enable spec support for s390, s390x, alpha, sparc, and sparc64 architectures.
  - Add with_hw_servers conditional to disable hardware servers on s390/s390x.
  - Add with_dmx_server to disable DMX on s390/s390x.
  - Added "release" number to "BuildRequires: freetype-devel >= 2.1.9-1" for
    dependency futureproofing.
  - Force "--disable-dri" on s390/s390x, to attempt to work around ./configure
    failure to find libdrm, which should not be needed on s390 builds anyway.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-15
changelog:
  - Add loader infrastructure for publishing PCI ID lists in the drivers, and
    autodetecting drivers based on that.  Currently unused since no drivers
    publish such a list yet.
  - Fix mouse autoconfig to use /dev/input/mice instead of /dev/mouse.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-14
changelog:
  - Change selection atom to _COMPIZ_GL_INCLUDE_INFERIORS in
    xorg-x11-server-1.1.0-gl-include-inferiors.patch.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-7
changelog:
  - Change "BuildRequires: freetype-devel >= 2.1.10" to 2.1.9, as Xorg 7.0
    contains 2.1.9 in "extras" and 7.1 does not appear to have a requirement on
    a newer freetype.
  - Janitorial cleanups for spec file changelog consistency.
  - Call aclocal before automake, otherwise automake >= 1.9.6 is required in
    order to rebuild the package.
  - Build 1.1.0-4, 1.1.0-5, and 1.1.0-6 appear to have failed in brew but nobody
    fixed them.  It appears automake 1.9 breaks the build.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-4
changelog:
  - Hack the kdrive makefile to only attempt to build Xephyr, avoids linking
    sixteen extra servers just to delete them.
  - Move cvt to the default install set, same as gtf.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-3
changelog:
  - Drop the libxf86config -fPIC patch, just build the whole thing with
    --with-pic instead.  Add void and evdev to the required driver list for
    upcoming autoconfig magic.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Add "Requires: xorg-x11-proto-devel >= 7.1-1" to sdk for numerous (52) bug
    reports of drivers failing to build with mock.


author: Mike A. Harris <mharris@redhat.com> 1.0.99.903-2
changelog:
  - Disable dependency on xorg-x11-drivers package, for OLPC.  (#191781)
  - Add "BuildRequires: freetype-devel >= 2.1.10" for bug (#192021)


author: Adam Jackson <ajackson@redhat.com> 1.0.99.902-1
changelog:
  - Update to 7.1RC2 plus fix for CVE 2006-1526.  Disable the fastpathing
    patch for fdo bug #4320 since that should be covered in the generic
    Render code now.


author: Kristian Høgsberg <krh@redhat.com> 1.0.99.2-1
changelog:
  - Update to 1.0.99.2 snapshot and go back to using mesa-source package.
  - Drop xorg-server-1.0.99-composite-visibility.patch.
  - Drop xorg-server-1.0.1-backtrace.patch.
  - Drop xorg-server-0.99.3-rgb.txt-dix-config-fix.patch.
  - Add xorg-server-1.0.99.2-spiffiffity.patch.


author: Soren Sandmann <sandmann@redhat.com> 1.0.99.1-2
changelog:
  - Add xorg-server-1.0.99-composite-visibility.patch to get rid of flashing
    titlebars in compositing metacity.


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Added xorg-server-1.0.1-backtrace.patch which enables the Xorg server's
    built in backtrace support by default, as it was inadvertently disabled in
    7.0.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-6
changelog:
  - Added xorg-x11-server-1.0.1-Red-Hat-extramodes.patch which is a merger of
    XFree86-4.2.99.2-redhat-custom-modelines.patch and
    xorg-x11-6.8.2-laptop-modes.patch from FC4 for (#180301)
  - Install a copy of the vesamodes and extramodes files which contain the list
    of video modes that are built into the X server, so that the "rhpxl" package
    does not have to carry around an out of sync copy for itself. (#180301)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xorg-x11-server-1.0.1-composite-fastpath-fdo4320.patch with changes
    suggested by ajax to fix (fdo#4320).
  - Cosmetic cleanups to satiate the banshees.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added xorg-x11-server-1.0.1-fbpict-fix-rounding.patch from CVS HEAD.
  - Added xorg-x11-server-1.0.1-SEGV-on-null-interface.patch which prevents a
    SEGV on null interfaces (#174279,178986)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-2
changelog:
  - Added xserver-1.0.0-parser-add-missing-headers-to-sdk.patch to provide the
    necessary libxf86config.a headers to be able to use the library. (#173084)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xserver 1.0.0 from X11R7 RC4
  - Removed the following patches, which are now integrated upstream:
    - xorg-server-0.99.3-rgb.txt-dix-config-fix.patch,
    - xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch
  - Changed manNx directories to manN to match upstream defaults.
  - Added libxf86config.a to sdk subpackage.
  - Updated build dependency of "mesa-libGL-devel >= 6.4.1-1"
  - Added "BuildRequires: xorg-x11-font-utils >= 1.0.0-1" to be able to query
    the fontdir from fontutil.pc which is implemented currently by a custom
    patch.
  - Enable xtrap, xcsecurity, xevie, and lbx on all builds, not just DRI builds.
  - Fix sdk installation path, so that drivers can find the files again.
  - Update file manifest, to deal with X server modules that have moved to
    a subdir, etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-9
changelog:
  - Added "Requires: xorg-x11-drivers >= 0.99.2-4" as a dependency of the Xorg
    subpackage, to ensure that anaconda installs all of the drivers during OS
    installs and upgrades, as requested by Jeremy Katz.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-8
changelog:
  - Added xorg-server-0.99.3-rgb.txt-dix-config-fix.patch which fixes the
    --with-rgb-path option to actually *work*.
  - Updated libdrm dep to 1.0.5


