# changelog

author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
changelog:
  - Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
  -                         initgroups calls


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
changelog:
  - Resolves: rhbz#607233 - SSSD users cannot log in through GDM
  -                       - Real issue was that long-running services
  -                       - do not reconnect if sssd is restarted


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
changelog:
  - Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
  -                         /etc/krb5.keytab file


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
changelog:
  - Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
  -                         final
  - Resolves: rhbz#608661 - SASL with OpenLDAP server fails
  - Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
changelog:
  - New upstream bugfix release 1.2.1
  - Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.
  - Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
  - Resolves: rhbz#604704 - authconfig should provide error with no trace back
  -                         if disabling sssd when sssd is not enabled
  - Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
  -                         auth logs continuous error messages to sssd_ldap.log
  - Resolves: rhbz#596295 - Authentication fails for user from the second domain
  -                         when the same user name is filtered out from the
  -                         first domain
  - Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
  -                         final


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
changelog:
  - Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
  -                         to fail while restart
  - Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
  -                         parentheses causes ldap_search_ext to fail
  - Resolves: rhbz#600468 - Segfault in krb5_child
  - Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
  -                         bugs.


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
changelog:
  - Resolves: rhbz#598670 - Ccache file of a user is removed too early
  - Resolves: rhbz#599057 - Incomplete comparison of a service name in
  -                         IPA access provider
  - Resolves: rhbz#598496 - Failure with IPA access provider
  - Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
  -                         kernel keyring


author: Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
changelog:
  - New stable upstream version 1.2.0
  - Support ServiceGroups for FreeIPA v2 HBAC rules
  - Fix long-standing issue with auth_provider = proxy
  - Better logging for TLS issues in LDAP
  - Resolves: rhbz#584001 - Rebase sssd to 1.2
  - Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
  - Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
  - Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
  - Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
  - Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
  -                         going online
  - Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
  -                         HBAC rule


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
changelog:
  - New LDAP access provider allows for filtering user access by LDAP attribute
  - Reduced default timeout for detecting offline status with LDAP
  - GSSAPI ticket lifetime made configurable
  - Better offline->online transition support in Kerberos


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
changelog:
  - Release new upstream version 1.1.91
  - Enhancements when using SSSD with FreeIPA v2
  - Support for deferred kinit
  - Support for DNS SRV records for failover


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
changelog:
  - New upstream release 1.1.1
  - Fixed the IPA provider (which was segfaulting at start)
  - Fixed a bug in the SSSDConfig API causing some options to revert to
  - their defaults
  - This impacted the Authconfig UI
  - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
changelog:
  - Release SSSD 1.1.0 final
  - Fix two potential segfaults
  - Fix memory leak in monitor
  - Better error message for unusable confdb


author: Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
changelog:
  - Release candidate for SSSD 1.1
  - Add simple access provider
  - Create subpackages for libcollection, libini_config, libdhash and librefarray
  - Support IPv6
  - Support LDAP referrals
  - Fix cache issues
  - Better feedback from PAM when offline


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
changelog:
  - Fixes link error on platforms that do not do implicit linking
  - Fixes double-free segfault in PAM
  - Fixes double-free error in async resolver
  - Fixes support for TCP-based DNS lookups in async resolver
  - Fixes memory alignment issues on ARM processors
  - Manpage fixes


author: Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
changelog:
  - Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
  - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
  - Several segfault bugfixes


author: Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
changelog:
  - Fix segfault in sssd_pam when cache_credentials was enabled
  - Update the sample configuration
  - Fix upgrade issues caused by data provider service removal


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
changelog:
  - Add SSSDConfig API
  - Update polish translation for 0.6.0
  - Fix long timeout on ldap operation
  - Make dp requests more robust


author: Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
changelog:
  - Ensure that the configuration upgrade script always writes the config
    file with 0600 permissions
  - Eliminate an infinite loop in group enumerations


author: Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
changelog:
  - Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
    without a password. (Patch by Stephen Gallagher)


author: Simo Sorce <ssorce@redhat.com> - 0.4.1-1
changelog:
  - add missing configure check that broke stopping the daemon
  - also fix default config to add a missing required option


author: Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
changelog:
  - bugfix release 0.3.2
  - includes previous release patches
  - change permissions of the /etc/sssd/sssd.conf to 0600


author: Simo Sorce <ssorce@redhat.com> - 0.3.0-2
changelog:
  - Try to fix build adding automake as an explicit BuildRequire
  - Add also a couple of last minute patches from upstream


author: Neil Horman <nhorman@redhat.com> - 0.55-7
changelog:
  - Fixed cpu parsing bugs (bz 311341)
  - Added docs/config for irqbalance env. vars. (bzs 339551 339571 339581)


author: Jesse Keating <jkeating@redhat.com> - 1.13-2
changelog:
  - rebuilt with latest binutils to pick up 64K -z commonpagesize on ppc*
    (#203001)
  - Remove hack to use cvs checkin ID as release as it doesn't follow
    packaging guidelines


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-3jpp
changelog:
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped jsse package
  - adaptation to new servlet3 package
  - adaptation to new jsse package
  - section macro


author: Tim Waugh <twaugh@redhat.com> 0.19-20.2
changelog:
  - Prevent eggcups crash when hostnames contain an underscore
    (bug #436919).
  - Fixed last patch (bug #434879).


author: Colin Walters <walters@redhat.com>
changelog:
  - New upstream version
  - Disable session cupsd
  - Add evil find+perl command to change namespace back to com.redhat
    until we adapt Fedora cups patch


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed up signal names that were looking for org.redhat in the
    cvs backport.  Change to read com.redhat.  This should change to
    upstream's org.gnome in the near future.


author: Colin Walters <walters@redhat.com> 0.18-1
changelog:
  - New upstream version
    - Drop upstreamed patch int-gsize
    - Drop upstreamed patch no-help
    - Drop upstreamed patch use-usb-if-null
    - Drop upstreamed patch use-printer-uri


author: John (J5) Palmieri <johnp@redhat.com> 0.17-3
changelog:
  - use_usb_if_null patch makes sure that the make and model of the 
    printer is never null even if hal does not populate the
    printer.vendor and info.product fields.  (Bug #136666)


author: Colin Walters <walters@redhat.com> 0.17-2
changelog:
  - Backport patches from CVS:
    - eggcups-int-gsize.patch (fixes type conflict on x86_64)
    - eggcups-no-help.patch (rh bug 135919)


author: John (J5) Palmieri <johnp@redhat.com> 0.15.2-2
changelog:
  - Added patch that fixes the values placed in gconf for
    configuring printer.
    - Values now represent the make and model the user selected
      and not what hal reports


author: Colin Walters <walters@redhat.com> 0.15.2-1
changelog:
  - Update to new upstream 0.15.2:
    - Does not crash when run as root
    - Does not crash if you have no printers (workaround HAL bug)


author: Colin Walters <walters@redhat.com> 0.14-1
changelog:
  - Update to new upstream 0.14
    + Try to re-set drivers on startup
    + Avoid multiple copies by using DBus activation


author: Colin Walters <walters@redhat.com> 0.12-1
changelog:
  - Update to new upstream 0.12
    + Fixes several serious bugs in driver prompt
    + Also installs policy to make sure we do not get kicked
      off D-BUS
  - Disable GConf schema install


author: Colin Walters <walters@redhat.com> 0.10.2-3
changelog:
  - Remove removal of eggcups.desktop.
  - Install eggcups-upgrade.desktop in session-upgrades directory to ensure
    eggcups runs in the user session after an upgrade.


author: Colin Walters <walters@redhat.com> 0.10-1
changelog:
  - Update to 0.10.1
  - Enable session CUPS daemon
  - Require hal-cups-utils per j5 request
  - Nuke eggcups_version variable, just use version
  - Remove unneeded deps on perl, gnome-utils, file
  - Remove upstreamed dbus-header-fix patch


author: Colin Walters <walters@redhat.com> 0.9.5-2
changelog:
  - Kill off tryprint.pl
  - Fix description to reflect current reality
  - TODO: kill off this package entirely and just put eggcups
    in its own package.  If importing a new package wasn't
    so annoying...


author: Colin Walters <walters@redhat.com> 0.9-1
changelog:
  - Insert my tendrils into this package
  - Bump version 0.9, just for fun
  - Update to eggcups 0.9
  - Remove desktop file link and stuff, we don't need it
  - Remove deps on system-config-printer, etc
  - Remove upstreamed eggcups patches
  - Change description to remove "Nautilus"
  - Bump dbus deps to >= 0.20


author: Tim Waugh <twaugh@redhat.com> 0.1.10-26
changelog:
  - Don't poll cupsd; rely on D-BUS for notifications.  This prevents cups
    generating never-ending useless log messages.


author: Tim Waugh <twaugh@redhat.com> 0.1.10-17
changelog:
  - Drop the kprinter requirement; fall back to redhat-config-printer's
    simple print dialog app (bug #97178).


author: Havoc Pennington <hp@redhat.com> 0.1.10-10
changelog:
  - rebuild for dbus 0.9
  - tweak dbus patch to use dbus_message_name_is(), 
    also DBUS_ERROR_DISCONNECT should not need detecting
    (you always get the DBUS_MESSAGE_LOCAL_DISCONNECT on disconnect)


author: Tim Waugh <twaugh@redhat.com> 0.1.5-5
changelog:
  - Remove tmpfile vulnerability from debug logging.
  - s/printconf/redhat-config-printer-gui/.
  - Use redhat-config-printer-gui in preference to CUPS HTTP configuration.


author: Norm Murray <nmurray@redhat.com>
changelog:
  - big updates to the tryprint.pl script to save file sniff info and 
    to handle a double-click by bringing up a printer configuration tool


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.63
changelog:
  - Make sure samba3x provides samba and also versions the conflicts
  - resolves: #582756
  - resolves: #609578


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.43
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526663


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.42
changelog:
  - Add appropriate licensing information to samba3-common, libsmbclient, libtalloc,
    libtdb and tdb-tools
  - resolves: #520652


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.40
changelog:
  - Fix password expiry calculation in pam_winbind
  - Remove popt dependency from mount/umount.cifs
  - Fix libsmbclient packaging
  - resolves: #506932


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.4-0.34
changelog:
  - Add new package samba3x
  - Fix various Requires and Provides tags in order to meet conflict and update
    requirements
  - resolves: #454460


author: Adam Tkac <atkac redhat com> 0.17-39
changelog:
  - initialize environment variables configured in pam_env.conf (#434938)
  - handle long user names in rexecd well (#436748)
  - check return value from close to catch errors on NFS filesystems (#461903)


author: Adam Tkac <atkac redhat com> 0.17-38
changelog:
  - obsoleted netkit-rsh-0.17-nohostcheck.patch
  - r{logind,shd} works when DNS isn't avaliable and -a option isn't
    specified (#222624)
  - removed wrong sentence from rsh-server description


author: Karel Zak <kzak@redhat.com> 0.17-35
changelog:
  - added support for IPv6 (patch by Jan Pazdziora)
  - fix #198632 - add keyinit instructions to the rsh, rlogin and rexec PAM scripts
    (patch by David Howells)
  - fix #191390 - improve linefeed patch


author: Karel Zak <kzak@redhat.com> 0.17-25
changelog:
  - rexecd uses PAM session now (#68590)
  - fixed errno usage in rcp (#67361)
  - fixed  rexec fails with "Invalid Argument" (#118630)


author: Nalin Dahyabhai <nalin@redhat.com> 0.17-11
changelog:
  - remove directory names from PAM configuration files, allowing them to be used
    for all arches on multilib systems


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed really missing BuildPrereq: libtermcap-devel (#49577)
  - Fixed security problem with rexec.pam (#49181)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - securetty is screwy because rsh doesn't allocate one and rlogin does auth
    before it has a tty, so change the hard-coded TTYs used from "tty" for all
    to "rsh" or "rlogin" or "rexec"


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix PAM config files to always honor nologin and securetty, to use rhosts,
    and to fall back to password auth only for rlogin and rexec (#17183)
  - add references to pam_env to the PAM configs as well (#16170)
  - disable rlogin and rsh by default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - expunge all mentions of kerberos authentication or DES encryption using
    kerberos from the man pages


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - rexec needs pam_set_item() (#60).
  - clarify protocol in rexecd.8.
  - add rexec client from contrib.


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.98.6-4
changelog:
  - resolves: #240482: CVE-2007-1995 Quagga bgpd DoS
  - resolves: #228100: LTC31032-FEAT: 200579: Source routing updates through quagga
  - resolves: #243143: Wrong init script


author: Jay Fenlason <fenlason@redhat.com> 0:0.98.6-2
changelog:
  - Upgrade to new upstream version, closing security problems:
    bz#191081 CVE-2006-2223 Quagga RIPd information disclosure
    bz#191085 CVE-2006-2224 Quagga RIPd route injection


author: Jay Fenlason <fenlason@redhat.com> 0.98.5-3
changelog:
  - add the -pie patch, to make -fPIE compiling actually work on all platforms.
  - Include -pam patch to close
    bz#170256 ? pam_stack is deprecated
  - Change ucd-snmp to net-snmp to close
    bz#164333 ? quagga 0.98.4-2 requires now obsolete package ucd-snmp-devel
  - also fix duplicate line mentioned in bz#164333


author: Jay Fenlason <fenlason@redhat.com> 0.98.2-2
changelog:
  - New upstream version, inclues my -gcc4 patch, and a patch from
    Vladimir Ivanov <wawa@yandex-team.ru>


author: Jay Fenlason <fenlason@redhat.com> 0.98.0-2
changelog:
  - New upstream version.  This fixes bz#143796
  - --with-rtadv needs to be --enable-rtadv according to configure.
    (but it was enabled by default, so this is a cosmetic change only)
    Change /etc/logrotate.d/* to /etc/logrotate.d/quagga in this spec file.
  - Modify this spec file to move the .so files to the base package
    and close bz#140894
  - Modify this spec file to separate out /usr/include/quagga/ospfd
    from .../*.h and /usr/include/quagga/ospfapi from .../*.h
    Rpmbuild probably shouldn't allow %dir of a plain file.


author: Tim Waugh <twaugh@redhat.com> 0.97.3-3
changelog:
  - Rebuilt for new readline.
  - Don't explicitly require readline.  The correct dependency is automatically
    picked up by linking against it.


author: Jay Fenlason <fenlason@redhat.com> 0.96.5-0
changelog:
  - New upstream version
  - Change includedir
  - Change the pre scriptlet to fail if the useradd command fails.
  - Remove obsolete patches from this .spec file and renumber the two
    remaining ones.


author: Jay Fenlason <fenlason@redhat.com> 0.96.3-1
changelog:
  - Patch a remote DoS attack (#107140)
  - New upstream version
  - Removed the .libcap patch, which was applied upstream
  - Renamed the vty group from quaggavty to quaggavt because quaggavty is
    too long for NIS.
  - Patch the spec file to fix #106857: /etc/quagga/zebra.conf is created with
    the wrong owner.
  - Removed the "med" part of the 0.96.1-warnings patch for . . .
  - Add a new warnings patch with a fix for #106315.  This also updates
    the "med" part of the previous warnings patch.


author: Jay Fenlason <fenlason@redhat.com> 0.96.2-5
changelog:
  - merge sysconfig patch from 3E branch.  This patch is from Kaj J. Niemi
    (kajtzu@basen.net), and puts Quagga configuration options in
    /etc/sysconfig/quagga, and defaults Quagga to listening on 127.0.0.1 only.
    This closes #104376
  - Use /sbin/nologin for the shell of the quagga user.  This closes #103320
  - Update the quagga-0.96.1-warnings.patch patch to kill a couple more
    warnings.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Remove the directory part of paths for PAM modules in quagga.pam, allowing
    libpam to search its default directory (needed if a 64-bit libpam needs to
    look in /lib64/security instead of /lib/security).


author: Jay Fenlason <fenlason@redhat.com> 0.96.1-3
changelog:
  - Merge from quagga-3E-branch, with a fix for #102673 and a couple
    more compiler warnings quashed.


author: Jay Fenlason <fenlason@redhat.com> 0.96-1
changelog:
  - added a patch (libwrap) to allow the generated Makefiles for zebra/
    and lib/ to work on AMD64 systems.  For some reason make there does
    not like a dependency on -lcap
  - added a patch (warnings) to shut up warnings about an undefined
    structure type in some function prototypes and quiet down all the
    warnings about assert(ptr) on x86_64.
  - Modified the upstream quagga-0.96/readhat/quagga.spec to work as an
    official Red Hat package (remove user and group creation and changes
    to services)
  - Trimmed changelog.  See the upstream .spec file for previous
    changelog entries.


author: Adam Tkac <atkac redhat com> 30:9.3.6-11.P1
changelog:
  - /etc/sysconfig/named can be modified, don't verify it's md5/size/mtime (#556770)
  - resolver could have destroyed fetch too early (#555848)
  - replace bind-9.3.1-next_server_on_referral.patch by bind93-rh625240.patch (#625240)


author: Adam Tkac <atkac redhat com> 30:9.3.6-10.P1
changelog:
  - add possibility not to call named-checkzone for every zone during startup (#500896)
  - bind-chroot-admin: don't touch chroot environment when modified by user (#517279)


author: Adam Tkac <atkac redhat com> 30:9.3.6-9.P1
changelog:
  - don't crash due use-after-free in D-Bus related code (#523052)
  - if connection to PG database failed, retry it during every lookup (#533229)
  - initscript: terminate only the correct named process (#500535)


author: Adam Tkac <atkac redhat com> 30:9.3.6-8.P1
changelog:
  - handle broken DNSSEC chains better (#572848)
  - host: handle "debug", "attempts" and "timeout" options in resolv.conf (#570851)
  - host/dig: query servers specified on commandline instead of in resolv.conf (#561299)


author: Adam Tkac <atkac redhat com> 30:9.3.6-7.P1
changelog:
  - add manpages for binaries in -sdb subpkg (#556798)
  - drop useless bind-9.3.1beta2-openssl-suffix.patch (#546477)
  - fix "service named configtest" return value (#530214)


author: Adam Tkac <atkac redhat com> 30:9.3.6-6.P1
changelog:
  - NSEC validation code could cause wrong NXDOMAIN responses (#554851,
    CVE-2010-0097)
  - improve fix for CVE-2009-4022 (#538744)
    - {C,D}NAMEs could be returned to clients without proper DNSSEC validation
    - don't validate + cache out-of-bailiwick data returned with a secure answer.
      Refetch it instead.


author: Adam Tkac <atkac redhat com> 30:9.3.6-1.P1
changelog:
  - backport allow-query-cache option to control access for all non-authoritative
    data (#483708)
  - add support for dynamically loadable database backends (#479273)
  - named-checkconf now checks ACLs validity (#496495)
  - update sample configuration file to address "DNS reflector" attacks (#485393)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.3.P1
changelog:
  - handle named_write_master_zones SELinux boolean and /var/named perms
    relationship as documented (#494370)
  - handle unknown DLV algorithms well (#491655)
  - remove useless glibc-kernheaders BuildReq
  - print nicer error message when configuration file is directory (#490837)
  - named-checkconf handles "check-names" directive well (#491400)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.2.P1
changelog:
  - select correct nameservers when dig/host is called with -4 param (#469441)
  - add support for "master-only" notify type (#477651)
  - own chroot/var/log directory (#481803)
  - don't call bind-chroot-admin automatically during installation/update/remove
    of bind-chroot package. It broke too many configurations (#480156)


author: Adam Tkac <atkac redhat com> 30:9.3.6-0.1.P1
changelog:
  - rebased to 9.3.6-P1 (#457036), updated patches
  - patches merged
    - bind-bsdcompat.patch
    - bind-9.2.2-nsl.patch
    - bind-9.3-CVE-2008-1447.patch
    - bind93-rh458932.patch
    - bind-9.3-dbus-race.patch
    - bind-9.3-l_server.patch
    - bind-9.3-CVE-2008-0122.patch
    - bind93-dsa_verify.patch
    - bind-9.3.1-dbus_archdep_libdir.patch
    - bind-9.3.2-prctl_set_dumpable.patch
    - libbind-9.3.1rc1-fix_h_errno.patch


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.9.P1
changelog:
  - don't crash when certain subdomain is used as rndc reload argument (#457533)
  - return nonzero value from initscript when named fails to reload (#457984)
  - accept krb5-self and krb5-subdomain update-policy matches (#457932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-8.2.P1
changelog:
  - bind-sdb scripplet sets /etc/openldap/slapd.conf ownership correcly (#437789)
  - revised permissions of executables and scripts (#441495)
  - set open files limit to unlimited by default as described in documentation
    (#458932)


author: Adam Tkac <atkac redhat com> 30:9.3.4-5.P1
changelog:
  - improved patch to handle D-BUS races (#240876)
  - updated named.root zone to affect root IPv6 migration


author: Adam Tkac <atkac redhat com> 30:9.3.4-0.9.P1
changelog:
  - fixed building of SDB stuff (#240788)
  - fixed race condition during DBUS initialization (#240876)
  - initscript LSD standardization (#242734)
  - improved rndc freeze/thaw <zonename> command (#247148)
  - fixed wrong perms of named's ldap schema (#250118)
  - supressed errors from chroot's specfile scripts (#252334)
  - fixed ${chroot}/dev/random SELinux labelling
  - added configtest to usage report from named initscript (#250744)
  - fixed rndc stop return value handler (#250901)
  - fixed named.log sync in bind-chroot-admin (#247486)
  - rebased to latest 9.3 maintenance release (9.3.4-P1, #353741)
  - updated named.root file (new L.ROOT-SERVERS.NET, #363531)
  - added GSS-TSIG support to named (#251528)
    - dropped patches (upstream)
      - bind-9.3.4.P1-query-id.patch
      - bind-9.3.3rc2-dbus-0.6.patch
      - bind-9.3.4-validator.patch
      - bind-9.3.4-nqueries.patch
    - updated patches
      - bind-9.3.2-tmpfile.patch


author: Adam Tkac <atkac redhat com> - 30:9.3.3-9
changelog:
  - added fix for #224445 - CVE-2007-0493 BIND might crash after 
    attempting to read free()-ed memory (stransky@redhat.com)
  - added fix for #225229 - CVE-2007-0494 BIND dnssec denial of service
    (stransky@redhat.com)
  - initscript now unmounts /proc filesystem correctly
    (#212549, stransky@redhat.com)
  - dnssec-signzone now accepts -d option correctly (#230667)


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-6
changelog:
  - added fix for #213630: EDNS is globally enabled,
    crashing CheckPoint FW-1
  - Resolves: rhbz##213630


author: Martin Stransky <stransky@redhat.com> - 30:9.3.3-3
changelog:
  - added fix from #209400 - Bind Init Script does not create 
    the PID file always, created by Jeff Means
  - added timeout to stop section of init script. 
    The default is 100 sec. and can be adjusted by NAMED_SHUTDOWN_TIMEOUT
    shell variable.


author: Martin Stransky <stransky@redhat.com> - 30:9.3.2-37
changelog:
  - fix for #202542 - /usr/sbin/bind-chroot-admin: No such file or directory
  - fix for #202547 - file_contexts: invalid context


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-32
changelog:
  - fix addenda to bug 189789: 
    determination of selinux enabled was still not 100% correct in bind-chroot-admin
  - fix addenda to bug 196398:
    make named.init test for NetworkManager being enabled AFTER testing for -D absence;
    named.init now supports a 'DISABLE_NAMED_DBUS' /etc/sysconfig/named setting to disable
    auto-enable of named dbus support if NetworkManager enabled.


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-30
changelog:
  - fix bug 196398 - Enable -D option automatically in initscript
    if NetworkManager enabled in any runlevel.
  - fix namedGetForwarders for new dbus
  - fix bug 195881 - libbind.so should be owned by bind-libbind-devel


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-26.FC6
changelog:
  - fix bugs 191093, 189789
  - backport selected fixes from upstream bind9 'v9_3_3b1' CVS version:
    ( see http://www.isc.org/sw/bind9.3.php "Fixes" ): 
    o change 2024 / bug 16027:
      named emitted spurious "zone serial unchanged" messages on reload
    o change 2013 / bug 15941:
      handle unexpected TSIGs on unsigned AXFR/IXFR responses more gracefully
    o change 2009 / bug 15808: coverity fixes
    o change 1997 / bug 15818: 
      named was failing to replace negative cache entries when a positive one
      for the type was learnt
    o change 1994 / bug 15694: OpenSSL 0.9.8 support
    o change 1991 / bug 15813:
      The configuration data, once read, should be treated as readonly.
    o misc. validator fixes 
    o misc. resolver fixes
    o misc. dns fixes
    o misc. isc fixes
    o misc. libbind fixes
    o misc. isccfg fix
    o misc. lwres fix
    o misc. named fixes
    o misc. dig fixes
    o misc. nsupdate fix
    o misc. tests fixes


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-22
changelog:
  - apply upstream patch for ncache_adderesult segfault bug 173961 addenda
  - fix bug 188382: rpm --verify permissions inconsistencies
  - fix bug 189186: use /sbin/service instead of initscript
  - rebuild for new gcc, glibc-kernheaders


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-20
changelog:
  - fix resolver.c ncache_adderesult segfault reported in addenda to bug 173961 
    (upstream bugs #15642, #15528 ?)
  - allow named ability to generate core dumps after setuid (upstream bug #15753)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-16
changelog:
  - fix bug 187286: 
       prevent host(1) printing duplicate 'is an alias for' messages
       for the default AAAA and MX lookups as well as for the A lookup
       (it now uses the CNAME returned for the A lookup for the AAAA and MX lookups).
       This is upstream bug #15702 fixed in the unreleased bind-9.3.3
  - fix bug 187333: fix SOURCE24 and SOURCE25 transposition


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-14
changelog:
  - fix bug 186577: remove -L/usr/lib from libbind.pc and more .spec file cleanup
  - add '%doc' sample configuration files in /usr/share/doc/bind*/sample
  - rebuild with new gcc and glibc


author: Jason Vas Dias <jvdias@redhat.com> - 30.9.3.2-8
changelog:
  - Do not allow package to be installed if named:25 userid creation fails
  - Give libbind a pkg-config file
  - remove restorecon from bind-chroot-admin (not required).
  - fix named.caching-nameserver.conf (listen-on-v6 port 53 { ::1 };)


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-6
changelog:
  - replace caching-nameserver with bind-config sub-package
  - fix bug 177595: handle case where $ROOTDIR is a link in initscript
  - fix bug 177001: bind-config creates symlinks OK now
  - fix bug 176388: named.conf is now never replaced by any RPM
  - fix bug 176248: remove unecessary creation of rpmsave links
  - fix bug 174925: no replacement of named.conf
  - fix bug 173963: existing named.conf never modified
  - major .spec file cleanup


author: Jason Vas Dias <jvdias@redhat.com> - 30:9.3.2-4
changelog:
  - regenerate redhat_doc patch for non-DBUS builds
  - allow dbus builds to work with dbus version < 0.6 (bz #179816)


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-24
changelog:
  - allow D-BUS support to work in bind-chroot environment:
    workaround latest selinux policy by mounting /var/run/dbus/
    under chroot instead of /var/run/dbus/system-bus-socket


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-22
changelog:
  - fix bug 172632 - remove .la files
  - ship namedGetForwarders and namedSetForwarders scripts
  - fix detection of -D option in chroot


author: Jason Vas Dias <jvdias@redhat.com> - 24.9.3.1-20
changelog:
  - Allow the -D enable D-BUS option to be used within bind-chroot .
  - fix bug 171226: supply some documentation for pgsql SDB .


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-18
changelog:
  - fix bug 169969: do NOT call dbus_svc_dispatch() in dbus_mgr_init_dbus() -
        task->state != task_ready and will cause Abort in task.c if process
        is waiting for NameOwnerChanged to do a SetForwarders


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-12
changelog:
  - fix bug 168302: use gcc for compiling dns-keygen
  - fix bug 167682: bind-chroot directory permissions
  - fix issues with -D dbus option when dbus service not running or disabled


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-10
changelog:
  - Build with D-BUS patch by default; D-BUS support enabled with named -D option
  - Enable D-BUS for named_sdb also
  - fix sdb pgsql's zonetodb.c: must use isc_hash_create() before dns_db_create()
  - update fix for bug 160914 : test for RD=1 and ARCOUNT=0 also before trying next server
  - fix named.init script to handle named_sdb properly
  - fix named.init script checkconfig() to handle named '-c' option
    and make configtest, test, check configcheck synonyms


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-7
changelog:
  - fix bug 160914: resolver utilities should try next server on empty referral
                    (now that glibc bug 162625 is fixed)
  		  host and nslookup now by default try next server on SERVFAIL
  		  (host now has '-s' option to disable, and nslookup given
                     '[no]fail' option similar to dig's [no]fail option).
  - rebuild and re-test with new glibc & gcc (all tests passed).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-6
changelog:
  - fix bug 157950: dig / host / nslookup should reject invalid resolv.conf
                    files and not use uninitialized garbage nameserver values
                    (ISC bug 14841 raised).


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4
changelog:
  - Fix bug 157601: give named.init a configtest function
  - Fix bug 156797: named.init should check SELinux booleans.local before booleans
  - Fix bug 154335: if no controls in named.conf, stop named with -TERM sig, not rndc
  - Fix bug 155848: add NOTES section to named.8 man-page with info on all Red Hat
                    BIND quirks and SELinux DDNS / slave zone file configuration
  - D-BUS patches NOT applied until dhcdbd is in FC


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-4_dbus
changelog:
  - Enhancement to allow dynamic forwarder table management and
  - DHCP forwarder auto-configuration with D-BUS


author: Jason Vas Dias <jvdias@redhat.com> - 24:9.3.1-2_FC4
changelog:
  - Rebuild for bind-sdb libpq.so.3 dependency
  - fix bug 150981: don't install libbind man-pages if no libbind
  - fix bug 151852: mount proc on $ROOTDIR/proc to allow sysconf(...)
    to work and correct number of CPUs to be determined


author: Jason Vas Dias <jvdias@redhat.com> - 22.9.3.1rc1-5
changelog:
  - fix bug 150288: h_errno not being accessed / set correctly in libbind
  - add libbind man-pages from bind-8.4.6


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.1rc1-1
changelog:
  - Upgrade to 9.3.1rc1
  - Add Simplified Database Backend (SDB) sub-package ( bind-sdb )
  -     add named_sdb - ldap + pgsql + dir database backend support with
  -     'ENABLE_SDB' named.sysconfig option
  - Add BIND resolver library & includes sub-package ( libbind-devel)
  - fix bug 147824 / 147073 / 145664: ENABLE_ZONE_WRITE in named.init
  - fix bug 146084 : shutup restorecon


author: Jason Vas Dias <jvdias@redhat.com> - 22:9.3.0-2
changelog:
  - Fix bug 143438: named.init will now make correct ownership of $ROOTDIR/var/named
  -                 based on 'named_write_master_zones' SELinux boolean.
  - Fix bug 143744: dig & nsupdate IPv6 timeout  (dup of 140528)


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-4
changelog:
  - Fix bugs 140528 and 141113:
  - 2 second timeouts when IPv6 not configured and root nameserver's
  - AAAA addresses are queried


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-2
changelog:
  - Fix bug 136243: bind-chroot %post must run restorecon -R /var/named/chroot
  - Fix bug 135175: named.init must return non-zero if named is not run
  - Fix bug 134060: bind-chroot %post must use mktemp, not /tmp/named
  - Fix bug 133423: bind-chroot %files entries should have been %dirs


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-1
changelog:
  - BIND 9.2.4 (final release) released - source code actually
  - identical to 9.2.4rc8, with only version number change.


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc8-14
changelog:
  - Upgrade to upstream bind-9.2.4rc8 .
  - Progress: Finally! Hooray! ISC bind now distributes:
  - o named.conf(5) and nslookup(8) manpages
  -    'bind-manpages.bz2' source can now disappear
  -    (could this have something to do with ISC bug I raised about this?)
  - o 'deprecation_msg' global has vanished
  -     bind-9.2.3rc3-deprecation_msg_shut_up.diff.bz2 can disappear


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-12_EL3
changelog:
  - Fix bug 132303: if ROOTDIR line was replaced after upgrade from
  - bind-chroot-9.2.2-21, restart named


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-11_EL3
changelog:
  - Fix bug 131803: replace ROOTDIR line removed by broken
  - bind-chroot 9.2.2-21's '%postun'; added %triggerpostun for bind-chroot


author: Jason Vas Dias <jvdias@redhat.com> - 10:9.2.4rc7-10
changelog:
  - Fix bug 130121: add '%ghost' entries for files included in previous
  - bind-chroot & not in current - ie. named.conf, rndc.key, dev/* -
  - that RPM removed after upgrade .


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fix bug 130981: add '-t' option to named-checkconf invocation in
  - named.init if chroot installed.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Remove resolver(5) manpage now in man-pages (bug 130792);
  - Don't create /dev/ entries in bind-chroot if already there (bug 127556);
  - fix bind-devel Requires (bug 130919)
  - Set default location for dumpdb & stats files to /var/named/data


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed bug 129289: bind-chroot install / deinstall
  - on install, existing config files 'safe_replace'd
  - with links to chroot copies; on uninstall, moved back.


author: Jason Vas Dias <jvdias@redhat.com>
changelog:
  - Fixed named.init generation of error messages on
  - 'service named stop' and 'service named reload'
  - as per bug 127775


author: Daniel Walsh <dwalsh@redhat.com> 9.2.2-13
changelog:
  - Fix config description of named.conf in chroot
  - Change named.init script to check for existence of /etc/sysconfig/network


author: Daniel Walsh <dwalsh@redhat.com> 9.2.1-12
changelog:
  - Fix log rotate to use service named reload
  - Change service named reload to give success/failure message [73770]
  - Fix File checking [75710]
  - Begin change to automatically run in CHROOT environment


author: Karsten Hopp <karsten@redhat.de> 9.2.1-7
changelog:
  - fix name of pidfine in logrotate script (#68842)
  - fix owner of logfile in logrotate script (#41391)
  - fix nslookup and named.conf man pages (output on stderr)
    (#63553, #63560, #63561, #54889, #57457)
  - add rfc1912 (#50005)
  - gzip all rfc's
  - fix typo in keygen.c (#54870)
  - added missing manpages (#64065)
  - shutdown named properly with rndc stop (#62492)
  - /sbin/nologin instead of /bin/false (#68607)
  - move nsupdate to bind-utils (where the manpage already was) (#66209, #66381)
  - don't kill initscript when rndc fails (reload)    (#58750)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.1-2
changelog:
  - Move libisccc, lib isccfg and liblwres from bind-utils to bind,
    they're not required if you aren't running a nameserver.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-7
changelog:
  - Don't exit if /etc/named.conf doesn't exist if we're running
    chroot (#60868)
  - Revert Elliot's changes, we do require specific glibc/glibc-kernheaders
    versions or bug #58335 will be back. "It compiles, therefore it works"
    isn't always true.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.2.0-0.rc3.1
changelog:
  - 9.2.0rc3
  - remove ttl patch, I don't think we need this for 8.0.
  - remove dig.1.bz2 from the bind8-manpages tar file, 9.2 has a new dig man page
  - add lwres* man pages to -devel


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-4
changelog:
  - Make sure /etc/rndc.conf isn't world-readable even after the
    %post script inserted a random key (#53009)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-3
changelog:
  - Add build dependencies (#49368)
  - Make sure running service named start several times doesn't create
    useless processes (#47596)
  - Work around the named parent process returning 0 even if the config
    file is broken (it's parsed later by the child processes) (#45484)


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.3-0.rc1.2
changelog:
  - Add named.conf man page from bind 8.x (outdated, but better than nothing,
    - Rename the rndc key (#42895)
  - Add dnssec* man pages


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.2-1
changelog:
  - 9.1.2 final. No changes between 9.1.2-0.rc1.1 and this one, except for
    the version number, though.


author: Bernhard Rosenkraenzer <bero@redhat.com> 9.1.0-9
changelog:
  - Work around bind 8 -> bind 9 migration problem when using buggy zone files:
    accept zones without a TTL, but spew out a big fat warning. (#31393)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Don't use the standard rndc key from the documentation, instead, create a random one
    at installation time (#26358)
  - Make /etc/rndc.conf readable by user named only, it contains secret keys


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 9.1.1 probably won't be out in time, revert to 9.1.0 and apply fixes
    from 9.1.1rc2
  - bind requires bind-utils (#28317)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to 9.1.1rc1; fixes 17 bugs (14 of them affecting us;
    1 was fixed in a Red Hat patch already, 2 others are portability
    improvements)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Make /etc/rndc.conf and /etc/sysconfig/named noreplace
  - Make devel require bind = %{version} rather than just bind


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move run files to /var/run/named/ - /var/run isn't writable
    by the user we're running as. (Bug #20665)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed logrotate script (wrong path to kill)
  - include header files in -devel package
  - bugzilla #22049, #19147, 21606


author: Bernhard Rosenkränzer <bero@redhat.com>
changelog:
  - Fix up the initscript (Bug #13033)
  - Fix build with current glibc (Bug #12755)
  - /etc/rc.d/init.d -> /etc/init.d
  - use %{_mandir} rather than /usr/share/man


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify logrotate setup to use PID file
  - temporarily disable optimization by unsetting $RPM_OPT_FLAGS at build-time
  - actually bump the release this time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - provide /var/named (fix for bugs #9847, #10205)
  - preserve args when restarted via ndc(8) (bug #10227)
  - make resolv.conf(5) a link to resolver(5) (bug #10245)
  - fix SYSTYPE bug in all makefiles
  - move creation of named user from %post into %pre


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up location of named-bootconf.pl and make it executable
    (Bug #8028)
  - bind-devel requires bind


author: Preston Brown <pbrown@redhat.com>
changelog:
  - use real stop and start in named.init for restart, not ndc restart, it has
    problems when named has changed during a package update... (# 4890)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 8.2.1.
  - add named.logrotate (#3571).
  - hack around egcs-1.1.2 -m486 bug (#3413, #3485).
  - vet file list.


author: Stepan Kasal <kasal@math.cas.cz>
changelog:
  - nslookup patched:
    to count numRecords properly
    to fix subsequent calls to ls -d
    to parse "view" and "finger" commands properly
    the view hack updated for bind-8 (using sed)


author: Manuel J. Galan <manolow@step.es>
changelog:
  - Several essential modifications to build and install correctly.
  - Modified 'ndc' to avoid deprecated use of '-'


author: Scott Lampert <fortunato@heavymetal.org>
changelog:
  - Used buildroot
  - patched bin/named/ns_udp.c to use <libelf/nlist.h> for include
    on Redhat 5.0 instead of <nlist.h>


author: Elliot Lee <sopwith@redhat.com> 3.1-3
changelog:
  - Fix mozilla building/notbuilding to consistently use mozilla_archs macro
  - Remove -O0 cflags from November


author: Than Ngo <than@redhat.com> 3.0.3-1.1
changelog:
  - Added missing requires kdelibs-devel in kdebindings-devel (bug #73992)
  - Fixed typo bug (bug #51669)
  - Added Buildprereq arts-devel instead kdelibs-sound
  - Fixed to build on s390/s390x/x86_64


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.2-0.cvs20020614
changelog:
  - Update to current stable branch to make it work with Qt 3.0.4
  - Enable building Java bindings (with jdkgcj)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-1
changelog:
  - 3.0.0 final
  - Disable building C, Java and Objective-C bindings for now, they require
    a real C++ compiler rather than a something-between-C-and-C++-compiler


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020130.1
changelog:
  - Update
  - Get the qt java bindings to build with gcj
  - Temporarily disable building KDE-C, KDE-Java, DCOP-perl and DCOP-python
    bindings; they don't compile.


