# changelog

author: Luke Kanies <luke@madstop.com> - 1.3.0-1
changelog:
  - Fixed spec file to work again with the extra memory and processor files.
  - Require ruby(abi). Build as noarch


author: David Lutterkort <dlutter@redhat.com> - 1.3.5-2
changelog:
  - Make require ruby(abi) and buildarch: noarch conditional for fedora 5 or
    later to allow building on older fedora releases


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.32
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.36
changelog:
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix NIS getservbyname when proto is NULL


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.37
changelog:
  - assorted NIS+ speedups (#233460)
  - dladdr fixes, mainly for ppc64 (BZ#2683, #227016)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix child refcntr in NPTL fork (#230197)
  - fix nis_getsrvlist (#235229)
  - fix getifaddrs and IPv4/IPv6 availability checking on arches
    with > 4KB pages (#230168)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.38
changelog:
  - add a workaround for #210748, #211133 and #210130
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - save/restore errno around reading /etc/default/nss (BZ#4702)
  - fix LD_HWCAP_MASK handling
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - *printf fixes (BZ#4514)
  - use MADV_DONTNEED in malloc (#237710)
  - fix sem_timedwait on i?86 and x86_64
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070, BZ#4858)
  - fix _XOPEN_VERSION (BZ#4364)
  - various fixes (BZ#4101, BZ#4130, BZ#3458, BZ#4344)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - further strtod fixes (BZ#3855)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.40
changelog:
  - fix sporadic hangs in clntudp_call (#339821)
  - fix calloc with mlocked memory (#405781)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present, #385601)
  - fix vfork+execvp memory leak (#437571)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#346321, BZ#5112)
  - add SHA-256 and SHA-512 hashing to crypt(3) (#228697)
  - for RHEL5+ binaries/shared libraries that have DT_GNU_HASH
    and not DT_HASH dynamic tag, issue an error message instead
    of crashing with SIGFPE


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.42
changelog:
  - fix dynamic TLS handling (#475178)
  - fix _mcount and socket syscalls on s390x (#464147)
  - try harder to allocate memory in valloc and pvalloc (#473068)
  - malloc speedup (#451184, #460154, BZ#4349)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.43
changelog:
  - fix -0 handling in strtod (#462081)
  - don't prematurely abort in getgrouplist if no initgroups_dyn
    function is present (#470781)


author: Miloslav Trmac <mitr@redhat.com> - 7.93.25.EL-1
changelog:
  - Document HOTPLUG (#189509)
  - Prevent activation of network interfaces by hotplug during bootup (#183706)
  - Add NETWORKDELAY and LINKDELAY (#176851)


author: Miloslav Trmac <mitr@redhat.com> - 7.93.26.EL-1
changelog:
  - network-functions: source config before calling configure_ccwgroup_device
    Resolves: #199139
  - setsysfont, rc.sysinit: fix KEYTABLE, setsysfont when serial console is
    present
    Resolves: #150769
  - netfs: call multipath, kpartx if necessary
    Resolves: #180977
  - rc.sysinit: run zfcpconf.sh earlier, so devices are available for LVM usage
    Resolves: #189494
  - init.d/functions: add configurable delay for killproc (<jorton@redhat.com>)
    Resolves: #198468
  - ifup: support aliases-on-vlan
    Resolves: #193133
  - rc.sysinit: don't use vgscan, only use vgchange
    Resolves: #191879
  - ifdown: run ifenslave -d on bonding devices
    Resolves: #199706
  - init.d/halt: don't try to unmount network mounts
    Resolves: #200915
  - ifdown, ifup-aliases: fix static routes for aliases
    Resolves: #202948
  - ifup: fix actual 169.254 networks
    Resolves: #203591


author: Miloslav Trmac <mitr@redhat.com> - 7.93.27.EL-1
changelog:
  - Do unmount network mounts, not doing so can prevent other unmounting other
    filesystems
    Reverts: #200915


author: Bill Nottingham <notting@redhat.com> - 7.93.30.EL-1
changelog:
  - init.d/network, network-functions: don't fiddle with hotplug settings (#185569, #209307)
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#222975)


author: Daniel Veillard <veillard@redhat.com> 0.0.26-1
changelog:
  - Fix an include problem showing up with gcc4</li>
  - Fix the crash on failed tree assert bug #150471 based on patch from Dean Brettle
  - removed an incompatibility with SGI FAM #149822


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - Close inherited file descriptors on exec of gam_server
  - Cancelling a monitor send back a FAMAcknowledge
  - Fixed for big files > 2GB
  - Bug when monitoring a non existing directory
  - Make client side thread safe
  - Unreadable directory fixes
  - Better flow control handling
  - Updated to latest inotify version: 0.23-6


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - gamin_data_conn_event fix
  - crash from bug gnome #303932
  - Inotify and mounted media #171201
  - mounted media did not show up on Desktop #159748
  - write may not be atomic
  - Monitoring a directory when it is a file
  - Portability to Hurd/Mach and various code cleanups
  - Added support for ~ as user home alias in .gaminrc


author: Joe Orton <jorton@redhat.com> 2.0.52-19.ent
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (#167194, CVE CAN-2005-2700)
  - add security fix for byterange filter DoS (#167102, CVE CAN-2005-2728)


author: Joe Orton <jorton@redhat.com> 2.0.52-21.ent
changelog:
  - mod_ssl: add security fix for HTTP-on-SSL-port handling (CVE-2005-3357)
  - mod_imap: add security fix for XSS issue (CVE-2005-3352)


author: Joe Orton <jorton@redhat.com> 2.0.52-22.ent
changelog:
  - worker MPM: add security fix for memory consumption DoS (CVE-2005-2970),
    and bug fixes for handling resource allocation failures (#173509)


author: Joe Orton <jorton@redhat.com> 2.0.52-25.ent
changelog:
  - mod_rewrite: extend maximum text map line length to 8K (#185029)
  - mod_ssl: add SSL_CLIENT_V_REMAIN variable (#163488)


author: Johnny Hughes <johnny@centos.org> 2.0.52-28.ent.centos4
changelog:
  - Changed distro and vstring variables (in spec file) to CentOS.
  - added a powered by centos button
  - Changed index.html to centos_index.html


author: Steve Grubb <sgrubb@redhat.com> 1.0.3-5
changelog:
  - Make rate & backlog 32 bit unsigned int in auditctl
  - In auditctl, if -F arch is given with -t option, don't require list


author: Steve Grubb <sgrubb@redhat.com> 1.0.12-1.EL4
changelog:
  - Step up to new version
  - Add locale patch - ausearch & aureport
  - Add c++ patch - libaudit.h
  - Add fixup patch - auditd email error handler correction


author: Steve Grubb <sgrubb@redhat.com> 1.0.14-1.EL4
changelog:
  - Change auditd to use custom daemonize to avoid race in init scripts
  - Update error message when deleting a rule that doesn't exist (#176239)
  - Fix bug in autrace where it didn't run on kernels without file watch support
  - Add timestamp to daemon_config messages (#174865)
  - Add error checking of year for aureport & ausearch
  - Treat af_unix sockets as files for searching and reporting
  - Update capp rules to combine syscalls for higher performance
  - Apply patch from Ulrich Drepper that optimizes resource utilization
  - Change ausearch and aureport to unlocked IO
  - Add more message types


author: Steve Grubb <sgrubb@redhat.com> 1.0.15-1.EL4
changelog:
  - Correct address resolving of hostname in logging functions
  - Fix logging messages to use addr if passed
  - Add TRUSTED_APP message type
  - Fix netlink errno return
  - Auditd ignore most signals
  - Add audit dispatcher interface to auditd
  - In auditd if num_logs is zero, don't rotate on SIGUSR1 (#208834)
  - Cleanup file descriptor handling in auditd
  - Improve time handling in ausearch and aureport (#191394)
  - Attempt to reconstruct full path from relative for searching
  - Ausearch & aureport now fail if no args to -te
  - In aureport, add class between syscall and permission in avc report
  - Fix bug where fsync is called in debug mode
  - Add optional support for tty in SYSCALL records for ausearch/aureport
  - ausearch & aureport implement uid/gid caching
  - In ausearch & aureport, extract addr when hostname is unknown
  - In ausearch & aureport, test audit log presence O_RDONLY
  - Updated man pages (#213328, #213330)


author: Matthias Clasen <mclasen@redhat.com> 2:1.2.5-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers. 
  - Build for FC1


author: Matthias Saou <http://freshrpms.net/> 0.47-1
changelog:
  - Update to 0.47.
  - Added docbook-utils and scrollkeeper build deps.
  - Added omf file and scriptlets with calls to scrollkeeper-update.
  - Update the menu entry stuff from capplet to applications location.


author: Tom Lane <tgl@redhat.com> 7.4.13-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.13 (includes fixes for CVE-2006-2313, CVE-2006-2314,
    CVE-2006-0553, CVE-2006-0591; see bugs #192169, 180536); also various
    data-loss-grade bugs


author: Tom Lane <tgl@redhat.com> 7.4.13-2.RHEL4.1
changelog:
  - Prevent libpython from being statically linked into plpython.so.
    Not sure why this wasn't happening before, but it's a problem now.


author: Tom Lane <tgl@redhat.com> 7.4.19-1.el4_6.1
changelog:
  - Update to PostgreSQL 7.4.19 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427135


author: Tom Lane <tgl@redhat.com> 7.4.26-1.el4_8.1
changelog:
  - Update to PostgreSQL 7.4.26 to fix CVE-2009-0922, CVE-2009-3230,
    and assorted other bugs described at
    http://www.postgresql.org/docs/7.4/static/release.html
  Resolves: #525282


author: Tom Lane <tgl@redhat.com> 7.4.29-1.el4_8.1
changelog:
  - Update to PostgreSQL 7.4.29 to fix CVE-2010-1169, CVE-2010-1170,
    CVE-2009-4136, CVE-2010-0733, CVE-2010-0442, and assorted other bugs
    described at
    http://www.postgresql.org/docs/7.4/static/release.html
  Resolves: #586056


author: Tom Lane <tgl@redhat.com> 7.4.30-1.el4_8.1
changelog:
  - Update to PostgreSQL 7.4.30, for various fixes described at
    http://www.postgresql.org/docs/7.4/static/release.html
    including the fix for CVE-2010-3433
  Resolves: #639929


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-19.RHEL4
changelog:
  - Updated to latest source (t0_4_5_post62)
  - Resolves: bz #187534, #192645, #215505, #215509, #217014


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-21.0.1.RHEL4
changelog:
  - Fix hardware defaults for IBM dasd and DS8000 and various HITACHI arrays
  - Resolves: bz #240854, #242777, #242778, #242781


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Jeremy Katz <katzj@redhat.com> - 1.6.0-8
changelog:
  - Run query scriptlets explicitly with /bin/sh so that i386 on ia64 
    executes with the right path (#133822)


author: Owen Taylor <otaylor@devserv.devel.redhat.com> 1.6.0-9
changelog:
  - Backport change from Pango-1.8.0 to supress the display of zero width 
    characters for the Indic shapers (#138313)


author: Christoph Wickert <fedora wickert at arcor de> - 0.3.1-3
changelog:
  - Initial Fedora Extras version.
  - Rebuild for XFCE 4.2.3.
  - disable-static instead of removing .a files.


author: John (J5) Palmieri <johnp@redhat.com> - 0.22-12EL.2
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.22-12EL.9
changelog:
  - Resolves: #178037 Can't send to audit system
  - Resolves: #179153 RFE: [PATCH] backport GetConnectionSELinuxSecurityContext 
    functionality to RHEL4


author: Justin M. Forbes <64bit_fedora@comcast.net> - 0.11.10-1
changelog:
  - remove unnecesary [ -z "$QTDIR" ] check
  - Update to 0.11.10 upstream 
  - remove qt-devel BuildRequires, implied with kde-devel
  - remove ldconfig Requires, implied
  - remove i18n docbook patch, fixed upstream.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-224
changelog:
  - Incorporate more fixes to the --timeout and --negative-timeout option
    parsing.
  - Related: bz#239442 bz#212249


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-226
changelog:
  - Fix the old ldap lookup fallback code so that it actually tries more
    than one schema when a key is not found in the map.
  - Resolves: bz#239029


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-230
changelog:
  - Add support for the "-null" directive in the master map.
  - Fix some broken printf's that did not have enough arguments for format.
  - Resolves: bz#228502
  - Related: bz#239370


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-231
changelog:
  - Add missing parenthesis is ldap lookup_one method.
  - Scale the random multimount selection number to a value between 0 and 1.
  - Related: bz#239029 bz#223083


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.8.2-11.el4
changelog:
  - fix buffer overflow in 802.11 printer (#232519, CVE-2007-1218)
  - fix return codes in arpwatch init script (#237780)
  - with -C option, drop root privileges before opening first savefile (#214377)


author: Ray Strode <rstrode@redhat.com> 4.18-5.rhel4.5
changelog:
  - ignore uninstalled screenhacks, since keeping them in the
    list would just confuse the user
  - consolidate the various config patches into one patch


author: Ray Strode <rstrode@redhat.com> 4.18-5.rhel4.6
changelog:
  - Hard code the screen hack ignoring stuff, so that users with
    existing xscreensaver files get it, too.


author: Ray Strode <rstrode@redhat.com> 4.18-5.rhel4.11
changelog:
  - Launch help in terminal (bug 167968)
  - Don't authenticate with app specific kerberos code.  Rely on
    PAM instead (bug 183246).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.11
changelog:
  - Applied pipe_pid patch from STR #1290 (bug #163011).
  - DeletePrinterFromClass() fixes from bug #171768:
    - Use memmove() instead of memcpy() for removing element from array.
    - Only call SetPrinterAttrs() if we deleted a printer from the class.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Clear the printer's state_message and state_reasons after successful
    job completion (bug #187457).
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #188583).
  - Applied patch from STR #1301 (bug #195354).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.12
changelog:
  - Back-ported CUPS 1.2.x change to fix out of order IPP jobs (bug #171142).
  - Include dest-cache-v2 patch (bug #175847).
  - Resolves: rhbz #171142


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.18
changelog:
  - REVERTED these changes:
    - Applied patch from STR #1301 (bug #195354).
    - Patch pdftops to understand 'includeifexists', and use that in the
      pdftops.conf file (bug #188583).
    - Clear the printer's state_message and state_reasons after successful
      job completion (bug #187457).
    - Include dest-cache-v2 patch (bug #175847).
    - Back-ported CUPS 1.2.x change to fix out of order IPP jobs (bug #171142).
    - Back-ported large file support (bug #211915).
    - Back-ported HTTP timing fix for STR #1020 (bug #194025).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.19
changelog:
  - Reinstated these changes:
    - Applied patch from STR #1301 (bug #195354).
    - Patch pdftops to understand 'includeifexists', and use that in the
      pdftops.conf file (bug #188583).
    - Clear the printer's state_message and state_reasons after successful
      job completion (bug #187457).
    - Include dest-cache-v2 patch (bug #175847).
    - Back-ported CUPS 1.2.x change to fix out of order IPP jobs (bug #171142).
    - Back-ported large file support (bug #211915).
    - Back-ported HTTP timing fix for STR #1020 (bug #194025).


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Changed the smp and hugemem buildrequires to only if
    those kernels are being built ... otherwise x86_64
    won't build


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - processor table added (#201850)
  - fixed snmptrapd init script, the path for config file is /etc/sysconfig/snmptrapd.options (#197752)
  - fixed snmptrapd init script, don't overide user settings (#195702)
  - fixed leak in snmptrapd (#192769)
  - fixed snmpd init script, the path for config file is /etc/sysconfig/snmpd.options (#199450)


author: Radek Vokál <rvokal@redhat.com>
changelog:
  - finally fixing bug #204729
  - cleaning up the testing mess
  - patch from Josef Moellers <josef.moellers@fujitsu-siemens.com>


author: Radek Vokál <rvokal@redhat.com> 5.1.2-11.EL4.9
changelog:
  - add disman/event-mib for link notifications
  - fix crash on unacknowledged informs
  - fix for negative OID values 
  - store pid in /var/run/snmpd.pid
  - communication can be limited by tcp_wrappers
  - Resolves: #202584 #211264 #212282 #211457 #220045 #206005


author: Jan Safranek <jsafranek@redhat.com> 5.1.2-11.EL4.11
changelog:
  - decrease logging of incoming connections, which slows down syslog
    (#241581)
  - reference to net-snmp-config removed from snmpd.conf man page
    (#202599)
  - fix snmpusm man page to describe all options (#202745)
  - check if port number is valid (#205154)
  - fix ssRawCpu* counters to wrap correctly on overflow (#223775)
  - add rpm-devel to BuildPreReq to enable hrSWInstalled OID
    (#235885)
  - snmptrapd survives logrotate (#239663)
  - output of exec statement can be longer than 1023 characters
    (#242775)
  - fix -M option of net-snmp-utils (#199165)
  - add diskio MIB (#245380)
  - snmpconf should generate config files with proper selinux context
    (#192447)
  - fix snmpwalk / bulkwalk on TCP scalars (#248196)


author: Jason Baron <jbaron@redhat.com> [2.6.9-39.2]
changelog:
  -x86(64) Fix FPU information leak (Jim Paradis) [187910] {CVE-2006-1056}
  -fix MSI-X 64-bit support (Chip Coldwell) [192098]
  -fix kernel BUG() in __kfree_skb while running TCP+Kernel stress (Andy Gospodarek) [192779] {CVE-2006-2446}
  -fix netdump regression on e1000 (Neil Horman) [193688]
  -Add diskdump support for Servraid cards (Nobuhiro Tachino) [172202]
  -ppc64: fix unprivileged process can read arbitrary kernel memory (David Woodhouse) [194215]
  -make mmap PROT_WRITE imply PROT_READ (Josef Whiter) [194289]
  -make network cards visible on HP xw9400 (Bastien Nocera) [195254]
  -fix resync device-mapper mirror hang (Jonathan Brassow) [193728 195502]
  -force noapic for ES7000 (Konrad Rzeszutek) [195002]
  -bonding: back-out sysfs updates (John Linville) [194410]
  -azx: re-instate special case for HP xw{4,6,8,9}400 (John Linville) [195544]
  -e1000: fix for 6321ESB (John Linville) [195699]


author: Jason Baron <jbaron@redhat.com> [2.6.9-40.1]
changelog:
  -s390: fix channel path measurement data typo (Jan Glauber) [195682]
  -s390: hypfs fixes (Jan Glauber) [180564 195463 195464]
  -restrict prctl() syscall to setting PR_SET_DUMPABLE to 0 or 1 (Ernie Petrides) [195902] {CVE-2006-2451}
  -megaraid: fix potential data corrupter (Tom Coughlan) [194533 196573]
  -infiniband: fix out of tree object directory builds (Doug Ledford) [196712]


author: Jason Baron <jbaron@redhat.com> [2.6.9-41]
changelog:
  -ia64: fix kprobes for Montecito (Anil Keshavamurthy) [198256]
  -sctp: fix netfilter code to avoid incorrect pointer dereference (Neil Horman) [197387] {CVE-2006-2934}
  -ia64: add cow icache flush (Anil Keshavamurthy) [194469]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.0.1]
changelog:
  -fix O_DIRECT writes to memory holes can leak a page reference (Jeff Moyer) [191736] {CVE-2004-2660}
  -fix sctp chunk length overflow (Neil Horman) [192636] {CVE-2006-1858}
  -fix possible DoS in write routine of ftdi_sio driver (Pete Zaitcev) [197610] {CVE-2006-2936}
  -fix typo in drivers/cdrom/cdrom.c (Chip Coldwell) [197670] {CVE-2006-2935}
  -Fix reboot on IBM Pizzaro machines (Bastien Nocera) [200111]
  -don't shut down on bogus filehandles from nfs clients (Eric Sandeen) [199172] {CVE-2006-3468}
  -fix for prevention of setuid/gid on /proc/<pid> files (Ernie Petrides) [198973] {CVE-2006-3626}
  -fix SNMP NAT netfilter memory corruption (Thomas Graf) [192632] {CVE-2006-2444}
  -fix for non-hugemem x86 DoS w/bogus %ds/%es values (Ernie Petrides) [196280] {CVE-2006-2932]


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Modified to obsolete and provide redhat-release instead
    of just providing it.
  - Modified to config(noreplace) /etc/issue and /etc/issue.net


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Modified to provide yumconf and obsolete centos-yumconf
  - added the default yum, apt, and up2date repository files


author: Adrian Likins <alikins@redhat.com> 4.4.50-4
changelog:
  - new up2date.pot, synced up
  - fix uncommitted changes that were causing string
    translations not to show up
  - more translations updates for #160608


author: Than Ngo <than@redhat.com> 1:3.00-11.12
changelog:
  - apply official patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179046)


author: Than Ngo <than@redhat.com> - 3.00-19.el4
changelog:
  - Resolves: #490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for badpage10910.pdf


author: Than Ngo <than@redhat.com> - 3.00-20.el4
changelog:
  - CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for some potential problems,
    latest upstream patch


author: Alasdair Kergon <agk@redhat.com> - 1.02.14-1
changelog:
  - Fix dmeventd to cope if monitored device disappears.
  - Lots of dmeventd changes including a revised interface.


author: Dan Walsh <dwalsh@redhat.com> 1.18.1-4.8
changelog:
  - Add prune call to eliminate nfs file systems
  - Change genhomedircon to not label already specified directories.


author: Dan Walsh <dwalsh@redhat.com> 1.18.1-4.9
changelog:
  - Add VALID_SHELLS to genhomedircon, for specifiying which user accounts
  - to setup security context for.


author: Dan Walsh <dwalsh@redhat.com> 1.18.1-4.10
changelog:
  - Use restorecon if setfiles does not exist in /usr for fixfiles
  Resolves: #184228
  - Restorecon -o - should write to stdout
  Resolves: #207169


author: David Tardon <dtardon@redhat.com> - 1.1.5-10.0.6
changelog:
  - CVE-2008-2237 WMF integer overflow
  - CVE-2008-2237 Multiple EMF flaws
  - Resolves: rhbz#462720 Multiple flaws


author: Jeremy Katz <katzj@redhat.com> - 10.1.1.10-1
changelog:
  - Add support for specifying biosdisk in the driverdisk kickstart 
    directive, patch from Rez Kabir (#142738)
  - Fix LVM on RAID1 (nasrat, #141781)
  - Better error handling of a few cases (#142273)
  - Fixes for bits of SX8 handling


author: Jeremy Katz <katzj@redhat.com> - 10.1.1.12-1
changelog:
  - improved handling for kernel*devel (#143257)
  - make images look better (#143276)
  - make sure hwaddr gets written (#143535)
  - handle newer swap label format (#143447)


author: Jeremy Katz <katzj@redhat.com> - 10.1.1.14-1
changelog:
  - Fix multiple DNS servers being specified on the command line.  Patch 
    from mattdm (#84409)
  - Fix dhcpclass specification on the command-line (#144006)
  - Fix formatting of new fcp disks (#144199)
  - Support parsing pxelinux IPAPPEND (bnocera, #134054)
  - Reset package selection to defaults when selected (#142415)
  - More tree sanity checking instead of traceback'ing (#143930)
  - Fix some partitioning corner cases (clumens, #137119, #145145)
  - Fix iSeries upgrades (pnasrat, #146915)
  - Fix hostname display (clumens, #132826, #149116)
  - Fix mtab writing in rescue mode (#149091)
  - Use ethtool settings in more places (pnasrat, #145422)


author: Jeremy Katz <katzj@redhat.com> - 10.1.1.15-1
changelog:
  - Ensure Xvnc exits when the last client goes away (#137337)
  - Allow logical partitions to go all the way to the end of an 
    extended (clumens, #101432)
  - Don't install a bootloader if --location=none (clumens, #146448)


author: Paul Nasrat <pnasrat@redhat.com> - 10.1.1.18-1
changelog:
  - Don't free needed string (clumens, #149871, #150844, #153072)
  - Correct name.arch (#133396, #154407)
  - hostname option isn't greyed out when using static IP (#149116)


author: Paul Nasrat <pnasrat@redhat.com> - 10.1.1.19-1
changelog:
  - Quieten package downloads in cmdline mode (#155250)
  - name.arch logic error 
  - Ensure kernel written to PReP on iSeries upgrades (#146915)


author: Karel Zak <kzak@redhat.com> 0.9.2-3.1
changelog:
  - fix leak in history auto completion.
  - fix cookie domain security checking.
  - limit rowspan/colspan values prevents crashes reported at
    http://www.securityfocus.com/archive/1/378632  (#146446)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-29.el4
changelog:
  - multipath now waits for up to 5 seconds if it encounters a device that in not
    fully initialized.
  - Resolves: bz #436201


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-30.el4
changelog:
  - Updated to latest source (t0_4_5_post72)
  - new multipath.conf parameters. "uid", "gid", and "mode" allow you to set
    the attributes of multipath device nodes. kpartx nodes inherit these
    attributes. "flush_on_last_del" causes multipath devices to turn off
    queueing when the last path is deleted.
  - Resolves: bz #251388, #305781, #430494


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-33.el4
changelog:
  - Updated to latest source (t0_4_5_post74)
  - Updated various default configurations
  - mpath_prio_netapp is now called mpath_prio_ontap (the original name
    exists as a symlink)
  - Various bugfixes
  - Resolves: bz #214809, #445268, #445413, #452340, #453547, #455616, #456457, #457228, #461122, #467495, #469845


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-37.3
changelog:
  - resolve hostnames in hosts.{allow,deny}, fixes #196326, #220015
  - unblock and catch SIGCHLD from spawned shell commands,
    fixes #112975 (#241356)
  - don't discard exits from other child processes than the spawned one, fixes


author: Tomas Janousek <tjanouse@redhat.com> - 7.6-37.4
changelog:
  - dropped the hostname resolving patch (#220015)
  - compare localhost and localhost.localdomain as the same (#196326)


author: Roland McGrath <roland@redhat.com> - 0.4.1-1
changelog:
  - Many fixes and improvements since 0.2.2; relevant PRs include:
    1122, 1134, 1155, 1172, 1174, 1175, 1180, 1186, 1187, 1191, 1193, 1195,
    1197, 1205, 1206, 1209, 1213, 1244, 1257, 1258, 1260, 1265, 1268, 1270,
    1289, 1292, 1306, 1335, 1257


author: Roland McGrath <roland@redhat.com> - 0.4.2-1
changelog:
  - Many fixes and improvements: PRs 1344, 1260, 1330, 1295, 1311, 1368,
    1182, 1131, 1332, 1366, 1456, 1271, 1338, 1482, 1477, 1194.


author: Frank Ch. Eigler <fche@redhat.com> - 0.5-1
changelog:
  - Many fixes and improvements: 1425, 1536, 1505, 1380, 1329, 1828, 1271,
    1339, 1340, 1345, 1837, 1917, 1903, 1336, 1868, 1594, 1564, 1276, 1295


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-16_EL
changelog:
  - Fix bug 173961: prevent segfault in resolver.c ncache_adderesult
  - allow named ability to dump core after setuid()
  - rebuild for new U3 glibc, gcc & binutils


author: Martin Stransky <stransky@redhat.com> - 20:9.2.4-20.EL4
changelog:
  - fix bug 203070: rndc.conf change breaks working bind config
  - fix bug 204288: postinstall scriptlet sets wrong permission (0655)


author: Adam Tkac <atkac redhat com> 20:9.2.4-25.el4
changelog:
  - named initscript doesn't have configtest parameter (#157601)
  - unexpected TSIGs aren't handle correctly (#192192, CVE-2006-2073,
    NOT security issue, it's bug)
  - bind-chroot doesn't clean chroot during uninstall (#205266)
  - initscript doesn't unmount proc filesystem (#209839)
  - host always returns 0 (#219473)
  - rndc.key isn't generated correctly (#227798)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.13
changelog:
  - enable dbase extension (#236094)
  - require autoconf, automake for -devel (#453028)
  - provide mod_php (#294611)
  - odbc: 64-bit fixes (#211609)
  - curl: safe argument handling for curl_init (#176715)
  - fix possible crash with setlocale() (#203151, thanks to Dominik Gehl)
  - fix printf positional argument handling (#218044)
  - fixes for handling of failed read in multipart request (#250999)
  - fix crashes with unclosed streams using custom wrappers (#433558)
  - fix serialize() of incomplete class (#219235)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.26
changelog:
  - add security fixes for CVE-2008-3658, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2009-0754 (#487361)
  - split out gd overflow2() and make global with sane symbol name


author: Joe Orton <jorton@redhat.com> - 4.3.9-3.28
changelog:
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546, CVE-2009-4017 (#541595)


author: Joe Orton <jorton@redhat.com> - 4.3.9-3.30
changelog:
  - add security fixes for CVE-2010-1917, CVE-2010-3065, CVE-2010-2531,
    CVE-2010-1128, CVE-2010-0397 (#626733)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.3.9-3.32
changelog:
  - add security fixes for CVE-2011-4885, CVE-2011-4566, CVE-2011-0708,
    CVE-2011-1466, CVE-2011-2202 (#769761)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 4.3.9-3.35
changelog:
  - add glibc-headers to BuildRequires because of stdint.h needed by
    CVE-2011-0708.patch, adopt the patch's include header section (#769761)


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 1.99.5 - Near-final beta of 2.0.0 release
    + many bug fixes - code looks very stable at this point
      -- well tested at this point on 4 and 8 node clusters.


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.0 - First stable release of the next generation of the Linux-HA project
    + Basic Characteristics described here:
  	http://linux-ha.org/FactSheetv2
    + Core infrastructure improvments:
      + Messaging (message acknowledging and flow control)
      + Logging   (logging daemon)
    + Release 1.x style (2-node) clusters fully supported
    + Multi-node support (so far up to 16-node clusters tested)
  	See http://linux-ha.org/GettingStartedV2 for more information
    + New components:
      + Cluster Information Base    (replicated resource configuration)
      + Cluster Resource Manager    (supporting 1->N nodes)
      + Modular Policy Engine       (controlling resource placement)
      + Local Resource Manager      (policy free, not cluster aware)
      + Stonith Daemon              (stand-alone fencing  subsytem)
    + Support for OCF and LSB resource agents
    + Support for composite resource types (groups, clones)
    + Support for a rich set of resource location and ordering constraints
    + Conversion tool for existing haresources
    + Resources monitored by request
    + Resource "maintenance" mode
    + Several failback, failure and "No Quorum" behaviours to choose from
          (global defaults and per action or resource)
    + Sample cluster state and configuration monitoring tools

    Known issues in 2.0.0:
      - Under some rare circumstances the cluster manager will time out
        while stabilizing a new cluster state.  This appears to be
  	otherwise harmless - the cluster is actually fine.
  	http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=770
      - Under some rare circumstances, a dev assert will be triggered
  	in unpack.c.  This results in the pengine getting restarted.
  	This is annoying, but not a disaster.
  	http://www.osdl.org/developer_bugzilla/show_bug.cgi?id=797


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.1 - 
    + Communication Layer
      + netstring encoding format is changed to be more efficient
      + add compression capability for big messages
    + Add man pages for hb_standby/hb_takeover	
    + The assert triggered by 2.0.0 has been fixed
    + CIB can now contain XML comments and/or be in DOS format	
    + Includes implementation of the ISO8601 date format
    + New CLI tools for changing cluster preferences, node attributes 
      and node standby
    + Improved recovery and placement of group resources
    + Detection of failed nodes by the Policy Engine is fixed
    + New Policy Engine features 
      http://www.linux-ha.org/ClusterResourceManager/DTD1.0/Annotated :
        sections 1.5.[8,9,10,12]
      + Constraints and instance attributes can now be active conditionally
      + Rules can now contain other rules
      + Date/Time based expressions are supported
      + Cloned resources can now optionally be notified before and after
        any of its peers are stopped or started.
      + The cluster can re-evaluate the configuration automatically after
        a defined interval of idleness
    + Removed a flow control message which was very annoying when operating
      in a mixed 1.x/2.x environment
    -- Known Bugs :-( --
      - Bug 859 - FSA took too long to complete action - fully recovered from
      - Bug 882 - IPC channel not connected during shutdown - harmless
      - Bug 879 - Failed actions cause extra election - harmless
   Each of these occurs about once or twice in 5000 test iterations
         - This is probably > 10K failovers
      - rsc_location constraints cannot have rules that contain other rules
        (fixed in CVS after release)


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.2 - small bug fix only release
    + Fixed a bug in ping directive - it works again
    + Added a check to BasicSanityCheck to check ping and ping_group directives
    + fixed cl_status nodestatus to return 0 if a node has status "ping"
    + fixed a memory leak in the CRM's LRM interface code
    + fixed code which deterimines which version of the CRM becomes
      the DC when basic CIB schema versions differ.  It now prefers
      the older version to be DC instead of the newer version.


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.3 - Bug fixes and significant new features.
    + Management Daemon/Library and GUI client
      + provide a management library for manamgement daemon and CIM provider
      + provide a management daemon and a basic GUI management tool
    + CIM enablement
      + CIM (Common Information Model) enablement - works with
        sblim-sfcb, OpenWBEM, and Pegasus CIMOMs
      - not yet compiled into our binary RPMs because of dependencies
    + CRM (Cluster Resource Manager) General
      + All shutdowns go via the PE/TE - preserves inter-resource ordering
      + Support for future changes to the CIB (depreciation of cib_fragment)
      + Overhaul of IPC and HA channel callback logic
      + Many improvments to the quality and quantity (reduced) of logging
    + CRMd
      + Timerless elections - when everyone has voted we're done
      + Use the replace notification from the CIB to re-update our copy with 
        our view of our peers.
      + Reliably detect if the LRM connection is still active.
      + Elections
        + newer versions defer to older ones in DC elections 
          (opposite of current behavior)
        + this means that only once the complete cluster has been upgraded will
          we start acting like the new version and accept new config options
        + it also means newer PE's and TE's (the most complex pieces) don't need
          "act like the old version" options and can rely on all slaves being at
          least as up-to-date as they are
        + people can run mixed clusters as long as they want
          (until they want the new PE features)
        + new DCs only update the version number in the CIB if they have a 
          higher value
        + nodes that start and have a lower version than that stored in the CIB
          shut themselves down (the CRM part anyway)
        + this prevents an admin from introducing old nodes back into an upgraded
          cluster. It probably doesn't fully understand the config and may not
          support the actions the PE/TE requires.
    + CIB (Common Information Base daemon)
      + Make sure "query only" connections cant modify the CIB
      + Periodically dump some stats about what the CIB has been doing.
      + Verify there are no memory leaks
      + Performance enhancements
      + Prevent a single CIB client from blocking everyone else
      + Clients Can be notified of full CIB replacements
      + record_config_changes option in ha.cf for those worried about 
        the amount of logging.  Defaults to "on".
      + suppress_cib_writes CIB option replaced with in enable_config_writes ha.cf 
        (enable_config_writes to be removed in 2.0.4)
      + Never write the status section to disk
      + Check permissions for the on-disk CIB at startup
      + Dont trash unreadable on-disk CIBs
      + Fix for updates made against the whole CIB (not just one section) 
    + PEngine (Policy Engine)
      + Many improvements to the handling of resource groups
      + Support "anonymous" clones
      + Fix stonith ordering
      + Order DC shutdowns after everyone else's
      + Support short resource names (for group and clone resources)
      + The ordering and colocation of grouped resources is now optional
      + Support probing new nodes for active resources.
      + All "probe" actions are controlled by the PE.
        + No resource may be started until the probing is complete.
        + Do not probe for resources we know to be active on unprobed nodes
      + When looking for monitor ops, only mark it optional if it was already
        active on the node we're interested in.
      + Detect changes to class/type/provider/parameters and force a restart
        of the resource
      + New record_pengine_inputs option in ha.cf for those worried about 
        the amount of logging.  Defaults to "on".
      + Differentiate between config and processing errors
        + reduces the frequency that we need to log the complete CIB
      + Make notify for master/slave work
      + New CIB option: stop_orphan_actions (boolean)
        If a resource is no longer defined, we can optionally stop it
      + New CIB option: stop_orphan_actions (boolean)
        If a monitor op for a given interval is no longer defined, we can
        optionally stop it
      + Add support for time and phase-of-the-moon based constraints
      + Improved failure handling: avoiding false positives
      + Always create orphaned resources - so they show up in crm_mon
      + Do not require sequential clone numbers starting at 0
    + TEngine (transition engine)
      + Detect old stonith ops
    + CLIs (Command Line interfaces)
      + Create a --one-shot option for crm_mon
      + Switch a number of CLI tools to use the new syncronous connections
      + Log errors to stderr where they will be seen and therefore useful
      + Support migration and un-migration of resources and resource groups
      + Create crm_verify for checking configuration validity
      + Simplify the passing of XML to cibadmin
    + Known open bugs worth mentioning:
      + 1075, 1080, 1081, 1084, 1085, 1064, 1069, 756, 984
      + 1050, 1082, 1037, 1079


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.4 - Bug fix release - worth getting these updates
    + Fixed cpu loop for LRM
    + Fixed minor bugs in Filesystem resource agent (submounts, some
  	options)
    + make the Raid1 resource agent more mdadm friendly (Ranjan Gupta), and
  	other fix
    + Various small resource agent cleanups
    + Keep CCM from core dumping when certain conditions occur which
  	cannot be recovered from.
    + make the Raid1 resource agent more mdadm friendly (Ranjan Gupta), and
  	other fix
    + CRM General
      + Fix for a crash where the CRM referenced a NULL pointer.
      + Refine shutdown detection
      + Review and fix the contents and timing of CIB updates that are required
        when nodes appear, leave, and join the CRM.
      + Ask Heartbeat for a list of known nodes and use it to populate the <nodes>
        section in the CIB
      + Stop the CRM shutting down all active resources at exit 
        - it doesn't know if they're managed or not
      + Completely overhaul the CRM shutdown sequence
        - it now shuts down much more reliably
    + TEngine
      + Abstract out the core components into a library
      + Avoid recursion by using Gmainloop
      + Detect un-runnable sections of the graph without the need for timeouts
    + PEngine
      + Add code to support notification data for start/stop actions
  	associated with clone resources
      + Link the new TEngine library with the PE testing code and simulate
        the transitions it generates
      + Bug 1084: Nodes that are offline but have active resources listed need
        to be marked as unclean for possible fencing
    + CIB
      + Change the shutdown sequence to prevent updates being lost
      + Handle un-wrapped CIB updates
      + Write out the CIB asynchronously


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.5 - significant bug fixes and a few feature deficits fixed
    + various portability fixes
    + enable GUI to run with pygtk 2.4
    + significant GUI improvements and speedups
    + numerous logging improvements (generally much quieter)
    + speed up CIB processing by writing it to disk asynchronously
    + add CIB on-disk checksums
    + removed dependency on openssl
    + added "failure stickiness" to the CIB/CRM
    + Several fixes to the membership code
    + We now log all output from resource agents
    + fixed STONITHd memory leaks.
    + Added an OCF RA for Xen guests
    + Added email alerts to ldirectord
    + Improvements to the haresources2cib upgrade tool
    + Several fixes to cibadmin
    + Fix some autoadd-related bugs
    + Added Chinese support to the GUI
    + Added a daemon to replace and generalize ipfail
      + Limited testing only
    + Significant improvements to CIM model, including modifying things
    + Extensive Master/slave testing and fixes
    + Use a digest of the parameters used in an action (smaller CIB)
    + Improved detection of "old" events that should be ignored by the PE
      (ensures resource monitoring is active when required)
    + Better detection of required and/or optimal behaviour in mixed
      (and formerly mixed) clusters
    + LRM now supports multiple concurrent monitor operations
    + Optional startup & runtime enforcement of DTD validation
      (Invalid changes are rejected)
    + cibadmin tool overhauled and verified to function correctly
    + Some depreciated CIB features now unsupported
      + Placing nvpair objects in crm_config (must now use cluster_property_set)
      + on_stopfail removed in favor of setting on_fail in the resource's stop operation
      + start_prereq removed in favor of setting prereq in the resource's start operation
    + Minimum required version for performing a rolling upgrade of a
      crm yes" cluster to 2.0.5 is 2.0.4
    + Changed traditional_compression to default to NO.  This new default
  	is not compatible in mixed clusters running version 2.0.0-2.0.2.
  	If you are upgrading a CRM-based cluster to >= 2.0.5, you
  	have to go through 2.0.4 anyway (for other reasons), so this
  	shouldn't cause any additional difficulties.
  	Non-CRM clusters shouldn't be affected by this because only
  	CRM packets are large enough to be compressed.