author: Mike A. Harris <mharris@redhat.com> 0.99.2-7
changelog:
  - Update xorg-x11-server-utils dep to 0.99.2-5 to ensure rgb.txt is installed
    in correct location - _datadir/X11/rgb
  - Added --with-rgb-path configure option to specify _datadir/X11/rgb so the
    X server finds the rgb.txt database properly, for bugs (#173453, 173435,
    173428, 173483, 173734, 173737, 173594)
  - Added xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch to prevent SSE/MMX
    code from being activated on non-capable VIA CPU. (#173384,fdo#5093)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-6
changelog:
  - Add the missing rpm pre script from monolithic xorg-x11 packaging,
    clean it up a bit, reorder it for slight performance gain.
  - Add some perl magic to pre script to remove RgbPath from xorg.conf,
    in order to fix bug (#173036, 173435, 173453, 173428)
  - Add more perl magic to pre script to update ModulePath to the new
    location if it is specified in xorg.conf.
  - Added xorg-x11-server-0.99.3-init-origins-fix.patch ported from monolithic
    xorg-x11 package to fix Xinerama bug.
  - Added xorg-redhat-die-ugly-pattern-die-die-die.patch to kill the ugly grey
    stipple once again for bug (#173423).
  - Added "BuildRequires: libdrm-devel" for DRI enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added temporary "BuildRequires: libXfont-devel >= 0.99.2-3" and
    "Requires: libXfont-devel >= 0.99.2-3" to ensure early-testers of
    pre-rawhide modular X have installed the work around for (#172997).
  - Added implementation specific "Requires: xkbdata" to Xorg subpackage, as
    we want to ensure the xkb data files are present, but allow us the option
    of easily switching implementations to "xkeyboard-config" at a future
    date, if we decide to go that route.
  - Re-enable _smp_mflags during build.
  - Added "Requires: xorg-x11-drv-vesa" to Xorg subpackage (#173060)


author: Jeremy Katz <katzj@redhat.com> 0.99.3-2
changelog:
  - add some deps to the Xorg subpackage for base fonts, keyboard and mouse 
    drivers, and rgb.txt that the server really wont work without


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Update to xorg-server-0.99.3 from X11R7 RC2.
  - Add xorg-server.m4 to sdk subpackage, and "X" symlink to Xorg subpackage.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added versioning to Xorg virtual Provide, to allow config tools and driver
    packages to have version based requires.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Update to xorg-server-0.99.2 from X11R7 RC1.
  - Add "BuildRequires: xorg-x11-util-macros >= 0.99.1".
  - Add "BuildRequires: mesa-source >= 6.4-4" for DRI builds.
  - Added dmx related utilities to Xdmx subpackage.
  - Individually list each X server module in file manifest.
  - Hack man1 manpages to be installed into man1x.
  - Add the following ./configure options --disable-dependency-tracking,
    --enable-composite, --enable-xtrap, --enable-xcsecurity, --enable-xevie,
    --enable-lbx, --enable-dri, --with-mesa-source, --with-module-dir,
    --with-os-name, --with-os-vendor, --with-xkb-output, --disable-xorgcfg
  - Added getconfig, scanpci et al to Xorg subpackage
  - Added inb, inl, inw, ioport, outboutl, outw, pcitweak utils to Xorg package
    conditionally, defaulting to "off".  These utilities are potentially
    dangerous and can physically damage hardware and/or destroy data, so are
    not shipped by default.
  - Added "BuildRequires: libdmx-devel" for dmx utilities
  - Added "BuildRequires: libXres-devel" for Xres examples
  - Added {_libdir}/xserver/SecurityPolicy to Xorg subpackage for XSECURITY


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.2
changelog:
  - Fix license tag to be "MIT/X11"
  - Change Xdmx subpackage to Obsolete xorg-x11-Xdmx instead of xorg-x11-Xnest


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.1
changelog:
  - Update BuildRequires for new library package naming (libX...)
  - Use Fedora Extras style BuildRoot tag
  - Invoke make with _smp_mflags to take advantage of SMP systems


author: Kristian Hogsberg <krh@redhat.com> 0.99.1-2.cvs20050830
changelog:
  - Go back to %spec -n, use new cvs snapshot that supports overriding
    moduledir during make install, use %makeinstall.
  - Drop %{moduledir}/multimedia globs.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050825.0
changelog:
  - Added build dependency on xorg-x11-libfontenc-devel, as the build fails
    half way through without it, even though upstream dependencies do not
    specify it as required.


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.24.el5
changelog:
  - fixed one regexp bug and added a (rhbz#922450)
  - Another small change on the algorithm for the elimination of epsilon (rhbz#922450)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.22.el5
changelog:
  - fix validation issues with some XSD (rhbz#877348)
  - xmlDOMWrapCloneNode discards namespace of the node parameter (rhbz#884707)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.20.el5
changelog:
  - Implement some default limits in the XPath module (CVE-2011-1944)
  - Change the XPath code to percolate allocation errors (CVE-2011-1944)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.18.el5
changelog:
  - Fix parser local buffers size problems (rhbz#843740)
  - Fix entities local buffers size problems (rhbz#843740)
  - Fix an error in previous commit (rhbz#843740)


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.15.el5
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771907


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-7
changelog:
  - permissions of deliver and dovecot.conf from 1.0.7-5 reverted
  - password can be stored in different file readable only for root now
  - Resolves: #436287, CVE-2008-4870


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-5
changelog:
  - change permissions of deliver and dovecot.conf to prevent possible password exposure
  - Resolves: #436287


author: Dan Horak <dhorak@redhat.com> - 1.0.7-3
changelog:
  - fix package ownership for /etc/pki/dovecot/private (#448089)
  - update init script (#238016)
  - ask for SSL cert password during start-up (#436287)
  - fix for illegal characters in passwd (#439369)
  - Resolves: #448089, #238016, #436287, #439369


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-2
changelog:
  - LDAP+auth cache user login mixup (CVE-2007-6598, #427575)
  - insecure mail_extra_groups option (CVE-2008-1199, #436927)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-1
changelog:
  - update to latest upstream, fixes a few bugs (#331441, #245249), plus two
    security vulnerabilities (CVE-2007-2231, CVE-2007-4211)
  - increased default login_process_size to 64 (#253363)


author: Petr Rockai <prockai@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216510, CVE-2006-5973)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to /usr/share/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Benjamin Tissoires <btissoir@redhat.com> 1.2.2-1.0.6
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)


author: Soren Sandmann <ssp@redhat.com> 1.2.2-1.0.5.el5
changelog:
  - cve-2013-6462.patch: sscanf overflow (bug 1049684)
  - sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libXfont to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Removed libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch, which is now
    integrated upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-3
changelog:
  - Added libXfont-0.99.2-fontdir-attrib-fix-bug-172997.patch to remove
    conditionalization of FONTDIRATTRIB from sources instead of tweaking
    CFLAGS for bug (#172997, fdo#5047).