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-13.el5
changelog:
  - Fix warnings in text monitor events (rhbz #574017)
  - Fix host CPU counting on unusual NUMA topologies (rhbz #654540)
  - Properly escape & character in xen driver (rhbz #472437)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-9.el5
changelog:
  - Reworked audit support (rhbz #587280)
  - Fix incorrect use of private data in remote driver (rhbz #646717)
  - Fix detection of qemu's drive readonly option (rhbz #510612)
  - Fix Xen domain dump (rhbz #646755)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-8.el5
changelog:
  - Add 'current' attribute to <vcpu> element (rhbz #545118)
  - Don't build xenapi driver even if libxenserver is found (rhbz #643118)
  - Audit support (rhbz #587280)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-7.el5
changelog:
  - Fix bogus error when attaching a device to xen guest (rhbz #638472)
  - Fix device hotplug on xen (rhbz #638520)
  - Don't fail on missing D-Bus (rhbz #642650)
  - Prohibit migration of qemu guests with host devices (rhbz #573940)
  - Remove explicit dependency on qcow-create and qemu-img tools (rhbz #642026)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-6.el5
changelog:
  - Turn dynamic ownership off by default (rhbz #636477)
  - Rename libvirtd.qemu in /etc/logrotate.d back to libvirtd (rhbz #636460)
  - Start libvirt-guests late and stop it early to solve dependency on xend (rhbz #636447)
  - Fix failure when host kernel doesn't support CPU hot-plugging (rhbz #636347)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-5.el5
changelog:
  - Fix possible compiler warning in libvirt-nodedev-Fix-sysfs-paths-for-vport-operations.patch
  - Improve the error message displayed on TLS client auth failure (rhbz #556599)
  - Explicitly require new enough libselinux in runtime (rhbz #635028)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-4.el5
changelog:
  - Fix patch to disable libvirt-guests on xen
  - Fix virConnectBaselineCPU (rhbz #630616)
  - Fix comparison of two host CPUs (rhbz #630615)
  - Fail when CPU type cannot be detected from XML (rhbz #630617)
  - Fix crash on unexpected CPU XML (rhbz #630618)
  - Fix a deadlock in bi-directional p2p concurrent migration (rhbz #630614)
  - Fix multiple PCI device assignment bugs (rhbz #630620)
  - Fix confusing error in libvirt-guests (rhbz #630622)
  - Update libvirt-guests to Fedora init script standards (rhbz #630621)
  - Do not activate boot=on on devices when not using KVM (rhbz #630613)
  - Fix the ACS checking in the PCI code (rhbz #630619)
  - Skip offline CPUs in nodeinfo (rhbz #630624)
  - Fix PXE boot on virtual network (rhbz #630627)
  - Fix tunnelled migration with qemu running as qemu:qemu (rhbz #630625)
  - Fix problem with capabilities XML generation (rhbz #630626)
  - Fix static-only DHCP configuration (rhbz #597363)
  - Fix virsh attach-disk command (rhbz #609422)
  - Fix virsh create hang (rhbz #602772)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-3.el5
changelog:
  - Fix bogus free of static strings introduced by a patch for CVE-2010-2239
  - Enable nwfilter driver (rhbz #630574)
  - Enable ESX driver (rhbz #629005)


author: Jiri Denemark <jdenemar@redhat.com> - 0.8.2-2.el5
changelog:
  - Fix permissions of /var/lib/libvirt directory
  - Require new libselinux for SELinux security driver
  - Add man page for libvirtd (rhbz #618750)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-37.el5
changelog:
  - Explicitly set qcow2 backing store format (CVE-2010-2239)
  - Remap privileged source ports from guests behind NAT (CVE-2010-2242)
  - Eliminate memory leak in xenUnifiedDomainInfoListFree (rhbz 590073)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-34.el5
changelog:
  - Set CPU affinity across whole QEMU process (rhbz 576920)
  - Show more helpful migration errors (rhbz 568476)
  - Report NUMA and CPU info correctly with nodeinfo (rhbz 570527)
  - Allow hostname only with migrateuri (rhbz 595992)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-33.el5
changelog:
  - Conflict with kvm release older than kvm-83-142.el5 (rhbz 569372)
  - Call fsync() at the end instead of opening raw files with O_DSYNC (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-32.el5
changelog:
  - Make numa errors non-fatal (rhbz 559755)
  - Create raw storage files with O_DSYNC (rhbz 563151)
  - Increase qemu guest startup timeout to 30 seconds (rhbz 563151)


author: Jiri Denemark <jdenemar@redhat.com> - 0.6.3-31.el5
changelog:
  - Fix ACS with root devices (rhbz 526713)
  - Fix PCI device re-assignment (rhbz 500217)
  - Fix a race between KVM and libvirt (rhbz 500217)
  - Fix state bug in libvirtd (rhbz 500217)
  - Set machine type to "rhel5.4.0" by default (rhbz 542665)
  - Correct erroneous expression in pciDeviceDownstreamLacksACS (rhbz 526713)


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-30.el5
changelog:
  - fix crash in xenUnifiedNodeDeviceReset
  - Resolves: rhbz#555309
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-26.el5
changelog:
  - avoid some unknown failure error reports
  - Resolves: rhbz#531729
  - avoid "error: unknown procedure" when querying older libvirt
  - Resolves: rhbz#531735
  - remove limit on number of tap devices and guest
  - Resolves: rhbz#519729
  - avoid crashes when having concurrent TLS connections
  - Resolves: rhbz#512367


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-25.el5
changelog:
  - fix python binding generator to avoid clashes in method names
  - Resolves: rhbz#510427
  - nodedev-destroy can hang libvirtd
  - Resolves: rhbz#510430
  - avoid spurious errors on npiv device creation
  - Resolves: rhbz#514324
  - node device APIs should expose the relationship between SR-IOV VFs and PFs
  - Resolves: rhbz#481748
  - implement --pool option for virsh vol-path
  - Resolves: rhbz#509306
  - cannot delete storage pool problem
  - Resolves: rhbz#496579
  - Can not hotplug vtd device to Xen guest
  - Resolves: rhbz#546671
  - Inactive KVM guest memory reporting via 'info' is strange
  - Resolves: rhbz#508266
  - command 'virsh nodedev-create' fails with out of memory error
  - Resolves: rhbz#510426
  - Command 'virsh find-storage-pool-sources' failure unknown error
  - Resolves: rhbz#509979


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-24.el5
changelog:
  - guest host present two NIC with duplicate MAC addresses, only one configured
  - Resolves: rhbz#483884
  - implement core dump API for QEMU driver
  - Resolves: rhbz#507551
  - reset a PCI function even if other unused devices/functions are reset
  - Resolves: rhbz#500213
  - avoid a crash with virsh vol-key volname
  - Resolves: rhbz#509293


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-23.el5
changelog:
  - enable bridges even without IP assigend yet
  - Resolves: rhbz#532834
  - PCI device assigned need to be reattached to host on guest shutdown
  - Resolves: rhbz#500217
  - allow PCI PM reset on multi-function devices
  - Resolves: rhbz#517460
  - support for KVM PCI device assignment hotplug
  - Resolves: rhbz#517465


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-22.el5
changelog:
  - xen driver need check for duplicate uuid
  - Resolves: rhbz#504262
  - xen credit scheduler doesn't handle cap value 65535
  - Resolves: rhbz#504914
  - domain XML dump broke with virt-xml-validate
  - Resolves: rhbz#512069
  - libvirt did not report vCPU usage properly
  - Resolves: rhbz#514082
  - virsh man page sugegsted operation were asynchronous
  - Resolves: rhbz#514532
  - add support for qemu hugepages control
  - Resolves: rhbz#518099
  - libvirt was reordering drives based on their type
  - Resolves: rhbz#521053
  - a typo in domain interface definitions could generate a segfault
  - Resolves: rhbz#523418
  - dnsmasq used to limit the number of DHCP leases to only 150
  - Resolves: rhbz#524280


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-14.el5
changelog:
  - fix broken behavior on wrong pool creation
  - Resolves: rhbz#496616
  - fix hang of libvirt daemon on node device XML dump
  - Resolves: rhbz#509261


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-12.el5
changelog:
  - fix bogus WWNs when HBA kernel modules are (re)loaded
  - remove a small leak with SCSI node device conf
  - Resolves: rhbz#496925


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-11.el5
changelog:
  - NPIV didn't work due to different paths in /sys for older kernels
  - Resolves: rhbz#496925
  - the domain info API would fail due to the absence of a security model
  - Resolves: rhbz#506688


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-6.el5
changelog:
  - look for kvm binary in libexec
  - Resolves: rhbz#504046
  - Fix build support for qcow2 on x86_64 due to missing binary at build time
  - Resolves: rhbz#504119
  - Take ownership of the /usr/share/augeas subtree
  - Resolves: rhbz#481809


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-5.el5
changelog:
  - error in handling hostdev managed informations
  - Resolves: rhbz#499577
  - detaching Xen devices led to segfaults
  - Resolves: rhbz#497051


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-4.el5
changelog:
  - implement NPIV node device create and destroy
  - Resolves: rhbz#496925
  - avoid daemon crash on TLS auth errors
  - Resolves: rhbz#503178
  - forbid to set autostart on transcient networks
  - Resolves: rhbz#503481


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-3.el5
changelog:
  - Fix serious event handling bug possibly killing random domains
  - Resolves: rhbz#500158
  - XML attribute escaping fix
  - Handle recent QEmu help output
  - Hash destructors should use unref not free
  - Fix some name and uuid uniqueness checks
  - Fix save/restore/migrate for qemu >= 0.10.0
  - Fix QEmu capabilities refresh
  - Extra check in pid file access routines
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-2.el5
changelog:
  - Fix missing ownership of /usr/share/gtk-doc/html/libvirt from spec file
  - Resolves: rhbz#481809
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-1.el5
changelog:
  - Upstream release 0.6.3
  - various bug fixes
  - a couple of packaging fixes including #496867
  - Related: rhbz#475821


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-15.el5
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-9.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - XML string escaping in xm driver
  - Resolves: rhbz#428879


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-8.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - removal of extra_release macro
  - Resolves: rhbz#436803
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - fix a hash table bug
  - Resolves: rhbz#448533


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-2.el5
changelog:
  - add 3 patches fixing NUMA disk detach for tap devices, setting cpu
    parameter on inactive domains and an escaping bug
  - Resolves: rhbz#251641
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1.el5
changelog:
  - Update to 0.3.3
  - Avahi support
  - NUMA support
  - APIs for collecting statistics on disks and interfaces
  - API for domains migration
  - localtime clock support
  - PS/2 and USB input devices
  - Secure remote access support
  - unification of daemons
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements
  - Resolves: rhbz#223833
  - Resolves: rhbz#235851
  - Resolves: rhbz#251641
  - Resolves: rhbz#251706
  - Resolves: rhbz#253494
  - Resolves: rhbz#254051
  - Resolves: rhbz#273421
  - Resolves: rhbz#306931
  - Resolves: rhbz#328841
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> 0.2.3-1.el5
changelog:
  - Upgrade to version 0.2.3 for RHEL-5.1
  - Resolves: rhbz#243463
  - Resolves: rhbz#222704
  - Resolves: rhbz#224415
  - Resolves: rhbz#225566
  - Resolves: rhbz#225567
  - Resolves: rhbz#229176
  - Note: 0.2.3 is really supposed to work with dnsmask which is not 
    available at the moment in RHEL-5


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-6.el5
changelog:
  - save the amount of current memory used when dumping XML if different from
    maximum amount, and use that when restarting the domain from the XML,
    rhbz#214354
  - when using a pygrub bootloader, strip the os informations because xend
    assumes they take precedence over bootloader, rhbz#214741
  - Resolves: rhbz#214354 rhbz#214741


author: Daniel Veillard <veillard@redhat.com> 0.1.8-5.el5
changelog:
  - patch adding a domain core dump entry point to the library, it requires
    xen >= 3_0_3-13_el5 to get the xend server side support
  - Resolves: rhbz#214913


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1.el5
changelog:
  - another ia64 page size fix
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - compile fix


author: Daniel Veillard <veillard@redhat.com> 0.1.7-2
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Paul Nasrat <pnasrat@redhat.com> - 1.1.7-1
changelog:
  - Upgrade to latest upstream 1.1.x series
  - sqlite_prepare fix now upstream
  - Update url information


author: Mike A. Harris <mharris@redhat.com> 2.1.10
changelog:
  - Updated libXft to version 2.1.10
  - Specify freetype dependencies as >= 2.1.9-1
  - Futureproof builds by adding release number to fontconfig dependencies.


author: Mike A. Harris <mharris@redhat.com> 2.1.8.1-1
changelog:
  - Updated libXft to version 2.1.8.1 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.
  - Added "Requires: libXrender-devel" to -devel subpackage for (#175465)


author: Mike A. Harris <mharris@redhat.com> 2.1.7-5
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro
  - Fix BuildRequires to use new style X library package names


author: Mike A. Harris <mharris@redhat.com> 2.1.7-4
changelog:
  - Added "BuildRequires: fontconfig-devel >= 2.2" dependency that was
    previously missed.  Also added "Requires: fontconfig >= 2.2" runtime
    dependency.
  - Added missing defattr to devel subpackage.


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5.10
changelog:
  - Resolves: rhbz#226949 telegu rendering problem in OOo
  - Resolves: rhbz#228458 gujarati dependent vowel treated as independent
  - Resolves: rhbz#214948 multiple dependant vowel signs displayed as one


author: Caolan McNamara <caolanm@redhat.com> - 3.6-5
changelog:
  - rh#208705# add pkg-config Require for -devel package
  - add icu.icu5431.malayam.patch for rh#208551#/rh#209084#
  - add icu.icu5433.oriya.patch for rh#208559#/rh#209083#


author: Caolan McNamara <caolanm@redhat.com> - 3.6-2
changelog:
  - fix rh#205252#/icu#5365 (gnome#121882#/#icu#4026#) to make icu 
    like pango for multiple dependant vowels


author: Caolan McNamara <caolanm@redhat.com> - 3.6-0.1.d01
changelog:
  - rh#200728# update to prelease 3.6d01 to pick up on sinhala fixes
  - drop integrated rh190879.patch
  - drop integrated icu-3.4-sinhala1.patch


author: Ville Skyttä <ville.skytta at iki.fi> - 3.2-3
changelog:
  - Apply upstream case mapping mutex lock removal patch.
  - Build with gcc 3.2 as a temporary workaround for #152495.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:3.0-0.fdr.1
changelog:
  - Update to 3.0, datadirs patch no longer needed.
  - Package data in shared libs, drop -locales subpackage.
  - Rename -docs subpackage to libicu-doc, and generate graphs with graphviz.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.6.1-0.fdr.3
changelog:
  - Partial fix for bad datadirs returned by icu-config (works as long as
    data packaging mode is not "common" or "dll").


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_5.14
changelog:
  - Add poppler-0.5.4-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add poppler-0.5.4-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639839


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_5.12
changelog:
  - Add poppler-0.5.4-current-stream.patch
  - Use customized getPos() function for JBIG2Stream
  - Resolves: #624702


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_4.11
changelog:
  - Fixes various flaws addressed in bugs #526637, #526893 and #526915
    which were tracked in #527403.
  - Resolves: #527403


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_4.10
changelog:
  - Add poppler-0.5.4-JBIG2-segment-reading.patch to
    fix reading of arithmetically encoded JBIG2 images with
    unknown length.
  - Resolves: #528147


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_3.6
changelog:
  - Memory handling from upstream.
  - Removes CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.allocation-size-check.patch.
  - Adds upstream-memory-handling.patch.
  - Resolves: #490707


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_3.5
changelog:
  - Fix allocation of memory in several functions.
  - Adds CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.allocation-size-check.patch.
  - Removes CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.long-int.patch.
  - Resolves: #490707


author: Marek Kasik <mkasik@redhat.com> - 0.5.4-4.4.el5_3.4
changelog:
  - Fix allocation of memory in several functions.
  - Add CVE-2009-0146.CVE-2009-0147.CVE-2009-0166.long-type.patch.
  - Resolves: #490707


author: Kristian Høgsberg <krh@redhat.com> 0.5.4-4
changelog:
  - Add patch from Shawn Huang <phuang@redhat.com> to fix selection
    rendering across different fonts (#212142).


author: Harald Hoyer <harald@redhat.com> 1.3.99.13
changelog:
  - add BONDING options to command line output and parsing (rhbz#452776)
  - add MACADDR to QETH dialogs and internal structures (rhbz#484289)
  - Resolves: rhbz#452776, rhbz#484289


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.3.99.11-2
changelog:
  - Fixed essid quoting 
  - Minor fixes to wireless wizard
  - Added option to set channel to Auto
  - Fixed crash when hosts file contains wrong entries
  - Fixed missing icon warning
  - Resolves: rhbz#444320


author: Harald Hoyer <harald@redhat.com> - 1.3.99.11-1
changelog:
  - added OPTIONS for qeth interfaces and bring them online 
    (rhbz#441514, rhbz#440970)
  - do not change the hostname, if already set in the profile, 
    save the hostname to the profile (rhbz#201657)
  - fixed typo in glade file (rhbz#440662)
  - do not traceback on non-int alias (rhbz#235405)
  - require xorg-x11-fonts-Type1 (which is nonsense) (rhbz#241732)
  - removed all ctc traces (rhbz#218771)
  - better static route handling (rhbz#217534)
  - fixed GUI adds trailing spaces to "options" lines in /etc/modprobe.conf
    (Jiri Moskovcak <jmoskovc@redhat.com>) (rhbz#146291)
  - added new option for setting wireless securitymode 
    when adding/deleting wireless devices 
    (Jiri Moskovcak <jmoskovc@redhat.com>) (rhbz#146291)
  - added DNS for text interface (Jiri Moskovcak <jmoskovc@redhat.com>) 
    (rhbz#306601, rhbz#434990)
  - fixed hosts parsing (Jiri Moskovcak <jmoskovc@redhat.com>) (rhbz#442460)
  - Resolves: rhbz#146291 rhbz#201657 rhbz#217534 rhbz#218771 rhbz#241732
  - Resolves: rhbz#291461 rhbz#433162 rhbz#440662 rhbz#440970 rhbz#441514 
  - Resolves: rhbz#444320, rhbz#306601, rhbz#434990, rhbz#442460


author: Harald Hoyer <harald@redhat.com> - 1.3.99.2-1
changelog:
  - added support for s390 qeth devices (rhbz#184734)
  - removed CTC and IUCV support (rhbz#219180)
  - preserve or add ::1 to /etc/hosts (rhbz#213709)
  - do not touch ifcfg-*-range config files (rhbz#221292)
  - default to static if BOOTPROTO unset and IP set (rhbz#227673)
  - Resolves: rhbz#184734, rhbz#219180, rhbz#213709, rhbz#221292, rhbz#227673


author: Harald Hoyer <harald@redhat.com> - 1.3.95
changelog:
  - translation update (bug #208886)
  - use rhpl.iwlib for wireless functions (bug #197954)
  - added perl-XML-Parser build requirement


author: Harald Hoyer <harald@redhat.com> - 1.3.90
changelog:
  - fixed:
  - [135014] MTU and MRU should be confiurable for ADSL
  - [141055] system-config-network needs to be able to set MTU
  - [149780] no GATEWAY, IPADDR and NETMASK, if BOOTPROTO=dhcp 
  - [150362] [Errno 2] No such file or directory: '/etc/hosts'
  - [157172] Wrong DNS for provider "ZEDAT_Berlin"
  - [160417] Bad: cannot make any changes to network settings
  - [169819] Trailing space in host name causes crash
  - [175078] String (country name) change request
  - [176145] Please enable Serbian translation in system-config-network
  - [177198] deprecation warning in system-config-network
  - [187563] localized option passed to ifcfg-wlan0 files
  - [188321] Creating an alias for a network interface breaks device 
             setup after reboots
  - [190242] Firefox instance running as root when used to read docs 
             for system-config-*
  - [197401] Don't write HWADDR for alias interfaces


author: Harald Hoyer <harald@redhat.com> - 1.3.27
changelog:
  - use new pam stack replacement
  - added OnParent for Alias Devices
  - added SPI and better key generation for ipsec
  - corrected column handling in main window
  - GUI liftup
  - added AVM Fritz!PCI v2.0 ISDN card to ISDN Hardwarelist (bug 134605)
  - remove /etc/sysconfig/isdncard, if no ISDN is configured


author: Harald Hoyer <harald@redhat.com> - 1.3.17
changelog:
  - better "make clean"
  - removed references to Red Hat Linux
  - added testsuite for data layer
  - added some module-info entries
  - added command line parsing to network-control
  - added IPsec to network-cmd
  - switched logging to syslog
  - do not touch bonding slaves
  - better alias handling
  - better handling of chroot 
  - read *.ko modules also
  - handle modules parameter without "="
  - create correct SPI_ identifier for manual IPsec keying
  - better hostname handling
  - better profile handling
  - fix kernel version parsing
  - unknown-flag.xpm for unknown country flags
  - fixed TokenRing glade file (bad hash at beginning of file)
  - fix the length of IPSec shared keys
  - prevent modified status after profile switching
  - save dialog, for ipsec deactivation
  - PEERDNS defaults to yes
  - routing for wireless config dialog
  - only display CIPE for kernel < 2.6


author: Harald Hoyer <harald@redhat.com> - 1.3.16
changelog:
  - be more relaxed, when parsing the kernel version (115917)
  - fixed removing of Hostname (115795)
  - fixed "DevEthernet instance has no attribute 'IPv6Init'" (116375)
  - removed save dialog, when switching profiles (107399)
  - added generic Initstrings (115768)
  - added secure.png logo
  - added "-c" parameter for activate/deactivate
  - changed hotkeys to avoid double entries
  - use new pixmap loading code (only take local paths, if debugging is active)
  - moved updateNetworkScripts() to NC_functions.py
  - fallback on /etc/sysconfig/network-scripts
  - removed /usr/lib/rhs/python from sys.path
  - added -? as a command line option
  - corrected --root= option for gui
  - activate/deactivate buttons always sensitive
  - check for ipsec-tools and dynamically display ipsec tab
  - no second dialog while activating in system-control-network
  - change hosts file on hostname change
  - PEERDNS is true, if not configured


author: Harald Hoyer <harald@redhat.de> 1.3.13
changelog:
  - fixed T-Online dialog #110911
  - default flow control to CTSRTS #110347
  - only clear login/pw on provider select, if provider has its own number
  - fixed cancel of dialup process #103421
  - default to "/" for chrooted configuration
  - default to "default" profile if none active
  - fixed "activate button not active" #110193
  - scn-tui requires newt #104213
  - fixed #107816, by recognizing /var/run/ppp-ppp<NICKNAME>.pid
  - fixed a bug in ISDN activate #100677


author: Harald Hoyer <harald@redhat.de> 1.3.12
changelog:
  - renamed redhat-config-network -> system-config-network
  - added pciutils requirement
  - added utf-8 encoding comments
  - corrected some translation strings
  - added redhat-config-network provides


author: Harald Hoyer <harald@redhat.de> 1.3.10
changelog:
  - removed restriction on t-online password entry #105970
  - failsafe changing the error image #108094
  - corrected indention #108151


author: Harald Hoyer <harald@redhat.de> 1.3.9
changelog:
  - fixed 107501, 107387, 106751, 104213
  - fallback to no logfile, if opening the logfile fails
  - test, if /etc/{hosts,resolv.conf} exists
  - removed ipsec tab


author: Harald Hoyer <harald@redhat.de> 1.3.3
changelog:
  - fixed #85365
  - fixed glade file loading
  - more ipsec stuff
  - neat can use a "chrooted" environment now (-r)
  - .rpmsave will not be loaded
  - no interrupt/io settings for PNP cards
  - HIGIfied labels
  - double click for hardware and ipsec


author: Harald Hoyer <harald@redhat.de> 1.2.12-1
changelog:
  - wlan0 handling
  - splash screen bug fixed
  - improvements in HW list handling
  - isdncard handling #91607


author: Harald Hoyer <harald@redhat.de> 1.2.3-3
changelog:
  - Bugfix release for 9
  - fixed #85011, #85703, #85653, #84956, #83640, #68169, #86476, #78043, #77763


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.17-1
changelog:
  - Make it use the gnome help system, add yelp as a dependency (#71857)
  - Traceback fix: # 72581
  - translation updates


author: Trond Eivind Glomsrød <teg@redhat.com> 1.1.13-1
changelog:
  - Fixes to the traceback dialog (fix "save to floppy" (we don't do that),
    add i18n.)
  - Fix traceback with malformed /etc/hosts (#69320)
  - Fix dependencies (#69990)
  - Some minor userhelper fixes


author: Than Ngo <than@redhat.com> 1.1.3-1
changelog:
  - get_pixbuf: if no icon was not found, looks the icons
    in standard icon directory
  - bug fixes in wireless


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Turn off wireless. It doesn't work with all modes, all cards
   and you can't edit IP settings after the initial attempt


author: Harald Hoyer <harald@redhat.com> 0.9.6-1
changelog:
  - seperated gui from data layer
  - make .pyc ghost files
  - fixed profile/alias problem
  - modem probing only once


author: Than Ngo <than@redhat.com> 0.9.3-1
changelog:
  - fix internet-druid fails (bug #54192)
  - fix dial on demand problem from some ISDN Provider in German
  - don't trace back if length of Login name is 2 (bug #54322)


author: Than Ngo <than@redhat.com> 0.8.2-1
changelog:
  - fix backtrace bug in CIPE
  - fix traceback bug if self.device.Dialup is None
  - if hardware is deleted, remove all devices used this hardware
  - de.po: fix bad translation


author: Phil Knirsch <phil@redhat.de> 0.8.0-2
changelog:
  - Fixed wrong option handling in /etc/modules.conf (#52853, #52923)
  - Fixed empty search entry in /etc/resolv.conf (#52926)
  - Fixed empty domain entry in /etc/resolv.conf (#52924)
  - Fixed ethernet hardware probing traceback (#52921)


author: Trond Eivind Glomsrød <teg@redhat.com> 0.7.4-1
changelog:
  - More bugfixes, among them #51929, #51991, #51721, #51722,
    partial #52044, #51720. 
  - Updated translations, include more languages


author: Phil Knirsch <phil@redhat.de> 0.7-1
changelog:
  - Added a lot of documentation
  - Final changes to the Modem druid dialog and code to look just like the
    hardware add dialog for modems.


author: Phil Knirsch <phil@redhat.de> 0.6.8-3
changelog:
  - Added the modem detection for the ModemDruid.
  - Added kudzu as requirement as it is needed for modem detection.
  - For compatibility still check for symlinks, too. Otherwise older setups will
    break.


author: Phil Knirsch <phil@redhat.de> 0.6.7-2
changelog:
  - Fixed various important bugzilla bugs
  - Added and implemented the add Hardware dialog.
  - Added a working Apply button.
  - Switched to using hardlinks instead of symlinks for config files.


author: Than Ngo <than@redhat.com>
changelog:
  - fix pap/chap Login name for T-online
  - fix InitStrings
  - use gettext function in NC_functions
  - fix loading DEFROUTE/PERSIST/DEMAND/IDLETIMEOUT for Modem dialup
  - don't backtrace if 'SetVolume' and 'Dial Command' are not defined


author: Phil Knirsch <phil@redhat.de> 0.6.1-2
changelog:
  - Fixed buggous removal of ifcfg-lo (#50478)
  - Fixed problems with modem volume in hardware dialog
  - Fixed missing /dev/modem for modem setup (#50673)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't run autogen.sh
  - Mark files in /etc as configuration files
  - Multiple fixes to automake files
  - Add Norwegian translation to desktop files
  - install into the configuration tool desktop directory


author: Than Ngo <than@redhat.com> 0.3.1-1
changelog:
  - obsolete isdn-config internet-config
  - requires consolehelper, alchemist
  - add icon and desktop file
  - use bzip2


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P2
changelog:
  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)


author: David Malcolm <dmalcolm@redhat.com> - 3.8.1-2
changelog:
  - Remove static libraries; rewrite specfile to be more explicit about the
    package payload (#172883)


author: David Malcolm <dmalcolm@redhat.com> - 3.7.5-3
changelog:
  - Added patch to use pango for cursor navigation and deletion, fixing problems
    with indic scripts (#129212)


author: David Malcolm <dmalcolm@redhat.com> - 3.5.6-2
changelog:
  - Changed deprecated "Copyright" directive into a "License" directive
  - License directive now reads "LGPL/GPL", rather than "LGPL", reflecting comment in README file


author: David Malcolm <dmalcolm@redhat.com> - 3.5.4-1
changelog:
  - Upgrade to 3.5.4
  - Update gtkhtml_major from 3.1 to 3.6 to locate translations
  - Temporarily remove IM patch


author: Jeremy Katz <katzj@redhat.com> 1.1.8-1
changelog:
  - 1.1.8
  - disable tagoh's patch for now.  it's not applied upstream and ends up 
    backing out some translation changes


author: Akira TAGOH <tagoh@redhat.com> 1.1.7-4
changelog:
  - gtkhtml-1.1.7-fixfont.patch: applied to allow fontset by default.
  - gtkhtml-po.tar.bz2: to changes default display/print fonts for CJK.
    perhaps it should be removed when the upstream will releases the next version.
  - gtkhtml-1.1.7-domain.patch: define GNOME_EXPLICIT_TRANSLATION_DOMAIN as gtkhtml-1.1.


author: Matthias Saou <http://freshrpms.net/> 0.104-1
changelog:
  - Update to 0.104 at last (#147311)
  - Include no-exec-stack, pic-fix, amd64reloc and gtk2 patches from Gentoo
    and PLD (merge gcc4 fix to the pic-fix patch).
  - Now build against gtk2 (thanks to the patch above).
  - Exclude static library.


author: Jeremy Katz <katzj@redhat.com> - 0:0.102-4
changelog:
  - gtk+ doesn't need to be in the .pc file (committed upstream, reported 
  - don't require gtk+-devel for -devel package (unneeded)
    to fedora-devel-list by John Thacker)


author: Archit Shah <ashah@redhat.com> 0:1.2.1-2jpp_1fc
changelog:
  - remove unnecessary build dependencies on jacorb and jonathan-rmi
  - include fix to Axis bug 2142
  - merge from upstream 2jpp


author: Gary Benson <gbenson@redhat.com>
changelog:
  - Add DOM3 stubs to classes that need them (#152255).
  - Avoid some API holes in libgcj's ImageIO implementation.
  - Pick up CORBA and javax.rmi classes from jacorb and jonathan-rmi.


author: Nicolas Mailhot <Nicolas.Mailhot at laPoste.net> 0:1.1-1jpp
changelog:
  - Initial packaging
  - no xml security for now since xml-security is not packaged yet
  - functional tests not executed yet - seems they need some setup and do not
    run out of the box
  - no webapp right now - file layout is too messy if hidden into a war file
    since jpp installs webapps expanded, this matters


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5
changelog:
  - incorporate upstream patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-52.el5
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#611713)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-49.el5
changelog:
  - ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
    accept GSSAPI auth to any service for which we have a matching key (#538075)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-47.el5
changelog:
  - pull in fix for RT#5551 to treat the referral realm when seen in a ticket
    as though it were the local realm (#498554, also very likely #450122)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-46.el5
changelog:
  - add aes256-cts:normal and aes128-cts:normal to the list of keysalts
    in the default kdc.conf (part of #565941)
  - add a note to kdc.conf(5) pointing to the admin guide for the list of
    recognized key and salt types (the rest of #565941)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-44.el5
changelog:
  - libgssapi: backport patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605367,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-42.el5
changelog:
  - stop caring about the endianness of stash files (#514741), which will be
    replaced by proper keytab files in later releases
  - don't crash in krb5_get_init_creds_password() if the passed-in options
    struct is NULL and the client's keys have expired (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-41.el5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#540769 and #596887, respectively)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add candidate patch to correct libgssapi null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583704)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-40.el5
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-39.el5
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578186)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-38.el5
changelog:
  - merge patch to correct KDC integer overflows which could be triggered by
    malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-37.el5
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#546538)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-33.el5
changelog:
  - kdb5_util: when renaming a database, if the new name's associated lock
    files don't exist, go ahead and create them (#442879)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: perform PAM account and session management for the target user;
    authentication is still performed as before (#477033)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix typo in ksu's reporting of errors getting credentials (#462890)
  - kadmind.init: stop setting up a keytab, as kadmind's been able to use
    the database directly for a while now (#473151)
  - pull up patch to set PAM_RHOST (James Leddy, #479071)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490636, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491036, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-32.el5
changelog:
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461902)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-28.el5
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)
  - telnet: remove the proviso in the man page which says that the "z" command
    only works in csh, as this is only true on systems where other shells don't
    implement job control (#433947)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442716)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-20
changelog:
  - temporarily back out %post changes, fix for #143289 for security update
  - add preliminary patch to correct unauthorized access via krb5-aware telnet


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-19
changelog:
  - refrain from killing any lingering members of our child's process group when
    logging that the child process has exited (Jose Plans, #143289)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - initial update to 1.6, pre-package-reorg
  - move workstation daemons to a new subpackage (#81836, #216356, #217301), and
    make the new subpackage require xinetd (#211885)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-18
changelog:
  - make use of install-info more failsafe (Ville Skyttä, #223704)
  - preserve timestamps on shell scriptlets at %install-time


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-14
changelog:
  - apply fixes from Tom Yu for MITKRB5-SA-2006-002 (CVE-2006-6143) (#218456)
  - apply fixes from Tom Yu for MITKRB5-SA-2006-003 (CVE-2006-6144) (#218456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update backport of the preauth module interface
  - add proposed patches 4566, 4567
  - add proposed edata reporting interface for KDC
  - add temporary placeholder for module global context fixes


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-11
changelog:
  - don't bail from the KDC init script if there's no database, it may be in
    a different location than the default (fenlason)
  - remove the [kdc] section from the default krb5.conf -- doesn't seem to have
    been applicable for a while


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-10
changelog:
  - rename krb5.sh and krb5.csh so that they don't overlap (#210623)
  - way-late application of added error info in kadmind.init (#65853)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.5-4
changelog:
  - ensure that the gssapi library's been initialized before walking the
    internal mechanism list in gss_release_oid(), needed if called from
    gss_release_name() right after a gss_import_name() (#198092)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-7
changelog:
  - further munge krb5-config so that 'libdir=/usr/lib' is given even on 64-bit
    architectures, to avoid multilib conflicts; other changes will conspire to
    strip out the -L flag which uses this, so it should be harmless (#192692)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-6
changelog:
  - adjust the patch which removes the use of rpath to also produce a
    krb5-config which is okay in multilib environments (#190118)
  - make the name-of-the-tempfile comment which compile_et adds to error code
    headers always list the same file to avoid conflicts on multilib installations
  - strip SIZEOF_LONG out of krb5.h so that it doesn't conflict on multilib boxes
  - strip GSS_SIZEOF_LONG out of gssapi.h so that it doesn't conflict on mulitlib
    boxes


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-4
changelog:
  - give a little bit more information to the user when kinit gets the catch-all
    I/O error (#180175)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.3-3
changelog:
  - rebuild properly when pthread_mutexattr_setrobust_np() is defined but not
    declared, such as with recent glibc when _GNU_SOURCE isn't being used


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#149476)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-3
changelog:
  - add an xinetd configuration file for encryption-only telnetd, parallelling
    the kshell/ekshell pair (#167535)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
changelog:
  - change the default configured encryption type for KDC databases to the
    compiled-in default of des3-hmac-sha1 (#57847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-5
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159305)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161475)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157104)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159755)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-4
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#151612)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-3
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4.1-1
changelog:
  - update to 1.4.1, incorporating fixes for CAN-2005-0468 and CAN-2005-0469
  - when starting the KDC or kadmind, if KRB5REALM is set via the /etc/sysconfig
    file for the service, pass it as an argument for the -r flag


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add draft fix from Tom Yu for slc_add_reply() buffer overflow (CAN-2005-0469)
  - add draft fix from Tom Yu for env_opt_add() buffer overflow (CAN-2005-0468)


author: Nalin Dahyabhai <nalin@redhat.com> 1.4-1
changelog:
  - update to 1.4
    - v1.4 kadmin client requires a v1.4 kadmind on the server, or use the "-O"
      flag to specify that it should communicate with the server using the older
      protocol
    - new libkrb5support library
    - v5passwdd and kadmind4 are gone
    - versioned symbols
  - pick up $KRB5KDC_ARGS from /etc/sysconfig/krb5kdc, if it exists, and pass
    it on to krb5kdc
  - pick up $KADMIND_ARGS from /etc/sysconfig/kadmin, if it exists, and pass
    it on to kadmind
  - pick up $KRB524D_ARGS from /etc/sysconfig/krb524, if it exists, and pass
    it on to krb524d *instead of* "-m"
  - set "forwardable" in [libdefaults] in the default krb5.conf to match the
    default setting which we supply for pam_krb5
  - set a default of 24h for "ticket_lifetime" in [libdefaults], reflecting the
    compiled-in default


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - silence compiler warning in kprop by using an in-memory ccache with a fixed
    name instead of an on-disk ccache with a name generated by tmpnam()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove rc4-hmac:norealm and rc4-hmac:onlyrealm from the default list of
    supported keytypes in kdc.conf -- they produce exactly the same keys as
    rc4-hmac:normal because rc4 string-to-key ignores salts
  - nuke kdcrotate -- there are better ways to balance the load on KDCs, and
    the SELinux policy for it would have been scary-looking
  - update to 1.3.5, mainly to include MITKRB5SA 2004-002 and 2004-003


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-3
changelog:
  - incorporate fixes from Tom Yu for CAN-2004-0642, CAN-2004-0772
    (MITKRB5-SA-2004-002, #130732)
  - incorporate fixes from Tom Yu for CAN-2004-0644 (MITKRB5-SA-2004-003, #130732)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.3-2
changelog:
  - re-enable large file support, fell out in 1.3-1
  - patch rcp to use long long and %lld format specifiers when reporting file
    sizes on large files


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-9
changelog:
  - remove patch to set TERM in klogind which, combined with the upstream fix in
    1.3.1, actually produces the bug now (#114762)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-8
changelog:
  - when iterating over lists of interfaces which are "up" from getifaddrs(),
    skip over those which have no address (#113347)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-6
changelog:
  - fix bug in patch to make rlogind start login with a clean environment a la
    netkit rlogin, spotted and fixed by Scott McClung


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.1-5
changelog:
  - include profile.d scriptlets in krb5-devel so that krb5-config will be in
    the path if krb5-workstation isn't installed, reported by Kir Kolyshkin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add more etypes (arcfour) to the default enctype list in kdc.conf
  - don't apply previous patch, refused upstream


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-2
changelog:
  - pull fix for non-compliant encoding of salt field in etype-info2 preauth
    data from 1.3.1 beta 1, until 1.3.1 is released.


author: Nalin Dahyabhai <nalin@redhat.com> 1.3-0.beta.4
changelog:
  - test update to 1.3 beta 4
  - ditch statglue build option
  - krb5-devel requires e2fsprogs-devel, which now provides libss and libcom_err


author: Jakub Jelinek <jakub@redhat.com> 1.2.7-2
changelog:
  - always #include <errno.h> to access errno, never do it directly
  - enable LFS on a bunch of other 32-bit arches


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - increase the maximum name length allowed by kuserok() to the higher value
    used in development versions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install src/krb524/README as README.krb524 in the -servers package,
    includes information about converting for AFS principals


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - remove hashless key types from the default kdc.conf, they're not supposed to
    be there, noted by Sam Hartman on krbdev


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.3-1
changelog:
  - rename the krb5 package back to krb5-libs; the previous rename caused
    something of an uproar
  - update to 1.2.3, which includes the FTP and telnetd fixes
  - configure without --enable-dns-for-kdc --enable-dns-for-realm, which now set
    the default behavior instead of enabling the feature (the feature is enabled
    by --enable-dns, which we still use)
  - reenable optimizations on Alpha
  - support more encryption types in the default kdc.conf (heads-up from post
    to comp.protocols.kerberos by Jason Heiss)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.2-14
changelog:
  - rename the krb5-libs package to krb5 (naming a subpackage -libs when there
    is no main package is silly)
  - move defaults for PAM to the appdefaults section of krb5.conf -- this is
    the area where the krb5_appdefault_* functions look for settings)
  - disable statglue (warning: breaks binary compatibility with previous
    packages, but has to be broken at some point to work correctly with
    unpatched versions built with newer versions of glibc)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add patch to support "ANY" keytab type (i.e.,
    "default_keytab_name = ANY:FILE:/etc/krb5.keytab,SRVTAB:/etc/srvtab"
    patch from Gerald Britton, #42551)
  - build with -D_FILE_OFFSET_BITS=64 to get large file I/O in ftpd (#30697)
  - patch ftpd to use long long and %lld format specifiers to support the SIZE
    command on large files (also #30697)
  - don't use LOG_AUTH as an option value when calling openlog() in ksu (#45965)
  - implement reload in krb5kdc and kadmind init scripts (#41911)
  - lose the krb5server init script (not using it any more)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO
  - re-enable optimization on Alpha


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix krb5-send-pr (#18932) and move it from -server to -workstation
  - buildprereq libtermcap-devel
  - temporariliy disable optimization on alphas
  - gettextize init scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make krb5-libs obsolete the old krb5-configs package (#18351)
  - don't quit from the kpropd init script if there's no principal database so
    that you can propagate the first time without running kpropd manually
  - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling)
    (#11588)
  - fix heap corruption bug in FTP client (#14301)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix summaries and descriptions
  - switched the default transfer protocol from PORT to PASV as proposed on
    bugzilla (#16134), and to match the regular ftp package's behavior


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable servers by default to keep linuxconf from thinking they need to be
    started when they don't


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move condrestarts to postun
  - make xinetd configs noreplace
  - add descriptions to xinetd configs
  - add /etc/init.d as a prereq for the -server package
  - patch to properly truncate $TERM in krlogind


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.1
  - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update
  - start using the official source tarball instead of its contents


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind
  - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not
    compatible with other stuff in 6.2, so no need)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to the 1.2 release
  - ditch a lot of our patches which went upstream
  - enable use of DNS to look up things at build-time
  - disable use of DNS to look up things at run-time in default krb5.conf
  - change ownership of the convert-config-files script to root.root
  - compress PS docs
  - fix some typos in the kinit man page
  - run condrestart in server post, and shut down in preun


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch mkdir/rmdir problem in ftpcmd.y
  - add condrestart option to init script
  - split the server init script into three pieces and add one for kpropd


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply second set of buffer overflow fixes from Tom Yu
  - fix from Dirk Husung for a bug in buffer cleanups in the test suite
  - work around possibly broken rev binary in running test suite
  - move default realm configs from /var/kerberos to /var/kerberos


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - use %{_infodir} to better comply with FHS
  - move .so files to -devel subpackage
  - tweak xinetd config files (bugs #11833, #11835, #11836, #11840)
  - fix package descriptions again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change a LINE_MAX to 1024, fix from Ken Raeburn
  - add fix for login vulnerability in case anyone rebuilds without krb4 compat
  - add tweaks for byte-swapping macros in krb.h, also from Ken
  - add xinetd config files
  - make rsh and rlogin quieter
  - build with debug to fix credential forwarding
  - add rsh as a build-time req because the configure scripts look for it to
    determine paths


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove setuid bit on v4rcp and ksu in case the checks previously added
    don't close all of the problems in ksu
  - apply patches from Jeffrey Schiller to fix overruns Chris Evans found
  - reintroduce configs subpackage for use in the errata
  - add PreReq: sh-utils


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix double-free in the kdc (patch merged into MIT tree)
  - include convert-config-files script as a documentation file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch ksu man page because the -C option never works
  - add access() checks and disable debug mode in ksu
  - modify default ksu build arguments to specify more directories in CMD_PATH
    and to use getusershell()


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653)
  - change Requires: for/in subpackages to include 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge krb5-configs back into krb5-libs.  The krb5.conf file is marked as
    a %config file anyway.
  - Make krb5.conf a noreplace config file.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't enable the server by default.
  - Compress info pages.
  - Add defaults for the PAM module to krb5.conf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Correct copyright: it's exportable now, provided the proper paperwork is
    filed with the government.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - apply Mike Friedman's patch to fix format string problems
  - don't strip off argv[0] when invoking regular rsh/rlogin


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak server init script to automatically extract kadm5 keys if
    /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet
  - adjust package descriptions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h
  - add installation of info docs
  - remove krb4 compat patch because it doesn't fix workstation-side servers


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - clean up init script for server, verify that it works [jlkatz]
  - clean up rotation script so that rc likes it better
  - add clean stanza


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - backed out ncurses and makeshlib patches
  - update for krb5-1.1
  - add KDC rotation to rc.boot, based on ideas from Michael's C version


author: Nalin Dahyabhai <nsdahya1@eos.ncsu.edu>
changelog:
  - started changelog (previous package from zedz.net)
  - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6
  - added --force to makeinfo commands to skip errors during build


author: Andreas Schwab <schwab@redhat.com> - 2.17.50.0.6-13.el5
changelog:
  - Fix parsing of debug section in readelf (#499164, #509124).
  - Fix parsing of strings -N option (#508765).
  - Fix BFD_ARCH_SIZE in bfd.h (#529028).
  - Merge symbol visibility in linkonce sections (#531269).


author: Denys Vlasenko <dvlasenk@redhat.com> 2.17.50.0.6-11.el5
changelog:
  - Fix man page of c++filt to show --[no-]strip-underscore option correctly.
    Resolves: RHBZ #495196.


author: Denys Vlasenko <dvlasenk@redhat.com> 2.17.50.0.6-10.el5
changelog:
  - Improve support of ELF64, particularly on 32-bit architectures.
    Resolves: RHBZ #457189.
  - Fix rare linker corner case when it produces large zero-filled hole
    in the executable.
    Resolves: RHBZ #458301.
  - Make "strings -n non_number" error message clearer.
    Resolves: RHBZ #480009.
  - Fix man page of c++filt to show --[no-]strip-underscore option correctly.
    Resolves: RHBZ #485194.
  - While at it, fix "makeinfo >= 4.4" check in configure.
    Resolves: RHBZ #495209.