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.6 - bug fix and a few enhancements release
    + Added the ability to start/stop groups from the GUI
    + Fixed a few monitoring bugs in the Apache resource agent
    + Changed the name of the netmask parameter to the IPaddr and IPaddr2
  	resource agents.  This is because the netmask must be specified
  	in CIDR format.  The new name is cidr_netmask.  It will continue
  	to work the old way.
    + Changed target_role so that when you stop a resource, all the resources
  	which depend on it also stop - all in the proper order.
    + Many enhancements
      default_resource_failure_stickiness
      OCFS2 cluster filesystem support
      new VIPArip resource agent
      new SysInfo resource agent
      new Oracle resource agents
      Add cluster naming directive
      Added node quorum voting weights
      Added site declaration
      ha_propagate command
      allow NFS to run as a cloneable filesystem
      haresources2cib extensions
      added cibadmin man page
      Make startup fencing optional (for the brave)
      Many CIM improvements
    + Many GUI improvements
      added hb_gui symlink in /usr/bin
      significant speedup
      added support for types of groups:
      move resources up/down in groups
      resources default to being stopped
      stonith RA metadata
      basic heartbeat class RA metadata
      reworked resource addition dialog
      right-click menu
      support for clones
    + Bug fixes:
      Fixed a long-standing problem where the .src.rpms weren't usable across
  	32/64-bit boundaries
      Many clone resource fixes
      autojoin works now
      target_role is now handled completely differently
      pingd and attrd now work
      OSDL 1221 GUI doesn't always keep the top window on top
      OSDL 1248 Add target_role to group causes pengine fatal assert.
      OSDL 1252  probe for newly added resouces
      Novell 12532 - parent options do NOT take precedence of child
                 values Use #default as a special parameter value
      Novell #176014: wait longer before declaring attrd/pingd
             unable to connect
      Novell #178488: Notifications not generated for failed nodes
      Novell #178764 - TE doesn't abort transition
      Novell #179233 - Propagate the status of the heartbeat
                       service toojj
      OSDL 1276 - Broken clones cause segfaults
      OSDL 1275: add signing off
      Novell #180303: Filesystem returned 7 instead of 0 for
             an already unmounted filesystem.
      Novell #180303:  Notification ordering
      Novell #180799: Multiple probes scheduled for non-unique clone
      Novell #180699: Probe anonymous clones correctly
      Novell #183221 - Resource migration
      Deb 372850 migrate IPv6addr binary out of /etc
      OSDL 1280: deal with the situation that the time restart
                 is shorter than deadtime
      OSDL 1272: add a new channel for callback APIs
      OSDL 1281: Handle anonymous clone renaming correctly when
                 we have too many instances in the status
                 section
      OSDL 1183: use the new API of heartbeat to avoid message
                 delay; remove redundant code
      OSDL 1318: Add to send back a confirmation of setting up the
                 callback channel
      OSDL 1329: Fix for memory leak in CIB_OP_MODIFY
      OSDL 1239: RPM unconditionally included files which were
                 only present when mgmtd was build.
      OSDL 1334: When using anonymous clones, send the resource action
                 with the name that the clone uses locally, not the
                 name we use for it internally.
      OSDL 1301: add the capacity of get_cur_state; polish on
                 memory free
      OSDL 1340: Failure to stop a clone
      OSDL 1300: stonithd / lrmd lose their connection
      OSDL 1055: Add missing RPM package dependencies
      OSDL 1349: Fix file descriptor leak on failed fork
      Deb 375941 Don't run deluser and delgrp in postrm
      OSDL 1356: Group colocation fixes when one group cant
                 run anywhere
      OSDL 1350: Case sensitive searching for resources
      OSDL 1344: when an admin replaces the nodes section we should
                 make sure that all the nodes heartbeat knows about
                 are in there.
      OSDL 1356: reordered the "are any resources active" check to
                 happen after we've confirmed all resource actions
                 are complete
      OSDL 1354: CRM silently ignores trailing characters in XML input
      OSDL 1162: fix memory leak in cl_msg compression code
      Deb 376722 Add missing debian dependencies
      Deb 376786 Add missing debian dependencies
      OSDL 1360: Clones enforce resource_stickiness == INFINITY
                 Move clone instances to higher preferred nodes
      OSDL 1364: should restrict rpm-based commands to rpm-based
                 systems
      OSDL 1269: STONITH clone stops running after some time ...
    + KNOWN LIMITATIONS and BUGS
      + the GUI core dumps when run using AIX-based X servers


author: Johnny Hughes <johnny@centos.org> 2.0.6-1.c4
changelog:
  - changed the build reqts from perl-ldap to perl-LDAP
    to be compatible with CentOS-4/el-4
  - Modified to add the standard CFLAGS for CentOS building


author: Robin Norwood <rnorwood@redhat.com> - 2.1.24-1
changelog:
  - bugzilla: 172705 - Reduce frequency of checkins for nag polling.
    Also refactor so that the nag check occurs in the model.


author: Radek Vokal <rvokal@redhat.com> 1.0.11-1.1
changelog:
  - upgrade to 1.0.11
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.11.html
  - fixes CVE-2009-4377 and CVE-2009-2563
  - Resolves: #549581


author: Jan Safranek <jsafrane@redhat.com> 1.0.14-1
changelog:
  - upgrade to 1.0.14
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.14.html
  - fixes CVE-2010-1455 CVE-2010-2283 CVE-2010-2284 CVE-2010-2286 CVE-2010-2287
  - Resolves: #612237


author: Jan Safranek <jsafrane@redhat.com> 1.0.15-1
changelog:
  - upgrade to 1.0.15
  - http://www.wireshark.org/docs/relnotes/wireshark-1.0.15.html
  - fixes CVE-2010-2287 CVE-2010-2284
  - Related: #612237


author: Ivana Varekova <varekova@redhat.com> 5.51-7.EL4.5
changelog:
  - fix 164927 - TOCTOU issue in unzip
  - fix 178960 - unzip long filename buffer overflow
  - fix 199104 - add large file support 
    (return Lon's ~4GB patch - fixed symlink problem)


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-88]
changelog:
  -cpu p-state limits (via acpi_ppc) ignored by os (Stanislaw Gruszka) [490531]
  -add some missing bits to the chelsio cxgb3 driver (Doug Ledford) [454557]
  -net: ipv6: mcast: fix joining all node multicast group on device initialization (Jiri Pirko) [494463]
  -exit_notify: kill the wrong capable check (Oleg Nesterov) [494269]
  -e1000e: reset chip when taking down interface (Andy Gospodarek) [452287]
  -kernel: random32: seeding improvement (Vitaly Mayatskikh) [458022]
  -nfsv4: client crashes when doing a lookup on files with long names (Sachin S. Prabhu) [493939]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89]
changelog:
  -fix regression in cxgb3 driver spin_lock usage (Andy Gospodarek) [495557]
  -cxgb3: fixup possible workqueue deadlocks (Andy Gospodarek) [495558]
  -e1000: network driver doesn t reset nic during shutdown and prevents pxe reloads (George Beshers) [465620]
  -cxgb3: fix msix bringup so we don't leak vectors on failed init (Doug Ledford) [495556]
  -e1000e: support for 82583 and new 82574LA (Andy Gospodarek) [452287]
  -igb: support for dual port 82576 (Andy Gospodarek) [452289]
  -dm crypt: memory corruption when invalid mapping parameters provided (Milan Broz) [495673]
  -Revert "fix race condition in input.c (Vivek Goyal) [491940]
  -Revert "more fixes for fix race condition in input.c" (Vivek Goyal) [491940]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.1]
changelog:
  -Reapply: fix race condition in input.c (Vivek Goyal) [501804 501064]
  -nfs: inode of the overwritten file will remain in the icache (Flavio Leitner) [501802 494015]
  -fix timespec off by one errors (Jason Baron) [501800 496201]
  -add some long missing capabilities to cap_fs_mask (Eric Paris) [499073 499074] [497269 497270] {CVE-2009-1072}
  -net: tcp: clear probes_out more aggressively in tcp_ack (Jiri Pirko) [501754 494428]


author: Jiri Olsa <jolsa@redhat.com> [2.6.9-89.0.2]
changelog:
  -xen: local denial of service [500948 500949] {CVE-2009-1758}
  -nfs: fix client handling of MAY_EXEC in nfs_permission [500299 500300] {CVE-2009-1630}


author: Jiri Olsa <jolsa@redhat.com> [2.6.9-89.0.3]
changelog:
  -agp: zero pages before sending to userspace (Jiri Olsa) [497023 497024] {CVE-2009-1192}
  -agp: fix boot issue with agp zero pages patch (Jiri Olsa) [497023 497024] {CVE-2009-1192}
  -e1000: fix skb_over_panic (Neil Horman) [502982 502983] {CVE-2009-1385}
  -kernel: proc: avoid information leaks to non privileged processes (Amerigo Wang) [499549 499548]
  -netpoll: bust poll_lock when doing netdump (Neil Horman) [504565 494688]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.4]
changelog:
  -cifs: fix unicode alignment and buffer sizing problems (Jeff Layton) [494277 494278] {CVE-2009-1439}
  -cifs: fix potential buffer overruns when converting strings (Jeff Layton) [496574 496575] {CVE-2009-1633}
  -eliminate deadlock with echo 1 > /proc/sys/vm/drop_caches (Larry Woodman) [505649 495861]
  -net: bonding: select current active slave when enslaving device for mode tlb and alb (Jiri Pirko) [507563 500637]
  -fix cast in time keeping code (Prarit Bhargava) [508835 491147]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.5]
changelog:
  -mm: clear hugeptes properly (James Paradis) [513182 497204]
  -block: protect the per gendisk partition array with rcu (Jeff Moyer) [512310 495858]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.6]
changelog:
  -r8169: fix crash when large packets are received (Ivan Vecera) [504729 504730] {CVE-2009-1389}
  -block: block initialize request struct (Tomas Henzl) [513189 505506]
  -scsi: do not fastfail device errors (Mike Christie) [514007 505122]


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.7
changelog:
  - apply additional patch to fix xpdf flaws from Ludwig Nussel
    (CVE-2005-3191, CVE-2005-3192 and CVE-2005-3193)


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.0.1.EL4.11
changelog:
  - fix CVE-2010-0827 CVE-2010-0739 CVE-2007-5935 CVE-2007-5936 CVE-2007-5937
  CVE-2009-0146 CVE-2009-0195 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799
  CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182
  CVE-2009-1183 CVE-2009-0791 CVE-2009-3609
  Resolves: #577322


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.13
changelog:
  - add another hunk to CVE-2010-0827 patch to fix tfmload.c as well
    (https://bugzilla.redhat.com/show_bug.cgi?id=577322#c3)


author: Ville Skyttä <ville.skytta at iki.fi> - 1.58-1
changelog:
  - #121168
  - Update to 1.58.
  - Require perl(:MODULE_COMPAT_*).
  - Handle ParserDetails.ini parser registration.
  - BuildRequires libxml2-devel.
  - Own installed directories.


author: Marcela Maslanova <mmaslano@redhat.com> - 1.58-3
changelog:
  - add parameter -d, same date on all archs. Fix multilib problem.
  - patch from Robin Norwood
  - Resolves: rhbz#221286
  - Specify permissions on directories to work around rpm issue.


author: Jens Petersen <petersen@redhat.com> - 1.5.4-1
changelog:
  - 1.5.4 bugfix release
  - improve libtool-1.4.2-multilib.patch (Albert Chin) and only apply to
    libtool.m4
  - use bootstrap instead of autoreconf to update configuration
  - update libtool-1.4.3-ltmain-SED.patch to libtool-1.5.4-ltmain-SED.patch


author: Alexandre Oliva <aoliva@redhat.com> - 1.5.6-4.EL4.1
changelog:
  - add dependency on gcc version; /usr/bin/libtool hardcodes paths into
    gcc's internal directories.  Avoids resurfacing of BZ#140977.


author: Johnny Hughes <jhughes@centos.org>
changelog:
  - rebuilding as a .centos4 package when changing gcc version.  This
    need is created by the Feb 25 2005 change.
    See http://bugs.centos.org/view.php?id=1156


author: Johnny Hughes <jhughes@centos.org> 1.5.6-4.EL4.1.c4.4
changelog:
  - added a dfine for gcc version at 3.4.3 as all gcc's later than this provide
    gcc=3.4.3 for libtool and apr-devel.


author: Ivana Varekova <varekova@redhat.com> 5.0.5-16.rhel4
changelog:
  - Resolves: #244207
    Overflow asum.frmkb of the sar command.
  - Resolves: #229188
    The result of the sar command is not right.
  - Resolves: #244206
    The sysstat-debuginfo package is empty.
  - Resolves: #229062
    systat package sar overwrites itself when linking /var/log/sa
  - Resolves: #199265
    Backport NFS performance metrics


author: Ivana Varekova <varekova@redhat.com> 5.0.5-20.el4
changelog:
  - Resolves: #435683
    Incorrect context switch data in binary sar files
  - Resolves: #458237
    When executing 'sar -y' command, error message is output.
  - Resolves: #453050
    file_stats[curr, prev].cpu_* values of sar show innacurate CPU usage


author: Ivana Varekova <varekova@redhat.com> 5.0.5-25.el4
changelog:
  - Related: #475255
    SAR appends to the sa file and does not overwrite it - 
    28 days is too long for February


author: Jason Baron <jbaron@redhat.com> [2.6.9-28]
changelog:
  -s390: add qeth CDLC support (Jan Glauber) [170689]
  -s390: fix semaphore performance problem under LPAR (Jan Glauber) [171699]
  -s390: qeth driver fixes (Jan Glauber) [175726 175725 175723]
  -s390: fix swapped memset args (Dave Jones) [176825]
  -add SAS support (Jeff Garzik) [165134 177527]
  -fix ioctl compat for USBDEVFS_IOCTL (Pete Zaitcev) [158852]
  -device-mapper mirroring: Increment mirror version number (Alasdair Kergon) [176874]
  -device-mapper mirror log: avoid overrun while syncing (Alasdair Kergon) [177031]
  -bnx2: update to version 1.4.30 (John Linville) [164825]
  -add scsi2 support when pq3 is returned and fix regressions from scsi3 support (Mike Christie) [155725 177587]
  -fix dm-crypt key leak (James Morris) [177136] {CVE-2006-0095}
  -Bump MAX_APICS to support largesmp configs (Jim Paradis) [177561]
  -nfs: fix acl hang (Steve Dickson) [177522]
  -autofs4 regression: remove negative dentry caching (Jeff Moyer) [175687]
  -s390: fix hangcheck-timer (Jan Glauber) [175988]
  -device-mapper snapshots: Barriers are not supported (Alasdair Kergon) [177620]
  -device-mapper snapshots: fix origin_write pending_exception submission (Alasdair Kergon) [172839]
  -prevent LVM stripe on SATA resulting kernel panic (Larry Woodman) [166544]


author: Jason Baron <jbaron@redhat.com> [2.6.9-29]
changelog:
  -tg3: add wmb() (John Linville) [178231]
  -sky2: updates from upstream (John Linville) [177882 178837]
  -HT sibling setup bug (Geoff Gustafson) [178740]
  -e1000: actually support 82571/2 (John Linville) [165118]


author: Jason Baron <jbaron@redhat.com> [2.6.9-30.1]
changelog:
  -sky2: allow MAC address change w/o PHY re-init (John Linville) [177987]
  -fix kabi breakage in cpuinfo_ia64 (Geoff Gustafson) [180405]
  -automatic detection and initialization of bigsmp mode (Peter Martuccelli) [172992]
  -revert: wake-balance optimizations, fixes corner case performance issue [177634]
  -optimize kprobes fault handling (Anil Keshavamurthy) [177634]
  -fix NEC Express5800 not booting (Brian Maly) [178439]
  -e1000: omnibus fixes (John Linville) [165118]
  -device-mapper snapshots: fix snapshot kcopyd destructor [179751]


author: Jason Baron <jbaron@redhat.com> [2.6.9-33]
changelog:
  -fixup kcopyd nr_jobs accouting (Jonathan Brassow) [181574]
  -fixup "noht" bootline command option (Jim Paradis) [181884]


author: Pasi Pirhonen <upi@iki.fi> [2.6.9-34]
changelog:
  - added i586 support for CentOS
  - modified the kernel to build with no username for CentOS
  - changed the key to CentOS and not redhat


author: Johnny Hughes <johnny@centos.org> [2.6.9-34.106.unsupported]
changelog:
  -added i586 support for CentOS
  -modified the kernel to build with no username for CentOS
  -changed the key to CentOS and not redhat
  -rolled in the unsupported configurations
  -added IPX and ATALK to x86_64
  -added centos4-unsupported-linux-2.6.9-reiserfs.patch


author: Martin Hunt <hunt@redhat.com>
changelog:
  - Set Version to use version from autoconf.
  - Fix up some of the path names.
  - Add Requires and BuildRequires.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.4.EL4
changelog:
  - More byte-order fixes for mke2fs and ext2online
  - Disable fallback to old-style resize if new kernel resize code is not
    available


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.6.EL4
changelog:
  - Disable offline resize for now: resize2fs is incompatible with
    online resize, and can result in corrupt filesystems.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-12.1.EL4
changelog:
  - Reenable offline resize
    + fix interactions with online resize
  - Many bugfixes from e2fsprogs-1.36:
    + Offline resize maintains the online resize inode
    + e2fsck fixes for online resize 
    + fix mke2fs -[R|E] resize= option
    + fix removal of the xattr feature
    + fix offline resize byte swapping on bigendian hosts
    + dumpe2fs/tune2fs will show the reserved GDT blocks on a filesystem
  - Fix determination of device size for devices >= 4TB (bugzilla #143907)
  - Fix gdt verification on bigendian hosts for online resize 
    (bugzilla #142493, #142480)
  - Never default to blocksize >4K in mke2fs
  - Supercede old double-kfree fix (bugzilla #132707)
  - Remove undesirable debug printfs from libe2fs resize code


author: Thomas Woerner <twoerner@redhat.com> 1.35-12.2.EL4
changelog:
  - Fixed overflow handling for device size determination on 64-bit hosts
    (#158518) - Thanks to Stephen C. Tweedie for the patch.
  - Fixed SEGV on large partitions (#158931)
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
  - Fixed type aliasing problem (ext2fs abort) (#161183)
    Thanks to Stephen C. Tweedie for the patch.


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix up microcode path in initscript.
  - Startup microcode update by default in all runlevels. (#146415)


author: Dave Jones <davej@redhat.com>
changelog:
  - Make sure we load the microcode kernel module at init.
  - Wait for udev to create device node before we start microcode_ctl
  - remove microcode kernel module after use.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-1.4E
changelog:
  - Upgrade to 3.0.8, closing CAN-2004-0930
    This obsoletes the x_fclose, disable-sendfile, fqdn and salt patches.
    Updated pie and logfiles patches for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-1.4E.1
changelog:
  - Include updated docs tarball, replacing the incorrect docs/ directory
    in the 3.0.8 tarball.
  - Updated the logfiles patch to match the new docs/ tree.


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-1.4E
changelog:
  - Upgrade to 3.0.9, which fixes problems with 3.0.8, including
    (from the release notes)
    o Problem updating roaming user profiles.
    o Crash in smbd when printing from a Windows 9x client.
    o Unresolved symbols in libsmbclient which caused 
      applications such as KDE's konqueror to fail when
      accessing smb:// URLs.
  - Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Fix the pidfile comment in the winbind.init script, closing #76641
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount
  - 3.0.8 also closed CAN-2004-0882


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E
changelog:
  - Upgrade to 3.0.10, to close bz#143983  This obsoletes
    the -CAN-2004-1154 patch.
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E.1
changelog:
  - try the -gcc4 patch, to see if it solves problems with nmbd crashing.
    bz#150582 ? nmbd dies when windows client requests browse list


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - include the -smbspool pattch from RHEL-3, to close
    bz#155350 SAMBA client working, printer configuration not working
  - include the -winbindd_2k3sp1 patch to allow Samba to authenticate
    against a Windows 2003 SP1 machine.  This closes
    bz#154558 Winbind refuses to authenticate against Windows 2003 SP1


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E.2
changelog:
  - include the -bug157208 patch. to close
    bz#157208 CRM 511318 - smbfs dont respect uid and gid options when mounting


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.9-0.1.el4
changelog:
  - Update to 1.5.0.9 (RC)
  - Update the pango patches to support mathml and various fixes.
  - Let Thunderbird handle gcc warnings; it weeds out frequent offenders.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.9-0.2.el4
changelog:
  - Fix langpack support to start in the user's locale where possible
  - Allow OpenOffice to send files as Thunderbird attachments


author: Kai Engert <kengert@redhat.com> - 1.5.0.12-0.2.el4
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Johnny Hughes <johnny@centos.org> - 1.5.0.12-0.3.el4.centos
changelog:
  - changed thunderbird-redhat-default-prefs.js to thunderbird-centos-default-prefs.js
  - added add_CAcert.org_cert.patch


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-94]
changelog:
  -modules: sysctl to block module loading (Jerome Marchand) [645220]
  -redhat: added config_security_dmesg_restrict option (Frantisek Hrbata) [653252]
  -kernel: restrict unprivileged access to kernel syslog (Frantisek Hrbata) [653252]
  -sysctl: introduce ctl_unnumbered definition in sysctl.h (Frantisek Hrbata) [653252]
  -usb: allow usbstorage to have luns greater than 2TB (Don Zickus) [658824]
  -serial: clean data before filling it (Mauro Carvalho Chehab) [648809] {CVE-2010-4075}
  -sched: fix task starvation on Hyperthreaded cpus (Vitaly Mayatskikh) [488089]
  -s390: sclp: handle zero length event buffers (Hans-Joachim Picht) [487692]


author: Don Howard <dhoward@redhat.com> [2.6.9-95]
changelog:
  -jbd: skip buffers that have a different jh (Josef Bacik) [488611]
  -unix: fix local socket dos (Neil Horman) [656758] {CVE-2010-4249}
  -s390x: qdio: fix zfcp stall with more than 63 active qdio devices (Hendrik Brueckner) [662130]
  -ehci-hcd: fix fatal error during bootup (Don Zickus) [656447]


author: Don Howard <dhoward@redhat.com> [2.6.9-96]
changelog:
  -usb: ehci amd periodic frame list table quirk (Don Zickus) [651334]
  -fs: truncate blocks outside i_size after O_DIRECT write error (Eric Sandeen) [665067]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-97]
changelog:
  -fs: fix filesystem corruption on ext2 (Alexander Viro) [662839]
  -sky2: fix oops in sky2_xmit_frame after tx timeout (Don Howard) [614559]
  -netdump: fix netdump failures on large memory systems (Neil Horman) [488557]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-100]
changelog:
  -cxgb3: prevent reading uninitialized stack memory to fix xgb_extension_ioctl infoleak (Eugene Teo) [633153] {CVE-2010-3296}
  -mlx4: disable MSI-X by default (Andy Gospodarek) [530596]
  -ext3: call fs's invalidatepage instead of block_invalidatepage (Josef Bacik) [488611]
  -av7110: check for negative array offset (Mauro Carvalho Chehab) [672400] {CVE-2011-0521}
  -ext3: don't dirty unmapped data buffers (Josef Bacik) [488611]
  -net: clear heap allocations for privileged ethtool actions (Jiri Pirko) [672431] {CVE-2010-4655}


author: Johnny Hughes <johnny@centos.org> - [2.6.9-100.centos]
changelog:
  - rolled in standard centos changes (build for i586, change genkey to genkey.centos )
  - bugs.centos.org#3976 fixed
  - i586 kernel config: CONFIG_IP_NF_MATCH_CONNLIMIT=m added (from 2.6.9-89.0.25)


author: Don Howard <dhoward@redhat.com> [2.6.9-101]
changelog:
  -cciss: fix lost command problem (Tomas Henzel) [554452]
  -dm: work around mempool_alloc, bio_alloc_bioset deadlocks (Lachlan McIlroy) [578699]
  -qioctlmod: unsuspend targets if qla_cmd_wait() fails (Chad Dupuis) [576756]
  -qioctlmod: restore qim_cmd_wait() so target io suspend works correctly (Chad Dupuis) [576756]


author: Tru Huynh <tru@centos.org> - [2.6.9-101.plus.c4]
changelog:
  - based on centos 2.6.9-101 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - enabled HDLC support [centos bug #3019]
  - corrected an error in earlier cplus configs [centos bug #4011]
  - +  Johnny Hughes <johnny@centos.org> - [2.6.9-100.centos]
  - rolled in standard centos changes (build for i586, change genkey to genkey.centos )
  - bugs.centos.org#3976 fixed
  - i586 kernel config: CONFIG_IP_NF_MATCH_CONNLIMIT=m added (from 2.6.9-89.0.25)


author: Phil Knirsch <pknirsch@redhat.com> 2.0.27-1
changelog:
  - Updated to 2.0.27 due to:
    o Potential memory overruns in gdImageFilledPolygon. Thanks to John Ellson.
    o The sign of Y-axis values returned in the bounding box by gdImageStringFT was
      incorrect. Thanks to John Ellson and Riccardo Cohen.


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E.3
changelog:
  - Include the bug-171003-it79180 patch from Keiichi Mori <kmori@redhat.com)
    (Backported from 3.0.11) to fix
    bz#171003 [RHEL4] samba memory leak
  - Include the rpc-parse-64bit-clients patch to close
    bz#167020 CRM 562408: 64-bit windows clients cannot join Samba PDC domain due
       to Samba RPC parsing error fixed in 3.0.20


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E.4
changelog:
  - Include the ldap-failover-timeout-backport.patch backported by
    Bastien Nocera (bnocera@redhat.com) to fix
    bz#173892 Authentication doesn't fail over when AD becomes unavailable


author: Mike A. Harris <mharris@redhat.com> 2.1.7-3
changelog:
  - Added -fno-strict-aliasing to CFLAGS and CXXFLAGS to try to fix SEGV and
    SIGILL crashes in mkfontscale which have been traced into freetype and seem
    to be caused by aliasing issues in freetype macros (#118021)


author: Owen Taylor <otaylor@redhat.com> 2.1.7-4
changelog:
  - Add patch from freetype CVS to fix problem with eexec (#117743)
  - Add freetype-devel to buildrequires and -devel requires
    (Maxim Dzumanenko, #111108)


author: Owen Taylor <otaylor@redhat.com> - 2.1.9-1
changelog:
  - Upgrade to 2.1.9
  - Since we are just using automake for aclocal, use it unversioned,
    instead of specifying 1.4.


author: Alasdair Kergon <agk@redhat.com> - 1.01.00-2
changelog:
  - Reinstate a copy of previous shared library version 1.00 to avoid 
    requiring applications using libdevmapper to be recompiled immediately.


author: Alasdair Kergon <agk@redhat.com> - 1.01.01-1
changelog:
  - Update dmsetup man page.
  - Replicate devmap_name output with dmsetup info -c --noheadings -o name.


author: Alasdair Kergon <agk@redhat.com> - 1.01.02-1
changelog:
  - Add --exec and --target to dmsetup for initrd convenience.
  - Automatically call dm_lib_exit when exiting.


author: Alasdair Kergon <agk@redhat.com> - 1.02.00-1.0
changelog:
  - Extend library with hash, bitset, pool, dbg_malloc and activation
    tree functions.
  - Add ls --tree to dmsetup.
  - Add nolockfs support for suspend/reload.


author: Alasdair Kergon <agk@redhat.com> - 1.02.02-1.0
changelog:
  - Include event daemon in the build.
  - Export dm_task_update_nodes.
  - Use ioctl names instead of numbers in failure error messages.


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-1
changelog:
  - Import of tog-pegasus-2.4.1.Beta-3 .
  - Change .spec file to not build and install test RPM by default.
    You need to build and install RPMs with --define 'WITH_TEST 1'
    to get test rpm.
  - Add condrestart option to initscript - invoke condrestart on upgrade.
  - Re-Enable PPC64 support


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-2
changelog:
  - fix bug 165805: remove 'echo's after initscript's use of redhat-lsb's
    log_success_msg / log_failure_msg functions.
  - fix bug 165770: make initscript stop do 'rm -rf /var/run/tog-pegasus'


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-2.rhel4
changelog:
  - fix bug 165805: change location from /opt root to / root
                    cimserver not running by default
  		  rename 'sdk' package 'devel' package
                    compile all executables with ExecShield
  - fix bug 165880: no logging during post scriptlet
                    no postun scriptlets do 'rm -rf'
  		  added Requires(post) 
  		  moved symlinks into -devel package 
  - further fix for bug 165770: cimserver no longer stores socket in subdirectory


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-4.rhel4
changelog:
  - fix bug 167161: put all libraries into /usr/lib, not /lib
  - fix bug 167162: use internal pthread_cleanup_{push,pop} routines
  - fix bug 167163: correct pam Requires and pam-devel BuildRequires 
  - fix bug 167164: remove potential buffer overflows with gethostbyname
  - fix bug 167165: remove potential buffer overflow in System::extract_file_path
  - Upstream bug patches applied, as agreed with bug committee,
    which have been tested by HP and IBM and submitted to 2.4.2 -
    see http://cvs.rdg.opengroup.org/bugzilla/buglist.cgi?&keywords=2.4.2_approved :
  2207 CIMOMHandle drops InvokeMethod request
  2217 Interrupts improperly handled in Unix Semaphore implement...
  2499 Initial Provider load/initialize is not thread safe.
  2503 IndicationHandlerService::_lookupHandlerForClass() not th...
  3416 SDK sample build fails on x86_64 2.4 rpm
  3858 _subscriptionClassesTable not threadsafe
  3958 cimserver crashs after many indications delivered
  4004 cimserver crash in MessageQueueService after running for ...
  4009 Double close causes EBADF ("Bad file descriptor") failures
  4014 host name validation in CIMObjectPathRep::isValidHostname...
  4023 Assignment operators should return object references
  4025 Thread class uses internal pthread functions
  4027 SSLCallbackInfo class does not declare a copy constructor...
  4028 CIMInstance::buildPath assumes key properties are specified
  4029 Add TestIndicationStressTest to 2.4-branch
  4042 TestIndicationStressTest not enabled in 2.4 branch.
  4050 Compile warning building SDK packaged consumer.
  4072 ThreadPool Test Failure - 2.4 version of Bug 2239
  4103 Timing window where in MessageQueue Service - Could cause...
  4120 HTTPConnection _handleReadEvent should complete connectio...
  4126 On shutdown, cimom::routing_proc loops attempting to send...


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-4.2.rhel4
changelog:
  - fix bug 167986:
    o Add pam_access control
    o Distinguish between remote and local users for authentication
    o Create default pegasus user
    o Only pegasus user is allowed to connect from remote hosts by default
    o remove use of separate cimservera PAM authentication process 
      (plaintext passwords were being sent over its pipe)
  - fix bug 167987:
    o developed and tested pegasus_t policy in selinux-policy-targeted-1.17.30-2.110+
  - make /etc/pam.d/wbem not /lib directory specific (lib64)


author: Jason Vas Dias <jvdias@redhat.com> - 2.4.1-4.4.rhel4
changelog:
  - fix bug 168836: spec file issues:
    o add missing Requires({,pre,post,postun,preun})
    o generate SSL certificates in initscript, with genSSLcerts script, not in %post
    o use 'cimserver stop' instead of manual shutdown in %postun
    o do not 'mkdir' or 'rm -rf' in any scriptlet
    o replace potential use of redhat-lsb with chkconfig
  - fix upstream bug 4145: Failure on cimserver shutdown


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-163
changelog:
  - Remove an extraneous semicolon in a MACRO definition.  This allows the
    package to build with older, buggy compilers.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-171
changelog:
  - Modify the cache update fix to not muck with the ldap module, as that one
    should be okay already.  Also incorporate some innocuous changes from
    upstream.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-173
changelog:
  - Actually apply the cache update fixes.  Addresses bz #174543.
  - Add one fix to the patch that was missed from upstream.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-175
changelog:
  - Add a sysconfig variable which specifies a BASEDN to search for an LDAP
    master map. Addresses bz #181833.


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-177
changelog:
  - Allow for multiple direct map entries in the master map.  Fixes bz #187950.
  - Keep the build process from stripping binaries.  Otherwise, we get debuginfo
    packages that are useless.  Fixes bz #187948.


author: <jmoyer@redhat.com> - 1:4.1.3-179
changelog:
  - Add support for included maps. Fixes bz #173934.
  - Fix initial map source selection to use the name service switch file.
    Fixes bz #187947, #187949.


author: Johnny Hughes <johnny@centos.org>
changelog:
  - upgraded to upstream version 8.0.8
  - added drbd-8.0.8-inint64_t-include.patch to fix this issue detailed here:
    http://lists.linbit.com/pipermail/drbd-user/2007-December/008028.html


author: Johnny Hughes <johnny@centos.org>
changelog:
  - created a new branch named drbd82 to allow running drbd-8.2.x
  - added permissions changes if haclient exists in post section
  - allow upgrade from centos-5, conflicts and manual upgrade for centos-4


author: Ralph Angenendt <ralph@centos.org> drbd83-8.3.1-1
changelog:
  - upgraded to upstream version 8.3.1
  - created drbd83 branch to allow people to stay at 8.0/8.2
  - first packaging of this release


author: Ondrej Vasik <ovasik@redhat.com> 0.9.2-4.1
changelog:
  - fix #235411 - CVE-2007-2027 - elinks tries to load .po files
    from non-absolute path
  - fix #523258 - CVE-2008-7224 - entity_cache static array buffer
    overflow


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-3
changelog:
  - Backport code from head branch of fontconfig CVS to parse names 
    for postscript fonts (fixes #127500, J. J. Ramsey)
  - Own /usr/share/fonts (#110956, David K. Levine)
  - Add KacstQura to serif/sans-serif/monospace aliases (#101182)


author: Owen Taylor <otaylor@redhat.com> - 2.2.3-7
changelog:
  - Sleep a second before the exit of fc-cache to fix problems with fast 
    serial installs of fonts (#140335)
  - Turn off hinting for Lohit Hindi/Bengali/Punjabi (#139816)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-55.el4_8
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-56.el4_8
changelog:
  - update kadmin.init, kpropd.init, krb524d.init, krb5kdc.init to better
    match init script conventions and to let kadmin, krb524d, and krb5kdc
    pick up the realm name and additional command-line flags from files
    under /etc/sysconfig/ (#242501)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-57.el4_8
changelog:
  - backport a fix so that when a calling application passes an empty password
    to krb5_get_init_creds_password() and libkrb5 calls its prompter callback,
    the indicated length of the buffer in which the callback should store its
    response is the size of the buffer and not 0 (#244645)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-58.el4_8
changelog:
  - report password expiration warnings based on key expiration time, not
    principal expiration time (#250243)
  - make krb5.conf %verify(not md5 size mtime) in addition to
    %config(noreplace), like /etc/nsswitch.conf (#327521)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-60.el4_8
changelog:
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442772)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-61.el4_8
changelog:
  - tweak PAM patch to indicate that we're changing an expired password, so
    being root doesn't automatically mean it should be allowed if it's not
    a good password (#479082)
  - tweak PAM patch to indicate that login is running with a terminal
    device, so an expired password can trigger a password change, rather
    than requiring a failure (#479083)
  - add second PAM patch to also set the PAM_RHOST item (James Leddy, #457844)
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461900)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-62.el4_8
changelog:
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491836, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-62.el4_8.1
changelog:
  - add candidate patch to correct KDC integer overflows which could be
    triggered by malformed RC4 and AES ciphertexts (CVE-2009-4212, #546345)


author: David Tardon <dtardon@redhat.com> - 1.1.5-10.0.7.2
changelog:
  - Resolves: rhbz#529748 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1.1.5-10.0.7.3
changelog:
  - Resolves: rhbz#529748 openoffice.org various flaws
  - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption
  - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption


author: David Tardon <dtardon@redhat.com> - 1.1.5-10.7.8
changelog:
  - Resolves: rhbz#642175 openoffice.org various flaws
  - CVE-2010-3450 directory traversal flaws in handling of XSLT jar filter
    descriptions and OXT extension files
  - CVE-2010-3451 Array index error by insecure parsing of broken rtf
    tables
  - CVE-2010-3452 Integer signedness error (crash) by processing certain
    RTF tags
  - CVE-2010-3453 Heap-based buffer overflow by processing *.doc files
    with WW8 list styles with specially-crafted count of list levels
  - CVE-2010-3454 Array index error by scanning document typography
    information of certain *.doc files


author: David Tardon <dtardon@redhat.com> - 1.1.5-10.7.10
changelog:
  - Resolves: rhbz#642175 openoffice.org various flaws
  - CVE-2010-4643 heap based buffer overflow when parsing TGA files


author: Bill Nottingham <notting@redhat.com> 7.93.12.EL-1
changelog:
  - fix netfs w.r.t nfs root filesystem (#142169)
  - fix multiple scsi_hostadapter loads (#145432)
  - don't run the DDC probe in kmodule
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)


author: Johnny Hughes <johnny@centos.org>
changelog:
  - Initial build for Centos-4
  - Removed trademark info, added color CentOS prompt
  - Removed < 256mb RAM 10 sec pause
  - Added Patch1000 for these changes


author: Doug Ledford <dledford@redhat.com> 1.5.0-5
changelog:
  - Disable service mdmpd by default to avoid [Failed] messages on
    current 2.6 kernels.  Possibly re-enable it by default once the
    2.6 kernels have the md event interface.


author: Doug Ledford <dledford@redhat.com> 2.5.0-6
changelog:
  - Fix a bug in the %postun scriptlet related to downgrading to a version
    of mdadm that doesn't include the mdmpd daemon.


author: Doug Ledford <dledford@redhat.com> - 1.5.0-9
changelog:
  - Fix Makefile and build method to satisfy bz #123769
  - Add mdmpd man page, update mdmpd version to 0.3 - bz #117160
  - Make sure mdadm --monitor closes all md device files so that md devices
    can be stopped while mdadm is still running - bz #119532


author: Doug Ledford <dledford@redhat.com> 1.6.0-1
changelog:
  - Update to newer upstream version
  - Make mdmpd work on kernels that don't have the event interface patch


author: Doug Ledford <dledford@redhat.com> 1.6.0-3
changelog:
  - Convert from using MAJOR/MINOR macros to major/minor so that it can
    handle the increased number of devices available in the 2.6 kernel.


author: Doug Ledford <dledford@redhat.com> - 1.2-13
changelog:
  - Change name to openib-perftest because the last fix to the problem
    didn't fully resolve the issue
  - Resolves: bz447707


author: Joe Orton <jorton@redhat.com> 1:2.6.1-2.2
changelog:
  - switch to disable by default to prevent attempts to handle all
    authentication; "AuthMySQLEnable On" now required to enable (#144466)


author: Tim Waugh <twaugh@redhat.com> 2.5.1-27
changelog:
  - Fix dfa multibyte character class matching when -i is used (bug #123363).
  - Use bracket patch before i18n patch to make it clear that the bug exists
    upstream.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-31
changelog:
  - Make 'grep -F' avoid UTF-8 processing if the pattern contains no
    multibyte characters (bug #133932).


author: Tim Waugh <twaugh@redhat.com> 2.5.1-32.2
changelog:
  - Back-ported egf-speedup patch (bug #179636).  Also required fgrep,
    dfa-optional, and w patches to be back-ported.  Also fixes bug #176345.


author: Tim Waugh <twaugh@redhat.com> 2.5.1-32.3
changelog:
  - Fixed count of patterns when the last is an empty string (bug #204255).
  - Fix 'memory exhausted' errors by limiting in-memory buffer (bug #198167).


author: Stepan Kasal <skasal@redhat.com> 2.5.1-32.4
changelog:
  - fix hang under non-UTF-8 multibyte locales (#460641)
  - with lines longer than 200 MB, give up rather than print incorrect
    output (#440258)
  - fix an off-by-one error which might cause segfault (#434934)
  - Resolves: rhbz#460641, rhbz#440258, rhbz#434934


author: Than Ngo <than@redhat.com> 1:3.00-11.11
changelog:
  - apply patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179046)


author: Than Ngo <than@redhat.com> - 3.00-20.el4
changelog:
  - Resolves: #490712, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for some potential problems,
    latest upstream patch


author: Peter Jones <pjones@redhat.com> - 10.1.1.39-1
changelog:
  - Only probe ACPI on x86_64, not i386 (#171930)
  - Use /proc/lapics for ACPI probing (#171930)
  - Add support for nfs mount options on boot command line (#168384)
  - Handle tty1 mode for rescue mode shell correctly (#126620)
  - Don't put removable drives in the isys hard drive list (#147504)
  - Check for missing vg declaration earlier so the error message 
    makes sense (#176989)
  - Quote ethtool opts properly (#176918)
  - Add selinux to kickstart doics (#175868)
  - Add qla2xxx to module-info (#174993)
  - Always reset terminal attributes in loader on ppc (#166302)
  - Eliminate dupe vnc entries in command line docs (#175368)
  - Fix RAID error messages to be more clear (#184246)


author: Peter Jones <pjones@redhat.com> - 10.1.1.44-2
changelog:
  - Don't traceback if /proc/lapics is missing (#192818)
  - Fix another weird cpu counting issue on i386 HT Xeons (#193816)
  - Add more mpt drivers (#194036)


author: Peter Jones <pjones@redhat.com> - 10.1.1.45-1
changelog:
  - Revert bogus translation changes (#194153)
  - Backport new runShell code from HEAD so rescue mode works (#193285)


author: Johnny Hughes <johnny@centos.org> - 10.1.1.46-1.centos4
changelog:
  - Rolled in previous CentOS-4 fixes
  - added the anaconda.centos.spec as a source instead of a patch since the spec
    is used in the build process.


author: Johnny Hughes <johnny@centos.org> - 10.1.1.46-1.centos4.1
changelog:
  - change the name of SOURCE1 (anaconda.centos.spec) to anaconda.centos.spec.txt
    to fix a conflict with spectool and svn.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.0
changelog:
  - security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi-dos.patch: applied to fix a denial of service issue. (#138362)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.1
changelog:
  - security fix [CAN-2005-1992]
  - ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: applied to fix the arbitrary command
    execution on XMLRPC server. (#161095)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.2
changelog:
  - security fix [CAN-2005-2337]
  - ruby-1.8.1-safe-CAN-2005-2337.patch: a patch to preserve safe level in
    the environment where a method is defined. (#169575)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.3
changelog:
  - security fix [CVE-2006-1931]
  - ruby-1.8.2-webrick-dos-1.patch: a patch to read data with non-blocking I/O.
  - ruby-1.8.2-xmlrpc-dos-1.patch: a patch to use WEBrick's HTTPServer class to
    avoid the above issue as well.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.6
changelog:
  - security fixes [CVE-2006-3694]
    - fixed the insecure operations on Dir and Regexp in the certain safe-level
      restrictions. (#199539)
    - fixed to not bypass the certain safe-level restrictions. (#199545)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.7
changelog:
  - security fix release.
  - ruby-1.8.1-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212237)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.EL4.8.1
changelog:
  - security fixes (#320371)
  - ruby-1.8.1-cgi-CVE-2006-6303.patch: fix an infinite loop with certain HTTp
    request.
  - ruby-1.8.1-CVE-2007-5162.patch: fix an insufficient verification of SSL
    certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.el4_6.1
changelog:
  - security fixes. (#451926)
  - CVE-2008-2662: Integer overflow in rb_str_buf_append().
  - CVE-2008-2663: Integer overflow in rb_ary_store().
  - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
  - CVE-2008-2725: Integer overflow in rb_ary_update().
  - CVE-2008-2726: Integer overflow in rb_ary_update().
  - CVE-2008-2376: Integer overflow in rb_ary_fill().


author: Radek Vokal <rvokal@redhat.com> 2.0.1-5.EL4.4
changelog:
  - fix corruption when files upload simultaneously (#171308)
  - close vsftpd stdout or stderr before forking (#171614)
  - fix ssl connection breaks when uploading large files (#172841)


author: Maros Barabas <mbarabas@redhat.com> 2.0.1-5.EL4.7
changelog:
  - fix missing valid cases when used wildcarding
  - Resolves: #212210
  - fix error and closing connections when user_config_dir option
  - Resolves: #244864


author: Martin Nagy <mnagy@redhat.com> 2.0.1-6
changelog:
  - add option max_login_fails that kicks the session after few login fails
  - Resolves: #197141
  - fix bad handling of unique files
  - Resolves: #250727
  - increase maximum length of allowed username
  - Resolves: #236326
  - fix create/lock race condition when more clients are uploading to a file
  - Resolves: #240550
  - document lock_upload_files option
  - Resolves: #316381
  - allow usernames to begin with underscore or dot
  - Resolves: #339911
  - don't reply with code 150 two times when uploading files with STOU
  - Resolves: #387021
  - fix memory leak in ls.c
  - Resolves: #408431
  - daemonize correctly and report startup failure correctly
  - Resolves: #206843
  - fix init script
  - Resolves: #431450


author: Jiri Skala <jskala@redhat.com> 2.0.1-8
changelog:
  - Resolves: #465216 'binary operator expected' occurs in viartual hosting vsftpd
  - Resolves: #460069 vsftpd.conf lists incorrect default value for xferlog_file
  - Resolves: #479774 Wildcard failures with vsftpd


author: Simo Sorce <ssorce@redhat.com> 3.0.33-0.el4.12
changelog:
  - Rebase to 3.0.33 which is just 3.0.32 + CVE-2008-4314 security patch
  - related: #460904
  - Fix ACL inheritance
  - resolves: #471292
  - Updated also patch numbering so that RHEL5 and RHEL4 spec files are easier
    to compare


author: Simo Sorce <ssorce@redhat.com> 3.0.33-0.el4.13
changelog:
  - Second part of the fix for the ACL inheritance problem.
  - The new patch prevents the excel regression and an unwarranted change
    of ownership of files.
  - related: #471292


author: Simo Sorce <ssorce@redhat.com> 3.0.33-0.el4.14
changelog:
  - Add patches to mount.cifs.c to fix various errors in mount codes.
    The patch includes other patches it depends on from upstream.
  - resolves: #466285


author: Simo Sorce <ssorce@redhat.com> 3.0.33-0.15.el4
changelog:
  - Fix dependencies on perl modules introduced by error
  - Fix versioning to avoid conflicts with Z-streams
  - related: #460904


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-0.18.el4
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526658


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.5-2
changelog:
  - Security/DoS fixes from 2.5.6
    CVE-2009-1373-8331e31a
    CVE-2009-1374-ad057b75
    2c9a1153
    CVE-2009-1375-7829ec76
    CVE-2009-1376-9dd1c4c3


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961). 
  - Added patch to initialize "default" rule as well (#60693).


author: Peter Jones <pjones@redhat.com> - 4.2.1.1-1
changelog:
  - Make getArg return NULL on cmd=NULL, fixing #144472 .  Based on a
    patch from Kasper Dupont.
  - Make nash expand environment variables on command lines (#144474)
  - Make nash check pids returned from wait*() (#145660)


author: Peter Jones <pjones@redhat.com> - 4.2.1.2-1
changelog:
  - Fix clustered volume group locking in the initrd during vgscan/vgchange,
    and only activate the volume group / lives on (#151172)


author: Peter Jones <pjones@redhat.com> - 4.2.1.4-1
changelog:
  - close /init just after reading the file, instead of after runStartup()
    finishes, so it gets closed before we exec() /sbin/init . (#145601)


author: Peter Jones <pjones@redhat.com> - 4.2.1.8-1
changelog:
  - Fix mangling of mount when using device mapper (#171872)
  - Fix lvm striping (#174678, patch from Bastien Nocera)


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.0.1]
changelog:
  -ipv6: fix possible infinite loop condition (Thomas Graf) [170772] {CVE-2005-2973}
  -fix incorrect inrement/decrement in atm module (Thomas Graf) [175769] {CVE-2005-3359}
  -fix for ELF exec vulnerability on EM64T (Ernie Petrides) [183489 175663] {CVE-2006-0741 CVE-2006-0744}
  -Keys: Fix oops when adding key to non-keyring (David Howells) [188466] {CVE-2006-1522}
  -fix lsof causes kernel oops under heavy load (Adam Stokes) [189260]
  -nfs: fix client panic using O_DIRECT (Steve Dickson) [181795] {CVE-2006-0555}
  -Fix panic in ip_route_input() via inet_rtm_getroute() (Thomas Graf) [189346] {CVE-2006-1525}
  -LSM: add missing hooks to readv/writev (James Morris) [191524]
  -fix smbfs chroot issue (Peter Staubach) [189435] {CVE-2006-1864}
  -sctp: fix fixes for various vulnerabilities (Neil Horman) [191201 191202 191258] {CVE-2006-2271 CVE-2006-2272 CVE-2006-2274}
  -fix local crash by dio/mmap sg/st driver (Doug Ledford) [168791]
  -remove incorrect choose_new_parent BUG() call (Jason Baron) [187841]
  -fix bridge poisoning (Thomas Graf) [171383] {CVE-2005-3272}
  -netfilter/sctp: fix lockup in sctp_new (Thomas Graf) [190460] {CVE-2006-1527}


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.2
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Drop Conflicts: with older kernels, and instead provide backwards
    compatibility via a second microcode image. Fixes upgrade path.


author: Jarod Wilson <jarod@redhat.com> 2.4-15
changelog:
  - Update dmidecode to v2.9 for newer bios support (#459041)
  - Update to 20080910 microcode image (#453642)


author: Jarod Wilson <jarod@redhat.com> 2.4-18
changelog:
  - Work-around for multi-core opteron procs not scaling together,
    courtesy of Matthew Garrett (#497490)


author: Jarod Wilson <jarod@redhat.com> 2.4-19
changelog:
  - Add helper script that suggests fixes for clock drift issues
    when running RHEL4 as a KVM guest virtual machine (#517365)


author: Jarod Wilson <jarod@redhat.com> 2.4-20
changelog:
  - Revise kvm guest helper script to use dmidecode, since
    lshal doesn't show system vendor on RHEL4


author: Karsten Hopp <karsten@redhat.de> 1.10.1-2.4E.1
changelog:
  - wget.info gets splitted into multiple files on some archs, add 
    workaround to avoid multilib issues


author: Christopher Aillon <caillon@redhat.com> 1.0.7-1.4.1
changelog:
  - Update to 1.0.7, containing fixes for:
    CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
    CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968
    CAN-2005-2871


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.8]
changelog:
  -Insufficient range checks in fault handlers with mremap (Vitaly Mayatskikh) [428968] {CVE-2008-0007}
  -[MOXA] buffer overflow in moxa  driver (Vitaly Mayatskikh) [423131] {CVE-2005-0504}
  -Fix unix stream socket recv race condition (Hideo AOKI) [435122]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.9]
changelog:
  -[NET] link_watch: handle jiffies wraparound (Vince Worthington) [436749]
  -libata: un-blacklist hitachi drives to enable NCQ (David Milburn) [436499]
  -libata: sata_nv may send commands with duplicate tags (David Milburn) [436499]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.10]
changelog:
  -update: do not return zero in mmap (Vitaly Mayatskikh) [400811]
  -neofb: avoid overwriting fb_info fields (Vitaly Mayatskikh) [430251]
  -[NET] link_watch: always schedule urgent events (Don Dutile) [436102]
  -nlm: fix a client side race on blocking locks (Jeff Layton) [436129]
  -nlm: cleanup for blocked locks (Jeff Layton) [436129]
  -Add HP DL580 G5 to bfsort whitelist (Tony Camuso) [437976]
  -nfs: Discard pagecache data for dirs on denty_iput (Jeff Layton) [437788]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.11]
changelog:
  -nfs: High vm pagecache reclaim latency on systems with large highmem to lowmem ratio fix (Larry Woodman) [438345]
  -nfs: Fix nfs read performance regression. Introduce a new tunable (Larry Woodman) [438477]
  -Retry: check to see if agp is valid before reporting aperture size warnings (Brian Maly) [392771 431897]
  -Ensure IV is in linear part of the skb to avoid BUG due to OOB access (Thomas Graf) [427245] {CVE-2007-6282}
  -fix unprivileged crash on x86_64  cs corruption (Jarod Wilson) [439786] {CVE-2008-1615}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.14]
changelog:
  -fs: serialize file access for dnotify (Alexander Viro) [443437] {CVE-2008-1669}
  -update: fix race condition in dnotify (Alexander Viro) [439756] {CVE-2008-1375}


author: Johnny Hughes <johnny@centos.org> [2.6.9-67.0.15]
changelog:
  - rolled in standard centos changes (build for i586, change genkey to
    genkey.centos, do not terminate build on extra files).