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXfont to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXfont to version 0.99.1 from X11R7 RC1
  - Remove libfontcache* from file manifests, as it is static linked into Xfont


author: Mike A. Harris <mharris@redhat.com> 0.99.0-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new libX* style package names


author: Mike A. Harris <mharris@redhat.com> 0.99.0-4
changelog:
  - Added xorg-x11-proto-devel dependency to 'devel' subpackage, because the
    libXfont headers use some of the protocol headers, but the autotooling of
    libXfont doesn't autodetect this yet.  Discovered when bdftopcf failed to
    compile while trying to package xorg-x11-font-utils, even though libXfont
    headers were installed.


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Changed all virtual BuildRequires to the "xorg-x11-" prefixed non-virtual
    package names, as we want xorg-x11 libs to explicitly build against
    X.Org supplied libs, rather than "any implementation", which is what the
    virtual provides is intended for.
  - Added freetype-devel build dependency


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Jan Horak <jhorak@redhat.com> - 31.3.0-9
changelog:
  - Fixed problems with dictionaries (mozbz#1097550)
  - Fixed rhbz#1164855 - firefox.desktop is missing
    x-scheme-handler MimeType entries


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-18.el5
changelog:
  - don't generate weak control key for resolver (CVE-2014-9293)
  - don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
  - fix buffer overflows via specially-crafted packets (CVE-2014-9295)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-15.el5
changelog:
  - revert init script priority (#470945, #689636)
  - drop tentative patch (#489835)
  - move restorecon call to %posttrans


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-13.el5
changelog:
  - don't crash with more than 512 local addresses (#661934)
  - add -I option (#528799)
  - fix -L option to not require argument (#460434)
  - move ntpd and ntpdate to /sbin and start earlier on boot (#470945, #689636)
  - increase memlock limit (#575874)
  - ignore tentative addresses (#489835)
  - print synchronization distance instead of dispersion in ntpstat (#679034)
  - fix typos in ntpq and ntp-keygen man pages (#664524, #664525)
  - clarify ntpd -q description (#591838)
  - don't verify ntp.conf (#481151)
  - replace Prereq tag


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-11.el5
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500784, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500784, CVE-2009-0159)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-9.el5
changelog:
  - fix selecting multicast interface (#444106)
  - disable kernel discipline when -x option is used (#431729)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-8.el5
changelog:
  - avoid use of uninitialized floating-point values in clock_select (#250838)
  - generate man pages from html source, include config man pages (#307271)
  - add note about paths and exit codes to ntpd man page (#242925, #246568)
  - add section about exit codes to ntpd man page (#319591)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2p1-6.el5
changelog:
  - fix broadcast client to accept broadcasts on 255.255.255.255 (#226958)
  - compile with crypto support on 64bit architectures (#239580)
  - add ncurses-devel to buildrequires (#239580)
  - exit with nonzero code if ntpd -q did not set clock (#240134)
  - fix return codes in init script (#240118)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2.2-3
changelog:
  - fix manycast support in ntpdate (#194329)
  - reply to manycast requests with null refid
  - enable mlockall (#195617)
  - correct threshold value in ntpdate manpage


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-14
changelog:
  - modify ntp.conf, change default restrict, remove broadcastdelay,
    use fedora.pool.ntp.org (#189667)
  - don't install drift file
  - remove unsupported options from ntptrace manpage (#137717)
  - fix default paths in manpages for ntp-keygen and ntpdate


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-12
changelog:
  - fix initscript:
    - replace -U with -u in getopts (#187003)
    - don't pass group to ntpdate -U argument and ignore -i in options (#142926)
    - set ntpconf for -c
    - remove -p 8 from ntpdate arguments
    - don't call ntpdate when step-tickers doesn't contain anything useful
      and -x isn't in options
  - fix default keyfile for ntpdate (#183196)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20050816-11
changelog:
  - update man pages (#153195, #162856)
  - drop C-Frame-121, vsnprintf, minusTi and loconly patch
  - prevent segfault when loopback interface is not configured (#159056)
  - spec cleanup


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-10
changelog:
  - ntpd does not submit his local clock (if there is no peer).
    ntpdate->ntpd #163862 , Patch13: ntp-stable-4.2.0a-20050816-loconly.patch


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-3
changelog:
  - A similar patch as ntp-4.0.99j-vsnprintf.patch in FEDORA CORE 4
  - (current patch is ntp-stable-4.2.0a-20050816-vsnprintf.patch)


author: Petr Raszyk <praszyk@redhat.com> 4.2.0.a.20050816-2
changelog:
  - Fix fails on upgrade, if ntpd is disabled (#166773)
  - A cosmetic patch. There are some comments and braces '{' '}' added.
  - One unprintable character was converted to octal-form .
  - It can be removed anytime (conversion of the cvs-projets for C-Frame 121,
  - (auto-debug, auto-trace for cfr-printnet server).


author: Jindrich Novy <jnovy@redhat.com> 4.2.0.a.20050816-1
changelog:
  - update to the latest stable 4.2.0.a.20050816
  - drop upstreamed .gcc4, .vsnprintf patches
  - remove obsolete .autofoo patch
  - make patch numbering less chaotic
  - don't package backup for .droproot patch


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Harald Hoyer <harald@redhat.de> 4.1.1b-1
changelog:
  - updated to version 4.1.1b
  - improved initscript - use ntpdate on -x
  - improved initscript - open firewall only for timeservers
  - ntp-4.1.1a-adjtime.patch removed (already in source)
  - ntp-4.1.1a-mfp.patch removed (already in source)
  - ntp-4.0.99j-vsnprintf.patch removed (already in source)


author: Harald Hoyer <harald@redhat.de> 4.1.0b-4
changelog:
  - created drift with dummy value #58294
  - grep for timeservers in ntp.conf also for ntpdate #57837
  - check return value of ntpdate #58836


author: Harald Hoyer <harald@redhat.de> 4.1.0-1
changelog:
  - wow, how stupid can a man be ;).. fixed #50698 
  - updated to 4.1.0 (changes are small and in non-critical regions)


author: Harald Hoyer <harald@redhat.de>
changelog:
  - new snapshot
  - removed typos and security patch (already there)
  - commented multicastclient in config file


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Add the remote root exploit patch (based on ntp-hackers).
  - Enhance droproot patch (more documentation, etc.) <Jarno.Huuskonen@uku.fi>
  - Tweak the droproot patch to include sys/prctl.h, not linux/prctl.h
  (implicit declarations)
  - Remote groupdel commands, shouldn't be needed.
  - Removed -Wcast-qual and -Wconversion due to excessive warnings (hackish).
  - Make ntp compilable with both glibc 2.1 and 2.2.x (very dirty hack)
  - Add %{_sysconfdir}/sysconfig/ntpd which drops root privs by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - require/buildprereq libcap/libcap-devel
  - use 'ntp' user, tune the pre/post scripts, %files
  - add $OPTIONS to the init script


author: Preston Brown <pbrown@redhat.com>
changelog:
  - allow comments in %{_sysconfdir}/ntp/step-tickers file (#28786).
  - need patch0 (glibc patch) on ia64 too


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - comment out default values for keys, warn about starting with -A (#19316).
  - take out -A from ntpd startup as well.
  - update to 4.0.99k.