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.17.50.0.6-9.el5
changelog:
  - Fix complains on .gnu.linkonce.r relocations to their discarded
    .gnu.linkonce.t counterparts (#463934).


author: Jan Kratochvil <jan.kratochvil@redhat.com> 2.17.50.0.6-7.el5
changelog:
  - Fix parsing of the `strings' command line argument `-<number>' (Chu Li,
    Nick Clifton, H.J. Lu, #435078).
  - Rebuild libbfd.a with -fPIC for inclusion into shared libraries (#430856).
    - libbfd.a symbols visibility is now hidden (suggested by Jakub Jelinek).
  - Fix PGI cross-files DW_FORM_ref_addr relocations
    (fix by Jakub Jelinek, #438793).
  - Restore the RHEL-5.0 debug symbols linking performance (Jakub Jelinek,
    H.J. Lu, #364141).


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-6.el5
changelog:
  - full power6 support (Alan Modra, Peter Bergner, Ben Elliston,
    Anton Blanchard, #253108)
  - demangle ppc64 dot symbols in gprof (Jan Kratochvil, #242057)
  - SSE5 support in gas and objdump (Michael Meissner, Dwarakanath Rajagopal,
    Tony Linthicum, H.J.Lu, #426906)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-5.el5
changelog:
  - fix ld --unique with new DWARF3 sections .debug_ranges and .debug_pubtypes
    (Alan Modra, #241252)
  - fix segfault in ppc64 version script handling (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-4.el5
changelog:
  - 10x linking speedup on large C++ apps (#223181)
  - fix tekhex reader
  - SSE4 support in gas and objdump (H.J.Lu, #223120)
  - compile binutils with -D_FILE_OFFSET_BITS=64 (#215514)
  - fix ld --emit-relocs on ppc64 (Alan Modra, #235221)
  - fix ppc32 ld segfault with -msecure-plt (Alan Modra, BZ#4267)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.6-1.el5
changelog:
  - update to 2.17.50.0.6
    - fix for section relative linker script defined symbols in
      empty sections (#212032, BZ#3267)
    - fix handling of DW_CFA_set_loc in .eh_frame optimizations
    - fix R_PPC_{PLT,GOT{,_TLSGD,_TLSLD,_TPREL,_DTPREL}}16_HA relocation
      handling with weak undefined symbols (Alan Modra, #211094)
    - fix --cref (#212099)
    - fix --emit-relocs on ppc64 (#211991)


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-8
changelog:
  - add support for new AMDFAM10 instructions (#198281, IT#97662)
  - add -march=/-mtune= gas support on x86/x86-64
  - x86/x86-64 nop insn improvements
  - fix DT_GNU_HASH shift count value computation


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-3
changelog:
  - fix two places in ld that misbehaved with MALLOC_PERTURB_=N
  - fix .tls_common handling in relocatable linking


author: Jakub Jelinek <jakub@redhat.com> 2.17.50.0.2-1
changelog:
  - update to 2.17.50.0.2
  - update from CVS to 20060601
  - speed up the ELF linker by caching the result of kept section check
    (H.J. Lu)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-6
changelog:
  - fix ld error message formatting, so that collect2 parser can
    parse it again for g++ -frepo (#187142)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-2
changelog:
  - add MNI support on i?86/x86_64 (#183080)
  - support S signal frame augmentation flag in .eh_frame,
    add .cfi_signal_frame support (#175951, PR other/26208, BZ#300)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.6-1
changelog:
  - update to 2.16.91.0.6
    - fix ppc64 --gc-sections
    - disassembler fixes for x86_64 cr/debug regs
    - fix linker search order for DT_NEEDED libs


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.5-1
changelog:
  - update to 2.16.91.0.5
  - don't error about .toc1 references to discarded sectiosn on ppc64
    (#175944)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.2-2
changelog:
  - don't complain about relocs to discarded sections in ppc32
    .got2 sections (Alan Modra, PR target/17828)


author: Jakub Jelinek <jakub@redhat.com> 2.16.91.0.1-3
changelog:
  - fix buffer overflow in readelf ia64 unwind printing code
  - use vsnprintf rather than vsprintf in gas diagnostics (Tavis Ormandy)
  - fix ld-cdtest when CFLAGS contains -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.16.90.0.3-1
changelog:
  - update to 2.16.90.0.3
  - update to 20050615 CVS
    - ppc32 secure PLT support (Alan Modra)
  - further bfd/readelf robustification


author: Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-3
changelog:
  - fix buffer overflows in readelf (#149506)
  - move c++filt to binutils from gcc-c++, conflict with gcc-c++ < 4.0 (#86333)


author: Jakub Jelinek <jakub@redhat.com> 2.15.94.0.2-1
changelog:
  - update to 2.15.94.0.2
  - fix .note.GNU-stack/PT_GNU_STACK computation in linker on ppc64 (#147296)
  - fix stripping of binaries/libraries that have empty sections right before
    .dynamic section (with the same starting address; #144038)
  - handle AS_NEEDED (...) in linker script INPUT/GROUP


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-10
changelog:
  - avoid unnecessary gap with -z relro showing on i686 libc.so
  - ppc64 --emit-relocs fix (Alan Modra)
  - don't crash if STT_SECTION symbol has incorrect st_shndx (e.g. SHN_ABS,
    as created by nasm; #142181)
  - don't try to make absptr LSDAs relative if they don't have relocations
    against them (Alan Modra, #141162)


author: Jakub Jelinek <jakub@redhat.com> 2.15.92.0.2-3
changelog:
  - revert Sep 09 change to make ppc L second argument e.g. for tlbie
    non-optional
  - fix stripping of prelinked binaries and libraries (#133734)
  - allow strings(1) on 32-bit arches to be used again with > 2GB
    files (#133555)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-9
changelog:
  - avoid almost 1MB (sparse) gaps in the middle of -z relro
    libraries on x86-64 (Andreas Schwab)
  - fix -z relro to make sure end of PT_GNU_RELRO segment is always
    COMMONPAGESIZE aligned


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-8
changelog:
  - fix linker segfaults on input objects with SHF_LINK_ORDER with
    incorrect sh_link (H.J.Lu, Nick Clifton, #130198, BZ #290)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-7
changelog:
  - resolve all undefined ppc64 .* syms to the function bodies through
    .opd, not just those used in brach instructions (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-5
changelog:
  - various ppc64 make check fixes when using non-dot-syms gcc (Alan Modra)
  - fix --gc-sections
  - on ia64 create empty .gnu.linkonce.ia64unw*.* sections for
    .gnu.linkonce.t.* function doesn't need unwind info


author: Jakub Jelinek <jakub@redhat.com> 2.15.91.0.2-4
changelog:
  - kill ppc64 dot symbols (Alan Modra)
  - objdump -d support for objects without dot symbols
  - support for overlapping ppc64 .opd entries


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.3-4
changelog:
  - -z relro ppc/ppc64/ia64 fixes
  - change x86-64 .plt symbol st_size handling to match ia32
  - prettify objdump -d output


author: Jakub Jelinek <jakub@redhat.com> 2.15.90.0.1.1-2
changelog:
  - update to 20040326 CVS
    - fix ppc64 weak .opd symbol handling (Alan Modra, #119086)
  - fix .tbss handling bug introduced


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-8
changelog:
  - with -z now without --enable-new-dtags create DT_BIND_NOW
    dynamic entry in addition to DT_FLAGS_1 with DF_1_NOW bit set


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.8-2
changelog:
  - fix testcases on AMD64
  - fix .got's sh_entsize on IA32/AMD64
  - set COMMONPAGESIZE on s390/s390x
  - set COMMONPAGESIZE on ppc32 (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-4
changelog:
  - fix assembly parsing of foo=(.-bar)/4 (Alan Modra)
  - fix IA-64 assembly parsing of (p7) hint @pause


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.6-1
changelog:
  - update to 2.14.90.0.6
  - speed up string merging (Lars Knoll, Michael Matz, Alan Modra)
  - speed up IA-64 local symbol handling during linking


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.5-4
changelog:
  - fix ppc64 elfvsb linker tests
  - some more 64-bit cleanliness fixes, give ppc64 fdesc symbols
    type and size (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-22
changelog:
  - fix elfNN_ia64_dynamic_symbol_p (Richard Henderson, #86661)
  - don't access memory beyond what was allocated in readelf
    (Richard Henderson)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-19
changelog:
  - fix -pie support on amd64, s390, s390x and ppc64
  - issue relocation overflow errors for s390/s390x -fpic code when
    accessing .got slots above 4096 bytes from .got start


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-17
changelog:
  - fix ia64 -pie support
  - require no undefined non-weak symbols in PIEs like required for normal
    binaries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-16
changelog:
  - fix readelf -d on IA-64
  - build libiberty.a with -fPIC, so that it can be lined into shared
    libraries


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-14
changelog:
  - added support for Intel Prescott instructions
  - fix hint@pause for ia64
  - add workaround for LTP sillyness (#97934)


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-13
changelog:
  - update CFI stuff to 2003-06-18
  - make sure .eh_frame is aligned to 8 bytes on 64-bit arches,
    remove padding within one .eh_frame section


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-9
changelog:
  - ensure R_PPC64_{RELATIVE,ADDR64} have *r_offset == r_addend
    and the other relocs have *r_offset == 0


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-8
changelog:
  - remove some unnecessary provides in ppc64 linker script
    which were causing e.g. empty .ctors/.dtors section creation


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-7
changelog:
  - some CFI updates/fixes
  - don't create dynamic relocations against symbols defined in PIE
    exported from its .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-2
changelog:
  - rename ld --dynamic option to --pic-executable or --pie
  - fix ld --help output
  - document --pie/--pic-executable in ld.info and ld.1


author: Jakub Jelinek <jakub@redhat.com> 2.14.90.0.4-1
changelog:
  - update to 2.14.90.0.4-1
  - gas CFI updates (Richard Henderson)
  - dynamic executables (Ulrich Drepper)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.20-4
changelog:
  - fix ppc32 plt reference counting
  - don't include /usr/lib/debug in the non-debuginfo package
    (#87729)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-6
changelog:
  - don't clear elf_link_hash_flags in the .symver patch
  - only use TC_FORCE_RELOCATION in s390's TC_FORCE_RELOCATION_SUB_SAME
    (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-5
changelog:
  - fix the previous .symver change
  - remove libbfd.so and libopcodes.so symlinks, so that other packages
    link statically, not dynamically against libbfd and libopcodes
    whose ABI is everything but stable


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-3
changelog:
  - handle .symver x, x@FOO in ld such that relocs against x become
    dynamic relocations against x@FOO (#83325)
  - two PPC64 TLS patches (Alan Modra)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.18-2
changelog:
  - fix SEARCH_DIR on x86_64/s390x
  - fix Alpha --relax
  - create DT_RELA{,SZ,ENT} on s390 even if there is just .rela.plt
    and no .rela.dyn section
  - support IA-32 on IA-64 (#83752)
  - .eh_frame_hdr fix (Andreas Schwab)


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.16-8
changelog:
  - alpha TLS fixes
  - use .debug_line directory table to make the section tiny bit smaller
  - libtool fix from Jens Petersen


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-4
changelog:
  - pad .rodata.cstNN sections at the end if they aren't sized to multiple
    of sh_entsize
  - temporary patch to make .eh_frame and .gcc_except_table sections
    readonly if possible (should be removed when AUTO_PLACE is implemented)
  - fix .PPC.EMB.apuinfo section flags


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-3
changelog:
  - fix names and content of alpha non-alloced .rela.* sections (#76583)
  - delete unpackaged files from the buildroot


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.10-1
changelog:
  - update to 2.13.90.0.10
  - add a bi-arch patch for sparc/s390/x86_64
  - add --enable-64-bit-bfd on sparc, s390 and ppc


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-2
changelog:
  - fix orphan .rel and .rela section placement with -z combreloc (Alan Modra)
  - skip incompatible linker scripts when searching for libraries


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.4-1
changelog:
  - update to 2.13.90.0.4
  - x86-64 TLS support
  - some IA-32 TLS fixes
  - some backported patches from trunk
  - include opcodes, ld, gas and bfd l10n too


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-3
changelog:
  - allow addends for IA-32 TLS @tpoff, @ntpoff and @dtpoff
  - clear memory at *r_offset of dynamic relocs on PPC
  - avoid ld crash if accessing non-local symbols through LE relocs
  - new IA-32 TLS relocs, bugfixes and testcases
  - use brl insn on IA-64 (Richard Henderson)
  - fix R_IA64_PCREL21{M,F} handling (Richard Henderson)
  - build in separate builddir, so that gasp tests don't fail
  - include localization


author: Jakub Jelinek <jakub@redhat.com> 2.13.90.0.2-1
changelog:
  - update to 2.13.90.0.2
    - fix ld TLS assertion failure (#70084)
    - fix readelf --debug-dump= handling to match man page and --help
      (#68997)
  - fix _GLOBAL_OFFSET_TABLE gas handling (#70241)


author: Jakub Jelinek <jakub@redhat.com> 2.12.90.0.15-1
changelog:
  - update to 2.12.90.0.15
  - TLS .tbss fix
  - don't use rpm %configure macro, it is broken too often (#69366)


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-12
changelog:
  - fix .hidden handling on SPARC (Richard Henderson)
  - don't crash when linking -shared non-pic code with SHF_MERGE
  - fix .eh_frame_hdr for DW_EH_PE_aligned
  - correctly adjust DW_EH_PE_pcrel encoded personalities in CIEs


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-4
changelog:
  - add DW_EH_PE_absptr -> DW_EH_PE_pcrel optimization for shared libs,
    if DW_EH_PE_absptr cannot be converted that way, don't build the
    .eh_frame_hdr search table


author: Jakub Jelinek <jakub@redhat.com> 2.11.93.0.2-2
changelog:
  - trade one saved runtime page for data segment (=almost always not shared)
    for up to one page of disk space where possible


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-7
changelog:
  - as ld is currently not able to shrink input sections to zero size
    during discard_info, build a fake minimal CIE in that case
  - update elf-strtab patch to what was commited


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-3
changelog:
  - H.J.'s patch to avoid crash if input files are not ELF
  - don't crash if a SHF_MERGE for some reason could not be merged
  - fix objcopy/strip to preserve SHF_MERGE sh_entsize
  - optimize .eh_frame sections, add PT_GNU_EH_FRAME support
  - support anonymous version tags in version script


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.12-1
changelog:
  - update to 2.11.92.0.12
    - optimize .dynstr and .shstrtab sections (#55524)
    - fix ld.1 glitch (#55459)
  - turn relocs against SHF_MERGE local symbols with zero addend
    into STT_SECTION + addend
  - remove man pages for programs not included (nlmconv, windres, dlltool;
    - add BuildRequires for texinfo


author: Jakub Jelinek <jakub@redhat.com> 2.11.92.0.5-1
changelog:
  - update to 2.11.92.0.5
    - binutils localization (#45148)
    - fix typo in REPORT_BUGS_TO (#54325)
  - support files bigger than 2GB in strings (#54406)


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-11
changelog:
  - add iplt support for IA-64 (Richard Henderson)
  - switch to new section flags for SHF_MERGE and SHF_STRINGS, put
    in compatibility code
  - "s" section flag for small data sections on IA-64 and Alpha
    (Richard Henderson)
  - fix sparc64 .plt[32768+] handling
  - don't emit .rela.stab on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-8
changelog:
  - on IA-64, put crtend{,S}.o's .IA_64.unwind section last in
    .IA_64.unwind output section (for compatibility with 7.1 eh)


author: Jakub Jelinek <jakub@redhat.com> 2.11.90.0.8-6
changelog:
  - support for -z combreloc
  - remove .dynamic patch, -z combreloc patch does this better
  - set STT_FUNC default symbol sizes in .endp directive on IA-64


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - 2.11.90.0.8
    - some SHF_MERGE suport fixes
  - don't build with tooldir /usrusr instead of /usr (#40937)
  - reserve few .dynamic entries for prelinking


author: Jim Kingdon
changelog:
  - No source/spec changes, just rebuilding with egcs-1.1.2-18 because
    the older egcs was miscompling gprof.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - back out very *stupid* sparc patch done by HJLu. People, keep out of
    things you don't understand.
  - add alpha relax patch from rth


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version  2.9.1.0.23
  - patch to make texinfo documentation compile
  - auto rebuild in the new build environment (release 2)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added ARM patch from philb
  - version 2.9.1.0.19a
  - added a patch to allow arm* arch to be identified as an ARM


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated to 2.8.1.0.29 (HJ warned me that this thing is a moving target...
    :-)
  - "fixed" the damn make install command so that all tools get installed


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded again to 2.8.1.0.28 (at least on alpha now egcs will compile)
  - added info packages handling


author: Jindrich Novy <jnovy@redhat.com> - 4.4.2.3-19
changelog:
  - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade (#626708)
  - fix SELinux memory leak (#566746), patch from Florian Festi


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-12
changelog:
  - fix pgp fingerprint calculation (#493777)
  - performance tweaks (#435475)
    - better hash algorithm to speed up initial install
    - avoid crazy memory fragmentation on file fingerprinting
    - eliminate unnecessary allocations from rpmdsCompare() hotpath


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-10
changelog:
  - Filter out timestamp differences of shared files on verify (#472151)
  - Perform verification in real chroot if --root specified (#434150)
  - Check for arch compatibility on colored transactions too (#472065)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-7
changelog:
  - Fix exit code on file not found errors (#463944, #446202)
  - Always honor epoch (no)promote behavior in dependency sets (#466503)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-5
changelog:
  - Disallow creation of packages larger than we can cleanly handle (#448488)
  - Fix retrieval of multiple packages through proxy (#450205)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-4
changelog:
  - Temporarily permit conflicts in /usr/share/doc/ (#460808)
  - Fix --dump usage description in Japanese manual too (#250207)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-2
changelog:
  - Close all file descriptors before running scriptlets (#453645)
  - Tighten up dependencies between sub-packages


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-1
changelog:
  - Rebase to RPM 4.4.2.3 from F9 (#454887)
  - Much cleaned up spec
  - NSS used instead of beecrypt for lowlevel crypto (#444805)
  - Provides no longer treated as implicit obsoletes (#233713, #348971)
  - Use root:root for file ownerships everywhere (#439417)
  - Improved .rpmsave/.rpmnew behavior (#426258)
  - Exit code corrections (#244236, #440595)
  - Improved multilib build support (#257921)
  - Improved debuginfo extraction (#251333)
  - Dozens of other issues resolved


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-22
changelog:
  - put in simple workaround for per-file deps with autoreq off (#190488) 
    while pnasrat works on a real fix


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-21
changelog:
  - run ldconfig in -libs subpackage %post, not main package
  - add patch to generate shared lib deps by following symlinks so that 
    -devel packages sanely depend on main libs


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-17
changelog:
  - remove redundant elfutils-libelf buildrequires
  - rpm-python doesn't require elfutils (related to #188495)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-16
changelog:
  - Skipdirs on erase again (#187308)
  - Make fcntl lock sensitive to --root (#151255)
  - Fix netshared path comparison (#52725)
  - Fix rpm vercmp (#178798)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-8
changelog:
  - Add elfutils Build Requires to rpmbuild (#155129)
  - Don't do conflicts if both files %ghost(#155256)
  - Fix popt charset for various languages (#172155)
  - Don't include .la file (#174261)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.1-19
changelog:
  - Check for symlinks in check-files (#108778)
  - Move zh_CN (#154623)
  - Test fix for signing old rpms (#127113)


author: Miloslav Trmac <mitr@redhat.com> - 4.4.1-12
changelog:
  - Remove $RPM_BUILD_ROOT and $RPM_BUILD_DIR from distribued .la files (#116891)
  - Don't ship static version of _rpmdb.so
  - BuildRequires: readline-devel


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.24
changelog:
  - zlib: uniqify certain symbols to prevent name space pollution.
  - macosx: include <sys/types.h> so that python sees the u_char typedef.
  - macosx: change to --prefix=/usr rather than /opt/local.
  - use waitpid rather than SIGCHLD reaper.
  - rip out DB_PRIVATE revert if not NPTL, it's not the right thing to do.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.16
changelog:
  - fix: length of gpg V4 hash seed was incorrect (#146896).
  - add support for V4 rfc-2440 signatures.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.14
changelog:
  - add sqlite internal (build still expects external sqlite3-3.0.8).
  - sqlite: revert to original narrow scoping of cOpen/cClose.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.10
changelog:
  - more macosx fiddles.
  - move global /var/lock/rpm/transaction to dbpath.
  - permit fcntl path to be configured through rpmlock_path macro.
  - add missing #if defined(ENABLE_NLS) (#146184).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.8
changelog:
  - changes to build on Mac OS X using darwinports neon/beecrypt.
  - add https://svn.uhulinux.hu/packages/dev/zlib/patches/02-rsync.patch


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.6
changelog:
  - mac os x patches (#131943,#131944,#132924,#132926).
  - mac os x patches (#133611, #133612, #134637).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.5
changelog:
  - upgrade to db-4.3.27.
  - revert MAGIC_COMPRESS, real fix is in libmagic (#143782).
  - upgrade to file-4.12 internal.


author: John (J5) Palmieri <johnp@redhat.com> 2.1.1-1
changelog:
  - Update to upstream version 2.1.1
  - Removed libmusicbrainz-2.0.2-missing-return.patch
  - Removed libmusicbrainz-2.0.2-conf.patch


author: Brent Fox <bfox@redhat.com> 2.0.2-6
changelog:
  - add a BuildPreReq for libstdc++-devel and gcc-c++ (bug #106556)
  - add a Requires for libstdc++-devel for libmusicbrainz-devel


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "BuildRequires: pkgconfig" for (#193421)
  - Replace "makeinstall" with "make install DESTDIR=..."


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Updated libSM to version 0.99.3 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libSM to version 0.99.2 from X11R7 RC2
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove "xorg-x11" from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Miloslav Trmac <mitr@redhat.com> - 0:0.1.18-9
changelog:
  - Update to bogl-0.1.18-1.1
  - Don't ship unused ucs fonts in the SRPM
  - Remove obsolete URL: (#168673)


author: Akira TAGOH <tagoh@redhat.com> 0:0.1.18-1
changelog:
  - New upstream release.
    - bogl-0.1.18-rh.patch: updated to be able to apply it for this release.
  - bogl-0.1.9-vga16-others.patch: removed. no need this patch anymore.


author: Matt Wilson <msw@redhat.com> 0:0.1.9-22
changelog:
  - add a workaround for AMD64 that calls iopl(3) in order to gain io
    port access until ioperm() is fixed (#87835).  Workaround for
    (#86321)
  - gzip font.bgf


author: Matt Wilson <msw@redhat.com> 0:0.1.9-17
changelog:
  - always use wlite for bogl/bterm (for now) (#83980)
    (this makes bterm useless for any non-UTF-8 locale)
  - fixed 'bterm' for the normal usage case


author: Matt Wilson <msw@redhat.com>
changelog:
  - use all fb drivers on non-i386
  - package wlite for use in loader
  - use %{_libdir} to get lib64 right


author: Adrian Havill <havill@redhat.com>
changelog:
  - re-write font loader so it can load uncompressed or gzipped files
  - utf8 lib updated
  - fixed bug in bogl_term_new() so struct is inited (s/malloc/calloc/)
  - added term bell (screen flash)
  - changed background/foreground to pretty pretty blue/white


author: Adrian Havill <havill@redhat.com>
changelog:
  - updated utf8 library
  - made bogl_term_out reset the state at every call so glibc
    and utf8.c behave consistently
  - concatenated two Red Hat diff patches


author: Adrian Havill <havill@redhat.com>
changelog:
  - changed behavior of bogl_term_out to queue and save UTF broken between two
    buffers
  - utf8 lib improvements


author: Mike A. Harris <mharris@redhat.com> 1.2.1-3.fc6
changelog:
  - Added trident-missing-symbols-bug168713.patch to fix bug (#168713)
  - Remove moduledir/driverdir directory ownership (#198294)
  - Added {?dist} tag to Release field.


author: Mike A. Harris <mharris@redhat.com> 1.0.1.1-1
changelog:
  - Updated xorg-x11-drv-trident to version 1.0.1.1 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86, x86_64, ppc


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for trident video driver generated automatically
    by my xorg-driverspecgen script.


author: Ivana Varekova <varekova@redhat.com> 12:0.60.3-1
changelog:
  - update to 0.60.3 - (bug 141968) thanks to Dawid Gajownik 
  - add BuildRequires: ncurses-devel, gettext 
  - add config script patch (thanks tmraz@redhat.com)


author: Adrian Havill <havill@redhat.com> 12:0.50.50.3-18
changelog:
  - make rpm own some unclaimed dirs (#112984, #113778)
  - explicitly claim kbd anbd dat files in /usr/share/aspell
  - a little spec file files cleanup-- macro subs, dir prefix
  - make /usr/lib/aspell; don't make the dictionary packages do it


author: Tim Powers <timp@redhat.com>
changelog:
  - fix broken pspell epoch dep
  - create $RPM_BUILD_ROOT/usr/bin by hand
  - remove /usr/doc
  - fix hardcoding of /usr/lib so that we can build on x86_64


author: Trond Eivind Glomsrød <teg@redhat.com> 0.33.7-1
changelog:
  - 0.33.7 bugfix release. Requested by the author, it fixes
    coredumps in sug-mode and when not using typo-analyses.
    It also contains code cleanups so it compiles with -ansi
  - should fix coredump on IA64 (#49746)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32.5 bugfix release (also contains improved documentation),
    obsolete old patch
  - the compatibility scripts are now part of the package itself
  - clean up build procedure
  - remove manual.aux file from docs (#16424)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32.1 bugfix release, obsolete old patch
  - rename to 0.32.1
  - add patch from author to change his email address
  - add spell and ispell compatibility scripts


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - remember to obsolete ispell
  - build the Canadian and British dictionaries here now,
    as part of the main package. Same package names and 
    descriptions.


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - .32
  - remove old patches, add a patch since namespace isn't 
    polluted as much anymore (as opposed to older toolchain)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - patch to work around compiler bug(?) wrt. inline functions
  - use CFLAGS and CXXFLAGS
  - set them to -O0 to work around YACB
  - copy libtool files for IA64 support


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - update to .31.1. My patch was upstreamed and is no longer needed.
  - new patch added so DESTDIR works properly


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - (this entry includes some old ones...)
  - update to .31
  - added patch to make it compile with a pickier compiler
  - include /usr/share/pspell


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to .30.1
  - used build fixes from Ryan Weaver's 0.30.1-1 package on sourceforge
  - updated URL, download/ftp location
  - removed redundant define's at top of spec file


author: Tim Powers <timp@redhat.com>
changelog:
  - built for Powertools 6.1
  - removed %serial definitions from spec file to make versioning
    consistant with the other packages we ship.
  - changed build root path
  - general spec file cleanups


author: Ryan Weaver <ryanw@infohwy.com>
changelog:
  [aspell-.27.2-2]
  - Changes from .27.1 to .27.2 (Mar 1, 1999)
  - Fixed a major bug that caused aspell to dump core when used
    without any arguments
  - Fixed another major bug that caused aspell to do nothing when used
    in interactive mode.
  - Added an option to exit in Aspell's interactive mode.
  - Removed some old documentation files from the distribution.
  - Minor changes on to the section on using Aspell with egcs.
  - Minor changes to remove -Wall warnings.


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Spec cleanup and macro standardization.
  - Update microcode data file to 20080131 revision.
  - Resolves: #431566.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Update to microcode 1.15 for real this time (now kernel patch is in and we
    - both RH and Intel - think this should be ok to go now).
  - Resolves: #214807, #209455.


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the node creation/deletion change from previous release.
    It'll cause grief with selinux, and was a hack to get around
    a udev shortcoming that should be fixed properly.


author: Dave Jones <davej@redhat.com>
changelog:
  - Create/remove the /dev/cpu/microcode dev node as needed.
  - Use correct path again for the microcode.dat.
  - Remove some no longer needed tests in the init script.


author: Dave Jones <davej@redhat.com>
changelog:
  - Only enable microcode_ctl service if the CPU is capable.
  - Prevent microcode_ctl getting restarted multiple times on initlevel change (#141581)
  - Make restart/reload work properly
  - Do nothing if not started by root.


author: Aaron Bennett <aaron.bennett@olin.edu> 0:0.6-0.fdr.4
changelog:
  - Added post and postun scripts to run ldconfig
  - changed group to standard System/Libraries group
  - removed libtool *.la files


author: - Bastien Nocera <bnocera@redhat.com> - 2.16.7-2
changelog:
  - Don't register handlers for rtsp or pnm by default, as RealPlayer
    is better suited to handle those
  Related: rhbz #318701


author: John (J5) Palmieri <johnp@redhat.com> 1.3.0-2
changelog:
  - GStreamer has been split into gstreamer08 and gstreamer (0.10) packages
    we need gstreamer08 for now


author: John (J5) Palmieri <johnp@redhat.com> - 1.1.4-1
changelog:
  - Update to upstream version 1.1.4 and rebuild
  - Don't build with nautilus-cd-burner on s390 platforms


author: Colin Walters <walters@redhat.com> - 0.100-2
changelog:
  - Grab patch totem-0.100-desktopfile.patch from CVS to fix
    missing menu entry (144088)
  - Remove workaround for desktop file being misinstalled, fixed
    by above patch


author: Tom Lane <tgl@redhat.com> 0.7.2-1
changelog:
  - Import new libdbi version, splitting libdbi-drivers into a separate SRPM
    so we can track new upstream packaging.


author: Steve Grubb <sgrubb@redhat.com> 1.7.18-1
changelog:
  resolves: #554553 filtering a large inode number on i386 doesn't work
  resolves: #568677 aureport help and man page don't show all options
  resolves: #585356 audit updates for virtualization
  resolves: #607823 inodes display incorrectly when listing rules


author: Steve Grubb <sgrubb@redhat.com> 1.7.17-3
changelog:
  resolves: #529851 New upstream version with many updates
  resolves: #519790 Crash interpreting IPC mode fields via libauparse
  resolves: #513974 aureport does not accept dates as given in the man pages


author: Steve Grubb <sgrubb@redhat.com> 1.7.13-2
changelog:
  resolves: #235398 ausearch does not correctly find out of order records
  resolves: #471383 Missing description of '--exact' in ausyscall man page
  resolves: #474466 audispd: plugin /sbin/audisp-remote terminated unexpectedly
  resolves: #476189 audispd activates the same plugin several times
  resolves: #483086 fix tty audit reporting
  resolves: #483608 audit updates for 5.4


author: Steve Grubb <sgrubb@redhat.com> 1.7.7-3
changelog:
  resolves: #467930 AVC denials during upgrade of audit pkgs
  - Disable GSSAPI support until plugin approach is created
  resolves: #446080 Fix a couple problems found in update


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-9
changelog:
  resolves: #442556 audit rules with >= get corrupted
  resolves: #438844 buffer overflow in audit_log_user_command, better fix


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-7
changelog:
  resolves: #438844 buffer overflow in audit_log_user_command
  - Update ausearch with fixes from auparse, 440086


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-6
changelog:
  resolves: #438844 buffer overflow in audit_log_user_command
  - Also removed lsb headers from init script


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-2
changelog:
  resolves: #432866
  - Fix leaked descriptors in audispd
  - aureport does not work when run from a cron job
  - ausearch -m ANOM_PROMISCUOUS did not work because of parse error
  - ausearch recent keyword was searching since midnight instead of last 10 min
  - man page updates


author: Steve Grubb <sgrubb@redhat.com> 1.6.5-1
changelog:
  resolves: #234663, #244349
  - auparse library has been updated
  - system-config-audit has added
  - auditd now supports group permissions on audit logs
  - audit by TTY support added
  - New multi-threaded audit event dispatcher supporting plugins
  - node/machine field can be added to audit events
  - RACF zos remote logging plugin from IBM
  - week-ago keyword added to aureport/ausearch
  - auditctl supports errno abbreviation as syscall exit code (-F exit=-EPERM)
  - audit logging can be resumed with SIGUSR2
  - New aulastlog utility


author: Steve Grubb <sgrubb@redhat.com> - 1.5.5-7
changelog:
  resolves: #251327 swig was incorrectly incoporating a variable in ppc's
  python bindings causing python tracebacks.


author: Miloslav Trmač <mitr@redhat.com> - 1.5.5-4
changelog:
  - Fix a double free when auditd receives SIGHUP
  Related: #235321  audit DAEMON_CONFIG record truncated


author: Miloslav Trmač <mitr@redhat.com> - 1.5.5-1
changelog:
  - Add system-config-audit
  - Fix Python binding compilation on ppc
  - Fix subtree auditing (Patch by Alexander Viro)


author: Steve Grubb <sgrubb@redhat.com> 1.5.4-1
changelog:
  - Update to latest upstream
  Resolves: #200784 Add audit parsing library
  Resolves: #237788 Init script update


author: Steve Grubb <sgrubb@redhat.com> 1.3.1-4
changelog:
  Resolves: #235468  parse DAEMON_END records for subject
  Resolves: #235321  audit DAEMON_CONFIG record truncated
  Resolves: #234548  audit-libs-python does not require kernel-headers
  Resolves: #232166  service auditd returns status 0 when the service is stopped


author: Steve Grubb <sgrubb@redhat.com> 1.3.1-2
changelog:
  - Added NISPOM sample rules
  - Fix ausearch -se option to work for obj labels (#230740)
  - Fix auditd init script for /usr on netdev (#228528)
  - updated audit_rule_fieldpair_data to handle perm correctly (#226780)
  Resolves: #230740 #228528 #226780


author: Steve Grubb <sgrubb@redhat.com> 1.3.1-1
changelog:
  - Fix error messages in ausearch/aureport command options
  - Add tgkill to S390* syscall tables
  Resolves: #218484


author: Steve Grubb <sgrubb@redhat.com> 1.3-1
changelog:
  - Add new msg types
  - ausearch & aureport implement uid/gid caching
  - In ausearch & aureport, extract addr when hostname is unknown
  - In ausearch & aureport, test audit log presence O_RDONLY
  Resolves: #215257
  - New ausearch/aureport time keywords: recent, this-week, this-month, this-year
  - Added --add & --delete option to aureport
  - Update res parsing in config change events
  - Increase the size on audit daemon buffers
  - Parse avc_path records in ausearch/aureport
  - ausearch has new output mode, raw, for extracting events
  - ausearch/aureport can now read stdin
  - Rework AVC processing in ausearch/aureport
  - Added long options to ausearch and aureport
  Resolves: #217870


author: Steve Grubb <sgrubb@redhat.com> 1.2.9-1
changelog:
  - Some auditd config strings were not initialized in aureport (#211443)
  - Updated man pages
  - Add Netlabel event types to libaudit
  - Update aureports to current audit event types
  - Deprecated all the old audit_rule functions from public API
  - Drop auparse library for the moment


author: Steve Grubb <sgrubb@redhat.com> 1.2.8-1
changelog:
  - Add dist tag and bump version (#208532)
  - Make internal auditd buffers bigger for context info
  - Correct address resolving of hostname in logging functions
  - Do not allow multiple msgtypes in same audit rule in auditctl (#207666)
  - Only =, != operators for arch & inode fields in auditctl (#206427)
  - Updated audit message type table
  - Remove watches from aureport since FS_WATCH is deprecated
  - Add audit_log_avc back temporarily (#208152)


author: Steve Grubb <sgrubb@redhat.com> 1.2.7-2
changelog:
  - Fix logging messages to use addr if passed.
  - Apply patches from Tony Jones correcting no kernel support messages
  - Updated syscall tables for 2.6.18 kernel
  - Remove deprecated functions: audit_log, audit_log_avc, audit_log_if_enabled
  - Disallow syscall auditing on exclude list
  - Improve time handling in ausearch and aureport (#191394)
  - Attempt to reconstruct full path from relative for searching


author: Steve Grubb <sgrubb@redhat.com> 1.2.6-1
changelog:
  - Apply updates to dispatcher
  - Fix a couple bugs regarding MLS labels
  - Resurrect -p option
  - Tighten rules with exclude filter
  - Fix parsing issue which lead to segfault in some cases
  - Fix option parsing to ignore malformed lines


author: Steve Grubb <sgrubb@redhat.com> 1.2.4-1
changelog:
  - Add support for the new filter key
  - Update syscall tables for 2.6.17
  - Add audit failure query function
  - Switch out gethostbyname call with getaddrinfo
  - Add audit by obj capability for 2.6.18 kernel
  - Ausearch & aureport now fail if no args to -te
  - New auditd.conf option to choose blocking/non-blocking dispatcher comm
  - Ausearch improved search by label


author: Steve Grubb <sgrubb@redhat.com> 1.2.3-1
changelog:
  - Apply patch to ensure watches only associate with exit filter
  - Apply patch to correctly show new operators when new listing format is used
  - Apply patch to pull kernel's audit.h into python bindings
  - Collect signal sender's context


author: Steve Grubb <sgrubb@redhat.com> 1.2.2-1
changelog:
  - Updates for new glibc-kernheaders
  - Change auditctl to collect list of rules then delete them on -D
  - Update capp.rules and lspp.rules to comment out rules for the possible list
  - Add new message types
  - Support sigusr1 sender identity of newer kernels
  - Add support for ppid in auditctl and ausearch
  - fix auditctl to trim the '/' from watches
  - Move audit daemon config files to /etc/audit for better SE Linux protection


author: David Woodhouse <dwmw2@redhat.com> 1.2.1-2
changelog:
  - Require kernel-headers, not glibc-kernheaders
  - Fix redefinition of audit_rule_data with new kernel headers
  - Remove abuse of __KERNEL__ in lookup_table.c


author: Steve Grubb <sgrubb@redhat.com> 1.2.1-1
changelog:
  - New message type for trusted apps
  - Add new keywords today, yesterday, now for ausearch and aureport
  - Make audit_log_user_avc_message really send to syslog on error
  - Updated syscall tables in auditctl
  - Deprecated the 'possible' action for syscall rules in auditctl
  - Update watch code to use file syscalls instead of 'all' in auditctl


author: Steve Grubb <sgrubb@redhat.com> 1.1.6-1
changelog:
  - New message types
  - Support new rule format found in 2.6.17 and later kernels
  - Add support for audit by role, clearance, type, sensitivity


author: Steve Grubb <sgrubb@redhat.com> 1.1.5-1
changelog:
  - Changed audit_log_semanage_message to take new params
  - In aureport, add class between syscall and permission in avc report
  - Fix bug where fsync is called in debug mode
  - Add optional support for tty in SYSCALL records for ausearch/aureport
  - Reinstate legacy rule operator support
  - Add man pages
  - Auditd ignore most signals


author: Steve Grubb <sgrubb@redhat.com> 1.1.4-1
changelog:
  - Fix bug in autrace where it didn't run on kernels without file watch support
  - Add syslog message to auditd saying what program was started for dispatcher
  - Remove audit_send_user from public api
  - Fix bug in USER_LOGIN messages where ausearch does not translate
    msg='uid=500: into acct name (#178102).
  - Change comm with dispatcher to socketpair from pipe
  - Change auditd to use custom daemonize to avoid race in init scripts
  - Update error message when deleting a rule that doesn't exist (#176239)
  - Call shutdown_dispatcher when auditd stops
  - Add new logging function audit_log_semanage_message


author: Steve Grubb <sgrubb@redhat.com> 1.1.3-1
changelog:
  - Add timestamp to daemon_config messages (#174865)
  - Add error checking of year for aureport & ausearch
  - Treat af_unix sockets as files for searching and reporting
  - Update capp & lspp rules to combine syscalls for higher performance
  - Adjusted the chkconfig line for auditd to start a little earlier
  - Added skeleton program to docs for people to write their own dispatcher with
  - Apply patch from Ulrich Drepper that optimizes resource utilization
  - Change ausearch and aureport to unlocked IO


author: Steve Grubb <sgrubb@redhat.com> 1.1.1-1
changelog:
  - Add support for alpha processors
  - Update the audisp code
  - Add locale code in ausearch and aureport
  - Add new rule operator patch
  - Add exclude filter patch
  - Cleanup make files
  - Add python bindings


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-11
changelog:
  - virt-install: Error if --extra-args specified without --location (bz 593410)
  - Fix QEMU MAC prefix documentation (bz 620838)
  - Prevent unicode patch from altering .orig file (bz 579976)


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-6.el5
changelog:
  - virt-convert: allow converting to qcow2 (bz 506927)
  - Don't fail if a storage volume was manually deleted (bz 511925)
  - virt-install: Fix --prompt and --disk interaction (bz 516129)
  - Fix virt-install --wait <= 0 (bz 512931, bz 517081)
  - Fix badly formatted error message (bz 523767)
  - Better post install error handling and reporting (bz 545837, bz 498237)
  - virt-image: Hide unimplemented --prompt option (bz 503721)
  - Default to cache=none for new qemu guests (bz 512072)


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-5.el5
changelog:
  - Use ac97 as only sound model for qemu driver (bz 508747)
  - Don't throw errors with unicode using locales (bz 508784)


author: Cole Robinson <crobinso@redhat.com> - 0.400.3-2.el5
changelog:
  - Fix virt-install --disk device=floppy (bz 503053)
  - Fix virt-install --disk vol= and pool= (bz 503073)
  - Make sure detected OS is in our dictionary (bz 503092)
  - Fix PCI device assignment detach/reset calls (bz 499576)
  - Restore old --location behavior for xen HVM (bz 503473)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-12.el5
changelog:
  - Don't add spurious forward slashes in urls (bz 470891)
  - Fix FTP treeinfo false positives (bz 470888)
  - Revert fix for bz 446950, push to 5.4 (bz 470176)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-10.el5
changelog:
  - Add --wait option to virt-install (bz 306871)
  - Fix fetching newer suse kernels (bz 449129)
  - Parse treeinfo files for newer fedora trees (bz 460585)
  - Keep windows media inserted for second install stage (bz 447791)
  - Build fix so we don't fail if imports aren't present.