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-20.RHEL4
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for bug 174683 / CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 2:5.8.5-22.RHEL4
changelog:
  - Further enhancements to sprintf integer overflow patch
    (Upstream patches 26322 26331 and 26333 for CVE-2005-3962 / bz174717 )
  - Fix CVE-2004-0976 / bz136325: fix issues with solardesigner's patch
    to perldbtty.pl and c2ph.PL, pointed out by Pekka Savola and David Eisenstein


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-26.RHEL4
changelog:
  - fix bug 185240: restore default minimum ioctl 3rd arg length of 256
  - fix bug 178343: include cpp built-in macros in $Config{cppsymbols}
  - fix bug 84671:  cleanup NDBM removal; restore DBM_Filter* .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-30.RHEL4
changelog:
  - fix errata testing issues:
    o bug 161305 localtime_r_needs_tzset incorrectly not set on 64-bit arches
    o generate perl headers correctly to avoid missing / unresolved headers


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-34.RHEL4
changelog:
  - fix errata testing issue - bug 191409, upstream perlbug 39130:
    o prevent h2ph emitting incorrect code for '#if defined A || defined B'


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.5-6.rhel4
changelog:
  - Add and build patch from Mike Patnode <mike.patnode@centrify.com> to
    use looked up username instead of assuming that the user-entered
    login name is cannonical (#147701).
  - Build patch from Soeren Sandmann  <sandmann@redhat.com> to fix 
    XDMCP protocol violation (#143266)


author: Ray Strode <rstrode@redhat.com> 1:2.6.0.5-7.rhel4.2
changelog:
  - Support new pam audit module (bug 159338)
  - Remove standalone check that causes spurious audit entries (bug 161230).


author: David Zeuthen <davidz@redhat.com> 0.4.0-3
changelog:
  - Fix bad use of O_NONBLOCK as the 2.6.8-1.624 kernel exposes this (#135886)
  - Never use the UUID as mount point candidate in the default policy 
    as it is unfriendly (#135907)
  - Fix a trivial bug in fstab-sync so the syslog messages actually expose
    the device name instead of just the word foo


author: David Zeuthen <davidz@redhat.com> 0.4.0-4
changelog:
  - Make hald cope with missing hotplug events from buggy drivers (#135202)
  - Fix the order of mount options in fstab-sync (#136191)
  - Allow x86 legacy floppy drives in default policy (#133777)
  - Fix fstab-sync crashing without any options and not run from hald (#136214)
  - man page for fstab-sync references non-existing files (#136026)
  - Add Russian translations for hal (#135853)
  - Add Hungarian translations for hal


author: David Zeuthen <davidz@redhat,com> 0.4.0-5
changelog:
  - Make hal work with PCMCIA IDE hotpluggable devices (#133943)
  - Fixup URL listed from rpm -qi (#136396)
  - Add Portuguese translations for hal
  - Fix addition of Russian and Hungarian translations


author: David Zeuthen <davidz@redhat,com> 0.4.2-1.EL4
changelog:
  - Upstream release 0.4.2
  - Drop all patches as they are committed upstream
  - Fixes for #140557, #139227, #139962, #139600, #136971
  - Workaround for #138148 through blacklisting certain IDE optical drives


author: John (J5) Palmieri <johnp@redhat.com> 0.4.2-2.EL4
changelog:
  - Add patch to fix segfault in fstab-sync when ejecting CD (Bug 163772)
  - Add patch to fix hotplug issues with USB cds (Bug 164777)
  - Add patch to run callouts synchronously (Bug 167811)


author: John (J5) Palmieri <johnp@redhat.com> - 0.4.2-4.EL4
changelog:
  - Add patch to stop HAL complaining about DEVPATH not being set on
    kernels that do not support it (Bug #169387)


author: - Bastien Nocera <bnocera@redhat.com> - 0.4.2-5.EL4
changelog:
  - Add patch to fix the ide-drives.fdi parsing, missing closing element
    (Bug #164631)
  - Patch by Jeff Layton <jlayton@redhat.com> to avoid poking the "config"
    file in sysfs sub-dirs, as it can cause problems for some devices
    (Bug #172835)
  - Avoid fstab-sync crashing when checking whether a partition is mounted
    (comparing an uninitialised variable) (Bug #175523)
  - Add patch by Keiichi Mori <kmori@redhat.com> to not delete the '/' entry
    from /etc/fstab (strcmp of a 0-len string always succeeds)
    (Bug #192410)


author: Jay Fenlason <fenlason@redhat.com> 2.3.13-7.4E
changelog:
  - include the -selfwrite patch to close
    Resolves: rhbz#205826: CVE-2006-4600 openldap improper selfwrite access


author: Jan Safranek <jsafranek@redhat.com> 2.2.13-8
changelog:
  - include patch to prevent infinite loop (at user logon)
    (bz#230404)
  - Include sals patch to close bz#230396
  - Include manual bind timeout patch to close #230390
  - Process URIs bigger than 128 characters (#209607)
  - Check port number of URIs (#197802)
  - Prevent slapd from crashing on dereferencing alias (#180172)
  - fix set access rules (#177731)
  - fix proxy queries (#185648)
  - fix opeldap-compat compilation (#217228)
  - fix GSSAPI query for subschemaSubentries (#215294)
  - fix init script to return appropriate exit codes (#242666)
  - put pid into /var/run/openldap/ directory (#244687)
  - run db_recover on service slapd start after unclean shutdown 
    (#192861, #195920, #213167)
  - fix acl rules parsing (#244772)
  - init script now checks permissions of certificate files
    (#171165)


author: Jan Safranek <jsafranek@redhat.com> 2.2.13-10
changelog:
  - fix memory leak when adding/modifying entries (#361791)
  - fix entryUUID getting mangled when syncrepl is used
    for replication (#331821)
  - fix crash on high modify load (#402651)
  - fix initscript to print error when TLS_CACERT file is
    not readable by ldap user (#165172)
  - fix manual bind timeout (#230390)
  - fix nss_ldap chasing referrals with SASL authentications (#264441)


author: Jan Zeleny <jzeleny@redhat.com> - 2.2.13-12.3
changelog:
  - fixed modrdn segfault issues (#606399)
  - fixed handling of null character when using TLS (#606399, patches for both
    main and compat library backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.1
changelog:
  - apply glibc-ppc-assume.patch for RHEL4 unconditionally (#144291)
  - don't apply glibc-nptl-check.patch for RHEL4
  - fix IA-32 stack alignment for LinuxThreads thread functions
    and functions passed to clone(2) directly
  - fix ecvt{,_r} on denormals (#143279)
  - fix __tls_get_addr typo
  - fix rounding in IA-64 alarm (#143710)
  - don't reinitialize __environ in __libc_start_main, so that
    effects of setenv/putenv done in DSO initializers are preserved
    (#144037, IT#57403)
  - fix ppc/ppc64 rint and other rounding functions (#144931, BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.3
changelog:
  - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
  - fix zdump -v segfaults on x86-64 (#146210)
  - update IA-64 libm from Intel v2.1 (#142494)
  - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
  - declare ftruncate for POSIX 2003 (BZ#640)
  - fix errno values for futimes (BZ#633)
  - unconditionally include <features.h> in malloc.h (BZ#650)
  - change regex \B handling to match old GNU regex as well as perl/grep's dfa
    (from empty string inside of word to empty string not at a word boundary,
     BZ#693)
  - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
    and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
    %gs access with negative offsets
  - fix addseverity
  - fix fmemopen
  - fix rewinddir
  - increase svc{tcp,unix}_create listen backlog
  - fix vDSO l_map_end/l_text_end computation


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.4
changelog:
  - fix initstate{,_r} (BZ#710)
  - fix segfault if chrooted app attempts to dlopen a library
    and no standard library directory exists at all (#147067, #144303)
  - fix initgroups when nscd is running, but has group caching disabled
    (#146588)
  - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
    has not been called yet (#146710)
  - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
  - service nscd cosmetic fixes (#146776)
  - fix s390{,x} string.h


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.6
changelog:
  - resync with fedora-2_3-branch
  - fix handling of hosts with ~ 1K or bigger info per answer
    when using nscd (#140378)
  - handle partial writes in nscd and partial reads in nscd client
    code (#147478)
  - fix a bug in execvp introduced in 2.3.4-2.3, add testcases
    for the whole exec* family of functions
  - fix TLS handling in statically linked programs
  - provide symlink/readlink prototypes with -D_POSIX_C_SOURCE=200112L


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.7
changelog:
  - fix dlclose (#145810)
  - clear padding in gconv-modules.cache (#146614, BZ#776)
  - add libComplexFloat-GCC_3.2.so on ppc64, so that
    LD_PRELOAD=libComplexFloat-GCC_3.2.so can be used to work
    around ABI change in _Complex float passing for GCC 3.3 and
    earlier compiled programs using complex float functions from
    libm.so.6 (#149681)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.9
changelog:
  - fix recursive dlclose (#157246, #154641, IT#72007)
  - fix a typo in WINDOWS-31J charmap (#151739)
  - fix NIS ypprot_err (#151469)


author: Warren Togami <wtogami@redhat.com> 1.0.2-0.1.0.EL4
changelog:
  - Prevent obsolete script from replacing mozilla-xremote-client (#192639)
  - 1.0.2 security fixes
  - remove unused patches


author: Dan Williams <dcbw@redhat.com> - 1.1.2-27
changelog:
  - #rh156935# Missing mime-type files for KDE after upgrade
  - #rh159247# Accessing SMB shares from a RHEL4WS OpenOffice splashes but then goes away...


author: Jason Baron <jbaron@redhat.com> [2.6.9-17]
changelog:
  -require CAP_NET_ADMIN when creating policies (John Linville) [166131]
  -cciss PCI ID additions (Tom Coughlan) [165762]


author: Jason Baron <jbaron@redhat.com> [2.6.9-18]
changelog:
  -fixup 4/4 split userspace bounds (Ingo Molnar) [167262]
  -fix Netfilter NAT memory corruption udp (David Miller) [164450]
  -Fix compat layer sendmsg() races (Alexander Viro, Dave Miller, David Woodhouse) [166248] {CAN-2005-2490}
  -Enable 32-bit kernel to boot on dualcore xw9300 (Jim Paradis) [166212]
  -Fix raw_sendmsg accesses (Alexander Viro) [166830] {CAN-2005-2492}
  -update OpenIPMI version number to 33.4 (Peter Martuccelli) [166861] 
  -dual-core detection gap for i386 (Geoff Gustafson) [167412]
  -turn debugging off in powernow-k8 (Brian Maly) [167711]
  -make sys_sigreturn() call audit (David Woodhouse) [166287]
  -Fix module verification size check (David Howells) [167126]
  -fix for pfn_valid() on x86_64 (Jim Paradis) [166785]
  -Fix kernel crash/hang when task functions and isrs are kprobed in conjunction (Ananth Mavinakayanahalli) [167225]
  -Fixup eip/rip on IA32/x86_64 during kprobe smp miss handling (Ananth Mavinakayanahalli) [167226]
  -fix oops when loading ipmi_si module (Brian Maly) [166781]
  -Identify and handle IA64 page_not_present fault in vmalloc/region-5 address space (Larry Woodman) [164823]
  -ppc64: iommu entry merge fix (David Howells) [166653]
  -fix ipt_recent integer handling (James Morris) [167703] {CAN-2005-2872}


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.1]
changelog:
  -orinoco: plug etherleak (John Linville) [170277] {CAN-2005-3180}
  -fix sys_set_mempolicy() bounds check (Larry Woodman) [168993] {CAN-2005-3053}
  -fix race in ebtables (James Morris) [170268] {CAN-2005-3110}
  -fix memory leak in key management (David Howells) [170274] {CAN-2005-3119}
  -fix names_cache memory leak (David Woodhouse) [170283] {CAN-2005-3181}
  -fix ip_queue crash (James Morris) [167389]
  -x86_64: iounmap fix [168217 160135 170264] {CAN-2005-3108}
  -x86_64: add pageattr text mapping (Jim Paradis) [170154]
  -fix NX text/large-page interaction [163238 168936]


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.1.1]
changelog:
  -sys_get_thread_area has minor info leak (Larry Woodman) [168777] {CVE-2005-3276}
  -fix gzip/zlib flaws (Peter Staubach) [165679] {CAN-2005-2458}
  -fix exec_mmap race  DoS (Dave Anderson) [170262] {CAN-2005-3106}
  -fix sysctl races (Alexander Viro) [168924] {CVE-2005-2709}
  -fix HFS oops (Peter Staubach) [171002] {CVE-2005-3109}
  -update sg_io verify_command list (Mike Christie) [158861] {CVE-2004-1190}
  -fix message queue refcounting (Alexander Viro) [169130] {CVE-2005-3556}
  -fix lost fput and sockfd_put could lead to DoS (Alexander Viro) [168659] {CVE-2005-3044}
  -fix gdb crashes on hugemem (Dave Anderson) [171980]
  -fix /proc/scsi/scsi DoS (Doug Ledford) [167696] {CVE-2005-2800}
  -fix lease printk DoS (Peter Staubach) [174337] {CVE-2005-3857}
  -fix dst_entry leak DoS (Thomas Graf) [174345] {CVE-2005-3848}
  -fix ip6_input_finish DoS (Thomas Graf) [174343] {CVE-2005-3858}
  -fix ipv6 flowlabel DOS (Thomas Graf) [174081] {CVE-2005-3806}
  -fix IGMP DoS


author: Jason Baron <jbaron@redhat.com> [2.6.9-22.0.2]
changelog:
  -prevent panic caused by invalid arguments to set_mempolicy (Larry Woodman) [175683] {CVE-2005-3358}
  -fix auto-reap DoS (Peter Staubach) [174078] {CVE-2005-3784}
  -fix kernel memory disclosure via /proc exploit (Jason Baron) [176812] {CVE-2005-4605}


author: Thorsten Leemhuis <fedora AT leemhuis DOT info> - 0:1.0.7676-0.lvn.2
changelog:
  - Rename src5: nvidia.init to nvidia-glx-init
  - Fix correct servicename in nvidia-glx-init
  - Run nvidia-glx-init before gdm-early-login; del and readd the script
    during post


author: Thorsten Leemhuis <fedora AT leemhuis DOT info> - 0:1.0.7676-0.lvn.3
changelog:
  - Conflics with nvidia-glx-legacy
  - Integrate some minor correction suggested by Niko Mirthes 
    <nmirthes AT gmail DOT com> in #475


author: Thorsten Leemhuis <fedora AT leemhuis DOT info> - 0:1.0.8174-0.lvn.1
changelog:
  - Update to 8174
  - desktop entry now Categories=Settings (#665)
  - Ship bug-reporting tool in doc (#588)
  - Things from Bug 635, Niko Mirthes (straw) <nmirthes AT gmail DOT com>:
  -- avoid changing time stamps on libs where possible
  -- only add /etc/modprobe.conf entries if they aren't already there
  -- add /etc/modprobe.conf entries one at a time
  -- only remove /etc/modprobe.conf entries at uninstall, not during upgrade
  -- avoid removing any modprobe.conf entries other than our own
  -- match Xorg's install defaults where it makes sense (0444)
  -- a few other minor tweaks to the files lists


author: Niko Mirthes (straw) <nmirthes AT gmail DOT com> - 0:1.0.8174-0.lvn.1
changelog:
  - add the manual pages for nvidia-settings and nvidia-xconfig
  - install the new nvidia-xconfig utility and associated libs


author: Niko Mirthes (straw) <nmirthes AT gmail DOT com> - 0:1.0.8178-0.lvn.1
changelog:
  - change nvidia-glx.sh and nvidia-glx.csh to point to README.txt rather than README
  - reference xorg.conf rather than XF86Config in the init script
  - improve readability of instructions and comments, fix some typos
  - drop epoch, as it seems to be affecting dependencies according to rpmlint
  - tweak the nvidia-settings desktop file so it always shows up on the
    menu in the right location
  - add the manual pages for nvidia-settings and nvidia-xconfig
  - remove header entries from the nvidia-glx files list. they belong in -devel
  - fix changelog entries to refer to 7676 not 7176 (though there was a 7176 x86_64
    release prior to 7174)
  - add libXvMCNVIDIA.so
  - update to 8178


author: Thorsten Leemhuis <fedora AT leemhuis DOT info> - 0:1.0.8178-0.lvn.2
changelog:
  - add NVIDIA_kernel-1.0-8178-U012206.diff.txt from 
  http://www.nvnews.net/vbulletin/showthread.php?t=62021


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1
changelog:
  - new version 2.2.10
  - added option LDAP_DEPRECATED to support deprecated ldap functions for now
  - fixed build without pflogsumm support (#188470)


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1.RHEL4.1
changelog:
  - postfix upgrade to 2.2 for RHEL-4 with integrated IPv6 and TLS support
  - using old pam_stack instead of include syntax


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1.1.el4
changelog:
  - fixed missing man page for main.cf
    Resolves: rhbz#171771
  - fixed wrong mode of TLS_LICENSE file
    Resolves: rhbz#195450
  - fixed post script for upgrade
    Resolves: rhbz#202357


author: Thomas Woerner <twoerner@redhat.com> 2:2.2.10-1.2.1
changelog:
  - fixed postfix privilege problem with symlinks in the mail spool directory
    (CVE-2008-2936)
    Resolves: rhbz#456715


author: Johnny Hughes <johnny@centos.org> - 0.5.15lorg3.2-1
changelog:
  - Built for CentOS-4.
  - Removed os.list and sources.list as that is provided by centos-release
  - added BuildRequire for libselinux-devel


author: Joe Orton <jorton@redhat.com> 0.9.4-24.5
changelog:
  - catch errors in apr_procattr_child_*_set (#157832)
  - required fixed gcc version for -devel package
  - merge from upstream:
   * fix apr_file_seek(,APR_END,) (Greg Hudson)
   * don't check access(,|R_OK) in apr_proc_create (Jeff Trawick, #157536)


author: Marek Kasik <mkasik@redhat.com> 2.1.9-11.el4.8
changelog:
  - Add freetype-2.1.9-CVE-2010-2498.patch
      (Assure that `end_point' is not larger than `glyph->num_points')
  - Add freetype-2.1.9-CVE-2010-2499.patch
      (Check the buffer size during gathering PFB fragments)
  - Add freetype-2.1.9-CVE-2010-2500.patch
      (Use smaller threshold values for `width' and `height')
  - Add freetype-2.1.9-CVE-2010-2519.patch
      (Check `rlen' the length of fragment declared in the POST fragment header)
  - Resolves: #614010


author: Marek Kasik <mkasik@redhat.com> 2.1.9-12.el4.8
changelog:
  - Add freetype-2.1.9-CVE-2010-2527.patch
      (Use precision for `%s' where appropriate to avoid buffer overflows)
  - Resolves: #614010


author: Marek Kasik <mkasik@redhat.com> 2.1.9-13.el4.8
changelog:
  - Modify freetype-2.1.9-CVE-2010-2519.patch (additional fix)
      (If the type of the POST fragment is 0, the segment is completely ignored)
  - Resolves: #614010


author: Marek Kasik <mkasik@redhat.com> 2.1.9-14.el4.8
changelog:
  - Add freetype-2.1.9-axis-name-overflow.patch
      (Avoid overflow when dealing with names of axes)
  - Resolves: #614010


author: Marek Kasik <mkasik@redhat.com> 2.1.9-16.el4.8
changelog:
  - Add freetype-2.1.9-CVE-2010-2806.patch
      (Protect against negative string_size. Fix comparison.)
  - Add freetype-2.1.9-CVE-2010-3311.patch
      (Don't seek behind end of stream.)
  - Add freetype-2.1.9-CVE-2010-3054.patch
      (Protect against nested `seac' calls.)
  - Add freetype-2.1.9-CVE-2010-2808.patch
      (Check the total length of collected POST segments.)
  - Resolves: #638140


author: Marek Kasik <mkasik@redhat.com> 2.1.9-17.el4_8.1
changelog:
  - Add freetype-2.1.9-CVE-2010-3855.patch
      (Protect against invalid `runcnt' values.)
  - Resolves: #651757


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.20]
changelog:
  -improved rx length check for r8169 (Neil Horman) [556406 550911]
  -isdn: hfc_usb: fix read buffer overflow in collect_rx_frame() (Danny Feng) [539436 539437] {CVE-2009-4005}
  -megaraid_sas: fix dbg_lvl and poll_mode_io file permissions in sysfs (Danny Feng) [537310 537311] {CVE-2009-3889 CVE-2009-3939}
  -hfs: fix a potential buffer overflow (Amerigo Wang) [540738 540739] {CVE-2009-4020}
  -gdth: prevent negative offsets in ioctl (Amerigo Wang) [539418 539419] {CVE-2009-3080}
  -ptrace: ptrace_detach can leak a zombie (Oleg Nesterov) [555869 539506]
  -strace: strace hangs when the mt tracee does coredump (Oleg Nesterov) [555869 539506]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.21]
changelog:
  -ia32: fix kernel panic when coredump VDSO page for 32bit process (Amerigo Wang) [549230 549231] {CVE-2009-4271}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.22]
changelog:
  -net: fix sctp ootb packet deinal of service (Neil Horman) [555662 555663] {CVE-2010-0008}
  -e1000e: fix broken wake up on LAN functionality due to other e1000e patch (Andy Gospodarek) [565496 558607]
  -signal: fix kernel information leak with print-fatal-signals=1 (Danny Feng) [554581 554582] {CVE-2010-0003}
  -netfilter: ebtables: enforce CAP_NET_ADMIN for modifications to ebtables (Danny Feng) [555240 555241] {CVE-2010-0007}
  -lpfc: lpfc driver doesn t acquire lock when searching hba for target (Rob Evers) [561453 548496]
  -ext3: replace lock/unlock_super() with an explicit lock for resizing (Lachlan McIlroy) [553135 547213]
  -kernel: fix DOS on x86_64, load_elf_binary() (Danny Feng) [560550 560551] {CVE-2010-0307}
  -scsi: make sure to enable ordered mode on scsi drives with write cache enabled (Josef Bacik) [560563 537475]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.23]
changelog:
  -e1000e: fix broken wake up on LAN functionality due to other e1000e patch (Andy Gospodarek) [565496 558607]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.24]
changelog:
  -qla2xxx: update qla driver version from 8.02.09.02.04.08-d to 8.02.09.01.04.09-d (Rob Evers) [577234 529063]
  -diskdump: fix diskdump not working with qla2xxx (Rob Evers) [577234 529063]
  -usb: fix information leak via userspace usb interface (Vitaly Mayatskikh) [566626 566627] {CVE-2010-1083}
  -alsa: snd-hda-intel driver: avoid divide by zero (Jaroslav Kysela) [567169 567170] {CVE-2010-1085}
  -dvb: fix endless loop when decoding ILE at dvb-core (Mauro Carvalho Chehab) [569239 569240] {CVE-2010-1086}
  -ia64: ptrace: peek_or_poke requests can miss put_task_struct() (Oleg Nesterov) [572008 567321] {CVE-2010-0729}
  -ia64: ptrace: peek_or_poke requests miss ptrace_check_attach() (Oleg Nesterov) [572008 567321] {CVE-2010-0729}
  -tg3: refrain from touching MPS in tg3 (John Feeney) [567205 554525]
  -netfilter: add connlimit match module support (Jiri Pirko) [563223 522000]
  -netfilter: enable CONFIG_IP_NF_MATCH_CONNLIMIT=m (Jiri Pirko) [563223 522000]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.25]
changelog:
  -net: fix an unexpectedly freed skb in tcp (Amerigo Wang) [577715 577716] {CVE-2010-1188}
  -net: fixup problems with vlan tagging and bonding driver option arp_validate=3 (Jiri Pirko) [580842 555070]
  -virtio_net: fix tx wakeup race condition (Herbert Xu) [580089 574785]
  -vfs: turn bad_inode_ops into an inode_operations_ext (Jeff Layton) [582908 544381]
  -oprofile: Support arch_perfmon in Oprofile (John Villalovos) [582913 553745]
  -oprofile: Fix name collision issue in Oprofile (John Villalovos) [582913 553745]
  -oprofile: Fixes for the perf counter reservation system in Oprofile (John Villalovos) [582913 553745]
  -oprofile: Enable use of the perf counter reservation system into the oprofile driver (John Villalovos) [582913 553745]
  -oprofile: final bits to support oprofile on Nehalem-EP (John Villalovos) [582241 509423]
  -virt: fix i386 virtio driver crash (Chris Lalancette) [582911 509220]
  -xen: fix pv guest crash when host has more than 64g ram (Chris Lalancette) [574392 504988]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.26]
changelog:
  -pci: fix reference to dev->bus->pad2 in pcix_set_mmrbc() (Dean Nelson) [596374 499355]
  -pci: cleanup error return for pcix get and set mmrbc functions (Dean Nelson) [596374 499355]
  -pci: fix access of pci_x_cmd by pcix get and set mmrbc functions (Dean Nelson) [596374 499355]
  -pci: fix return value from pcix_get_max_mmrbc (Dean Nelson) [596374 499355]
  -sctp: fix skb_over_panic from processing too many unknown params (Neil Horman) [584655 584656] {CVE2010-1173}
  -kernel: keyrings: find_keyring_by_name() can gain the freed keyring (Vitaly Mayatskikh) [585097 585098] {CVE-2010-1437}
  -virtio: net refill on out of memory (Herbert Xu) [597310 589897]
  -net: pkt_sched: fix sfq qdisc crashes with limit of 2 packets (Jiri Pirko) [597312 587644]
  -nfs: make sure client returns updated d_type info in getdents responses (Jeff Layton) [596372 577378]
  -vfs: force reval of target when following last_bind symlinks (Jeff Layton) [533118 533119] {CVE-2009-3726}
  -nfsv4: fix a problem whereby a buggy server can oops the kernel (Jeff Layton) [533118 533119] {CVE-2009-3726}
  -nfsd4: move special stateid processing to nfs4_preprocess_stateid_op() (Jeff Layton) [597314 517162]
  -nfsd4: move nfserr_openmode checking from nfsd_read/write into nfs4_preprocess_stateid_op() (Jeff Layton) [597314 517162]
  -time drift due to incorrect accounting of lost ticks if tick_divider > 1 (Ulrich Obergfell) [590551 579716]
  -jbd: properly discard freed buffers after commit (Josef Bacik) [589155 571546]


author: Don Howard <dhoward@redhat.com> [2.6.9-89.0.28]
changelog:
  -sky2: fix 88e803x transmit lockup on Yukon-FE chipset (Don Howard) [617353 614559]
  -nfsd4: bug in read_buf when it is called to move over to next page (Jiri Olsa) [612032 612033] {CVE-2010-2521}
  -cifs: fix a kernel BUG with remote OS/2 server (Eugene Teo) [608585 608586] {CVE-2010-2248}


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-3
changelog:
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes,
    to match glibc's layout
  - update notes on upgrading from previous releases
  - pull in fix for ITS #3201 from 2.2.15
  - pull in fix for ITS #3326 from 2.2.16


author: Jay Fenlason <fenlason@redhat.com> 2.2.13-3.4E
changelog:
  - Backport the -hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578 as described in
    bz#158120 [RHEL3] Need help configuring host as an LDAP client

  - Create and own the /etc/openldap/cacerts directory, to close
    bz#159151 Authconfig update creates a problem with OpenLDAP server


author: Vince Worthington <vincew@redhat.com>
changelog:
  - Patch all Makefile.in's that still had "-s" as an install argument in
    make install targets for binaries like slapd and client tools, so
    find-debuginfo.sh gets a chance to extract the debug symbols for 
    -debuginfo RPM (BZ#163070).


author: Jay Fenlason <fenlason@redhat.com> 2.2.13-5.4E
changelog:
  - Include the wait4msg-select-fix patch from Jeffery Layton
    <jlayton@redhat.com> (backported from 2.2.29) to close
    bz#186447 ldapsearch hangs when using SSL with Active Directory as LDAP Server


author: Jay Fenlason <fenlason@redhat.com> 2.2.13-6.4E
changelog:
  - Change autofs.schema to use the correct OID for the automount objectlass.
    This closes bz#150340 OID conflict in LDAP schemas shipped
  - Double the thread stack size on ia64 to close
    bz#176602 ? [RHEL4] slapd on ia64 seg faults and dies whenever ldapsearch is run against it.
  - Include the gethostbyname_r patch to close
    bz#186095 use gethostbyname_r() instead of gethostbyname() in ldap_init()


author: Johnny Hughes <johnny@cenots.org> 1.0.1-0.2.3.EL4
changelog:
  - initial build for CentOS4
  - Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
  - Replaced mozilla-redhat-default-bookmarks.html with
    mozilla-centos-default-bookmarks.html
  - Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js


author: Jason Baron <jbaron@redhat.com> [2.6.9-52]
changelog:
  -fix boot panic on >=16 cpu on Intel microcore platforms (Brian Maly) [221479]
  -ppc64: fix out of tree builds (Janice Girouard) [209852]
  -ppc64: fix system drops to xmon when qla3xxx module is removed (Konrad Rzeszutek) [231627]
  -fix high TCP latency with small packets (Thomas Graf) [229907]
  -fix usb ports don't recover after overcurrent (John Feeney) [231226]
  -cciss: driver bug fixes (Tom Coughlan) [196628]
  -fix mptscsih_doDv panic when checking disk in RAID volume (David Milburn) [231909]
  -add PowerEdge R900 pci=bfsort automatically (John Feeney) [233281]


author: Don Howard <dhoward@redhat.com> [2.6.9-53]
changelog:
  -e1000: ensure that rx unit is started (Jeff Garzik) [234370]
  -e1000: fix jumbo frame performance issue (Andy Gospodarek) [233988]
  -make version & release info available at compile time (Konrad Rzeszutek) [232526]
  -revert: prevent rmmod of qla2nnn when it is in use (Tom Coughlan) [234260]
  -tg3: fix bug when bringing up bond iface in balanced-alb mode. (Andy Gospodarek) [216895]
  -diskdump: fix regression with megaraid_sas (Nobuhiro Tachino) [234850]
  -x86: Make sure hpet_address is 0 when any part of HPET initialization fails (Brian Maly ) [231382]


author: Jason Baron <jbaron@redhat.com> [2.6.9-54]
changelog:
  -s390: include complete 3270 console driver crash patch (Jan Glauber) [183649]
  -fix an oops condition in ipoib (Doug Ledford) [233301]
  -ppc: fix lpar is hung after soft reset or initiating system dump via HMC (Janice Girouard) [234339]
  -fix C-state divisor not functioning correctly on Greyhound (Bhavana Nagendra) [235442]
  -revert: support for p-state transitions on Intel and support for ACPI 3.0 _PSD method


author: Jason Baron <jbaron@redhat.com> [2.6.9-55]
changelog:
  -stex: fix regression in sg_reset (Jun'ichi "Nick" Nomura) [237132]
  -nfs: Allow files open for write to invalidate caches (Jeff Layton) [237135]
  -e1000: fix watchdog timeout panics (Andy Gospodarek) [237130]
  -re-enable readahead for multi-page sequential IOs (Eric Sandeen) [237138]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.0.1]
changelog:
  -fix kernel spinlock panic in nfs/inode.c (Peter Staubach) [240855]
  -fix core-dumping unreadable binaries via PT_INTERP (Eric Sandeen) [243256] {CVE-2007-0958}
  -nlm: when reclaiming locks, skip non-posix locks (Jeff Layton) [243251] {CVE-2006-5158}
  -add missing fput() in a 32-bit ioctl on 64-bit x86 systems (Jeff Burke) [243252] {CVE-2007-0773}
  -prevent oops in compat_sys_mount with NULL data pointer (Jeff Layton) [243263] {CVE-2006-7203}
  -fix 32bit-compat rt_sigtimedwait (Guy Streeter) [240458]
  -nfs: fix repeated NFS mount failures lead to kernel panic (Peter Staubach) [240851]
  -safely store sysfs inode nrs in the sysfs dirent (Eric Sandeen) [242558] 
  -protect sysfs ->s_dentry w/ locking (Eric Sandeen) [242558]
  -fix nr_unused accounting (Eric Sandeen) [241784]
  -fix bluetooth setsockopt() information leaks (Don Howard) [243259] {CVE-2007-1353}
  -fix DoS in PPPOE (Neil Horman) [243262] {CVE-2007-2525}
  -fix out of bounds fib_probs access vulnerability (Neil Horman) [243261] {CVE-2007-2172}
  -ip_conntrack_sctp: fix remotely triggerable NULL ptr dereference (Don Howard) [243746] {CVE-2007-2876}


author: Don Howard <dhoward@redhat.com> [2.6.9-55.0.3]
changelog:
  -Fix panic following reload of LSI Fusion driver (Chip Coldwell) [227451]
  -Fix buffer overflow in capi debug functions (Anton Arapov) [243257] {CVE-2007-1217}
  -add missing audit_notify_watch() to removexattr (Alexander Viro) [248126]
  -fix VM hangs by balancing inactive lists and setting better values for dirty limits (Larry Woodman) [248141]
  -nfs: add nordirplus option (Jeff Layton) [249848]
  -ia64: fix vmalloc perfmon crash (Luming Yu) [250199] {CVE-2006-0558}
  -fix stack randomization across suid/sgid exec (Ernie Petrides) [250200]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.0.4]
changelog:
  -revert: add missing audit_notify_watch() to removexattr
  -autofs4: fix race between mount and expire (Ian Kent) [248126]


author: Phil Knirsch <pknirsch@redhat.com> 2.8.3-5
changelog:
  - Fixed initscript to work with 2.6 kernel and made it more quiet (#112286).
  - Changed proposed location of sensors (#116496).
  - Fixed rpath issue.


author: Harald Hoyer <harald@redhat.com> 2.8.7-2
changelog:
  - added initial /etc/sysconfig/lm_sensors
  - added initscript
  - MAKEDEV the initial i2c devices in initscript and sensors-detect


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-36_EL
changelog:
  - compile with gcc32, link with gcc(3.4.3) to overcome gcc(3.4.3)'s
  - compilation bug (gcc bug 144358) and gcc32's lack of production of a
  - .note.GNU-stack section on ia64 and ppc64 which causes the execshield
  - rpmdiff tests to fail. Ugh!


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-38_EL
changelog:
  - Still trying to get past broken execshield tests. 
  - Now added "BROKEN_GCC" switch to dhcpd.h to make binding_state_t
  - lease members into uint8_t's to overcome gcc bug 144358 so that
  - gcc-3.4.3 can be used. Added '-Wl,-z,noexecstack' option to all
  - executable link options.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-38_EL4
changelog:
  - 'Wl,-z,relro' is now OK with elflint - adding back in.
  - fix verification of config file with -cf in DHCPDARGS.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-40_EL4
changelog:
  - fix bug 143640: allow only one dhclient to configure an interface
  - fix bug 162080 + 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - stop dhclient's 1-5 second wait before starting if only one interface being configured
  - fix bug 149780: require DHCLIENT_USE_GATEWAY setting for dhclient-script
    to honor GATEWAY setting
  - remove emission of ISC blurb on dhclient error exit in -q mode
  - dhclient-script fixes:
      o remove 1 second sleep on PREINIT
      o further replacement of /sbin/route by /sbin/ip
      o fix determination of runlevel in init state 1
      o add class A,B,C static route support
      o add ARPCHECK support


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-44_EL4
changelog:
  - fix bug 160655 / upstream bug 15293: apply upstream patch to fix trailing null options
  - fix bug 167028 : apply IBM unicast BOOTP patch (from xma@us.ibm.com)
  - fix bug 173324 : omapi memory leak 
  - dhclient-script fixes: e.g. bug 173619


author: Jason Vas Dias <jvdias@redhat.com> - 3.0.1-54.EL4
changelog:
  - fix bug 177845: allow default router to be same as ip-address
  - fix bug 176615: fix DDNS updates when host-name contains trailing NUL


author: Jason Vas Dias <jvdias@redhat.com> - 3.0.1-58.EL4
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Radek Vokal <rvokal@redhat.com> 0.99.3-EL4.1
changelog:
  - upgrade to 0.99.3 (#204045)
  - CVE-2006-4330 Wireshark security issues (CVE-2006-4333 CVE-2006-4332 CVE-2006-4331)


author: Radek Vokál <rvokal@redhat.com> 0.99.4-1
changelog:
  - upgrade to 0.99.4, fixes multiple security issues (#211993)
  - use dist tag
  - CVE-2006-5468 - The HTTP dissector could dereference a null pointer.
  - CVE-2006-5469 - The WBXML dissector could crash.
  - CVE-2006-5470 - The LDAP dissector (and possibly others) could crash.
  - CVE-2006-4805 - Basic DoS, The XOT dissector could attempt to allocate a large amount of memory and crash.
  - CVE-2006-4574 - Single byte \0 overflow written onto the heap


author: Nils Philippsen <nphilipp@redhat.com>
changelog:
  - add MimeType to desktop file
  - run update-desktop-database in %post/%postun
  - don't make stunts with -32 or -64 postfixed binaries anymore
  - require /sbin/ldconfig and /usr/bin/update-desktop-database


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-14
changelog:
  - prevent spurious EBADF in krshd when stdin is closed by the client while
    the command is running (#151111)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-15
changelog:
  - fix double-close in keytab handling
  - add port of fixes for CAN-2004-0175 to krb5-aware rcp (#161611)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-16
changelog:
  - apply fixes from draft of MIT-KRB5-SA-2005-002 (CAN-2005-1174,CAN-2005-1175)
    (#157103)
  - apply fixes from draft of MIT-KRB5-SA-2005-003 (CAN-2005-1689) (#159756)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-17
changelog:
  - fix telnet client environment variable disclosure the same way NetKit's
    telnet client did (CAN-2005-0488) (#159304)
  - keep apps which call krb5_principal_compare() or krb5_realm_compare() with
    malformed or NULL principal structures from crashing outright (Thomas Biege)
    (#161471)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-20
changelog:
  - change the buffer size used in rshd back to the smaller value used in earlier
    versions, and bail on write() errors which result when the client closes the
    connection (more of #171708)


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-21
changelog:
  - login: don't truncate passwords before passing them into crypt(), in
    case they're significant (#174782)


author: David Tardon <dtardon@redhat.com> - 1:2.0.4-5.7.0.6.2
changelog:
  - Resolves: rhbz#529752 openoffice.org various flaws
  - CVE-2009-2950 GIF file parsing heap overflow
  - CVE-2009-2949 integer overflow in XPM processing


author: David Tardon <dtardon@redhat.com> - 1:2.0.4-5.7.0.6.1.3
changelog:
  - Resolves: rhbz#529752 openoffice.org various flaws
  - CVE-2009-3301 OpenOffice.org Word sprmTDefTable Memory Corruption
  - CVE-2009-3302 OpenOffice.org Word sprmTSetBrc Memory Corruption


author: Paul Nasrat <pnasrat@redhat.com> - 1.1.7-1
changelog:
  - Upgrade to latest upstream 1.1.x series
  - sqlite_prepare fix now upstream
  - Update url information


author: Dave Anderson <anderson@redhat.com> 4.0-2.25
changelog:
  - Updated crash.patch file to reflect upstream 4.0-2.24 package,
    and bumped release to .25 to differentiate from RHEL3.
  - Search all x86_64 exception stacks for "bt" starting point.
    BZ #178694
  - Fix for 'net -s' and 'net -S' commands.  BZ #168387


author: Dave Anderson <anderson@redhat.com> 4.0-3.9
changelog:
  - Updated crash.patch to upstream version 4.0-3.9:
  - Fixes the "swap" command so that it will not truncate the 
    leading "/dev" portion of the pathname of each listed
    swap device file. (BZ #197285)  
  - Contains a new "s390dbf" command, which displays traces written
    by s390/s390x kernels' s390debug feature. (BZ #211142)
  - Prevents the logging of floating point assist faults on
    on ia64 machines. (BZ #211652)
  - Resolves: rhbz#197285 rhbz#211142 rhbz#211652


author: Dave Anderson <anderson@redhat.com> 4.0-4.3.0
changelog:
  - Fix for x86 and x86_64 disassembly due to embedded "ud2a"
    instructions used for kernel BUG() implementation.
  - Resolves: rhbz#233707
  - Fix for segmentation violation when the incorrect vmlinux file 
    is used as a crash command-line argument on a live system.
  - Resolves: rhbz#244099


author: Dave Anderson <anderson@redhat.com> 4.0-5.0.0
changelog:
  - Fix for initialization-time segmentation violation when analyzing
    a vmcore in which the kernel has over-run its kernel stack,
    corrupting the process thread_info structure, which is used by
    the crash utility for determining the process cpu.
  - Resolves: rbhz#404681
  - Update "mod" command to search /lib/modules/<version>/updates 
    directory before the default /lib/modules/<version> directory.
  - Resolves: rbhz#335061


author: Dave Anderson <anderson@redhat.com> 4.0-5.0.0.1
changelog:
  - Create a new crash-devel package for extension modules, which installs
    defs.h in /usr/include/crash.
  - Resolves: rhbz#432737


author: Dave Anderson <anderson@redhat.com> 4.0-5.0.0.2
changelog:
  Hotfix 3017: Fix for initialization-time SIGSEGV when a module
    overwrites its own exported symbol table list.
  - Resolves: rhbz#456156


author: Tom Lane <tgl@redhat.com> 7.4.7-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.7 (fixes CAN-2005-0227, CAN-2005-0244,
    CAN-2005-0245, CAN-2005-0246, and other issues).
  - Update to PyGreSQL 3.6.1 (to fix bug #142711)
  - Add versionless symlinks to jar files (bz#145744)
  - Add restorecon to postgresql.init in order to restore database to correct
    SELinux context.
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.7-3.RHEL4.1
changelog:
  - Work around selinux <<EOF problem during initdb (bug #149237).
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.
  - Fix improper call of strerror_r, which leads to junk error messages in libpq.


author: Tom Lane <tgl@redhat.com> 7.4.7-4.RHEL4.1
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 7.4.7-5.RHEL4.2
changelog:
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 7.4.8-1.RHEL4.1
changelog:
  - Update to PostgreSQL 7.4.8 (includes security and data-loss fixes; see
    bz#156726, CAN-2005-1409, CAN-2005-1410)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.10
changelog:
  - update from CVS (fedora-2_3-branch)
    - remove nonnull attribute from acct (BZ#877)
    - allow NLS of some strings that couldn't be translated before (BZ#253)
    - execvp fix (BZ#851)
    - update IA-64 libm from Intel 2005-04-05 (#142494, BZ#592)
    - fix initgroups when passed zero-size buffer (BZ#661)
    - update tzcode to 2005h (BZ#825)
  - add 19 UTF-8 locales where only non-UTF-8 locales existed before
    (#156115, IT#69940)
  - fix xdr_rmtcall_args on 64-bit architectures (#151686, IT#68590)
  - fix posix_fallocate{,64} (#156289, IT#71246)
  - use -laudit in nscd (#159217)
  - fix fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583, IT#75029)
  - handle big amounts of networking interfaces in getifaddrs/if_nameindex
    (#159399, IT#73230)
  - fix nscd cache pruning (#150748)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773, #160091)
  - support classes keyword in /etc/hesiod.conf (#150350)
  - fix IBM939 iconv module (BZ#955)
  - fix malloc_trim (BZ#779)
  - change sys/quota.h to match current kernel's quotactl interface,
    include support for the obsoleted interface (no longer supported
    in current kernels) with -D_LINUX_QUOTA_VERSION=1 (#133095)
  - make regexec thread safe (BZ#934)
  - make -lrpcsvc and -lmcheck usable for PIEs and shared libraries (#149284)
  - fix sendfile{,64} prototypes (BZ#961)
  - fix pa_IN locale's am_pm (#158715, BZ#622)
  - don't use nisplus in nsswitch.conf examples, mention that nisplus is
    unsupported (#159729, IT#74024)
  - don't use symbolic register names %rdi and %rbx in x86-64 cfi directives
    to workaround GNU assembler bug (#162545)
  - fix strfry and initstate{,_r}
  - slightly optimize fnmatch in multi-byte locales
  - fix a typo in libc info wmemcpy description
  - fix nis memory handling when realloc fails
  - fix xdrstdio_putlong on 64-bit architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.11
changelog:
  - include program name in __chk_fail error message
  - don't write 0 to gid/uid column for group/username starting with + or -
    in putgrent/putpwent
  - fix Yen mapping ib IBM93{0,9} charsets
  - add sr_CS{,.UTF-8} locales (BZ#38)
  - locale updates (mn_MN, fa_IR)
  - make sure EINVAL is returned from pthread_create if requested thread
    scheduling priority is invalid
  - change NPTL <pthread.h> initializers to avoid warnings, with both -pedantic
    and -W (BZ#915, #162722)
  - fix NPTL <pthread.h> with -ansi -fexceptions
  - fix tst-cancel17 testcase
  - avoid SIGPIPE in nscd
  - fix nscd -g yes/no strings
  - avoid using variable length arrays in regex internals unnecessarily
  - fix *scanf if decimal point is more than one byte long
  - fix rpcgen to output #include <rpc/pmap_clnt.h> even without -C
  - cosmetic fix for ia64 strlen (BZ#1016)
  - add GOT check to dl-execstack.c on i?86
  - avoid namespace pollution in ppc32 {,f}truncate64
  - handle 'z' in strptime*
  - properly propagate return values in nss_compat
  - avoid some unnecessary PLT relocations introduced in 2.3.4-2.10
    or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.12
changelog:
  - hack around ia32el bug when running glibc_post_upgrade in i?86.rpm
    glibc on ia64 under ia32el (#154415)
  - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
    poll when contacting nscd more gracefully
  - remove malloc attribute from posix_memalign
  - correctly size nscd buffer for grpcache key (#163538)
  - fix atan2f
  - avoid memory leaks in error(3)
  - use NVR rather than NV dependency on glibc package in
    glibc-{headers,devel} subpackages (#164073)
  - fix execvp if PATH is not set in environment and the call is about to fail
    (BZ#1125)


author: Alasdair Kergon <agk@redhat.com> - 0.4.5-4.1
changelog:
  - Remove example initrd scripts from docs.
  - Move multipath.rules back to docs until it's cleaned up.


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-5.0
changelog:
  - Update to latest upstream source (t0_4_5_post49)
  - move multipath.rules back to /udev/rules.d/
  - make sure that the default multipath.conf only installs when there is no
    existing config file.


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-4
changelog:
  - Declare incompatibility with old prelink versions, which do not
    blacklist the NSS signed libraries.


author: Daniel Veillard <veillard@redhat.com>
changelog:
  - integrated drv_libxml2 xml.sax driver from Stéphane Bidoul
  - provides the new XmlTextReader interfaces based on C# XML APIs


author: Daniel Veillard <veillard@redhat.com> 2.6.16-5
changelog:
  - upstream release 2.6.16 see http://xmlsoft.org/news.html
  - fixes #137968 and a lot of other bugs fixes present in 2.6.15


author: Daniel Veillard <veillard@redhat.com> 2.6.16-8
changelog:
  - desactivate profiling at compile time which breaks on s390
  - apply patch to fix the php-4 error when asking for DTD validation
  - Resolves: rhbz#203125


author: YAMAZAKI Makoto <zaki@zakky.org>
changelog:
  - (1.1.12-2m)
  - add patch to fix SEGV if TMP or TEMP or TMPDIR environment variable exists. [bug:#19]


author: Pascal Terjan <pterjan@mandrake.org> 1.2.0-1mdk
changelog:
  - Adapt for Mandrakelinux 
  - Patch for a segfault when TMP or TEMP or TMPDIR exist but does not contain =


author: Harald Hoyer <harald@redhat.com> 2.1.99.test8-3.2
changelog:
  - added update-pciids shell script and manpage (bz #178582)
  - suppress warning message from pcilib for x86_64 (bz #166697)


author: Than Ngo <than@redhat.com> - 6:3.3.1-7.RHEL4
changelog:
  - UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> - 6:3.3.1-10.el4
changelog:
  - Resolves: #293411, CVE-2007-3820 CVE-2007-4224 CVE-2007-4225
  - Resolves: #293561, CVE-2007-0537 CVE-2007-1564
  - Resolves: #293901, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242


author: Than Ngo <than@redhat.com> - 3.3.1-13.el4
changelog:
  - Resolves: #505619,
      CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
      CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content


author: Than Ngo <than@redhat.com> - 3.3.1-14.el4
changelog:
  - Resolves: #505619,
     CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
     CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content


author: Joe Orton <jorton@redhat.com> 2.0.52-40.ent
changelog:
  - add htcacheclean from upstream (#254000)
  - mod_disk_cache: warn on use of unimplemented directives (#253515)
  - allow use of AddOutputFilterByType with reverse proxy (#431160)


author: Joe Orton <jorton@redhat.com> - 2.0.52-46.ent
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#456363)
  - fix hard-coded default pidfile to match default config (#512221)
  - mod_rewrite: add support for DPI flag (#214571)
  - add support for TraceEnable (#478535)
  - mod_ssl: fix SSL per-dir-reneg buffering with internal redirects (#488939)
  - mod_ssl: fix potential hang during handshake (#510518)
  - add security fixes for CVE-2009-3555, CVE-2009-1891, CVE-2009-3094,
    CVE-2009-3095, CVE-2010-0434 (#534040, #572956)
  - mod_ssl: add SSLInsecureRenegotiation directive (#575805)
  - Require and BR sufficient openssl with secure reneg API


author: Marcela Maslanova <mmaslano@redhat.com> - 3:5.8.5-37.el4.3
changelog:
  - CVE-2008-1927 perl: heap corruption by regular expressions with utf8 characters
  - Resolves: #449321


author: Alasdair Kergon <agk@redhat.com> - 2.01.08-1.0
changelog:
  - Improve detection of external changes affecting internal cache.
  - Add clustered VG attribute.
  - Suppress rmdir opendir error message.