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-36
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580543, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35.2
changelog:
  - when setting file contexts for creation of new files, only fail outright
    if we were in enforcing mode and the file needed to be given a specific
    label (#368281)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-35
changelog:
  - add missing 'ed' builddep
  - set LDFLAGS and CPPFLAGS so that our local copy of DB is more likely to be
    found by the configure script


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-33
changelog:
  - update to db 4.3.28
  - correct a use of uninitialized memory in the bundled libdb (Arjan van de Ven)
  - obsolete the compat package, which is useless because current glibc wouldn't
    use it anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set errno to ENOENT by default so that we don't leave stale errno values
    around in error cases (#152467)
  - clear the entire key DBT before handing it to a get() function


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-30
changelog:
  - update to DB 4.3 (#140094)
  - add sample getent-based makefile as a doc file
  - pass S_IFREG to matchpathcon() to properly match contexts which are earmarked
    for only files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-28
changelog:
  - set _filter_GLIBC_PRIVATE instead of overriding findrequires, so that file
    colors get marked correctly (originally #128436)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-27
changelog:
  - only provide a -compat subpackage on platforms where glibc provides
    compat NSS modules (%{ix86})
  - make -compat depend on the same version of the non-compat package


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-24
changelog:
  - disable use of RPM's internal dependency generator, which was preventing
    the filtering out of glibc private dependencies (#112849)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-18
changelog:
  - disable various language bindings when building the bundled DB library
  - remove unpackaged files from the buildroot in %install
  - don't install the compat version on arches where if we don't need one


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-8
changelog:
  - build using a bundled Berkeley DB with a unique name to avoid possible symbol
    collisions with binaries using different versions (mix multiple versions of
    any shared library in a single process, observe as wackiness ensues)


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-32
changelog:
  - New SSLOptions directive to enable SSL3 and/or RC4, which are now
    disabled by default (bug #1161218).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-31
changelog:
  - Applied patch to fix CVE-2012-5519 (privilege escalation for users
    in SystemGroup or with equivalent polkit permission).  This prevents
    HTTP PUT requests with paths under /admin/conf/ other than that for
    cupsd.conf, and also prevents such requests altering certain
    configuration directives such as PageLog and FileDevice (bug #875898).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-29
changelog:
  - The imageto* filters could crash with bad GIF files
    (CVE-2011-2896, STR #3867, STR #3914, bug #752118).


author: Jiri Popelka <jpopelka@redhat.com> 1:1.3.7-28
changelog:
  - Web interface didn't show completed jobs for printer (STR #3436, bug #625900)
  - Serial backend didn't allow a raw job to be canceled (STR #3649, bug #625955)
  - Fixed condition in textonly filter to create temporary file
    regardless of the number of copies specified. (bug #660518)


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-25
changelog:
  - Applied patch to fix cupsd memory corruption vulnerability
    (CVE-2010-2941, STR #3648, bug #624438).
  - Fix latent privilege escalation vulnerability (CVE-2010-2431,
    STR #3510, bug #605397).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-24
changelog:
  - Try to avoid overwriting text with page labels (STR #3415,
    bug #527187).
  - Reverted patch for bug #572338 as that and related bugs need a
    solution that can guarantee no regressions.


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to avoid endless loop in
    socket backend process (bug #605584, STR #3001).
  - Applied patch to avoid infinite loop in
    mailto notifier (bug #608392, STR #3609).
  - Fixed typo in undo-str2537 patch (bug #608016).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-22
changelog:
  - Applied patch for CVE-2010-1748 (web interface memory disclosure,
    STR #3577, bug #591983).
  - Applied patch for CVE-2010-0542 (texttops unchecked memory
    allocation failure leading to NULL pointer dereference, STR #3516,
    bug #587746).
  - Applied patch for CVE-2010-0540 (CUPS administrator web interface
    CSRF, STR #3498, bug #588805).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-21
changelog:
  - Adjust texttops output to be in natural orientation (STR #3563).
    This fixes page-label orientation when texttops is used in the
    filter chain (bug #572338).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-16
changelog:
  - Applied patch to prevent memory leak when adding/modifying printers
    (bug #540646, STR #2836).
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Fixed lspp.patch to avoid memory leak (bug #496008).
  - Applied patches to enable changing of quotas
    with lpadmin (bug #496082, STR #3077, STR #3078).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Use poppler pdftops wrapper filter from upstream (bug #527429).  No
    longer need ext, includeifexists, strict-aliasing,
    CVE-2009-0146,0147,0166, cert-batch3892,4781,5486,19856,19869, or
    CVE-2009-3608,3609 patches.
  - Also fixes rotation of landscape documents when printed from OS X
    (bug #447987).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Applied patch to prevent removing of multiple file job when
    the printer is disabled and enabled again (bug #506257, STR #3226).
  - Applied patch to fix issues with CGI handling (bug #497632, STR #2781, STR #2816).
  - Applied patch to fix incorrect CGI handling (bug #460898, STR #3194)
    and use php-cgi instead of php when running PHP scripts (bug #460898, STR #2923).


author: Jiri Popelka <jpopelka@redhat.com>
changelog:
  - Requires tmpwatch for the cron.daily script (bug #487495).
  - Applied patch to fix POSTing to custom cgi (bug #506316, STR #3221).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-13
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.75-2.5.4.0
changelog:
  - Bump to 2.5.4 using OpenJDK 7u75 b13.
  - Fix elliptic curve list as part of fsg.sh
  - Resolves: rhbz#1180294