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-9.el5
changelog:
  - Add win2008 and f9 as distro options (rhbz #442702)
  - Exit with proper error code if we receive wrong cli value (rhbz #444986)
  - Remove virt-viewer from Requires, so we don't require X (rhbz #448505)
  - Catch errors during domain lookup (rhbz #288391)
  - Correctly print help messages with unicode characters (rhbz #446950)
  - Allow installing from Scientific Linux trees (rhbz #448634)
  - Add --cpuset=auto command for numa allocation (rhbz #438554)


author: Cole Robinson <crobinso@redhat.com> - 0.300.2-6.el5
changelog:
  - Add --force option to cli utils to not prompt for input.
  - Remove check for file existence in cli utils, breaks scripts.
  - (rhbz #434786)


author: Hugh O. Brock <hbrock@redhat.com> - 0.103.0-3.el5
changelog:
  - Patch to have virtinst set up the guest without auto-reboot. Useful 
  - for testing. Thanks to Jeff Burke (bz #249708)


author: Jeremy Katz <katzj@redhat.com> - 0.99.0-1.el5
changelog:
  - support upstream pvfb config syntax (danpb, #219195)
  - don't traceback on invalid memory param (gcosta, #219270)
  - let the console come back quicker to help with HVM installs (#212024)


author: Jeremy Katz <katzj@redhat.com> - 0.96.0-1
changelog:
  - improve check for if a machine is hvm capable to catch when support isn't
    allowed by the bios (#211276)
  - cleanup after nfs mount failure on pv install (#206196)
  - support for setting vcpus (#210516)


author: Jeremy Katz <katzj@redhat.com> - 0.94.0-1
changelog:
  - Fix using block device as backing (#209138)
  - Fix error handling for invalid install locations (danpb)
  - Write out vcpu config (danpb)


author: Jeremy Katz <katzj@redhat.com> - 0.93.0-1
changelog:
  - Fix hvm network xm config (danpb)
  - Enable PAE with pae hvm hosts (danpb)
  - Fix hvm block backed cds (danpb)
  - Fix handling of block devs backed by vbds (danpb)
  - Ensure we're on a xen kernel (#205889)
  - Default to vncunused


author: Jeremy Katz <katzj@redhat.com> - 0.92.0-1
changelog:
  - Fix silly loop when asking about graphics support (misa)
  - Fix passing macaddr
  - Add support so that we reboot into the guest after installation finishes


author: Abhi Das <adas@redhat.com> 0.1.62-20
changelog:
  - Fix gfs2_quota to initialize fiemap flags
  - Fix gfs2_quota to deal with boundary conditions that cause some
    quotas to not be set/listed correctly.
  - Resolves: rhbz#536902


author: Abhi Das <adas@redhat.com> 0.1.62-14
changelog:
  - Fix gfs2_quota to remove linked list and use fiemap for list operations
  - Fix gfs2_convert conversion of inodes at different metatree heights in gfs1 & gfs2
  - Fix gfs2_convert to allow restart of interrupted converts.
  - Resolves: rhbz#536902 rhbz#548585 rhbz#548588


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-11
changelog:
  - Fix problems where gfs2_edit savemeta wasn't saving extended attribute sub-blocks
  - Resolves: rhbz#527770


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-5
changelog:
  - Fixed a problem whereby the extended attribute count was mis-calculated.
  - Resolves: rhbz#500483 (part2)


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-3
changelog:
  - Allow gfs2_edit printsavedmeta to print destination size and type
  - Make gfs2_edit -p <block> blockalloc work for gfs1 file systems
  - Allow gfs2_edit to display and print gfs1 rgrps
  - gfs2_edit: Indirect pointers missing from list when paging up and down
  - gfs2_edit: Add missing superblock fields for gfs1 file systems
  - gfs2_edit: Fix rindex read function for gfs1 file systems
  - Fixed gfs2_edit printing wrong directory entry type for gfs1
  - Resolves: rhbz#503529


author: Bob Peterson <rpeterso@redhat.com> 0.1.62-2
changelog:
  - gfs2_edit: Fixed indirect block scrolling.
  - fsck.gfs2: Message printed to stderr instead of stdout problem fixed.
  - gfs2_edit unaligned access problems fixed.
  - Fixed "fsck.gfs2: invalid option -- a" on boot when mounting gfs2 root.
  - Fixed gfs2_tool man page incorrect reference to gfs2_mount.
  - Fixed segfault in fsck.gfs2 rindex repair code.
  - Fixed problems where fsck.gfs2 needed to be run twice.
  - Added #ifdefs to allow gfs2-utils to compile on older kernels.
  - Resolves: rhbz#503485 rhbz#506682 rhbz#503530 rhbz#507596 rhbz#514939 rhbz#514018 rhbz#500483 rhbz#515370


author: Chris Feist <cfeist@redhat.com> 0.1.60-1
changelog:
  - When '/' is a gfs2 file system it is now properly mounted without an error.
  - Resolves: rhbz#507893


author: Chris Feist <cfeist@redhat.com> 0.1.58-1
changelog:
  - Fixed an issue with the gfs2_edit savemeta function not saving blocks of type
    2.
  - Resolves: rhbz#502056


author: Chris Feist <cfeist@redhat.com> 0.1.57-1
changelog:
  - A gfs filesystems metadata is now properly copied with 'gfs2_edit savemeta'
  - Resolves: rhbz#501732


author: Chris Feist <cfeist@redhat.com> 0.1.56-1
changelog:
  - gfs2_fsck now properly fixes journal sequence numbers
  - The debugfs mount point has been randomized to prevent symlink attacks
  - Resolves: rhbz#498646 rhbz#498950


author: Chris Feist <cfeist@redhat.com> 0.1.55-1
changelog:
  - gfs2_convert now properly frees blocks when removing a file with a height
    greater than 1
  - Updated man pages
  - Added options to gfs2_tool df to provide more human readable output
  - GFS2 utilities now use and provide filesystem UUID
  - gfs2_fsck now uses the proper return codes
  - gfs2_edit has been updated
  - gfs2_tool df no longer segfaults on a non-4k block size
  - gfs2_grow no longer references the '-r' option
  - gfs2_convert no longer causes filesystem corruption
  - gfs2_edit has been improved to help differentiate between zero-data and
    non-zero data from pointers
  - gfs2_edit now properly saves the per-node quota files
  - A segfault in gfs2_fsck as been fixed
  - Resolves: rhbz#474707 rhbz#477072 rhbz#480833 rhbz#242701 rhbz#474705 rhbz#483799 rhbz#485761 rhbz#486034 rhbz#490136 rhbz#483799 rhbz#496330


author: Chris Feist <cfeist@redhat.com> 0.1.51-1
changelog:
  - Device is now properly checked to verify that the device is not already
    mounted or busy.
  - gfs2_convert now properly converts file systems.
  - Resolves: rhbz#240584 rhbz#471618


author: Chris Feist <cfeist@redhat.com> 0.1.45-1
changelog:
  - Updates to /etc/mtab are skipped when it is a link to /proc/mounts.
  - Various updates to gfs2_edit.
  - mkfs.gfs2 now has an option fs size parameter.
  - gfs2_fsck now accepts UNLINKED metadata blocks.
  - Resolves: rhbz#438759 rhbz#318271 rhbz#450004 rhbz#450764 rhbz#460327


author: Chris Feist <cfeist@redhat.com> 0.1.42-1
changelog:
  - gfs2_fsck now behaves more like other filesystem fsck commands
  - gfs2_edit man page created
  - Fixed build time warnins for gfs2 userland tools
  - lock_dlm is now the default lock protocol in mkfs.gfs and mkfs.gfs2
  - Journals are now not cleared without asking the user first
  - Updates to gfs2_jadd man page
  - Extra slashes on gfs2 mount paths no longer confuse gfs2 tools
  - gfs2_tool lockdump has been implemented
  - gfs2_tool man page has been updated
  - gfs2_quota now works if the lock table is not specified
  - Additional gfs2_tool commands have now been implemented
  - gfs2_edit savemeta now saves the rindex file
  - Resolves: rhbz#240545 rhbz#247318 rhbz#251180 rhbz#311591 rhbz#291551 rhbz#291551 rhbz#334481 rhbz#345501 rhbz#349601 rhbz#354201 rhbz#352581 rhbz#336561 rhbz#364741 rhbz#352841 rhbz#369771 rhbz#382581 rhbz#402971 rhbz#325151 rhbz#426670


author: Chris Feist <cfeist@redhat.com> 0.1.41-1
changelog:
  - gfs2_fsck changes the system inodes properly now.
  - gfs2_edit savemeta now saves the rindex file.
  - Resolves: rhbz#402971 rhbz#325151


author: Chris Feist <cfeist@redhat.com> 0.1.36-1
changelog:
  - fsck now works when processing files larger than 945 MB
  - fsck now properly process the '-n' command line option
  - Resolves: rhbz#291451 rhbz#287901


author: Caolan McNamara <caolanm@redhat.com> - 0.13-5
changelog:
  - courtesy Stuart Clark <sclark@tpg.com.au> bug fix for: 
    Gantt bar height doesn't match treeview row height
    from bugzilla http://bugzilla.gnome.org/show_bug.cgi?id=128983
  - rh#191808# Extra BuildRequires, and fix eds enabling patch


author: Dan Williams <dcbw@redhat.com> 0.12-5
changelog:
  - Add BuildReq scrollkeeper again (#124184, #111145)
  - Add Requires shared-mime-info for update-mime-database
  - Fix up planner's .desktop file (#132566)


author: Dan Williams <dcbw@redhat.com> 0.12-1
changelog:
  - Update to 0.12
  - Sync specfile with Imendio specfile
  - Add BuildRequires: scrollkeeper (RH #124184)
  - Add obsoletes: libmrproject-devel


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Add BuildRequires on autoconf/automake for brew.
  - Use "make install DESTDIR=..." instead of makeinstall macro.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated all tarballs to version 1.0.0 from X11R7 RC4.
  - Changed manpage dir from man1x to man1 to match RC4 default.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Add "Obsoletes: XFree86, xorg-x11", as these utils used to be there in
    in monolithic X packaging.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Initial build of xfwp, proxymngr, xfindproxy from X11R7 RC2.
  - Added "BuildRequires: lbxproxy" for proxymngr.


author: Kristian <krh@redhat.com> - 6.5.1-6.fc6
changelog:
  - Add -fno-strict-aliasing to compiler flags for i965 driver.
  - Add post-6.5.1-i965-fixes.patch backport of i965 fixes from mesa CVS.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-3.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires to 7.1-8 so we pick up the
    latest GLX_EXT_texture_from_pixmap opcodes.


author: Kristian Høgsberg <krh@redhat.com> 6.5.1-1.fc6
changelog:
  - Bump to 6.5.1 final release.
  - Drop libGLw subpackage, it is now in Fedora Extras (#188974) and
    tweak mesa-6.5.1-build-config.patch to not build libGLw.
  - Drop mesa-6.5.1-r300-smooth-line.patch, the smooth line fallback can
    now be prevented by enabling disable_lowimpact_fallback in
    /etc/drirc.
  - Drop mesa-6.4.1-radeon-use-right-texture-format.patch, now upstream.
  - Drop mesa-6.5-drop-static-inline.patch, workaround no longer necessary.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-0.rc2.fc6
changelog:
  - Rebase to 6.5.1 RC2.
  - Get rid of redhat-mesa-driver-install and redhat-mesa-target helper
    scripts and clean up specfile a bit.


author: Kristian Høgsberg <krh@redhat.com> - 6.5.1-0.rc1.2.fc6
changelog:
  - Drop upstreamed patches mesa-6.5-texture-from-pixmap-fixes.patch and
    mesa-6.5-tfp-fbconfig-attribs.patch and fix
    mesa-6.4.1-radeon-use-right-texture-format.patch to not break 16bpp
    transparency.


author: Kristian Høgsberg <krh@redhat.com> 6.5-26.20060818cvs.fc6
changelog:
  - Pull the vtxfmt patch into the selinux-awareness patch, handle exec
    mem heap init failure correctly by releasing mutex.


author: Adam Jackson <ajackson@redhat.com> 6.5-25.20060818cvs.fc6
changelog:
  - mesa-6.5.1-r300-smooth-line.patch: Added, fakes smooth lines with aliased
    lines on R300+ cards, makes Google Earth tolerable.
  - mesa-6.5-force-r300.patch: Resurrect.


author: Adam Jackson <ajackson@redhat.com> 6.5-24.20060818cvs.fc6
changelog:
  - mesa-6.5.1-radeon-vtxfmt-cleanup-properly.patch: Fix a segfault on context
    destruction when selinux is enabled.


author: Adam Jackson <ajackson@redhat.com> 6.5-22.20060818cvs.fc6
changelog:
  - Update to pre-6.5.1 snapshot.
  - Re-add libOSMesa{,16,32}. (#186366)
  - Add BuildReq: on libXp-devel due to openmotif header insanity.


author: Mike A. Harris <mharris@redhat.com> 6.5-20.fc6
changelog:
  - Conditionalized libGLw inclusion with new with_libGLw macro defaulting
    to 1 (enabled) for now, however since nothing in Fedora Core uses libGLw
    anymore, we will be transitioning libGLw to an external package maintained
    in Fedora Extras soon.


author: Adam Jackson <ajackson@redhat.com> 6.5-17.fc6
changelog:
  - mesa-6.5-fix-linux-indirect-build.patch: Added.
  - mesa-6.5-fix-glxinfo-link.patch: Added.
  - Build libOSMesa never instead of inconsistently; to be fixed later.
  - Updates to redhat-mesa-target:
    - Always select linux-indirect when not building for DRI
    - Enable DRI to be built on PPC64 (still disabled in the spec file though)
    - MIT licence boilerplate


author: Mike A. Harris <mharris@redhat.com> 6.5-16.fc6
changelog:
  - Remove glut-devel dependency, as nothing actually uses it that we ship.
  - Added mesa-6.5-dont-libglut-me-harder-ok-thx-bye.patch to prevent libglut
    and other libs from being linked into glxgears/glxinfo even though they
    are not actually used.  This was the final package linking to freeglut in
    Fedora Core, blocking freeglut from being moved to Extras.
  - Commented all of the virtual provides in the spec file to document clearly
    how they should be used by other developers in specifying build and runtime
    dependencies when packaging software which links to libGL, libGLU, and
    libGLw. (#200069)


author: Adam Jackson <ajackson@redhat.com> 6.5-15.fc6
changelog:
  - Attempt to add selinux awareness; check if we can map executable memory
    and fail softly if not.  Removes the need for allow_execmem from huge
    chunks of the desktop.
  - Disable the r300 gart fix for not compiling.


author: Mike A. Harris <mharris@redhat.com> 6.5-13.fc6
changelog:
  - Added mesa-6.5-fix-opt-flags-bug197640.patch as 2nd attempt to fix OPT_FLAGS
    for (#197640).
  - Ensure that redhat-mesa-driver-install creates $DRIMODULE_DESTDIR with
    mode 0755.


author: Mike A. Harris <mharris@redhat.com> 6.5-12.fc6
changelog:
  - Maybe actually, you know, apply the mesa-6.5-glx-use-tls.patch as that might
    help to you know, actually solve the problem.  Duh.
  - Use {dist} tag in Release field now.


author: Mike A. Harris <mharris@redhat.com> 6.5-11
changelog:
  - Added mesa-6.5-glx-use-tls.patch to hopefully get -DGLX_USE_TLS to really
    work this time due to broken upstream linux-dri-* configs. (#193979)
  - Pass RPM_OPT_FLAGS via OPT_FLAGS instead of via CFLAGS also for (#193979)


author: Mike A. Harris <mharris@redhat.com> 6.5-10
changelog:
  - Bump libdrm-devel dep to trigger new ExclusiveArch test with the new package.
  - Use Fedora Extras style BuildRoot tag.
  - Added "Requires(post): /sbin/ldconfig" and postun to all runtime lib packages.


author: Kristian Høgsberg <krh@redhat.com> 6.5-7
changelog:
  - Update mesa-6.5-texture-from-pixmap-fixes.patch to include new
    tokens and change tfp functions to return void.  Yes, a new mesa
    snapshot would be nice.


author: Kristian Høgsberg <krh@redhat.com> 6.5-3
changelog:
  - Add mesa-6.5-noexecstack.patch to prevent assembly files from making
    libGL.so have executable stack.


author: Kristian Høgsberg <krh@redhat.com> 6.5-1
changelog:
  - Update to mesa 6.5 snapshot.
  - Use -MG for generating deps and some files are not yet symlinked at
    make depend time.
  - Drop mesa-6.4.2-dprintf-to-debugprintf-for-bug180122.patch and
    mesa-6.4.2-xorg-server-uses-bad-datatypes-breaking-AMD64-fdo5835.patch
    as these are upstream now.
  - Drop mesa-6.4.1-texture-from-drawable.patch and add
    mesa-6.5-texture-from-pixmap-fixes.patch.
  - Update mesa-modular-dri-dir.patch to apply.
  - Widen libGLU glob.
  - Reenable r300 driver install.
  - Widen libOSMesa glob.
  - Go back to patching config/linux-dri, add mesa-6.5-build-config.patch,
    drop mesa-6.3.2-build-configuration-v4.patch.
  - Disable sis dri driver for now, only builds on x86 and x86-64.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-5
changelog:
  - Disable the expeimental r300 DRI driver, as it has turned out to cause
    instability and system hangs for many users.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-2
changelog:
  - Added new "glx-utils" subpackage with glxgears and glxinfo (#173510)
  - Added mesa-6.4.2-dprintf-to-debugprintf-for-bug180122.patch to workaround
    a Mesa namespace conflict with GNU_SOURCE (#180122)
  - Added mesa-6.4.2-xorg-server-uses-bad-datatypes-breaking-AMD64-fdo5835.patch
    as an attempt to fix bugs (#176976,176414,fdo#5835)
  - Enabled inclusion of the *EXPERIMENTAL UNSUPPORTED* r300 DRI driver on
    x86, x86_64, and ppc architectures, however the 2D Radeon driver will soon
    be modified to require the user to manually turn experimental DRI support
    on with Option "dri" in xorg.conf to test it out and report all X bugs that
    occur while using it directly to X.Org bugzilla.  (#179712)
  - Use "libOSMesa.so.6.4.0604*" glob in file manifest, to avoid having to
    update it each upstream release.


author: Mike A. Harris <mharris@redhat.com> 6.4.2-1
changelog:
  - Updated to Mesa 6.4.2
  - Use "libGLU.so.1.3.0604*" glob in file manifest, to avoid having to update it
    each upstream release.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-5
changelog:
  - Added missing "BuildRequires: expat-devel" for bug (#178525)
  - Temporarily disabled mesa-6.4.1-texture-from-drawable.patch, as it fails
    to compile on at least ia64, and possibly other architectures.


author: Kristian Høgsberg <krh@redhat.com> 6.4.1-4
changelog:
  - Add mesa-6.4.1-texture-from-drawable.patch to implement protocol
    support for GLX_EXT_texture_from_drawable extension.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-3
changelog:
  - Manually copy libGLw headers that Mesa forgets to install, to fix (#173879).
  - Added mesa-6.4.1-libGLw-enable-motif-support.patch to fix (#175251).
  - Removed "Conflicts" lines from libGL package, as they are "Obsoletes" now.
  - Do not rename swrast libGL .so version, as it is the OpenGL version.


author: Mike A. Harris <mharris@redhat.com> 6.4.1-2
changelog:
  - Rebuild to ensure libGLU gets rebuilt with new gcc with C++ compiler fixes.
  - Changed the 3 devel packages to use Obsoletes instead of Conflicts for the
    packages the files used to be present in, as this is more friendy for
    OS upgrades.
  - Added "Requires: libX11-devel" to mesa-libGL-devel package (#173712)
  - Added "Requires: libGL-devel" to mesa-libGLU-devel package (#175253)


author: Mike A. Harris <mharris@redhat.com> 6.4.1-1
changelog:
  - Updated MesaLib tarball to version 6.4.1 from Mesa project for X11R7 RC4.
  - Added pkgconfig dependency.
  - Updated "BuildRequires: libdrm-devel >= 2.0-1"
  - Added Obsoletes lines to all the subpackages to have cleaner upgrades.
  - Added mesa-6.4.1-amd64-assyntax-fix.patch to work around a build problem on
    AMD64, which is fixed in the 6.4 branch of Mesa CVS.
  - Conditionalize libOSMesa inclusion, and default to not including it for now.


author: Jeremy Katz <katzj@redhat.com> 6.4-5
changelog:
  - fix directory used for loading dri modules (#173679)
  - install dri drivers as executable so they get stripped (#173292)


author: Mike A. Harris <mharris@redhat.com> 6.4-4
changelog:
  - Wrote redhat-mesa-source-filelist-generator to dynamically generate the
    files to be included in the mesa-source subpackage, to minimize future
    maintenance.
  - Fixed detection and renaming of software mesa .so version.


author: Mike A. Harris <mharris@redhat.com> 6.4-3
changelog:
  - Hack: autodetect if libGL was given .so.1.5* and rename it to 1.2 for
    consistency on all architectures, and to avoid upgrade problems if we
    ever disable DRI on an arch and then re-enable it later.


author: Mike A. Harris <mharris@redhat.com> 6.4-2
changelog:
  - Added mesa-6.4-multilib-fix.patch to instrument and attempt to fix Mesa
    bin/installmesa script to work properly with multilib lib64 architectures.
  - Set and export LIB_DIR and INCLUDE_DIR in spec file 'install' section,
    and invoke our modified bin/installmesa directly instead of using
    "make install".
  - Remove "include/GL/uglglutshapes.h", as it uses the GLUT license, and seems
    like an extraneous file anyway.
  - Conditionalize the file manifest to include libGL.so.1.2 on DRI enabled
    builds, but use libGL.so.1.5.060400 instead on DRI disabled builds, as
    this is how upstream builds the library, although it is not clear to me
    why this difference exists yet (which was not in Xorg 6.8.2 Mesa).


author: Mike A. Harris <mharris@redhat.com> 6.4-1
changelog:
  - Updated to new upstream MesaLib-6.4
  - Updated libGLU.so.1.3.060400 entry in file manifest
  - Updated "BuildRequires: libdrm-devel >= 1.0.5" to pick up fixes for the
    unichrome driver.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-5
changelog:
  - Fix mesa-libGL-devel to depend on mesa-libGL instead of mesa-libGLU.
  - Added virtual "Provides: libGL..." entries for each subpackage as relevant.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-4
changelog:
  - Added the mesa-source subpackage, which contains part of the Mesa source
    code needed by other packages such as the X server to build stuff.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-3
changelog:
  - Added Conflicts/Obsoletes lines to all of the subpackages to make upgrades
    from previous OS releases, and piecemeal upgrades work as nicely as
    possible.


author: Mike A. Harris <mharris@redhat.com> 6.3.2-2
changelog:
  - Wrote redhat-mesa-target script to simplify mesa build target selection.
  - Wrote redhat-mesa-driver-install to install the DRI drivers and simplify
    per-arch conditionalization, etc.


author: Miroslav Grepl <mgrepl@redhat.com> - 1.33.4-5.6
changelog:
  - Add
    - selinux_virtual_domain_context_path
    - selinux_virtual_image_context_path
  Resolves:#582612


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-5.1
changelog:
  - Break out utilities into separate package so rpm -V libselinux will work
  - Stop writing to stderr when matchpathcon has an error
  Resolves: #190314


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-3
changelog:
  - Fix python selinux module segfault in getfilecon
  - Fix get_default_context_with_level
  Resolves: #224637


author: Dan Walsh <dwalsh@redhat.com> - 1.33.4-1
changelog:
  - Upstream wanted some minor changes, upgrading to keep api the same
  - Upgrade to upstream
  	* Merged selinux_check_securetty_context() and support from Dan Walsh.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> - 1.33.3-1
changelog:
  - Upgrade to upstream
  	* Merged patch for matchpathcon utility to use file mode information
  	  when available from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-2
changelog:
  - Add James Antill patch for login verification of MLS Levels
  -  MLS ragnes need to be checked, Eg. login/cron. This patch adds infrastructure.


author: Dan Walsh <dwalsh@redhat.com> - 1.33.1-1
changelog:
  - Upgrade to latest from NSA
  	* Merged updated flask definitions from Darrel Goeddel.
   	  This adds the context security class, and also adds
  	  the string definitions for setsockcreate and polmatch.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.29-1
changelog:
  - Upgrade to latest from NSA
  	* Merged av_permissions.h update from Steve Grubb,
  	  adding setsockcreate and polmatch definitions.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.27-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch to not log avc stats upon a reset from Steve Grubb.
  	* Applied patch to revert compat_net setting upon policy load.
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.25-1
changelog:
  - Upgrade to latest from NSA
  	* Merged file context homedir and local path functions from
  	  Chris PeBenito.
  	* Rework functions that access /proc/pid/attr to access the
  	  per-thread nodes, and unify the code to simplify maintenance.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.24-1
changelog:
  - Upgrade to latest from NSA
  	* Merged return value fix for *getfilecon() from Dan Walsh.
  	* Merged sockcreate interfaces from Eric Paris.


author: Dan Walsh <dwalsh@redhat.com> - 1.30.22-1
changelog:
  - Upgrade to latest from NSA
  	* Merged no-tls-direct-seg-refs patch from Jeremy Katz.
  	* Merged netfilter_contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.19-1
changelog:
  - Upgrade to latest from NSA
  	* Lindent.
  	* Merged {get,set}procattrcon patch set from Eric Paris.
  	* Merged re-base of keycreate patch originally by Michael LeMay from Eric Paris.
  	* Regenerated Flask headers from refpolicy.
  	* Merged patch from Dan Walsh with:
  	  - Added selinux_file_context_{cmp,verify}.
  	  - Added selinux_lsetfilecon_default.
  	  - Delay translation of contexts in matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.15-1
changelog:
  - Upgrade to latest from NSA
  	* Merged patch from Dan Walsh with:
  	*   Added selinux_getpolicytype() function.
  	*   Modified setrans code to skip processing if !mls_enabled.
  	* Set errno in the !selinux_mnt case.
  	* Allocate large buffers from the heap, not on stack.
  	  Affects is_context_customizable, selinux_init_load_policy,
  	  and selinux_getenforcemode.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Upgrade to latest from NSA
  	* Merged simple setrans client cache from Dan Walsh.
  	  Merged avcstat patch from Russell Coker.
  	* Modified selinux_mkload_policy() to also set /selinux/compat_net
  	  appropriately for the loaded policy.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - More fixes for translation cache
  - Upgrade to latest from NSA
  	* Added matchpathcon_fini() function to free memory allocated by
  	  matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Upgrade to latest from NSA
  	* Merged getfscreatecon man page fix from Dan Walsh.
  	* Updated booleans(8) man page to drop references to the old
  	  booleans file and to note that setsebool can be used to set
  	  the boot-time defaults via -P.


author: Dan Walsh <dwalsh@redhat.com> 1.30.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged fix warnings patch from Karl MacMillan.	
  	* Merged setrans client support from Dan Walsh.
  	  This removes use of libsetrans.
  	* Merged patch to eliminate use of PAGE_SIZE constant from Dan Walsh.
  	* Merged swig typemap fixes from Glauber de Oliveira Costa.


author: Dan Walsh <dwalsh@redhat.com> 1.30.3-1
changelog:
  - Upgrade to latest from NSA
  	* Added distclean target to Makefile.
  	* Regenerated swig files.
  	* Changed matchpathcon_init to verify that the spec file is
  	  a regular file.
  	* Merged python binding t_output_helper removal patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30-1
changelog:
  - Make some fixes so it will build on RHEL4
  - Upgrade to latest from NSA
  	* Updated version for release.
  	* Altered rpm_execcon fallback logic for permissive mode to also
  	  handle case where /selinux/enforce is not available.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Upgrade to latest from NSA
  	* Added format attribute to myprintf in matchpathcon.c and
  	  removed obsoleted rootlen variable in init_selinux_config().


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Upgrade to latest from NSA
  	* Merged several fixes and improvements from Ulrich Drepper
  	  (Red Hat), including:
  	  - corrected use of getline
  	  - further calls to __fsetlocking for local files
  	  - use of strdupa and asprintf
  	  - proper handling of dirent in booleans code
  	  - use of -z relro
  	  - several other optimizations
  	* Merged getpidcon python wrapper from Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Upgrade to latest from NSA
  	* Merged call to finish_context_translations from Dan Walsh.
  	  This eliminates a memory leak from failing to release memory
  	  allocated by libsetrans.


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_VALIDATE flag for set_matchpathcon_flags() and
  	  modified matchpathcon implementation to make context validation/
  	  canonicalization optional at matchpathcon_init time, deferring it
  	  to a successful matchpathcon by default unless the new flag is set
  	  by the caller.
  	* Added matchpathcon_init_prefix() interface, and
  	  reworked matchpathcon implementation to support selective
  	  loading of file contexts entries based on prefix matching
  	  between the pathname regex stems and the specified path
  	  prefix (stem must be a prefix of the specified path prefix).


author: Dan Walsh <dwalsh@redhat.com> 1.27.25-1
changelog:
  - Update to latest from NSA
  	* Added -f file_contexts option to matchpathcon util.
  	  Fixed warning message in matchpathcon_init().
  	* Merged Makefile python definitions patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.22-1
changelog:
  - Update to latest from NSA
  	* Merged make failure in rpm_execcon non-fatal in permissive mode
  	  patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.21-1
changelog:
  - Update to latest from NSA
  	* Added MATCHPATHCON_NOTRANS flag for set_matchpathcon_flags()
  	  and modified matchpathcon_init() to skip context translation
  	  if it is set by the caller.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to latest from NSA
  	* Added security_canonicalize_context() interface and
  	  set_matchpathcon_canoncon() interface for obtaining
  	  canonical contexts.  Changed matchpathcon internals
  	  to obtain canonical contexts by default.  Provided
  	  fallback for kernels that lack extended selinuxfs context
  	  interface.
  - Patch to not translate mls when calling setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to latest from NSA
  	* Merged seusers parser changes from Ivan Gyurdiev.
  	* Merged setsebool to libsemanage patch from Ivan Gyurdiev.
  	* Changed seusers parser to reject empty fields.


author: Dan Walsh <dwalsh@redhat.com> 1.27.14-1
changelog:
  - Update to latest from NSA
  	* Merged selinux_path() and selinux_homedir_context_path()
  	  functions from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to latest from NSA
  	* Merged get_default_context_with_rolelevel and man pages from
  	  Dan Walsh (Red Hat).
  	* Updated call to sepol_policydb_to_image for sepol changes.
  	* Changed getseuserbyname to ignore empty lines and to handle
  	no matching entry in the same manner as no seusers file.


author: Dan Walsh <dwalsh@redhat.com> 1.27.9-1
changelog:
  - Update to latest from NSA
  	* Changed selinux_mkload_policy to try downgrading the
  	latest policy version available to the kernel-supported version.
  	* Changed selinux_mkload_policy to fall back to the maximum
  	policy version supported by libsepol if the kernel policy version
  	falls outside of the supported range.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to fall back to the Linux username and
  	NULL level if seusers config file doesn't exist unless 
  	REQUIRESEUSERS=1 is set in /etc/selinux/config.
  	* Moved seusers.conf under $SELINUXTYPE and renamed to seusers.


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to latest from NSA
  	* Added selinux_init_load_policy() function as an even higher level
  	interface for the initial policy load by /sbin/init.  This obsoletes
  	the load_policy() function in the sysvinit-selinux.patch. 
  	* Added selinux_mkload_policy() function as a higher level interface
  	for loading policy than the security_load_policy() interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.4-1
changelog:
  - Update to latest from NSA
  	* Merged fix for matchpathcon (regcomp error checking) from Johan
  	Fischer.  Also added use of regerror to obtain the error string
  	for inclusion in the error message.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to latest from NSA
  	* Changed getseuserbyname to not require (and ignore if present)
  	the MLS level in seusers.conf if MLS is disabled, setting *level
  	to NULL in this case.


author: Dan Walsh <dwalsh@redhat.com> 1.25.7-1
changelog:
  - Update from NSA
  	* Merged modified form of patch to avoid dlopen/dlclose by
  	the static libselinux from Dan Walsh.  Users of the static libselinux
  	will not have any context translation by default.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update from NSA
  	* Added public functions to export context translation to
  	users of libselinux (selinux_trans_to_raw_context,
  	selinux_raw_to_trans_context).


author: Dan Walsh <dwalsh@redhat.com> 1.25.4-1
changelog:
  - Update from NSA
  	* Hid translation-related symbols entirely and ensured that 
  	raw functions have hidden definitions for internal use.
  	* Allowed setting NULL via context_set* functions.
  	* Allowed whitespace in MLS component of context.
  	* Changed rpm_execcon to use translated functions to workaround
  	lack of MLS level on upgraded systems.


author: Dan Walsh <dwalsh@redhat.com> 1.25.3-1
changelog:
  * Merged context translation patch, originally by TCS,
  	  with modifications by Dan Walsh (Red Hat).


author: Dan Walsh <dwalsh@redhat.com> 1.25.2-1
changelog:
  - Update from NSA
  	* Merged several fixes for error handling paths in the
  	  AVC sidtab, matchpathcon, booleans, context, and get_context_list
  	  code from Serge Hallyn (IBM).   Bugs found by Coverity.
  	* Removed setupns; migrated to pam.
  	* Merged patches to rename checkPasswdAccess() from Joshua Brindle.
  	  Original symbol is temporarily retained for compatibility until 
  	  all callers are updated.


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update from NSA
  	* Merged avcstat and selinux man page from Dan Walsh.
  	* Changed security_load_booleans to process booleans.local 
  	  even if booleans file doesn't exist.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update from NSA
  	* Merged set_selinuxmnt patch from Bill Nottingham (Red Hat).
  	* Rewrote get_ordered_context_list and helpers, including
  	  changing logic to allow variable MLS fields.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update from NSA
  	* Merged fix for set_matchpathcon* functions from Andreas Steinmetz.
  	* Merged fix for getconlist utility from Andreas Steinmetz.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update from NSA
  	* Added set_matchpathcon_flags() function for setting flags
  	  controlling operation of matchpathcon.  MATCHPATHCON_BASEONLY
  	  means only process the base file_contexts file, not 
  	  file_contexts.homedirs or file_contexts.local, and is for use by
  	  setfiles -c.
  	* Updated matchpathcon.3 man page.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - Update from NSA
  	* Merged matchpathcon patch for file_contexts.homedir from Dan Walsh.
  	* Added selinux_users_path() for path to directory containing
  	  system.users and local.users.


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-1
changelog:
  - Update from NSA
  	* Modified avc_dump_av to explicitly check for any permissions that
  	  cannot be mapped to string names and display them as a hex value.
  	* Regenerated av_permissions.h.


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Update from NSA
  	* Generalized matchpathcon internals, exported more interfaces,
  	  and moved additional code from setfiles into libselinux so that
  	  setfiles can directly use matchpathcon.


author: Dan Walsh <dwalsh@redhat.com> 1.21.4-1
changelog:
  - Update from NSA
  	* Prevent overflow of spec array in matchpathcon.
  	* Fixed several uses of internal functions to avoid relocations.
  	* Changed rpm_execcon to check is_selinux_enabled() and fallback to
  	  a regular execve if not enabled (or unable to determine due to a lack
  	  of /proc, e.g. chroot'd environment).


author: Dan Walsh <dwalsh@redhat.com> 1.19.4-1
changelog:
  - Update to latest from upstream
  	* Changed matchpathcon to return -1 with errno ENOENT for 
  	  <<none>> entries, and also for an empty file_contexts configuration.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Upgrade to upstream
  	* Removed some trivial utils that were not useful or redundant.
  	* Changed BINDIR default to /usr/sbin to match change in Fedora.
  	* Added security_compute_member.
  	* Added man page for setcon.


author: Steve Grubb <sgrubb@redhat.com> 1.18.1-2
changelog:
  - Add patch to make setsebool update bool on disk
  - Make togglesebool have a rollback capability in case it blows up inflight


author: Dan Walsh <dwalsh@redhat.com> 1.17.14-1
changelog:
  - Upgrade to latest  from NSA
  	* Merged setenforce and removable context patch from Dan Walsh.
  	* Merged build fix for alpha from Ulrich Drepper.
  	* Removed copyright/license from selinux_netlink.h - definitions only.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Add strcasecmp in selinux_config
  - Update from NSA
  	* Changed avc_has_perm_noaudit to not fail on netlink errors.
  	* Changed avc netlink code to check pid based on patch by Steve Grubb.
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.5-1
changelog:
  - Update from NSA
  	* Merged second optimization patch from Ulrich Drepper.
  	* Changed matchpathcon to skip invalid file_contexts entries.
  	* Made string tables private to libselinux.
  	* Merged strcat->stpcpy patch from Ulrich Drepper.
  	* Merged matchpathcon man page from Dan Walsh.
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.2-1
changelog:
  - Add matchpathcon man page
  - Latest from NSA
  	* Merged patch to eliminate PLTs for local syms from Ulrich Drepper.
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.17.1-1
changelog:
  - Latest from NSA
  	* Autobind netlink socket.
  	* Dropped compatibility code from security_compute_user.
  	* Merged fix for context_range_set from Chad Hanson.
  	* Merged allocation failure checking patch from Chad Hanson.
  	* Merged avc netlink error message patch from Colin Walters.


author: Dan Walsh <dwalsh@redhat.com> 1.15.1-1
changelog:
  - Update to latest from NSA
  - Add fix to only get old path if file_context file exists in old location


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38.3
changelog:
  - Better margin defaults (bug #244348).
  - Ship a defaultspooler file to avoid the need for spooler
    auto-detection (bug #454684).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-38
changelog:
  - Change a2ps requirement to mpage.
  - Make CUPS driver work with drivers containing '-' in their names
    (bug #201398).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-32
changelog:
  - Fix foomatic-cleanupdrivers.
  - Updated db-engine to 3.0-20060117.
  - Handle PPDs with default option values of '0'.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-29
changelog:
  - Updated db-engine to 3.0-20051209.
  - Updated db-hpijs to 1.5-20051209.
  - Updated filters to 3.0-20051209.  No longer need rip-cvs patch.
  - Updated db to 3.0-20051209.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-28
changelog:
  - Remove explicit perl module package dependencies.  These should be
    picked up by the RPM during the build process automatically anyway.
    Fixes bug #167997.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-25
changelog:
  - Add IEEE 1284 ID for HP LaserJet 4200 (bug #166638).
  - Add IEEE 1284 ID for HP LaserJet 5000 (bug #167154).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-24
changelog:
  - Updated db to 3.0-20050804.
  - No longer need hplj5 patch.
  - Conflicts with system-config-printer before the parser bug was fixed.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add IEEE 1284 ID for Epson Stylus Photo 915 (bug #160030).
  - Add IEEE 1284 ID for Ricoh Aficio 2228C PS (bug #160036).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix Postscript driver (bug #151645).
  - Add IEEE 1284 ID for HP DeskJet 5150 (bug #154518).
  - Add IEEE 1284 ID for HP LaserJet 2420 (bug #114191).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Corrected IEEE 1284 information for HP DeskJet 6540 (bug #147288).
  - Added IEEE 1284 information for Epson Stylus C82 (bug #147230).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Added IEEE 1284 information for Okidata Okipage 6ex (bug #143964).
  - Added IEEE 1284 information for Epson Stylus Photo R300 (bug #143939).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-10
changelog:
  - Added IEEE 1284 information for HP-Color_Inkjet_Printer_CP1700 (bug #141594).
  - Added IEEE 1284 information for Samsung-ML-1710 (bug #141163).
  - Added IEEE 1284 information for HP-OfficeJet_G95 (bug #141057).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-9
changelog:
  - Updated db to 20041124.
  - Updated hpijs-db to 1.5-20041124.
  - No longer need HP DJ 6122 patch.
  - No longer need ieee1284 patch.
  - Updated Omni-printers to 0.9.2.


author: Tim Waugh <twaugh@redhat.com> 3.0.2-6
changelog:
  - Add autodetect information for HP LaserJet 8150 (bug #139683).
  - Add autodetect information for Epson Stylus Color 777 (bug #139629).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-5
changelog:
  - Ship data as non-executable (bug #139271).
  - Corrected autodetect information for HP Business InkJet 1100 (bug #139258).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-4
changelog:
  - Add autodetect information for HP Business InkJet 1100 (bug #139258).
  - Add autodetect information for Epson Stylus Photo 790 (bug #139266).
  - Add autodetect information for HP DJ 3820 (bug #139271).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-2
changelog:
  - Use gimp-print driver for HP 2000C (bug #133647).
  - Add autodetect information for Lexmark Z52 (bug #135178).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-1
changelog:
  - Updated filters to 3.0.2.
  - Updated db-engine to 3.0.2.
  - No longer need Omni PageSize patch or lvalue patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.1-1
changelog:
  - Upgrade db to 20040219.
  - Upgrade hpijs to 1.5-20040219.
  - Upgrade engine to 3.0.1.
  - Upgrade filters to 3.0.1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-23
changelog:
  - Fix up HP Color Inkjet CP1700 support.
  - Remove PrintoutMode option from gimp-print driver to avoid breaking it.
  - Update filters to 3.0.1rc3.
  - Update engine to 3.0.1rc2
  - No long need symlink patch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-21
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Revert Omni update temporarily.
  - Downgrade engine to 20031217 to stick to the stable branch.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-19
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - No longer need symlink patch.
  - Updated fontpath patch.
  - Updated engine to 20040112.
  - Updated db to 20040112.
  - Updated gimp-print data to 4.2.6.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-18
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Explicitly state conflict with hpijs < 1.5.
  - Make foomatic-ppdfile accept '-t type' like foomatic-datafile used to.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-14
changelog:
  - Updated db to 20031217.
  - Updated engine to 20031217.
  - Updated hpijs to 1.5-20031217.
  - Use relative symlinks.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-12
changelog:
  - Undo over-zealous percent escaping in PostScript.xml
  - Build requires libxml2-devel (bug #110589).
  - Use relative, not absolute, symlink for CUPS filter.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-10
changelog:
  - Updated db to 20031105.
  - Drop filters path patch.
  - Updated fontpath patch, both libdir patches.
  - Updated engine and filters to 3.0-20031105.
  - Updated hpijs db to 1.4-1.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-5
changelog:
  - Add some Dell printers.
  - Updated foomatic-db to 20030603.
  - Updated missing UPP list for ghostscript 7.07.


author: Tim Waugh <twaugh@redhat.com> 3.0.0-0.beta2.1
changelog:
  - 3.0.0beta2.
  - Updated path patch.
  - No longer need FOOMATIC_LIBDIR, generic PS, ids, postscript-duplex,
    hpijs13, psc2210, duplex184 patches.
  - Add hpijs support back in.
  - Fix up references to old printer IDs.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-11
changelog:
  - Add autodetect info for HP DeskJet 656C.  It doesn't really do
    IEEE 1284 IDs, but since it's a USB device we can figure out its
    manufacturer and model anyway.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need 67973, 970c patches.
  - Remove cups-drivers-* packages (no longer needed).
  - Remove files not shipped.  Ship filter.conf.
  - Conditionally restart cups.
  - Use libdir.
  - Don't put things in site_perl; use vendor_perl instead (bug #73528).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.3
changelog:
  - Remove explicit perl-Storable dependency; it should be perl(Storable),
    and that is picked up automatically.