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-10.2
changelog:
  - fix imports from dom module (Rob Richards, #161447)
  - fix detection and support for ldap_start_tls (#160527)
  - fix imagettftext et al (upstream, #161001)
  - mark php.ini and php.conf as noreplace again for updates


author: Joe Orton <jorton@redhat.com> 5.0.4-10.3
changelog:
  - pear: update to XML_RPC 1.3.1 (CAN-2005-1921, #162045)
  - update bundled shtool to 2.0.2 (CAN-2005-1751, #158998)


author: Joe Orton <jorton@redhat.com> 5.0.4-10.4
changelog:
  - pear: update to XML_RPC 1.4.0 (CAN-2005-2498, #165847)
  - use /etc/httpd/conf/magic for mime_magic (#163116)


author: Joe Orton <jorton@redhat.com> 5.0.4-10.5
changelog:
  - add security fixes from upstream:
   * XSS issues in phpinfo() (CVE-2005-3388, #172212)
   * GLOBALS handling (CVE-2005-3390, #172207)
   * parse_str() enabling register_globals (CVE-2005-3389, #172209)
   * exif: infinite recursion on corrupt JPEG (CVE-2005-3353)
  - add unserializer fix for x86_64 (upstream #34435)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.el4_7.1
changelog:
  - security fixes. (#461579)
  - CVE-2008-3655: multiple insufficient safe mode restrictions.
  - CVE-2008-1145: WEBrick DoS vulnerability (CPU consumption).
  - CVE-2008-3657: missing "taintness" checks in dl module.
  - CVE-2008-3905: use of predictable source port and transaction id in DNS
                   requests done by resolv.rb module.
  - CVE-2008-3443: Memory allocation failure in Ruby regex engine
                   (remotely exploitable DoS).
  - CVE-2008-3790: DoS vulnerability in the REXML module.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.el4_7.2
changelog:
  - security fix (#472067)
  - CVE-2008-4310: real fix for CVE-2008-3656. original patch named as fix for
                   CVE-2008-3656 actually fixed different issue (CVE-2008-1145),
                   hence we are providing correct patch and renaming original
                   patch to refer to proper CVE.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.el4_8.3
changelog:
  - security fixes. (#505085)
  - CVE-2007-1558: APOP password disclosure vulnerability.
  - CVE-2009-0642: Incorrect checks for validity of X.509 certificates.
  - CVE-2009-1904: DoS vulnerability in BigDecimal.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-7.el4_8.4
changelog:
  - Fix a regression that suppress zeroes after the decimal point since
    the previous release. (#510278)


author: Vít Ondruch <vondruch@redhat.com> - 1.8.1-15.el4
changelog:
  - Address CVE-2011-1005 "Untrusted codes able to modify arbitrary strings"
    * ruby-1.8.7-CVE-2011-1005.patch
  - Address CVE-2011-0188 "memory corruption in BigDecimal on 64bit platforms"
    * ruby-1.8.7-CVE-2011-0188.patch
  - Address CVE-CVE-2010-0541 "Ruby WEBrick javascript injection flaw"
    * ruby-1.8.7-CVE-2010-0541.patch
  - Address CVE-CVE-2009-4492 "ruby WEBrick log escape sequence"
    * ruby-1.8.6-CVE-2009-4492.patch
  - Resolves: rhbz#709959


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.1
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356551).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356551).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.4
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433764, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.5
changelog:
  - Prevented invalid memory accesses when a class and its singleton printer
    are timed out in the same sweep (CVE-2008-0597, bug #433828).
  - Back-ported mimeDeleteType from 1.2.x (CVE-2008-0596, bug #433828).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.20.2:.6
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).
  - Applied patch to fix CVE-2008-1374 (64-bit PDF crash, bug #438336).


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-2
changelog:
  - Updated to OpenIPMI-1.4.14
  - Split the main package into normal and libs package for multilib support
  - Added ipmitool-1.8.2 to OpenIPMI and put it in tools package
  - Added sysconf and initscript (#158270)
  - Fixed oob subscripts (#149142)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.11
changelog:
  - fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180)
  - don't overwrite customized ca-bundle.pem on upgrade (#175811)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.14
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-3
changelog:
  - Created a new patch to change mozilla -mail to launchmail
  - Moved the includes to the devel subpackage


author: Kevin Fenzi <kevin@tummy.com> - 4.2.1.1-1
changelog:
  - Updated to 4.2.1.1 version
  - Changed Requires/Buildrequires to 4.2.1, as xfce4-panel was the only package updated to 4.2.1.1


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.2
changelog:
  - Bump version numbers on all the packages to allow for updates
    from previous installations
  - Remove arpingib, it's not needed
  - Add ipoibha init script
  - Rename ipoibha.pl ipoibha for ease of use in init script
  - Drop hpage patch set from ./configure invocation


author: Doug Ledford <dledford@redhat.com> 1.1-0.pre1.3
changelog:
  - The bug fix to make the udev rules file correct for udev 095 got lost,
    readd it.
  - Updates from the old OFED 1.0 code didn't grab all the RPMs because I
    forgot to update the libmthca{,-devel} versions so that the reset
    release number wouldn't cause it to match as older instead of newer.


author: Doug Ledford <dledford@redhat.com> 1.1-2
changelog:
  - Remove a dead patch from the src rpm and rebuild
  - Move the ipoibha tools to /usr/sbin instead of /sbin.  Since they
    require perl to run, and perl resides in /usr, it's safe for them
    to be there instead of /sbin


author: Doug Ledford <dledford@redhat.com> 1.1-3
changelog:
  - Make openib, opensm, and ipoibtools Require(post): chkconfig (182845,182846)
  - Make ipoibha script have an interpreter tag
  - Fix the ipoibha script so it uses arping instead of arpingib and
    passes a functional set of arguments
  - Make ipoibha script require an IP broadcast address on the interface
    we are serving in ha mode
  - Make rdma_ping print rdma_ping instead of rping in it's usage output
  - Make rdma_ping only print the usage info once (213171)
  - Update openibd init script to work whether ipath driver is in one module
    or two (212401)


author: Doug Ledford <dledford@redhat.com> 1.1-4
changelog:
  - Change all the scriptlets to be multiline so that they don't cause problems
    on ppc arch
  - Related: #213848, #222227


author: Doug Ledford <dledford@redhat.com> 1.1-5
changelog:
  - Disable ipoibtools since the current arping doesn't support ipoib devices.
    When arping is updated, re-enable ipoibtools.


author: Doug Ledford <dledford@redhat.com> 1.1-7
changelog:
  - Fix some packaging issues found during automated TPS testing related to
    missing obsoletes on packages that changed name between the openib 1.0
    and 1.1 releases


author: Marius FERARU <altblue@n0i.net> 0:1.3.1-0.n0i.1
changelog:
  - Fedora-ized spec file
  - moved .so files into devel package
  - excluded duplicate configuration file
  - excluded *.la filed from devel package
  - stripped binaries
  - moved dbdir into /var/lib/GeoIP
  - moved database file into a separate package
  - fixed CONF_DIR in geoipupdate man page


author: John Dennis <jdennis@redhat.com> - 2.2.12-3.RHEL4.1
changelog:
  - bring up to 2.2.12, includes security fix for CAN-2005-0546
    Note: the upstream delta between is 2.2.10 (prior RHEL-4 version) and
    2.2.12 is only the application of the security fixes in CAN-2005-0546.
    Thus the 2.2.10 --> 2.2.12 version change is not really a version change
    in the traditional sense, but rather is equivalent to backporting the
    CAN-2005-0546 fixes into 2.2.10. No other aspects of 2.2.10 RHEL-4 spec file
    have changed, patches and build options are identical. Since bringing the
    base tar file up to 2.2.12 from 2.2.10 is equivalent to backporting the
    fixes into 2.2.10 it would be disingenuous and mileading to call this version
    of the rpm 2.2.10 with backported fixes as might be the requirement for RHEL.


author: Petr Rockai <prockai@redhat.com> - 2.2.12-6.RHEL4
changelog:
  - and i missed a bit again, this time the debug_package macro preventing
    debuginfo generation... ahw


author: Petr Rockai <prockai@redhat.com> - 2.2.12-7.RHEL4
changelog:
  - fix an off-by-one error in null detection in messages, fixes #171616
  - do not use absolute paths in pam config file, fixes #173055
  - remove manpages for programs we don't ship: idled, rmnews, syncnews, fixes #185139
  - fix #195501: lmtpd group lookups bypass nscd and cause high ldap or nis traffic/load
  - implement 64 bit quota support, fixes #173880


author: Tomas Janousek <tjanouse@redhat.com> - 2.2.12-8.RHEL4
changelog:
  - fixed #130308: deliver segfaults when destination folder does not exist
  - fixed #219072: lmtpd crashes when malformed recepient name is used


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.18
changelog:
  - fixed client behaviour when remote program generates large output (#184357)
  - don't report duplicate syslog messages, use correct local time (#203671)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
  - fix audit patch to include loginrec.h in auth.c (#193710)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.21
changelog:
  - move pam session calls so pam_close_session is always called (#216689)
  - get canonical hostname for gssapi (#216854)
  - CVE-2006-5052 don't leak info about user existence with krb5 auth (#234643)
  - fix some memory leaks in sftp (#240909)
  - correctly kill sshd in initscript (#244655)
  - close unused ends of sockets so [pam] child is always terminated (#247440)


author: Harald Hoyer <harald@redhat.com> - 4.2.0.a.20040617-4
changelog:
  - removed firewall hole punching from the initscript; rely on iptables
    ESTABLISHED,RELATED or manual firewall configuration


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20040617-4.EL4.1
changelog:
  - increase RLIMIT_MEMLOCK (#177052)
  - fix post scriptlet (#166773)
  - fix initscript (#142926, #187003)
  - replace -T with -i in ntpd manpage (#168220)
  - add option to sync hwclock after ntpdate (#179571)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 7.07-33.2
changelog:
  - Applied upstream patch to fix pxlmono driver line dash data
    type (bug #219969).
  - Don't ship unnecessary man pages (bug #185141).


author: Jeremy Katz <katzj@redhat.com> - 4.1.17-1
changelog:
  - run udevstart again instead of sleeping, this will ensure all 
    devices are created in all cases after modules have been 
    loaded (thanks to notting)


author: 21:32:39 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.2-1)
   * Removed a bug that could cause an OOPS in drbd_al_to_on_disk_bm()
   * Improved the robustness of the UUID based algorithm that decides
     about the resync direction.
   * Fixed the error handling in case a the open() of a backing
     blockdevice fails.
   * Fixed a race condition that could cause a "drbdadm disconnect" to hang.
   * More verbosity in we can not claim a backing block device.
   * More verbosity and paranoia in the bitmap area.
   * On some vendor kernels 8.0.1 did not load because of kzalloc. fixed.
   * Fault injection can now not only be turned on or off, but can be 
     enabled on a per device basis.
   * Fixed the scripts and files needed to build drbd into a kernel.


author: 17:10:14 +0200 Philipp Reisner <phil@linbit.com>
changelog:
  - drbd (8.0.3-1)
   * Fixed a race condition that could cause us to continue to traverse a bio
     after it was freed. (led to an OOPS)
   * Fixed a race condition that could cause us to use members of an ee, after
     it was freed. (led to various weirdness)
   * Language fixes for the man pages.
   * The drbdsetup commands (events, wait-connect,...) release the lock now.
   * Minor fixes and updates to the user land tools and to the peer outdater.


author: Philip Wyett <philipwyett@blueyonder.co.uk> - 0.120.1-1.2E.centos4.4
changelog:
  - Modified Bluecurve theme and made it new CentOS default theme.
    This package does not track upstream.


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.7]
changelog:
  - fix autofs problem with symbolic links (Ian Kent) [248126]
  - fix privilege escalation via PR_SET_PDEATHSIG (Peter Zijlstra) [252306] {CVE-2007-3848}
  - fix bound check ordering issue in random driver (Vitaly Mayatskikh) [275941] {CVE-2007-3105}
  - fix memory leak of dma_alloc_coherent() on x86_64 (Prarit Bhargava) [282351]
  - makes CIFS honour a process' umask (Jeff Layton) [293121] {CVE-2007-3740}
  - fix signing mount options and error handling for CIFS (Jeff Layton) [293141] {CVE-2007-3843}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.10]
changelog:
  - fix: automounter hangs with rapid access to the same mount point when the system is under high load (Ian Kent) [309781]
  - restored: all patches from 2.6.9-55.0.7


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.11]
changelog:
  - fix denial of service with wedged processes (Vitaly Mayatskikh) [302931] {CVE-2006-6921}
  - fix stack growing into hugetlb reserved regions (Vitaly Mayatskikh) [294971] {CVE-2007-3739}
  - fix creating of RHEL4u5 guest domain on i686 RHEL-5.1 host (Chris Lalancette) [251013]
  - fix memory leak in __bio_map_user (Eric Sandeen) [328371]
  - fix deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
  - fix ALSA memory disclosure flaw (Vitaly Mayatskikh) [297741] {CVE-2007-4571}
  - fix missing ioctl() permission checks in aacraid driver (Vitaly Mayatskikh) [298341] {CVE-2007-4308}
  - fix VFAT compat ioctls DoS on 64-bit (Eric Sandeen) [253316] {CVE-2007-2878}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.12]
changelog:
  - update: deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
  - fix machine check errors with Clovertown G0-step CPU (Geoff Gustafson) [320791]
  - fix disable block layer bouncing for most memory on 64bit systems (Jim Paradis) [330111]


author: Johnny Hughes <johnny@centos.org> [2.6.9-55.0.12.plus.c4]
changelog:
  - based on centos 2.6.9-55.0.12 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - added in patch 19000 for better drbd md support


author: Jason Baron <jbaron@redhat.com> [2.6.9-63]
changelog:
  -update: fix P4/Xeon Thermal transition interrupt handler emits warning messages far too frequently (Brian Maly, Jason Baron) [183280]
  -x86: set MAX_MP_BUSSES to 260 for 'default' machine handler (Prarit Bhargava) [218885]
  -qla3xxx: add memory barrier to inbound packet handler (Marcus Barrow) [314271]
  -mptfuxion: fix NaT consumption panic (Chip Coldwell) [325641]
  -libata: prevent devices with blank model names from being DMA blacklisted (David Milburn) [316991]


author: Jason Baron <jbaron@redhat.com> [2.6.9-64]
changelog:
  -cifs: fix memory corruption due to bad error handling in cifs_demultiplex_thread() (Jeff Layton) [269261]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.1]
changelog:
  -kernel ieee80211 off-by-two integer underflow (Anton Arapov) [346361] {CVE-2007-4997}
  -fix for NFS attribute timeout handling (Fabio Leite) [371551]
  -fix bad schedule_timeout() call causing excessive delay (Jonathan Brassow) [399661]
  -do not return zero in mmap (Rik van Riel) [400811]
  -fs: fix missing dput in do_lookup error case leaks dentries (Eric Sandeen) [363461] {CVE-2007-5494}
  -s390: fix LTC39618-kernel panic making lcs interfaces online on LPAR (Hans-Joachim Picht) [400801]
  -x86_64: Fix incorrect logic in AMD NMI code (Prarit Bhargava) [404741]
  -scsi: fix diskdump performance regression on mpt fustion driver (Takao Indoh) [404781]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.2]
changelog:
  -fix core dump file permissions (Don Howard) [396971] {CVE-2007-6206}
  -isdn: fix isdn_ioctl memory issue (Vitaly Mayatskikh) [425151] {CVE-2007-6151}
  -isdn: fix isdn_net_setcfg() vulnerability (Aristeu Rozanski) [392121] {CVE-2007-6063}
  -acpiphp: Examine slots below P2P bridges (Prarit Bhargava) [428174]
  -fix kernel hang in ptrace code (Jerome Marchand) {CVE-2007-5500} [382181]
  -ppc: fix possible NULL pointer dereference in show_cpuinfo code (Vitaly Mayatskikh) [396801]
  -fix kernel panic caused by pvmove in dm-raid1 (Milan Broz) [428637]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.4]
changelog:
  -fix filesystem corruption by unprivileged user via directory truncation (Vitaly Mayatskikh) [428794] {CVE-2008-0001}
  -ia64: fix panic caused by set_mempolicy with MPOL_BIND (Vitaly Mayatskikh) [293201] {CVE-2007-4130}


author: Miloslav Trmac <mitr@redhat.com> - 0.52.2-1
changelog:
  - Allow LDAP connection using ldaps, custom ports or without TLS (original
    patch from Pawel Salek).


author: Miloslav Trmac <mitr@redhat.com> - 0.52.5-1
changelog:
  - Fix home directory renaming in ADMIN.modifyUser (#135280)
  - Further Python reference counting fixes


author: Miloslav Trmač <mitr@redhat.com> - 0.52.5-1.el4.3
changelog:
  - Update the last password change date field when changing passwords
    Resolves: #243849
  - Add support for SHA256 and SHA512 in password hashes
    Resolves: #427800
  - Fix luseradd -p, luseradd -P, and changing more than one property in lusermod
    Resolves: #432647


author: Alan Cox <alan@redhat.com>
changelog:
  - Fix spew of crap to console at startup
  - Fix order of startup (#124035)
  - Fix array overrun (#117182)
  - Fix interrupt buffer sizing (caused bogus irq info)


author: Nils Philippsen <nphilipp@redhat.com> 5.0.5-1
changelog:
  - version 5.0.5
  - remove some obsolete patches
  - update statreset, overrun, lib64init patches
  - renumber patches


author: Charles Bennett <ccb@redhat.com> 5.0.5-5.fc
changelog:
  - bring in filename and append-msg patch
  - append-msg adds verbose text for when saNN data file cpu count
  -  does not match cpu count on the currently running system


author: Ivana Varekova <varekova@redhat.com> 5.0.5-7.rhel4
changelog:
  - Removed previous changes (patch6,patch7)
  - extend iostat output (add partitions statistics)
    bug 159022


author: Ivana Varekova <varekova@redhat.com> 5.0.5-11.rhel4
changelog:
  - fix bug 184414 - The 'file-sz' of 'sar -v' always becomes 0
    (patch author: Keiichi Mori)
  - fix the release number


author: Ivana Varekova <varekova@redhat.com> 1.3.3-15.rhel4
changelog:
  - fix bug 156269 - CAN-2005-1228 directory traversal bug
   (using the patch from Ulf Harnhammar) (patch9)
  - fix bug 155746 - CAN-2005-0988 Race condition in gzip (patch8)


author: Ivana Varekova <varekova@redhat.com> 1.3.3-16.rhel4
changelog:
  - fix bug 204676 (patches by Tavis Ormandy)
    - cve-2006-4334 - null dereference problem
    - cve-2006-4335 - buffer overflow problem
    - cve-2006-4336 - buffer underflow problem
    - cve-2006-4338 - infinite loop problem
    - cve-2006-4337 - buffer overflow problem


author: Ivana Varekova <varekova@redhat.com> 1.3.3-17.rhel4
changelog:
  - Resolves: #213619
    Can't unpack LZH compressed data
  - Resolves: #216111
    gzip munges directory mtime with "-r"


author: Karel Klic <kklic@redhat.com> 1.3.3-18.rhel4:.1
changelog:
  - Added fix for CVE-2010-0001: (64 bit) Integer underflow by decompressing
    LZW format files
    Resolves: rhbz#555086


author: Alan Cox <alan@redhat.com>
changelog:
  - EASYFIX (#125678) - add/remove alias /usr/bin/ksh, pdksh names. Fix
    inadequate grep anchors on remove script. Fix wrong permissions if
    upgrading with umask 077.


author: Nils Philippsen <nphilipp@redhat.com> 5.0.0-0.6
changelog:
  - let user configure how long to keep logs through /etc/sysconfig/sysstat
    (#81294)
  - reset stats at system boot (#102445)


author: Ivana Varekova <varekova@redhat.com> 5.0.5-6.rhel4
changelog:
  - Removed previous changes (patch6,patch7)
  - add ppartitions patch to include a workaround for the broken cciss driver
    bug 159022


author: Peter Vrabec <pvrabec@redhat.com> 1.14-7.RHEL4
changelog:
  - Extract sparse files even if the output fd is not seekable. (#146225)
  - (sparse_scan_file): Bugfix. offset had incorrect type


author: Peter Vrabec <pvrabec@redhat.com> 1.14-8.RHEL4
changelog:
  - A file is dumpable if it is sparse and both --sparse 
    and --totals are specified (#154882)
  - exclude err.patch, it causes SEGV (#158743)


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.9-0.1.el4
changelog:
  - Update to 1.5.0.9 (RC)
  - Update the pango patches to support mathml and various other fixes.
  - Let Firefox handle gcc warnings; it weeds out frequent offenders.


author: Johnny Hughes <johnny@centos.org> - 1.5.0.10-0.1.el4.centos
changelog:
  - Added CACert as a default CA (add_CAcert.org_cert.patch)
  - replaced firefox-redhat-default-bookmarks.html with
    firefox-centos-default-bookmarks.html 
  - replaced firefox-redhat-default-prefs.js with firefox-centos-default-prefs.js


author: Milan Broz <mbroz@redhat.com> - 2.02.42-1
changelog:
  - Update to latest upstream release, all fixes and enhancements
    detailed in WHATS_NEW file.
    Resolves: #192865 #451776 #452606 #461857 #201935 #446884
    Resolves: #476692 #476694


author: Milan Broz <mbroz@redhat.com> - 2.02.42-2
changelog:
  - Check if requested major/minor pair is already used.
  - Fix fsadm failure with block size != 1K.
    Resolves: #204992 #480022


author: Milan Broz <mbroz@redhat.com> - 2.02.42-3
changelog:
  - No longer require kernel and metadata major numbers to match.
    Resolves: #204992
    Related:  #480838


author: Milan Broz <mbroz@redhat.com> - 2.02.42-5
changelog:
  - Calculate mirror log size instead of using 1 extent.
  - Fix maximal volume count check for snapshots if max_lv set for volume group.
    Resolves: #490004 #490417 #491680 #491902


author: Milan Broz <mbroz@redhat.com> - 2.02.42-5.el4_8.3
changelog:
  - Rebuild to fix device-mapper segfault in static lvm binary.
    Related:  #570722
    Resolves: #572223


author: Ray Strode <rstrode@redhat.com> 0.8-5
changelog:
  - Swap if and else in egg_desktop_entries_get_locale_country
    to prevent allocating massive amounts of unneeded ram.


author: Ray Strode <rstrode@redhat.com> 0.8-6
changelog:
  - Swap if and else in egg_desktop_entries_get_locale_encoding
    to prevent allocating massive amounts of unneeded ram.


author: Peter Vrabec <pvrabec@redhat.com> 1.14-10.RHEL4
changelog:
  - wrapper around ftruncate (#156799)
  - provide man page (#163709) 
  - don't warn about short reads; they're normal (#168545)
  - fix skiping over sparse files in archive (#171625)
  - fix tar to handle moved directories correctly (#184413)


author: Ralph Angenendt <ralph@centos.org>
changelog:
  - upgraded to upstream version 8.3.1 
  - created drbd83 branch to allow people to stay at 8.0/8.2
  - make spec file work with 4 and 5
  - First release of 8.3.x for CentOS


author: Akira Imamura <aimamura@redhat.com> 1.0.1-1
changelog:
  - Updated source package to diskdumputils-1.0.1.tar.gz, which adds
    support for disk host adapters controlled by the sata_promise and
    ata_piix disk drivers.
  - User-space portion of FZ #132466, diskdumpfmt performance improvement.
  - Updated to use glib2 instead of glib1.  BZ #136227, BZ #148998
  - Added missing a BuildRequires for glib2-devel.  BZ #132872
  - Deleted dead code to avoid compiler complaint.  BZ #143202


author: Akira Imamura <aimamura@redhat.com> 1.1.4-2
changelog:
  Updated source package to diskdumputils-1.1.4.tar.gz, which adds:
    - Multiple PT_LOAD segments support.  BZ #154923
    - Partial dump support added to diskdumpfmt.  FZ #145575
    - Swap partition support.  FZ #160223
    - Enabled to configure diskdump with /proc/mounts.  BZ #155200


author: Akira Imamura <aimamura@redhat.com> 1.1.7-2
changelog:
  Updated source package to diskdumputils-1.1.7.tar.gz, which
    removes the configuration line reference to the as-of-yet 
    unsupported PRESERVEDUMP feature from the sysconfig.diskdump file.


author: Akira Imamura <aimamura@redhat.com> 1.1.8-1
changelog:
  Updated source package to diskdumputils-1.1.8.tar.gz:
    - Restores the code which converts zero-ed pages to file holes.
      BZ #165356


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to prevent occasional cupsd crash on reload (bug #146850).
  - Applied patch to fix STR #1068 (bug #146236).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - REVERTED last two changes:
    - Applied patch to prevent occasional cupsd crash on reload (bug #146850).
    - Applied patch to fix STR #1068 (bug #146236).


author: Mike A. Harris <mharris@redhat.com> 0.0.3-55
changelog:
  - Removed BuildRequires: XFree86, because that should not be hard coded. If
    there is a dependancy on something in the XFree86 package, please let
    mharris know what it is and we can discuss a better dependancy that is not
    tied to XFree86 directly
  - Changed Copyright to License in spec file
  - Changed BuildRoot to use _tmppath
  - Removed Excludearch alpha
  - Other minor cleanups to spec file I noticed while fixing the above


author: Leon Ho <llch@redhat.com>
changelog:
  - added a simple patch for gcc34 compiler
  - added support for xinitrc-4.0.1
    - run alternativates on post and preun
    - included xinput-miniChinput


author: Qingyu Wang <qwang@redhat.com> 61
changelog:
  - added a patch miniChinput-0.0.3-SHP.patch to fix bug 169767
  - added a patch miniChinput-0.0.3-setbuf.patch to fix bug 162937


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.10
changelog:
  - update from CVS (fedora-2_3-branch)
    - remove nonnull attribute from acct (BZ#877)
    - allow NLS of some strings that couldn't be translated before (BZ#253)
    - execvp fix (BZ#851)
    - update IA-64 libm from Intel 2005-04-05 (#142494, BZ#592)
    - fix initgroups when passed zero-size buffer (BZ#661)
    - update tzcode to 2005h (BZ#825)
  - add 19 UTF-8 locales where only non-UTF-8 locales existed before
    (#156115, IT#69940)
  - fix xdr_rmtcall_args on 64-bit architectures (#151686, IT#68590)
  - fix posix_fallocate{,64} (#156289, IT#71246)
  - use -laudit in nscd (#159217)
  - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583, IT#75029)
  - handle big amounts of networking interfaces in getifaddrs/if_nameindex
    (#159399, IT#73230)
  - fix nscd cache pruning (#150748)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773, #160091)
  - support classes keyword in /etc/hesiod.conf (#150350)
  - fix IBM939 iconv module (BZ#955)
  - fix malloc_trim (BZ#779)
  - change sys/quota.h to match current kernel's quotactl interface,
    include support for the obsoleted interface (no longer supported
    in current kernels) with -D_LINUX_QUOTA_VERSION=1 (#133095)
  - make regexec thread safe (BZ#934)
  - make -lrpcsvc and -lmcheck usable for PIEs and shared libraries (#149284)
  - fix sendfile{,64} prototypes (BZ#961)
  - fix pa_IN locale's am_pm (#158715, BZ#622)
  - don't use nisplus in nsswitch.conf examples, mention that nisplus is
    unsupported (#159729, IT#74024)
  - don't use symbolic register names %rdi and %rbx in x86-64 cfi directives
    to workaround GNU assembler bug (#162545)
  - fix strfry and initstate{,_r}
  - slightly optimize fnmatch in multi-byte locales
  - fix a typo in libc info wmemcpy description
  - fix nis memory handling when realloc fails
  - fix xdrstdio_putlong on 64-bit architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.11
changelog:
  - include program name in __chk_fail error message
  - don't write 0 to gid/uid column for group/username starting with + or -
    in putgrent/putpwent
  - fix Yen mapping in IBM93{0,9} charsets
  - add sr_CS{,.UTF-8} locales (BZ#38)
  - locale updates (mn_MN, fa_IR)
  - make sure EINVAL is returned from pthread_create if requested thread
    scheduling priority is invalid
  - change NPTL <pthread.h> initializers to avoid warnings, with both -pedantic
    and -W (BZ#915, #162722)
  - fix NPTL <pthread.h> with -ansi -fexceptions
  - fix tst-cancel17 testcase
  - avoid SIGPIPE in nscd
  - fix nscd -g yes/no strings
  - avoid using variable length arrays in regex internals unnecessarily
  - fix *scanf if decimal point is more than one byte long
  - fix rpcgen to output #include <rpc/pmap_clnt.h> even without -C
  - cosmetic fix for ia64 strlen (BZ#1016)
  - add GOT check to dl-execstack.c on i?86
  - avoid namespace pollution in ppc32 {,f}truncate64
  - handle 'z' in strptime*
  - properly propagate return values in nss_compat
  - avoid some unnecessary PLT relocations introduced in 2.3.4-2.10
    or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.13
changelog:
  - change sys/quota.h to default to -D_LINUX_QUOTA_VERSION=1.
    If you want to use sys/quota.h for the quota ABI that is actually
    used in RHEL3, you need to pass -D_LINUX_QUOTA_VERSION=2
    manually


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.15
changelog:
  - update from CVS (glibc-2_3-branch)
    - alpha div/rem fix (BZ#1498)
    - fix mips syscall.h generation (BZ#758)
    - can compile source using gcc 4.0.x (BZ#721, BZ#1384)
    - update tzcode/tzdata to 2005m
  - make sure waitid syscall is used on ppc*/s390*
  - on ia64 don't abort on unhandled math function exception codes (#165693)
  - remove use of _RE_ARGS in <regex.h> (#167019, IT#78801)
  - fix setuid etc. hangs if some thread exits during the call
    (#167766, IT#78380)
  - fix memory leak in innetgr (#169051)
  - thread-safety fix for innetgr (#173476, IT#77263)
  - fix getent hosts IP for IPv4 IPs (#169831, IT#80831)
  - allow nscd log to grow beyond 2GB on 32-bit arches
    (#170282, IT#77309)
  - avoid freeing static buffer in getpw* when using nscd
    and nscd GC is in progress (BZ#1363, #169841, #173358)
  - fix a race in pthread_cancel_init on ia64 (#173353, IT#82991)
  - nscd persistent database checker (#170320)
  - fix resolving over TCP (#161181, #165802)
  - write LD_DEBUG= conflict processing message to LD_DEBUG_OUTPUT
    stream instead of stdout (#171767)
  - increase the size ELF header size read from the beginning
    of libraries on 64-bit arches to avoid unnecessary additional
    reads
  - handle EINTR in sigwait properly
  - use posix_fallocate instead of ftruncate in nscd
  - msync hash table and header in nscd for persistent caches
  - fix argp_error and argp_failure
  - print real thread number, max threads, restart interval and paranoia
    setting in nscd statistics
  - fix nis_leaf_of_r for buflen == 0
  - use stat64 instead of stat for nscd persistent caches
  - be more verbose in nscd -d -d -d debug mode
  - fix memory leaks in setlocale (BZ#1318)
  - handle EINTR properly in nscd
  - hypotf fix
  - fix getlogin_r call in glob (BZ#1061)
  - fix memory leak in getent netgroup printing
  - fix obstack.h (obstack_int_grow_fast) for !__STDC__ (BZ#1331)
  - fix typo in xtrace (BZ#217)
  - fix sockatmark (BZ#1010)
  - fix __stack_prot if RELRO region wasn't properly aligned (BZ#1346)
  - fix lddlibc4
  - don't use needlessly TLS LD model in libc.so
  - fix fmemopen (BZ#394)
  - fix mbrtowc (BZ#714)
  - add -a option to getconf (BZ#652)
  - fix fgets with last argument 1 (BZ#713)
  - fix fwrite (BZ#1078)
  - fix strto{f,d,ld}* in tr_TR locale (BZ#1230)
  - fix %n readonly string checks
  - -Wundef fix for features.h (BZ#1438)
  - fix csqrt{,f,l} (BZ#1466)
  - argp_usage inline can throw (BZ#1373)
  - fix handling of 2GB+ lines in getdelim (BZ#1405)
  - fix handling of very high year in {,as}ctime (BZ#1459)
  - fix {,as}ctime_r (BZ#1460)
  - fix tgmath.h (BZ#865)
  - fix strxfrm_l (BZ#968)
  - make sure LLONG_MAX etc. are defined with -D_GNU_SOURCE or
    -D_ISOC99_SOURCE, even when not using -std=c99 (BZ#1228)
  - fix address ordering in getaddrinfo (BZ#524, BZ#644)
  - fix __{BEGIN,END}_NAMESPACE_* pairing in headers (BZ#1051)
  - fix error handling in *printf
  - fix off by one error in NIS publickey handling
  - fix svc_getreqset on 64-bit arches (BZ#1548)
  - fix backtrace_symbols_fd comment (BZ#1579)
  - fix AI_ALL handling in getaddrinfo (BZ#1774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.16
changelog:
  - fix strncmp on ppc{32,64} (#173643, IT#83510)
  - define shmatt_t type on ia64 in <sys/shm.h> (#173680, IT#82976)
  - remove LinuxThreads man pages to avoid confusion, section 3p
    man pages are much more accurate for NPTL
  - fix bindresvport to really try more ports if range 600 .. 1023 is full
    (#173837, IT#81365)
  - add to dtv_t array flags whether a pointer has been allocated statically
    or dynamically and only free the dynamically allocated ones
    (#172761, IT#82911)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.17
changelog:
  - fix argument checking in yp_order (BZ#1925)
  - don't cache euid/egid in euidaccess
  - avoid unnecessary socket read in nscd client code if hostname has
    no aliases
  - fix do_ypcall in case of memory allocation failure


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.19
changelog:
  - adjust nptl_db for dtv_t changes from -2.16 (#179165)
  - fix setuid etc. hangs on i?86 if some thread exits during the call
    (#167766, IT#78380)


author: Johnny Hughes <johnny@centos.org> [2.6.9-55.0.6.plus.c4]
changelog:
  - based on centos 2.6.9-55.0.6 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - added in patch 19000 for better drbd md support


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-2.41.el4_7.1
changelog:
  - fix dynamic TLS handling (#479630)
  - fix _mcount and socket syscalls on s390x (#479625)
  - try harder to allocate memory in valloc and pvalloc (#479629)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-1.EL4
changelog:
  - restore PEGASUS_DISABLE_CQL=true, as sblim-cmpi-base no longer requires 
    CQL to be enabled, and OpenPegasus steering committee requested it
  - apply upstream update to 'pegasus-2.5.1-warnings.patch'


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-1.EL4
changelog:
  - fix bug 190432: %exclude /usr/lib/debug from RPM
  - fix upstream OpenPegasus '2.5.2_APPROVED' bugs, applying upstream patches:
    o 4955 : Bogus Description property for OperatingSystem provider
    o 4956 : reserveCapacity method may cause size overflow on invalid input
    o 4968 : CMPI provider up-calls cause failure with out-of-process
    o 4978 : snmpDeliverTrap_netsnmp::_createSession function is not thread safe
    o 4983 : Memory leak in OOP indication generation
    o 4984 : Forked process hangs in system call
    o 4986 : Adding automated test for snmpIndication Handler
    (  http://cvs.opengroup.org/bugzilla/show_bug.cgi?id=? )


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - Apply upstream patches for latest 2.5.2_APPROVED bugs:
    o 5046: cimprovider timeout needs to be increased
    o 5047: cimmof timeout needs to be increased
    o 5048: Invalid Pointer in CIMOperationRequestEncoder code
    o 5049: Unnecessary dependency on experimental headers
    o 5051: Improved handling of OOP indication provide module failures
    o 5053: reserveCapacity method may cause size overflow
    o 5059: XMLWriter does not escape '>' in strings
    o 5072: Potential race condition with OOP response chunks
    o 5083: CIMRequestMessage buildResponse() should be const
  - Fix bug 193121: restore world read access to libraries


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - Fix bug 193892: make SDK makefile create libraries with correct SELinux context
  - Fix bug 193919: make /var/lib/Pegasus/cache/trace directory have mode 777
  - Fix bug 192921: make /var/lib/Pegasus/repository directory 
  	          owned by root:root, mode 0700


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - More upstream 2.5.2_APPROVED bug fixes:
    o 5119: memory leak in CMPI implementation
    o 5115: fix SetConfig_EnvVar comments
  - fix bug 194378: merge in changelog from 2.4.1


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - fix bug 194429 / upstream 2.5.2_APPROVED bug 5073
  - fix bug 194896 raised for upstream bugs listed below


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to Robert Scheck's fix for capa probing endless loop on pop servers
    which don't support capa (#115474)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes 
    messages getting lost in SE-Linux contexts


author: Jeff Layton <jlayton@redhat.com> 1.0.6-75.EL4
changelog:
  - fix memory leak in dirscancb (bz 157028)
  - fix use after free segfault made reproducable by memory leak patch


author: Steve Dickson <steved@redhat.com> 1.0.6-76.EL4
changelog:
  - Reorganized and condensed local, upstream and CITI patches
  - Added default mapping to rpc.gsssvcd (bz 189900)
  - Make rmtab use ip addrs, and add -r flag to mountd (bz 165389)
  - Eliminate timeout on shutdowns (bz 218231)


author: Steve Dickson <steved@redhat.com> 1.0.6-77.EL4
changelog:
  - Added NFSv4 support to nfsstat (bz 221527)
  - Fixed some memory leaks in rpc.svcgssd (bz 221531)
  - Fixed problems on 64-bit archs when referencing the OID (bz 221529)
  - Idmapd should flush the nfs4.idtoname cache when server starts (bz 221515)
  - Fixed idmapd debugging so it works in daemon mode (bz 221520)
  - Improved gssd and svcgssd debugging (bz 221533)
  - Added supplementary group support to svcgssd (bz 221518)
  - Fixed idmapd's -f flags so messages get logged to stderr (bz 212220)


author: Jeff Layton <jlayton@redhat.com> 1.0.6-80.EL4
changelog:
  - make statd default to run as rpcuser (bz 233073)
  - fix statd dir perms so that existing installs now run as rpcuser (bz 233073)
  - add "nfslock condrestart" to %postun so locks are reclaimed on pkg update (bz 233073)
  - add patch to allow turning on librpcsecgss debugging in rpc.gssd (bz 189900)


author: Jeff Layton <jlayton@redhat.com> 1.0.6-81.EL4
changelog:
  - make it so that gssd doesn't require portmapper on server (bz 227602)
  - plug two memory leaks in mountd (bz 239783)
  - fix bad string handling in mountd with long /etc/exports lines (bz 242465)
  - fix race condition between mountd and exportfs (bz 239795)
  - add README.FIRST.NFS.RHEL4 file to warn about obsolete html docs (bz 236412)


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.8]
changelog:
  net: socket: make sock_sendpage() use kernel_sendpage() (Danny Feng) [516952 516953] {CVE-2009-2692}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.9]
changelog:
  -net: prevent null pointer dereference in udp_sendmsg (Vitaly Mayatskikh) [518041 518042] {CVE-2009-2698}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.10]
changelog:
  -mptscsi: missing mptscsi raid1 disk causes kernel panic when rebooted before array rebuild (Rob Evers) [517295 507864]
  -writeback: work around problems with persistent inode->dirtied_when values (Jeff Layton) [515255 477784]
  -mthca: don't try to kmalloc large allocations (Doug Ledford) [518707 510395]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.11]
changelog:
  -execve: must clear current->clear_child_tid (Oleg Nesterov) [515427 515428] {CVE-2009-2848}
  -kernel: fix information leak in do_sigaltstack() (Vitaly Mayatskikh) [515394 515395] {CVE-2009-2847}
  -build with fno-delete-null-pointer-checks (Danny Feng) [517964 511183]
  -lpfc: update emulex lpfc driver to 8.0.16.47 with memory leak fix (Rob Evers) [513192 507680]
  -mpt fusion: fix typo in mpt fusion makefile (Tomas Henzl) [516184 496120]
  -implement mmap_min_addr infrastructure (Vitaly Mayatskikh) [517904 512641]
  -kernel: personality handling: fix per_clear_on_setid (Vitaly Mayatskikh) [511172 508843] {CVE-2009-1895}
  -megaraid: fix megaraid SAS tape input/output errors on mt_erase (Tomas Henzl) [517965 504080]
  -kernel: missing capability check in z90crypt (Hans-Joachim Picht) [505985 505986] {CVE-2009-1883}
  -qla2xxx: fix hang when using management tools (Marcus Barrow) [519428 503489]
  -kernel: random: make get_random_int more random (Amerigo Wang) [519692 499785]
  -fix __ptrace_unlink and zap_threads interaction (Oleg Nesterov) [519446 506875]
  -fix soft lockups due to infinite loops in posix_locks_deadlock (Amerigo Wang) [519429 504279]


author: Akemi Yagi <toracat@centos.org> [2.6.9-89.0.11.plus.c4]
changelog:
  - based on centos 2.6.9-89.0.11 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - enabled HDLC support [centos bug #3019]


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Bump version and rebuild with latest gcc
  - Remove ppc64 arch since we don't have kernel support there


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Thomas Woerner <twoerner@redhat.com> 1.0.1-3.RHEL4
changelog:
  - Fixed buffer overflow and possible SQL injection attacks in rlm_sql
    CAN-2005-1454, CAN-2005-1455 (#156941)


author: Elliot Lee <sopwith@redhat.com> 3.0.9-13
changelog:
  - Follow-on fix for the issue detailed in #118713
  - Improve performance when checking if a font has a mapping present
  - Base font file selection on the magic at the start of the file, rather than the filename


author: Jens Petersen <petersen@redhat.com> - 3.0.9-14.1.EL
changelog:
  - replace ttmkfdir-3.0.9-defautl_enc_size.patch and
    ttmkfdir-3.0.9-crashplus.patch with ttmkfdir-3.0.9-fix-crash.patch
    to fix missing native encodings of fonts (Akira Tagoh, #143941)
  - buildrequire flex
  - add ttmkfdir-3.0.9-warnings.patch to silence most of compiler warnings


author: Thomas Woerner <twoerner@redhat.com> 2.2.23-5.1.el4
changelog:
  - fixed getfacl -dR problem with symlinks
    Resolves: rhbz#128265
  - dropped la file which contains wrong path information
    Resolves: rhbz#171114
  - display of all ACL information
    Resolves: rhbz#173178


author: Thomas Woerner <twoerner@redhat.com> 2.2.23-5.3.el4
changelog:
  - fixed more ACL display problems and getfacl return code
    Related: rhbz#128265
    Related: rhbz#173178


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - Remove smartmontools from build on s390 s390x (#180619)
  - Fix SATA detection code and the message printed (#187449)


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Fix up exit codes in cpuspeed initscript (#237941)
  - Update microcode to 1.17 (#235068)
  - Implement -h switch for hardlink (#219609)
  - Fix hardlink -h segfault on x86_64 (#197789)


author: Jarod Wilson <jwilson@redhat.com>
changelog:
  - Update x86info to latest upstream for newer cpu
    support, build and install on x86_64 also (#155494)


author: Than Ngo <than@redhat.com> 4.0.5-4
changelog:
  - own /usr/share/xffm, bug #124825
  - use %find_lang macros, bug #124954
  - add buildrequires on xfce-mcs-manager-devel, bug #125061


author: Kevin Fenzi <kevin@tummy.com> - 4.2.1-1
changelog:
  - Fixed case of Xfce
  - Fixed Source0 line
  - Reimported 4.2.0 spec from core cvs
  - Added patch to remove static call that was breaking compile on devel.


author: Kevin Fenzi <kevin@tummy.com> - 4.2.2-1.fc4
changelog:
  - Update to 4.2.2
  - Rediff rpath and menu patches
  - Remove unneeded gcc4 static patch (merged upstream)


author: Kevin Fenzi <kevin@tummy.com> - 4.2.3-1.fc4
changelog:
  - Update to 4.2.3
  - Added dist tag
  - Rediffed menu patch. Also fixes bug 167993
  - Added librsvg2 BuildRequires


author: Colin Walters <walters@redhat.com> - 0.8.2-6
changelog:
  - Really restore ffmpegcolorspace
  - Reinstate checks for exact plugins installed, i was a
    bit shortsighted in removing it
  - BuildRequire libtheora-devel
  - Ensure we disable faad and sndfile even if they are installed


author: Colin Walters <walters@redhat.com> - 0.8.3-1
changelog:
  - Update to 0.8.3
  - Remove alsa fixes
  - Kill off lame plugin
  - Add alphacolor, decodebin, multifilesink, and playbin.


author: Adam Jackson <ajax@redhat.com> 0.8.5-1.EL.1
changelog:
  - PreReq: gstreamer-tools to fix upgrade scriptlet failure. (#244629)
  - Make sure v4l2 plugin isn't installed.


author: Adam Tkac <atkac redhat com> 20:9.2.4-29
changelog:
  - more verbose query logging messages (#241745)
  - initscript LSB standardization (#242735)
  - add rndc freeze/thaw commands to named and rndc (#247147)
  - update L.ROOT-SERVERS.NET address (#363541)


author: Adam Tkac <atkac redhat com> 20:9.2.4-30.2
changelog:
  - abort timeout queries to reduce the number of open UDP sockets (#476515)
  - handle EMFILE error from accept() gracefully (#476515)


author: Adam Tkac <atkac redhat com> 20:9.2.4-30.5
changelog:
  - named should not die when receives command to reload subdomain (#475202)
  - set default open files limit to unlimited as written in documentation (#456417)
  - named could occasional crash due too early closed sockets (#462060)
  - wait till named terminates in initscript "stop" section (#455540)


author: Johnny Hughes <johnny@centos.org> - 3.0.0-3.el5.centos
changelog:
  - rolled in upstream updates to nxwin-3.0.0-10 and nxagent-3.0.0-77
    (First Maintenance Release of the NX 3.0.0 Server Manager Packages)
  - added --without-zlib-version-check to the configure statement for nxssh


author: Johnny Hughes <johnny@centos.org> - 3.0.0-4
changelog:
  - rolled in upstream updates to nxagent-3.0.0-88, nxcomp-3.0.0-48,
    nxssh-3.0.0-21.tar.gz, and nx-X11-3.0.0-37.tar.gz.
    (Fourth Maintenance Release of the NX 3.0.0)


author: Johnny Hughes <johnny@centos.org> - 3.1.0-5
changelog:
  - upgraded to version 3.1.0 code
  - included updates through (Second Maintenance Release of the NX 3.1.0 Node
    Packages)
  - modified nxfind-provides.sh and nxfind-provides-64.sh to work for 64bit and 32bit libs
  - added nxcl client library
  - added nxlaunch and qtnx cleints for centos-5 only (nxlaunch currently not stable so not built)


author: Johnny Hughes <johnny@centos.org> - 3.2.0-7
changelog:
  - included upstream upgrades through (First Maintenance Release of the NX
    3.2.0 Server and Node Packages) which updated the folowing sources
    nxagent-3.2.0-5.tar.gz, nxcomp-3.2.0-7.tar.gz, nxcompshad-3.2.0-3.tar.gz


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-1.4E.7
changelog:
  - Include --with-shared-modules=idmap_rid to close
    bz#169426 idmap_rid.so missing
  - Include updated crc32.c to close
    bz#172798 New, improved and open source friendly crc32.c
  - Re-include the ldap-failover-timeout-backport patch to re-close
    bz#173892 Authentication doesn't fail over when AD becomes unavailable
  - Include the -sidhistory patch (taken from a svn commit by vlendec@samba.org)
    to close
    bz#180157 Can't authenticate using win2k3 server when sidhistory is set on user
  - Patch smb.init (patch from Bastien Nocera <bnocera@redhat.com>) to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Remove vfstest man page, since we don't ship vfstest, to close
    bz#185149 [RHEL4] samba-common has unnecessary man page.
  - Include the username_substitute patch to close
    bz#171202 [RHEL4] about %U macro in Samba


author: Peter Vrabec <pvrabec@redhat.com> 1.14-7.RHEL4
changelog:
  - Extract sparse files even if the output fd is not seekable. (#154882)
  - (sparse_scan_file): Bugfix. offset had incorrect type


author: Doug Ledford <dledford@redhat.com> - 2.0-2
changelog:
  - Recreate lost spec file and patches from memory
  - Add dist tag to release
  - Turn off FORTIFY_SOURCE when building


author: Doug Ledford <dledford@redhat.com> - 3.0-1
changelog:
  - Update to latest upstream version
  - Compile three times against the three mpi stacks and make three packages
  - Resolves: bz451474


author: Doug Ledford <dledford@redhat.com> - 3.1-3
changelog:
  - Fix build issue when there is more than one mpi version for a given
    mpi implementation installed (or when there are just dangling directories
    from an older installation)
  - Related: bz484126


author: Tom Lane <tgl@redhat.com> 7.4.8-2.el4s1.1
changelog:
  - Use a version-dependent name for libpq.mo files.
  - Adjust release string to meet convention established by stacks group.


author: Tom Lane <tgl@redhat.com> 7.4.22-1.el4s1.1
changelog:
  - Update to PostgreSQL 7.4.22
  - Fold postgresql-ac-version patch into rpm-multilib patch to avoid fuzz


author: Ray Strode <rstrode@redhat.com> 2.7.91-2
changelog:
  - Fix from Federico for infamous hanging splash screen problem.
    (http://bugzilla.gnome.org/show_bug.cgi?id=151664)


author: Ray Strode <rstrode@redhat.com> 2.8.0-4
changelog:
  - Add g-v-m to default session since it wasn't already (?).
  - Remove g-v-m from default session on s390


author: Johnny Hughes <johnny@centos.org> 2.8.0-7.centos4
changelog:
  - Changed Patch1 to gnome-session-2.2.2-icons.centos4.patch to make
    Red Hat Network be CentOS Netork on startup


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.144
changelog:
  - Fix kernel VDSO decoding while attaching to an i386 process (BZ 202809).
  - Fix accessing noreturn frames as callers from their very last end (BZ 208575).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.145
changelog:
  - Fix `gcore' command for 32bit PPC inferiors on 64bit PPC hosts (BZ 231327).
  - New testcase for gcore of 32bit inferiors on 64bit hosts.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.147
changelog:
  - Support for shared libraries >2GB on 64bit hosts (BZ 223222).
  - Fix harmless GCORE stack buffer overflow, by _FORTIFY_SOURCE=2 (BZ 235753).
  - Cleanup any leftover testsuite processes as it may stuck mock(1) builds.