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.1
changelog:
  - Update to latest 1.13.6 release candidate tarball
  - Fixes a number of issues found with b34:
  - * OJ51, PR2187: Sync patch for 4873188 with 7 version
  - * OJ52, PR2185: Application of 6786276 introduces compatibility issue
  - * OJ53, PR2181: strict-aliasing warnings issued on PPC32
  - * OJ54, PR2182: 6911104 reintroduces test fragment removed in existing 6964018 backport
  - * S6730740, PR2186: Fix for 6729881 has apparently broken several 64 bit tests: "Bad address"
  - * S7031830, PR2183: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
  - Also includes PR2180, so patch dropped from RPM.
  - Resolves: rhbz#1180289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.6.0.34-1.13.6.0
changelog:
  - Update to IcedTea 1.13.6
  - Apply pr2125.patch in generate_rhel_zip.sh to remove unwanted elliptic curves.
  - Add no_pr2125.patch to avoid repeating the procedure during the IcedTea build.
  - Avoid duplicating the OpenJDK build version by making more use of %{openjdkver}.
  - Add US_export_policy.jar and local_policy.jar to packages.
  - Resolves: rhbz#1180289


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-123
changelog:
  - Remove gconv transliteration loadable modules support (CVE-2014-5119,
    - _nl_find_locale: Improve handling of crafted locale names (CVE-2014-0475,


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-121
changelog:
  - Fix return code when starting an already started nscd daemon (#979413).
  - Fix getnameinfo for many PTR record queries (#1020486).
  - Return EINVAL error for negative sizees to getgroups (#995207).


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-119
changelog:
  - Add support for newer L3 caches on x86-64 and correctly count
    the number of hardware threads sharing a cacheline (#1003420).


author: Carlos O'Donell <carlos@redhat.com> - 2.5-114
changelog:
  - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951132)
    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951132)


author: Jeff Law <law@redhat.com> - 2.5-106
changelog:
  - Fix errno for various overflow situations in vfprintf.  Add
      missing overflow checks. (#857387)


author: Jeff Law <law@redhat.com> - 2.5-105
changelog:
  - Handle failure of _nl_explode_name in all cases (#848481)
    - Define the default fuzz factor to 2 to make it easier to manipulate
      RHEL 5 RPMs on RHEL 6 and newer systems.


author: Jeff Law <law@redhat.com> - 2.5-102
changelog:
  - Really fix POWER4 strncmp crash (#766832).
  - Fix integer overflow leading to buffer overflow in strto* (#847930)


author: Patsy Franklin <patsy@redhat.com> - 2.5-97
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when
    converting from IBM930.    (#823905)


author: Jeff Law <law@redhat.com> - 2.5-92
changelog:
  - Fix return code when stopping already stopped nscd daemon (#678227)
  - Remove MAP_32BIT for pthread stack mappings,
    use MAP_STACK instead (#641094)
  - Fix setuid vs sighandler_setxid race (#769852)
  - Fix access after end of search string in regex matcher (#757887)
  - Fix POWER4 strncmp crash (#766832)
  - Fix SC_*CACHE detection for X5670 cpus (#692182)
  - Fix parsing IPV6 entries in /etc/resolv.conf (#703239)
  - Fix double-free in nss_nis code (#500767)


author: Jeff Law <law@redhat.com> - 2.5-89
changelog:
  - Do not override TTL of CNAME with TTL of its alias (#808014)
  - Fix short month names in fi_FI locale #(657266).
  - Fix nscd crash for group with large number of members (#788989)


author: Jeff Law <law@redhat.com> - 2.5-88
changelog:
  - Fix Slovakia currency (#799853)
  - Fix getent malloc failure check (#806403)
  - Fix short month names in zh_CN locale (#657588)
  - Fix decimal point symbol for Portuguese currency (#710216)
  - Avoid integer overflow in sbrk (#767358)
  - Avoid race between {,__de}allocate_stack and __reclaim_stacks during
    fork (#738665)
  - Fix race between IO_flush_all_lockp & pthread_cancel (#751748)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Andreas Schwab <schwab@redhat.com> - 2.5-67
changelog:
  - ldd: never run file directly (#531160)
  - Implement greedy matching of weekday and month names (#657570)
  - Fix incorrect numeric settings (#675259)
  - Implement new mode for NIS passwd.adjunct.byname table (#678318)
  - Query NIS domain only when needed (#703345)
  - Count total processors using sysfs (#706894)
  - Translate clone error if necessary (#707998)
  - Workaround kernel clobbering robust list (#711531)


author: Andreas Schwab <schwab@redhat.com> - 2.5-66
changelog:
  - Use correct type when casting d_tag (#599056, CVE-2010-0830)
  - Report write error in addmnt even for cached streams (#688980,
    CVE-2011-1089)


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Andreas Schwab <schwab@redhat.com> - 2.5-62
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Andreas Schwab <schwab@redhat.com> - 2.5-54
changelog:
  - Add timestamps to nscd logs (#527558)
  - Fix index wraparound handling in memusage (#531576)
  - Handle running out of buffer space with IPv6 mapping enabled (#533367)
  - Don't deadlock in __dl_iterate_phdr while (un)loading objects (#549813)
  - Avoid alloca in setenv for long strings (#559974)
  - Recognize POWER7 and ISA 2.06 (#563563)
  - Add support for AT_BASE_PLATFORM (#563599)
  - Restore locking in free_check (#585674)
  - Fix lookup of collation sequence value during regexp matching (#587360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Jakub Jelinek <jakub@redhat.com> 2.5-39
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#502901, BZ#9957)
  - avoid extraneous comma at the end of enum in dlfcn.h (#504704)


author: Jakub Jelinek <jakub@redhat.com> 2.5-38
changelog:
  - add optional experimental malloc (enable with MALLOC_PER_THREAD=1
    in environment, #494758)
  - nscd backport (#483636)


author: Jakub Jelinek <jakub@redhat.com> 2.5-37
changelog:
  - remove const attribute from sysconf (#490821, BZ#3493)
  - add RUSAGE_THREAD definition (#484214)
  - update i?86/x86_64 cache info for sysconf on newer CPUs