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.2
changelog:
  - Fix release number.
  - Drop gen-ppds from the file manifest---use foomatic-compiledb instead
    (bug #63622).


author: Tim Waugh <twaugh@redhat.com> 1.9-0.20020517.0.1
changelog:
  - Update to CVS.
  - Updated requirements.
  - Updated path and libdir patches.
  - Drop hpijs 1.0.2 patch.
  - foomatic-datafile has moved to %{_bindir}.
  - Update gimp-print data to 4.2.1.
  - Update Omni printer data to 0.6.1.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020130.1
changelog:
  - Update to CVS.
  - No longer need the cachedir patch.
  - Fix config file path.
  - Look in /usr/local/bin last, not first, in lpdomatic (bug #57915).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020129.1
changelog:
  - Update to CVS.
  - Patches no longer needed: prepend, fd3.
  - Use RPM_OPT_FLAGS.
  - Allow non-root users to use foomatic-datafile (bug #58956).


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20020124.1
changelog:
  - Update to CVS.
  - Updated Omni printers to those in Omni 0.5.1.
  - Updated patches: prepend, fd3.
  - Patches no longer needed: utf8, lpdomatic.
  - Added gimp-print (formerly stp) foomatic db info, and removed the old
    stp.xml file.
  - Conflict with ghostscript if it doesn't have gimp-print-4.2.0 yet.


author: Tim Waugh <twaugh@redhat.com> 1.1-0.20011218.2
changelog:
  - REALLY fix PCL fixup code (bug #55909, others).
  - PreReq fileutils, initscripts (bug #56984).
  - Fix prepends in lpdomatic (bug #57371).
  - Run foomatic-cleanupdrivers during install, to remove driver entries
    with no command line.
  - Put lpdomatic in /usr/sbin again.
  - Fix foomatic-gswrapper's file descriptor manipulations (bug #56871).


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.2
changelog:
  - fix the rest of the quoting issues with foomatic-combo-xml with the patch
  - foomatic-1.1-20011217-quotes.patch. This has been sent upstream.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011217.1
changelog:
  - respin to pull in latest foomatic database, fixes:
  -	properly use the cache in relation to foomatic-combo-xml's output
  -	fix _some_ of the quoting issues with calling foomatic-combo-xml


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011205.1
changelog:
  - respin to pull in latest foomatic database, fixes:
  -	droping half of a large job
  -	-Mutf8 added to the upstream filters
  -	miscelaneous printer db updates


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.5
changelog:
  - changed the patch to use the -Mutf8 command line option,
  - and to restart the printserver, after rebuilding the settings.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20011018.4
changelog:
  - grumble. Some drivers use inline perl scripts, and need the 'use utf8;'
  - pragma. Without it, they break on _some_ of their options.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010905.1
changelog:
  - upgraded to latest foomatic, we now have fast overview generation!
  - this means that there is no prebuilt overview file.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010828.1
changelog:
  - WOW! The latest foomatic uses Till Kamppeter's C based combo compiler.
  - It is now fast enough that there is no real benifit to precompiling.
  - NOTE: this forces the package to stop being noarched.


author: Crutcher Dunnavant <crutcher@redhat.com> 1.1-0.20010825.1
changelog:
  - did a fresh database pull, which contains the old japanese printers as well.
  - removed japanese hack.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010717mdk
changelog:
  - Added job listing/removal/manipulation and queue control to
    foomatic-printjob
  - Support for printing multiple copies with PDQ


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010714mdk
changelog:
  - Included the cupsomatic filter script
  - When a queue is set up, default options can be set now
  - Help messages of foomatic-configure and foomatic-printjob cleaned up.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010713mdk
changelog:
  - Many bugfixes in "foomatic-printjob".
  - "foomatic-configure" adds the Foomatic config file directory automatically
    to the search paths of PDQ.
  - Printing a help page under PDQ was broken.


author: Till Kamppeter <till@mandrakesoft.com> 1.1-0.20010711mdk
changelog:
  - initial release.
  - Deleted the obsolete drivers "stp", "cZ11", and "hpdj".
  - Patch applied which flushes the memory cache regularly, otherwise
    foomatic-configure would hang when the Foomatic data of GIMP-Print is
    installed.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-1jpp
changelog:
  - Update to 2.0.
  - Add non-versioned javadocs dir symlink.
  - Crosslink with local J2SE javadocs.
  - Convert specfile to UTF-8.


author: Ville Skyttä <ville.skytta at iki.fi> - 1.0.1-2jpp
changelog:
  - Repackage to recover from earlier accidental overwrite with older version.
  - No macros in URL and SourceX tags.
  - Remove spurious api/ from installed javadoc path.
  - Spec file cleanups.
  - (from 1.0.1-1jpp) Update to 1.0.1.
  - (from 1.0.1-1jpp) Run JUnit tests when building.


author: Mike A. Harris <mharris@redhat.com> 7.1-2.fc6
changelog:
  - Remove app-defaults dir from file manifest, as it is owned by libXt (#174021)
  - Add 'dist' tag to package release string.


author: Mike A. Harris <mharris@redhat.com> 7.1-1
changelog:
  - Added xload-1.0.1-setuid.diff to fix potential security issue (#196094)
  - Artificially inflate package version-release to 7.1 to match the X11R7.1
    release that all of the tarballs are taken from.
  - Update to xconsole-1.0.2, xcursorgen-1.0.1 from X11R7.1
  - Add temporary dependency on autoconf, automake for brew builds.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Upgraded all apps to version 1.0.0 from X11R7 RC4.
  - Changed manpage dir from man1x to man1 to match upstream default now.
  - Dropped all of the datadir-cleanups patches added in the previous build.
  - Added x11perf-1.0.0-x11perf-datadir-cleanups.patch as it is still needed
    to put the helper scripts in datadir.
  - Added --disable-xprint to configure, as a great symbolic jesture.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3" to workaround
    (#173384)
  - Added the following patches, and invoke aclocal/automake/autoconf on them
    to force app-defaults and other datafiles into _datadir instead of _libdir:
    - oclock-0.99.1-oclock-datadir-cleanups.patch
    - x11perf-0.99.1-x11perf-datadir-cleanups.patch
    - xclipboard-0.99.1-xclipboard-datadir-cleanups.patch
    - xclock-0.99.1-xclock-datadir-cleanups.patch
    - xconsole-0.99.2-xconsole-datadir-cleanups.patch
    - xload-0.99.1-xload-datadir-cleanups.patch
    - xlogo-0.99.1-xlogo-datadir-cleanups.patch
    - xmag-0.99.1-xmag-datadir-cleanups.patch
    - xmessage-0.99.1-xmessage-datadir-cleanups.patch
  - Added luit-0.99.1-luit-locale-dir-fix.patch to fix bug (#173702)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Add "Obsoletes: XFree86, XFree86-tools, xorg-x11, xorg-x11-tools", as 
    various utils have moved here from there in monolithic X packaging.
  - Add "BuildRequires: xbitmaps-devel" for xbiff.
  - Rebuild against new libXaw 0.99.2-2, which has fixed DT_SONAME. (#173027)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Initial build, with all apps taken from X11R7 RC2.
  - Use "make install DESTDIR=$RPM_BUILD_ROOT" as the makeinstall macro fails on
    some packages.
  - Temporary hack to move xcursorgen manpage to 'man1' dir.


author: Kristian Høgsberg <krh@redhat.com> - 2.14.1-10
changelog:
  - Fix selection atom name intialization (patch from Kjartan Maaras).
  - Lower vte requirement to 0.12.0-2 which is what fc5-bling has.


author: Kristian Høgsberg <krh@redhat.com> 2.14.1-7
changelog:
  - Only use ARGB visual if a compositing manager is running to avoid
    slow-down caused by automatic compositor.


author: Kristian Høgsberg <krh@redhat.com> 2.14.1-5
changelog:
  - Fix gnome-terminal-2.14.1-real-transparency.patch to check for
    window->priv != NULL before dereferencing.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - 2.0.0
  - use desktop-file-install
  - put bonobo server file in file list
  - put help files in file list
  - apply some fixes from CVS (or rather, that I'm going to 
    check in to CVS soon)


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-magictouch to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for magictouch input driver generated automatically
    by my xorg-driverspecgen script.


author: Mike A. Harris <mharris@redhat.com> 1.10.1-1
changelog:
  - Implemented new --listfp option for bug (#153324).
  - Fix stderr output redirection bug in kill invocation (#176444).
  - Check return code from realloc() and exit on failure.


author: Mike A. Harris <mharris@redhat.com> 1.10.0-1
changelog:
  - Change PreReq: XFree86-xfs to Requires: xfs, which is a virtual Provide
    that is present in the xorg-x11 packaging, and in XFree86-4.3.0-64 and
    later builds.  This is necessary in order to make packages not require a
    specific X11 implementation unnecessarily.  (#118469)


author: Mike A. Harris <mharris@redhat.com> 1.9.8-1
changelog:
  - Fix serious problem where chkfontpath sends SIGUSR1 to PID 2 bug (#90999)
  - Replace hard coded xfs config file paths with constants
  - Implemented fatalerror() for displaying variadic error messages and bailing
    with EXIT_FAILURE when "quiet" mode is not enabled, or silencing error
    output and exiting with EXIT_SUCCESS when "quiet" mode is enabled.  Replaced
    all conditionalized tests for quiet mode throughout the code, and changed
    all critical error messages with calls to fatalerror()
  - Make restartXfs() more robust, with a fallback for if /proc isn't available.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed up handling of catalogue line in situations where there is no
    path listed on the first line (#10128)
  - fixed up handling when adding a directory to empty font path (#11108)
  - use fputs where more correct (#14286)


author: Matt Wilson <msw@redhat.com>
changelog:
  - Prereq: XFree86-xfs to insure that it gets installed before
    chkfontpath is.  This should promote XFree86-xfs to be installed
    before any package that has a Prereq: on chkfontpath
  - Prereq: /sbin/pidof (even though a Requires: should be sufficient)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - patches from JJ understand :unscaled automatically, no longer necessary
    to specify manually on the cmd line
  - tries to keep specific font groups together much harder.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - incorporated patches to deal with :unscaled font dir entries, and
    add a --first flag to add the path at the beginning instead of the end.
  - minor cleanups


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed up basename
  - default to list, not help
  - if trailing slash '/' is appended to paths given, strip it off


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-3jpp.1
changelog:
  - Re-sync with latest from JPP.
  - Update patch for BZ #157585 to apply cleanly.
  - Partially adopt new naming convention.


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.2.13-2jpp_1fc
changelog:
  - Merge spec and patches with latest from JPP.
  - Clean source tar ball off prebuilt jars and classes.
  - Use classpathx-jaf and jms for buildrequires for the time being.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.2.8-7jpp
changelog:
  - Add scripts and freedesktop.org menu entries for LogFactor5 and Chainsaw.
  - Include log4j.dtd and install SGML/XML catalogs.
  - Require jpackage-utils, jaxp_parser_impl.
  - Crosslink with local xml-commons-apis javadocs.
  - Don't BuildRequire JUnit, the test suite is not included :(
  - Fix Group.


author: David Walluck <david@anti-microsoft.org> 0:1.2.8-6jpp
changelog:
  - add jpackage-utils requirement
  - add epochs to all versioned requirements
  - use jmx explicitly for now until mx4j works


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.1.3-8jpp
changelog:
  - versioned dir for javadoc
  - drop j2ee package
  - no dependencies for manual and javadoc packages
  - adaptation for new jaf and javamail packages


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.1.3-1mdk
changelog:
  - 1.1.3
  - used new source packaging policy
  - vendor tag
  - packager tag
  - s/Copyright/License/
  - truncated description to 72 columns in spec
  - spec cleanup
  - used versioned jar


author: Guillaume Rousse <g.rousse@linux-mandrake.com> 1.0.4-2mdk
changelog:
  - merged with Henri Gomez <hgomez@users.sourceforge.net> specs:
  -  changed name to log4j
  -  changed javadir to /usr/share/java
  -  dropped jdk & jre requirement
  -  added jikes support
  -  changed description
  - added xerces requirement
  - more macros


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4.1
changelog:
  - don't create DT_TEXTREL binaries on ia64 (#462581, PR target/26090)
  - ignore install-info failures in scriptlets (#223680)
  - don't include cpp.debug in compat-gcc-34-debuginfo (#227021)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4
changelog:
  - buildrequire elfutils-devel, so that libgcc_s is properly built
    on ia64
  - on ppc*/s390* make sure all needed math *l stubs are included
  - add -lnldbl_nonshared to ppc*/s390* specs


author: Stepan Kasal <skasal@redhat.com> - 0.2.6-1
changelog:
  - New upstream version.
  - Do use %{?dist} after all.
  - Use `make %{?_smp_mflags}'.
  - Move pkgconfig description to -devel package.
  - The -devel package now requires glib2-devel.


author: Rob Crittenden <rcritten@redhat.com> - 2.0-10
changelog:
  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-4
changelog:
  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package


author: Rob Crittenden <rcritten@redhat.com> - 2.0-2
changelog:
  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-1
changelog:
  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_5.6
changelog:
  - Bug 648411 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
  - Resolves: rhbz#648411


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_5.4
changelog:
  - fix changelog entries for bz615258 and bz615259 referring to incorrect release.
  - Related: rhbz#615258 rhbz#615259


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_4.3
changelog:
  - bz615258 - [RFE] include autofs support for SASL External authentication using
               certificates
    - fix check ctxt->sasl_mech is non-null before comparison.
  - Related: rhbz#615258


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_4.2
changelog:
  - bz615258 - [RFE] include autofs support for SASL External authentication using
               certificates
    - fix check authtype is non-null before comparison.
  - Related: rhbz#615258


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.143.el5_4.1
changelog:
  - bz615259 - Race condition or other deadlocking issue on expire code path
    - fix incorrect pthreads condition handling for expire requests.
    - expire thread use pending mutex.
  - bz615258 - [RFE] include autofs support for SASL External authentication using
               certificates
    - add external bind method.
  - Resolves: rhbz#615259 rhbz#615258


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.136.el5
changelog:
  - fix error in patch causing segv at start (bz543554).
  - fix random selection option (bz548746).
  - Related: rhbz#543554
  - Resolves: rhbz#548746


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.133.el5
changelog:
  - fix included map read fail handling (bz506034).
  - add mount wait parameter (bz517349).
  - allow for "#" and "@" in hostname validation for sshfs mounts (bz520745).
  - fix incorrect host name lookup error message (bz533323).
  - fix typo in init script (bz534012).
  - fix timeout in connect_nb() (bz539747).
  - check for path mount location in generic module (bz537403).
  - dont fail mount on access fail (bz537403).
  - refactor ldap sasl bind (bz537793).
  - fix pidof init script usage (bz541144).
  - Resolves: rhbz#506034 rhbz#517349 rhbz#520745 rhbz#533323 rhbz#534012
  - Resolves: rhbz#539747 rhbz#537403 rhbz#537793 rhbz#541144


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.132.el5
changelog:
  - fix libxml2 non-thread-safe calls (bz513289).
  - fix direct map cache locking (bz514412).
  - fix dont umount existing direct mount on reread (bz514412).
  - Resolves: rhbz#513289 rhbz#514412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.131.el5
changelog:
  - also use actual package version instead of macro for Version tag.
  - add dist tag to revision.
  - Related: rhbz#471385


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.129
changelog:
  - Bug 452122 - lazy umount causes pwd to fal silently
    - fix error in remount check to set mount point removal flag at umount.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.128
changelog:
  - Bug 501612 - [5.3]automount aborts when automount accesses to ldap server.
    - add provided patch to resolve double free issue.
  - Resolves: rhbz#501612


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.127
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix not releasing mount resources at submount mount thread termination.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - drop manual umount improvement patch as it causes submount breakage.
    - this patch deosn't affect the fix for the root cause of this issue.
  - Related: rhbz#493223 rhnz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.126
changelog:
  - Bug 452122 - lazy umount causes pwd to fal silently
    - fix inconsistent notify mount message path.
    - fix remount check to set mount point removal flag at umount, as best we can.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - check for the absence of a mount before doing the manual umount checks.
    - take map entry write lock before check so any mount requests are complete.
  - Related: rhbz#452122 rhbz#493223


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.125
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix endianness.
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.124
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - fix device node ioctl parameter passing type mismatch (evident on ppc).
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.123
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix incorrect free of dclist in find_server().
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.122
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - fix get dns name when needed for domain dn.
  - Related: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.121
changelog:
  - Bug 490476 - RFE: autofs should DNS for SRV records in order to locate LDAP server
    - add RFE patch.
  - Resolves: rhbz#490476


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.120
changelog:
  - Bug 487986 - autofs should always read file maps.
    - correction to always read file maps nonexistent key lookup fix.
    - always read file maps key lookup fix.
    - always read file maps key non existent key logging fix.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.119
changelog:
  - Bug 487986 - autofs should always read file maps.
    - always read file maps multi map fix.
    - always read file maps nonexistent key lookup fix.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.118
changelog:
  - Bug 493223 - Mounts aren't being auto expired correctly
    - fix incorrect cache unlock in manual umount improvement patch.
  - Related: rhbz#493223


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.117
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix shutdown signal processing regression introduced by this bug fix.
  - Related: rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.116
changelog:
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - fix reload signal processing regression introduced by this bug fix.
  - Bug 493223 - Mounts aren't being auto expired correctly
    - fix initialization of fd on rpc create.
    - improve manual umount recovery
  - Bug 495895 - autofs5: large number of DNS lookups for hostnames associated
    with multiple ip addresses
    - eliminate redundant DNS name lookups.
  - Resolves: rhbz#493223 rhbz#495895
  - Related: rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.115
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - fix parse bug discovered while testing active re-start.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.114
changelog:
  - Bug 452122 - lazy umount causes pwd to fail silently
    - use misc device as default.
    - add restorecon for autofs misc device.
  - Bug 466673 - RFE: Make "intr" default option for /net -hosts mounts
    - use "intr" as default option for hosts map unless overridden.
  - Bug 487151 - Aufofs indirect mount timeout disabled on s390x
    - fix bad token declaration.
  - Bug 491351 - automount segfault after lookup failure
    - clear rpc client on host name lookup fail.
  - Bug 493074 - autofs5 duplicate entries (ldap percent hack)
    - use percent hack for master map keys.
  - Bug 493791 - RHEL5.1 and erroneous autofs after reload
    - dont umount existing direct mount on master re-read.
  - Bug 494319 - segfault in st_remove_tasks()
    - fix st_remove_tasks() locking.
  - Resolves: rhbz#466673 rhbz#487151 rhbz#491351 rhbz#493074 rhbz#493791
  - Resolves: rhbz#494319
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.113
changelog:
  - Bug 452122 -  lazy umount causes pwd to fail silently
    - add active restart patches.
  - Related: rhbz#452122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.112
changelog:
  - Bug 487986 - autofs should always read file maps.
    - fix file map lookup when reading included or nsswitch sources.
  - Related: rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.111
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - fix clear the quoted flag after each character.
  - Related: rhbz#469387


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.110
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - remove redundant debug log call.
  - Related: rhbz#469387


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.108
changelog:
  - Bug 487656 - Read and write size of startup status report buffer is incorrect
  - Bug 244117 - service autofs start when the service is running does not return success
  - Bug 487653 - Using a large number of direct mounts causes autofs to hang
    - convert select(2) to poll(2) to avoid 1024 file descriptor limit.
  - Bug 487985 - The autofs cache lookup performs poorly for large maps.
  - Bug 487986 - autofs should always read file maps.
  - Resolves: rhbz#487656 rhbz#244117 rhbz#487653 rhbz#487985 rhbz#487986


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.106
changelog:
  - Bug 469387 - DOS via autofs/yp - autofs consumes all ports < 1024
    - fix negative cache non-existent keys.
  - Bug 482988 - CRM #1863906 automount segfaults at shutdown and reboot
    - prevent shared libraries from being unloaded at map re-read.
    - make sure main thread cannot exit until mount handling threads have completed.
    - add check for alternate libxml2 library name.
  - Resolves: rhbz#469387 rhbz#482988


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.105
changelog:
  - Bug 481139 - [RHEL 4] autofs5 SASL badness
    - LDAP uris list locking fix.
    - attempt to refresh Kerberos creds upon connect fail.
  - initial commit to sync autofs (RHEL-5) with autofs5 (RHEL-4).
  - Resolves: rhbz#481139


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.102
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix nested submount expire deadlock.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.101
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix rootless direct multi-mount expire.
    - wait for submount shutdown completion.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.100
changelog:
  - Bug 465809: automount issues with RHEL5 and NIS+ auto_home map containing wildcard
    - add patch to handle NIS_PARTIAL return when key not found.
  - Resolves: rhbz#465809


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.99
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - replace state check patch with patch to not issue readmap on new mount
      during HUP signal processing.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.98
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - Fix state checks now incorrect due to optimnizations in task queueing.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.97
changelog:
  - Bug 435960: autofs with map file auto.nis not working.
    - Fix incorrect match of map type as a host name.
  - Related: rhbz#435960


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.96
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix fd leak at multi-mount non-fatal mount fail.
    - fix incorrect multi-mount mountpoint calcualtion.
  - Related: rhbz#439580


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.95
changelog:
  - Bug 448038: expire_indirect: fstat failed: Bad file descriptor
    - Look in the correct mount table for kernel automounted "nohide" mounts.
  - Related: rhbz#448038


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.94
changelog:
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
    - remember the maximum allocation size and use it in subsequent ifc buf allocations.
  - Related: rhbz#458252


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.93
changelog:
  - Bug 448667: [RHEL4] autofs4 multi-map doesn't pickup NIS updates automatically
    - add patch to fix this issue in RHEL-5.
  - Resolves: rhbz#448667


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.92
changelog:
  - Bug 443933: automount segfaults upon start
    - update patch to also check for single character non-printable map key.
  - Related: rhbz#443933


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.91
changelog:
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
    - add correction patch for setting of buffer length.
  - Bug 457524: Automounter does not work in the diskless environment
    - update patch for this bug.
  - Related: rhbz#458252 rhbz#457524


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.90
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - update fix submount shutdown recovery handling patch.
  - Bug 435960: autofs with map file auto.nis not working,
    error: automount master_error: syntax error while parsing map
  - Bug 252032: autofs does not log enough data to troubleshoot replicated server selection
  - Bug 436017: RHEL5 autofs doesn't handle replicated server entries like Solaris
  - Bug 439497: autofs hang on startup
  - Bug 443933: automount segfaults upon start
  - Bug 448036: autofs parses /etc/nsswitch.conf incorrectly
  - Bug 448468: Program maps do not set pwd  
  - Bug 448674: X/Open Federated Naming service master map entry should be handled by autofs
  - Bug 457524: Automounter does not work in the diskless environment
  - Bug 458252: Autofs doesn't recognize the local host as local when using many interfaces
  - Bug 458464: AutoFS Crashes if non-alpha numerics are tried as map names (LDAP maps)
  - Related: rhbz#439580
  - Resolves: rhbz#435960 rhbz#252032 rhbz#436017 rhbz#439497 rhbz#443933
  - Resolves: rhbz#448036 rhbz#448468 rhbz#448674 rhbz#457524 rhbz#458252
  - Resolves: rhbz#458464


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.89
changelog:
  - Bug 439580: AutoFS still having issues with expiration of submount maps
    - fix incorrect pthreads condition handling for mount requests.
    - don't abuse the ap->ghost field on NFS mount.
    - fix fail on included browse map not found.
    - clear stale flag on map read.
    - refactor mount request variable setting code.
    - make handle_mounts startup condition distinct
    - fix submount shutdown recovery handling.
    - don't call blocking functions during expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - note that this change depends on the kernel changes in bug 452139.
  - Bug 448038: expire_indirect: fstat failed: Bad file descriptor
    - check for exported mounts automatically mounted by kernel.
  - Bug 455550: [CRM#1837798] automount NULL pointer dereference segmentation fault
    - check replicated list after probe.
  Resolves: rhbz#439580 rhbz#448038 rhbz#455550


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - init SASL callbacks on every ldap lookup library load.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.87
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - fix incorrect initialization which causes unpredictable behavior.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.86
changelog:
  - 254226: autofs reload and condrestart fail if map is originally empty
    - another fix for don't fail on empty master map.
  - Related: rhbz#254226


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.85
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - yet another correction to the patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.84
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - add error message to notify when no valid URIs found in configured list.
    - fix base dn search not trying all configured search bases.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.83
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - correction for "fix race during sub-mount shutdown" patch.
  - Related: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.82
changelog:
  - Bug 426412 Processed: autofs segfaults (possibly from autofs_sasl_unbind)
    - fix race during sub-mount shutdown.
  - Resolves: rhbz#426412


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.81
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - correct patch for the missed case.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.80
changelog:
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
    - add missed case for this correction.
  - Related: rhbz#336961


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.79
changelog:
  - Bug 426220: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-5.2]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426220


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.78
changelog:
  - Bug 404231: CRM #1598404 Automount process shuts down unexpectedly
    - fix for improve server down handling patch.
  - Related: rhbz#404231


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.77
changelog:
  - Bug 250922: automount[2281]: open_mount: (mount):cannot open mount module iso9660 
       (/usr/lib/autofs/mount_iso9660.so: cannot open shared object file: No such file or directory)
    - quell annoying "cannot open mount module" message
  - Resolves: rhbz#250922


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.76
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - second attempt fixing quoting for exports gathered by hosts map.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.75
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - fix transcription error in exports quoting fix patch.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.74
changelog:
  - Bug 333821: Export directory with spaces in the name causes problems
    - fix to quoting for exports gathered by hosts map.
  - Related: rhbz#333821


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.73
changelog:
  - Bug 336971: Add support for the "%" hack for case insensitive attribute schemas
    - expand cases covering "%" hack handling.
  - Related: rhbz#336971


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.72
changelog:
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
    - fix LDAP_URI server selection.
    - add authentication option for using an external credential cache.
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.71
changelog:
  - Bug 410051: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - missed changing the revision number
  - Related: rhbz#410051


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.71
changelog:
  - Bug 410051: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - Resolves: rhbz#410051


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.70
changelog:
  - Bug 404231: CRM #1598404 Automount process shuts down unexpectedly
    - update improve server down handling patch.
  - Related: rhbz#404231


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.68
changelog:
  - Bug 399041: If a map entry is > 255 chars, automounter fails
    - fix off-by-one error on key lookup.
  - Resolves: rhbz#399041


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.67
changelog:
  - Bug 357551: [RFE] Autofs [4 & 5]: Remove replicated host testing from default single host mount case
    - merge corresponding autofs 4 patch.
  - Resolves: rhbz#357551


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.66
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - fix for dynamic logging breaking non-sasl build.
  - Bug 238529: autofs can return incorrect status from mount under heavy load
    - add wait between retries.
    - force umount and return fail if mtab not updated after retries.
  Related: rhbz#251993 rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.65
changelog:
  - Bug 228144: NFS/AutoFS fails to accurately report non-existent mount points
    - Logging warnings on failed lookups means we actually have to use the
      error() macro, since we only log warn and below when debugging is
      enabled.
  - Resolves: rhbz#228144


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.64
changelog:
  - Bug 263081: autofs 5 and large groups
  - Bug 256781: Program maps never see changes
    - update the daemon negative mount timeout implementation
  - Bug 359661: RHEL3 U5: [autofs4] automounter won't use auto_master in LDAP
  - Bug 306681: autofs version 5 should not require common schema to be pre-configured
    - correction to schema discovery patch.
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - another correction to the patch.
  - Related: rhbz#350171 rhbz#306681
  - Resolves: rhbz#359661 rhbz#256781 rhbz#263081


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.63
changelog:
  - Bug 238529: autofs can return incorrect status from mount under heavy load
    - reviewed previously reverted patch and updated it in line with v4.
  - Resolves: rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.62
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correct transcription error with patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.61
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correction two to patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.60
changelog:
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
    - correction to patch.
  - Related: rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.59
changelog:
  - 254227: log "/etc/init.d/autofs reload" invocations to the system log
  - 350171: /etc/init.d/autofs does not handle basedns with spaces
  - Resolves: rhbz#254227 rhbz#350171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.58
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - fix fifo create location.
    - patch cleanups.
  - Related: rhbz#251993


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.57
changelog:
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
    - add set close on exec flag for fifos.
    - make fifo setup failure non-fatal.
    - add configure option to enable fifo dir specification.
    - set default fifo dir to /var/run as first preference.
  - Related: rhbz#251993


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.56
changelog:
  - Bug 253870: RHEL5 automounter and undefined variables.
  - Bug 322741: minor typo in autofs(5) manpage page in "wildcard" section
  - Bug 332291: autofs fails if nsswitch.conf doesn't have automount entry
  - Bug 246111: multi-mount maps fail, can not map a hierarchy
  - Bug 333771: autofs fails if LDAP attribute value is the same as a standard autofs attribute name
  - Bug 249738: Autofs5 failed unmounting Solaris NFS server share
  - Bug 333701: auto.master(5) needs to document the mount options append entry
  - Bug 253625: autofs fails to mount nfs4 when client and server are same machine
  - Bug 249574: autofs passes a wrong program version to the nfs NULL proc
  - Bug 333691: autofs should use acturate time when using pthread_cond_timedwait
  - Bug 336961: Reloading autofs map incorrectly removes all map entries
  - Bug 333821: Export directory with spaces in the name causes problems
  - Bug 333831: /net does not seem to work with 5.0.1-19 or 5.0.2-6
  - Bug 306681: autofs version 5 should not require common schema to be pre-configured
  - Bug 337431: automounter load balancing with replicated servers
  - Bug 332181: [RHEL4] autofs initscript doesn't support '--timeout' with whitespace
  - Bug 336971: Add support for the "%" hack for case insensitive attribute schemas
  - Bug 336991: autofs should match LDAP wildcard entries with "*" as the key as well as "/"
  - Bug 298171: Allows autofs to do automount lookups via nscd through LDAP
  - Bug 286541: autofs-5.0.1-0.rc2.43.0.2.x86_64 segfaults when '/etc/init.d/autofs stop' is run
  - Bug 333781: autofs can deadlock with multiple simulaneous access to a program map
  - Bug 251993: RFE: Allow debugging to be enabled on the fly
  - Resolves: rhbz#253870 rhbz#322741 rhbz#332291 rhbz#246111 rhbz#333771 rhbz#249738
  - Resolves: rhbz#333701 rhbz#253625 rhbz#249574 rhbz#333691 rhbz#336961 rhbz#333821
  - Resolves: rhbz#333831 rhbz#306681 rhbz#337431 rhbz#332181 rhbz#336971 rhbz#336991
  - Resolves: rhbz#286541 rhbz#333781 rhbz#251993
  - Related: rhbz#298171


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.53
changelog:
  - change random selection option name to be consistent with autofs v4 (bz 227604).
  - Related: rhbz#227604


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.50
changelog:
  - update master map lexer to also allow "." in macro name (bz 243645).
  - add missing "multi" map support (bz 241717).
  - Resolves: rhbz#243645 rhbz#241717


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.49
changelog:
  - update ldaps protocol support patch (bz 185443).
  - local variable initialization error.
  - Related: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.48
changelog:
  - allow for older schemas that allow "*" as a key value (bz 241291).
  - fix deadlock in alarm manager module (bz 243717).
  - Resolves: rhbz#241291 rhbz#243717


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.47
changelog:
  - update ldaps protocol support patch (bz 185443).
  - missed change of ldap_init to ldap_initialize.
  - Related: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.46
changelog:
  - add ldaps protocol support (bz 185443).
    - note: it's no longer possible to use multiple hosts in an ldap map spec.
    - note: multiple hosts must now be configured using the URI entry in LDAP config.
  - Resolves: rhbz#185443


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.44
changelog:
  - ignore "winbind" if it appears in "automount" nsswitch.conf (bz 231953).
  - fix handling of trailing white space in wildcard lookup (bz 241094).
  - check fqdn of each interface when matching export access list (bz 231950).
  - fix race when setting task done (bz 231951).
  - correct return status from do_mkdir (bz 223480).
  - fix localhost replicated mounts not working (bzs 233149, 231954).
  - fix display map name in mount entry for "-hosts" map (bz 238531).
  - add "condrestart" to init script (bz 231956).
  - fix return check for getpwuid_r and getgrgid_r (bz 231949).
  - change file map lexer to allow white-space only blank lines (bz 237066).
  - add option to select replicated server at random (instead of ping response time) (bz 227604).
  - fix directory creation for browse mounts (bz 238532).
  - fix wildcard map handling and improve nsswitch source map update (bz 238533).
  - add configuration variable to control appending of global options (bz 238652).
  - add command option to set a global mount options string (bz 238652).
  - disable exports access control check (bz 238534).
  - fix incorect cast causing directory cleanup after expire to fail on PPC (bz 231948).
  - check for fstab update and retry if not updated (bz 238529).
  - Resolves: rhbz#231953 rhbz#241094 rhbz#231950 rhbz#231951 rhbz#238534
  - Resolves: rhbz#223480 rhbz#233149 rhbz#238531 rhbz#231956 rhnz#231949
  - Resolves: rhbz#237066 rhbz#227604 rhbz#238532 rhbz#238533 rhbz#238652
  - Resolves: rhbz#231948 rhbz#231954 rhbz#238529


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.43
changelog:
  - fix another expire regression introduced in the "mitigate manual umount"
    patch (bz 225124).
  - correct check for busy offset mounts before offset umount (bz 225122).
  - Resolves: rhbz#225124 rhbz#225122


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.39
changelog:
  - fix nonstrict multi-mount handling (bz 219383).
  - correct detection of duplicate indirect mount entries (bz 220799).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.37
changelog:
  - expand export access checks to include missing syntax options.
  - make "-hosts" module try to be sensitive to exports list changes.
  - change mount "device" from "automount" to the map name.
  - check for buffer overflow in mount_afs.c.
  - replace tempnam with mkdtemp. 
  - update master map tokenizer to admit "slasify-colons" option.
  - update location validation to accept "_" (bz 219445).
  - set close-on-exec flag on open sockets (bz 215757).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.27
changelog:
  - alter nfs4 host probing to not use portmap lookup and add options
    check for "port=" parameter (bz 208757.
  - correct semantics of "-null" map handling (bzs 214800, 208091).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.24
changelog:
  - fix parsing of bad mount mount point in master map (bz 215620).
  - fix use after free memory access in cache.c and lookup_yp.c (bz 208091).
  - eliminate use of pthread_kill to detect task completion (bz 208091).
  - fix tokenizer to distinguish between global option and dn string (bz 214684).
  - fix incorrect return from spawn.
  - mitigate manual umount of automounts where possible.
  - fix multiply recursive bind mounts.
  - check kernel module version and require 5.00 or above.
  - fix expire regression introduced in the "mitigate manual umount" patch.
  - still more on multiply recursive bind mounts.
  - Update patch for changed semantics of mkdir in recent kernels.
  - fix macro table locking (bz 208091).
  - fix nsswitch parser locking (bz 208091).
  - allow only one master map read task at a time.
  - fix misc memory leaks.
  - deal with changed semantics of mkdir in recent kernels.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.18
changelog:
  - fix get_query_dn not looking in subtree for LDAP search (missed
    econd occurance).
  - allow additional common LDAP attributes in map dn.
  - Resolves: rhbz#205997


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.15
changelog:
  - fix parsing of numeric host names in LDAP map specs (bz 205997).
  - fix "-fstype=nfs4" server probing (part 2 of bz 208757).
  - set close-on-exec flag on open files where possible (bz 207678).
  - fix file handle leak in nsswitch parser (bz 207678).
  - fix memory leak in mount and expire request processing (bz 207678).
  - add additional check to prevent running of cancelled tasks.
  - fix potential file handle leakage in rpc_subs.c for some failure
    cases (bz 207678).
  - fix file handle leak in included map lookup (bz 207678).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.10
changelog:
  - fix get_query_dn not looking in subtree for LDAP search.
  - allow syntax "--timeout <secs>" for backward compatibility
    (bz 193948).
  - make masked_match independent of hostname for exports comparison
    (bz 209638).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.7
changelog:
  - make default installed master map for /net use "-hosts" instead
    of auto.net.
  - fix included map recursive map key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.5
changelog:
  - fix LDAP lookup delete cache entry only if entry doesn't exist.
  - add missing socket close in replicated host check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.1
changelog:
  - consolidate to rc2.
  - fix colon escape handling.
  - fix recusively referenced bind automounts.
  - update kernel patches.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.17
changelog:
  - fix task cancelation at shutdown (more)
  - fix concurrent mount and expire race with nested submounts.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.16
changelog:
  - fix included map lookup.
  - fix directory cleanup on expire.
  - fix task cancelation at shutdown.
  - fix included map wild card key lookup.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.15
changelog:
  - expire individual submounts.
  - add ino_index locking.
  - fix nested submount expiring away when pwd is base of submount.
  - more expire re-work to cope better with shutdown following cthon tests.
  - allow hostname to start with numeric when validating.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.14
changelog:
  - remove SIGCHLD handler because it is no longer needed and was
    causing expire problems.
  - alter expire locking of multi-mounts to lock sub-tree instead of
    entire tree.
  - review verbose message feedback and update.
  - correction for expire of multi-mounts.
  - spelling corrections to release notes (Jeff Moyer).
  - add back sloppy mount option, removed for Connectathon testing.
  - disable mtab locking again.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc1.6
changelog:
  - cthon more parser corrections and attempt to fix multi-mounts
    with various combinations of submounts (still not right).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-7
changelog:
  - correct directory cleanup in mount modules.
  - merge key and wildcard LDAP query for lookups (bz 197746).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-2
changelog:
  - merge LDAP authentication update for GSSAPI (Jeff Moyer).
  - update default auth config to add options documenetation (Jeff Moyer).
  - workaround segfaults at exit after using GSSAPI library.
  - fix not checking return in init_ldap_connection (jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta6-1
changelog:
  - consolidate to beta6, including:
    - mode change update for config file.
    - correction to get_query_dn fix from beta5-4.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-5
changelog:
  - allow global macro defines to override system macros.
  - correct spelling error in default config files missed by
    previous update.
  - misc correctness and a memory leak fix.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-4
changelog:
  - correct spelling error in default config.
  - fix default auth config not being installed.
  - change LDAP query method as my test db was incorrect.
  - change ldap defaults code to handle missing auth config.
  - fix mistake in parsing old style LDAP specs.
  - update LDAP so that new query method also works for old syntax.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta5-3
changelog:
  - lookup_init cleanup and fix missed memory leak.
  - use nis map order to check if update is needed.
  - fix couple of memory leaks in lookup_yp.c.
  - fix pasre error in replicated server module.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-13
changelog:
  - Change LDAP message severity from crit to degug (bz# 183893).
  - Corrections to INSTALL and README.v5.release.
  - Add patch to fix segv on overlength map keys in file maps (Jeff Moter).
  - Add patch to restrict scanning of /proc to pid directories only (Jeff Moyer).


author: Jeff Moyer <jmoyer@redhat.com> - 5.0.0_beta4-12
changelog:
  - Change BuildPrereq to BuildRequires as per the package guidelines.
  - Add libxml2-devel to the BuildRequires, as it is needed for the LDAP
    authentication bits.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-8
changelog:
  - fix handling of master map entry update (bz # 193718).
  - fix program map handling of invalid multi-mount offsets.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-6
changelog:
  - add free for working var in get_default_logging.
  - add inialisation for kver in autofs_point struct.
  - fix sources list corruption in check_update_map_sources.
  - fix memory leak in walk_tree.
  - fix memory leak in rpc_portmap_getport and rpc_ping_proto.
  - fix memory leak in initialisation of lookup modules.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-4
changelog:
  - check base of offset mount tree is not a mount before umounting
    its offsets.
  - fix replicated mount parse for case where last name in list
    fails lookup.
  - correct indirect mount expire broken by the wildcard lookup fix.
  - fix up multi-mount handling when wildcard map entry present.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta4-2
changelog:
  - re-instate v4 directory cleanup (bz# 193832 again).
  - backout master map lookup changes made to beta3.
  - change default master map from /etc/auto.master to auto.master
    so that we always use nsswitch to locate master map.
  - change default installed master map to include "+auto.master"
    to pickup NIS master map (all bz# 193831 again).