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.148
changelog:
  - Disassemble any of the supported PPC CPU models instruction sets (BZ 234359).
  - Fix unwinding crash on older gcj(1) code (extended CFI support) (BZ 165025).
  - Use definition of an empty structure as it is not an opaque type (BZ 221026).
  - No longer disassemble invalid i386 opcodes of movQ/movA (BZ 208476).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.149
changelog:
  - Support for stepping over PPC atomic instruction sequences (BZ 234463).
  - `set scheduler-locking step' is no longer enforced but it is now default.


author: Bill Nottingham <notting@redhat.com> - 1.1.95.18-1
changelog:
  - fix logic in module_upgrade (#189885, <jlayton@redhat.com>)
  - don't crash when open of /proc/scsi/scsi fails for odd reasons (#185770)
  - fix incomplete probing on boxes with many scsi devices (#206641, <denis@poolshark.org>)


author: Bill Nottingham <notting@redhat.com> - 1.1.95.23-1
changelog:
  - add support for eHCA IB adapters (#233660)
  - fix usb-floppy test (#218783)
  - backport qla4xxx fix (#234134, <sfernand@redhat.com>)


author: Bill Nottingham <notting@redhat.com> - 1.1.95.24-1
changelog:
  - Handle modules.pcimap searches with class_mask properly (#453033)
  - Don't open /dev/stX, causing tapes to rewind (#468680)


author: Adrian Havill <havill@redhat.com> 3.0-19
changelog:
  - add code to /etc/skel/.bash_logout to support the gpm selection buffer
    invalidation on virtual terminals (#115493)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Reverted this change:
    - add code to /etc/skel/.bash_logout to support the gpm selection buffer
      invalidation on virtual terminals (#115493)


author: Tim Waugh <twaugh@redhat.com> 3.0-19.3
changelog:
  - Small fix for multibyteifs patch to prevent segfault (bug #157260).
  - Fix sub-shell parsing problem (bug #178788).
  - Fix pipeline disposal race condition (bug #182405).
  - Fixed job handling bug (bug #162578).


author: Jeff Johnson <jbj@redhat.com> 0.97-4
changelog:
  - properly identify GPL'd sub-packages.
  - don't fail on missing doco.
  - don't fail on unpackaged files.


author: Milan Broz <mbroz@redhat.com> - 1.02.21-1
changelog:
  - Update to latest upstream release.
  - Add tree-based and dependency fields to dmsetup reports.
    Resolves: #249004 #225487


author: Peter Rajnoha <prajnoha@redhat.com> - 1.02.28-1
changelog:
  - Update to latest upstream release.
  - Add --nameprefixes to dmsetup, add --unquoted and --rows to dmsetup.
  - Add field name prefix option to reporting functions.
    Resolves: #476498


author: Jens Petersen <petersen@redhat.com> - 0.1.7-5
changelog:
  - send hup to htt_server after removal not before
  - add post, preun and postun requires for killall and iiimf-le-tools


author: Leon Ho <llch@redhat.com> - 0.1.7-10
changelog:
  - some inputsyles should not unlock candidate when backspacing (#136640)
  - when preedit shouldn't pass space tab etc (#138799)


author: Johnny Hughes <johnny@centos.org> 2.1.2-1.c4.centos4
changelog:
  - modify configure.pl so it will install in lib64 or lib to make 
    compatible with 64-bit arches (lib.patch)
  - defined /etc/rc.d/init.d (required for centos)
  - removed "/sbin/restart_maybe backuppc" from %post as this file
    does not exist in CentOS
  - changed the perl module to BuildRequires AND Requires so that
    program builds AND runs with those options on at default.


author: Johnny Hughes <johnny@centos.org> 2.1.2-2.c4.centos4
changelog:
  - added BackupPC-2.1.2pl1.patch from backuppc site
  - changed the html and cgi-bin directories to /usr/share/backuppc from
    /home/httpd/backuppc to be consistant with other CentOS webbased apps
  - added the a Requires for samba-client, httpd, mod_perl
  - configured backuppc to use mod_perl (see the README.centos file)
  - changed the user in backuppc-2.1.1-usernotexist.patch to backuppc to have
    the service start as the backuppc user.
  - Modified the permissions of the writeable directories in /var to be owned
    by the backuppc_user,backuppc_grp user.
  - Added backuppc.conf (apache /etc/httpd/conf.d script) and 
    htpasswd (a user passwd file for access). Defined httpd_confd_dir and
    htpasswd_dir for this purpose.
  - Added centos4-docs.patch to move the docs directory into the\
    /backuppc/html/doc/ directory and fix the linked in.  Added README.centos.


author: Daniel Veillard <veillard@redhat.com> 1.2.1-1
changelog:
  - initial packaging based on the upstream one and libxml2 one.
  - desactivated mozilla-nss due to detection/architecture problems


author: Daniel Veillard <veillard@redhat.com> - 1.2.6-3.2
changelog:
  - disable xslt i/o support in library, tools and examples, CVE-2011-1425
  - Resolves: rhbz#694122
  - limit the paths used for searching the security library loaded dynamically
  - Resolves: rhbz#558480


author: Warren Togami <wtogami@redhat.com> - 3.0.5-4
changelog:
  - Remove RCVD_IN_RSL (#191033)
  - Preserve timestamp and context of /etc/sysconfig/spamassassin (#178580)


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-81]
changelog:
  -virtio_net: let virtio_net change the mtu (Chris Lalancette) [483535]
  -fix a buffer overflow vulnerability with del_rbu driver (Don Howard) [482940] {CVE-2009-0322}
  -net: backport of dscp functionality (Thomas Graf) [484398]
  -netxen critical fixes (Tony Camuso) [458863]
  -check futex timespec validity (Jerome Marchand) [472557]
  -cifs: replace missing else in cifs_open_inode_helper (Jeff Layton) [484261]
  -libata: ahci: Withdraw IGN_SERR_INTERNAL for SB800 SATA (David Milburn) [480395]
  -sd: Fix handling of NO_SENSE check condition (Rob Evers) [480666]
  -security: introduce missing kfree (Jiri Pirko) [480596] {CVE-2009-0031}
  -libata: fix removing adding hdd thru proc (David Milburn) [329201]
  -md: fix snapshot data corruption (Mikulas Patocka) [175830]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-82]
changelog:
  -kernel: fix kernel memory disclosure in getsockopt() with option SO_BSDCOMPAT (Don Howard) [486516] {CVE-2009-0676}
  -e1000: move around config for es2lan (Andy Gospodarek) [473258]
  -dm: fix more random snapshot crashes and corruption (Mikulas Patocka) [484319]
  -dm: random snapshot crashes and corruption (Mikulas Patocka) [484319]
  -mptfusion: remove check for type disk (Tomas Henzl) [465514]
  -scsi: remove wrong lock from scsi layer (Tomas Henzl) [483191]
  -ipv6: fix link local connect hang (Neil Horman) [483619]
  -improve udp port randomization (Vitaly Mayatskikh) [480137]
  -e1000: test for unusable msi (Andy Gospodarek) [482822]
  -md: crash with partially succeeded request (Mikulas Patocka) [472796]
  -nfs: remove bogus lock if signalled case (Bryn M. Reeves) [456285] {CVE-2008-4307}
  -amd k6 doesn't support mce (Prarit Bhargava) [479910]
  -Revert "sunrpc: fix kernel crash in sunrpc cache_clean" (Vivek Goyal) [479728 278291]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-83]
changelog:
  -arp: add uresolved_discards counter (Neil Horman) [453173]
  -xen: fix crash when modprobe xen-vnif in a kvm guest (Chris Lalancette) [485421]
  -Re-apply: fix kernel crash in sunrpc::cache_clean (Peter Staubach) [278291]
  -r8169: don t update statistics counters when interface is down (Ivan Vecera) [440467]
  -fix panic when loading pciehp module (Prarit Bhargava) [487385]
  -hid: fix return code in hid_probe (Aristeu Rozanski) [453171]
  -ixgbe: make sure devices can netdump (Andy Gospodarek) [484376]
  -igb: make sure devices can netdump (Andy Gospodarek) [484376]
  -igb: prevent deadlock while executing netdump (Andy Gospodarek) [435886]
  -bnx2: fix driver update that broke netdump (Andy Gospodarek) [484667]
  -bug fix for hdmi audio (Bhavana Nagendra) [459222]
  -usb: workaround for usb hang in sb600/sb700 (Pete Zaitcev) [472789]
  -netpoll: fix up device quota in netpoll prior to calling driver poll method (Neil Horman) [481207]
  -fix leap second hang (Prarit Bhargava) [479764]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-84]
changelog:
  -cciss: disable dma refetch on p600 (Tomas Henzl) [454643]
  -cciss: remove unused variable (Tomas Henzl) [454643]
  -cciss: read config table to determine max_commands (Tomas Henzl) [454643]
  -cciss: Updated cciss driver to 2.6.20.RH2, update controller names and version (Tomas Henzl) [454643]
  -ext3: ext3_symlink should use gfp_nofs allocations inside (Flavio Leitner) [489768]
  -net: fix dst_entry leak (Neil Horman) [489300]
  -nmi watchdog: generate load on all cpus while testing if the watchdog works (Aristeu Rozanski) [488018]
  -qla4xxx: properly support async pdu messages (Marcus Barrow) [485092]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-85]
changelog:
  -md: pass down bio_rw_sync in raid 1,10 (Dave Maley) [467829]
  -fix the tsc clocksource when using the tick divider (Chris Lalancette) [491154]
  -bonding: give full arp monitoring cycle to slaves (Jiri Pirko) [489362]
  -megaraid: fix a bug in reset handler (Tomas Henzl) [481662]
  -dm: check that the log bitmap will fit within the log device (Milan Broz) [490021]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-86]
changelog:
  -qla2xxx: reduce BUS_BUSY error returns (Marcus Barrow) [490744]
  -scsi: modify scsi layer to retry DID_ERROR (Marcus Barrow) [490744]
  -tg3: add in driver phy support for 5785 (Andy Gospodarek) [452925]
  -e1000: fix false link detection (Michal Schmidt) [489960]
  -qla2xxx: fix flash program: fix read/write version update issues (Marcus Barrow) [491784]
  -qla2xxx: fix loop resets and HBA traversal (Marcus Barrow) [491784]
  -qla2xxx: 8 gb/s firmware update for blade servers 4.06.01 => 4.04.09 (Marcus Barrow) [492156]
  -qla2xxx: 4 gb/s firmware update for blade servers 4.06.01 => 4.04.09 (Marcus Barrow) [492156]
  -bnx2x: initialization and ia64 fixes (Andy Gospodarek) [453305]
  -hfs: fix hfs mount memory leak (Dave Anderson) [479607]
  -fix warn in __writeback_single_inode (Josef Bacik) [458955]
  -ide: increase the timeout in wait_drive_not_busy (Prarit Bhargava) [456078]
  -more fixes for fix race condition in input.c (James Paradis) [491940]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-87]
changelog:
  -fix CLONE_PARENT and parent_exec_id interaction (Don Howard) [479962] {CVE-2009-0028}
  -qla2xxx: remove sysfs entry for nvram (Marcus Barrow) [476704]
  -mce: do not clear status registers in fatal conditions (Aristeu Rozanski) [489695]
  -nehalem ex support (John Villalovos) [491338]
  -cciss: export device model and vendor info through sysfs (Tomas Henzl) [490187]
  -cciss: kernel thread to detect config changes on the MSA2012 (Tomas Henzl) [490187]
  -cciss: cleanup redundant code (Tomas Henzl) [490187]
  -cciss: changes in config functions (Tomas Henzl) [490187]
  -x86_64: syscall_audit: fix 32/64 syscall hole (Jerome Marchand) [488000] {CVE-2009-0834}
  -x86_64: backport is_compat_task (Jerome Marchand) [488000] {CVE-2009-0834}


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.11.17-9.1
changelog:
  - added support for passing arguments thru stdin (patch from arozansk@redhat.com)
  - Resolves: #467104
  - added vim-minimal to BR


author: Jiri Moskovcak <jmoskovc@redhat.com> 1.11.17-10
changelog:
  - Added large file (>2G) support
  - Resolves: #196259
  - Resolves: #462073
  - cvs/GSSAPI with DNS-loadbalanced clusters
  - Resolves: #217035
  - fixed outdated URLs in help
  - Resolves #218324
  - Fixed assertion failure.
  - Resolves #441694
  - added vim-minimal to BuildRequires
  - added RPM_OPT_FLAGS
  - Resolves: #468165


author: Joe Orton <jorton@redhat.com> 2.0.52-33.ent
changelog:
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240022)
  - fix mod_proxy option inheritance (#242920)


author: Joe Orton <jorton@redhat.com> 2.0.52-34.ent
changelog:
  - use init script in logrotate postrotate (#241407)
  - mod_proxy: fix handling of percent chars (#233254)
  - fix {default,cgi}_handler returning bogus errors (#197915)
  - fix unnecessary loss of C-L in HEAD responses (#173467)


author: Joe Orton <jorton@redhat.com> 2.0.52-35.ent
changelog:
  - add 'ServerTokens Full-Release' config option (#236419)
  - add security fix for CVE-2007-3304 (#246182)
  - add security fixes for CVE-2007-1863 and CVE-2006-5752 (#244664)


author: Joe Orton <jorton@redhat.com> 2.0.52-38.ent.2
changelog:
  - add security fix for CVE-2007-6388 (#427236)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427743)


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.3
changelog:
  - Reorganize patches in this spec file so backported upstream fixes come
    after the upstream 2.5.STABLE6 patches.
  - Backport two more security fixes to close
    CAN-2005-0211 bz#146779
    and bz#146785


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.6
changelog:
  - Backport 2.5.STABLE7-post.patch to close
    bz#151423 CAN-2005-0718 Segmentation fault on failed PUT/POST request
  - Backport 2.5.STABLE9-setcookie.patch to close
    bz#150232 cookie leak in squid
  - Backport 2.5.STABLE9-acl_error to close
    bz#151412 Unexpected access control results on configuration errors
  - Backport changes to the ldap helper between STABLE6 and STABLE9 to close
    bz#150907 LDAP authentication fails with an assertion error


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.8
changelog:
  - Backport the -dns_query-4 patch to fix
    bz #157455 CAN-2005-1519 DNS lookups unreliable on untrusted networks
  - Backport the changes from the -5 version of the dns_query patch.


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE6-3.4E.11
changelog:
  - fix for #167414 - Multiple squid DoS issues
  - fix for #166520 - CAN-2004-2479 squid information disclosure


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE6-3.4E.12
changelog:
  - fix for #160704 - squid child processes exit with signal 6
  - fix for #168378 - CVE-2005-2917 Squid malformed NTLM authentication DoS
  - fix for #153274 - the 64bit LFS issue
  - fix for #161640 - Request to re-enable IDENT lookups in squid
  - fix for #162660 - pam authentication fails
  - fix for #172697 - Squid doesn't handle headers split across packets
  - fix for #170399 - Squid blocks page served by broken server
  - fix for #172375 - Error pages should not be replaced by updates
  - fix for #172392 - One translated Polish language error is missing


author: Brent Fox <bfox@redhat.com> 0.143-1
changelog:
  - Do not write out XkbRules line to config file, as it is unnecessary to hard
    code the rules file, which has a built in default which should always
    work. (#120858)


author: Harald Hoyer <harald@redhat.com> - 0.147-1
changelog:
  - let Conf.ConfModules use modprobe.conf name and format (bug 131952)
  - use network script resolv.conf merger/changer (bug 132485)


author: Jeremy Katz <katzj@redhat.com> - 0.148.2-1
changelog:
  - add patch from Jim Parsons to add executil.execWithCaptureErrorStatus as 
    needed by system-config-lvm


author: Tom Lane <tgl@redhat.com> 1.0.16-3.el4_8.4
changelog:
  - Back-port fixes for CVE-2009-2042, CVE-2010-0205, CVE-2010-1205,
    CVE-2010-2249
  Resolves: #609928


author: Tom Lane <tgl@redhat.com> 1.0.16-8
changelog:
  - Back-port fixes for CVE-2011-2690, CVE-2011-2692
    Note: CVE-2011-2691, announced at the same time, does not apply to 1.0.16;
    likewise for CVE-2011-2501
  Resolves: #721308


author: Caolan McNamara <caolanm@redhat.com> - 1:2.0.4-5.5
changelog:
  - Resolves: rhbz#223801 CVE-2007-0002 buffer overflows
  - Resolves: rhbz#226966 CVE-2007-0238 buffer overflows


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.4-1.FC5.1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Update to jdbc driver build 406
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.5-1
changelog:
  - Update to PostgreSQL 8.1.5
  - Update to PyGreSQL 3.8.1
  - Adjust init script to not fool /etc/rc.d/rc
  Resolves: #161470
  - Fix chcon arguments in test/regress/Makefile
  Resolves: #201035


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.6-3.el4s1.4
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.1.6-3.el4s1.5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229337)


author: Joe Orton <jorton@redhat.com> 5.1.6-3.el4s1.6
changelog:
  - add security fixes for CVE-2007-0455, CVE-2007-1001, 
    CVE-2007-1285, CVE-2007-1583, CVE-2007-1718 (#235354)


author: Joe Orton <jorton@redhat.com> 5.1.6-3.el4s1.7
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235026)


author: David Cantrell <dcantrell@redhat.com> - 3.0.1-61.EL4
changelog:
  - Fix dhclient man page typos
    Resolves: rhbz#233071
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237982
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237984


author: David Cantrell <dcantrell@redhat.com> - 3.0.1-63.EL4
changelog:
  - Man page typo fixes
    Resolves: rhbz#447889
  - Validate port numbers for dhclient, dhcpd, and dhcrelay to ensure
    that are within the correct range
    Resolves: rhbz#438149
  - Reclaim abandoned leases when free leases are available
    Resolves: rhbz#445457


author: Peter Vrabec <pvrabec@redhat.com> 4.2.4-43.rhel4
changelog:
  - display statistics when compressing 0 length files (#189215)
  - fix return code when compressing 0 length files (#189216)


author: Tim Waugh <twaugh@redhat.com> 7.07-33.3
changelog:
  - Compile without strict aliasing opts due to warnings across several
    files and incorrect behaviour observed with ps2pdf (bug #418051).
  - Fixed typo in gs_res.ps for DefaultColorRendering (bug #447551).
  - Backported gsalloc.c change for better memory consolidation
    (bug #432926).
  - Backported gximage3.c change to fix rangecheck error (bug #354181).


author: Tim Waugh <twaugh@redhat.com> 7.07-33.8
changelog:
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0583 (bug #487742) and
    CVE-2009-0584 (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 7.07-33.10
changelog:
  - Updated patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix scfd buffer underrun (bug #493442).


author: Jason Baron <jbaron@redhat.com> [2.6.9-27.1]
changelog:
  -fix lease printk DoS (Peter Staubach) [174337] {CVE-2005-3857}
  -prevent panic caused by invalid arguments to set_mempolicy (Larry Woodman) [175683] {CVE-2005-3358}
  -fix dst_entry leak DoS (Thomas Graf) [174345] {CVE-2005-3848}
  -fix ip6_input_finish DoS (Thomas Graf) [174343] {CVE-2005-3858}
  -fix ipv6 flowlabel DOS (Thomas Graf) [174081] {CVE-2005-3806}
  -fix IGMP DoS (Thomas Graf) [174807] {CVE-2002-2185}
  -fix auto-reap DoS (Peter Staubach) [174078] {CVE-2005-3784}
  -fix kernel memory disclosure via /proc exploit (Jason Baron) [176812] {CVE-2005-4605}


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Jason Baron <jbaron@redhat.com> [2.6.9-61]
changelog:
  -add support (device IDs) for Bolton NICs (Bruce Allan) [251220]
  -qla4xxx: fix overrun/underrun handling (Marcus Barrow) [267061]
  -Make sure -devel package files are mode 655 (Doug Ledford) [317121]
  -qla2xxx: fix uninitialized pointers in ioctl module (Marcus Barrow) [311681]
  -flush TLB as appropriate on mutlti-core (Geoff Gustafson, Bhavana Nagendra) [309221]
  -ext3: ensure do_split leaves enough free space in both blocks (Eric Sandeen) [311301]
  -kernel/module.c: don't deadlock rmmod'ing a module in use (Jarod Wilson) [163140]
  -fix bad order of dm-raid1 presuspend ops can hang cluster mirrors (Jonathan Brassow) [316031]


author: Jason Baron <jbaron@redhat.com> [2.6.9-62]
changelog:
  -fix P4/Xeon Thermal transition interrupt handler emits warning messages far too frequently (Brian Maly, Jason Baron) [183280]
  -cxgb3: fix backport issue and prevent panic on module unload (Andy Gospodarek) [252174]
  -libata fixes (Jeff Garzik) [323851]
  -alsa: add position_fix blacklist (Brian Maly) [245782]
  -add tcp_slow_start_after_idle tunable (Thomas Graf) [242157]
  -netpoll, fix deadlock from recursive call through netpoll_send_skb() (Neil Horman) [313751]
  -libata-core: support wildcard matching in ata_blacklist_entry (David Milburn) [237692 239367 316991]
  -bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek) [317341]
  -fix return value from __bio_map_user on error (Eric Sandeen) [316661]
  -alsa: support for AD1984 codecs (Brian Maly) [280381]
  -add Module.symbers file to binary kernel packages (Jon Masters) [325351]


author: Jason Baron <jbaron@redhat.com> [2.6.9-62.1]
changelog:
  -further fixes for: netpoll, fix deadlock from recursive call through netpoll_send_skb() (Neil Horman) [313751]
  -fix denial of service with wedged processes (Vitaly Mayatskikh) [221414]


author: Johnny Hughes <johnny@centos.org> [2.6.9-67.plus.c4]
changelog:
  - based on centos 2.6.9-67 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - added in patch 19000 for better drbd md support


author: Jay Fenlason <fenlason@redhat.com> 0.96.5-0
changelog:
  - New upstream version
  - Change includedir
  - Change the pre scriptlet to fail if the useradd command fails.
  - Remove obsolete patches from this .spec file and renumber the two
    remaining ones.


author: Jay Fenlason <fenlason@redhat.com> 0.97.0-1.4E.1
changelog:
  - Include the -hang patch (from the diffs between 0.97.0 and 0.97.3) to
    allow ospfd to start up without hanging.  This closes
    bz#154400 ospfd consumes 100% CPU on startup


author: Jay Fenlason <fenlason@redhat.com> 0.98.3-1.4E
changelog:
  - Upgrade the RHEL-4 branch to quagga-0.98.3, the latest on Quagga's
    stable branch.  This closes
    bz#144226 Updated quagga from fc3 updates not built for RHEL4
    and (implicitly)
    bz#154400 ospfd consumes 100% CPU on startup
  - Spec file change from FC: replace --with-rtadv
    with --enable-rtadv to close
  - Spec file change from FC:  Move the .so files to the base package
    instead of -devel, so that -devel is actually optional (bz#140894)
  - Spec file change: separate out /usr/include/quagga/ospfd
    from .../*.h and /usr/include/quagga/ospfapi from .../*.h


author: Jay Fenlason <fenlason@redhat.com> 0.98.3-2.4E
changelog:
  - Include the -bgpd-dos patch to close
    bz#191376 CVE-2006-2276 quagga locks with command sh ip bgp
  - Include the -ripd-security patch to close
    bz#191084 CVE-2006-2224 Quagga RIPd route injection
    bz#191080 CVE-2006-2223 Quagga RIPd information disclosure


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Tim Waugh <twaugh@redhat.com> 3.0.2-2
changelog:
  - Use gimp-print driver for HP 2000C (bug #133647).
  - Add autodetect information for Lexmark Z52 (bug #135178).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add autodetect information for HP Color LaserJet 4550 (bug #139799).
  - Add autodetect information for Samsung-ML-1710 (bug #141163).
  - Add autodetect information for HP LaserJet 8150 (bug #139683).
  - Add autodetect information for Epson Stylus Color 777 (bug #139629).
  - Add autodetect information for HP Business InkJet 1100 (bug #139258).
  - Add autodetect information for Epson Stylus Photo 790 (bug #139266).
  - Add autodetect information for HP DJ 3820 (bug #139271).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add autodetect information for Epson Stylus CX3200 (bug #143343).
  - Add autodetect information for HP-OfficeJet G95 (bug #141057).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Add autodetect information for Epson Stylus Photo R300 (bug #143939).
  - Add autodetect information for Okidata Okipage 6ex (bug #143964).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-3.1
changelog:
  - Built for RHEL-4.
  - Fixes XML escaping in PPD.pm (bug #207965).
  - Added IEEE 1284 IDs (bug #246733, bug #246734, bug #246735, bug #246736,
    bug #246737, bug #246738, bug #246739, bug #246740, bug #246741,
    bug #246742, bug #246743, bug #246744).


author: Tim Waugh <twaugh@redhat.com> 3.0.2-3.2
changelog:
  - Applied patch to fix improper sanitization of command line options
    (CVE-2011-2697, bug #721001).


author: Danny Feng <dfeng@redhat.com> [2.6.9-89.0.12]
changelog:
  -fs: nlm_lookup_host should not return invalidated nlm_host (Sachin S. Prabhu) [519656 505591]
  -add -rh1 to ata_piix's driver version (Prarit Bhargava) [519389 495930]
  -memory barrier: adding smp_mb__after_lock (Jiri Olsa) [519386 494404]
  -net: adding memory barrier to the poll and receive callbacks (Jiri Olsa) [519386 494404]
  -net: bonding: fix arp_validate 3 slaves behaviour (Flavio Leitner) [519384 480237]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.13]
changelog:
  -net: netlink: fix numerous padding memleaks (Jiri Pirko) [521602 521603] {CVE-2005-4881}
  -net: tc: fix unitialized kernel memory leak (Jiri Pirko) [520993 520865] {CVE-2009-3228}
  -igb: allocate correct buffer for ethtool_get_strings and remove false tx stats (Stefan Assmann) [522738 517329]
  -prevent an O_NODELAY writer from blocking when a tty write is blocked (Mauro Carvalho Chehab) [523930 504019]
  -cciss: fix NMI watchdog lockup due to re-acquiring spinlock (Tomas Henzl) [525725 509816]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.15]
changelog:
  -net: fixed info leak in tcf_fill_node() due to typo in 9ef1d4c7 (Jiri Pirko) [528870 528871] {CVE-2009-3612}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.17]
changelog:
  -fix x86_64 32bit process register leak (Amerigo Wang) [526795 526796] {CVE-2009-2910}
  -drm r128: add test for initialisation to all ioctls that require it (Danny Feng) [529600 529601] {CVE-2009-3620}
  -net: af_unix: fix deadlock on connecting to shutdown socket (Jiri Pirko) [529628 529629] {CVE-2009-3621}
  -hid-input: fix divide by zero in hid-input.c (Pete Zaitcev) [532027 483783]
  -igb: add link check function to verify that link is present (Stefan Assmann) [534105 529037]
  -ipt_recent: do not accept a rule if hit count is great than ip_pkt_list_tot (Amerigo Wang) [529306 523983]
  -cciss: add bus attribute to support device mapper multipath target (Tomas Henzl) [529309 484415]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.18]
changelog:
  -i8042: regression fix: disable and enable aux port at close (Mauro Carvalho Chehab) [537344 531192]
  -r8169: balance pci_map/unmap pair, use hw padding (Ivan Vecera) [529141 529142] {CVE-2009-3613}
  -forcedeth: add phy_power_down parameter, leave phy powered up by default (Ivan Vecera) [534112 532593]
  -fusion: mptctl module dereferences a userspace address, triggering a crash (Rob Evers) [533798 528066]
  -net: ipv4: make ip_append_data handle null routing table (Jiri Pirko) [537016 520299]
  -bnx2x: fix bnx2x failing when iptables is on (Stanislaw Gruszka) [537013 527656]
  -nlm: don't try to reclaim locks on -o nolock mounts (Jeff Layton) [537017 176848]


author: Anton Arapov <aarapov@redhat.com> [2.6.9-89.0.19]
changelog:
  -net: fix rx length check errors in e1000e (Cong Wang) [551218 551214] {CVE-2009-e1000e}
  -net: fix rx length check errors in e1000 and r8169 (Neil Horman) [550910 550907] {CVE-2009-e1000} {CVE-2009-r8169}


author: Radek Vokal <rvokal@redhat.com> 0.10.8-1.EL4.1
changelog:
  - update to 0.10.8 due to security issues (#142952)
  - changed mozilla default browser to htmlview (#142107)


author: Radek Vokal <rvokal@redhat.com> 0.10.9-1.EL4.1
changelog:
  - release fixes the following security-related issues: (#145483)
  - The COPS dissector could go into an infinite loop. (CAN-2005-0006)
  - The DLSw dissector could cause an assertion (CAN-2005-0007)
  - The DNP dissector could cause memory corruption. (CAN-2005-0008)
  - The Gnutella dissector could cause an assertion (CAN-2005-0009)
  - The MMSE dissector could free static memory. (CAN-2005-0010)
  - The X11 protocol dissector is vulnerable to a string buffer 
    overflow. (CAN-2005-0084)


author: Radek Vokal <rvokal@redhat.com> 0.10.10-1.EL4.1
changelog:
  - new release, fixes three security and stability-related issues:
  - a buffer overflow in the Etheric dissector. (CAN-2005-0704)
  - the GPRS-LLC dissector could crash if the "ignore cipher bit" option was enabled. (CAN-2005-0705)
  - a buffer overflow in the 3GPP2 A11 dissector (CAN-2005-0699)
  - a buffer overflow in the IAPP dissector.
  - a bug in the JXTA dissector could make Ethereal crash.
  - a bug in the sFlow dissector could make Ethereal crash.


author: Jindrich Novy <jnovy@redhat.com> 0.10.12-1.EL4.1
changelog:
  - update to 10.12, this fixes CAN-2005-2361 up to CAN-2005-2367 (#164243)
  - add the rest of the cleanup patch
  - package /usr/sbin/randpkt
  - compile as PIE


author: Steve Grubb <sgrubb@redhat.com> 1.0.16-3.EL4
changelog:
  Resolves: #402941 ausearch segfaults using -k and watch doesn't have a key
  Resolves: #325561 num_logs is needed for keep_logs to work in /etc/auditd.conf
  Resolves: #251639 auditd resume logging on SIGUSR2
  - Update time handling for ausearch and aureport to add more keywords


author: Steve Grubb <sgrubb@redhat.com> 1.0.16-4.EL4_8.1
changelog:
  Resolves: #557032 - Problem with filtering based on auid
  Resolves: #557035 - Filtering on large inode number using i386 is broken


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-2
changelog:
  - Fixing the problems found by Jarod Wilson:
  - Fixing make install target
  - Fixing Makefile so it honors the provided CFLAGS
  - not using makeinstall macro
  - installing is_uinput.sh as 755 instead of changing later with attr


author: Aristeu S. Rozanski F. <arozansk@redhat.com> 0.10-3
changelog:
  - More problems found by Jarod Wilson fixed:
  - Removing exclusive architectures, it used to be in sync with linuxwacom
    package
  - marking udev rules as non-replaceable config files
  - using install on makefile


author: Pasi Pirhonen <upi@iki.fi> 37:1.7.10-1.4.2.centos4
changelog:
  - Changed bookmarks to CentOS-speicific ones
  - added the CA-Cert patch to make cacert.org cert trusted
  - included and modified mozilla-centos-default-prefs.js


author: Jindrich Novy <jnovy@redhat.com> 10.25-1
changelog:
  - update to latest upstream 10.25
  - drop initvar patch
  - update security, misc patch
  - add bmpbpp patch to use only appropriate bit depths for BMP (#135675)


author: Jindrich Novy <jnovy@redhat.com> 10.25-2.EL4.4
changelog:
  - fix libpbm3 what caused crash of pbmtext and other possible breakages (#190539)
  - fix handling of images with multiple bytes per sample (#195994)


author: David Malcolm <dmalcolm@redhat.com> - 2:2.2.3-6
changelog:
  - Added patch to ensure input strings are committed in the correct order in 
    Evolution's Tasks widget (#157399)


author: David Malcolm <dmalcolm@redhat.com> - 2:2.2.3-7
changelog:
  - Added patch to fix libgal2 part of problem with i18n input in Evolution's 
    calendar (#150077 and #154360)


author: David Malcolm <dmalcolm@redhat.com> - 2:2.2.3-8
changelog:
  - Update Russian translation with latest from upstream CVS on gnome-2-8 branch
    (replacing version 1.43 with version 1.43.2.2) (#160767)


author: Don Howard <dhoward@redhat.com> [2.6.9-89.0.29]
changelog:
  -mm: keep a guard page below a grow-down stack segment (Don Howard) [607855 607856] {CVE-2010-2240}
  -mm: accept an abutting stack segment (Don Howard) [607855 607856] {CVE-2010-2240}
  -mm: fix up some user-visible effects of stack guard page (Don Howard) [607855 607856] {CVE-2010-2240}


author: Don Howard <dhoward@redhat.com> [2.6.9-89.0.30]
changelog:
  -bonding: check if clients mac addr has changed (Flavio Leitner) [629239 610236]
  -net: fix corruption of net_device_wrapper structure (Jerome Marchand) [624364 620485]
  -net: qla3xxx: replace kmalloc() call with kzalloc() (Jerome Marchand) [624364 620485]
  -bnx2: fix panic in bnx2_poll_work() (John Feeney) [624363 623265]
  -megaraid_sas: fix physical disk handling and management ioctls (Tomas Henzl) [631903 577178]
  -nfsd4: set OPEN_RESULT_LOCKTYPE_POSIX in open() (Jeff Layton) [625535 575655]
  -s390x: dasd: force online does not work if another side has reserved the disk (Hendrik Brueckner) [626827 619449]


author: Don Howard <dhoward@redhat.com> [2.6.9-89.30.1]
changelog:
  -compat: make compat_alloc_user_space incorporate the access_ok (Xiaotian Feng) [634461 634462] {CVE-2010-3081}
  -mm: guard page for stacks that grow upwards (Johannes Weiner) [632515 630564]
  -s390x: dasd: allocate fallback cqr for reserve release (Hendrik Brueckner) [626828 619527]
  -net sched: fix tcf_gact_dump memory leak (Jiri Pirko) [624906 624907] {CVE-2010-2942}


author: Don Howard <dhoward@redhat.com> [2.6.9-89.31.1]
changelog:
  -netpoll: fix more local_bh_enable() related badness warnings and infinite loop (Neil Horman) [637729 516076]
  -netpoll: fix badness warnings as bottom halves are enabled but interrupts are not (Neil Horman) [637729 516076]
  -aio: check for multiplication overflow in io_submit (Jeff Moyer) [629446 629447] {CVE-2010-3067}
  -fs: buffer.c: fix race in __block_prepare_write (Jeff Moyer) [633968 480404]
  -net: fix info leak in police code (Neil Horman) [636389 636390] {CVE-2010-3477}
  -udp: use memory barrier in datagram_poll (Flavio Leitner) [640117 546251]


author: Don Howard <dhoward@redhat.com> [2.6.9-89.32.1]
changelog:
  -time: implement 'fine grained accounting' for PM timer depending on 'divider' and 'pmtimer_fine_grained' kernel parameters (Ulrich Obergfell) [629237 586307]
  -time: initialize 'tick_nsec' depending on 'divider' and 'pmtimer_fine_grained' kernel parameters (Ulrich Obergfell) [629237 586307]
  -time: introduce 'pmtimer_fine_grained' kernel parameter (Ulrich Obergfell) [629237 586307]
  -kernel: prevent heap corruption in snd_ctl_new() (Jerome Marchand) [638481 638482] {CVE-2010-3442}
  -cciss: change version from 2.6.20.RH2 to 2.6.20.RH3 (Tomas Henzl) [640193 594086]
  -cciss: added printk in do_cciss_request before BUG() (Tomas Henzl) [640193 594086]
  -cciss: fix a nulll pointer dereference in complete_command() (Tomas Henzl) [640193 594086]
  -cciss: fix an issue when sending command with no data (Tomas Henzl) [640193 594086]
  -qla2xxx: work around hypertransport sync flood error on sun x4200 with qla2xxx (Chad Dupuis) [640919 621621]
  -bonding: interface doesn t issue igmp report on slave interface during failover (Flavio Leitner) [641002 637556]
  -mptbase: panic with domain validation while rebuilding after the disk is replaced (Rob Evers) [641137 476874]
  -bonding: fix ALB mode to balance traffic on vLANs (Flavio Leitner) [641254 640803]
  -net: actually copy input_dev to new sk_buff in skb_clone (Andy Gospodarek) [642746 616710]
  -usb: testing the wrong variable in fs_create_by_name() (Don Howard) [643342 594633]
  -scsi: scsi_do_req submitted commands (tape) never complete when device goes (Rob Evers) [644816 636289]
  -3c59x: fix deadlock in irq handler tx path when netconsole in use (Neil Horman) [648407 557380]


author: Don Howard <dhoward@redhat.com> [2.6.9-89.33.1]
changelog:
  -net: sctp: do not reset the packet during sctp_packet_config() (Jiri Pirko) [637864 637865] {CVE-2010-3432}


author: Don Howard <dhoward@redhat.com> [2.6.9-89.34.1]
changelog:
  -alsa: rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648806 648807] {CVE-2010-4080}
  -bluetooth: fix missing null check (Jarod Wilson) [655662 655663] {CVE-2010-4242}
  -ipc: initialize structure memory to zero for compat functions (Xiaotian Feng) [648810 648811] {CVE-2010-4073}
  -ipc: shm: fix information leak to userland (Xiaotian Feng) [648816 648817] {CVE-2010-4072}
  -kernel: failure to revert address limit override in oops error path (Dave Anderson) [659568 659569] {CVE-2010-4258}
  -net: limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [656871 651924] {CVE-2010-3859}
  -net: packet: fix information leak to userland (Jiri Pirko) [649895 649896] {CVE-2010-3876}
  -scsi: gdth: integer overflow in ioc_general (Frantisek Hrbata) [651173 651174] {CVE-2010-4157}
  -sys_semctl: semctl fix kernel stack leakage (Xiaotian Feng) [648793 648794] {CVE-2010-4083}


author: Don Howard <dhoward@redhat.com> [2.6.9-89.35.1]
changelog:
  -unix: fix local socket dos (Neil Horman) [656757 656758] {CVE-2010-4249}
  -serial: clean data before filling it (Mauro Carvalho Chehab) [648808 648809]
  -net: fix reception of completely page backed sk_buffs (Andy Gospodarek) [664667 500921]
  -net: filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651700 651701] {CVE-2010-4158}


author: Johnny Hughes <johnny@centos.org> - 10.1.1.37-1.centos4
changelog:
  - Rolled in previous CentOS-4 changes
  - added centos4-buildi586.patch to allow for 2 boot kernels, i686 and i586
    made i686 the default kernel.