author: Jakub Jelinek <jakub@redhat.com> 2.5-36
changelog:
  - nscd GC fixes (#483636, BZ#5382, BZ#5381, BZ#9741, BZ#9750)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - fix a corner case in realloc (#478499)
  - fix a setlocale race (#455580, BZ#6712)
  - fix getifaddrs for Infiniband interfaces (#463252, BZ#6589)
  - use private futexes for process private PI mutexes (#495955, BZ#6955)
  - optimize pthread_mutex_{,un}lock for the most common mutex types (#467316)
  - fix getgrouplist with [!NOTFOUND=return] (#470768)
  - don't open /var/run/utmp in setutent_file read-write unnecessarily
    to avoid audit messages (#475332)
  - fix dlopen memory leak (#476725, BZ#6763)
  - fix crashes when fork is running in one thread concurrently with
    pthread stack cache updates in another thread (#477705)
  - fix getent to not print comma in between network aliases (#484082)
  - attempt to preserve nscd process name in paranoia mode restarts
    (#490010)
  - fix inet6_opt_init (#488748, BZ#5760)
  - fix getnameinfo with both nodename and servname NULL
    and NI_NAMEREQD in flags (#489419, BZ#7080)
  - fix inet6_rth_add (#494850, BZ#9881)
  - fix inet6_rth_reverse (#494849, BZ#9880)
  - fix _dl_runtime_profile on s390x (#470300)


author: Jakub Jelinek <jakub@redhat.com> 2.5-35
changelog:
  - increase default buffer size in opendir, if malloc fails,
    retry malloc with smaller size (#484440)


author: Jakub Jelinek <jakub@redhat.com> 2.5-25
changelog:
  - fix yp_order (#435519, BZ#5854)
  - new x86_64 optimized memset (#437394)
  - fix ppc64 dynamic linker synchronization (#441702, BZ#5741)
  - malloc speedup (#451184, #460154, BZ#4349)
  - document that setenv and putenv aren't thread-safe (#316791)
  - speed up qsort (#435182)
  - provide unwind info for x86_64 signal return pad (#445259)
  - use DNS provided TTL for nscd hosts cache (#454299)
  - robustify nscd.conf reading (#438456, BZ#5818)
  - power4/power6 math backports (#440103)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-19
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-15
changelog:
  - robust mutex fixes (BZ#4512)
  - *printf fixes (BZ#4514)
  - as_IN updates (#218035)
  - use MADV_DONTNEED in malloc (#237711)
  - fix sem_timedwait on i?86 and x86_64
  - fix dladdr if some shared library is mapped into ld.so intersegment
    VM hole (#232224, BZ#4131)
  - fdatasync is a cancellation point (BZ#4465)
  - add a temporary hack to avoid reruning DSO initializers if dlopen
    is called from _dl_fini destructors (#234946)
  - build s390 31-bit libs with -march=z900, i.e. only support
    64-bit s390x CPUs (#228127)


author: Jakub Jelinek <jakub@redhat.com> 2.5-14
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix NIS+ __nisfind_server (#235229)
  - assorted NIS+ speedups (#233460)
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - further localedef robustification (#203728)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070)
  - fix _XOPEN_VERSION (BZ#4364)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458,
    BZ#3348, BZ#4344, BZ#4368, BZ#4305, BZ#4306)
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - assorted locale data fixes (BZ#3322, BZ#3995, BZ#3884, BZ#3851, BZ#4411)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - update ru and sv translations
  - fix fesetround return value on ia64
  - fix nscd SIGHUP database invalidation


author: Jakub Jelinek <jakub@redhat.com> 2.5-9
changelog:
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)


author: Jakub Jelinek <jakub@redhat.com> 2.5-8
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5-7
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)
  - fix ttyname and ttyname_r with invalid file descriptor (#218276)
  - fix nis_getnames if the default domain doesn't contain at least
    two dots (#206483)
  - fix memusage with realloc (x, 0)


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.5-4
changelog:
  - fix i?86 6 argument syscalls (e.g. splice)
  - fix rtld minimal realloc (BZ#3352)
  - fix RFC3484 getaddrinfo sorting according to rules 4 and 7 (BZ#3369)
  - fix xdrmem_setpos (#211452)


author: Jakub Jelinek <jakub@redhat.com> 2.5-3
changelog:
  - bump __GLIBC_MINOR__
  - increase PTHREAD_STACK_MIN on ppc{,64} to 128K to allow
    64K pagesize kernels (#209877)
  - speed up initgroups on NIS+ (#208203)


author: Jakub Jelinek <jakub@redhat.com> 2.5-2
changelog:
  - fix nscd database growing (#207928)
  - bypass prelinking when LD_DYNAMIC_WEAK=1 is in the environment


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-35
changelog:
  - fix glob with large number of matches (BZ#3253)
  - fix fchownat on kernels that don't support that syscall (BZ#3252)
  - fix lrintl on s390{,64}


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-34
changelog:
  - fix ppc{32,64} longjmp (BZ#3225)
  - fix user visible spelling errors (BZ#3137)
  - fix l{,l}rint{,f,l} around zero (BZ#2592)
  - avoid stack trampoline in s390{,x} makecontext


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-32
changelog:
  - on ppc* use just AT_PLATFORM and altivec AT_HWCAP bit for library selection
  - fix lrintl and lroundl on ppc{,64}
  - use hidden visibility on fstatat{,64} and mknodat in libc_nonshared.a


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-31
changelog:
  - fix pthread_cond_{,timed}wait cancellation (BZ#3123)
  - fix lrint on ppc32 (BZ#3155)
  - fix malloc allocating more than half of address space (BZ#2775)
  - fix mktime on 32-bit arches a few years after 2038 (BZ#2821)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-30
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - fix or_IN February name (#204730)
  - fix pthread_create called from cancellation handlers (BZ#3124)
  - fix regex case insensitive searches with characters where upper
    and lower case multibyte representations have different length
    (e.g. I and dotless i, #202991)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-29
changelog:
  - randomize resolver query ids before use instead after use (#205113)
  - fix resolver symver checking with DT_GNU_HASH (#204909)
  - put .hash section in glibc libraries at the end of RO segment
    when .gnu.hash is present


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-27
changelog:
  - allow $LIB and $PLATFORM in dlopen parameters even in suid/sgid (#204399)
  - handle $LIB/$PLATFORM in LD_LIBRARY_PATH
  - fix splice prototype (#204530)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-26
changelog:
  - real fix for the doubly linked list corruption problem
  - try harder in realloc to allocate memory (BZ#2684)
  - fix getnameinfo error reporting (#204122)
  - make localedef more robust on invalid input (#203728)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-25
changelog:
  - temporarily back out code to limit number of unsorted block
    sort iterations (#203735, #204027)
  - handle PLT symbols in dladdr properly (BZ#2683)
  - avoid malloc infinite looping for allocations larger than
    the system can allocate (#203915)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-23
changelog:
  - malloc fixes, especially for 32-bit arches (#202309)
  - further *_IN locale fixes (#200230)
  - fix get{serv,rpc}ent{,_r} if NIS map is empty (#203237)
  - fix /usr/bin/iconv (#203400)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-21
changelog:
  - if some test gets stuck, kill the tee process after make check
    finishes
  - build with -mtune=generic on i686 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-19
changelog:
  - adaptive malloc brk/mmap threshold
  - fix fchownat to use kernel syscall (if available) on many arches (#201870)
  - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all
    other arches (#201748)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-18
changelog:
  - NIS+ fixes
  - fix memusage and xtrace scripts (#200736)
  - redirect /sbin/service sshd condrestart std{out,err} to /dev/null
    when executed from glibc_post_upgrade