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-6
changelog:
  - add back test for nested mount in program map lookup.
    - I must have commented this out for a reason. I guess we'll
      find out soon enough.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-3
changelog:
  - update hesiod module (Jeff Moyer).
    - add mutex to protect against overlapping mount requests.
    - update return from mount request to give more sensible NSS_*
      values.


author: Ian Kent <ikent@redhat.com> - 5.0.0_beta3-1
changelog:
  - update source to version 5.0.0_beta3.
  - add patch to remove extra debug print.
  - add patch to
    - fix memory alloc error in nis lookup module.
    - add "_" to "." mapname translation to nis lookup module.
  - add patch to add owner pid to mount list struct.
  - add patch to disable NFSv4 when probing hosts (at least foe now).
  - add patch to fix white space handling in replicated server selection code.
  - add patch to prevent striping of debug info macro patch (Jeff Moyer).
  - add patch to add sanity checks on rmdir_path and unlink (Jeff Moyer).
  - add patch to fix e2fsck error code check (Jeff Moyer).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-23
changelog:
  - add patch to ignore the "bg" and "fg" mount options as they
    aren't relevant for autofs mounts (bz #184386).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-20
changelog:
  - add patch to use "cifs" instead of smbfs and escape speces
    in share names (bz #163999, #187732).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-18
changelog:
  - Add patch to allow customization of arguments to the
    autofs-ldap-auto-master program (bz #187525).
  - Add patch to escap "#" characters in exports from auto.net
    program mount (bz#178304).


author: Ian Kent <ikent@redhat.com> - 1:4.1.4-16
changelog:
  - Replace check-is-multi with more general multi-parse-fix.
  - Add fix for premature return when waiting for lock file.
  - Update copyright declaration for reentrant-syslog source.
  - Add patch for configure option to disable locking during mount.
    But don't disable locking by default.
  - Add ability to handle automount schema used in Sun directory server.
  - Quell compiler warning about getsockopt parameter.
  - Quell compiler warning about yp_order parameter.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-14
changelog:
  - Removed the /misc entry from the default auto.master.  auto.misc has
    an entry for the cdrom device, and the preferred method of mounting the
    cd is via udev/hal.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-12
changelog:
  - The sort command no longer accepts options of the form "+0".  This broke
    auto.net, so the option was removed.  Fixes bz #172111.


author: <jmoyer@redhat.com> - 1:4.1.4-10
changelog:
  - Fix some bugs in the parser
  - allow -net instead of /etc/auto.net
  - Fix a buffer overflow with large key lengths
  - Don't allow autofs to unlink files, only to remove directories
  - change to the upstream reentrant syslog patch from the band-aid deferred
    syslog patch.
  - Get rid of the init script patch that hard-coded the release to redhat.
    This should be handled properly by all red hat distros.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-8
changelog:
  - Add in the deferred syslog patch.  This fixes a hung automounter issue
    related to unsafe calls to syslog in signal handler context.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-7
changelog:
  - I reversed the checking for multimount entries, breaking those configs!
    This update puts the code back the way it was before I broke it.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-6
changelog:
  - Fix a race between mounting a share and updating the cache in the parent
    process.  If the mount completed first, the parent would not expire the
    stale entry, leaving it first on the list.  This causes map updates to not
    be recognized (well, worse, they are recognized after the first expire, but
    not subsequent ones).  Fixes a regression, bug #137026 (rhel3 bug).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.4-4
changelog:
  - Finish up with the merge breakage.
  - Temporary fix for the multimount detection code.  It seems half-baked.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-123
changelog:
  - Add in an error case that was omitted in the multi-over patch.
  - Update our auto.net to reflect the changes that went into 4.1.4_beta2.
    This fixes a problem seen by at least one customer where a malformed entry
    appeared first in the multimount list, thus causing the entire multimount
    to be ignored.  This new auto.net places that entry at the end, purely by
    luck, but it fixes the problem in this one case.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-119
changelog:
  - Merge in the multi-over patch.  This resolves an issue whereby multimounts
    (such as those used for /net) could be processed in the wrong order,
    resulting in directories not showing up in a multimount tree.  The fix
    is to process these directories in order, shortest to longer path.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-115
changelog:
  - Fixed regression causing any entries after a wildcard in an
    indirect map to be ignored. (bz #151668).
  - Fixed regression which caused local hosts to be mount instead
    of --bind local directories. (bz #146887)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-111
changelog:
  - Fixed one off bug in the submount-variable-propagation patch.
    (bz #143074)
  - Fixed a bug in the init script which wouldn't find the -browse
    option if it was preceded by another option. (fz #113494)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-100
changelog:
  - When using ldap if auto.master doesn't exist we now check for auto_master.
    Addresses bz #130079
  - When using an auto.smb map we now remove the leading ':' from the path which
    caused mount to fail in the past.  Addresses bz #147492
  - Autofs now checks /etc/nsswitch.conf to determine in what order files & nis
    are checked when looking up autofs submount maps which don't specify a
    maptype.  Addresses IT #57612.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-98
changelog:
  - Program maps can repeat the last character of output.  Fix this.  
    Addresses bz #138606
  - Return first entry when there are duplicate keys in a map.  Addresses
    bz #140108.
  - Propagate custom map variables to submounts.  Fixes bz #143074.
  - Create a sysconfig variable to control whether we source only one master
    map (the way sun does), or source all maps found (which is the default for
    backwards compatibility).  Addresses bz #143126.
  - Revised version of the get_best_mount patch. (#146887) cfeist@redhat.com
    The previous patch introduced a regression.  Non-replicated mounts would
    not have the white space stripped from the entry and the mount would fail.
  - Handle comment characters in the middle of the automount line in
    /etc/nsswitch.conf.  Addresses bz #127457.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-90
changelog:
  - Fix potential double free in cache_release.  This bug showed up in a
    multi-map setup.  Two calls to cache_release would result in a SIGSEGV,
    and the automount process would never exit.


author: Chris Feist <cfeist@redhat.com> - 1:4.3-80
changelog:
  - Added a variable to determine if we created the directory or not
    so we don't accidently remove a directory that we didn't create when
    we stop autofs.  (bz #134399)


author: <jmoyer@redhat.com> - 1:4.1.3-74
changelog:
  - Add in the map expiry patch
  - Bring in other patches that have been committed to other branches. This 
    version should now contain all fixes we have to date
  - Merge conflicts due to map expiry changes


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-57
changelog:
  - Pass a socket into clntudp_bufcreate so that we don't use up additional 
    reserved ports.  This patch, along with the socket leak fix, addresses
    bz #128966.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-55
changelog:
  - Fix program maps so that they can have gt 4k characters. (Neil Horman)
    Addresses bz #138994.
  - Add a space after the colon here "Starting automounter:" in init script.
    Fixes bz #138513.


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-34
changelog:
  - Added a patch to fix the automounter failing on ldap maps
    when it couldn't get the whole map.  (ie. when the search
    limit was lower than the number of results)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-32
changelog:
  - Fixed the use of +ypmapname so the maps included with +ypmapname
    are used in the correct order.  (In the past the '+' entries
    were always processed after local entries.)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-29
changelog:
  - Fixed a problem with backwards compatability. Specifying local
    maps without '/etc/' prepended to them now works. (bz #136038)


author: Chris Feist <cfeist@redhat.com> - 1:4.1.3-27
changelog:
  - Fixed an error in the init script which caused duplicate entries to be
    displayed when asking for autofs status.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-20
changelog:
  - Merged my and Ian's socket leak fixes into one, smaller patch. Only
    partially addresses bz #128966.
  - Fix some more echo lines for internationalization. bz #77820
  - Revert the only one auto.master patch until we implement the +auto_master
    syntax.  Temporarily addresses bz #133055.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-18
changelog:
  - Umount loopback filesystems under automount points when stopping the 
    automounter.
  - Uncomment the map expiry patch.
  - change a close to an fclose in lookup_file.c


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-17
changelog:
  - Add patch to support parsing nsswitch.conf to determine map sources.
  - Disable this patch, and Ian's map expiry patch for a FC build.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-15
changelog:
  - Fix a socket leak in the rpc_subs, causing mounts to fail since we are 
    running out of port space fairly quickly.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-14
changelog:
  - New map expiry patch from Ian.
  - Fix a couple signal races.  No known problem reports of these, but they
    are holes, none-the-less.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-13
changelog:
  - Only read one auto.master map (instead of concatenating all found sources).
  - Uncomment Ian's experimental mount expiry patch.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-12
changelog:
  - Add a sysconfig entry to disable direct map support, and set this to 
    1 by default.
  - Disable the beta map expiry logic so I can build into a stable distro.
  - Add defaults for all of the sysconfig variables to the init script so 
    we don't trip over user errors (i.e. deleting /etc/sysconfig/autofs).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-11
changelog:
  - Add beta map expiry code for wider testing. (Ian Kent)
  - Fix check for ghosting option.  I forgot to check for it in DAEMONOPTIONS.
  - Remove STRIPDASH from /etc/sysconfig/autofs


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-10
changelog:
  - Add bad chdir patch from Ian Kent.
  - Add a typo fix for the mtab lock file.
  - Nuke the stripdash patch.  It didn't solve a problem.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-8
changelog:
  - Change icmp ping to an rpc ping.  (Ian Kent)
  - Fix i18n patch
    o Remove the extra \" from one echo line.
    o Use echo -e if we are going to do a \n in the echo string.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-4
changelog:
  - Perform an icmp ping request before rpc_pings, since the rpc clnt_create
    function has a builtin default timeout of 60 seconds.  This could result
    in a long delay when a server in a replicated mount setup is down.
  - For non-replicated server entries, ping a host before attempting to mount.
    (Ian Kent)
  - Change to %configure.
  - Put version-release into .version to allow for automount --version to
    print exact info.
  - Nuke my get-best-mount patch which always uses the long timeout.  This
    should no longer be needed.
  - Put name into changelog entries to make them consistent.  Add e:n-v-r
    into Florian's entry.
  - Stop autofs before uninstalling


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-2
changelog:
  - Incorporate patch from Ian which fixes an infinite loop seen by those
    running older versions of the kernel patches (triggered by non-strict mounts
    being the default).


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-6
changelog:
  - The lookup_yp module only dealt with YPERR_KEY, all other errors were 
    treated as success.  As a result, if the ypdomain was not bound, the 
    subprocess that starts mounts would SIGSEGV.  This is now fixed.
  - Option parsing in the init script was not precise enough, sometimes matching
    filesystem options to one of --ghost, --timeout, --verbose, or --debug.  
    The option-parsing patch addresses this issue by making the regexp's much
    more precise.
  - Ian has rolled a third version of the replicated mount fixes.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-5
changelog:
  - Ian has a new fix for replicated server and multi-mounts.  Updated the 
    patch for testing.  Still beta.  (Ian Kent)


author: <jmoyer@redhat.com> - 1:4.1.2-2
changelog:
  - Pass --libdir= to ./configure so we get this right on 64 bit platforms that 
    support backwards compat.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.2-1
changelog:
  - Change hard-coded paths in the spec file to the %{_xxx} variety.
  - Update to upstream 4.1.2.
  - Add a STRIPDASH option to /etc/sysconfig/autofs which allows for
    compatibility with the Sun automounter options specification syntax in
    auto.master.  See /etc/sysconfig/autofs for more information.  Addresses
    bug 113950.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-6
changelog:
  - Add the /etc/sysconfig/autofs file, and supporting infrastructure in 
    the init script.
  - Add support for UNDERSCORE_TO_DOT for those who want it.
  - We no longer own /net.  Move it to the filesystem package.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-5
changelog:
  - Clarify documentation on direct maps.
  - Send automount daemons a HUP signal during reload.  This tells them to 
    re-read maps (otherwise they use a cached version.  Patch from the autofs
    maintainer.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.1-3
changelog:
  - Fix bug in get_best_mount, whereby if there is only one option, we 
    choose nothing.  This is primarily due to the fact that we pass 0 in to
    the get_best_mount function for the long timeout parameter.  So, we
    timeout trying to contact our first and only server, and never retry.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.0-7
changelog:
  - Moved the freeing of ap.path to cleanup_exit, as we would otherwise 
    reference an already-freed variable.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-5
changelog:
  - make the init script only recognize redhat systems.  Nalin seems to remember
    some arcane build system error that can be caused if we don't do this.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-4
changelog:
  - comment out /net and /misc from the default auto.master.  /net is important
    since in a default shipping install, we can neatly co-exist with amd.


author: Jeff Moyer <jmoyer@redhat.com> 1:4.1.0-3
changelog:
  - Ported forward Red Hat's patches from 3.1.7 that were not already present
    in 4.1.0.
  - Moving autofs from version 3.1.7 to 4.1.0


author: Ian Kent <raven@themaw.net>
changelog:
  - Checked and merged most of the RedHat v3 patches
  - Fixed kernel module handling wu-ftpd login problem (again)


author: Ian Kent <raven@themaw.net>
changelog:
  - Removed ineffective lock stuff
  - Added -n to bind mount to prevent mtab update error
  - Added retry to autofs umount to clean matb after fail
  - Redirected messages from above to debug log and added info message
  - Fixed autofs4 module reentrancy, pwd and chroot handling


author: Ian Kent <raven@themaw.net>
changelog:
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Fixed autofs directory removal on failure of autofs mount
  - Fixed lock file wait function overlapping calls to (u)mount


author: Ian Kent <raven@themaw.net>
changelog:
  - Implemented LDAP direct map handling for nisMap and automountMap schema
  - Fixed autofs4 ghosting patch for 2.4.19 and above (again)
  - Added locking to fix overlapping internal calls to (u)mount 
  - Added wait for mtab~ to improve tolerance of overlapping external calls to (u)mount
  - Fixed ghosted directory removal after failed mount attempt


author: Ian Kent <raven@themaw.net>
changelog:
  - Cleaned up an restructured my added code
  - Corrected ghosting problem with 2.4.19 and above
  - Added autofs4 ghosting patch for 2.4.19 and above
  - Implemented HUP signal to force update of ghosted maps


author: Ian Kent <ian.kent@pobox.com>
changelog:
  - Add patch to implement directory ghosting and direct mounts
  - Add patch to for autofs4 module to support ghosting


author: Lennart Poettering <lpoetter@redhat.com> - 0.6.16-3.el5
changelog:
  - As suggested in https://bugzilla.redhat.com/show_bug.cgi?id=438013#c4 include
    the source address of invalid packets we receive in our log messages.
  - Resolves: #438013


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.16-1.el5
changelog:
  - Resolves: #221439 CVE-2006-6870 Maliciously crafted packed can DoS avahi daemon
  - upgrade to new upstream
  - patch revision
  - better solution to #220048 (avahi-dbus and netdev group)


author: Martin Bacovsky <mbacovsk@redhat.com> - 0.6.15-1.el5
changelog:
  - upgrade to new upstream
  - Resolves: #210028 which involves CVE-2006-5461
  - patch for dbus >= 1.0
  - patch revision and cleaning


author: Martin Stransky <stransky@redhat.com> - 0.6.11-6
changelog:
  - added patch from #206445 - ia64: unaligned access errors seen 
    during startup of avahi-daemon
  - removed unused patches


author: Martin Stransky <stransky@redhat.com> - 0.6.11-4
changelog:
  - fix for #204710 - /etc/init.d/avahi-dnsconfd missing line 
    continuation slash (\) in description


author: Martin Stransky <stransky@redhat.com> - 0.6.11-3
changelog:
  - added fix for #200767 - avahi-dnsconfd Segmentation fault 
    with invalid command line argument
  - added dist tag


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.11-1.fc6
changelog:
  - Upgrade to upstream version 0.6.11
  - fix bug 195674: set 'use-ipv6=yes' in avahi-daemon.conf
  - fix bug 197414: avahi-compat-howl and avahi-compat-dns-sd symlinks
  - fix bug 198282: avahi-compat-{howl-devel,dns-sd-devel} Requires:


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.10-1.FC6
changelog:
  - Upgrade to upstream version 0.6.10
  - fix bug 192080: split avahi-compat-libdns_sd into separate package
                    (same goes for avahi-compat-howl)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.9-4
changelog:
  - fix scriptlet error introduced by last fix: 
    if user has disabled avahi-daemon, do not enable it during %post


author: Bill Nottingham <notting@redhat.com> - 0.6.9-2
changelog:
  - fix scriplet error during installer
  - move service-types* to the tools package (avoids multilib conflicts)


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.8-1
changelog:
  - Upgrade to upstream version 0.6.8
  - fix bug 182462: +Requires(post): initscripts, chkconfig, ldconfig


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.5-1
changelog:
  - Upgrade to upstream version 0.6.5
  - Make /etc/avahi/etc and /etc/avahi/etc/localtime owned by avahi
    package; copy system localtime into chroot in post


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-2
changelog:
  - fix bug 177610: Enable mono support with new avahi-sharp package
  - fix bug 177609: add gdbm / gdbm-devel Requires for avahi-browse


author: Jason Vas Dias <jvdias@redhat.com> - 0.6.3-1
changelog:
  - Upgrade to upstream version 0.6.3
  - fix bug 177148: initscript start should not fail if avahi-daemon running


author: Jason Vas Dias<jvdias@redhat.com> - 0.6-3
changelog:
  - fix bug 172047 - tools should require python-twisted
  - fix bug 173985 - docs directory permissions


author: Jason Vas Dias<jvdias@redhat.com> - 0.5.2-7
changelog:
  - fix bug 172034: fix ownership of /var/run/avahi-daemon/
  - fix bug 172772: .spec file improvements from matthias@rpmforge.net


author: Alexander Larsson <alexl@redhat.com> - 0.5.2-5
changelog:
  - Obsoletes howl, howl-libs, as we want to get rid of them on updates
  - No provides yet, as the howl compat library is in Avahi 0.6.0.


author: Tim Waugh <twaugh@redhat.com> 1.6.7-5
changelog:
  - Moved libhpip library to main package (bug #457440).
  - Don't use "/usr/bin/env python" for Python scripts (bug #521857).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to make hpssd message parser more robust (bug #457052).
  - Applied patches to fix insecure alert emails (bug #455235).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fixed post scriptlet to make sure it restarts the daemon on upgrade
    (part of bug #320021).
  - Build requires openssl-devel (part of bug #320021).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-4.1
changelog:
  - Fixed default config file (bug #212953).
  - Fixed operation on IPv6-enabled machines (bug #212948).  Local-only
    sockets are IPv4,
  - Moved libhpip to hpijs sub-package (bug #212532).


author: Tim Waugh <twaugh@redhat.com> 1.6.7-2
changelog:
  - 1.6.7.
  - Conflict with selinux-policy < 2.3.4 to make sure new port numbers are
    known about (bug #201357).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-5
changelog:
  - Patchlevel 1.
  - Fixed another case-sensitive match.
  - Require hpijs sub-package (bug #189140).
  - Don't package unneeded files (bug #189162).
  - Put fax PPD in the right place (bug #186213).


author: Tim Waugh <twaugh@redhat.com> 0.9.10-4
changelog:
  - Use case-insensitive matching.  0.9.8 gave all-uppercase in some
    situations.
  - Last known working hpijs comes from 0.9.8, so use that.


author: Tim Waugh <twaugh@redhat.com> 0.9.3-4
changelog:
  - Conflicts: hpijs from before this package provided it.
  - Conflicts: system-config-printer < 0.6.132 (i.e. before HPLIP support
    was added)


author: Tim Waugh <twaugh@redhat.com> 0.9.3-1
changelog:
  - Use /usr/share/applications for putting desktop files in (bug #159932).
  - Requires PyQt (bug #159932).


author: Miloslav Trmac <mitr@redhat.com> - 1.88-3.el5.1
changelog:
  - Preserve application exit code
    Resolves: #210893
  - Don't use PAM data after it was freed
    Resolves: #211188


author: Martin Bacovsky <mbacovsky@redhat.com> 1.86-1
changelog:
  - fix userpasswd - Query window pops up three times if cancelling passwd (#202924)
  - Serbian latin script translation added (#203003)


author: Jindrich Novy <jnovy@redhat.com> 1.85-1
changelog:
  - fix userpasswd - don't crash if pam produces multi-line output (#175735)
    Thanks to toddp@bestweb.net
  - added Serbian translation (#176152)


author: Jindrich Novy <jnovy@redhat.com> 1.83-1
changelog:
  - accept gecos information on commandline for userinfo,
    patch by mclasen@redhat.com (#173232)
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.82-1
changelog:
  - don't use pam_stack.so
  - introduce userformat to better handle device formatting
    and removing usermount from menus (#132559)


author: Jindrich Novy <jnovy@redhat.com> 1.80-1
changelog:
  - fix "Unknown error" when password is mistyped in userpasswd (#135500)
  - add icons to windows for usermode-gtk applications (#155867)
  - add missing checks for some PAM error codes
  - fix ungettextized error message
  - update translations


author: Jindrich Novy <jnovy@redhat.com> 1.78-1
changelog:
  - pam-panel-icon has popup menu to choose to forget/keep
    authentization by right clicking as usual for other panel applets (#75845)
  - fix race condition (#142254)


author: Jindrich Novy <jnovy@redhat.com> 1.77-1
changelog:
  - preserve LANGUAGE environment variable in userhelper (#82300)
  - use badge instead of keyring icon for pam-panel-icon (#122487)
  - icon is not showed in the panel when logged as root (#75234)
  - use new environment variable USERHELPER_UID to identify
    an user who executed an application via userhelper  (#116186)


author: Jindrich Novy <jnovy@redhat.com> 1.76-1
changelog:
  - fix dependencies to Perl-XML-Parser #124170
  - use pamconsole instead of user in /etc/fstab to let
    usermount work with hal #139820


author: Jindrich Novy <jnovy@redhat.com> 1.75-1
changelog:
  - make pam-panel-icon using localized strings (#138609)
  - update translations
  - fix usermount to use "-I" option only for vfat and msdos fs
  - fix Makefile.am to not to use "Release" from spec to name dist tarballs


author: Jindrich Novy <jnovy@redhat.com> 1.74-1
changelog:
  - add patch from Mathew Miller (mattdm@mattdm.org) to use
    own user's password instead of root's in authentization
    (the user must be a member of specific group to enable it)


author: Jindrich Novy <jnovy@redhat.com> 1.73-1
changelog:
  - add support to configure.in for more languages
  - update translations from upstream
  - generate build scripts by autogen.sh


author: Rik van Riel <riel@redhat.com> 1.72-2
changelog:
  - add dependency on passwd (bz #125010)
  - make sure the Release: isn't part of the path name and tarball name


author: Ray Strode <rstrode@redhat.com> 1.72-1
changelog:
  - remove X-Red-Hat-Base category from userinfo.desktop
  - fix `make distcheck'
  - use proper value types for Terminal keys in desktop entries
  - remove upstreamed mkfs patch


author: Jindrich Novy <jnovy@redhat.com> 1.71-3
changelog:
  - installation to Preferences/More Preferences as a request
    of Ray Strode (rstrode@redhat.com) and #131605


author: Dan Walsh <dwalsh@redhat.com> 1.70-7
changelog:
  - More fixes for SELinux.  roll back to only use root for auth.
  - Add getenforce checks
  - Add root_passwd check


author: Nalin Dahyabhai <nalin@redhat.com> 1.70-1
changelog:
  - fix accidental mixup of role and type setting up new selinux context
  - log the new selinux context if we're running an app in a new selinux context


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - don't disable use of deprecated GLib and GTK+ APIs, reported by the
    mysterious Pierre-with-no-last-name


author: Nalin Dahyabhai <nalin@redhat.com> 1.69-1
changelog:
  - all around: cleanups
  - consolehelper: coalesce multiple messages from PAM again
  - usermount: handle user-not-allowed-to-control-mounts error correctly (#100457)
  - userhelper: trim off terminating commas when changing chfn info


author: Nalin Dahyabhai <nalin@redhat.com> 1.67-1
changelog:
  - work around GTK+ clearing DESKTOP_STARTUP_ID at gtk_init() time, so that
    startup notification actually works (#84684)


author: Nalin Dahyabhai <nalin@redhat.com> 1.66-1
changelog:
  - consolehelper-gtk: complete startup notification at startup
  - userhelper: pass startup notification data to consolehelper-gtk
  - consolehelper-gtk: setup startup notification for children if userhelper
    requests it


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-2
changelog:
  - remove directory names from PAM config files, allowing the same config
    files to work for both arches on multilib boxes
  - translation updates


author: Nalin Dahyabhai <nalin@redhat.com> 1.63-1
changelog:
  - userhelper: swallow the exec'd program's exit status, which would be
    misinterpreted by consolehelper anyway


author: Nalin Dahyabhai <nalin@redhat.com> 1.62-1
changelog:
  - consolehelper: suppress dialog on successful execution
  - userhelper: return 0 on success, not 1 (what was I *thinking*?)


author: Nalin Dahyabhai <nalin@redhat.com> 1.61-1
changelog:
  - userinfo: exit properly on escape. handle site_info field properly. go
    insensitive while running child process.
  - userpasswd: exit properly on cancel.
  - all of the above: reap the child instead of checking for pipe close -- this
    way is more robust (#68578,72684).
  - usermount: run mount/umount synchronously. capture stderr and display in a
    dialog. desensitize action buttons when no filesystems are selected.
  - consolehelper: display errors if we're attempting to run bogus programs
    (#72127)
  - translation updates (#70278)


author: Nalin Dahyabhai <nalin@redhat.com> 1.60-1
changelog:
  - reconnect the "cancel" and "ok" buttons in userinfo
  - heed the cancel button when prompting for passwords in userinfo (#68578)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-2
changelog:
  - change "forget password" to "forget authorization", because we don't actually
    remember the password (that would be scary, #71476)
  - translation update


author: Nalin Dahyabhai <nalin@redhat.com> 1.59-1
changelog:
  - pam-panel-icon: overhaul, change the 'locked' icon to keyring-small, nix the
    'unlocked' icon
  - consolehelper-gtk: properly set up the dialog buttons (should be 'cancel/ok'
    when we're asking questions, was always 'close')
  - disappear pam_timestamp_init


author: Nalin Dahyabhai <nalin@redhat.com> 1.56-1
changelog:
  - userinfo: prevent users from selecting "nologin" as a shell (#68579)
  - don't strip binaries by default; leave that to the buildroot policy
  - use desktop-file-install


author: Nalin Dahyabhai <nalin@redhat.com> 1.54-1
changelog:
  - suppress even error messages from Xlib when consolehelper calls
    gtk_init_check() to see if the display is available


author: Nalin Dahyabhai <nalin@redhat.com> 1.52-1
changelog:
  - attempt to make prompts at the console more meaningful
  - when falling back, reset the entire environment to the user's


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - stop giving the user chances to enter the right password if we get a
    conversation error reading a response (appears to be masked by libpam)
    (#62195)
  - always center consolehelper dialog windows


author: Nalin Dahyabhai <nalin@redhat.com> 1.50-1
changelog:
  - fix userpasswd dialog message being incorrect for password changes
  - use a dumb conversation function when text mode is invoked without a tty -- if
    the service's configuration doesn't call for prompts, then it'll still work
  - port from pwdb to libuser
  - catch child-exit errors correctly again
  - fix keyboard-grabbing


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - the grand libglade/gtk2 overhaul
  - allow disabling display of GUI windows by setting "GUI=false" in the
    console.apps configuration file (default: TRUE)
  - allow disabling display of GUI windows by recognizing a magic option
    on the command-line of the program being wrapped (NOXOPTION, no default)


author: Nalin Dahyabhai <nalin@redhat.com> 1.44-1
changelog:
  - only try to call gtk_main_quit() if we've got a loop to get out of (#54109)
  - obey RPM_OPT_FLAGS, obey


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set XAUTHORITY if we fall back to regular behavior (#26343)
  - make the suid helper 04711 instead of 04755


author: Yukihiro Nakai <ynakai@redhat.com>
changelog:
  - Some fix for Japanese environment.
  - Use gtk_set_locale() instead of setlocale()
  - Copyright update.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix the /usr/bin/shutdown wrapper so that root can call shutdown
  - only include the /usr/bin/shutdown wrapper on 6.x
  - also sanitize LC_MESSAGES
  - tweak sanitizing checks (from mkj)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix incorrect user name
  - add a shell wrapper version of /usr/bin/shutdown
  - build for 6.x errata
  - bump revision to upgrade the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix stdin/stdout redirection shenanigans (#11706)
  - fix authentication and execution as users other than root
  - make sure the right descriptors are terminals before dup2()ing them
  - cut out an extra-large CPU waster that breaks GUI apps


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install translations
  - fixup a messy text string
  - make "Mount"/"Unmount" translatable
  - stop prompting for passwords to shut down -- we can hit ctrl-alt-del anyway,
    and gdm users can just shut down without logging in


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - strip all binaries by default
  - add the name of the program being run to the userhelper dialog
  - add a graphic to the userhelper-wrap package
  - add a button to jump straight to nonprivileged operation when supported


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - The root exploit fix created a bug that only showed up in certain
    circumstances.  Unfortunately, we didn't test in those circumstances...


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed old complex broken gecos parsing, replaced with simple working parsing
  - can now blank fields (was broken by previous fix for something else...)


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - FALLBACK/RETRY in consolehelper/userhelper
  - session management fixed for consolehelper/userhelper SESSION=true
  - fix memory leak and failure to close in error condition (#3614)
  - fix various bugs where not all elements in userinfo got set


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - better check for X availability
  - center windows to make authentication easier (improve later with
    transients and embedded windows where possible)
  - applink -> applnk
  - added a little padding, especially important when running without
    a window manager, as happens when running from session manager at
    logout time


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - updated userhelper.8 man page for consolehelper capabilities
  - moved from wmconfig to desktop entries


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - strip binaries
  - use defattr
  - fix spec file ( rm -rf $(RPM_BUILD_ROOT) is a stupid thing to do ! )


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - Updated the packages... now includes userpasswd for changing passwords
    and newer versions of usermount and userinfo.  No known bugs or
    misfeatures. 
  - Fixed the file list...


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-10
changelog:
  - (#182414: boost: put tests in %check section) via Rex Dieter
  - Fix EVR with .el5 tag via Gianluca Sforna


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-7
changelog:
  - (#205866: boost::spirit generates warnings with -Wshadow)
  - (#205863: serialization lib generates warnings)
  - (#204326: boost RPM missing dependencies)
  - (#193465: [SIGNAL/BIND] Regressions with GCC 4.1)
  - BUILD_FLAGS, add, to see actual compile line.
  - REGEX_FLAGS, add, to compile regex with ICU support.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-3
changelog:
  - Update to boost-1.33.1.
  - (#176485: Missing BuildRequires)
  - (#169271: /usr/lib/libboost*.so.? links missing in package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.0-1
changelog:
  - Update to boost-1.33.0, update SONAME to 2 due to ABI changes.
  - Simplified PYTHON_VERSION by Philipp Thomas <pth@suse.de>


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-6
changelog:
  - (#153093: boost warns that gcc 4.0.0 is an unknown compiler)
  - (#152205: development .so symlinks should be in -devel subpackage)
  - (#154783: linker .so symlinks missing from boost-devel package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-4
changelog:
  - (#142612: Compiling Boost 1.32.0 Failed in RHEL 3.0 on Itanium2) 
  - (#150069: libboost_python.so is missing)
  - (#141617: bad patch boost-base.patch)
  - (#122817: libboost_*.so symlinks missing)
  - Re-add boost-thread.patch.
  - Change boost-base.patch to show thread tags.
  - Change boost-gcc-tools.patch to use SOTAG, compile with dllversion.
  - Add symbolic links to files.
  - Sanity check can compile with gcc-3.3.x, gcc-3.4.2, gcc-4.0.x., gcc-4.1.x.


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-3
changelog:
  - (#122817: libboost_*.so symlinks missing)
  - (#141574: half of the package is missing)
  - (#141617: bad patch boost-base.patch)


author: Benjamin Kosnik <bkoz@redhat.com>
changelog:
  - Remove bjam dependency. (via Graydon).
  - Fix installed library names.
  - Fix SONAMEs in shared libraries.
  - Fix installed header location.
  - Fix installed permissions.


author: Benjamin Kosnik <bkoz@redhat.com> 1.31.0-1
changelog:
  - Update to boost-1.31.0.rc2
  - (#109307:  Compile Failure with boost libraries)
  - (#104831:  Compile errors in apps using Boost.Python...)
  - Unify into boost, boost-devel rpms.
  - Simplify installation using bjam and prefix install.


author: Nalin Dahyabhai <nalin@redhat.com> 1.30.2-2
changelog:
  - require boost-devel instead of devel in subpackages which require boost-devel
  - remove stray Prefix: tag


author: Benjamin Kosnik <bkoz@redhat.com> 1.30.2-1
changelog:
  - change license to Freely distributable
  - verify installation of libboost_thread
  - more boost-devel removals
  - deal with lack of _REENTRANT on ia64/s390
  - (#99458) rpm -e fixed via explict dir additions
  - (#103293) update to 1.30.2


author: Michael K. Johnson <johnsonm@redhat.com> x.2.14-1
changelog:
  - explicitly check for tux syscall not implemented (#102740)
  - explicitly express tux syscall # for s390x as well as s390 (#102740)


author: Matt Wilson <msw@redhat.com> x.2.13-1
changelog:
  - fix syscall number for ppc, ppc64 which is now 225, not 224 (#86366)
    from Julie DeWandle
  - fix buildreq for glib to be glib2


author: Michael K. Johnson <johnsonm@redhat.com> x.2.11-1
changelog:
  - Added support for 32-bit userland with 64-bit kernel
     o Requires new protocol version 3
     o major version of package matches protocol version
     o Package can be built to support protocol versions 2 and 3.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Preparing for new release:
    o  New, faster date routine
    o  Better command-line option handling
    o  Removed counttux now that tux2w3c has the -c option
    o  Fixed docroot/modulepath handling
    o  More info in tux2w3c


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:1.4-5jpp_1fc
changelog:
  - Merge with latest from JPP.
  - Remove fileversion and my_version macros.
  - Remove notexentests patch and replace with a patch to disable
  - failure on tests.


author: Gary Benson <gbenson@redhat.com>
changelog:
  - Build with servletapi5.
  - Add NOTICE file as per Apache License version 2.0.
  - Skip some failing tests.


author: Ralph Apel <r.apel at r-apel.de> 0:1.4-3jpp
changelog:
  - Adapt to jdom-1.0-1 replacing org.jdom.input.DefaultJDOMFactory
    by org.jdom.DefaultJDOMFactory in AnakiaJDOMFactory.java
    as well as using org.jdom.output.Format in AnakiaTask.java
  - Therefore require jdom >= 0:1.0-1


author: Ville Skyttä <ville.skytta at iki.fi> - 0:1.3.1-2jpp
changelog:
  - Add Epochs to dependencies.
  - Add explicit defattrs.
  - Add non-versioned javadoc symlinks.
  - Use sed instead of bash 2 extension when symlinking jars during build.
  - Use full URL in Source.
  - Fix -javadoc Group tag.
  - Drop patch in favour of ant options.
  - BuildRequire jpackage-utils and antlr (latter needed for Anakia tests).


author: Richard Bullington-McGuire <rbulling@pkrinternet.com> 1.3-1jpp
changelog:
  - 1.3 stable release
  - Updated for JPackage 1.5
  - Run JUnit regression tests as part of the build process
  - Added patch file to fix test case classpath for JUnit standard locations


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.3-0.rc1.1jpp
changelog:
  - 1.3.0rc1
  - dropped patch
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for demo package


author: Petr Raszyk <praszyk@redhat.com> - 1.4.9-22
changelog:
  - libslang-utf8.so should not use the symbol __libc_enable_secure 
  - (#161536). slang-nointerlibc.patch
  - Additional some comments/hints for C-Frame 121


author: Petr Rockai <prockai@redhat.com> - 1.4.9-17
changelog:
  - Patch to compile with gcc4 by Robert Scheck (#151029). (Weeird,
    probably on march 2nd the used buildroot wasn't updated with
    gcc4 yet?).


author: Adrian Havill <havill@redhat.com> 1.4.9-1
changelog:
  - big upgrade to 1.4.9
  - manually redid partially rotted utf patch for sldisply.c
  - no longer necessary to chmod the so files
  - change copyright header to license


author: Bill Nottingham <notting@redhat.com> 1.4.5-9
changelog:
  - tweak UTF-8 linedrawing patch slightly; add README describing some of
    the changes
  - fix a utee/dtee typo


author: Donnie Barnes <djb@redhat.com>
changelog:
  - upgraded to 0.99.38 (will it EVER go 1.0???)
  - all patches removed (all appear to be in this version)


author: Harald Hoyer <harald@redhat.com> 2.01-10.el5.1
changelog:
  - added patch from David Robinson to check for the image parameter
    (rhbz#436933)
  - added patch to prevent memset warning (rhbz#221169)
  - Resolves: rhbz#436933, rhbz#221169


author: Harald Hoyer <harald@redhat.com> 8:2.01.01.0.a03-1
changelog:
  - version 2.01.01a03
  - DVD patch from http://crashrecovery.org/oss-dvd.html adds support
    for DVD+RW and DVD+R DL burning


author: Harald Hoyer <harald@redhat.com> - 8:2.01.1-4
changelog:
  - use scd? instead of sg? for scsi scanning (may only work
    with a medium inserted, see bug 134822)


author: Harald Hoyer <harald@redhat.com> - 8:2.01.1-3
changelog:
  - better globbing
  - readded O_EXCL opening for the direct device opening case, 
    e.g. dev=/dev/cdrom
  - removed some debugging messages (bug 82089)


author: Harald Hoyer <harald@redhat.com> - 8:2.01.0.a33-1
changelog:
  - new version
  - [cdrtools changelog]: The changes in this release are as follows:
    Cdrecord now tries to check DMA speed, and prevents users from not
    using burnproof if the system is too slow. A bug in mkisofs
    -dvd-video was fixed. A bug in NT SPTI SCSI handling was fixed.


author: Harald Hoyer <harald@redhat.com> - 8:2.01.0.a32-1
changelog:
  - new version
  - [cdrtools changelog]: The clone option was documented in the man page.  
    cdda2wav/readcd -scanbus now works correctly readcd and  gives a 
    summary of defective sector numbers at the end. The  mkisofs 
    -H/-L/-P options were marked as reserved by POSIX, and mkisofs 
    was sped up for very long pathological directories  
    (all filenames need to be renamed for 8.3).


author: Harald Hoyer <harald@redhat.com> - 8:2.01-0.a27.2
changelog:
  - added dvd patch from http://people.mandrakesoft.com/~warly/files/cdrtools/
  - added note to manpage about configuration path change


author: Mike A. Harris <mharris@redhat.com> 1.10-10
changelog:
  - Quelled rpmlint warning messages by adding Provides: cdrecord-cdda2wav to
    cdda2wav subpackage and Provides: mkisofs to mkisofs subpackage


author: Mike A. Harris <mharris@redhat.com> 1.10-8
changelog:
  - Added cdrtools-1.10-mkisofs-sharing.patch to fix bug (#56304)
  - Added zisofs support patch from Hans Peter Anvin for bugzilla enhancement
    request number (#59251), which requires a Linux kernel 2.4.14 or newer in
    order to have zisofs support.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.10-3
changelog:
  - Add Epoch - the new cdrecord subpackage had a smaller Epoch than the
    standalone cdrecord package from 7.1, causing update problems (#49963)


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - split to a cdrtools srpm
  - itterated to 1.10
  - applied alane@geeksrus.net's patch to fix bug #19841


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - upgraded to 1.8.1 - updated the redhat patch (renamed to
    "conflocation"), remove the SILO patch (it should be
    supported now...). Is the IDE-patch still necesarry?
  - upgraded source location
  - don't strip manually


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 1.8a40
  - according to the author, cdda2wav and mkisofs are more recent in this
    package, so build them out of this tree too
  - add sparc patch from jakub


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - removed the mkisofs subpackage - we have mkisofs provided by 
    a'nother package (doh!)
  - moved former mkisofs diagnostic binaries to the main package
  - get rod of the cdda2wav too; cdparanoia is now in the distribution and
    it is a whole lot better too


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-13
changelog:
  - There are some nonsense warnings and errors while using usermod,
    so ignore them.
    Resolves: #458144


author: Roman Rakus <rrakus@redhat.com> - 1.4.3-10
changelog:
  - Set home dir for user ident to /
    Resolves: #458144
  - Identify right error in get_tok_uint and similar functions
    Resolves: #438787
  - Work rigth with valist when logging is on.
    Resolves: #446844


author: Adrian Havill <havill@redhat.com> - 1.4.2-8
changelog:
  - tweak setting of uid/gid for key file so systems with no prior
    ident user/group don't generate a warning (#135837)


author: Adrian Havill <havill@redhat.com> - 1.4.2-4
changelog:
  - slightly better error checking for insane cases
  - tweak of the openssl requires dependency loop (#131291)
  - as ident.key is created in %post, tweak so verify passes (#131530)
  - make the uid/gid for ident conform to the past (#135752)


author: Adrian Havill <havill@redhat.com> - 1.4.0-1
changelog:
  - revise makefile; don't over-optimize as gcc can produce bad code
  - ptr cleanup when multiquery and missing /proc/net/tcp*
  - improve create_opt (error handling, debugging, identifiers)
  - add --prefix option for matching IPv4 to IPv6


author: Adrian Havill <havill@redhat.com> - 1.3.4-1
changelog:
  - retry reading proc with pauses to reduce false negatives
  - match IPv4 addresses against IPv6 compatibility addresses


author: Adrian Havill <havill@redhat.com> - 1.3.1-1
changelog:
  - increase default connections-per-sec/max-instances for HP
  - more doc cleanup
  - remove unnecessary rootdir check for -N/--ident


author: Adrian Havill <havill@redhat.com> - 1.3.0-1
changelog:
  - add unknown-error only -e option
  - edit readme, add rfc to docdir
  - code cleanup; remove static buffers, orthagonalize id names
  - ipv6 hybrid addr zero run correction
  - extra eight bits added to random key


author: Adrian Havill <havill@redhat.com> - 1.2.7-1
changelog:
  - added Provides to satisfy HP pkg rpm dep (#121447, #111640)
  - more code cleanup; minimize --resolve dns lookups


author: Adrian Havill <havill@redhat.com> - 1.2.4-1
changelog:
  - code vet and minor changes re alan@'s comments
  - default operating mode to alias all usernames as 'nobody'
    to prevent noobies from getting their mail addr harvested
  - clean up README documentation


author: Adrian Havill <havill@redhat.com> - 1.2.3-1
changelog:
  - mark xinetd conf file as a noreplace config file
  - more robust error checking for proper rfc1413 tokens


author: Adrian Havill <havill@redhat.com> - 1.2.0-1
changelog:
  - A few tweaks in the cmdline options for orthagonality
  - minor bug fix regarding reading from stdin in some multiquery cmdline cases
  - add --resolve


author: Adrian Havill <havill@redhat.com> - 1.0.0-2
changelog:
  - Obsolete pidentd -- authd and pidentd can't/shouldn't coexist on FC/RHEL
  - license tweak to allow openssl under any condition
  - no spec url needed; package is not worthy enough.