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Joe Orton <jorton@redhat.com> 0.26-2.1
changelog:
  - fix parenthesis handling in filter expressions (#192829)
  - fix ssl_var_lookup calls, SSL support (#192829, 191307)


author: Nalin Dahyabhai <nalin@redhat.com> 226-22
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#300251)


author: Nalin Dahyabhai <nalin@redhat.com> 253-1
changelog:
  - rebase to nss_ldap 253 (#401731)
    - fixes leftover lock problem in nss_initgroups_ignoreusers handling (#429101)
    - fixes re-use of connections across fork() (#155187)


author: Nalin Dahyabhai <nalin@redhat.com> 253-2
changelog:
  - add fix for not double-freeing the result list when we try to initialize an
    internal enumeration context while we have one active (#233382)


author: Nalin Dahyabhai <nalin@redhat.com> 253-3
changelog:
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #253997)


author: Nalin Dahyabhai <nalin@redhat.com> 253-4
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448833)


author: Nalin Dahyabhai <nalin@redhat.com> 253-5
changelog:
  - build with strict-aliasing disabled, because pam_ldap breaks strict-aliasing
    rules without it (tools)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - explicitly enable use of the paged results control (#444058)
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444086)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20040617-5.el4
changelog:
  - fix manycast support in ntpdate (#194329)
  - use adjtime when offset is more than 0.5s (#154625) 
  - link ntpd with -ffast-math on ia64 (#147980)
  - remove unsupported options from ntptrace manpage (#177309)


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20040617-7.el4
changelog:
  - use rhel.pool.ntp.org zone in ntp.conf (#421301)
  - fix buffer overflow in WWV Audio driver (#421311)
  - fix return codes in init script (#240119)
  - pass additional options to ntpdate (#202204)
  - generate man pages from html source, update documentation
    (#245408, #229388, #253662, #426761)
  - exit with nonzero code if ntpd -q did not set clock (#220447)
  - disable kernel discipline when -x option is used (#431728)
  - always return 0 in scriptlets


author: Miroslav Lichvar <mlichvar@redhat.com> - 4.2.0.a.20040617-8.el4_7.2
changelog:
  - fix buffer overflow when parsing Autokey association message 
    (#500781, CVE-2009-1252)
  - fix buffer overflow in ntpq (#500781, CVE-2009-0159)


author: AJ Lewis <alewis@redhat.com> 3.6.0.2-0.1
changelog:
  - update to 3.6.0.2 upstream
  - add iscsi-ls to installed binaries
  - add iscsi-ls.1 manpage to man1
  - remove /dev/iscsi reference (no longer used)


author: Mike Christie <mchristi@redhat.com> 4.0.3.0-4
changelog:
  - Fix hang when dm-multipath queue_if_no_path and LABELs are used
  - Add iscsi-kill-session script
  - Fix double close in iscsid
  - Fix iscsi-ls output when lun 0 has not type
  - sort iscsi-ls results


author: Mike Christie <mchristi@redhat.com> 4.0.3.0-5
changelog:
  - BZ 189512 - add some details to multipath timeout settings
  - BZ 190577 - update README to indicate correct logging file
  - check iscsi portal ip (userspace fixes for 19730)
  - Really fix BZ 177341. In 4.0.3.0-4, the patch did not get added.


author: Mike Christie <mchristi@redhat.com> 4.0.3.0-6
changelog:
  - BZ 216886 - fix fd leak when reloading iscsi.
  - BZ 238413 - pick up lun size changes when reloading or running
  iscsi-rescan.
  - BZ 245791 - add documentation stating that data digests are not
  supported.
  - BZ 245800 - add documentation stating how to specify global iscsi.conf
  values.


author: Steve Dickson <SteveD@RedHat.com> 1.0.6-61
changelog:
  - Added best effort serialization around the
    exporting of filesystems (bz 165063)
  - Changed mountd to use stat64() (bz 165062)
  - Added re-export fix to exportfs (bz 165061)


author: Steve Dickson <SteveD@RedHat.com> 1.0.6-62
changelog:
  - Added patch that stops a buffer overflow in svcgssd (bz 165082)
  - Add ctlbits patch that introduced the -N -T and -U 
    command line flags to rpc.nfsd. (bz 154533)


author: Steve Dickson <SteveD@RedHat.com> 1.0.6-65
changelog:
  - Reworked the nfslock init script so if lockd is running
    it will be killed which is what the HA community needs.
  - Stopped rpcidmapd.init from doing extra echoing when 
    condstart-ed.


author: Chris Lalancette <clalance@redhat.com> 1.0.6-67
changelog:
  - Bring idmapd.c closer to upstream 1.0.8 to fix a problem where
    rpc.idmapd needed to be restarted after boot. (BZ 169862)


author: Steve Dickson <steved@redhat.com> 1.0.6-67
changelog:
  - Broke out the libnfsidmap, librpcsecgss and libgssapi libraries
    and put them into their own rpms.


author: Steve Dickson <steved@redhat.com>
changelog:
  - Changed nfslock initscript to set LOCKD_TCPPORT and
    LOCKD_UDPPORT (bz 162133)
  - Changed rpc_init() so the nfs service can be 
    started (and restarted) from a remote shell
    (bz 175612)
  - Added MOUNTD_NFS_V1 variable to version 1 of the 
    mount protocol can be turned off. (bz 175729)
  - Fixed gssd to handel mixed case characters in
    the domainname. (bz 186069)


author: Than Ngo <than@redhat.com> 6:3.3.1-5.13
changelog:
  - kstart --tosystray does not send window to the system tray in Kicker,
    apply patch to fix this issue #182452
  - apply patch to let klipper ignore selections in firefox/Gecko, random freezes #169459
  - apply patch to make fish kioslave working #177743
  - apply patch to fix local root vulnerability in kcheckpass #166995, CVE-2005-2494


author: Than Ngo <than@redhat.com> 6:3.3.1-5.14
changelog:
  - fix #191049, KDE screensaver calls PAM incorrectly
  - fix #199446, KDE desktop menu missing "open terminal" option


author: Than Ngo <than@redhat.com> - 6:3.3.1-7.el4
changelog:
  - Resolves: #290861,
    CVE-2007-4569, kdm password-less login vulnerability
    CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofing


author: Johnny Hughes <johnny@centos.org> - 6:3.3.1-7.el4.centos
changelog:
  - modified the KONQUEROR_VERSION branding line in spec to say CentOS 
  - added Source100 (centos_ksplashrc) to make CentOS splash default


author: Than Ngo <than@redhat.com> 6:3.3.1-5.12
changelog:
  - apply patch to to fix #194659, CVE-2006-2449 KDM symlink attack vulnerability
    thanks to KDE security team


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.3.el4
changelog:
  - add ChangeLog entry to psd-invalid-dimensions patch (#247571)
  - validate size values read from files before using them to allocate memory in
    various file plugins (#247571, patch by Mukund Sivaraman and Raphaël Quinet)
  - detect invalid image data when reading files in several plugins (#247571,
    patch by Sven Neumann and Raphaël Quinet, adapted for 2.0.5)
  - validate size values read from files before using them to allocate memory in
    the PSD and sunras plugins (#247571, patch by Mukund Sivaraman)
  - convert spec file to UTF-8


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.4.el4
changelog:
  - don't divide by zero when loading a layer or mask with zero width or height
    when loading PSD images (#247571, patch by Sven Neumann)


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.5.el4
changelog:
  - add safeguard to avoid crashes while loading corrupt PSD images (#247571,
    patch by Raphaël Quinet)


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.6.el4
changelog:
  - replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
    don't crash but gracefully exit when encountering error conditions
  - fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
    loops when loading images
  - fix endianness issues in the PCX plugin which cause it to not detect corrupt
    images


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-7
changelog:
  - backport fix from pam_ldap 180 to fix vulnerability when parsing password
    policy controls which don't contain error numbers (#166163, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 226-8
changelog:
  - add fix for stripping off the last ldap.secret character, even if it's not
    a newline (#166647, upstream #138,#199)


author: Nalin Dahyabhai <nalin@redhat.com> 226-10
changelog:
  - backport fix from nss_ldap 242 to issue a start_tls exop when chasing
    referrals received over a connection on which we used start_tls
    (#162482, CAN-2005-2069, upstream #211)
  - backport fix from pam_ldap 180 to issue a start_tls exop when chasing
    referrals received over a connection on which we used start_tls
    (#162482, CAN-2005-2069, upstream #210)


author: Peter Jones <pjones@redhat.com>
changelog:
  - Revert label probing change; we don't need it since mount doesn't use
    libblkid in rhel 4.
    Related: rhbz#234815


author: Eric Sandeen <esandeen@redhat.com> 1.35-12.8.el4
changelog:
  - Don't write changes to the backup superblocks by default (#229568)
  - e2fsck: added sanity check for xattr validation (#230434)


author: Eric Sandeen <esandeen@redhat.com> 1.35-12.9.el4
changelog:
  - Fix debugfs segfault when no fs open (#226801)
  - Avoid recursive loops in logdump due to symlinks in /dev (#212301)


author: Adrian Likins <alikins@redhat.com> 4.4.51
changelog:
  - fix #169882, #159955 - up2date man page does not describe --undo option.
    (remove deprecated undo option)
  - fix #170065, #166034 - up2date "forward" button disabled if packages selected via spacebar.
  - fix #157087, #170055 - up2date --configure fails when failover serverURL is configured.


author: Adrian Likins <alikins@redhat.com> 4.4.52
changelog:
  - fix #165024 - "invalid function call" error on proxy installs
  - fix #169881, #167732 -  'up2date --configure' always saves changes if useNetwork is false on startup


author: Adrian Likins <alikins@redhat.com> 4.4.54
changelog:
  - revert orig fix for #165024 - "invalid function call" error on proxy installs
  - add new bug fix for #165204
  - revert "fix" for #169882, #159955 - up2date man page does not describe --undo option.
  - add --unfo to man page fixing #169882, #159955


author: David Malcolm <dmalcolm@redhat.com> - 2.0.10-4
changelog:
  - Added patch by Justin M. Forbes <64bit_fedora@comcast.net> for proper libdir in .conduit files (#121268)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.11-1
changelog:
  - update upstream tarball from 2.0.10 to 2.0.11
  - added more detailed version requirements on gnome-pilot/gnome-pilot-devel as imposed by the configuration script, version 2.0.11 is now required, rather than just 2.0


author: Joe Orton <jorton@redhat.com> 2.0.52-8.ent
changelog:
  - apachectl: fix for final RHEL4 libselinux tools location
  - mod_ssl: revert to use builtin passphrase prompt again (#128667)


author: Joe Orton <jorton@redhat.com> 2.0.52-10.ent
changelog:
  - mod_proxy: notice aborted client-connection (#138359)
  - mod_include: fix off-by-one in variable expansion (upstream #32985)
  - require apr with sendfile support on s390 (#146891)


author: Joe Orton <jorton@redhat.com> 2.0.52-11.ent
changelog:
  - restore use of $OPTIONS in apachectl again (#115910)
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)


author: Joe Orton <jorton@redhat.com> 2.0.52-12.1.ent
changelog:
  - add security fix for C-L vs T-E handling (#162244, CVE CAN-2005-2088)
  - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
  - mod_userdir: add fix for possible memory corruption (upstream #34588)


author: Harald Hoyer <harald@redhat.com> - 039-10.8.EL4
changelog:
  - added all partitions to ide floppy devs (bug 139939)
  - removed wait_for_sysfs info messages, which made users nervous


author: MUNEDA Takahiro <muneda.takahiro@jp.fujitsu.com> - 039-10.8.EL4
changelog:
  - turn on with_persistent flag in udev.spec
  - fixed USB and SCSI sysfs files path and sed script in
    udev.get-unique_hardware_path.sh
  - change mknod target directory for scsi_id, because /tmp is
    mounted read-only


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-3
changelog:
  - add backport of patch from Werner Koch to fix the exit status when verifying
    signatures when no signature is provided (CVE-2006-0455, #183484)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.7-4
changelog:
  - add patch from Werner Koch to error out on ambiguous armored signatures in
    message, with some more bits from Klaus Singvogel to handle argument parsing,
    backported (CVE-2006-0049, #184556)


author: Nalin Dahyabhai <nalin@redhat.com> 1.2.6-2
changelog:
  - back down to 1.2.6 for now
  - build assembly modules using CC instead of AS, so that flags such as -DPIC
    will be seen by the preprocessor
  - build assembly modules with -Wa,--noexecstack


author: Doug Ledford <dledford@redhat.com>
changelog:
  - Bump version and rebuild with latest gcc
  - Remove ppc64 from build since the latest kernel doesn't have InfiniBand
    support compiled in for any of the ppc arches


author: Johnny Hughes [2.6.9-67.0.4.plus.c4]
changelog:
  - based on centos 2.6.9-67.0.4 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - added in patch 19000 for better drbd md support


author: Anton Arapov <aarapov@redhat.com> [2.6.9-89.0.19]
changelog:
  -net: fix rx length check errors in e1000e (Cong Wang) [551218 551214] {CVE-2009-4538}
  -net: fix rx length check errors in e1000 and r8169 (Neil Horman) [550910 550907] {CVE-2009-4536} {CVE-2009-4537}


author: Matthias Clasen <mclasen@redhat.com> - 2.4.13-7
changelog:
  - Include an upstream bugfix in the 
    gtk+-2.4.9-treeview-activate.patch. This fixes
    a crasher bug (#137461)


author: Jason Baron <jbaron@redhat.com> [2.6.9-16]
changelog:
  -make sure loopback is available for ipv6 (David Miller) [165669]
  -device-mapper: fix read balancing (Jonathan Brassow) [165717]


author: Jason Baron <jbaron@redhat.com> [2.6.9-16.1]
changelog:
  -x86_64: fix morrison dual core numa support (Jim Paradis) [160230]
  -fixup 4/4 split userspace bounds (Ingo Molnar)


author: Johnny Hughes <johnny@centos.org> [2.6.9-22.0.1]
changelog:
  -added i586 support for CentOS
  -modified the kernel to build with no username for CentOS
  -changed the key to CentOS and not redhat


author: Soren Sandmann <sandmann@redhat.com> - 2.8.6-2.11
changelog:
  - Fix bug in strict-pointer.patch introduced when focus-bug.patch was
    folded in. See comments in
       http://errata.devel.redhat.com/errata/showrequest.cgi?advisory=2007:9049


author: Warren Togami <wtogami@redhat.com>
changelog:
  - Options for RHEL4
      * spamc/spamd cannot connect over IPv6 or SSL
      * sa-update is disabled
    The above functionality requires perl modules not included in RHEL4.
    You may still use them if you get those perl modules from elsewhere.
    RHEL5 ships these perl modules.


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.4
changelog:
  - add security fixes for CVE-2007-1285, CVE-2007-1286, 
    CVE-2007-1583, CVE-2007-1711, CVE-2007-1718 (#230556)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235028)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.7
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, CVE-2007-3799,
    CVE-2007-3996, CVE-2007-3998, CVE-2007-4658, CVE-2007-4670 (#278391)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.10
changelog:
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445921)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.11
changelog:
  - update to PEAR 1.4.9, matching RHEL-5 (#263501)
   * bundle XML_RPC-1.5.0, Console_Getopt-1.2, Archive_Tar-1.3.1
   * fix paths in default pear.conf, installed PEAR registry
   * replace /usr/bin/pear et al with simpler wrapper scripts


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.14
changelog:
  - add security fixes for CVE-2008-3658, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2009-0754 (#487360)
  - split out gd overflow2() and make global with sane symbol name


author: Leon Ho <llch@redhat.com> 1.3-9
changelog:
  - Sync what we have changed on the branches
    Wed Nov 24 2004 Harald Hoyer <harald@redhat.com>
    - added post section to recreate the softlink in emul mode (bug 140739)
    Mon Nov 15 2004 Phil Knirsch <pknirsch@redhat.com>
    Tiny correction of bug in new triggers


author: Leon Ho <llch@redhat.com> 3.0-5.EL
changelog:
  - Fixed redhat-lsb's mkredhat-lsb on fetching lib and cmd requirements (RH#154605)
  - Changed explicit mailx command requirement to package requirements (RH#164124)
  - Added mailx symlink to /bin/mail (RH#164124)
  - Added lsb-core-noarch and lsb-graphics-noarch and lsb-graphics-{arch} requirements (RH#164468)
  - Added requirements from lsb_release command on lsb-release.d and deps. (RH#164468)


author: Leon Ho <llch@redhat.com> 3.0-6.EL
changelog:
  - Made the /etc/lsb-release useful (RH#154605)
  - Added redhat_lsb_trigger to fix RH#160585 (Jakub Jelinek)
  - Fixed AMD64 base libraries requirement parsing (RH#154605)


author: Leon Ho <llch@redhat.com> 3.0-7.EL
changelog:
  - Fixed multilib problem on lsb_release not to read /etc/lsb-release and solely 
    depends on /etc/lsb-release.d/ (Advised by LSB committee)
  - Removed /etc/lsb-release (Advised by LSB committee)


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.109
changelog:
  - clear rpc client on lookup fail.
    - there were two patches to resolve issues for bz495110, this is
      the second.
  - Related: rhbz#495110


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.110
changelog:
  - Bug 527371 - DOS via autofs/yp - autofs consumes all ports < 1024
    - remove redundant debug log call.
    - fix clear the quoted flag after each character.
  - Bug 527374 - CRM #1863906 automount segfaults at shutdown and reboot
    - prevent shared libraries from being unloaded at map re-read.
    - make sure main thread cannot exit until mount handling threads have completed.
    - add check for alternate libxml2 library name.
    - fix shutdown signal processing regression introduced by this bug fix.
    - fix reload signal processing regression introduced by this bug fix.
    - fix not releasing mount resources at submount mount thread termination.
  - Bug 527375 - Read and write size of startup status report buffer is incorrect
  - Bug 527376 - service autofs start when the service is running does not return success
  - Bug 527377 - Using a large number of direct mounts causes autofs to hang
    - convert select(2) to poll(2) to avoid 1024 file descriptor limit.
  - Bug 539667 - autofs crashes because of double-free under heavy stress
  - Bug 471394 - Update Release: & Version: in spec file
  - Bug 527385 - RHEL5.1 and erroneous autofs after reload
    - dont umount existing direct mount on master re-read.
  - Bug 509513 - Segmentation fault in sasl_client_add_plugin 
    - fix libxml2 non-thread-safe calls.
  - Bug 540329 - connect_nb() uses a wrong timeout
    - fix timeout in connect_nb().
  - Resolves: rhbz#527371 rhbz#527374 rhbz#527375 rhbz#527376 rhbz#527377
  - Resolves: rhbz#539667 rhbz#471394 rhbz#527385 rhbz#509513 rhbz#540329


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.111
changelog:
  - Bug 534093 - autofs5: segfault in close_mount()
    - add mutex to serialize access to mount module handle in parse module.
    - dont check null cache on expire.
    - fix null cache race.
    - fix cache_init() on source re-read.
    - fix memory leak on reload.
  - Resolves: rhbz#534093


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.112
changelog:
  - Bug 534093 - autofs5: segfault in close_mount()
    - fold autofs-5.0.5-fix-memory-leak-on-reload.patch into
      fix cache_init() on source re-read patch where it belongs.
  - Related: rhbz#534093


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.113
changelog:
  - Bug 471394 - Update Release: & Version: in spec file
    - correct mismatch in revision macro values.
  - Related: rhbz#471394


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.114
changelog:
  - Bug 527371 - DOS via autofs/yp - autofs consumes all ports < 1024
    - add patch to fix use after free introduced by fix for this bug.
  - Related: rhbz#527371


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Bill Nottingham <notting@redhat.com> 7.93.21.EL-1
changelog:
  - rc.sysinit: add call to kpartx for multipath devices (#168538)
  - use multipath.static, not dynamic multipath (#168321)
  - don't fsck netdev filesystems in rc.sysinit (#172804)


author: Jens Petersen <petersen@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2 bugfix release
  - update libtool-1.5-libtool.m4-x86_64.patch
  - nolonger need libtool-1.5-mktemp.patch, libtool-1.5-expsym-linux.patch,
    libtool-1.5-readonlysym.patch, libtool-1.5-relink-libdir-order-91110.patch,
    libtool-1.5-AC_PROG_LD_GNU-quote-v-97608.patch and libtool-1.5-nostdlib.patch


author: Joe Orton <jorton@redhat.com> 5.1.2-5.el4s1.1
changelog:
  - add missing namespace-protection for bundled gd (upstream #36208)
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)


author: Joe Orton <jorton@redhat.com> 5.1.2-5.el4s1.2
changelog:
  - add security fixes from upstream:
   * phpinfo() XSS issue (#190795, CVE-2006-0996)
   * wordwrap integer overflow (#190794, CVE-2006-1990)
   * substr_compare integer overflow (CVE-2006-1991)
   * zend_hash_del fix


author: Joe Orton <jorton@redhat.com> 5.1.4-1.el4s1.3
changelog:
  - add security fixes for: CVE-2006-4020, CVE-2006-4482, CVE-2006-4484, 
    CVE-2006-4485, CVE-2006-4486
  - add metaphone() fix (#205714)
  - fix missing php-odbc Requires php-pdo
  - fix php-imap Summary


author: Roland McGrath <roland@redhat.com> - 0.97.1-4
changelog:
  - eu-strip -f: copy symtab into debuginfo file when relocs use it (#211903)
  - Resolves: RHBZ #211903


author: Jakub Jelinek <jakub@redhat.com> 4.1.0-7.EL4
changelog:
  - update to 4.1.0-RH technology preview (#183083)
    - OpenMP 2.5 support (#181532)
    - Intel MNI intrinsics (#183155)
    - on i?86/x86_64 -mtune=generic support, set by default (#186968, #186973)
    - 64-bit SSE3 intrinsics support (#186975)


author: Jakub Jelinek <jakub@redhat.com> 4.1.0-15.EL4
changelog:
  - update from redhat/gcc-4_1-branch
    - fix Java class layout bug (Tom Tromey, #185553, PR java/26042)
    - fix SSE extraction on i?86/x86_64 (Alexandre Oliva, #187450)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-51.EL4
changelog:
  - update from redhat/gcc-4_1-branch (#200825)
    - fix gfortran -fno-automatic (#203928, PR fortran/28415)


author: Jakub Jelinek <jakub@redhat.com> 4.1.1-53.EL4
changelog:
  - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj
    timezone stuff instead of builtin simple and outdated rules (#227983)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-14.EL4
changelog:
  - update from redhat/fc5-4_1-branch (#240142)
    - GCC 4.1.2 release
    - PRs inline-asm/32109, rtl-optimization/28011, target/32389,
  	libfortran/31409, libfortran/31880, libfortran/31964,
  	rtl-optimization/31691, target/31022, target/31480, target/31701,
  	target/31876, target/32163, tree-optimization/26998, c++/30016,
  	c++/30221, middle-end/30761, target/18989, target/28675,
  	tree-optimization/29446, tree-optimization/31698, middle-end/31448,
  	preprocessor/30468, target/28623, target/31641, c++/30168, c++/31074,
  	c++/31449, c++/31517, c/31520, middle-end/30729, target/25448,
  	target/30289, target/30483, target/31361, target/31582,
  	testsuite/31578, target/31137, target/31380, fortran/31184,
  	target/31245, tree-optimization/30590, debug/29906, middle-end/30364,
  	middle-end/30433, target/31123, c++/30852, c++/30895,
  	fortran/29441, fortran/30400, libgcj/17002,
  	libgfortran/30910, libgfortran/30918, other/31050,
  	rtl-optimization/30931, target/30848, tree-optimization/29925,
  	ada/30684, fortran/30478, fortran/30799, middle-end/24427,
  	other/27843, rtl-optimization/28173, rtl-optimization/28772,
  	rtl-optimization/29599, rtl-optimization/30787, target/19087,
  	tree-optimization/30823, fortran/24783, testsuite/30649,
  	middle-end/30313, c++/29487, target/29487, target/30370,
  	c++/28988, fortran/30278, libstdc++/30586, middle-end/29683,
  	objc/27438, c++/28999, libgfortran/30435, objc/30479,
  	rtl-optimization/29329, target/30173, testsuite/12325, target/24036
    - reenable memory CSE (Alexandre Oliva, #229366, PR rtl-optimization/30643)
  - backported OpenMP fixes from trunk and gcc-4_2-branch
    - PRs middle-end/32362, tree-optimization/31769, c++/32177, c++/30703,
  	middle-end/27416, middle-end/30421, middle-end/30494
    - fix ICE with OpenMP and exceptions (#238399, PR tree-optimization/30558)
  - on ppc{,64} when tuning for power6{,x}, try to put the base
    register as first operand in instructions to improve
    performance (Peter Bergner, #225425, PR middle-end/28690)
  - fix OpenMP handling of Fortran POINTER non-array vars (PR fortran/32550)
  - fix java.utils.logging.Logger (Mark Wielaard, #235371)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-42.EL4
changelog:
  - update from gcc-4_1-branch (-r126008:130387)
    - PRs middle-end/34030, rtl-optimization/28062, rtl-optimization/33822,
  	bootstrap/33418, c++/31941, c++/32113, java/31842, target/33256,
  	tree-optimization/33142, c++/32112, c++/17763, rtl-optimization/32450,
  	target/31331, target/32641, target/32660, tree-optimization/32681,
  	boehm-gc/21940, boehm-gc/21942, target/28307, target/32506,
  	tree-optimization/31966, tree-optimization/32533
    - fix if-conversion to avoid introducing races into threaded code
      (Ian Lance Taylor, #391731)
  - move the gcc4 lib/libexec dirs to /usr/lib{,exec}/*-linux5E/ from
    /usr/lib{,exec}/*-linux/ and also move /usr/lib*/gcj-* to /usr/lib*/gcj4-*
    to avoid upgrade problems to RHEL5.1 and higher (#434847)
  - fix PCH failure if a precompiled header is included more than
    once (#251682, PR pch/13675)
  - allow non-aggregate extern "Java" types in C++ placement new
    (PR c++/34829, Tom Tromey)
  - make sure no errors are reported during tentative parsing of
    pseudo-destructors (PR c++/35138)
  - fix i386 <= 0xNNffffffffLL comparison optimization (Michael Matz,
    PR target/35264)
  - generate DW_TAG_class_type for C++ and Java classes in DWARF3
    debuginfo (#371831, PR debug/7081)
  - don't unnecessarily create a stack frame in leaf functions e.g. on ppc with
    -fpic or -maltivec (Nathan Sidwell, Daniel Jacobowitz, #369541,
    PRs target/28966, target/29248)
  - compile libstdc++-4*.s390.rpm DSO with -march=z900, as RHEL5 only supports
    those CPUs.  libstdc++-devel*.s390.rpm should still work even for older
    CPUs (#298801)
  - add SSE5 support (Michael Meissner, Dwarakanath Rajagopal, Tony Linthicum,
    Uros Bizjak, #252998)
  - java_mark_cni_decl_local fix (Andrew Haley, #414411, PR java/27643)
  - i386 <= 0xNNffffffffLL comparison optimization (PR target/29978)
  - fix Fortran alternate returns with dummy procedure (Paul Thomas, #399531,
    PR fortran/31483)
  - OpenMP fixes (PR c++/33890, c/34506, c++/34513)
  - don't hold a global guard mutex across whole local static initialization
    (Doug Kwan, #426846)
  - fix OpenMP handling of global vars privatized in orphaned constructs
    with #pragma omp parallel inside them
  - -frepo fixes (#411741, PRs c++/34178, c++/34340)
  - fix dynamic_cast<C &> in templates (PR c++/34364)
  - fix error diagnostics involving ABS_EXPR (PR c++/34394)
  - two ctor preevaluation fixes (Olivier Hainque,
    Eric Botcazou, #407281)
  - consider static data members and static member functions in anon ns
    classes to be external for C++ linkage type handling (PR c++/34213)
  - handle OBJ_TYPE_REF in C++ diagnostics (PR c++/34275)
  - backport a bunch of bugfixes from GCC trunk
    - PRs c++/29225, c++/30293, c++/30294, c++/30988, c++/32241,
  	c++/32384, c++/33501, c++/33516, c++/33616, c++/33836,
  	c++/33842, c++/33844, c++/33962, c++/34089,
  	c/34146, debug/33537, middle-end/23848, middle-end/34070,
  	testsuite/33978, tree-optimization/33723
  - fix abs optimization (Richard Guenther, #394271, PR middle-end/34130)
  - fortran lbound/ubound fix (Paul Thomas, #391151, PR fortran/29712)
  - generate proper fortran debuginfo for assumed-size, assumed-shape
    and deferred arrays (#364001)
  - fix ppc64 unwinding of cr2 register if vdso=0
  - only allow __label__ at the start of a block (PR c++/32121)
  - disable -fipa-type-escape by default (PR tree-optimization/33136)
  - VLA handling fix (PR c/33238, PR c/27301)
  - disable TER of pure and const function calls except for __builtin_expect
    (PR tree-optimization/33619)
  - fix parsing of C++ function-like cast in template argument where cast's
    argument uses greater-than operator (PR c++/33744)
  - ignore always_inline attribute on redefined extern inline
    functions (Jan Hubicka, #329671, PR tree-optimization/33763)
  - add support for Fortran int conversion intrinsics (Francois-Xavier
    Coudert, #317051)
  - don't drop DECL_BUILT_IN_CLASS when defining a builtin function
  - print virtual inline backtrace in some diagnostic messages to help
    locate bugs reported with -D_FORTIFY_SOURCE{,=2}
  - add support for artificial, error and warning attributes
  - fix ICE with set_rhs allowing non-gimple (Roger Sayle, #247407,
    PR tree-optimization/32694)
  - fix ICE on Fortran interface-body declaring current subroutine name
    (Paul Thomas, #300851, PR fortran/20880)
  - don't ignore throw specification of function types in type hashing
    (PR c++/33506)
  - fix ICE on __builtin_mem*_chk if it couldn't be folded until
    expand time and at that point it can avoid a call (PR middle-end/33423)
  - handle the upcoming POSIX 'm' *scanf allocation modifier in
    GCC format checking, fix up some details about %as/%aS/%a[
  - backport __builtin_va_arg_pack () and __builtin_va_arg_pack_len () support
  - fix Fortran error recovery with DATA (Jerry DeLisle, #281331,
    PR fortran/27954)
  - make sure __builtin_{,v}{,f}{print,scan}f, __builtin_{,f}printf_unlocked
    and __builtin___{,v}{,f}printf_chk can throw
  - handle __*_chk builtins without __builtin_ in the name as anticipated in
    C++
  - fix libmudflap-devel multilib conflict on ppc/ppc64 and sparc/sparc64
    (#270281)
  - backport __attribute__((__gnu_inline__)) support for C++
  - fix ppc/ppc64 __sync_* builtins with aligned 8 or 16-bit values
  - don't set executable flag on .note.GNU-stack on ppc64/ia64 even
    when trampolines are used - trampolines on those architectures
    don't need executable stack
  - fix ppc32 libgcc.a(tramp.o), so that binaries using trampolines
    aren't forced to use bss PLT
  - fix a fortran charlen sharing bug (#253102)
  - fix ICE with X|~X or X^~X with vectors (PR middle-end/32912)
  - nuke bits/stdc++.gch directories from libstdc++-devel (#253304)
  - fix fortran Tx format handling (Jerry DeLisle, #252152,
    PR libgfortran/32678)
  - don't NRV optimize fields inside anonymous unions (PR c++/32992)
  - fortran debuginfo improvements for constant bound arrays (#248541,
    PR fortran/22244)


author: Jakub Jelinek <jakub@redhat.com> 4.1.2-44.EL4
changelog:
  - update from gcc-4_1-branch
    - PRs c++/27177, c++/33959, c++/34774, c++/34950, c/34993, c++/35007,
  	libfortran/26253, libfortran/34699, libgfortran/34699,
  	libstdc++/20448, libstdc++/20451, middle-end/25445, middle-end/33631,
  	middle-end/33826, middle_end/34150, middle-end/34627, objc++/27232,
  	objc++/34193, rtl-optimization/31944, target/34393,
  	tree-optimization/21655
    - fix fold_widened_comparison (#371901, PR middle-end/35163,
      PR middle-end/37103)
  - fix fastjar on 64-bit architectures (#462397)
  - fix java.net.URI.relativize (#429825, PR libgcj/34369)
  - var-tracking fix (#440345, PR debug/29558)
  - fix libstdc++ time and collate category handling (#441639,
    PR libstdc++/29217)
  - fix x86_64 TLS handling (#445666, PR target/36189)
  - fix C++ OpenMP privatized var [cd]tor cleanup handling (#452972,
    PR c++/36237)
  - fix make_bit_field_ref with large offsets (#453191, PR middle-end/36449)
  - fix -ftree-loop-linear (#434916, PR tree-optimization/30565)
  - fix fortran module loading/storing ICE (#435964, PR fortran/30554)


author: Phil Knirsch <pknirsch@redhat.com> 1.4a12-20
changelog:
  - Added patch from Jesper Skriver supplied by Kaj J. Niemi to support
    draft-ietf-mpls-icmp-02.txt.


author: Joe Orton <jorton@redhat.com> 0.9.4-22
changelog:
  - backport fixes from HEAD:
   * correct implementation of nested mutexes
   * support for POSIX semaphores on LP64 platforms


author: Johnny Hughes <johnny@cenots.org> 0.9.4-24.5.c4.2
changelog:
  - changed the build required for apr-devel to gcc = 3.4.3 as all new
    gcc's since that have had a provides gcc = 3.4.3.  This is how the
    upstream RPMS have not needed to be rebuilt.


author: Dave Anderson <anderson@redhat.com> 3.10-11
changelog:
  - Update to enhance x86 and x86_64 gdb disassembly output so as to
    symbolically display call targets from kernel module text without
    requiring module debuginfo data.
  - Fix hole where an ia64 vmcore could be mistakenly accepted as a
    usable dumpfile on an x86_64 machine, leading eventually to a
    non-related error message.


author: Dave Anderson <anderson@redhat.com> 4.0-2
changelog:
  - Updated source package to crash-4.0.tar.gz
  - Support for multiple PT_LOAD segments in vmcore. 
    FZ #155997
  - Fix for session failure when running on 8 cpu x86_64. 
    BZ #154566


author: Dave Anderson <anderson@redhat.com> 4.0-2
changelog:
  - buildroot/tools changes between RHEL4-U1 and U2 caused a
    compile failure of gdb's ppc-linux-tdep.c file


author: Dave Anderson <anderson@redhat.com> 4.0-2.14
changelog:
  - Initiated support for s390 and s390x.
    BZ #170751
  - Support for diskdump facility's new compressed dumpfile format.
    BZ #171137


author: Johnny Hughes <johnny@centos.org>
changelog:
  - used the spec file from tinysofa.org
  - modifed the spec for centos
  - Upgraded to version drbd-0.7.13 and backed out all
    tinysofa patches
  - redefined auxarches to be mod_arches and added 
    package_arches to define 2 sets of arches (one for
    kernel modules, one for the main package).  This was
    required because some arches (x86_64, s390, s390x,
    etc.) will need to be in both groups.
  - added the ability to build kernel modules for the
    hugemem kernel


author: Thomas Woerner <twoerner@redhat.com> 4.43-1
changelog:
  - new version 4.43 with sasl support
  - new exiscan-acl-4.43-28
  - new config.samples and FAQ-html (added publication date)
  - new BuildRequires for cyrus-sasl-devel openldap-devel openssl-devel
    and PreReq for cyrus-sasl openldap openssl


author: Karel Zak <kzak@redhat.com> 3.2.3-6EL
changelog:
  - update FAQ
  - update spec description
  - fix text in .noproc patch
  - fix segv fault if cpu number exceeding 38 (#137159)


author: Karel Zak <kzak@redhat.com> 3.2.3-8.2
changelog:
  - fix #151376 - RHEL4: slabtop calculation overflow
  - fix #149616 - RHEL4: top has screen errors on large smp machines
  - fix #158175 - sysctl -A returns an error


author: Karel Zak <kzak@redhat.com> 3.2.3-8.3
changelog:
  - fix #158175 - sysctl -A returns an error (fgets() part)
  - fix #161303 - 'top' failed when remove cpus


author: Karel Zak <kzak@redhat.com> 3.2.3-8.4
changelog:
  - fix #168553 - need a 64 bit version of vmstat for PPC
  - fix #184242 - top reporting CPU utilization values less than actual for MT programs
  - fix #186017 - top "Cpu0" line never updates on single processor machine
                  (bugfix added to the 'remcpu' patch)
  - fix #186051 - ps -aucx reports bogus %CPU for mt app
  - fix #168444 - memory usage conflicts with /proc/meminfo


author: Karel Zak <kzak@redhat.com> 3.2.3-8.5
changelog:
  - fix #198140 - ps truncates line to 2048 characters
  - fix #174670 - No more per thread CPU usage with top and newer kernels


author: Tim Waugh <twaugh@redhat.com> 0.6.109-1
changelog:
  - 0.6.109:
    - Fixed IEEE 1284 ID reporting (missing newlines).
    - Fixed socket: URI parsing in cups_import (bug #130362).


author: Tim Waugh <twaugh@redhat.com> 0.6.114-1
changelog:
  - 0.6.114:
    - Allow control codes in text-only printing (bug #124250).
    - More robustness in validating SMB queue information (bug #127348).
    - Include more translations (bug #133721).


author: Tim Waugh <twaugh@redhat.com> 0.6.115-1
changelog:
  - 0.6.115:
    - SMB URI fix for domain\user authentication (bug #132742).
    - Applied patch to fix printconf.pot from Ronny Buchmann (bug #135195).


author: Tim Waugh <twaugh@redhat.com> 0.6.116-1
changelog:
  - 0.6.116:
    - Use the new file chooser dialog (bug #135746).
    - Fixed SNMP autodetection (bug #136294).


author: Tim Waugh <twaugh@redhat.com> 0.6.116.5-1
changelog:
  - 0.6.116.5:
    - Set LC_ALL not LANG when spawning commands whose output we need to
      parse (bug #165954).


author: Jason Baron <jbaron@redhat.com> [2.6.9-39.1]
changelog:
  -avoiding EBDA for early memory map allocation (Robert Hentosh) [172729]
  -stex: add diskdump support (Nobuhiro Tachino) [191934]
  -fix overflow when reading malformed Heartbeat ACK (Neil Horman) [192635] {CVE-2006-1857}
  -fix some raid partitions left out-of-sync on reboot (Kimball Murray) [194241]
  -disable nfs v2 ACL support (Steve Dickson) [178848]
  -azx: support hp laptops w/ ad1981 codecs (John Linville) [180381]
  -fix f_count leak in NLM granted callback code (Jeff Layton) [194367]


author: Jason Baron <jbaron@redhat.com> [2.6.9-35]
changelog:
  -revert: fix hanging serial console
  -Introduce netpoll over bonded interfaces (Thomas Graf)
  -fix USB error handling (Kimball Murray) [189279]
  -qla2xxx update v. 8.01.04-d7 (Mike Christie) [188912]
  -Fix coredump vs exec deadlock (David Howells) [168112]
  -add i2c sensors drivers (Eric Paris) [171507]
  -s390: fix sysrq backtrace oops (Jan Glauber) [185736]
  -s390: fix crypto driver memory overwrite (Jan Glauber)
  -s390: lcs driver fixes (Jan Glauber)
  -add hpet_period finetuning to allow correction of hpet drift (Brian Maly) [169876]
  -bonding updates (Thomas Graf) [180431]
  -Add MSI/MSI-X support to cciss (Tom Coughlan) [179860]
  -add modern_apic() tests (Jim Paradis) [166885]
  -SUNRPC: rpcbind should retry if server's portmapper becomes unavailable (Steve Dickson) [172082]
  -device-mapper mirroring: error on log failure override (Jonathan Brassow)
  -make aic7xxx and aic79xx Drivers Support 16-byte CDBs (Chip Coldwell)
  -fix ipmi driver broken on HP Integrity platform (Brian Maly) [174986]
  -fix mmap wastes too much virtual address space for 32-bit environment (Larry Woodman) [173662]
  -IPMI: Resolve startup race condition (Peter Martuccelli) [189390]
  -ati sb600 support (John Linville) [189844]
  -Emulex lpfc/lpfcdfc drivers re-organizations (Chip Coldwell) [179752]


author: Jason Baron <jbaron@redhat.com> [2.6.9-35.1]
changelog:
  -fix oops when more than 4k of data present in /proc/devices (Neil Horman) [156145]
  -allow for SCI override (Kimball Murray) [180937]
  -diskdump: lpfc support (Nobuhiro Tachino) [180749]
  -device-mapper mirror: Fix clean_bits after shrinking fix (Jonathan Brassow) [186104]
  -fix kabi for acpi_register_gsi() (Anil Keshavamurthy) [170266]
  -fix busy inodes after unmount (Peter Staubach) [173843]
  -audit: add execve() argument logging support (Aristeu S. Rozanski F.) [168285]
  -revert: netpoll over bonded interfaces


author: Jason Baron <jbaron@redhat.com> [2.6.9-35.2]
changelog:
  -fix clock runs too fast on AMD Athlon 64 w/ATI chipset (Brian Maly) [173236]
  -s390: add hypfs support (Jan Glauber) [180564]
  -s390: qeth fixes (Jan Glauber) [190428]
  -fix RSA driver (Konrad Rzeszutek) [182270]
  -s390: qeth system crash during transmission (Jan Glauber) [190641]
  -ia64: fix ia64_mv kabi breakage (Prarit Bhargava)
  -export acpi_prt (Kimball Murray) [189793]


author: Jason Baron <jbaron@redhat.com> [2.6.9-35.3]
changelog:
  -Introduce netpoll over bonded interfaces (Thomas Graf)
  -x86_64: implement lapic-status just for the installer (Prarit Bhargava) [184583]
  -sky2: update to version 1.1 (John Linville) [179560]
  -SCSI whitelist update (Doug Ledford) [161333]
  -st: add check_tape() call for correct status return for open tape files (Doug Ledford) [168234]
  -x86_64: fix vsyscall misalignment (Peter Martuccelli) [181780]


author: Jason Baron <jbaron@redhat.com> [2.6.9-35.4 2.6.9-36]
changelog:
  -Recognize boot CPU APIC id properly (Jim Paradis) [176612 174627]
  -s3390: update add channel path measurement data support (Jan Glauber) [180410]
  -Infiniband: merge OFED 1.0-rc4-pre (Doug Ledford)
  -revert: netpoll over bonded interfaces


author: Jason Baron <jbaron@redhat.com> [2.6.9-36.1]
changelog:
  -i386: complete fix for APIC tests (Jim Paradis) [166885]
  -add missing unlock_kernel in nfs_mkdir codepath (Jeff Layton) [191269]
  -fix smbfs chroot issue (Peter Staubach) [189435] {CVE-2006-1864}
  -add adp94xx driver (Konrad Rzeszutek) [191330]
  -update 3ware 9xxx SATA RAID driver (Chip Coldwell)
  -sctp: fix fixes for various vulnerabilities (Neil Horman) [191201 191202 191258] {CVE-2006-2271 CVE-2006-2272 CVE-2006-2274}
  -device-mapper mirroring: Fix failed write handling (Jonathan Brassow) [191723]
  -fix local crash by dio/mmap sg/st driver (Doug Ledford) [168791]
  -remove incorrect choose_new_parent BUG() call (Jason Baron) [187841]
  -cciss: ia64: disable MSI/MSI-X (Tom Coughlan) [179860]
  -fix bad error handling in several compat_nfs_* (Jeff Layton) [191776]
  -fix bridge poisoning (Thomas Graf) [171383] {CVE-2005-3272}
  -netfilter/sctp: fix lockup in sctp_new (Thomas Graf) [190460] {CVE-2006-1527}
  -ia64: replace acpi_register_gsi() panic call with warning message (Prarit Bhargava) [191847]
  -update lpfcdfc ioctl driver to version 2.0.15 (Chip Coldwell) [181475]


author: Jason Baron <jbaron@redhat.com> [2.6.9-37]
changelog:
  -Introduce netpoll over bonded interfaces (Thomas Graf) [174184 126164 190162 146164]
  -fix MCFG table parsing (Konrad Rzeszutek) [191039 164429 192408]
  -x86_64: cleanup page tracking (Kimball Murray) [179696]
  -fix acpi table already exists (Geoff Gustafson) [192303]
  -revert: fix NFS cache consistency when a file is mmap'ed


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-7_EL3
changelog:
  - As pointed out by notting , getting chkconfig runlevels as in previous
  - fix would fail in non-english locales . Using 'chkconfig --level=$level named'
  - instead in triggerun .


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-8_EL
changelog:
  - fix bug 152334: upgrade from RHEL-3 to RHEL-4 will fail 
  - fix bug 144467: upgrade from RHEL-3 to RHEL-4 will fail


author: Jason Vas Dias <jvdias@redhat.com> - 20:9.2.4-12_EL
changelog:
  - Fix bug 170337: backport edns-udp-size feature from 9.3
  - fix bug 169416: allow user '-c' option use in initscript
  - fix bug 167682: remove group write access to /var/named/chroot/{.,*}


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.4.el3
changelog:
  - added pathes for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942,325761,392149


author: Caolan McNamara <caolanm@redhat.com> - 1.1.5-2
changelog:
  - bump to 1.1.5
  - drop patches-vclplug-i18n-gtk-im-keyrelease-fix.diff
  - drop patches-OOO_1_1-vfs-uri-filter.diff
  - drop patches-OOO_1_1-padmin-ui-lang.diff
  - drop gnomevfs-26-auth.patch
  - drop patches-OOO_1_1-vfs-2.6-auth.diff
  - drop patches-vclplug-gtk-menubar-background.diff
  - drop patches-OOO_1_1-utf8-msfonts-fixup.diff
  - drop patches-vclplug-i18n-indic-bug-fixes.diff
  - drop patches-OOO_1_1-bengali-fallback.diff
  - drop patches-vclplug-kde-font-resolving.diff
  - drop patches-vclplug-kde-startup-notification.diff
  - drop patches-vclplug-rh140041.madness.for.multiopen.diff
  - drop patches-OOO_1_1-indic-resources-fix.diff
  - drop patches-OOO_1_1-indic-script-recognition.diff
  - drop patches-OOO_1_1-portuguese-tools-options-fix.diff
  - drop patches-OOO_1_1-sot-overflow.diff
  - drop patches-vclplug-use-font-language-coverage.diff
  - drop patches-OOO_1_1-sw-menu-syntax-fix.diff
  - drop svx-default-font-tracks-LANGUAGE_SYSTEM.diff
  - drop svtools-default-CTL-on.diff
  - drop patches-OOO_1_1-sw-non-english-autopilot-fix.diff
  - drop patches-OOO_1_1-sw-template-english-fallback.diff
  - drop patches-OOO_1_1-sw-online-layout-crash-fix.diff
  - drop fixup-typedetection-mimetypes
  - drop patches-OOO_1_1-rh109628-symbol-pdf-fix.diff
  - drop patches-OOO_1_1-rh110934-image-crash-fix.diff
  - drop patches-OOO_1_1_2-rh102287.curl.diff
  - drop patches-OOO_1_1_2-rh102287.icu.diff
  - drop patches-OOO_1_1_2-rh102287.python.diff
  - drop patches-OOO_1_1_2-rh102287.pyuno.diff
  - drop patches-OOO_1_1_2-rh102287.solenv.diff
  - drop patches-OOO_1_1_2-rh102287.stlport.diff
  - drop patches-OOO_1_1-officecfg.noreport.diff
  - add patches-icu.fpic.diff


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Karel Zak <kzak@redhat.com> 1.6.7p5-30.1.3
changelog:
  - fix #154511 - sudo does not use limits.conf
  - fix #144893 - sudo-1.6.7p5-1 does not work with pam_tally correctly
  - fix #163044 - sudo logging truncates username to 8 characters
  - fix debuginfo


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.9]
changelog:
  -atkbd: cancel delayed work before freeing its structure (Jiri Pirko) [461239 461240]
  -atkbd: delay executing of led switching request (Jiri Pirko) [461239 461240]
  -kernel: fix copy_user on x86_64 for read of < 8 bytes (Larry Woodman) [471015 453053]
  -fix diskdump failure when numa is on (Takao Indoh) [470034 457736]
  -ipv4: fix byte value boundary check in ip_getsockopt (Jiri Pirko) [470196 462741]
  -fix linux kernel local filesystem dos (Eugene Teo) [457863 457864] {CVE-2008-3275}
  -netpoll: play nicely with bonding (Andy Gospodarek) [471391 248374]
  -sched: fix isolcpus vs balance bug (Peter Zijlstra) [471222 461156]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.10]
changelog:
  -fix cpuspeed not working on intel based servers (Tony Camuso) [458156 440267]
  -fix regression in cpuspeed (Prarit Bhargava) [458156 440267]
  -cpuspeed: fix transition of p-states (Tony Camuso) [458156 440267]
  -net: fix unix socket panic (Neil Horman) [470433 470434] {CVE-2008-5029}
  -hfsplus: fix buffer overflow with a corrupted image (Anton Arapov) [469635 469636] {CVE-2008-4933}
  -hfsplus: check read_mapping_page return value (Anton Arapov) [469642 469643] {CVE-2008-4934}
  -hfs: fix namelength memory corruption (Anton Arapov) [470770 470771] {CVE-2008-5025}
  -add range_is_allowed check to mmap_mem (Eugene Teo) [460862 460859]
  -fix add range_is_allowed check regression (Vitaly Mayatskikh) [460862 460859]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.11]
changelog:
  -net: fix unix socket panic patch regression (Neil Horman) [470433 470434 473267 473268] {CVE-2008-5029 CVE-2008-5300}
  -net: fix race between poll_napi and net_rx_action (Andy Gospodarek) [475970 463815]
  -kernel: watchdog: fix buffer_underflow bug (Eugene Teo) [475738 475739]
  -xen: fix lost packets when live migrating (Don Dutile) [469891 460874]
  -xen: remove /proc/xen from fv and bare metal kernels (Don Dutile) [476534 460984]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.14]
changelog:
  -net: fix race between poll_napi and net_rx_action (Andy Gospodarek) [475970 463815]
  -netpoll: fix race condition between net_rx_action and poll_napi that can result in garbage device (Neil Horman) [480741 474479]
  -net: fix double list_del in net_rx_action (Neil Horman) [479681 477202]
  -fs: fix "it already cleared for block"  errors (Josef Bacik) [476533 460179]
  -iptables: fix oops on module unload (Neil Horman) [477147 456664]
  -pidhashing: fix alloc_pidmap (Jiri Pirko) [479182 461246]
  -nmi watchdog: move check_nmi_watchdog to later in boot time (Aristeu Rozanski) [479184 458859]
  -sctp: memory overflow when fwd tsn chunk is received with bad stream id (Eugene Teo) [478959 478960] {CVE-2009-0065}
  -kernel: enforce a minimum sg_io timeout (Eugene Teo) [475403 475404]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.15]
changelog:
  -fix a buffer overflow vulnerability with del_rbu driver (Don Howard) [482939 482940] {CVE-2009-0322}
  -security: introduce missing kfree (Jiri Pirko) [480595 480596] {CVE-2009-0031}
  -xen: add spurious fault handling to rhel4 xen (Chris Lalancette) [483748 465914]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-78.0.16]
changelog:
  -revert: nmi watchdog: move check_nmi_watchdog to later in boot time (Aristeu Rozanski) [479184 458859]


author: Akemi Yagi <toracat@centos.org> [2.6.9-78.0.17.plus.c4]
changelog:
  - based on centos 2.6.9-78.0.17 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - added in patch 19000 for better drbd md support
  - enabled HDLC support [centos bug #3019]


author: Nalin Dahyabhai <nalin@redhat.com> - 1.2.6-8
changelog:
  - incorporate patch from Werner to fix use of stack variable after it goes
    out of scope (CVE-2006-6235, #218480)


author: Jeremy Katz <katzj@redhat.com> - 10.1.1.14-1
changelog:
  - Fix multiple DNS servers being specified on the command line.  Patch 
    from mattdm (#84409)
  - Fix dhcpclass specification on the command-line (#144066)
  - Fix formatting of new fcp disks (#144199)
  - Support parsing pxelinux IPAPPEND (bnocera, #134054)
  - Reset package selection to defaults when selected (#142415)
  - More tree sanity checking instead of traceback'ing (#143930)
  - Fix some partitioning corner cases (clumens, #137119, #145145)
  - Fix iSeries upgrades (pnasrat, #146915)
  - Fix hostname display (clumens, #132826, #149116)
  - Fix mtab writing in rescue mode (#149091)
  - Use ethtool settings in more places (pnasrat, #145422)


author: Frank Ch. Eigler <fche@redhat.com> - 1.1-2
changelog:
  - rhbz561889 = CVE-2010-0411: __get_argv overflows
  - rhbz512202: update tcp/mib tapsets
  - rhbz560890: stap -L/-l argument order preservation
  - rhbz563114: syscall.* regression w/ sys_pipe32 disappearanced
  - rhbz559643: fix testsuite bugs in labels.exp causing dejagnu hangs
  - rhbz564445: fix sdt.h probes with prelinked libraries
  - rhbz564443: harden unprivileged mode
  - pr11286: fix stap-client --server=FOO
  - rhbz556565: CVE-2009-4273 + CVE-2010-0412: more stap-server fixes
  - pr11296: fix systemtap-testsuite sdt.h tests


author: Akira Imamura <aimamura@redhat.com> 1.2.8-2
changelog:
  Update source package to diskdumputils-1.2.8.tar.gz:
    - Update README file re: the configuration of a whole disk device
      as the DEVICE parameter in /etc/sysconfig/diskdump to indicate
      that it can be done only on RHEL3.
    - Update README file to specify that Partial Dump and Compressed
      Dump features cannot be used together on ppc64 machines; they
      can only be used separately.