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-16
changelog:
  - fix dladdr on binaries/libraries with only DT_GNU_HASH and no
    DT_HASH (#200635)
  - fix early timeout of initgroups data in nscd (#173019)
  - add am/pm display to es_PE and es_NI locales (#167101)
  - fix nss_compat failures when nis/nis+ unavailable (#192072)


author: Roland McGrath <roland@redhat.com> 2.4.90-15
changelog:
  - fix missing destructor calls in dlclose (#197932)
  - enable transliteration support in all locales (#196713)
  - disallow RTLD_GLOBAL flag for dlmopen in secondary namespaces (#197462)
  - PI mutex support


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-12
changelog:
  - buildrequire gettext
  - enable fstatat64/newfstatat syscalls even on ppc*/s390*/ia64 (#196494)
  - fix out of memory behavior in gettext (#194321)
  - fix regex on multi-byte non-UTF-8 charsets (#193873)
  - minor NIS+ fixes (#190803)
  - don't use cancellable calls in posix_spawn* and only set{u,g}id
    current thread if requested (#193631)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-11
changelog:
  - don't exit from nscd -i <database> before the database is
    actually invalidated, add locking to prune_cache (#191464)
  - build glibc-devel.i386 static libraries with
    -mno-tls-direct-seg-refs -DNO_TLS_DIRECT_SEG_REFS
  - RFC3542 support (advanced API for IPv6; #191001, BZ##2693)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-8
changelog:
  - update from CVS
    - fix nss_compat when SETENT_BATCH_READ=TRUE is in /etc/default/nss
    - fix RFC3484 precedence table for site-local and ULA addresses (#188364)
    - fix a sunrpc memory leak


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-5
changelog:
  - update from CVS
    - some NIS+ fixes
    - allow overriding rfc3484 address sorting tables for getaddrinfo
      through /etc/gai.conf (sample config file included in %doc directory)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-4
changelog:
  - update from CVS
    - SETENT_BATCH_READ /etc/default/nss option for speeding up
      some usages of NIS+ (#188246)
    - move debug state change notification (#179208)
    - fix ldd script if one of the dynamic linkers is not installed (#190259)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-3
changelog:
  - update from CVS
    - fix a typo in nscd.conf (#190085)
    - fix handling of SIGHUP in nscd when some caches are disabled (#189978)
    - make nscd paranoia mode working with non-root server-user (#189779)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-2
changelog:
  - update from CVS
    - fix getaddrinfo (#190002)
    - add auto-propagate nscd.conf options (#177154)
    - fix nscd auditing (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.4-6
changelog:
  - update from CVS
    - NIS+ fixes
    - don't segfault on too large argp key values (#189545)
    - getaddrinfo fixes for RFC3484 (#188364)


author: Jakub Jelinek <jakub@redhat.com> 2.4-5
changelog:
  - update from CVS
    - pshared robust mutex support
    - fix btowc and bwtoc in C++ (#186410)
    - fix NIS+ (#186592)
    - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - don't mention nscd failures on 2.0 kernels (#185335)


author: Jakub Jelinek <jakub@redhat.com> 2.4-2
changelog:
  - accurate unwind info for lowlevellock.h stubs on %{ix86}
  - fix ppc/ppc64 ceill, floorl, rintl, roundl and truncl (BZ#2423)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-2
changelog:
  - update from CVS
    - fix sYSMALLOc for MALLOC_ALIGNMENT > 2 * SIZE_SZ (#183895)
    - revert ppc32 malloc alignment patch, it breaks malloc_set_state
      and needs some further thoughts and time (#183894)
  - provide accurate unwind info for lowlevellock.h stubs on x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-1
changelog:
  - update from CVS
    - fixes for various arches
  - ensure malloc returns pointers aligned to at least
    MIN (2 * sizeof (size_t), __alignof__ (long double))
    (only on ppc32 this has not been the case lately with addition
     of 128-bit long double, #182742)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-36
changelog:
  - update from CVS
    - fix frequency setting for ITIMER_PROF (#179938, BZ#2268)
    - fix powerpc inline fegetround ()
    - fix nptl_db (#179946)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-35
changelog:
  - update from CVS
    - handle futimesat (fd, NULL, tvp) as futimes (fd, tvp)
  - fix <stdlib.h> q{e,f,g}cvt{,_r} for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-34
changelog:
  - fix <math.h> with C++ and -mlong-double-64 (#179742)
  - add nexttowardl redirect for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-32
changelog:
  - update from CVS
    - 128-bit long double fixes for ppc{,64}, s390{,x} and sparc{,v9},
      alpha 128-bit long double support
  - add inotify syscall numbers to the override <asm/unistd.h> headers
    (#179366)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-31
changelog:
  - update from CVS
    - 128-bit long double on ppc, ppc64, s390, s390x and sparc{,v9}
  - add some new syscall numbers to the override <asm/unistd.h>
    headers


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-30
changelog:
  - update from CVS
    - <pthread.h> initializer fixes for -std=c{8,9}9 on 32-bit
      arches
  - avoid writable .rodata (#177121)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-29
changelog:
  - update from CVS
    - make pthread_mutex_t an unnamed union again, as it affects
      libstdc++ ABI mangling


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-26
changelog:
  - update from CVS
    - for newly linked lio_listio* callers, send per request
      notifications (#170116)
    - fixup nscd -S option removal changes (#176860)
    - remove nonnull attribute from ctermid (#176753)
    - fix PTHREAD_*_INITIALIZER{,_NP} on 64-bit arches
    - SPARC NPTL support for pre-v9 CPUs
  - drop support for 2.4.xx and < 2.6.9 kernels