author: Lon Hohberger <lhh@redhat.com> 2.0.115-68.el5_6.1
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#664381


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-64
changelog:
  - cman: Fix fail_recv_const length calculation
    (fix_fail_recv_const_length_calculation.patch)
    Resolves: rhbz#587080
  - Replace incorrect patch for "ccsd: Add error when bind fails" 
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996


author: Lon Hohberger <lhh@redhat.com> 2.0.115-63
changelog:
  - Updated patch for mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246


author: Lon Hohberger <lhh@redhat.com> 2.0.115-62
changelog:
  - fence_scsi_test: Add man page to Makefile.
    (fence_scsi_test_add_man_page_to_makefile.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-59
changelog:
  - fence_scsi_test: rewrite to more accurately test
    (fence_scsi_test_rewrite_to_more_accurately_test.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-58
changelog:
  - Disable fence_cisco_ucs & fence_rhevm since they depend
    on a package which is not available at this point.
    Related: rhbz#595385 rhbz#579859


author: Marek Grac <mgrac@redhat.com> - 2.0.115-56
changelog:
  - fence agents: fix build system for fence_rhevm
    (fence_rhevm-fix_build_system.patch)
    Resolves: rhbz#595385
  - fence agents: fix path to library
    (fence_cisco_ucs-library_path.patch)
    Resolves: rhbz#579859
  - fence agents: new fence agent for IF-MIB
    (fence_ifmib.patch)
    Resolves: rhbz#572863


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-55
changelog:
  - GFS2 mount fails incorrectly after correctly failed second-mount attempt
    (gfs2_mount_fails_incorrectly_after_correctly_failed_second_mount_attempt.patch)
    Resolves: rhbz#559735
  - cman: Make qdiskd heuristics time out
    (make_qdiskd_heuristics_time_out.patch)
    Resolves: rhbz#589266


author: Marek Grac <mgrac@redhat.com> - 2.0.115-54
changelog:
  - fence agents: New fence agent for RHEV-M REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595385
  - fence agents: New fence agent for Cisco UCS
    (fence_cisco_ucs.patch)
    Resolves: rhbz#579859
  - New dependency added: python-pycurl


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-53
changelog:
  - Fence agents: Rename power-wait to power_wait and add
    help information, replacing previous patch.
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-52
changelog:
  - Fence agents: add power-wait to fence_ipmilan for iLO3 devices
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: David Teigland <teigland@redhat.com> - 2.0.115-51
changelog:
  - fenced: use post_join_delay after cluster join
    (fenced-use-post_join_delay-after-cluster-join.patch)
    Resolves: rhbz#575952
  - gfs_controld: fix plock owner syncing
    (gfs_controld-fix-plock-owner-syncing.patch)
    Resolves: rhbz#624156
  - gfs_controld: fix plock owner in unmount
    (gfs_controld-fix-plock-owner-in-unmount.patch)
    Resolves: rhbz#624554


author: David Teigland <teigland@redhat.com> - 2.0.115-50
changelog:
  - group_tool: list more than 64 groups
    (group_tool-list-more-than-64-groups.patch)
    Resolves: rhbz#561509


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-49
changelog:
  - cman: Change flags to be values instead of bitmasks
    (cman_change_flags_to_be_values_instead_of_bitmasks.patch)
    Resolves: rhbz#595394


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-48
changelog:
  - gfs_controld: set last_plock_time for ownership operations
    (gfs_controld_set_last_plock_time_for_ownership_operations.patch)
    Resolves: rhbz#578632


author: Marek Grac <mgrac@redhat.com> - 2.0.115-47
changelog:
  - Method to cause one node to delay fencing in a cluster
    (fencing-delay_1.patch)
    (fencing-delay_2.patch)
    (fencing-delay_3.patch)
    (fencing-delay_4.patch)
    Resolves: rhbz#613064


author: Marek Grac <mgrac@redhat.com> - 2.0.115-46
changelog:
  - Not all parameters appear in metadata
    (fencing_Not_all_parameters_in_metadata.patch)
    Resolves: rhbz#619034
  - make "port" a synonym of "module_name" for drac5 
    (fence_drac5-synonym-for_modulename.patch)
    Resolves: rhbz#619776
  - Return codes of fencing agent 
    (fence_correct_return_codes.patch)
    (fence_correct_return_codes-ipmilan.patch)
    Resolves: rhbz#583034


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-45
changelog:
  - qdisk: mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246
  - ccsd: Add error when bind fails
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996
  - fence-agents: Update fence_ack_manual man page
    (update_fence_ack_manual_man_page.patch)
    Resolves: rhbz#578604


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-44
changelog:
  - reorder patches
  - gfs_controld: Add extended information to 'group_tool dump plocks' (gfs)
    (add_extended_information_to_group_tool_dump_plocks_gfs.patch)
    Resolves: rhbz#514264
  - cman: make libcman /dev/zero fd close-on-exec
    (cman_make_libcman_dev_zero_fd_close_on_exec.patch)
    Resolves: rhbz#585218
  - cman: set fail_recv_const to 2500
    (cman_set_fail_recv_const_to_2500.patch)
    Resolves: rhbz#587080
  - cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#611391


author: Marek Grac <mgrac@redhat.com> 2.0.115-42
changelog:
  - fence_egenera: possible symlink vulnerability
  - fencing: Some fencing agents do not support login using keys
  - Resolves: rhbz#519682 rhbz#582334


author: Marek Grac <mgrac@redhat.com> 2.0.115-41
changelog:
  - fence_ilo: will throw exception if user does not 
    have power priviledges
  - Resolves: rhbz#576176


author: Marek Grac <mgrac@redhat.com> 2.0.115-40
changelog:
  - fence_rsb: force stdout close for fence_rsb
  - fence_rackswitch: fix warnings in build process
  - fence_rackswitch: should accept unknown parameters
  - fence_wti: add direct support for WTI VMR
  - fence_apc: fails for some port numbers 
  - Resolves: rhbz#583045 rhbz#578615 rhbz#606315 rhbz#607265


author: Marek Grac <mgrac@redhat.com> 2.0.115-39
changelog:
  - fence_vmware: fix building for fence_vmware_helper.pl
  - fence_wti: support non-default TCP ports for telnet/ssh
  - Resolves: rhbz#590304 rhbz#572996


author: Marek Grac <mgrac@redhat.com>
changelog:
  - fence_ipmilan: correct return codes + manual page info
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-37
changelog:
  - fencing: work around bad nss/nspr headers which contain
    non-ANSI prototypes
  - Resolves: rhbz#575157


author: Marek Grac <mgrac@redhat.com> - 2.0.115-36
changelog:
  - fencing: correct return codes (perl + python based agents)
  - fence_ilo: remove import of openSSL into fence agent
  - fencing: preliminary support for generating manual pages
  - Resolves: rhbz#583049 rhbz#583053
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Than Ngo <than@redhat.com> 6:3.1.4-2
changelog:
  - backport from CVS to fix atlantikdesigner crashed on startup
  - fix miscompiled code, (bug #106198, #106888)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Run ldconfig in %post and %postun to make libkdegames happy
  - Replace absolute symlinks with relative symlinks (#24787)


author: Joshua Daniel Franklin <joshuadfranklin@yahoo.com> 1.10-2
changelog:
  - Change License string to "ASL 2.0" instead of "Apache Software License"
  - Disable debug files with "--enable-debug=no" (BZ #427013)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 1.00-2
changelog:
  - --with-system-pinerc=%_sysconfdir/pine.conf
    --with-system-fixed-pinerc=%_sysconfdir/pine.conf.fixed (#426512)


author: Rex Dieter <rdieter[AT]fedoraproject.org> 0.999-3
changelog:
  - EXTRACFLAGS=$RPM_OPT_FLAGS
  - --with-c-client-target=lfd
  - --with-passfile=.alpine.passfile
  - Requires: mailcap


author: Joshua Daniel Franklin <joshuadfranklin@yahoo.com> 0.999-2.2
changelog:
  - remove problem cc5.sol file
  - integrate changes from Patrick "Jima" Laughton <jima@beer.tclug.org>


author: Elliot Lee <sopwith@redhat.com> 2.0.0-7
changelog:
  - More missing libXau hackery (prog_as.patch so we can run auto* to pull 
  in an updated libtool)
  - _smp_mflags


author: Tim Waugh <twaugh@redhat.com> 4.2.7-22.2
changelog:
  - Compile libgimpprint with -fno-strict-aliasing (bug #450318).
  - For devel, utils, and plugin sub-packages, adjust main package
    requirement to include release (bug #450320).


author: Tomas Mraz <tmraz@redhat.com> - 4.2.7-20
changelog:
  - rebuilt with new gnutls
  - dropped the openssl-devel buildrequires as gnutls linkage is pulled
    from cups-libs


author: Tim Waugh <twaugh@redhat.com> 4.2.7-2
changelog:
  - Ship %{_datadir}/%{name}/ppds directory (feature #124687).
  - Browse that directory when asking for a PPD (feature #124687).
  - Build requires gettext-devel (bug #135042).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Not much point in installing the plug-in into a 1.2 directory since
    we know it won't work for that.


author: Tim Waugh <twaugh@redhat.com> 4.2.4-5
changelog:
  - Use 'reload' not 'condrestart' for cups.
  - Reload cups on first install as well as upgrade (part of bug #82500).


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "BuildRequires: pkgconfig" for (#193505)
  - Replace "makeinstall" with "make install DESTDIR=..."
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added "Requires: libXext-devel" to libXv-devel subpackage, to avoid all
    packages that depend on libXv-devel from having to manually specify that
    dependency themselves, as it is required by Xv.  (#192167)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXv to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXv to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Bill Nottingham <notting@redhat.com> 1.3.30.2-2
changelog:
  - alternatives: fix removal of manual links (#525051, <dtardon@redhat.com>)
  - ntsysv man page tweak (#516599)
  - add resetpriorities to the chkconfig man page (#501225)
  - Fix runlevel list in man page (#466740)
  - alternatives: clarify error messages with more context (#441443)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - for LSB scripts, use any chkconfig: priorities as a basis,
    instead of 50/50 (#172599)
  - fix LSB script dependency setting when no chkconfig: line
    is present (#161870, <jean-francois.larvoire@hp.com>)
  - fix LSB script dependency setting when one of Required-Stop
    or Required-Start: is missing (#168457)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix segfault on directories in /etc/xinetd.d (#166385)
  - don't needlessly rewrite xinetd files (#81008)


author: Bill Nottingham <notting@redhat.com> 1.3.14-1
changelog:
  - resize reasonably with larger screens (#74156)
  - don't error out completely on bad symlink (#74324)
  - use ngettext (#106176)
  - error out on invalid start/stop values (#109858)
  - some man page updates
  - fix return code of chkconfig for xinetd services (#63123)
  - sort chkconfig --list display (#61576, <shishz@alum.rpi.edu>)


author: Dan Walsh <dwalsh@redhat.com> 1.3.8-2
changelog:
  - Fix readXinetdServiceInfo to return error on not regular files
  - Fix chkconfig to not write messages if readXinetdServiceInfo gets an error


author: Bill Nottingham <notting@redhat.com> 1.3.4-1
changelog:
  - don't apply the dependency logic to things that already have
    start/stop priorities
  - fix silly display bug in --config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - alternatives: handle initscripts too; --initscript command-line option
  - chkconfig/ntsysv (and serviceconf, indirectly): services with
     *no* links in /etc/rc*.d are no longer displayed with --list, or
     available for configuration except via chkconfig command-line options
  - alternatives: fix trying to enable disable a null service


author: Bill Nottingham <notting@redhat.com>
changelog:
  - actually, put the alternatives stuff back in /usr/sbin
  - ship /etc/alternatives dir
  - random alternatives fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - changed Prereq: initscripts >= 5.18 to Conflicts: initscripts < 5.18
  - fixed sumary and description where a global string replace nuked them


author: Matt Wilson <msw@redhat.com>
changelog:
  - added support for a "hide: true" tag in initscripts that will make
    services not appear in ntsysv when run with the "--hide" flag


author: Arnaldo Carvalho de Melo <acme@conectiva.com.br>
changelog:
  - added pt_BR translations
  - added more translatable strings
  - support for i18n init.d scripts description


author: Mike A. Harris <mharris@redhat.com> 1.0.0.4-1
changelog:
  - Updated xorg-x11-drv-dynapro to version 1.0.0.4 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 1.0.0-0
changelog:
  - Initial spec file for dynapro input driver generated automatically
    by my xorg-driverspecgen script.


author: Mike A. Harris <mharris@redhat.com> 10.11.1.2-1
changelog:
  - Updated xorg-x11-drv-vmware to version 10.11.1.2 from X11R7 RC4
  - Removed 'x' suffix from manpage dirs to match RC4 upstream.


author: Mike A. Harris <mharris@redhat.com> 10.10.2-1
changelog:
  - Update BuildRoot to use Fedora Packaging Guidelines.
  - Deglob file manifest.
  - Limit "ExclusiveArch" to x86, x86_64, ia64


author: Mike A. Harris <mharris@redhat.com> 10.10.2-0
changelog:
  - Initial spec file for vmware video driver generated automatically
    by my xorg-driverspecgen script.


author: Jarod Wilson <jarod@redhat.com> [2.6.18-238.el5]
changelog:
  - [net] bnx2: remove extra call to pci_map_page (John Feeney) [663509]
  - [fs] nfs: set lock_context field in nfs_readpage_sync (Jeff Layton) [663853]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-237.el5]
changelog:
  - [block] fully zeroize request struct in rq_init (Rob Evers) [662154]
  - [scsi] qla4xxx: update to 5.02.04.02.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: make get_sys_info function return void (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't default device to FAILED state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mask bits in F/W Options during init (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update to 5.02.04.01.05.06-d0 (Chad Dupuis) [661768]
  - [scsi] qla4xxx: disable irq instead of req pci_slot_reset (Chad Dupuis) [661768]
  - [scsi] qla4xxx: no device add until scsi_add_host success (Chad Dupuis) [661768]
  - [fs] nfs: set lock_context field in nfs_writepage_sync (Jeff Layton) [660580]
  - [scsi] bfa: fix crash reading driver sysfs statistics (Rob Evers) [659880] {CVE-2010-4343}
  - [misc] cpufeature: avoid corrupting cpuid vendor id (Matthew Garrett) [568751]
  - [char] drm: don't set signal blocker on master process (Dave Airlie) [570604]
  - [fs] nfs: remove problematic calls to nfs_clear_request (Jeff Layton) [656492]
  - [fs] nfs: handle alloc failures in nfs_create_request (Jeff Layton) [656492]
  - [fs] nfs: clean up nfs_create_request (Jeff Layton) [656492]
  - [net] forcedeth: fix race condition in latest backport (Ivan Vecera) [658434]
  - [net] cxgb3: fix read of uninitialized stack memory (Jay Fenlason) [633155] {CVE-2010-3296}
  - [net] tg3: increase jumbo flag threshold (John Feeney) [660506]
  - [net] s2io: fix netdev initialization failure (Bob Picco) [654948]
  - [net] igb: only use vlan_gro_receive if vlans registered (Stefan Assmann) [660190] {CVE-2010-4263}
  - [net] ipv6: try all routers with unknown reachable state (Thomas Graf) [661393]
  - [misc] kernel: fix address limit override in OOPS path (Dave Anderson) [659571] {CVE-2010-4258}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-236.el5]
changelog:
  - [powerpc] support DLPAR remove operations (Steve Best) [655089]
  - [net] igb: fix tx packet count (Stefan Assmann) [658801]
  - [usb] serial: new driver MosChip MCS7840 (Stefan Assmann) [574507]
  - [fs] exec: copy fixes into compat_do_execve paths (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [fs] exec: make argv/envp memory visible to oom-killer (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [misc] binfmts: kill bprm->argv_len (Oleg Nesterov) [625694] {CVE-2010-4243}
  - [mm] backport upstream stack guard page /proc reporting (Larry Woodman) [643426]
  - [mm] add guard page for stacks that grow upwards (Johannes Weiner) [630563]
  - [net] tipc: fix information leak to userland (Jiri Pirko) [649892] {CVE-2010-3877}
  - [sound] ALSA: fix sysfs unload and OSS mixer mutex issues (Jaroslav Kysela) [652165]
  - [net] tg3: fix 5719 bugs (John Feeney) [657097]
  - [net] bnx2: update firmware to 6.0.x (John Feeney) [644438]
  - [redhat] configs: add CONFIG_SECURITY_DMESG_RESTRICT (Frantisek Hrbata) [653250]
  - [misc] kernel: restrict unprivileged access to dmesg (Frantisek Hrbata) [653250]
  - [virt] xen: don't allow blkback virtual CDROM device (Andrew Jones) [635638] {CVE-2010-4238}
  - Revert: [xen] cd-rom drive does not recognize new media (Andrew Jones) [635638] {CVE-2010-4238}
  - [net] qlge: fix deadlock when interface is going down (Chad Dupuis) [654420]
  - [net] qlge: reset chip before freeing buffers (Chad Dupuis) [654420]
  - [net] qlge: restore vlan setting during ql_adapter_up (Chad Dupuis) [654420]
  - [scsi] qla4xxx: Update version to V5.02.04.00.05.06-d0 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Document Driver Versioning Scheme (Chad Dupuis) [656999]
  - [scsi] qla4xxx: Updated the Copyright header to 2010 (Chad Dupuis) [656999]
  - [scsi] qla4xxx: don't process devices untill probe done (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free DDB when application calls for it (Chad Dupuis) [656999]
  - [scsi] qla4xxx: memory wedge with peg_halt test in loop (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear AF_FW_RECOVERY flag after reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix new IP address caching (Chad Dupuis) [656999]
  - [scsi] qla4xxx: replace hard coded values with macros (Chad Dupuis) [656999]
  - [scsi] qla4xxx: mark dev FAILED on 82XX init failure (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fail init if pci mem write fails (Chad Dupuis) [656999]
  - [scsi] qla4xxx: ensure proper qla4xxx_conn_start state (Chad Dupuis) [656999]
  - [scsi] qla4xxx: do not process interrupts unconditionally (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix add w/iscsi2_create_conn not done yet (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no fw hung if reset retry is in progress (Chad Dupuis) [656999]
  - [scsi] qla4xxx: correct use of cmd->host_scribble (Chad Dupuis) [656999]
  - [scsi] qla4xxx: msi init request_irq parameter usage fix (Chad Dupuis) [656999]
  - [scsi] qla4xxx: cleanup qla4xxx_wait_for_hba_online (Chad Dupuis) [656999]
  - [scsi] qla4xxx: grab hardware_lock before accessing srb (Chad Dupuis) [656999]
  - [scsi] qla4xxx: remove unwanted check for bad spd (Chad Dupuis) [656999]
  - [scsi] qla4xxx: update AER support for ISP82XX (Chad Dupuis) [656999]
  - [scsi] qla4xxx: clear rom lock if firmware died holding (Chad Dupuis) [656999]
  - [scsi] qla4xxx: CRB Register for Request Queue in-pointer (Chad Dupuis) [656999]
  - [scsi] qla4xxx: dump mailbox registers on System Error (Chad Dupuis) [656999]
  - [scsi] qla4xxx: add support for 8130/8131 AENs (Chad Dupuis) [656999]
  - [scsi] qla4xxx: fix seconds_since_last_heartbeat reset (Chad Dupuis) [656999]
  - [scsi] qla4xxx: no wait for outstanding command complete (Chad Dupuis) [656999]
  - [scsi] qla4xxx: free_irqs on failed initialize_adapter (Chad Dupuis) [656999]
  - [virt] xen: fix netback hotplug regression in xenbus fix (Laszlo Ersek) [635999]
  - [xen] fix 64-bit PV guest user mode segv crashing host (Paolo Bonzini) [658354] {CVE-2010-4255}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-234.el5]
changelog:
  - [s390] vmlogrdr: purge after recording is switched off (Hendrik Brueckner) [653479]
  - [wireless] ieee80211: fix deauthentication (Stanislaw Gruszka) [644367]
  - [wireless] zd1211rw: fix associate after disassociate (Stanislaw Gruszka) [644367]
  - [fs] proc: fix NULL ->i_fop oops (Steve Best) [655083]
  - [scsi] lpfc: Update version to 8.2.0.87.1p (Rob Evers) [655119]
  - [scsi] lpfc: set heartbeat timer off by default (Rob Evers) [655119]
  - [scsi] lpfc: fix NULL deref duing allocation failure (Rob Evers) [655119]
  - [scsi] lpfc: fix remote SLI4 firmware download data bug (Rob Evers) [655119]
  - [scsi] lpfc: fix FDMI_DID login failure after link bounce (Rob Evers) [655119]
  - [scsi] lpfc: handle CVL after nameserver PLOGI timeouts (Rob Evers) [655119]
  - [scsi] lpfc: cleanup mbox cmds in mboxq_cmpl if CVL rcvd (Rob Evers) [655119]
  - [misc] posix-cpu-timers: workaround for mt exec problems (Oleg Nesterov) [656266]
  - [fs] setup_arg_pages: diagnose excessive argument size (Oleg Nesterov) [645227]
  - [net] bnx2x: force interrupt mode for iscsi unset mac (Michal Schmidt) [655885]
  - [scsi] bnx2i: allow to abort connect if request times out (Mike Christie) [653991]
  - [scsi] bnx2i: fix remote TCP RST handling for 570X (1g) (Mike Christie) [653991]
  - [scsi] bnx2i: fix a cid leak issue for 5771X (10g) (Mike Christie) [653991]
  - [scsi] bnx2i: fix endian bug in TMF LUN cmd send (Mike Christie) [653991]
  - [misc] prevent divide by 0 in the kernel during boot (Larry Woodman) [508140]
  - [net] filter: make sure filters don't read uninit memory (Jiri Pirko) [651703] {CVE-2010-4158}
  - [net] inet_diag: make sure we run audited bytecode (Jiri Pirko) [651267]
  - [net] limit sendto/recvfrom/iovec total length to INT_MAX (Jiri Pirko) [645872] {CVE-2010-3859}
  - [bluetooth] hci_ldisc: fix missing NULL check (Jarod Wilson) [655666]
  - [net] be2net: avoid firmware update if interface not open (Ivan Vecera) [651948]
  - [ipc] shm: fix information leak to userland (Danny Feng) [648687] {CVE-2010-4072}
  - [ipc] initialize struct memory to 0 for compat functions (Danny Feng) [648693] {CVE-2010-4073}
  - [net] netxen: don't use reset_devices, it may go away (Chad Dupuis) [643254]
  - [net] netxen: fix kdump (Chad Dupuis) [643254]
  - [net] qlcnic: avoid reset_devices, it may become obsolete (Chad Dupuis) [656008]
  - [net] qlcnic: fix for kdump (Chad Dupuis) [656008]
  - [pci] block on access to temporarily unavailable device (Chad Dupuis) [656008]
  - [serial] serial_core: clean data before filling it (Mauro Carvalho Chehab) [648701] {CVE-2010-4075}
  - [edac] i7core_edac: return -ENODEV if dev already probed (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: properly terminate pci_dev_table (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix PCI refcounting on reloads (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix refcount error at PCI devices (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: safe to unregister mci when mci NULL (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix an oops at i7core probe (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove unused member in i7core_pvt (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove unused arg in get_dimm_config (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: reduce args of i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: use saved pointers (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: check probe counter in i7core_remove (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: call pci_dev_put on alloc failure (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix error path of i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix line order in i7core_register_mci (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: always do get/put for all devices (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: ensure edac pci handler release (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: introduce free_i7core_dev (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: introduce alloc_i7core_dev (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: reduce args of i7core_get_onedevice (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: fix the logic in i7core_remove (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: don't do legacy PCI probe by default (Mauro Carvalho Chehab) [651869]
  - [edac] edac_core: print debug messages at release calls (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: remove PCI devices from devices list (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: MCE NMI handling should stop first (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: improve debug register/remove errors (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: move #if PAGE_SHIFT to edac_core.h (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: terminate the group of udimm counters (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: mark const static vars as such (Mauro Carvalho Chehab) [651869]
  - [edac] i7core_edac: move static vars to the top of file (Mauro Carvalho Chehab) [651869]
  - [virt] xen: add bounds req-process loop in blkback/blktap (Laszlo Ersek) [654546] {CVE-2010-4247}
  - [virt] xen: don't leak dev refs on bad xenbus transitions (Laszlo Ersek) [635999] {CVE-2010-3699}
  - [mm] fix possible integer overflow in mm/fremap.c (Larry Woodman) [637047]
  - [misc] futex: replace LOCK_PREFIX in futex.h (Jiri Pirko) [633176] {CVE-2010-3086}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-233.el5]
changelog:
  - [scsi] mpt2sas: use sas device list for enclosure id (Tomas Henzl) [652284]
  - [scsi] ipr: fix mailbox register definition and add delay (Steve Best) [654446]
  - [scsi] ipr: fix lun assignment and comparison (Steve Best) [654446]
  - [powerpc] add AT_BASE_PLATFORM to Aux Vector and power7 (Steve Best) [652279]
  - [infiniband] ehea: use shca_list_lock spinlock (Steve Best) [613797]
  - [powerpc] kdump: CPUs assume context of oopsing CPU (Steve Best) [509792]
  - [scsi] lpfc: Update version for 8.2.0.87 driver release (Rob Evers) [649489]
  - [scsi] lpfc: add handling SLI4 unsolicted ELS RTV (Rob Evers) [649489]
  - [scsi] lpfc: add handling ECHO response support (Rob Evers) [649489]
  - [scsi] lpfc: add handling of SLI4 unsolicted ELS (Rob Evers) [649489]
  - [scsi] lpfc: fix locking for security mailbox commands (Rob Evers) [649489]
  - [scsi] lpfc: abort I/Os and wait on XRI in SLI4 unload (Rob Evers) [649489]
  - [scsi] lpfc: handle devloss timeout in FIP engine (Rob Evers) [649489]
  - [scsi] lpfc: fix crashes on NULL pnode dereference (Rob Evers) [649489]
  - [net] cnic: Add cnic_free_uio (Mike Christie) [651287]
  - [net] cnic: Add cnic_uio_dev struct (Mike Christie) [651287]
  - [net] cnic: Add cnic_free_uio (Mike Christie) [651287]
  - [net] cnic: Fine-tune ring init code (Mike Christie) [651287]
  - [misc] fix dirty_bytes sysctl name (Larry Woodman) [635782]
  - [fs] procfs: acquire inode mutex around llseek operation (Lachlan McIlroy) [644726]
  - [virt] netfront: default to copying instead of flipping (Laszlo Ersek) [653262]
  - [virt] netback: don't balloon up for copying receivers (Laszlo Ersek) [653501]
  - [net] rds: fix rds_iovec page count overflow (Jiri Pirko) [647422]
  - [net] virtio_net: add link status handling (Jason Wang) [649573]
  - [net] be2net: Update be2net to version 2.102.512r (Ivan Vecera) [647259]
  - [char] watchdog: another LPC Controller ID for Patsburg (David Milburn) [570868]
  - [misc] another LPC Controller ID for Intel Patsburg PCH (David Milburn) [570868]
  - [i2c] i2c-i801: Add Intel Patsburg device ID (David Milburn) [570868]
  - [misc] pci: update Intel Patsburg defines (David Milburn) [570868]
  - [misc] x86/PCI irq and pci_ids for Intel Patsburg Devices (David Milburn) [570868]
  - [sound] ALSA HD Audio for Intel Patsburg DeviceIDs (David Milburn) [570868]
  - [char] watchdog: TCO Watchdog for Intel Patsburg Devices (David Milburn) [570868]
  - [ata] ahci: AHCI and RAID mode for Intel Patsburg Devices (David Milburn) [570868]
  - [ata] ata_piix: IDE Mode SATA for Intel Patsburg Devices (David Milburn) [570868]
  - [net] fix deadlock in sock_queue_rcv_skb (Danny Feng) [652537]
  - [scsi] qla2xxx: check null fcport in _queuecommands (Chad Dupuis) [644863]
  - [net] qlcnic: Fix missing error codes (Chad Dupuis) [637194]
  - [usb] wacom: add support for Cintiq 21UX2 (Aristeu Rozanski) [652731]
  - [xen] hvm: add HVMOP_get_time hypercall (Paolo Bonzini) [638082]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-232.el5]
changelog:
  - [scsi] mpt2sas: use correct pci_resource_flag for compare (Tomas Henzl) [649885]
  - [sound] rme9652: prevent reading uninitialized stack mem (Stanislaw Gruszka) [648709 648714] {CVE-2010-4080 CVE-2010-4081}
  - [net] packet: fix information leak to userland (Jiri Pirko) [649898]
  - [ipc] sys_semctl: fix kernel stack leakage (Danny Feng) [648722] {CVE-2010-4083}
  - [misc] kernel: remove yield from stop_machine paths (Oleg Nesterov) [634454]
  - [fs] dlm: reduce cond_resched during send (David Teigland) [604139]
  - [fs] dlm: use TCP_NODELAY (David Teigland) [604139]
  - [fs] nfs: fix a referral error Oops (Steve Dickson) [556886]
  - [fs] gfs2: fix race in unlinked inode deallocation (Robert S Peterson) [643165]
  - [scsi] retry on DID_REQUEUE errors (Mike Christie) [627836]
  - [net] sctp: do not reset packet during sctp_packet_config (Jiri Pirko) [637867]
  - [net] bnx2: add AER support (John Feeney) [617024]
  - [net] bonding: no lock on copy/clear VLAN list on slave (Andy Gospodarek) [627974]
  - [scsi] gdth: prevent integer overflow in ioc_general (Frantisek Hrbata) [651176]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-231.el5]
changelog:
  - [scsi] scsi_dh_alua: remove IBM Power Virtual SCSI ALUA (Steve Best) [567292]
  - [fs] gfs2: flock (LOCK_EX|LOCK_NB) blocks (Robert S Peterson) [648602]
  - [scsi] lpfc: update version for 8.2.0.86 driver release (Rob Evers) [645881]
  - [scsi] lpfc: fix race sending FDISC to un-init VPI (Rob Evers) [645881]
  - [scsi] lpfc: fix mailbox handling for UNREG_RPI_ALL case (Rob Evers) [645881]
  - [kernel] add stop_machine barrier to fix lock contention (Prarit Bhargava) [634454]
  - [scsi] bnx2i: fix ip address formatting and oops (Mike Christie) [646708]
  - [scsi] be2iscsi: remove premature free of cid (Mike Christie) [640029]
  - [fs] proc: make proc pid limits world readable (Jiri Olsa) [611535]
  - [ide] atiixp: fix locking hang in ide layer ATIIXP driver (James Leddy) [586482]
  - [security] only check mmap_min_addr perms for write (Eric Paris) [623519]
  - [ata] sata_sil24: add DID for another adaptec flavor (David Milburn) [640586]
  - [s390] cio: prevent panic in I/O cancel function (Hendrik Brueckner) [647807]
  - [s390] cio: prevent panic after unexpected I/O interrupt (Hendrik Brueckner) [647502]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-230.el5]
changelog:
  - [fs] nfs: fix regression in NFS Direct I/O path (Steve Dickson) [647297]
  - [fs] nfs: allow different protocol mounts to same server (Steve Dickson) [460659]
  - [scsi] lpfc: update version for 8.2.0.85 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix a BUG_ON in lpfc_abort_handler (Rob Evers) [639028]
  - [scsi] lpfc: use pci reset function on driver unload (Rob Evers) [639028]
  - [scsi] lpfc: replace some spin_lock_irqs w/spin_locks (Rob Evers) [639028]
  - [scsi] lpfc: fail io w/lost frame and target check cond (Rob Evers) [639028]
  - [scsi] lpfc: fix abort WQEs for FIP frames (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.84 driver release (Rob Evers) [639028]
  - [scsi] lpfc: unreg all rpi mbox command before unreg vpi (Rob Evers) [639028]
  - [scsi] lpfc: make all error values negative (Rob Evers) [639028]
  - [scsi] lpfc: remove duplicate code from lpfc_els_retry (Rob Evers) [639028]
  - [scsi] lpfc: fix circular spinlock dep w/scsi midlayer (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.83 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix FLOGI issue with McData4700 FC switch (Rob Evers) [639028]
  - [scsi] lpfc: fix possible roundrobin failover failure (Rob Evers) [639028]
  - [scsi] lpfc: fix unregister of unused FCF on timeout (Rob Evers) [639028]
  - [scsi] lpfc: fix heartbeat timeout during pause test (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.82 driver release (Rob Evers) [639028]
  - [scsi] lpfc: fix lpfc_els_retry delay/retry for PLOGI (Rob Evers) [639028]
  - [scsi] lpfc: streamline some spin locks (Rob Evers) [639028]
  - [scsi] lpfc: fix lpfc_initial_flogi return on failure (Rob Evers) [639028]
  - [scsi] lpfc: fix stray state update issue with new FCF (Rob Evers) [639028]
  - [scsi] lpfc: treat FCF prop with different index as error (Rob Evers) [639028]
  - [scsi] lpfc: fix misc auth issues on EmulexSecure FC HBA (Rob Evers) [639028]
  - [scsi] lpfc: update version for 8.2.0.81 driver release (Rob Evers) [639028]
  - [scsi] lpfc: move unload flag earlier in vport delete (Rob Evers) [639028]
  - [scsi] lpfc: fix IOCB leak on FDISC completion (Rob Evers) [639028]
  - [scsi] lpfc: fix possible crash on non-SLI4 hba (Rob Evers) [639028]
  - [scsi] mpt2sas: fix panic w/direct attached SEP (Jarod Wilson) [641086]
  - [redhat] spec: clean up rpmbuild kabideps detritus (Jarod Wilson) [644129]
  - [net] bnx2: Increase max rx ring size from 1K to 2K (Andy Gospodarek) [640026]
  - [net] bnx2: fixup broken NAPI accounting (Andy Gospodarek) [640026]
  - [s390] qeth: portno 1 support for OSM-device insufficient (Hendrik Brueckner) [644008]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-229.el5]
changelog:
  - [pci] include DL580 G7 in bfsort whitelist (Tony Camuso) [644879]
  - [net] igb: fix TX hang when loading igb with max_vfs > 7 (Stefan Assmann) [645284]
  - [virt] fix timekeeping_use_tsc check in init_tsc_timer (Prarit Bhargava) [643926]
  - [net] bonding: support netconsole over bonded link (Neil Horman) [235343]
  - [virt] xen: increase txqueuelen of netback vif devices (Miroslav Rezanina) [539626]
  - [sound] core: prevent heap corruption in snd_ctl_new (Jerome Marchand) [638484] {CVE-2010-3442}
  - [net] updated drivers need version string updates too (Andy Gospodarek) [635027]
  - [misc] softlockup: increase timeout to 60 seconds (Don Zickus) [643707]
  - [virt] xen: fix vdso failure under xen pv environment (Danny Feng) [644860]
  - [scsi] qla2xxx: fix zero test on array in ql_fc_loopback (Chad Dupuis) [644136]
  - [usb] net/catc: change NIC's TX_MAX_BURST, fixes probe (Bob Picco) [637826]
  - [virt] console: don't block guest if host doesn't read (Amit Shah) [644735]
  - [media] video: remove compat code for VIDIOCSMICROCODE (Mauro Carvalho Chehab) [642471] {CVE-2010-2963}
  - [xen] vtd: let IOMMU use another IRQ without conflict (Don Dugger) [575790]
  - [net] bonding: correctly process non-linear skbs (Andy Gospodarek) [619070]
  - [net] rds: fix local privilege escalation (Eugene Teo) [642898] {CVE-2010-3904}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-228.el5]
changelog:
  - [char] tpm: pay attention to IRQ info from PNP in tpm_tis (Stefan Assmann) [636760]
  - [misc] cpufreq: add missing cpufreq_cpu_put (Prarit Bhargava) [643080]
  - [md] fix softlockup issue waiting for resync to finish (James Paradis) [573106]
  - [s390] dasd_eckd: remove PSF order/suborder ioctl check (John Feeney) [565973]
  - [fs] xfs: fix speculative allocation beyond eof (Dave Chinner) [638753]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-227.el5]
changelog:
  - [net] ixgbe: add option to control interrupt mode (Andy Gospodarek) [571495]
  - [md] raid0: fix data corruption on 32-bit w/large storage (Stanislaw Gruszka) [573185]
  - [scsi] fix write buffer length in scsi_req_map_sg (Steve Best) [637235]
  - [scsi] ipr: back out isr optimization changes (Steve Best) [634213]
  - [scsi] ipr: fix rsrc addr format and add attr for dev ID (Steve Best) [634213]
  - [fs] jbd2: properly align sized slab caches (Eric Sandeen) [638961]
  - [fs] ext4: don't scan/accumulate too many pages (Eric Sandeen) [572930]
  - [fs] gfs2: fix fatal filesystem consistency error (Robert S Peterson) [529914]
  - [scsi] lpfc: update version for 8.2.0.80 driver release (Rob Evers) [619917]
  - [scsi] lpfc: add Security Crypto support to CONFIG_PORT (Rob Evers) [619917]
  - [scsi] lpfc: remove unused variables (Rob Evers) [619917]
  - [scsi] lpfc: log msg 0318 is a warning, not an error (Rob Evers) [619917]
  - [scsi] lpfc: fix bug w/cable swap and non-empty nodelist (Rob Evers) [619917]
  - [scsi] lpfc: fix a failure to roundrobin on all FCFs (Rob Evers) [619917]
  - [scsi] lpfc: fix heartbeat timeout during fabric reconfig (Rob Evers) [619917]
  - [scsi] lpfc: update version for 8.2.0.79 driver release (Rob Evers) [619917]
  - [scsi] lpfc: fix a Clear Virtual Link recovery failure (Rob Evers) [619917]
  - [scsi] lpfc: clear VFI_REGISTERED flag after UNREG_VFI (Rob Evers) [619917]
  - [scsi] lpfc: ignore failure of REG_VPI mbox w/UPD bit set (Rob Evers) [619917]
  - [scsi] lpfc: fix ioctl using inactive ndlp for ct resp (Rob Evers) [619917]
  - [scsi] lpfc: fix bug w/ndlp not activated post-cable swap (Rob Evers) [619917]
  - [scsi] lpfc: add support UPD bit of REG_VPI mailbox cmd (Rob Evers) [619917]
  - [scsi] lpfc: fix driver discovery issue after link bounce (Rob Evers) [619917]
  - [scsi] lpfc: fix VLAN ID 0xFFF set to reg_fcfi mbox cmd (Rob Evers) [619917]
  - [scsi] lpfc: update version for 8.2.0.78 driver release (Rob Evers) [619917]
  - [scsi] lpfc: fix race condition causing >1 FLOGI commands (Rob Evers) [619917]
  - [scsi] lpfc: enhance round-robin FCF failover algorithm (Rob Evers) [619917]
  - [scsi] lpfc: clear Ignore Reg Login when purging mailbox (Rob Evers) [619917]
  - [scsi] lpfc: fix for ELS commands stuck on txq (Rob Evers) [619917]
  - [scsi] lpfc: added target queuedepth module parameter (Rob Evers) [619917]
  - [scsi] lpfc: fix RoundRobin FCF failover issue (Rob Evers) [619917]
  - [scsi] re-enable transistions from OFFLINE to RUNNING (Mike Christie) [641193]
  - [edac] i7300_edac: properly init per-csrow memory size (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: better initialize page counts (Mauro Carvalho Chehab) [487428]
  - [redhat] configs: enable edac debugging debug kernels (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: backport driver to RHEL5.6 codebase (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add appropriate MAINTAINERS info (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: coding style cleanups (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: improve inline comments/documentation (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: reorganize file contents (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: properly detect channel on CE errors (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: enrich FBD info for corrected errors (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: enrich FBD error info for fatal errors (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: pre-allocate buffer for error messages (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: fix MTR x4/x8 detection logic (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: make debug messages consistent (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: remove stale get_error_info logic (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add error registers cleanup support (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add support for reporting FBD errors (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: properly detect error correction type (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: detect if device is in single mode (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add detection of enhanced scrub mode (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: clear error bit after reading (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add error detection for global errors (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: better PCI device names (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: Add FIXME about error correction type (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: add global error registers (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: display info if ECC is enabled or not (Mauro Carvalho Chehab) [487428]
  - [edac] i7300_edac: new driver for Intel i7300 chipset (Mauro Carvalho Chehab) [487428]
  - [mm] kswapd: don't get stuck in D state w/fragmented mem (Larry Woodman) [609668]
  - [misc] x86_64: fix hang at Booting processor 1/8 APIC (John Villalovos) [639851]
  - [misc] oprofile: add backtraces for compat mode processes (Jiri Olsa) [622024]
  - [net] tg3: re-enable 5717 B0 support (John Feeney) [634320]
  - [net] tg3: fix 5717/57765/5719 memory leak (John Feeney) [631963]
  - [net] tg3: display FW version, handle FW events correctly (John Feeney) [634325]
  - [net] bnx2: improve tx fast path performance (John Feeney) [632057]
  - [net] enic: update to upstream version 1.4.1.2 (Andy Gospodarek) [568111]
  - [net] ixgbe: fix 82598 link issue and panic w/shared irq (Andy Gospodarek) [637331]
  - [net] mlx4: bump max log_mtts_per_seg memory reservation (Jay Fenlason) [636198]
  - [usb] net: add support for CDC EEM (Don Zickus) [572519]
  - [scsi] qla2xxx: clear post-uncorrectable non-fatal errors (Chad Dupuis) [572258]
  - [net] qlcnic: fix poll implementation (Chad Dupuis) [625084]
  - [net] qlcnic: TSO feature added for vlan devices (Chad Dupuis) [625084]
  - [net] qlcnic: fix diag resource allocation (Chad Dupuis) [625084]
  - [net] qlcnic: fix loopback test (Chad Dupuis) [625084]
  - [net] qlcnic: fix bandwidth check (Chad Dupuis) [625084]
  - [net] qlcnic: fix gro support (Chad Dupuis) [625084]
  - [s390] kernel: fix fork vs /proc/stat race (Hendrik Brueckner) [627298]
  - [misc] amd_iommu: fix kdump OOM issue seen with iommu=pt (Bhavna Sarathy) [627663]
  - [fs] execve: fix interactivity and response to SIGKILL (Dave Anderson) [629176]
  - [virt] virtio_console: fix userspace NULL buffer submits (Amit Shah) [636046]
  - [virt] virtio_console: fix poll blocking when data ready (Amit Shah) [636020]
  - [virt] virtio_console: send SIGIO as needed for host evts (Amit Shah) [636053]
  - [virt] virtio_console: make hot-unplug safe (Amit Shah) [628828]
  - [net] virtio_net: defer skb allocation in receive path (Anthony Liguori) [565560]
  - [misc] increase logbuf size to 512K (Don Zickus) [563535]
  - [xen] hvm: correct accuracy of pmtimer (Andrew Jones) [633028]
  - [xen] fix guest crash on non-EPT machine may crash host (Paolo Bonzini) [621430] {CVE-2010-2938}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-224.el5]
changelog:
  - [scsi] mpt2sas: recover from injected PCIe bus errors (Tomas Henzl) [568281]
  - [message] fusion: remove unnecessary printk flooding logs (Tomas Henzl) [629081]
  - [scsi] scsi_dh_alua: handle transitioning state correctly (Mike Snitzer) [619361]
  - [scsi] lpfc: fix ioctl crash in lpfc_nlp_put (Rob Evers) [625841]
  - [net] trace: fix sk_buff typo in network tracepoints (Neil Horman) [568614]
  - [net] sched: fix info leak in traffic policing (Neil Horman) [636392]
  - [md] dm: fix deadlock with fsync vs. resize in lvm (Mikulas Patocka) [624068]
  - [misc] amd_iommu: fix slab corruption with iommu enabled (Larry Woodman) [530619]
  - [mm] add dirty_background_bytes and dirty_bytes sysctls (Larry Woodman) [635782]
  - [scsi] add scsi_dispatch_* tracepoints (Jiri Olsa) [568290]
  - [misc] oprofile: support Intel CPU Family 6, Model 22, 29 (Jiri Olsa) [493047]
  - [fs] aio: fix flush_workqueue deadlock (Jeff Moyer) [546700]
  - [net] be2net: use generated MAC addr for VFs, fix BUG_ON (Ivan Vecera) [630680]
  - [fs] sysfs: add labeling support for sysfs (Eric Paris) [582374]
  - [selinux] inode_*secctx hooks to access security ctx info (Eric Paris) [582374]
  - [fs] xattr: refactor vfs_setxattr for SELinux hook use (Eric Paris) [582374]
  - [redhat] configs: compile TCG modules for kernel-xen (Andrew Jones) [636100]
  - [net] netxen: fix poll implementation (Chad Dupuis) [625079]
  - [net] netxen: fix a race in netxen_nic_get_stats() (Chad Dupuis) [625079]
  - [net] netxen: update version 4.0.74 (Chad Dupuis) [625079]
  - [net] netxen: fix feature setting for vlan devices (Chad Dupuis) [625079]
  - [net] netxen: fix tx csum setting (Chad Dupuis) [625079]
  - [scsi] qla2xxx: recover on mmio_enable function for 82XX (Chad Dupuis) [613134]
  - [scsi] qla2xxx: add AER support for 82XX (Chad Dupuis) [613134]
  - [misc] amd_iommu: change default to passthrough mode (Bhavna Sarathy) [628018]
  - [misc] amd_iommu: add passthrough mode support (Bhavna Sarathy) [561127]
  - [misc] amd: don't use mwait_idle on AMD CPUs (Bhavna Sarathy) [610199]
  - [misc] amd: show L3 cache info for all CPU families (Bhavna Sarathy) [610199]
  - [misc] amd: unify L3 cache index disable checking (Bhavna Sarathy) [610199]
  - [misc] amd: avoid dupe sysfs bits for thresholding banks (Bhavna Sarathy) [610199]
  - [misc] amd: remove superfluous CPU family/model check (Bhavna Sarathy) [610199]
  - [misc] fix race in pid generation causing immediate reuse (Dave Anderson) [634850]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-223.el5]
changelog:
  - [redhat] kabi: add net symbols for RHEL5.6 (Jon Masters) [547689 555708 558999 568558 569606 613193]
  - [redhat] kabi: add Block and SCSI symbols for RHEL5.6 (Jon Masters) [547689 558999 566767 569606 574557]
  - [redhat] kabi: add PCI kernel symbols for RHEL5.6 (Jon Masters) [547689 555708 566767 568558 569606 597143 613193]
  - [redhat] kabi: add core kernel symbols for RHEL5.6 (Jon Masters) [545218 562242]
  - [net] ipvs: add one-packet scheduler (Thomas Graf) [578836]
  - [pci] fix pci_mmcfg_init making some memory uncacheable (Shyam Iyer) [581933]
  - [virt] xen: fix crashing of x86 hvm guest on x86_64 (Radim Krcmar) [605697]
  - [scsi] fix disk spinup for shorter path restore times (Rob Evers) [608109]
  - [scsi] aacraid: fix file system falsely going read-only (Rob Evers) [523920]
  - [misc] x86: fix cpuid_level on Intel pre-model 13 cpus (Prarit Bhargava) [606851]
  - [net] cxgb3: alt buffer freeing strategy when xen dom0 (Paolo Bonzini) [488882]
  - [net] bonding: enable output slave selection (Neil Horman) [516289]
  - [md] dm-raid1: fix data lost at mirror log failure (Mikulas Patocka) [555197]
  - [md] kcopyd: dm snapshot performance improvement (Mikulas Patocka) [466088]
  - [scsi] increase sync cache timeout (Mike Christie) [592322]
  - [scsi] log msg when getting Unit Attention (Mike Christie) [585431]
  - [virt] xen: add dummy mwait for xen to make it compile (Luming Yu) [573514]
  - [x86_64] use apic as main timer if non-stop-apic timer (Luming Yu) [573514]
  - [acpi] cpu: use MWAIT for C-state (Luming Yu) [573514]
  - [net] ipv4/defrag: check socket type before reference (Jiri Olsa) [632266]
  - [net] ipv4: prevent chained skb destined to UFO device (Jiri Olsa) [633450]
  - [block] cfq: no merges for queues w/no process references (Jeff Moyer) [605265]
  - [fs] aio: check for multiplication overflow in io_submit (Jeff Moyer) [629449] {CVE-2010-3067}
  - [misc] make compat_alloc_user_space incorporate access_ok (Don Howard) [634464] {CVE-2010-3081}
  - [fs] xfs: prevent reading uninitialized stack memory (Dave Chinner) [630807] {CVE-2010-3078}
  - [fs] aio: fix cleanup in io_submit_one (Jeff Moyer) [631721] {CVE-2010-3066}