author: Linda Wang <lwang@redhat.com> 1.2.34-2
changelog:
  Update source package to diskdumputils-1.2.34.tar.gz:
    - Fixed diskdump determination of SYSFSROOT value. BZ#171988
    - Lack of diskdump on swap partition explanation in doc. BZ#172432
    - Introduced a new diskdump-success script to /var/crash/scripts 
      directory. BZ#172867
    - Logical volumes cannot be used for diskdump. BZ#178814
    - Diskdump cciss support required. BZ#189791


author: David Anderson <anderson@redhat.com> 1.2.39-1
changelog:
  Update source package to diskdumputils-1.2.39.tar.gz:
    - Fix for off-by-one bug when creating a compressed vmcore.


author: Akira Imamura <aimamura@redhat.com> 1.3.6-1
changelog:
  Update source package to diskdumputils-1.3.6.tar.gz:
    - Fix for SYSFSROOT determination uses "grep -m 1" on /proc/mounts
      to avoid the double setting of that variable.  BZ #171988  
    - Documentation update to README file to further explain the
      proper usage of a swap partition.  BZ #172432
    - Introduced a new diskdump-success script to /var/crash/scripts
      directory.  BZ #172867
    - Documentation update to README file to indicate that logical
      volumes may not be specified as a dump partition.  BZ #178814
    - Support for handling kernel's capability of sequencing through
      multiple devices when one (or more) of them fail.  BZ #181536


author: Akira Imamura <aimamura@redhat.com> 1.3.14-1
changelog:
  Update source package to diskdumputils-1.3.14.tar.gz:
    - Fix to ensure that the largest dumpfile is copied to 
      vmcore-incomplete when multiple (incomplete) dumpfiles 
      are created.  BZ #196492
    - Fix for when incomplete dumps were created in both a swap partition
      and in a dump partition, and the largest one is in the dump
      partition (non-swap), both dumpfiles get mistakenly removed
      and no vmcore-incomplete is created.  BZ #196048
    - Fix for panic message not being copied to the log file when
      panic occurrd in a hugemem kernel.  BZ #195574


author: Akira Imamura <aimamura@redhat.com> 1.3.15-1
changelog:
  Update source package to diskdumputils-1.3.15.tar.gz:
    - Fix for /sbin/diskdumpmsg failure when the system boots after a 
      kernel panic.  BZ #197687


author: Akira Imamura <aimamura@redhat.com> 1.3.25-1
changelog:
  Update source package to diskdumputils-1.3.25.tar.gz:
    - New feature: selectable dump filtering with new dumpfilter command,
      for RHEL4 kernels versions 2.6.9-42.31.EL or later. 
    - Resolves: rhbz#172826


author: Akira Imamura <aimamura@redhat.com> 1.4.0-1
changelog:
  Update source package to diskdumputils-1.4.0.tar.gz:
    - New feature: allow use of diskdump when /usr is not a locally
      mounted filesystem.
    - Resolves: rhbz#215015 
    - Fix for diskdumpmsg when used on abnormally large systems causing
      a Python string read error.
    - Resolves: rhbz#227365 
    - Do not set an interactive login for the netdump user during installation. 
    - Resolves: rhbz#230137 
      README file update for proper service restart semantics.
    - Resolves: rhbz#233315 
    - Add a sync before diskdumpfmt operation to prevent "stall" when formatting
      a diskdump device.
    - Resolves: rhbz#235719 
    - Change savecore to use stat buf.f_bfree instead of buf.f_bavail for 
      determining amount of diskspace available, preventing "no space for dump 
      image" errors. 
    - Resolves: rhbz#239406


author: Dave Anderson <anderson@redhat.com> 1.4.1-1
changelog:
  Update source package to diskdumputils-1.4.1.tar.gz:
    - Fix diskdumpmsg file-spelling error in Makefile's install stanza.
    - Resolves: rhbz#215015


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-1
changelog:
  - update from SVN (-r107806:112661, #186949)
    - GCC 3.4.6 release
    - PRs ada/13408, bootstrap/16787, c++/16829, c++/18491, c++/19397,
  	c++/19764, c++/20552, c++/21383, c++/21583, c++/22352, c++/22464,
  	c++/22618, c++/23307, c++/24103, c++/24278, c++/24915, c++/25369,
  	c++/25854, c++/26070, c++/26291, fortran/25586, gcov/14944,
  	libgcj/25840, libobjc/14382, middle-end/24901, middle-end/25022,
  	other/13873, other/13906, preprocessor/24202, rtl-optimization/23098,
  	rtl-optimization/23837, rtl-optimization/24376, target/18489,
  	target/21616, target/25213, target/25258, target/25572, target/25613,
  	target/26109, target/26775, target/26776, target/36276,
  	testsuite/20772, testsuite/25214, testsuite/25728
  - use %{_tmppath} in BuildRoot (#187864)
  - don't define _REENTRANT in gthr*.h (#176278, #178416, PR libstdc++/11953)
  - define _REENTRANT if -pthread and _POSIX_SOURCE if -posix on s390{,x}
    and ia64
  - improve dir/../-stripping code to support /usr/lib64 and /usr/lib in
    separate AFS mountpoints (Alexandre Oliva, #137200)
  - fix ICE on invalid inline asm (Roger Sayle, #171874, PR inline-asm/8788)
  - avoid modifying part of a vector before its old value is used
    (Alexandre Oliva, #172117)
  - fix memory leak in exception handling (Alexandre Oliva, #172876)
  - fix ICE in initializers of automatic aggregates containing vector
    types (Alexandre Oliva, #178062)
  - fix unwinding through signal frames (#183646, PR other/26208, glibc BZ#300)
  - use TLS for EH globals (Benjamin Kosnik, Ulrich Drepper, #185774,
    PR libstdc++/23591)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-2
changelog:
  - package SYSCALLS.c.X for protoize (#190047, IT#91682)
  - fix up dir/../ stripping patch
  - __thread handling fixes (Richard Henderson, Ulrich Weigand, #190716,
    IT#92853, PR target/21412)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-3
changelog:
  - -fvar-tracking fixes needed for SystemTap (BZ#2438)
  - add workaround for buggy programs that link in their own unwinder
    and reexport it (#192814)
  - make all globals in libgcc_eh.a hidden, so that newly (incorrectly)
    linked programs can't reexport the unwinder
  - support -fno-frame-base-loclist option to prevent use of
    DWARF2 location lists in DW_AT_frame_base value (#191041)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-4
changelog:
  - fix directory traversal bug in fastjar (Richard Guenther, #198912,
    CVE-2006-3619)
  - fix .debug_line for inline function parameter blocks
    (Alexandre Oliva, #214353)
  - add __cxa_get_exception_ptr@@CXXABI_1.3.1 to libstdc++.so (#210488)
  - fix hang in vt_find_locations with -O{2,3} -g
    (Alexandre Oliva, #216695, #218377)
  - allow rebuilding gcc src.rpm without java (John Reiser, #207303)
  - fix if-conversion ICE (Eric Botcazou, #207277)
  - fix template instantiation ICE (Alexandre Oliva, #205919)
  - add protoize.1 and unprotoize.1 man pages (#188914)


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-8
changelog:
  - add gnu.java.util.ZoneInfo class, use tzdata files for libgcj
    timezone stuff instead of builtin simple and outdated rules (#227884)
  - add missing @GCC_4.0.0 and @GCC_4.2.0 libgcc symbols (except for the
    long double ones on ppc32/s390{,x} which can't be supported in RHEL4)


author: Jakub Jelinek <jakub@redhat.com> 3.4.3-22
changelog:
  - fix PR c++/19916 (Mark Mitchell, #148793)
  - fixed C++ redeclaration handling (Alexandre Oliva, #149098)


author: Jakub Jelinek <jakub@redhat.com> 3.4.3-23
changelog:
  - update from gcc-3_4-branch
    - PRs bootstrap/20633, c++/18464, c++/18644, c++/19034,
  	c++/19311, c++/19312, c++/19991, c++/20142, c++/20147, c++/20147,
  	c++/20240, c++/20333, c++/20679, c++/20995, c++/21025, c/11459,
  	c/18502, c/20740, c/21213, libstdc++/21035, libstdc++/21131,
  	middle-end/19225, middle-end/20364, rtl-optimization/19683,
  	target/14981, target/15491, target/17822, target/17824, target/18251,
  	target/18551, target/19819, target/20277, target/20288, target/20611,
  	target/20670, target/21098
    - make libgcov symbols hidden (#162930, IT#72501, PR middle-end/19985)
  - add Req/BuildReq for glib2 and libart_lgpl (#150923)
  - fix ada build with make -jN N>1


author: Jakub Jelinek <jakub@redhat.com> 3.4.3-25
changelog:
  - update from gcc-3_4-branch
    - PRs c++/21427, debug/16676, libffi/21285, target/16925, target/19051,
  	target/21416
  - don't enable -fvar-tracking on ia64 for -O0 or -g0 by default
  - fix warnings in <limits> when compiling with GCC 4 (Mark Mitchell, #157174)
  - fix warnings in <locale_facets.tcc> (#157190, PR libstdc++/16678)
  - fix output of i?86 movb $cst, %ah etc. instructions (#154116)
  - fix a regression introduced by PR target/14981 backport
  - fix VEC_SELECT handling in the combiner (PR rtl-optimization/21239)
  - fix i?86 address canonicalization (PR target/21297)


author: Jakub Jelinek <jakub@redhat.com> 3.4.4-1
changelog:
  - update from gcc-3_4-branch
    - GCC 3.4.4 release
      - PRs middle-end/21709, c++/21768
    - fix reg-stack ICE (#158407, PR target/21716)
    - fix ppc64 libgcj (Andrew Haley, #154684, #142611)
  - add provides, so that packages requiring gcc = 3.4.3 or
    libstdc++-devel = 3.4.3 etc. can be satisfied
  - use 3.4.3 directories and make 3.4.4 just a symlink,
    so that other packages using the 3.4.3 directories are satisfied
    and we don't try to replace a directory with a symlink (which rpm doesn't
    like)


author: Jakub Jelinek <jakub@redhat.com> 3.4.4-2
changelog:
  - update from gcc-3_4-branch
    - PRs c++/10611, c++/19608, c++/19884, c++/20563, c++/20789, c++/21336,
  	c++/21853, c++/21903, c++/21987, c/22308, libstdc++/21286,
  	rtl-optimization/22167, target/19933, target/20301, target/21888,
  	target/21889, target/22083
    - fix -march=i386 -masm=intel -fpic (#162585)
  - on ppc64 and s390x, change the obsoletes for gcc-gnat and libgnat
    to < 3.4.3
  - fix visibility handling of static class members
    (Mark Mitchell, #159197, PR c++/18925)
  - fix some -fvar-tracking bugs that were causing bogus DW_OP_piece ops
  - fix -fvar-tracking on big-endian targets (Josef Zlomek,
    PR middle-end/14084)
  - avoid recursive use of varasm hash tables (#157308)
  - on ppc accept CTR-to-CTR copy in mov[sd]f_hardfloat patterns
    (Dale Johannesen, Janis Johnson, #160815, IT#74566,
     PRs target/20191, target/22081)
  - remove limit of 16 nested GCC visibility pragmas (PR middle-end/20303)
  - fix stringbuf in_avail() (Benjamin Kosnik, #159408, IT#72781)


author: Jakub Jelinek <jakub@redhat.com> 3.4.4-3
changelog:
  - update from SVN (-r102224:107263)
    - PRs bootstrap/24688, c++/13377, c++/16002, c++/17413, c++/17609,
  	c++/17618, c++/18124, c++/18155, c++/18177, c++/18368, c++/18378,
  	c++/18445, c++/18466, c++/18512, c++/18545, c++/18738, c++/18803,
  	c++/19004, c++/19208, c++/19253, c++/20153, c++/22153, c++/22172,
  	c++/22233, c++/22508, c++/22545, c++/23586, c++/23624, c++/23639,
  	c++/23797, c++/23965, c++/24052, c++/24580, c/17188, c/20187,
  	c/20239, c/21873, c/21899, c/22061, c/22458, c/22589, c/24101,
  	debug/24267, libstdc++/23528, libstdc++/23550, middle-end/16719,
  	middle-end/18421, middle-end/21964, middle-end/24470, pch/14400,
  	pch/14940, preprocessor/15220, rtl-opt/22619, rtl-optimization/17810,
  	rtl-optimization/17860, rtl-optimization/23241, target/15342,
  	target/18582, target/18583, target/19300, target/19340,
  	target/20621, target/20673, target/21723, target/21841, target/23070,
  	target/23404, target/23539, target/23644, target/23985, target/24102,
  	target/24315, target/24465, target/24718
    - don't allow pseudo registers to live in call used registers accross
      calls that may throw (PR rtl-optimization/23478, #166237)
  - reword diagnostics about unresolved overloaded type
    (Alexandre Oliva, #170294, IT#70101)
  - fix x86_64 compiler hang when passing object with 3+ base classes by value
    (Zak Kipling, PR target/18300, #170293, IT#76454)
  - weakref attribute support, use it in <bits/gthr.h> various C++ headers
    are using (Alexandre Oliva, #170299, IT#73356)
  - backport some dwarf2 generator fixes and improvements (Alexandre Oliva,
    - fix final overrider diagnostics (PR c++/21983)
  - define dummy symbols LINK_ReallyLinkKnownClass and LINK_ReallyLinkClass
    in jnilink (#170559)


author: Andreas Schwab <schwab@redhat.com> - 2.3.4-2.51
changelog:
  - Remove const attribute from sysconf (#490822)
  - Remove commas from output of getent networks (#484079)
  - Fix error checking in getnameinfo (#501595)
  - Add timestamps to nscd logs (#527554)


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-93]
changelog:
  -kernel: failure to revert address limit override in oops error path (Dave Anderson) [659569] {CVE-2010-4258}
  -nfsv4: fix oops in nfs4_kill_super (Jeff Layton) [660448]
  -net: filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651701] {CVE-2010-4158}
  -net: limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651924] {CVE-2010-3859}
  -bluetooth: fix missing null check (Jarod Wilson) [655663] {CVE-2010-4242}
  -ipc: initialize structure memory to zero for compat functions (Xiaotian Feng) [648811] {CVE-2010-4073}
  -ipc: shm: fix information leak to userland (Xiaotian Feng) [648817] {CVE-2010-4072}
  -netfront: default to copying instead of flipping (Laszlo Ersek) [653505]
  -net: packet: fix information leak to userland (Jiri Pirko) [649896] {CVE-2010-3876}
  -scsi: gdth: integer overflow in ioc_general (Frantisek Hrbata) [651174] {CVE-2010-4157}
  -sys_semctl: semctl fix kernel stack leakage (Xiaotian Feng) [648794] {CVE-2010-4083}
  -alsa: rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648807] {CVE-2010-4080}
  -fs: only return EIO once on msync/fsync after IO failure (Rik van Riel) [645633]
  -xen: virtio_net: add get_drvinfo() to virtio_net (Laszlo Ersek) [647196]
  -xen: netfront: add get_drvinfo() to netfront (Laszlo Ersek) [647187]
  -kernel: fix possible integer overflow in mm/fremap.c (Larry Woodman) [637045]


author: Akira Imamura <aimamura@redhat.com> 1.1.9-1
changelog:
  Updated source package to diskdumputils-1.1.9.tar.gz:
    - Boot-time "Device not specified in /etc/sysconfig/diskdump"
      message should not be displayed when swapsavecore is executed
      by rc.sysinit.  BZ #165843


author: Akira Imamura <aimamura@redhat.com> 1.2.1-2
changelog:
  Updated source package to diskdumputils-1.2.1.tar.gz:
    - If savecore fails, does not re-format the dump partition,
      thereby preserving its contents.  BZ #160545
    - When /etc/sysconfig/diskdump is configured with multiple devices
      in its DEVICE parameter, use them in the left-to-right order
      specified.  BZ #168350
    - Salvage kernel messages that were not written to a log file 
      from the crash dump, and append them to /var/log/messages;
      this feature is enabled by default, but can be disabled by
      setting SALVAGEMESSAGE=no in /etc/sysconfig/diskdump.
      BZ #155992
    - Implements option to create a compressed dumpfile, using a
      new dumpfile format, by adding "options diskdump compress=1" 
      to /etc/modprobe.conf.  BZ #168641
    - Allow the deferral of the post-crash savecore operation
      by setting SKIPSAVECORE=yes in /etc/sysconfig/diskdump,
      and later running "service diskdump enabledevice".
      BZ #168640
    - When running "service diskdump initialformat", the user must
      confirm that each DEVICE specified in /etc/sysconfig/diskdump
      should be formatted.  BZ #168639
    - When running "service diskdump initialformat", and a swap
      partition is configured as a dump device, the swap partition
      should not be formatted.  BZ #170430


author: Akira Imamura <aimamura@redhat.com> 1.2.7-2
changelog:
  Update source package to diskdumputils-1.2.7.tar.gz:
    - Fixed /usr/sbin/diskdumpmsg command.
    - Updated documentation in README and /etc/sysconfig/diskdump.
    - Additional error message in /usr/sbin/savecore when it fails.
    - Deleted debug message from /usr/sbin/diskdumpctl.


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.3
changelog:
  - Add explicit casting to CAN-2004-0888 (former CESA-2004-007) patch
    to let it work on 64bit machines.
  - Modified CAN-2005-0064 patch to the official one.


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.6
changelog:
  - apply more complete fix for CVE-2005-3193 (#175110) suggested by
    security response team, taken from xpdf


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.1-9
changelog:
  - Add a notice to the about dialog denoting this is a pango enabled build.
  - Tweak the user agent denoting this is a pango enabled build.


author: Johnny Hughes <johnny@cenots.org> - 1.5.0.2-2.1.c4.centos
changelog:
  - Rolled in centos patches from Feb 5 2006
  - Removed pango / user agent pango dialog as pango is disabled for CentOS.


author: Jindrich Novy <jnovy@redhat.com> 0.4b39-3.EL4.1
changelog:
  - 0.4b39
  - Updated the EA patch with support for in-inode EAs, big
    inodes and fixes 'error in EA block' displayed for
    every single inode (#149299) - patch from Stelian Pop
  - Added patch to fix negative size problem with -s/-d
    options (#147710) - from Stelian Pop


author: Jindrich Novy <jnovy@redhat.com> 0.4b39-3.EL4.2
changelog:
  - apply patch to fix restoration of ACLs and endianess problems
    (patch ported from dump-0.4b40, #159617)


author: Elliot Lee <sopwith@redhat.com> 3.1-15
changelog:
  - Remove build dependency on perl, since perl BuildRequires: dos2unix,
    and there's no good reason not to just use sed here.


author: Mike A. Harris <mharris@redhat.com> 3.1-20
changelog:
  - Added dos2unix-3.1-manpage-update-57507.patch to fix manpage (#57507)
  - Added dos2unix-3.1-preserve-file-modes.patch to properly preserve file
    permissions (#91331,55183,112710,132145)


author: Miloslav Trmac <mitr@redhat.com> - 3.1-21
changelog:
  - Don't just delete the original file when destination and current directory
    are on different filesystems (#65548, #123069, patch by James Antill)
  - Fix return type of StripDelimiter in dos2unix-3.1-safeconv.patch (#136148)


author: Kai Engert <kengert@redhat.com> 1.0.9-3.el4
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 199088, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
changelog:
  - added pathes for Mozilla bugs 267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942,325761,392149


author: Martin Stransky <stransky@redhat.com> - 1.0.9-9.el4
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Added a patch with backported fixes from 1.8.1.12


author: Johnny Hughes <johnny@centos.org> 1.0.9-9.el4.centos
changelog:
  - Added CACert.org patch as trusted CA (add_CAcert.org_cert.patch)
  - Replaced mozilla-redhat-default-bookmarks.html with
    mozilla-centos-default-bookmarks.html
  - Replaced mozilla-redhat-default-prefs.js with mozilla-centos-default-prefs.js


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.18
changelog:
  - support service and list match in pam_succeed_if (#173926)
  - support user defined list separator in pam_access (#201008)
  - add pam_keyinit module for session keyring initialization (#183218)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.19
changelog:
  - make pam_unix consistent with useradd that it allows '.' and '_'
    on beginning of user name (#212136)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.22
changelog:
  - add pam_tally2 module (#228044)
  - unset XAUTHORITY when appropriate (#228980)
  - CVE-2007-1716 always decrement use count (#230823)
  - reset priority only when specified in limits.conf (#232407)
  - CVE-2007-3102 prevent audit log injection through user name (#247797)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.25
changelog:
  - allow pam_time to work without tty set (#248588)
  - fix pam_lastlog crash on x86_64 (#250421)
  - pam_access: match LOCAL when no tty is set (#319641)
  - define PAM_AUTHTOK_RECOVERY_ERR (#371391)
  - add support for SHA256 and SHA512 password hashes through
    glibc (#427394)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.26
changelog:
  - raise the limits on pammodutil getgr functions (#447842)
  - add serialize option to pam_tally2 (#446025)
  - pam_limits: comment that rss limit is ignored (#459628)
  - pam_loginuid: fix failure with large uids (#460241)
  - pam_rhosts_auth: fix test for ip address (#461981)
  - allow root to update passwords through unix_chkpwd
    helper update functionality (#469857)


author: Jeremy Katz <katzj@redhat.com> - 0.44-1
changelog:
  - don't include /dev/ in the console name (#134336)
  - fix installing boot loader to partition with RAID1 /boot (#127557)


author: Johnny Hughes <johnny@centos.org> 4.4.56-4.1.centos4
changelog:
  - Added the patch centos4-releasever.patch to make the $releasever used
    by up2date 4 and not 3 when doing repomd.
  - Changed the default /etc/sysconfig/rhn/sources file so that it will
    use the /etc/yum.repo.d/*.repo files by default.  This allows us
    to use the mirrorlist information in yum by default.


author: <jmoyer@redhat.com> - 1:4.1.3-199
changelog:
  - Resolves: reduce the load incurred on ldap servers (bz #210182, bz #210185)
  - Resolves: determine the base dn for ldap queries (bz #196111)
  - Resolves: documentation does not describe flags format (bz #209635)


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-199.1
changelog:
  - Resolves: autofs submounts fail when using --timeout=0 (bz #213503)
  - Related: fix logic error that let a mount failure go unnoticed (bz #218751)


author: Jakub Jelinek <jakub@redhat.com> 4.0.8-3
changelog:
  - if not -n, print current buffer after N command on the last line
    unless POSIXLY_CORRECT (#112952)
  - adjust XFAIL_TESTS for the improved glibc regex implementation
    (#112642)


author: Petr Machata <pmachata@redhat.com> - 4.1.2-5.EL4
changelog:
  - Introduce naming scheme consistent with other packages.
  - #185374:
    - Follow symlinks before rename (avoid symlink overwrite)
    - Add -c flag for copy instead of rename (avoid ownership change)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-17.RHEL4
changelog:
  - fix bug 170088: broken h2ph fixed with h2ph from 5.8.7
  - fix bug 171111 / upstream bug 37535: IOCPARM_LEN should be _IOC_SIZE
  - fix bug 172236: make h2ph pick up gcc built-in include directory


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-17.RHEL4
changelog:
  - fix bug 164772: panic (crash) on invalid UTF-8 in Encode.xs
  - fix bug 172327 / upstream bug 37056: backport upstream patch 25084:
    prevent realloc recursion on nss get* ERANGE errno


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.5-18.RHEL4
changelog:
  - fix bug 174683 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Than Ngo <than@redhat.com> - 3.3.1-12.el4
changelog:
  - Resolves: #490727, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for badpage10910.pdf


author: Than Ngo <than@redhat.com> - 3.3.1-13.el4
changelog:
  - Resolves: #490727, CVE-2009-0146 CVE-2009-0147 CVE-2009-0166
    revised patch that adds a fix for some potential problems,
    latest upstream patch


author: Than Ngo <than@redhat.com> - 3.3.1-18.1
changelog:
  - Resolves: #639833
      CVE-2010-3702, uninitialized Gfx::parser pointer dereference
      CVE-2010-3704, array indexing error in FoFiType1::parse()


author: Radek Vokal <rvokal@redhat.com> EL4.2
changelog:
  - tracepath6 recognizes the scoped link-local address (#167735)
  - arping on infiniband fix for buffer overflow (#168806)
  - arping respects timeouts (#165715)


author: Aristeu Rozanski <arozansk@redhat.com> 0.4.1-8
changelog:
  - updated the Cintiq 20 button schematic
  - changed the config file name to "cintiq20.confX"
  - changed the default keys for right strip to 98 and 104
  - changed the default for keys 17 and 18 to 9 and 36


author: David Malcolm <dmalcolm@redhat.com> - 1.0.0-2
changelog:
  - fixed various warnings in the calendar code 
    (filed upstream here: http://bugzilla.ximian.com/show_bug.cgi?id=66383)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.1-1
changelog:
  - update from 1.0.0 to 1.0.1
  - removed patch that fixed warnings in calendar code (now in upstream tarball)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-2
changelog:
  - added patch to fix build on x86_64 (had multiple definitions of mutex code in libdb/dbinc.mutex.h)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-3
changelog:
  - added workaround for a backend leak that causes the "contacts" calendar 
  backend to hold open an EBook for the local contacts (filed upstream at:
  http://bugzilla.ximian.com/show_bug.cgi?id=68533 ); this was causing e-d-s to
  never lose its last addressbook, and hence never quit.  We workaround this by
  detecting this condition and exiting when it occurs, fixing bug #134851 and #134849.


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-4
changelog:
  - Added patch to fix usage of GINT_TO_POINTER/GPOINTER_TO_INT for calendar backend GType hash table that was breaking on ia64  (#136914)


author: David Malcolm <dmalcolm@redhat.com> - 1.0.2-7
changelog:
  - Added fix for #141283 (upstream bugzilla XB 59904), a backported calendar 
  optimisation patch posted to upstream development mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-November/008139.html
  - Amortize writes to a local cache of a webcal calendar, fixing further aspect of #141283 (upstream bugzilla #70267), as posted to mailing list here:
  http://lists.ximian.com/archives/public/evolution-patches/2004-December/008338.html
  (The groupwise part of that patch did not cleanly apply, so I removed it).


author: Ray Strode <rstrode@redhat.com> - 1.0.2-9.rhel4.1
changelog:
  - add buildreq on libgnome >= 2.0 (bug 149136)
  - fix small stack overflow (bug 165371)
  - fix autocompletion toggling (bug 169497)


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-2
changelog:
  - Inital Fedora Extras version
  - Capitalized first letter of Summary in devel section to quiet rpmlint
  - Added LGPL to License as 2 files are under LGPL, the rest BSD


author: <jrb@redhat.com> - 2.8.1-3
changelog:
  - change redhat-web.desktop and redhat-email.desktop to be in /usr/share instead of using the menu path


author: Mark McLoughlin <markmc@redhat.com> - 2.8.1-3.2E
changelog:
  - Use /apps/panel for configuration so that homedir sharing with
    previous versions works reasonably well. This is the location
    upstream is using from GNOME 2.10 onwards.
  - Install old pager.schemas and tasklist.schemas so that
    old configurations which reference the old schema names
    continue to work


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-1.4.1
changelog:
  - Update to upstream 1.0.3 fixing several security vulnerabilities.
  - Update to latest pango patchset, fixing italic font rendering.
  - Use latest firefox artwork


author: Christopher Aillon <caillon@redhat.com> 0:1.0.7-1.4.1
changelog:
  - Update to 1.0.7, containing fixes for:
    CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
    CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968


author: Pasi Pirhonen <upi@iki.fi> 0:1.0.7-1.4.3.centos4
changelog:
  - added the CACert.org certificate as a trusted
  - changed the default bookmarks
  - changed the firefox-centos-default-prefs.js


author: Pradeep Kilambi <pkilambi@redhat.com> - 4.5.3-1
changelog:
  - Fix for #210211 rhn_check should check and avoid multiple instances
  - Fix for #173448,218636,193563 rhn_check dep solver
  - Fix for #201092 --arch fixes


author: Pradeep Kilambi <pkilambi@redhat.com> - 4.5.5-3
changelog:
  - Resolves: #234542 fix for globs to work correctly
  - Resolves: #233678 fix rhn_register TUI to work on para-virt guest
  - Resolves: #233491 fix rhn_register GUI to work on para-virt guest


author: Pradeep Kilambi <pkilambi@redhat.com> - 4.5.5-6
changelog:
  - Resolves: #239452 patch to fix akey pkg install
  - Resolves: #239882
  - Resolves: #239873 patch for handling skipped pkg list


author: Matthias Clasen <mclasen@redhat.com> - 2.10.4-13
changelog:
  - Further fixes for bug 218755:
    - Make gdk_pixbuf_loader_close() idempotent
    - Always emit the closed signal when the loader is closed


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.3-59.RHEL4
changelog:
  - fix segfaults if too many users in one group (#125510)
  - chage gives correct information about sp_inact (#137498)
  - usermod -p update sp_lstchg (#164943)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.3-61.RHEL4
changelog:
  - fix comment in /etc/login.defs (#188263)
  - faster faillog reset (#177017)
  - do not strip binaries (#176949)
  - fix mailbox creation race condition (#193053)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.3-63.RHEL4
changelog:
  - do not create huge /var/log/faillog
  - Resolves: rhbz#213347
  - fix infinitive loop if there are duplicate entries
    in /etc/group
  - Resolves: rhbz#240915


author: Mike A. Harris <mharris@redhat.com> 2.9.0-1
changelog:
  - Added Solaris/HPUX support to tmpwatch via patch from Paul Gear (#71288)
  - Rebuild in rawhide as 2.9.0-1


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1
changelog:
  - Add --exclude, use it to preserve X socket directories (#107069)
  - Allow multiple directory arguments with relative paths (#91097)
  - Don't manually strip the binary


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1.el4.1
changelog:
  - Ignore ENOENT while scanning directories
    Resolves: #247880
  - Don't remove aquota.user and aquota.group in file system root directories
    Resolves: #206258


author: Miloslav Trmac <mitr@redhat.com> - 2.9.1-1.el4.2
changelog:
  - Use the maximum of atime, mtime and ctime when checking whether a file is
    obsolete
    Resolves: #642947


author: Paul Nasrat <pnasrat@redhat.com> - 3.3.6-1
changelog:
  - Update to 3.3.6
  - Fix typo  (#189647)
  - Enable threading fixes (#181298)
  - Conditionalize static library


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: Petr Rockai <prockai@redhat.com> - 0.99.11-3.EL4
changelog:
  - back out the upstream version change and other unneccessary changes from cvs
  - fix #139954 by shipping the uw-imap migration docs
  - fix #171123 by dropping the literal+ capability
  - fix #171119 "leaves files in /tmp from expired kerberos tickets"
  - fix #129539 dovecot starts before named by adjusting chkconfig start/stop
    priority
  - fix #171122 "dovecot is down after dovecot update"
  - fix #182249 "mysql support missing in dovecot on x86_64"
  - fix #181442 "does not recognize SHA digest", patch from Matthew Sage, thanks
  - fix #171120 by backporting a fix from upstream 0.99.12
  - many of the fixes come from jdennis@redhat.com, thanks


author: Johnny Hughes <johnny@centos.org> [2.6.9-34.107.plus.c4]
changelog:
  - based on the 2.6.9-34.0.1.EL CentOS-4 kernel
  - rolled in the unsupported configurations (new kernel-* files in SOURCES)
  - Decided on a new naming scheme for centosplus kernels.  All future
    centosplus kernels will have the .EL replaced with .plus.c4, this kernel
    will have .107.plus.c4 to make is > the last centosplus kernel.


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.0.2]
changelog:
  -restrict prctl() syscall to setting PR_SET_DUMPABLE to 0 or 1 (Ernie Petrides) [195902] {CVE-2006-2451}


author: Johnny Hughes <johnny@centos.org> [2.6.9-34.107.plus.c4]
changelog:
  - based on the 2.6.9-34.0.2.EL CentOS-4 kernel
  - rolled in the unsupported configurations (new kernel-* files in SOURCES)


author: Petr Pisar <ppisar@redhat.com> 1:3.12-8
changelog:
  - Show grace period even if hard limit has been reached (bug #77871)
  - warnquota(8) manual should constrain only to local FS (bug #395301)
  - Remove xqmstats(8) manual as we do not provide the executable (bug #436100)
  - Add quotaoff(8) symlink to quotaon(8) manual (bug #436110)
  - Add dynamic allocation of mount point table (bug #515697)
  - Clean formal spec file errors, tag configuration files and remove executable
    bit from header file, fix Source0 URL (bug #591414)


author: Tom Lane <tgl@redhat.com> 8.1.4-1.el4s1.1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.6-1.el4s1.1
changelog:
  - Update to PostgreSQL 8.1.6
  - Update to PyGreSQL 3.8.1
  - Fix chcon arguments in test/regress/Makefile
  Related: #201035


author: Tom Lane <tgl@redhat.com> 8.1.7-2.el4s1.1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225543
  - Note: this build differs from the concurrent 8.1.7-1.el4s1.1 build
    in that it contains PyGreSQL 3.8.1.


author: Tom Lane <tgl@redhat.com> 8.1.11-1.el4s1.1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427220
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: Nils Philippsen <nils@redhat.com> 1.0.14-6.el4.4
changelog:
  - use -fno-strict-aliasing when building
  - don't embed timestamps in generated DVI, PS files (#448907)


author: Akemi Yagi <toracat@centos.org> [2.6.9-89.0.19.plus.c4]
changelog:
  - based on centos 2.6.9-89.0.19 kernel
  - rolled in the centosplus configuration files (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - enabled HDLC support [centos bug #3019]
  - corrected an error in earlier cplus configs [centos bug #4011]


author: Dave Anderson <anderson@redhat.com> 0.7.5-2
changelog:
  - Updated source package to netdump-0.7.5.tar.gz:
    Allows multiple "service netdump start" to handle magic numbers
    properly.  BZ #142752


author: Jeff Moyer <jmoyer@redhat.com> - 0.7.10-3
changelog:
  - If the sysconfig file specifies all of the needed information, then don't
    fail in the event that the server is either unreachable or the name is
    unresolvable at load time.  BZ #161513


author: Dave Anderson <anderson@redhat.com> - 0.7.14-4
changelog:
  - Updated source package to netdump-0.7.14.tar.gz:
    Creates target /var/crash/ directory on the fly if it does not
    exist or has been removed.  BZ #162587 (RHEL3 BZ #162586)
    Close vmcore before netdump-reboot script is run, allowing
    unimpeded usage of the file by a custom script.  (RHEL3 BZ #165100)
    Made /etc/sysconfig/netdump %config(noreplace)  (RHEL3 BZ #168601)
    Generate syslog messages if any script fails to execute.
    Use sparse file space in vmcore if page is zero-filled.
    Update README.client re: usage of alt-sysrq-c for forced crashes.
    Cleaned up numerous compiler warnings seen in Fedora build environment.


author: Than Ngo <than@redhat.com> 6:3.3.1-5.1
changelog:
  - fix rpm conflict
  - apply patch number 86
  - add patch to fix man page problem konqueror, thanks to Andy Shevchenko


author: Than Ngo <than@redhat.com> 6:3.3.1-5.3
changelog:
  - the existing icon is lost, add patch to fix this problem #140196
  - add patch to fix kfind hang on search #137582
  - rebuild against samba-3.0.9 #139894


author: Than Ngo <than@redhat.com> 6:3.3.1-5.5
changelog:
  - apply the patch to fix Konqueror Window Injection Vulnerability #142510
    CAN-2004-1158,  Thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.3.1-5.6
changelog:
  - kmenu doesn't close after dragging a shortcut to the desktop, add CVS patch
    to fix this problem #rh151802, #kde81438,88940


author: Than Ngo <than@redhat.com> 6:3.3.1-5.10
changelog:
  - kstart --tosystray does not send window to the system tray in Kicker,
    apply patch to fix this issue #182452
  - apply patch to let klipper ignore selections in firefox/Gecko, random freezes #169459
  - apply patch to make fish kioslave working #177743


author: Than Ngo <than@redhat.com> 6:3.3.1-3.11
changelog:
  - Kate backup file permission leak, apply patch to fix this vulnerabilities
    CAN-2005-1920, #163130


author: Than Ngo <than@redhat.com> - 6:3.3.1-7.RHEL4
changelog:
  - Resolves: #293881, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #293551, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 4.1.7-5.RHEL4.1
changelog:
  - Add a restorecon to keep the mysqld.log file in the right context (bz#143887)
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Don't assume /etc/my.cnf will specify pid-file (bz#143724)


author: Tom Lane <tgl@redhat.com> 4.1.10a-1.RHEL4.1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).
  - Run make test on all archs except s390x (which seems to have a bdb issue)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Fix package Requires: interdependencies.


author: Tom Lane <tgl@redhat.com> 4.1.10a-2.RHEL4.1
changelog:
  - Apply a band-aid patch for bz#152911; it seems too late in the RHEL4-U1
    cycle to do the right thing of upgrading to 4.1.11.
  - Back-patch devel tip removal of use of <asm/atomic.h> and LinuxThreads;
    this is necessary for correct operation on s390x (bz#143537), and it
    also seems to cure semi-repeatable regression test failures on ppc64.
  - At last we can enable "make test" on all arches
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.12-2.RHEL4.1
changelog:
  - Update to MySQL 4.1.12 (includes fixes for bz#158688, bz#163694,
    and a real fix for bz#152911).
  - Enable SSL (bz#159967)
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.20-1.RHEL4.1
changelog:
  - Update to MySQL 4.1.20 (fixes CVE-2006-2753, CVE-2006-1517, CVE-2006-1516,
    CVE-2006-0903, bugs #193827, #190743, #190863, #183260, #191181, #183277).
  - Remove broken logrotate script, per bugs #180639, #182025.
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make stop script wait for daemon process to disappear (bz#172426)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-20
changelog:
  - Added patch to show correct mimetype for OpenOffice.org files when guessing 
    type for attachments with mimetype "application/octet-stream" (#145552)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-22
changelog:
  - Fixed CAN-2005-2549 (Sitic Vulnerability Advisory: SA05-001) and for
    CAN-2005-2550 as far as it can affect RHEL4 (patch 202, #165235)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-23
changelog:
  - Added patch to documentation to fix the instructions for setting up LDAP 
    addressbooks (patch 105, bug #153743)
  - Added patch to fix synchronizing multiday all-day events (patch 106,
    bug #157074)
  - Added patch for NNTP authentication (patch 107, bug #167919)
  - Added patch to fix a problem with upgrading from Evolution 1.4 when /home
    is mounted on a filesystem larger than about 2 terabytes (patch 108, #150628)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-24
changelog:
  - Added patch to fix problem with preview breaking when viewing certain emails
    (patch 109, bug #153225)


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-27
changelog:
  - updated constants in patch 108 to avoid 32-bit truncations in arithmetic; add
    debug code to log the results, but disabled by default.


author: Ray Strode <rstrode@redhat.com> - 2.0.2-27.rhel4.1
changelog:
  - Apply patch from Dave Malcolm <dmalcolm@redhat.com> to fix
    settings preservation in initial setup wizard (bug 169484)
  - bump mozilla-devel requirement because it changed in an
    asynchronous update


author: Hal Rosenstock <halr@voltaire.com> - 1.2.4
changelog:
  - OpenFabrics 1.2.4 release
  - Fix diag rpmbuild from make dist
  - Include set_mthca_nodedesc.sh and dump_lfts.sh in the rpm


author: Hal Rosenstock <halr@voltaire.com> - 1.2.5
changelog:
  - Find perl modules in perl sitearch directory
  - Fix non standard prefix install for diag scripts
  - Clean gcc-4.1 warnings in saquery and ibdiag_common


author: Hal Rosenstock <halr@voltaire.com> - 1.3.0
changelog:
  - Add some extra debug information to IBswcountlimits.pm
  - Send normal output to stdout in ibtracert
  - Don't truncate NodeDescriptions containing ctl characters in ibdiag_common
  - Fix ibnetdiscover grouping for Cisco SFS7000
  - Add support to query the GUIDInfo table in smpquery
  - Allow user to specify a default switch map file


author: Hal Rosenstock <halr@voltaire.com> - 1.3.1
changelog:
  - Add link width and speed to topology file output in ibnetdiscover
  - Add support for -R(outer_list) in ibnetdiscover
  - Add script and man page for ibidsverify
  - Moved diags from bin to sbin
  - Add scripts and man pages for display on IB routers
  - Add GUID to output line for ports in ibqueryerrors.pl
  - Add ibdatacounts and ibdatacounters scripts and man pages
  - Add peer port link width and speed validation in iblinkinfo.pl
  - Display remote LID with peer port info in IBswcountlimits.pm
  - Handle peer ports at 1x that should be wider and 2.5 Gbps
    links that should be faster in ibportstate
  - Add LinkSpeed/Width components to output of ibportstate
  - Add support for IB routers 
  - Add grouping support for ISR2012 and ISR2004 in ibnetdiscover
  - Remove all uses of "/tmp" from perl scripts
  - Add switch map support for saquery -O and -U options
  - Add support for saquery -s (isSMdisabled)
  - Add name input checks to saquery (-O and -U)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Tomas Mraz <tmraz@redhat.com> 1.0.20-4.3
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Ray Strode <rstrode@redhat.com> 0.11.11-5
changelog:
  - Do bottom row snapping yet another way to fix scrolling
    artifacts (bug 131798)
  - Add new debugging patch for keeping track of row numbers


author: Behdad Esfahbod <besfahbo@redhat.com> 0.11.11-10.el4
changelog:
  - Make vte-0.11.11-doublewidth.patch work only if VTE_LEGACY_WIDTH env
    var is defined.
  - Resolves 183496
  - Add vte-0.11.11-table.patch to fix remaining update problesm with ispell
  - Resolves 184596


author: Than Ngo <than@redhat.com> 7:3.3.1-3.7
changelog:
  - apply patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179055)


author: Rick Stout <zipsonic[AT]gmail.com> - 1.4.0-4
changelog:
  - updated nx-X11, nxproxy, nxcomp, nxagent and nxdesktop
  - released to address X11 security concerns.


author: Rick Stout <zipsonic[AT]gmail.com> - 1.4.9.3-0
changelog:
  - reworked package for update to 1.5.0 devel snapshot 3 (1.4.9.3)
  - Commented out Xtranssock patch in NX.diff (doesn't seem to be necessary)


author: Tru Huynh <tru@centoso.org - 4.2.0.a.20040617-8.el4_8.2.centos
changelog:
  - same version as upstream 4.2.0.a.20040617-8.el4_8.1 
  - centos modded version
  - release bump to force the update from mislabelled el4_8.2
  - fixed release tag to fix a previous mislabelled version 4.2.0.a.20040617-8.el4_8.2
    (instead of 4.2.0.a.20040617-8.el4_7.2)


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.99-1
changelog:
  - Fix compat calls.
  - make library .so.1.0.0 and make symlinks properly.
  - Fix header file for inclusion in c++ code.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.102-1
changelog:
  - update to 102.  Fixes build errors on s390:
    - S390 asm had a bug; I forgot to update the clobber list.  Lucky for me,
      newer compilers complain about such things.
    - Also update the s390 asm to look more like the new kernel variants.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.103-3
changelog:
  - Move away from the separate compat packege, as it won't be installed by
    default and ISV's don't necessarily ship RPM's.  As such, the compat
    package would have to be explicitly installed.
  - Build the library twice.  Once with the old SONAME and once with the new
    one.  The compat approach taken before did not work since the library uses
    versioned interfaces.


author: Miloslav Trmac <mitr@redhat.com> - 1.12-2.el4.4
changelog:
  - Don't install resizecons.8 on non-x86 (#186877, patch by Keiichi Mori
    <kmori@redhat.com>)
  - Don't report loadkeys errors on kernels with CVE-2005-3257 fixed (#191477)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.12-2.el4.5
changelog:
  - Put "Meta_acute" back in German keymaps, just ignore it in (loadkeys -u)
    (original patch by Jochen Schmitt)
    Resolves: #226782


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-40.el4
changelog:
  - Updated to latest source (t0_4_5_post79)
  - Resolves: bz #488921, #500580, #511034, #512065, #531131, #588753, #623468


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.10
changelog:
  - don't use system() in scp (#170466)
  - kill only the main daemon in the init script (#170468)
  - add patch for user login auditing by Steve Grubb (#170568)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.13
changelog:
  - don't overwrite last argument of scp if multiple files are copied
    and it isn't a directory (patch by Bjorn Augustsson #178923)
  - send final nonquery messages from pam_authenticate to client
    when kbd_int is used (#174995)
  - removed another syslog call from signal handler (#180607)
  - enable syslog in chroot by opening syslog fd permanently (#182281)
  - fixed audit patch so it prevents login when auditing fails (#182930)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - use /var/lib/canna in filelist to also include that dir
    in the rpm listing and set proper ownership from rpm and
    not only via the post script


author: Akira TAGOH <tagoh@redhat.com> 3.7p3-4
changelog:
  - Canna-conf.patch: updated to change the socket file directory under /var/run.
  - Canna-oldsock.patch: applied to ensure that restarting the daemon works during upgrading.
  - made /var/run/.iroha_unix at the build time.


author: Akira TAGOH <tagoh@redhat.com> 3.7p3-5
changelog:
  - fixed default.canna to get usability and improve the default behavior without
    proper .canna file.
    NOTE: you must always have proper .canna file however, since your .canna file
    is prior than the default behavior and it probably overrides the default thing.


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-1
changelog:
  - Update from 2.0.1 to 2.0.2
  - exclude s390/s390x architecture for now due to Mozilla build problems
  - refresh the autogenerated parts of the 64bit fix patch to patch over the latest version of autogenerated files from upstream


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-6
changelog:
  - Install the debug utilities from the "lib" subdirectory (#158006) and clean 
    up usage of the autotools:
    - Split the "64bit-fix" patch into its source and generated components; 
    replace with a new patch "ximian-connector-2.0.2-64bit-fix-acinclude.m4.patch"
    which contains only the source part.					   
    - Add patch "ximian-connector-2.0.2-install-debug-utilities.patch" to install 
    the debug utilities built in the "lib" subdirectory (#158006)
    - Rerun the autotools and add the results of applying the above two patches
    as "ximian-connector-2.0.2-generated-autotool.patch".  We ship all of the
    patches in the source package, but only the final one is applied when the 
    package is built.
    - Reorganised the patch numbering to better reflect the split between patches
    to the autotool source, the patch containing the generated results, and 
    patches to the C source code.