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-25
changelog:
  - update from CVS
    - s390{,x} and sparc{,64} pointer mangling fixes
  - install a sanitized LinuxThreads <bits/libc-lock.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-23
changelog:
  - update from CVS
    - robust mutexes
  - fix transliteration segfaults (#176573, #176583)
  - ignore prelink temporaries in ldconfig (#176570)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-22
changelog:
  - update from CVS
    - minor fts fixes
  - revert broken _Pragma () workaround
  - fix ldconfig on bi-arch architectures (#176316)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-20
changelog:
  - update from CVS
    - time ((void *) 1) should segfault, not return -EFAULT (#174856, BZ#1952)
    - fix errlist generation
  - update ulps for GCC 4.1 on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on i586 i686 athlon sparcv9 alphaev6,
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib64/ and /lib64/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib64/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib64/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib64/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib64/obsolete/linuxthreads/
    and NPTL libraries to /lib64.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib64/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib64/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib64/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib64/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib64/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib64/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib64/tls/librt*so* and /lib64/i686/librt*so*
  - display content of .out files for all make check failures


author: Alexander Gordeev <agordeev@redhat.com> [2.6.18-402.el5]
changelog:
  - [block] virtio: Reset device after blk_cleanup_queue() (Stefan Hajnoczi) [1006536]
  - [block] virtio: Call del_gendisk() before disable guest kick (Stefan Hajnoczi) [1006536]
  - [block] virtio: Drop unused request tracking list (Stefan Hajnoczi) [1006536]
  - [fs] cifs: setfacl removes part of ACL when setting POSIX ACLs (Sachin Prabhu) [1105625]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1155908] {CVE-2014-7822}
  - [fs] ext4: verify block bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: fix type declaration of ext4_validate_block_bitmap (Lukas Czerner) [1034403]
  - [fs] ext4: error out if verifying the block bitmap fails (Lukas Czerner) [1034403]
  - [x86] traps: stop using IST for #SS (Petr Matousek) [1172809] {CVE-2014-9322}


author: - Guenther Deschner <gdeschner@redhat.com> - 3.6.23-5
changelog:
  - resolves: #1112151 - CVE-2014-0244: DoS in nmbd.
  - resolves: #1112151 - CVE-2014-3493: DoS in smbd with unicode path names.


author: - Andreas Schneider <asn@redhat.com> - 3.6.23-3
changelog:
  - resolves: #1100658 - Allocate the server_info on the correct context.
  - resolves: #1101922 - Add config variables to set spoolss os version.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-2
changelog:
  - related: #976637 - More cleanup for 'force user' with 'security = ads'.
  - resolves: #1069571 - Fix memory leak reading printer list.
  - resolves: #1067608 - Fix wbinfo -i with one-way trusts.


author: - Andreas Schneider <asn@redhat.com> - 3.6.22-0.1
changelog:
  - resolves: #1035006 - Rebase Samba to 3.6.22.
  - resolves: #1034161 - Do not build Samba with fam support:
  - resolves: #1033773 - Fix AD group lookups with non-utf8 locale settings.
  - resolves: #1026796 - Fix connect to samba share from Mac Finder.
  - resolves: #996656 - Fix printing failing in function cups_job_submit.
  - resolves: #991528 - Fix Windows 8 Roaming profiles.
  - resolves: #989894 - Fix net ads join segmentation fault.
  - resolves: #981369 - Fix winbind which does not update information in cache
                        about a group from a trusted domain even after the
                        information has expired.
  - resolves: #1040475 - Fix group expansion in service path.
  - resolves: #1050889 - Fix 100% CPU utilization in winbindd when trying to
                         free memory in winbindd_reinit_after_fork.
  - resolves: #1063694 - Fix %G substitution in 'template homedir'.
  - resolves: #1037273 - Add timeout option to smbclient.
  - resolves: #976637 - Fix 'force user' with 'security = ads'.


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.136
changelog:
  - resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.135
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #982484


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.134
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #869295


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.130
changelog:
  - Fix netlogon failover for LogonSamLogon.
  - resolves: #862872
  - Fix write operations as guest with security = share
  - resolves: #905071
  - Disable building cifs idmap and acl binaries.
  - resolves: #873692
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948614
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #948923
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949611
  - Fix the username map optimization.
  - resolves: #917564
  - Fix leaking sockets of smb dc connection.
  - resolves: #883861
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955680
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #947999


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.128
changelog:
  - Fix loading the imap hash module.
  - resolves: #863192
  - Fix raw printing support.
  - related: #855312


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.125
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845761
  - Fix printing regression with builtin forms.
  - resolves: #860965


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.123
changelog:
  - Fix rap printing access to spoolss (smbclient print queue access).
  - resolves: #855312
  - Fix mount.cifs return codes.
  - resolves: #856168


author: Simo Sorce <ssorce@redhat.com> 3.5.4-0.84
changelog:
  - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678,
    CVE-2011-2724
  - resolves: #722556


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.74
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #679066


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.63
changelog:
  - Make sure samba3x provides samba and also versions the conflicts
  - resolves: #582756
  - resolves: #609578


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.43
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526663


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.42
changelog:
  - Add appropriate licensing information to samba3-common, libsmbclient, libtalloc,
    libtdb and tdb-tools
  - resolves: #520652


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.40
changelog:
  - Fix password expiry calculation in pam_winbind
  - Remove popt dependency from mount/umount.cifs
  - Fix libsmbclient packaging
  - resolves: #506932


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.4-0.34
changelog:
  - Add new package samba3x
  - Fix various Requires and Provides tags in order to meet conflict and update
    requirements
  - resolves: #454460


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-14
changelog:
  - fix CVE-2011-3481: NULL pointer dereference via crafted 
    References header in email (#738391)
  - fix CVE-2011-3372: nntpd authentication bypass (#740822)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-10
changelog:
  - fix bug when unselect command on proxy mode caused segmentation fault (#679253)
  - fix lmtp ignorequota on ia64 (#584088)
  - replace instances of #!/usr/bin/env python with #!/usr/bin/python (#521338)
  - don't require lm_sensors-devel, net-snmp-devel is enough (#437999)
  - fix file descriptor leak when moving mailbox folder with quota set (#253854)
  - document that client ignores mupdate_port option (#504813)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-5
changelog:
  - don't modify imapd.conf if not necessary, 
    fix different time for source files across archs (#497317)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-4
changelog:
  - fix mupdate connection (#326511)
  - fix tls and authentication for LMTP (#250189)
  - extend ctl_cyrusdb man page (#463230)


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - testing build for RHEL5
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - hardcoded a bunch of build parameters for RHEL-5
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib for symlinks
  - remove /usr/lib pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