author: Jarod Wilson <jarod@redhat.com> [2.6.18-222.el5]
changelog:
  - [cpufreq] powernow-k8: fix per core frequency control (Bhavna Sarathy) [502397]
  - [misc] uid/gid: fix integer overflow in groups_search (Jerome Marchand) [629626]
  - [virt] xen: remove dead code (Paolo Bonzini) [507846]
  - [virt] xen: don't give up ballooning under mem pressure (Paolo Bonzini) [507846]
  - [net] ipv4: fix oops in writing to forwarding sysctl (Neil Horman) [629638]
  - [net] trace: backport some networking tracepoints (Neil Horman) [568614]
  - [misc] rename topology_*_cpumask back to *_siblings (Michal Schmidt) [633388]
  - [scsi] 3w_sas: add new 3ware SAS driver (Tomas Henzl) [572011]
  - [scsi] 3w-9xxx: update to 2.26.08.007-2.6.18RH (Tomas Henzl) [572004]
  - [scsi] megaraid: fix suspend function (Tomas Henzl) [630927]
  - [net] ipv6: add modes to do RA/RS when in forwarding mode (Thomas Graf) [614064]
  - [fs] nfsv4: fix bug when server returns NFS4ERR_RESOURCE (Steve Dickson) [620502]
  - [fs] nfsv4: ensure lockowners are labelled correctly (Steve Dickson) [620502]
  - [fs] nfsv4: add support for RELEASE_LOCKOWNER operation (Steve Dickson) [620502]
  - [fs] nfsv4: clean up for lockowner XDR encoding (Steve Dickson) [620502]
  - [fs] nfsv4: ensure we track lock state in r/w requests (Steve Dickson) [620502]
  - [scsi] qla4xxx: add PCIe AER support (Chad Dupuis) [624710]
  - [scsi] qla4xxx: update version to 5.02.03.00.05.06-d1 (Chad Dupuis) [623675]
  - [scsi] qla4xxx: resolve name space error with qla2xxx (Chad Dupuis) [623675]
  - [net] qlcnic: add AER support and miscellaneous fixes (Chad Dupuis) [614281]
  - [net] qlcnic: add NIC partitioning and other misc fixes (Chad Dupuis) [614281]
  - [net] qlcnic: misc upstream fixes for RHEL5.6 (Chad Dupuis) [614281]
  - [net] ipv4: fix buffer overflow in icmpmsg_put (Frantisek Hrbata) [601391]
  - [proc] allow access to /proc/$PID/fd after setuid (Danny Feng) [617707]
  - [fs] xfs: fix missing untrusted inode lookup tag (Dave Chinner) [607032]
  - [wireless] fixes from 2.6.32.18 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.17 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.16 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.14 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.13 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.12 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.11 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.10 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.9 (Stanislaw Gruszka) [621105]
  - [wireless] fixes from 2.6.32.8 (Stanislaw Gruszka) [621105]
  - [xen] emulate task switching (Paolo Bonzini) [625903]
  - [xen] introduce hvm_set_cr3 (Paolo Bonzini) [625903]
  - [xen] introduce hvm_virtual_to_linear_addr (Paolo Bonzini) [625903]
  - [xen] introduce hvm_set_segment_register (Paolo Bonzini) [625903]
  - [xen] hvm: big cleanups and fixes to event deliver logic (Paolo Bonzini) [625903]
  - [xen] vmx: simplify event-injection logic (Paolo Bonzini) [625903]
  - [xen] xm trigger NMI support for HVM guests (Paolo Bonzini) [625902]
  - [xen] virtual NMI support (Paolo Bonzini) [625902]
  - [xen] emulate injection of guest NMI (Paolo Bonzini) [625902]
  - [xen] introduce get_isa_irq_vector and is_isa_irq_masked (Paolo Bonzini) [625902]
  - [xen] hvm: fix UP suspend/resume/migration w/PV drivers (Miroslav Rezanina) [629773]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-221.el5]
changelog:
  - [acpi] check _PPC state on cpufreq start (Matthew Garrett) [581037]
  - [fs] aio: bump i_count instead of using igrab (Jeff Moyer) [626963]
  - [redhat] don't generate kABI deps when building w/o kABI (Jon Masters) [456765]
  - [watchdog] support for iTCO on Ibex Peak and Cougar Point (John Villalovos) [534152]
  - [edac] amd64_edac: whitespace cleanups (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: minor formatting fix (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: fix operator precedence error (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: fix syndrome calculation on K8 (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: simplify ECC override handling (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: do not falsely trigger kerneloops (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: restrict PCI config space access (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: fix forcing module load/unload (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: fix driver instance freeing (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: fix k8 chip select reporting (Bhavna Sarathy) [568576]
  - [edac] amd64_edac: add leaner syndrome decoding algorithm (Bhavna Sarathy) [568576]
  - [scsi] bnx2i: link hba and cnic device before device reg (Mike Christie) [578005]
  - [scsi] bnx2i: make fw use statsn field to build header (Mike Christie) [578005]
  - [net] cnic: select bug fixes from upstream for RHEL5.6 (Mike Christie) [595548 619767]
  - [scsi] bnx2i: update version to bnx2i-2.1.3 (Mike Christie) [568606]
  - [scsi] bnx2i: add chip cleanup for remove module path (Mike Christie) [568606]
  - [scsi] bnx2i: rebind CFC cleanup to cm_abort/close comp (Mike Christie) [568606]
  - [scsi] bnx2i: add support for additional TMFs (Mike Christie) [568606]
  - [scsi] bnx2i: fix protocol violation on nopout responses (Mike Christie) [568606]
  - [scsi] bnx2i: fix response panic on unsolicited NOP-In (Mike Christie) [568606]
  - [scsi] bnx2i: fix bugs in handling of unsolicited NOP-Ins (Mike Christie) [568606]
  - [scsi] bnx2i: add host param ISCSI_HOST_PARAM_IPADDRESS (Mike Christie) [568606]
  - [scsi] bnx2i: fix TCP graceful termination initiation (Mike Christie) [568606]
  - [scsi] bnx2i: fine tune misc destroy timeout values (Mike Christie) [568606]
  - [scsi] bnx2i: optimize bnx2i_stop connection clean up (Mike Christie) [568606]
  - [scsi] bnx2i: create active linklist holding endpoints (Mike Christie) [568606]
  - [scsi] bnx2i: split hardware cleanup from ep_disconnect (Mike Christie) [568606]
  - [fs] dlm: fix try 1cb failure, part 2 (Abhijith Das) [504188]
  - [fs] dlm: no node callback when try 1cb lock req fails (David Teigland) [504188]
  - [misc] crypto: add Intel x86_64 hardware CRC32 support (Prarit Bhargava) [626018]
  - [net] bnx2: update to v2.0.8+ with new 5709 firmware j15 (John Feeney) [568601]
  - [net] tg3: update to 3.108+ and add 5718 B0, 5719 support (John Feeney) [567462]
  - [misc] move dev_name to device.h (John Feeney) [568551]
  - [misc] add WARN_ONCE macro (John Feeney) [568551]
  - [dma_v3] update I/O AT and DCA drivers (John Feeney) [568551]
  - [net] forcedeth: update to latest upstream for RHEL5.6 (Ivan Vecera) [628831]
  - [net] e1000e: update to upstream version 1.2.7-k2 (Andy Gospodarek) [566021]
  - [net] qla2xxx: fix display of link down state (Chad Dupuis) [627612]
  - [scsi] qla2xxx: rom lock recover if fw hangs holding lock (Chad Dupuis) [619814]
  - [scsi] qla2xxx: update AER support, do early abort cmds (Chad Dupuis) [619814]
  - [scsi] qla2xxx: add IS_QLA82XX check in update_fw_options (Chad Dupuis) [619814]
  - [scsi] qla2xxx: cover UNDERRUN case where SCSI status set (Chad Dupuis) [619814]
  - [scsi] qla2xxx: fix set fw hung and complete waiting mbx (Chad Dupuis) [619814]
  - [scsi] qla2xxx: fix seconds_since_last_heartbeat reset (Chad Dupuis) [619814]
  - [scsi] qla2xxx: correct extended sense-data handling (Chad Dupuis) [619814]
  - [scsi] qla2xxx: don't {s,g}et port MBC if invalid port id (Chad Dupuis) [619814]
  - [scsi] qla2xxx: stop firmware before doing init firmware (Chad Dupuis) [619814]
  - [xen] oprofile: force use of architectural perfmon (Don Dugger) [538564]
  - [xen] oprofile: support Intel's arch perfmon registers (Don Dugger) [538564]
  - [xen] oprofile: add support for Core i7 and Atom (Don Dugger) [538564]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-220.el5]
changelog:
  - [block] cciss: version string to 3.6.22.RH1 (Tomas Henzl) [568830]
  - [block] cciss: bus_unregister_once not once per hba (Tomas Henzl) [568830]
  - [block] cciss: rename cciss_sector_size (Tomas Henzl) [568830]
  - [block] cciss: make log_unit_to_scsi3addr an inline (Tomas Henzl) [568830]
  - [block] cciss: fix enxio weirdness (Tomas Henzl) [568830]
  - [block] cciss: reorder functions (Tomas Henzl) [568830]
  - [block] cciss: fix raid level sysfs permissions (Tomas Henzl) [568830]
  - [block] cciss: make device attributes static (Tomas Henzl) [568830]
  - [block] cciss: make cciss_seq_show handle drv_array holes (Tomas Henzl) [568830]
  - [block] cciss: add via_ioctl param to rebuild_lun_table (Tomas Henzl) [568830]
  - [block] cciss: add support for multi-lun tape devices (Tomas Henzl) [568830]
  - [block] cciss: notify scsi midlayer of device changes (Tomas Henzl) [568830]
  - [block] cciss: fix scatter-gather on scsi side (Tomas Henzl) [568830]
  - [block] cciss: add more commands for tapes (Tomas Henzl) [568830]
  - [block] cciss: factor out scsi dma code (Tomas Henzl) [568830]
  - [block] cciss: eliminate unnecessary pointer use (Tomas Henzl) [568830]
  - [block] cciss: don't use void pointer for hba (Tomas Henzl) [568830]
  - [block] cciss: detect bad alignment (Tomas Henzl) [568830]
  - [block] cciss: factor out sg chain block mapping code (Tomas Henzl) [568830]
  - [block] cciss: fix DMA direction kludge (Tomas Henzl) [568830]
  - [block] cciss: simplify scatter gather code (Tomas Henzl) [568830]
  - [block] cciss: factor out scatter gather alloc and free (Tomas Henzl) [568830]
  - [block] cciss: enhanced scatter-gather support (Tomas Henzl) [568830]
  - [block] cciss: remove the scan thread (Tomas Henzl) [568830]
  - [block] cciss: fix scsi status typo (Tomas Henzl) [568830]
  - [block] cciss: remove sendcmd (Tomas Henzl) [568830]
  - [block] cciss: clean up code in cciss_shutdown (Tomas Henzl) [568830]
  - [block] cciss: retry driver cmds with unit attention cond (Tomas Henzl) [568830]
  - [block] cciss: no pci_release_regions on regions not held (Tomas Henzl) [568830]
  - [block] cciss: fix memory leak in cciss_init_one (Tomas Henzl) [568830]
  - [block] cciss: dynamically allocate drive info struct (Tomas Henzl) [568830]
  - [block] cciss: fix raid label related magic number (Tomas Henzl) [568830]
  - [block] cciss: no check busy initializing in cciss open (Tomas Henzl) [568830]
  - [block] cciss: add usage_count attribute to logical drive (Tomas Henzl) [568830]
  - [block] cciss: add raid_level attribute to logical drives (Tomas Henzl) [568830]
  - [block] cciss: add lunid attribute to log drives in /sys (Tomas Henzl) [568830]
  - [block] cciss: dont call putdisk excessively (Tomas Henzl) [568830]
  - [block] cciss: zero out drive info on removal (Tomas Henzl) [568830]
  - [block] cciss: handle special case for /dev/cciss/c0d0 (Tomas Henzl) [568830]
  - [block] cciss: handle cases when cciss_add_disk fails (Tomas Henzl) [568830]
  - [block] cciss: fix and rearrange logical drive sysfs code (Tomas Henzl) [568830]
  - [block] cciss: dynamic allocate struct device for logical (Tomas Henzl) [568830]
  - [block] cciss: Use helper functions to access drive_data (Tomas Henzl) [568830]
  - [block] cciss: remove withirq parameter where possible (Tomas Henzl) [568830]
  - [block] cciss: remove sysfs entries during driver cleanup (Tomas Henzl) [568830]
  - [block] cciss: add cciss_sysfs_stat_inquiry function (Tomas Henzl) [568830]
  - [block] cciss: add CTLR_LUNID define (Tomas Henzl) [568830]
  - [block] cciss: Remove unused was_only_controller_node (Tomas Henzl) [568830]
  - [block] cciss: fix problem with LUN addressing (Tomas Henzl) [568830]
  - [block] cciss: fix problem with SG_IO completions (Tomas Henzl) [568830]
  - [block] cciss: retry commands from within sendcmd_withirq (Tomas Henzl) [568830]
  - [block] cciss: change SCSI error handling code (Tomas Henzl) [568830]
  - [block] cciss: remove sendcmd reject processing (Tomas Henzl) [568830]
  - [block] cciss: let scsi error handling work w/interrupts (Tomas Henzl) [568830]
  - [block] cciss: factor out error processing code (Tomas Henzl) [568830]
  - [block] cciss: factor out target status code (Tomas Henzl) [568830]
  - [block] cciss: simplify device addressing methods (Tomas Henzl) [568830]
  - [block] cciss: factor out sendcmd_withirq core (Tomas Henzl) [568830]
  - [block] cciss: use uninterruptible timeout when waiting (Tomas Henzl) [568830]
  - [block] cciss: fix lun reset code (Tomas Henzl) [568830]
  - [block] cciss: factor out sendcmd core for sane interface (Tomas Henzl) [568830]
  - [block] cciss: remove double setting of h->busy (Tomas Henzl) [568830]
  - [block] cciss: disable scan thread, it prevents rmmod (Tomas Henzl) [568830]
  - [net] netxen: fix inconsistent lock state (Chad Dupuis) [562937]
  - [net] netxen: protect tx timeout recovery by rtnl lock (Chad Dupuis) [562937]
  - [net] netxen: fix for kdump (Chad Dupuis) [562937]
  - [net] netxen: fix caching window register (Chad Dupuis) [562937]
  - [net] netxen: fix rcv buffer leak (Chad Dupuis) [562937]
  - [net] netxen: fix memory leaks in error path (Chad Dupuis) [562937]
  - [net] netxen: remove unnecessary returns (Chad Dupuis) [562937]
  - [net] netxen: handle queue manager access (Chad Dupuis) [562937]
  - [net] netxen: to fix onchip memory access. (Chad Dupuis) [562937]
  - [net] netxen: remove unnecessary size checks (Chad Dupuis) [562937]
  - [net] netxen: fix register usage (Chad Dupuis) [562937]
  - [net] netxen: fix deadlock in aer (Chad Dupuis) [562937]
  - [net] netxen: fix interrupt for NX2031 (Chad Dupuis) [562937]
  - [net] netxen: fix fw load from file (Chad Dupuis) [562937]
  - [net] netxen: validate unified romimage (Chad Dupuis) [562937]
  - [net] netxen: fix corner cases of firmware recovery (Chad Dupuis) [562937]
  - [net] netxen: update version to 4.0.73 (Chad Dupuis) [562937]
  - [net] netxen: fix tx csum status (Chad Dupuis) [562937]
  - [net] netxen: added sanity check for pci map (Chad Dupuis) [562937]
  - [net] netxen: fix warning in ioaddr for NX3031 chip (Chad Dupuis) [562937]
  - [net] netxen: fix bios version calculation (Chad Dupuis) [562937]
  - [net] netxen: disable on NX_P3_B1 hardware (Chad Dupuis) [562937]
  - [net] netxen: protect resource cleanup by rtnl lock (Chad Dupuis) [562937]
  - [net] netxen: fix tx timeout recovery for NX2031 chip (Chad Dupuis) [562937]
  - [net] netxen: fix sparse warning (Chad Dupuis) [562937]
  - [net] netxen: fix license header (Chad Dupuis) [562937]
  - [net] netxen: fix endianness intr coalesce (Chad Dupuis) [562937]
  - [net] netxen: fix endianness read mac address (Chad Dupuis) [562937]
  - [net] netxen: use DEFINE_PCI_DEVICE_TABLE() (Chad Dupuis) [562937]
  - [net] netxen: update version to 4.0.72 (Chad Dupuis) [562937]
  - [net] netxen: fix set mac addr (Chad Dupuis) [562937]
  - [net] netxen: fix smatch warning (Chad Dupuis) [562937]
  - [net] netxen: fix tx ring memory leak (Chad Dupuis) [562937]
  - [net] netxen: fix ethtool link test (Chad Dupuis) [562937]
  - [net] netxen: move && and || to end of previous line (Chad Dupuis) [562937]
  - [net] netxen: fix ethtool register dump (Chad Dupuis) [562937]
  - [net] netxen: fix unified fw size check (Chad Dupuis) [562937]
  - [net] netxen: support pci error handlers (Chad Dupuis) [562937]
  - [net] netxen: fix tx timeout recovery (Chad Dupuis) [562937]
  - [net] netxen: minor suspend resume fixes (Chad Dupuis) [562937]
  - [net] netxen: use module parameter correctly (Chad Dupuis) [562937]
  - [net] netxen: fix firmware type check (Chad Dupuis) [562937]
  - [net] netxen: fix napi intr enable check (Chad Dupuis) [562937]
  - [net] netxen: protect device reset by rtnl_lock (Chad Dupuis) [562937]
  - [net] netxen: fix failure cases for fw hang recovery (Chad Dupuis) [562937]
  - [net] netxen: fix debug tools access for NX2031 (Chad Dupuis) [562937]
  - [misc] clone: fix race between copy_process and de_thread (Jiri Olsa) [590864]
  - [s390] dasd: let recovery cqr get flags from failed cqr (Hendrik Brueckner) [628838]
  - [net] ipv4: fix leak, rcu and length in route cache gc (Thomas Graf) [541224]
  - [net] tcp: zero out rx_opt in tcp_disconnect (Thomas Graf) [539560]
  - [net] ipv6: Update Neighbor Cache when IPv6 RA received (Thomas Graf) [560870]
  - [net] ipv6: Plug sk_buff leak in ipv6_rcv (Thomas Graf) [574913]
  - [redhat] configs: enable building k10temp sensor driver (Michal Schmidt) [443745]
  - [hwmon] add k10temp sensor driver (Michal Schmidt) [443745]
  - [pci] add AMD 10h, 11h PCI IDs to pci_ids.h (Michal Schmidt) [443745]
  - [net] vxge: fix multicast issues (Michal Schmidt) [608598]
  - [net] vxge: show startup message with KERN_INFO (Michal Schmidt) [608598]
  - [net] vxge: fix memory leak in vxge_alloc_msix error path (Michal Schmidt) [608598]
  - [net] vxge: fix checkstack warning in vxge_probe (Michal Schmidt) [608598]
  - [net] vxge: remove unnecessary returns from void functs (Michal Schmidt) [608598]
  - [net] vxge: version update (Michal Schmidt) [608598]
  - [net] vxge: pass correct number of VFs value to sriov (Michal Schmidt) [608598]
  - [net] vxge: allow load for all enumerated pci functions (Michal Schmidt) [608598]
  - [net] vxge: fix possible memory leak in device init (Michal Schmidt) [608598]
  - [net] vxge: add missing vlan_rx_kill_vid method (Michal Schmidt) [594404 608598]
  - [net] vxge: remove trailing space in messages (Michal Schmidt) [608598]
  - [net] vxge: use pci_dma_mapping_error to test return val (Michal Schmidt) [608598]
  - [net] vxge: use DEFINE_PCI_DEVICE_TABLE (Michal Schmidt) [608598]
  - [net] vxge: use DMA_BIT_MASK instead of plain values (Michal Schmidt) [608598]
  - [net] vxge: move && and || to end of previous line (Michal Schmidt) [608598]
  - [net] bnx2x: fix wrong return from bnx2x_trylock_hw_lock (Michal Schmidt) [572012]
  - [net] bnx2x: small fix in stats handling (Michal Schmidt) [572012]
  - [net] bnx2x: update bnx2x version to 1.52.53-4 (Michal Schmidt) [572012]
  - [net] bnx2x: fix PHY locking problem (Michal Schmidt) [572012]
  - [net] bnx2x: adjust confusing if indentation (Michal Schmidt) [572012]
  - [net] bnx2x: load firmware in open instead of probe (Michal Schmidt) [572012]
  - [net] bnx2x: fix net/ip6_checksum.h include (Michal Schmidt) [572012]
  - [net] bnx2x: update driver version to 1.52.53-3 (Michal Schmidt) [572012]
  - [net] bnx2x: move statistics handling code to own files (Michal Schmidt) [572012]
  - [net] bnx2x: create separate file for ethtool routines (Michal Schmidt) [572012]
  - [net] bnx2x: create bnx2x_cmn.* files (Michal Schmidt) [572012]
  - [net] bnx2x: main netdev does not need ->poll, ->weight (Michal Schmidt) [572012]
  - [net] bnx2x: move global variable load_count to bnx2x.h (Michal Schmidt) [572012]
  - [net] bnx2x: store module parameters in main structure (Michal Schmidt) [572012]
  - [net] bnx2x: create separate folder for bnx2x driver (Michal Schmidt) [572012]
  - [net] bnx2x: set RXHASH for LRO packets (Michal Schmidt) [572012]
  - [net] bnx2x: return -EINVAL for unsupported flags (Michal Schmidt) [572012]
  - [net] bnx2x: fail when trying to setup unsupported features (Michal Schmidt) [572012]
  - [net] bnx2x: fix link problem with some DACs (Michal Schmidt) [572012]
  - [net] bnx2x: protect a SM state change (Michal Schmidt) [572012]
  - [net] bnx2x: avoid TX timeout when stopping device (Michal Schmidt) [572012]
  - [net] bnx2x: fix check to get RX hash (Michal Schmidt) [572012]
  - [net] bnx2x: remove two unneeded prefetch calls (Michal Schmidt) [572012]
  - [net] bnx2x: add support for receive hashing (Michal Schmidt) [572012]
  - [net] bnx2x: update date and version to 1.52.53-1 (Michal Schmidt) [572012]
  - [net] bnx2x: don't report link down if already down (Michal Schmidt) [572012]
  - [net] bnx2x: rework power state handling code (Michal Schmidt) [572012]
  - [net] bnx2x: use register mask to avoid parity error (Michal Schmidt) [572012]
  - [net] bnx2x: fix MSI-X enabling flow (Michal Schmidt) [572012]
  - [net] bnx2x: add new statistics (Michal Schmidt) [572012]
  - [net] bnx2x: white space and formatting fixups (Michal Schmidt) [572012]
  - [net] bnx2x: protect code with NOMCP (Michal Schmidt) [572012]
  - [net] bnx2x: increase DMAE max write size for 57711 (Michal Schmidt) [572012]
  - [net] bnx2x: add skeleton VPD firmware version read code (Michal Schmidt) [572012]
  - [net] bnx2x: parity error handling for 57710 and 57711 (Michal Schmidt) [572012]
  - [net] bnx2x: use DEFINE_PCI_DEVICE_TABLE() (Michal Schmidt) [572012]
  - [net] bnx2x: move && and || to end of previous line (Michal Schmidt) [572012]
  - [net] bnx2x: remove trailing space in messages (Michal Schmidt) [572012]
  - [net] bnx2x: clean up debug prints (Michal Schmidt) [572012]
  - [net] bnx2x: use macro for phy address (Michal Schmidt) [572012]
  - [net] bnx2x: convert more to %pM (Michal Schmidt) [572012]
  - [net] bnx2x: use pci_ioremap_bar (Michal Schmidt) [572012]
  - [net] bnx2x: make NAPI poll routine closer to upstream (Michal Schmidt) [572012]
  - [net] bnx2x: typo fixes (Michal Schmidt) [572012]
  - [net] bnx2x: use (pr|netdev|netif)_<level> macro helpers (Michal Schmidt) [572012]
  - [net] bnx2x: use DMA_BIT_MASK(64) over DMA_64BIT_MASK (Michal Schmidt) [572012]
  - [net] sfc: update to upstream version 2.6.36-rc1 code (Michal Schmidt) [556476]
  - [net] sfc: undo now unnecessary RHEL workqueue changes (Michal Schmidt) [556476]
  - [net] netdevice: add netdev_for_each_mc_addr (Michal Schmidt) [556476]
  - [misc] add round_jiffies_up and related routines (Michal Schmidt) [556476]
  - [net] core: bug fix for vlan + gro issue (Michal Schmidt) [556476]
  - [net] vlan/bridge: fix skb_pull_rcsum fatal exception (Michal Schmidt) [556476]
  - [fs] proc: add file position and flags info in /proc (Jerome Marchand) [498081]
  - [net] e100*/igb*/ixgb*: add missing read memory barrier (Andy Gospodarek) [629761]
  - [net] igb/igbvf: turn on TSO for VLAN interfaces (Andy Gospodarek) [629457]
  - [net] vlan: control vlan device TSO status with ethtool (Andy Gospodarek) [629457]
  - [xen] vtd: fix parameter iommu=no-intremap (Paolo Bonzini) [576478]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-219.el5]
changelog:
  - [net] udp: fix bogus UFO packet generation (Jarod Wilson) [632266]
  - [virt] xen: fix xennet driver to not corrupt data (Neil Horman) [630129]
  - [virt] fix 64-bit compile issue in VMWare TSC update (Prarit Bhargava) [538022]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-218.el5]
changelog:
  - [net] tcp: prevent sending past receiver window with TSO (Thomas Graf) [494400]
  - [misc] netdevice: add printk helpers for net drivers (Michal Schmidt) [629634]
  - [misc] drivers: remove private definitions of pr_* macros (Michal Schmidt) [629634]
  - [misc] kernel: add pr_* family of printk helper macros (Michal Schmidt) [629634]
  - [infiniband] iw_cxgb3: always define states[] (Michal Schmidt) [629634]
  - [net] ifb: fix syntax error in pr_debug usage (Michal Schmidt) [629634]
  - [net] tg3: disable PME bit during resume (John Feeney) [598530]
  - [net] netfilter: fix crashes caused by fragment jumps (Jiri Pirko) [617268]
  - [virt] update VMWare TSC code (Prarit Bhargava) [538022]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-217.el5]
changelog:
  - [time] implement fine grained accounting for PM timer (Ulrich Obergfell) [586285]
  - [time] initialize tick_nsec based on kernel parameters (Ulrich Obergfell) [586285]
  - [time] introduce 'pmtimer_fine_grained' kernel parameter (Ulrich Obergfell) [586285]
  - [scsi] ibmvfc: Fix terminate_rport_io (Steve Best) [628615]
  - [fs] ext3: flush disk caches on fsync when needed (Eric Sandeen) [592961]
  - [fs] ext4: move aio completion after unwritten extent con (Eric Sandeen) [617690]
  - [fs] xfs: move aio completion after unwritten extent conv (Eric Sandeen) [617690]
  - [fs] direct-io: move aio_complete into ->end_io (Eric Sandeen) [617690]
  - [fs] ext4: quota updates for RHEL5.6 (Eric Sandeen) [457153]
  - [fs] ext4: quota infrastructure updates for RHEL5.6 (Eric Sandeen) [457153]
  - [fs] ext4: core updates for RHEL5.6 (Eric Sandeen) [457153]
  - [fs] ext4: add new kernel helpers for RHEL5.6 (Eric Sandeen) [457153]
  - [infiniband] sync iser driver with upstream for RHEL5.6 (Mike Christie) [623595]
  - [net] cxgb3: don't flush workqueue if called from wq (Doug Ledford) [630124]
  - [net] cxgb3: get fatal parity error status on interrupt (Doug Ledford) [630124]
  - [net] cxgb3: clear fatal parity error register on init (Doug Ledford) [630124]
  - [net] cxgb3: add define for fatal parity error bit (Doug Ledford) [630124]
  - [net] qlge: update driver version to 1.00.00.25 (Chad Dupuis) [567402]
  - [net] qlge: fix a eeh handler to not add a pending timer (Chad Dupuis) [567402]
  - [net] qlge: update driver version to 1.00.00.24 (Chad Dupuis) [567402]
  - [net] qlge: remove error pkt flags, enable net csum error (Chad Dupuis) [567402]
  - [net] qlge: restore promiscuous setting in ql_adapter_up (Chad Dupuis) [567402]
  - [net] qlge: change cpu_to_be16 to htons for udp checksum (Chad Dupuis) [567402]
  - [net] qlge: remove firmware dependency for MPI coredump (Chad Dupuis) [567402]
  - [net] qlge: adding ndev->last_rx = jiffies (Chad Dupuis) [567402]
  - [net] qlge: fix pktgen issue reported by Cisco (Chad Dupuis) [567402]
  - [virtio] fix balloon without VIRTIO_BALLOON_F_STATS_VQ (Amit Shah) [601692]
  - [virtio] fix sched while atomic in virtio_balloon stats (Amit Shah) [601692]
  - [virtio] add memory stat reporting to balloon driver (Amit Shah) [601692]


author: Jarod Wilson <jarod@redhat.com> [2.6.18-216.el5]
changelog:
  - [net] hashlimit: check allocation before freeing memory (Wade Mealing) [615229]
  - [net] clusterip: check allocation before freeing memory (Wade Mealing) [615227]
  - [ia64] mca: save I-resources when INIT is sent (Takao Indoh) [471136]
  - [scsi] mpt2sas: update to 05.101.00.02 (Tomas Henzl) [568281]
  - [scsi] ipr: bump the version number and date (Steve Best) [626566]
  - [scsi] ipr: fix resource type update and add attributes (Steve Best) [626566]
  - [scsi] ipr: fix transition to operational on new adapters (Steve Best) [626566]
  - [scsi] ipr: change endian swap key for hw spec change (Steve Best) [626566]
  - [scsi] ipr: add support for Obsidian-E embedded adapter (Steve Best) [626566]
  - [scsi] ipr: add MMIO write for BIST on 64-bit adapters (Steve Best) [626566]
  - [scsi] ipr: move setting of allow_restart flag (Steve Best) [626566]
  - [scsi] ipr: add writeq definition if needed (Steve Best) [626566]
  - [scsi] ipr: add endian swap enable for 64-bit adapters (Steve Best) [626566]
  - [scsi] ipr: fix resource path display and formatting (Steve Best) [626566]
  - [scsi] ipr: improve interrupt service routine performance (Steve Best) [626566]
  - [scsi] ipr: set data list length in request control block (Steve Best) [626566]
  - [scsi] ipr: fix register read address on 64-bit adapters (Steve Best) [626566]
  - [scsi] ipr: add resource path to IOA status area struct (Steve Best) [626566]
  - [scsi] ipr: implement fixes for 64-bit adapter support (Steve Best) [626566]
  - [scsi] ipr: fix compile warning (Steve Best) [626566]
  - [fs] ext4: allocate ->s_blockgroup_lock separately (Eric Sandeen) [614957]
  - [pci] xen: disable broken msi/msix on ia64 xen (Radim Krcmar) [518463]
  - [misc] fix non-CONFIG_NUMA x86_64 compile (Prarit Bhargava) [583673]
  - [pnp] ignore both UNSET and DISABLED ioresources (Prarit Bhargava) [560540]
  - [pnp] reserve system board iomem and ioport resources (Prarit Bhargava) [560540]
  - [net] ipv4: add IP_NODEFRAG option for IPv4 socket (Jiri Olsa) [562220]
  - [nfs] sunrpc: cancel task_cleanup work in xprt_destroy (Jeff Layton) [611938]
  - [fs] nfs: fix file create failure with HPUX client (Jeff Layton) [605720]
  - [net] ixgbe: update to upstream version 2.0.84-k2 (Andy Gospodarek) [568602]
  - [net] vlan: add VLAN bitfield defines (Andy Gospodarek) [566027]
  - [net] igb: actually support self_test ethtool command (Andy Gospodarek) [593862]
  - [net] ixgbe: actually support self_test ethtool command (Andy Gospodarek) [593862]
  - [net] ixgbevf: update to version 1.0.0-k1 (Andy Gospodarek) [566027]
  - [net] bonding: fix ALB mode to balance traffic on VLANs (Andy Gospodarek) [578531]
  - [net] igb: do register dump just before resetting adapter (Andy Gospodarek) [568602]
  - [kernel] nmi_watchdog: output count during check on boot (Don Zickus) [613667]
  - [misc] nmi: fix bogus nmi watchdog stuck messages (Don Zickus) [455323]
  - [virt] nmi: don't print NMI stuck messages on guests (Don Zickus) [455323]
  - [misc] nmi_watchdog: add /proc/sys/kernel/nmi_watchdog (Don Zickus) [455323]
  - [misc] scripts: use system python instead of env (Don Zickus) [521878]
  - [pci] sr-iov: fix broken resource alignment calculations (Don Dutile) [523341]
  - [pci] clean up resource alignment management (Don Dutile) [523341]
  - [pci] sr-iov: assign pci resources earlier (Don Dutile) [523341]
  - [net] vxge: update version to reflect RHEL5.6 changes (Bob Picco) [580413]
  - [net] vxge: set func_id 0 as privileged for normal func (Bob Picco) [580413]
  - [net] vxge: fix MSIX interrupt configuration (Bob Picco) [580413]
  - [net] vxge: fix ethtool -d output (Bob Picco) [580413]
  - [net] vxge: align tmemory only if misaligned (Bob Picco) [580413]
  - [net] vxge: fix hw buffer starvation from short packets (Bob Picco) [580413]
  - [net] vxge: fix receive stall w/ driver/chip out-of-sync (Bob Picco) [580413]
  - [cpufreq] add APERF/MPERF support for AMD processors (Bhavna Sarathy) [621335]
  - [xen] vmx: fix handling of FS/GS base MSRs (Michal Novotny) [613187]
  - [xen] hv: improve backtrace support on ia64 (Andrew Jones) [499553]
  - [xen] support new AMD family 0x15 CPU and NB hardware (Bhavna Sarathy) [619092]
  - [xen] allow dom0 to control core performance boost (Bhavna Sarathy) [568771]
  - [xen] add support for dom0 to access APERF/MPERF for AMD (Bhavna Sarathy) [568772]