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.27-1.fc6
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202675, #203428, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Related: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.37-1.fc6
changelog:
  - Update to MySQL 5.0.37 (see CVE-2007-1420)
  Resolves: #231838, #232604
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Johnny Hughes <johnny@centos.org> [2.6.9-42.0.2.plus.c4]
changelog:
  - based on the 2.6.9-42.0.2.EL CentOS-4 kernel
  - rolled in the unsupported configurations (new kernel-* files in SOURCES)
  - excluded arches that have no centosplus config files at the top of the spec
  - removed xfs kernel support as a builtin kernel module, added
    kernel-module-xfs support with newer sgi code instead.


author: Steve Dickson <steved@redhat.com> 1.0.6-71.EL4
changelog:
  - fixed nfvs4 server cannot authenticate a client against windows kdc 
    kerberos server (bz 176085)
  - Allow variable for HA callout program in /etc/init.d/nfslock
    (bz 201897)


author: Steve Dickson <steved@redhat.com> 1.0.6-72.EL4
changelog:
  - Stopped binaries and libs from being stripped when they were
    installed in the build root which makes the debuginfo rpm
    much more useful. (bz 209121)


author: Behdad Esfahbod <besfahbo@redhat.com> 2.1.9-8.1.el4
changelog:
  - Update patches to remove fuzz, such that it builds again
  - In preparation to fix:
  - Resolves: #484443


author: Behdad Esfahbod <besfahbo@redhat.com> 2.1.9-9.el4.7
changelog:
  - Add freetype-2009-CVEs.patch (Fixes  CVE-2009-0946)
    (Doesn't apply to freetype1)
  - Add freetype-1.4pre-CVE-2008-1808.patch
    (Corresponds to freetype-2.3.5-CVEs.patch)
  - Add freetype-pre1.4-ttf-overflow.patch
    (Corresponds to freetype-2.1.9-ttf-overflow.patch;
     freetype-2.2.1-bdf-overflow.patch doesn't apply to freetype1)
  - Add freetype-pre1.4-CVE-2006-1861-null-pointer.patch
    (Corresponds to freetype-2.1.9-CVE-2006-1861-null-pointer.patch;
     The rest of CVS-2006-1861 doesn't apply to freetype1)
  - Resolves: #484443


author: Peter Vrabec <pvrabec@redhat.com> 2.5-8.RHEL4
changelog:
  - fix large file support, archive >4GiB, archive members <4GiB (#160056)
  - use mode 0700 for dir creation


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.22
changelog:
  - Backported support for the lpstat command to show the time and date of
    the last printer state change (bug #247829).
  - Build requires autoconf (bug #250251).
  - Applied upstream patch to fix OrderDependencies in cupsaddsmb (bug #248550).
  - Fixed initscript exit code in certain failure conditions (bug #237954).
  - Backported class failover fix from svn4650 (bug #234011).
  - Increase size of buffer used for PS/PJL and HPGL file format checks in
    mime.types (bug #233401).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.23
changelog:
  - Include printer-state-change-time IPP attribute in responses, in addition
    to printer-state-time, its original name (bug #247829).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.24
changelog:
  - Prevented invalid memory accesses when a class and its singleton printer
    are timed out in the same sweep (CVE-2008-0597, bug #433829).
  - Back-ported mimeDeleteType from 1.2.x (CVE-2008-0596, bug #433829).
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433765, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.25
changelog:
  - Apply upstream patches from STR #1249 and STR #1284, to improve efficiency
    in libcups (bug #437456).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.28
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464720).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464720).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464720).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.30
changelog:
  - Check for duplicate printers in printers.conf (bug #453099).
  - Fixed permissions for /etc/cups and /var/spool/cups/tmp (bug #432029).
  - pdftops: initialise translation variables (bug #429094).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.9.31
changelog:
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614), and
    CVE-2009-0166 (bug #490625).
  - Applied addition patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).


author: Peter Jones <pjones@redhat.com> - 10.1.1.37-1
changelog:
  - Fix ACPI probing on amd64 (reported by pjones)
  - Fix cpuid fn 0x80000008 (cores-per-package) probe on amd64 (reported by katzj)
  - Fix return value reset across multiple isys.acpicpus() calls (#181612)
  - Fix variable name in smp acpi test (#181612)
  - Don't count disabled cpus (empty socket or disabled in bios) towards largesmp
    detection (#181612)


author: Doug Ledford <dledford@redhat.com> 1.12.0-1
changelog:
  - Update to 1.12.0, the last version in the 1. series of mdadm (the 2. series
    was a rewrite and is not suitable for update in a stable product such as
    RHEL4)
  - Resolves: bz201067, bz154561, bz171355, bz199033


author: Doug Ledford <dledford@redhat.com> 1.12.0-2
changelog:
  - Remove spurious super-minor once, super-minor=1 ignored messages
  - Attempt to catch overly large linear constituent devices and avoid
    a math overflow in the kernel linear code
  - Resolves: bz150784, bz170327


author: Doug Ledford <dledford@redhat.com> - 1.12.0-3
changelog:
  - Make init scripts LSB compliant
  - Always start mdadm from the / directory when starting the mdmonitor service
    to avoid SELinux warnings whenever mdadm attempts to send mail to the admin
    about a degraded array event
  - Resolves: bz242687


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-89.0.15]
changelog:
  -fix typo in "-net: netlink: fix numerous padding memleaks" (Jiri Pirko) [521602 521603] {CVE-2005-4881}


author: Phil Knirsch <pknirsch@redhat.com> 3.2.0b5-6
changelog:
  - Removed buildroot cruft from HtFileFype (#116442).
  - Use mktemp in HtFileFype to create temporary file (#116443).


author: Phil Knirsch <pknirsch@redhat.com> 3.2.0b6-1
changelog:
  - Update to htdig-3.2.0b6
  - Removed obsolete patches (already included upstream).
  - Added manpages to basic package.
  - Added missing httpd BuildPreReq (#125037)
  - Added fix for broken behaviour with robots.txt (#126482)


author: Phil Knirsch <pknirsch@redhat.com> 3:3.2.0b6-3.40.1
changelog:
  - Fixed security bug with unescaped output in htsearch and qtest (#144127)
  - Removed .la and .a libs from package (#145649)


author: Jitka Kudrnacova <jkudrnac@redhat.com> 3:3.2.Ob6-3.40.1.rhel4
changelog:
  - Fixed missing $opts in rundig on call htfuzy (#179101)
  - Removed htdig-pdfparser and htdigconfig man pages (#185143)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-10
changelog:
  - Update to latest upstream source (t0_4_5_post53)
  - Fixes bz #'s 175738, 175323, 175324, 175378, and 175408


author: David Howells <dhowells@redhat.com> - 0.2-1
changelog:
  - Don't attempt to define the error codes in the header file.
  - Pass the release ID through to the makefile to affect the shared library name.


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.57
changelog:
  - Bug 412631: CVE-2007-5964 autofs defaults don't restrict suid in /net
    - use mount option "nosuid" for "-hosts" map unless "suid" is explicily specified.
  - Resolves: rhbz#412631


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.58
changelog:
  - Bug 426222: CVE-2007-6285 autofs default doesn't set nodev in /net [rhel-4.7]
    - use mount option "nodev" for "-hosts" map unless "dev" is explicily specified.
  - Related: rhbz#426222


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.87
changelog:
  - Bug 322731: RHEL5 automounter and undefined variables.
  - Bug 322751: minor typo in autofs(5) manpage page in "wildcard" section
  - Bug 425883: autofs fails if nsswitch.conf doesn't have automount entry
  - Bug 425884: multi-mount maps fail, can not map a hierarchy
  - Bug 425885: autofs fails if LDAP attribute value is the same as a standard autofs attribute name
  - Bug 426495: Autofs5 failed unmounting Solaris NFS server share
  - Bug 425886: auto.master(5) needs to document the mount options append entry
  - Bug 426496: autofs fails to mount nfs4 when client and server are same machine
  - Bug 425887: autofs passes a wrong program version to the nfs NULL proc
  - Bug 425888: autofs should use acturate time when using pthread_cond_timedwait
  - Bug 425889: Reloading autofs map incorrectly removes all map entries
  - Bug 426498: Export directory with spaces in the name causes problems
  - Bug 426500: /net does not seem to work with 5.0.1-19 or 5.0.2-6
  - Bug 306701: autofs version 5 should not require common schema to be pre-configured
  - Bug 425898: automounter load balancing with replicated servers
  - Bug 425900: [RHEL4] autofs initscript doesn't support '--timeout' with whitespace
  - Bug 425892: Add support for the "%" hack for case insensitive attribute schemas
  - Bug 425891: autofs should match LDAP wildcard entries with "*" as the key as well as "/"
  - Bug 230430: Allows autofs to do automount lookups via nscd through LDAP
  - Bug 306611: autofs-5.0.1-0.rc2.43.0.2.x86_64 segfaults when '/etc/init.d/autofs stop' is run
  - Bug 306631: autofs reload and condrestart fail if map is originally empty
  - Bug 425903: autofs can deadlock with multiple simulaneous access to a program map
  - Bug 425904: RFE: Allow debugging to be enabled on the fly
  - Bug 425905: log "/etc/init.d/autofs reload" invocations to the system log
  - Bug 425906: /etc/init.d/autofs does not handle basedns with spaces
  - Bug 425907: autofs can return incorrect status from mount under heavy load
  - Bug 425908: RHEL3 U5: [autofs4] automounter won't use auto_master in LDAP
  - Bug 425909: Program maps never see changes
  - Bug 425910: autofs 5 and large groups
  - Bug 425912: NFS/AutoFS fails to accurately report non-existent mount points
  - Bug 425913: [RFE] Autofs [4 & 5]: Remove replicated host testing from default single host mount case
  - Bug 425915: If a map entry is > 255 chars, automounter fails
  - Bug 425945: CRM #1598404 Automount process shuts down unexpectedly
  - Bug 425943: automount[2281]: open_mount: (mount):cannot open mount module iso9660
  - Bug 427942: autofs segfaults (possibly from autofs_sasl_unbind)
  - Resolves: rhbz#322731 rhbz#322751 rhbz#425883 rhbz#425884 rhbz#425885
  - Resolves: rhbz#426495 rhbz#425886 rhbz#426496 rhbz#425887 rhbz#425888
  - Resolves: rhbz#425889 rhbz#426498 rhbz#426500 rhbz#306701 rhbz#425898
  - Resolves: rhbz#425900 rhbz#425892 rhbz#425891 rhbz#230430 rhbz#306611
  - Resolves: rhbz#306631 rhbz#425903 rhbz#425904 rhbz#425905 rhbz#425906
  - Resolves: rhbz#425907 rhbz#425908 rhbz#425909 rhbz#425910 rhbz#425912
  - Resolves: rhbz#425913 rhbz#425915 rhbz#425945 rhbz#425943 rhbz#427942


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.88
changelog:
  - Bug 230430: Allows autofs to do automount lookups via nscd through LDAP
    - init SASL callbacks on every ldap lookup library load.
  - Related: rhbz#230430


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.96
changelog:
  - Bug 460087: AutoFS still having issues with expiration of submount maps
    - fix incorrect pthreads condition handling for mount requests.
    - don't abuse the ap->ghost field on NFS mount.
    - fix fail on included browse map not found.
    - clear stale flag on map read.
    - refactor mount request variable setting code.
    - make handle_mounts startup condition distinct
    - fix submount shutdown recovery handling.
    - don't call blocking functions during expire.
    - add configuration paramter UMOUNT_WAIT.
    - fix multi mount race.
    - note that this change depends on the kernel changes in bug 460083.
  - Bug 462715: expire_indirect: fstat failed: Bad file descriptor
    - check for exported mounts automatically mounted by kernel.
  - Bug 462264: [CRM#1837798] automount NULL pointer dereference segmentation fault
    - check replicated list after probe.
  - Bug 462266: autofs with map file auto.nis not working,
    error: automount master_error: syntax error while parsing map
  - Bug 462267: autofs does not log enough data to troubleshoot replicated server selection
  - Bug 462268: RHEL5 autofs doesn't handle replicated server entries like Solaris
  - Bug 462269: autofs hang on startup
  - Bug 462270: automount segfaults upon start
  - Bug 462271: autofs parses /etc/nsswitch.conf incorrectly
  - Bug 462272: Program maps do not set pwd
  - Bug 462273: X/Open Federated Naming service master map entry should be handled by autofs
  - Bug 462274: Automounter does not work in the diskless environment
  - Bug 462275: Autofs doesn't recognize the local host as local when using many interfaces
  - Bug 462276: AutoFS Crashes if non-alpha numerics are tried as map names (LDAP maps)
  - Bug 462614: [RHEL4] autofs4 multi-map doesn't pickup NIS updates automatically
  - Bug 453027: [RHEL 4] autofs5 typos in man pages
  - Resolves: rhbz#460087 rhbz#462715 rhbz#462264 rhbz#462266 rhbz#462267
  - Resolves: rhbz#462268 rhbz#462269 rhbz#462270 rhbz#462271 rhbz#462272
  - Resolves: rhbz#462273 rhbz#462274 rhbz#462275 rhbz#462276 rhbz#462614
  - Resolves: rhbz#453027


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.102
changelog:
  - Bug 462266: autofs with map file auto.nis not working.
    - Fix incorrect match of map type as a host name.
  - Bug 460087: AutoFS still having issues with expiration of submount maps
    - Fix state checks now incorrect due to optimnizations in task queueing.
    - replace state check patch with patch to not issue readmap on new mount
      during HUP signal processing.
    - fix rootless direct multi-mount expire.
    - wait for submount shutdown completion.
    - fix nested submount expire deadlock.
  - Bug 481456: automount issues with RHEL5 and NIS+ auto_home map containing wildcard
    - add patch to handle NIS_PARTIAL return when key not found.
  - Related: rhbz#462266 rhbz#460087
  - Resolves: rhbz#481456


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.103
changelog:
  - Bug 471838 -  RHEL4/autofs5 chkconfig's off when patching to latest package.
    - only turn autofs5 init script off if autofs package is installed and enabled.
  - Resolves: rhbz#471838


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.104
changelog:
  - Bug 477245 - [RHEL 4] autofs5 SASL badness
    - LDAP uris list locking fix.
    - attempt to refresh Kerberos creds upon connect fail.
  - Resolves: rhbz#477245


author: Matthias Clasen <mclasen@redhat.com> - 1.0.15-3
changelog:
  - Reinstate and improve the transfix patch which got lost sometime ago, 
    but is still needed for CAN-2002-1363 (#125934)


author: Matthias Clasen <mclasen@redhat.com> 1.0.15-7
changelog:
  - Replace the patches for individual security problems with the
    cumulative patch issued by the png developers.
  - Build for FC1


author: Jon Masters <jcm@redhat.com> 3.1-0.pre5.3.3
changelog:
  - Fix handling of spaces in options in /etc/modprobe.conf [#219344]
  - Force load of SCSI generic for tape drives [#197112]
  - Also fix package License and description.


author: Warren Togami <wtogami@redhat.com> 1.1.0-4
changelog:
  - #119551 flac-xmms -> xmms-flac to match fedora.us and freshrpms.net
  - Obsoletes flac-libs to upgrade smoothly from fedora.us


author: Stepan Kasal <skasal@redhat.com> - 3:5.8.5-41.RHEL4
changelog:
  - this package should not own /usr/lib64, list it in system-owned-directories
  - Install libnet.cfg to $privlib/Net, where is is searched for, not to
    $archlib/Net, and mark it %config(noreplace)
  - Resolves: rhbz#227655


author: Stepan Kasal <skasal@redhat.com> - 3:5.8.5-42.RHEL4
changelog:
  - Fix -Darchname on the Configure line.
  - Make sure that perl.rpm does not contain compatibility version directories.
    Replace perl-*-fullinc.patch and perl-*-incpush.patch by
    perl-5.8.5-oldarch.patch so that nonexistent directories dont get to @INC.
  - Resolves: rhbz#456566


author: Stepan Kasal <skasal@redhat.com> - 3:5.8.5-49.el4
changelog:
  - Fix perl-5.8.5-oldarch.patch to handle 64bit archs correctly.
  - Resolves: rhbz#456566
  - Drop perl-5.8.0-rpath-make.patch--it mis-applied with fuzz 2 and had
    no effect.


author: Marcela Maslanova <mmaslano@redhat.com> - 3:5.8.5-50.el4
changelog:
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
    Both solved by update to the v2.27.
  - Related: rhbz#591160


author: Marcela Maslanova <mmaslano@redhat.com> - 3:5.8.5-52.el4
changelog:
  - build system contains new rpm, which can't create list of header files
   anymore (failure of rpm -ql). Arch specific files contain list of all
   header files for RHEL-4  or mentioned packages.
  - Related: rhbz#591160


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.5]
changelog:
  -audit: break execve records into smaller parts (Eric Paris) [427393] {CVE-2008-0004}
  -s390: qeth: hipersockets layer-3 interface to drop non-IP packets (Hans-Joachim Picht) [430670]
  -acpiphp: Examine slots below P2P bridges (Prarit Bhargava) [428174]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.6]
changelog:
  -cifs: fix buffer overflow if server sends corrupt response to small request (Jeff Layton) [372971] {CVE-2007-5904}


author: Peter Jones <pjones@redhat.com> - 10.1.1.20-1
changelog:
  - Fix file descriptor leak (#160720)
  - Prefer kernel-devel over kernel-smp devel (#160533, #162581)
  - Support for setting MTU on command line (#155414)
  - Support booting off of software raid on ppc (#159902)
  - Write resolv.conf correctly when using kickstart and dhcp (#151472)
  - Include audit libraries (#162821)


author: Dan Williams <dcbw@redhat.com> - 1.1.2-22
changelog:
  - #rh150178# German localization broken
  - #rh137398# [iiimgcf] general event handling - gtk_im_context_reset()


author: Jindrich Novy <jnovy@redhat.com> 2:4.0.3-53.RHEL4
changelog:
  - attempt to fix up2date hang -> drop .audit, .lOption patch, 
    readd .group patch and revert redhat patch


author: Johnny Hughes <johnny@centos.org> - 1.5.0.12-0.3.el4.centos
changelog:
  - Added CACert as a default CA (add_CAcert.org_cert.patch)
  - replaced firefox-redhat-default-bookmarks.html with
    firefox-centos-default-bookmarks.html
  - replaced firefox-redhat-default-prefs.js with firefox-centos-default-prefs.js


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.3
changelog:
  - enable trusted forwarding by default if X11 forwarding is
    required by user (#137685 and duplicates)
  - discard the previous patch and remove the logging from sigalarm 
    handler completely as syslog is not signal handler safe anyway (#143929)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.5
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - allow ssh-ing from root account with nondefault group (#155220)


author: Than Ngo <than@redhat.com> 6:3.3.1-9.el4
changelog:
  - Resolves: #251343, knotification cannot be enabled after
    re-enabling arts from kcontrol
  - Resolves: #380261, kcmshell desktop, the 'Default' button on virtual desktop does not work


author: Than Ngo <than@redhat.com> 6:3.3.1-12.el4
changelog:
  - Resolves: #209651, startkde fails to start
  - Resolves: #440319, %hostlist macros in Xaccess do not work


author: Marcela Maslanova <mmaslano@redhat.com> - 3:5.8.5-56.el4
changelog:
  - CVE-2010-2761 CVE-2010-4410 perl: CGI module multiple issues fixed by 
    update to CGI 3.54
  - Resolves: rhbz#743627


author: Jason Baron <jbaron@redhat.com> [2.6.9-49]
changelog:
  -Increase number of e820 entries hard limit from 32 to 128 (Larry Woodman) [218094]
  -fix GoVault not accessible due to reset failure on ata_piix (Konrad Rzeszutek) [195730 207148]
  -additional devices added to pci bfsort whitelist (Andy Gospodarek) [213948]
  -Fix key serial number collision problem (David Howells) [227495] {CVE-2007-0006}
  -fix audit panic on watched files (Eric Paris) [223129] {CVE-2007-0001}
  -fix pcmcia panics on Sun Bladeserver (Brian Maly) [204914]
  -flush icache early when loading module (Doug Chapman) [227898]
  -fix panic on boot with certiain intel sound cards (Jason Baron) [228059]
  -libata: make HDIO_DRIVE_TASK ioctl to return ATA registers to user space (Jun'ichi "Nick" Nomura) [220836]
  -ppc: fix sctu Data buffer miscompare (Janice Girouard) [225219]
  -fix icmp oops in sctp (Neil Horman) [223818]
  -Fix 8139cp netconsole and tcpdump (Chris Lalancette) [229287]
  -ppc: fix install to detect SATA DVD-ROM drive (Janice Girouard) [229333]
  -fix reset bugs in qla4xxx (Mike Christie) [228416]
  -fix BUG_ON() panic in __kmap_atomic() (Jerome Marchand) [223851]
  -wacom: support new tablets (Aristeu Rozanski) [228531]


author: Jason Baron <jbaron@redhat.com> [2.6.9-50]
changelog:
  -V4L: use GFP_DMA when allocating memory for mmap (Aristeu Rozanski) [179146]
  -nfs4: fix client panics (Steve Dickson) [226983]
  -fix panic in nfs4_get_sb  (Jeff Layton) [229780]
  -autofs4: add missing hunk in "automounter cannot shutdown when timeount=0" patch (Ian Kent) [199977 205836]
  -add ipr driver back to ppciseries kernel (Janice Girouard) [230353]


author: Jason Baron <jbaron@redhat.com> [2.6.9-51]
changelog:
  -tty: fix possible double idr index freeing (Aristeu Rozanski) [214188]
  -Fix typo in the qla1280 reset (George Beshers) [217886]
  -blacklist SEAGATE tape drive (Chip Coldwell) [197381]
  -Fix off by one error in mthca driver (Doug Ledford) [233086]
  -Fix ipv6 OOPS triggerable (Neil Horman) [233114]
  -ppc: fix ehea oops during TCP+IO stress testing (Janice Girouard) [232944]
  -fix tux overflow (Jason Baron) [229717]
  -add one more PCI ID for ICH9 (Geoff Gustafson) [197011]


author: Tom Lane <tgl@redhat.com> 3.51.14r248-1.el4s1.1
changelog:
  - Update to mysql-connector-odbc 3.51.14r248
  Related: #236473
  - Fix build problem on multilib machines


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Doug Ledford <dledford@redhat.com> - 0.5-3
changelog:
  - Update to official 0.5 from upstream
  - Add pseudo-provides for libibverbs-driver
  - Related: bz454778


author: Miloslav Trmac <mitr@redhat.com> - 3.7.1-2
changelog:
  - Fix sending mails (#131583)
  - Preserve file attributes when compressing files (#121523, original patch by
    Daniel Himler)


author: Peter Vrabec <pvrabec@redhat.com> 3.7.1-6.RHEL4
changelog:
  - do not use tmpfile to run script anymore (#156594)
  - improve extension option explanation (#185318)


author: Alasdair Kergon <agk@redhat.com> - 2.02.18-1
changelog:
  - Revised libdevmapper-event interface for dmeventd.
  - Prevent permission changes on active mirrors.
  - Print warning instead of error message if lvconvert cannot zero volume.
  - Add snapshot options to lvconvert man page.
  - dumpconfig accepts a list of configuration variables to display.
  - Change dumpconfig to use --file to redirect output to a file.
  - Avoid vgreduce error when mirror code removes the log LV.
  - Fix ambiguous vgsplit error message for split LV.
  - Fix lvextend man page typo.
  - Use no flush suspending for mirrors.
  - Add dmeventd_mirror register_mutex, tidy initialisation & add memlock.
  - Fix create mirror with name longer than 22 chars.
  - Fix dmeventd mirror to cope if monitored device disappears.


author: Alasdair Kergon <agk@redhat.com> - 2.02.19-1
changelog:
  - Report dmeventd mirror monitoring status.
  - Fix dmeventd mirror status line processing.
  - Some libdevmapper-event interface changes.
  - Fix a segfault if an empty config file section encountered.
  - Fix cmdline PE range processing segfault (2.02.13).
  - Fix partition table processing after sparc changes (2.02.16).
  - Move basic reporting functions into libdevmapper.


author: Alasdair Kergon <agk@redhat.com> - 2.02.20-1
changelog:
  - Fix exit statuses of reporting tools.
  - Update reporting man pages.
  - Add --clustered to man pages.
  - Add field definitions to report help text.
  - Add devices/ignore_suspended_devices to ignore suspended dm devices.
  - dmeventd mirror sets ignore_suspended_devices and avoids scanning mirrors.
  - Add init script for dmeventd monitoring.
  - lvm.static no longer interacts with dmeventd unless explicitly asked to.
  - Fix refresh_toolcontext() always to wipe persistent device filter cache.


author: Alasdair Kergon <agk@redhat.com> - 2.02.21-1
changelog:
  - Add warning to lvm2_monitoring_init_rhel4 if attempting to stop monitoring.
  - Fix vgsplit to handle mirrors.
  - Reorder fields in reporting field definitions.
  - Fix vgs to treat args as VGs even when PV fields are displayed.
  - Fix md signature check to handle both endiannesses.


author: Milan Broz <mbroz@redhat.com> - 2.02.21-4
changelog:
  - Fix processing of exit status in init scripts.
  - Fix reading of striped LVs in LVM1 format.
  - Flag nolocking as clustered so clvmd startup sees clustered LVs.
  - Resolves: rhbz#231979 rhbz#232397


author: Milan Broz <mbroz@redhat.com> - 2.02.27-1
changelog:
  - Add conflict with lvm2-cluster package from different update.
  - Update to latest upstream release.
    Resolves: #180286 #199618 #202885 #203037 #231187 #233123


author: Zdenek Kabelac <zkabelac@redhat.com> - 2.02.27-2
changelog:
  - Introduce VG_GLOBAL lock type for vgscan/pvscan to trigger clvmd -R.
  - Fix clvmd -R, so it fully refreshes the caches.
    Resolves: #138396


author: Chris Lumens <clumens@redhat.com> 0.148.6-1
changelog:
  - Add support for the IBM Advanced System Management PCI card (#198797,
    Konrad Rzeszutek <konradr AT redhat.com>).


author: Johnny Hughes <johnny@centos.org> 4.4.5.6-centos4
changelog:
  - added RH updates from 4.4.5-1 to 4.4.5.6 to the CentOS4 RPM
  - removed contrib from the default source file
  - removed rhn_register


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.7 - bug fix and a few enhancements release
    + Important steps:
      - Prior to the update, make sure all elements (instance_attributes
        etc) in the CRM configuration have valid id attributes, or set the
        ignore_dtd option to true. Otherwise, the new version will refuse
        to start.
    + SECURITY FIX:
      - Remote Denial of Service attack (#195068, CVE-2006-3121).
      - Local Denial of Service attack (#194444, CVE-2006-3815).
        (actually fixed in 2.0.6)
    + Enhancements:
      - Improved log messages.
      - ptest can now read compressed XML directly. Do not include
        optional actions and dependancies in ptest output by default.
      - crm_resource will now warn and demand exact specification when
        trying to modify an attribute while several sets are present.
    + Bugfixes:
      - Small fix from Serge Dubrouski <sergefd@gmail.com> for one
        annoying problem when PostgreSQL isn't installed on a box and one
        tries to run the script.
      - stonithd log message did not always indicate an error (OSDL 1379)
      - lrmd now limits itself to a maximum of 4 child processes, to avoid
        overloading the node and causing too long delays.
      - Improvements and fixes for Solaris 10.
      - pengine: Processing of pending probes; should not be treated as if
        the resource is running or in a known state.
      - target_role now is only taken into account for managed resources.
      - cib: Detect more cases where the nodes section needs to be
        refreshed.
      - More accurately determine node status. (OSDL 1369)
      - Filter out stop requests that would require a resource to be
        added. (OSDL 1369)
      - Send filtered resource "stops" as successes as to not block
        waiting for filtered actions.
      - By default pass the TE graph via IPC until its too large for IPC
        to deal with, only then fall back to passing via the disk.
      - Stopping of stonith resources can never require stonith, even if
        the node its running on failed; prevent graph loop. (OSDL 1376)
      - STONITH events need to inputs to start events (not stops), to
        avoid graph loop in combination with "stop before" dependencies
        (ie, groups).
      - crmd: Dont stall the FSA if we try to invoke the TE after we've
        stopped it.
      - Always unpack the correct part of a diff operation; diffs should
        now apply in more cases, reducing the need for full refreshs.
      - Correctly observe --disable-snmp-subagent during build.
      - In some states the membership is invalid and shouldn't be
        referenced. (OSDL 1377)
      - Fix a use-before-null-check issue in lrmd. (Coverity #48)
      - OCF Resource Agents outside the default path were incorrectly
        found to be not executable.
      - ccm: hostcache and delnodecache files should not be authoritative
        if autojoin is disabled. (OSDL 1226)
      - With autojoin, llm_get_nodecount() can't return the real max nodes
        anymore, this may cause memory corruption. (OSDL 1382)
      - Fix a memory corruption in membership layer, more frequently
        observed with larger (>5) clusters.
      - Change the default api-auth for pingd to uid=root
      - Dummy RA now OCF compliant.
      - Fix pingd RA metadata to be XML compliant.
      - Actually use RPMREL in the spec file.
    + KNOWN BUGS:
      - When running a cluster of nodes of very different speeds temporary
        membership anomalies may occasionally be seen.  These correct
        themselves and don't appear to be harmful.  They typically
        include a message something like this:
        WARN: Ignoring HA message (op=vote) from XXX: not in our membership list


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.0.8 - bug fixes and enhancements
    + Allow colocation based on node attributes other than #id 
    + SAPDatabase and SAPInstance resource agents added.
    + Core/CRM: Improvements to the memory allocation, message, and string
      handling libraries result in an overall speed-up of 65%.
    + CRM: Fix ISO date handling for Jan 01 of any year.
    + CRM: Only update the voted hashtable with no-votes for the current
      election.
    + RA: IPaddr: Support netmask both in CIDR and in dotted-quad notation.
    + logd: Fix trailing random byte in log messages (OSDL 1268).
    + heartbeat:  Work around a glibc/times() bug to prevent failures every
      497 days on 32-bit Linux (OSDL 1407).
    + heartbeat: Retransmits were requested more often than they'd be
      honored (OSDL 1455).
    + CTS/PE: Introduce CRM option "startup_fencing" to disable fencing of
      unseen nodes, because CTS can't handle this.
    + PE: Split-off "network-delay" option from global_timeout to separate
      network delays from action timeouts.
    + PE/CRM: Binaries now support being called with "metadata" command to
      document the complete list of options in the CIB.
    + PE: DTD: Include start_delay as a property of operation objects.
    + PE: Fix implementation of date_spec when no range is specified.
    + PE: Enforce clone_node_max for already running resources.
    + PE: Clones were not being stopped on node shutdown.
    + PE: Allow resource colocation based on node attributes other than #id
      (node_attribute option added to rsc_colocation constraint).
    + PE: Improved handling when timeout < start_delay (OSDL 1421).
    + PE: Pre-notifications for promote occured before start was completed
      (OSDL 1447).
    + PE: Allow any two pairs of actions to be specified for rsc_order (OSDL
      1452).
    + PE: Handle asymmetric clusters where RAs are not installed on all
      nodes.
    + PE: Allow resource stickiness and failure stickiness to change based
      on node attributes.
    + CIB: Fix update_attr() causes attrd to hang at shutdown when there is
      no DC (OSDL 1432).
    + CIB: Corrupted config file prevents heartbeat restart (OSDL 1385).
    + CIB: Startup processing improvements; DTD validation will be
      automatically activated if the CIB on-disk validates.
    + TE: Fix memory leak.
    + TE: Failcount wasn't being updated in all cases.
    + TE: never update the CIB with unconfirmed stop actions (OSDL 1435).
    + CTS/RA: Replace OCFMSDummy with Stateful RA.
    + CCM: Centralize quorum calculation on the transition leader.
    + CCM: Support split-site and external quorum servers.
    + CRM: Ignore status update for non-members (ie, ping nodes).
    + LRM: Don't postpone postponed resources.
    + LRM: Fix restart in case an lrmd is already running (OSDL 1333).
    + LRM: Fix overflow in RA output handling (OSDL 1433).
    + mgmtd: Robustness and memory leak fixes.
    + mgmtd: make the port used configurable (OSDL 1390).
    + haresources2cib.py: Improve v1 to v2 conversion tool (OSDL 1415).
    + GUI: ping nodes appear as failed in gui (OSDL 1394).
    + GUI: Reduce duplicates in RA list by only showing the OCF one if both
      ocf and hb RA exist) (OSDL 1338).
    + GUI: Add new resource to currently selected group (OSDL 1414).
    + GUI: support all attributes of operations (OSDL 1372).
    + GUI: Create first resource along with a new group; delete group when
      last resource is removed (OSDL 1287).
    + GUI: Set defaults for clones and m/s RAs (OSDL 1352).
    + GUI: Use meta-data defaults when creating actions (OSDL 1351).
    + GUI: GUI: start all sub resources when we start a group or a clone
      (OSDL 1449).
    + GUI: support ordered==false or non-collocated==false groups (OSDL
      1257).
    + stonithd: Fix memory leak.
    + stonithd: Remove reliance on farside_pid (OSDL 1412).
    + stonith external/riloe: Make the login name and iLo device address
      configurable.
    + crm_resource: Add manpage.
    + RA: PureFTPd, mysql, ManageVE (to manage an OpenVZ container),
      ManageRAID, WAS6 (Websphere 6) added.
    + RA: Include SAPInstance and SAPDatabase (FATE 2172).
    + RA: IPaddr cleanup to avoid race conditions in the script. Report
      status failure when an IPaddr is active on a different interface but
      allow it to be stopped.
    + RA: IPaddr2 fixes for loopback bound addresses.
    + RA: Filesystem reported wrong status/monitor results for OCFS2 in some
      circumstances (Novell 187080).
    + RA: Improve heartbeat v1 wrappers.
    + RA: Fix db2 monitor operation.
    + RA: ldirectord: Make the emailalert and emailalertfreq options global
      as well as non-global, make checkcount global as well as per-virtual,
      add radius check, improvements to documentation.
    + RA: pgsql: Make server logfile configurable and implement
      validate-all. New parameter ctl_opt added to pgsql to support
      additional options for pg_ctl.
    + CRM: First beginnings of a cluster-wide shell (FATE ...)
    + BEAM / Coverity induced fixes.
    + Minor compatibility fixes (OSDL 1405).
    + Logging improvements all over the place.
    + Extended support for master-slave resources (FATE 300723).
    + OCF RA API compliance checker (FATE 300737).
    + Support weak and uni-directional collocation constraints (FATE
      300792).
    + Many bugfixes.


author: Alan Robertson <alanr@unix.sh> (see doc/AUTHORS file)
changelog:
  + Version 2.1.1 - bug fixes and enhancements - changelog includes everything after 2.0.8
    + Added vmware STONITH script
    + Added Evmsd, eDir88, and o2cb resource agents
    +++++ OSDL / Linux Foundation bugzilla bugs +++++
    + OSDL bug 393 - Enable build of plugin if OpenHPI present
    + OSDL bug 393 - Update plugin from OpenHPI 2.2 to OpenHPI 2.6
    + OSDL bug 393 - Rename ibmbc to bladehpi
    + OSDL 761: Remove history from heartbeat init script.
    + LF Bug # 960 - rpm: first-time install fails
    + Tools: OSDL #1073 - Add clone support to crm_resource
    + LinuxFoundation bug 1138 - Long delay before CCM propagates membership event (partial fix)
    + Put debug in in support of bugzilla 1154: 2.0.4 BSC failure - select() returns with error
    + OSDL 1268: Fix trailing random byte in log messages (by Keisuke MORI)
    + OSDL 1292 - xSeries STONITH (IBM: 06-R212-175
    + RA apache: a major update (closes Bug 1357)
    + Tools: OSDL #1374 - Check for sane host names when migrating
    + OSDL 1389: Make mgmtd check protocol version on connect (Joachim
    + Stonith: OSDL #1428 - Mixing definitions and code
    + CIB: OSDL #1430 - Allow automatic assignment of object IDs
    + OSDL bug 1457 - Resolve unknown command ha_log
    + Tools: OSDL #1451 - Allow resource meta attributes to be set with crm_admin
    + clplumbing: Bug 1454 - Detect stale PID files where possible
    + Tools: OSDL #1462 - crm_migrate should allow creating temporary rules
    + crmd: Fix for OSDL #1465 - crmd gets stuck if shutdown while starting up
    + CIB: Apply patch for OSDL #1472 - Use-after-free in find_attr_details()
    + OSDL Bug 1482:  stonith command needs a repeat option to make it a better test tool
    + PE: OSDL #1484 - Repair on_fail=stop.  Patch courtesy of YAMAMOTO Takashi.
    + PE: Add a regression test for OSDL #1484 from Takashi YAMAMOTO
    + RA: db2 got new parameter: admin. Fixes Bug 1485.
    + PE: OSDL #1486 - Fix for potential NULL dereference
    + OSDL bug 1488 - Fix passing password to HMC
    + OSDL bug 1489 - Fix HMC errors in hostlist
    + PE: OSDL #1492 - Set common resource attributes before calling the custom unpack function
    + PE: OSDL #1494 - Add node->score to the clone stability function
    + PE: OSDL #1499 - Perform #uname comparisions without case
    + Attrd: OSDL #1500 - repeated call to attrd_updater with dampen absorbs attribute changes
    + Linux Foundation bug 1505: Findif parsing is all screwed up unless all the parameters are passed, not defaulted.
    + OSDL bug 1506 - Add optional plugin parameters to XML
    + OSDL bug 1507 - Allow "stonith -h" to display help for specific device
    + LF Bug 1511 LRM running two actions for the same resource parallel
    + LF Bug 1513 - building RPM from the 2.0.8 tarball fails
    + CCM (bug 1515): wrong function names in logging fixed
    + LF Bugzilla bug 1522: Strt hb_counter on time_t
    + OSDL bug 1523: Plugin performance enhancements
    + LF Bug 1527 - inappropriate warnings about core files logged by heartbeat (SGI961667)
    + Linux Foundation bug 1528: IPaddr2 gives a spurious warning on stop (SGI961736)
    + crmd: OSDL #1532 - Single node cluster shutdown
    + LF bug # 1534 - compiling/installation error on OpenBSD (partial fix?)
    + Fixed LF bug 1539: On Ubuntu, /var/run/heartbeat is missing after reboot (tmpfs)
    + Fixed LF bug 1540: MgmtGUI requires explicit port number when connectingi
    + fix bug 1544: 
    + OSDL bug 1545: stonithd signoff fixes
    + logging: a temp fix for bug 1548.
    + OSDL bug 1550: Suicide plugin returns hostlist containing itself
    + OSDL bug 1553: suicide plugin lacking ST_DEVICENAME
    + crmd: LF Bug #1554 - Wait for the membership to stabilize before starting transitions to prevent unconfirmed actions
    + PE: LF Bug #1554 - Probes should not have priority INFINITY
    + OSDL bug 1563: ssh STONITH plugin cleanup
    + Fixed LF bug 1564: cl_malloc doesn't return NULL on error
    + lrmadmin: skip non-numeric keys for lsb and heartbeat RAs (fixes bug 1571)
    + PE: LF Bug #1572 - Resource ordering not observed under some conditions - final
    + PE: LF Bug #1572 - Resource ordering not observed under some conditions - pt1
    + LRM: fix corrupt global structures (fixes Bugzilla 1574)
    + crmd: Bug #1575 - crmd cannot exit if lrmd is killed and there are pending ops
    + LF Bug 1576: shutdown hangs under certain shells
    + OSDL bug 1581 - no STONITH plugins found on Solaris10/i386
    + OSDL bug 1582: suicide STONITH plugin ignores nodename
    + PE: Bug 1580 - Remove logging inserted during developmental of fix for bug 1572
    + crmd: Bug #1584 - Always restart the join process when membership changes
    + LRM (bug 1585): check input from clients.
    + LRM: reschedule delayed ops (bug 1586).
    + LRM: handle lingering processes (fixes bug 1586)
    + LRM (bug 1594): change handling of cancel, resource delete, and flush ops requests.
    + LF Bug 1595: findif not being useful
    + Fixed LF bug 1597 int and long sizes are different on 64bit linux systems
    + Bug #1601 - PE: Favor correctness over niceties when STONITHing nodes
    + Bug #1602 - CIB: Try and load backup configuration if loading the main one fails
    + CIB: Bug 1602 - Archive invalid/unusable configurations so we can continue
    + OSDL bug 1606: okay for stonith plugins to have no parameters
    + Bugzilla Bug 1612 haresources2cib @substitution@ broken (probably by a global change)
    + Bug 1613 - stonith: convert long/short descriptions to xml.
    + LF Bug # 1617 - Miscellaneous RPM and source cleanups
    + Admin: Bug #1621 - crm_mon should show failed starts of a resource
    + Admin: bug #1622 - crm_attribute: Include --inhibit-policy-engine in the help message
    + crmd: Bug 1624 - Fix the delete op for cancelled operations
    + CRM: Bug 1625 - Cannot update an operation's timeout
    + PE: Bug 1628 - Complain about invalid operation intervals
    + RA: Bug #1630 IPaddr2 - Wrong arguments passed to send_arp (test was mistakenly written as an assignment)
    + Admin: Bug 1632 - Make sure error messages regarding trailing XML input characters are seen
    + CIB: Bug 1633 - Pass the actual error from activateCibXml back to the user
    + Admin: Bug 1635 - crm_failcount should not complain if the attribute was already deleted
    + LF Bug # 1644 - Pinging loopback in BasicSanityCheck fails with EPERM
    + LF bugzilla # 1645: Minimize arch-dependent differences, maintain compatibility
    + LF bug # 1650 - heartbeat should put scripts/non arch specific things in /usr/share
    + LF bug # 1656 - apache RA (LF 1656): include ServerRoot in relative paths.
    + LF bug # 1661 - crm_verify aborts checking and reoccurring crm_abort errors in logs
    + LF bug # 1665 - v1 config totally broken
    +++++ Novell bugzilla bugs +++++
    + RA: EvmsSCC: More fixes from Jo (Novell 199730)
    + PE: Novell #239079 - Ensure action priority is set correctly to ensure notifcations are not lost
    + PE: Novell #239082 - Order promotions after _all_ demotions have completed
    + PE: Novell #239086 - Stable Master placement
    + Admin: Novell #239075 - crm_master uses the same IDs for permanent and transient attributes
    + crmd: Novell #244444 - Free'ing g_alloc() data with cl_free()
    + PE: Novell #246681 - Teach NoRoleChange() how to migrate resource's in the master role
    + Novell bug 250207: SLES10 SP1 beta4 x86_64 problems with Heartbeat 2.0.8
    + RA: Filesystem: Move ocfs2_init out of the generic stop path (Novell 250603).
    + RA: Xen: Fix status function for newer Xen versions (Novell 250625)
    + RA: Novell #250273 - Provide an RA for managing evmsd as a resource
    + PE: Novell #251689 - Avoid needlessly restarting changed monitor operations for stopping resources
    + PE: Novell #252693 - Enable migration in more scenarios
    + PE: Novell #252693 - Teach the PE how to migrate resources in a starting stack
    + Stonith: Novell #266551 - getconfignames returned hostname instead of hostlist
    + doc: Novell #266551 - Bring the stonith man page up-to-date
    + Admin: Novell Bug #270977 - crm_resource ignores --meta in some situations
    + crmd: Novell Bug #286393 - Create resources, if necessary, in the lrmd so they can be stopped.
    +++++ Debian bugzilla bugs +++++
    + RA: Debian Bug #420206 - Bashisms in IPaddr2
    + [DEBIAN] Debian bug #432441 will be closed on the next upload
    +++++ Other changes +++++
    + CRM: Fix ISO date handling for Jan 01 of any year
    + CTS: Look for ha.d in the configured location
    + crmd:  Some more speedups for string comparisions and reload support improvements
    + Util: Fix a botched conversion from CRM_ASSERTs
    + CTS: Cleanup ResourceRecover
    + CTS: Logging change
    + TE: Remove dead code
    + crmd: Only update the voted hashtable with no-votes for the current election
    + Typos in comments and debug logs. (Sorry, I saw these during review and
    + crmd: crm_str_ -> safe_str_
    + Backed out changeset c38fb26a9497ab221688bfbfe6639eebcf29b0dd
    + crmd: add the required extra argument to crm_str_eq
    + crmd: Fix generation of FSA graphs
    + CTS: Explicitly test for the string "1" which means we have quorum
    + crmd: s/crm_str_neq/safe_str_neq/
    + build: Put header files into their correct subdirectories
    + RA: Some improvements to the mysql RA suggested by Achim Stumpf
    + clplumbing: fix compile error
    + PE: First cut at migrate support in _very_ limited situations
    + PE: More migrate code
    + PE: Final pieces of migration support
    + crmd: Make sure only current no-votes count towards election completion
    + DTD: Support the migrate_from value in rsc_op objects
    + crmd: Prepend CCM inputs to avoid a potential deadlock on startup
    + Core: Stop using the old ha_malloc macros for cl_malloc and friends
    + Hg: Update the list of ignored files/patterns
    + PE: Update the regression test outputs with new the feature set version
    + .cvsignore maintenance
    + RA: Fix apache metadata for consistancy
    + More .cvsignore updates
    + crmd: remove dead code from the lrm wrapper
    + PE: Tweak log message
    + CRM: Finalize support for migrate
    + RA: Support reload and migrate-(to|from) in the Dummy OCF agent
    + CTS: option logging improvements
    + CTS: Tweak v2 resource action interpretations
    + CTS: Cleanup CIB generation and add a migratable resource
    + Update comments related to the meaning of CCM callbacks
    + crmd: Correctly handle out-of-order CCM updates
    + Updated spec file in preparation for 2.0.8
    + BSC: LookForString already does grep -i. No need to specify "[Aa][Rr][Pp]"
    + PE: Add the PE part of reload support
    + BSC: Modified strategy for determining which interface to use
    + PE: Allow rsc_colocation constraints to be symmetrical
    + PE: Bug fixes and regression test for reload support
    + PE: No need to regenerate the param-4 outputs every time
    + PE: Fix small memory leak in reload support
    + PE: Make sure lrm_rsc_op IDs in regression tests are correct
    + PE: Add explanitory comment
    + CRM: Logging
    + build: Explicitly set state directory for Darwin in ConfigureMe
    + CTS: Remove unused import
    + BSC: Gracefully fail when python-xml is not available
    + PE: Allow migration and reload for children of complex resources
    + RA: Patch to pgsql.in from Serge Subrouski
    + RA: Patch to oracle agent from Dejan Muhamedagic
    + RA: Patch to allow ServeRAID to function in the real-world. From Jon Fanti.
    + Hg: Merge in RA patches from the community
    + Add migration support to Xen RA.
    + add configure option for the drbd outdate peer daemon
    + Added tag STABLE-2.0.8 for changeset 2d298bca0d0af320752bfa293ac96ed08e2c6463
    + Hg: Fix another botched update from Alan
    + RA: LVS support should always be enabled for the heartbeat IPaddr wrapper
    + Remove uninitialized variable warning on line 116.
    + RA: Xen: Swap migrate_to and _from to match PE.
    + CRM: Add a simple xsl stylesheet for rendering configurations
    + PE: Rename migration variables for clarity
    + RA: Modify the Xen RA to use the new variable names
    + crmd: crm_atoi() needs two arguments :-/
    + PE: Utility functions for finding node's by uuid/uname
    + CRM: Allow retrieval of default config values without a hashtable
    + CRM: Dont skip past the initial '<'
    + CIB: The decision to log failed connection attempts should be left to the client
    + CIB: New error code
    + Tools: Print the duration we parsed
    + CRM: Refactor date printing to allow date -> string conversion
    + Tools: Set a slightly higher default action timeout
    + Silly typo.
    + Add support for overriding the hostname drbd uses based on the clone
    + CRM: Ensure the normalized result of (add|subtract)_time is updated before returning
    + Tools: Place the lifetime rule in the correct location
    + crmd: If we allocated temporary user_data content, we must free it also
    + CTS: Indicate debug log messages
    + PE: Dont waste time checking action definitions on nodes that wont be running resources
    + PE: Small logging change
    + PE: Update the dot file after the previous action definition check change
    + CRM: Changes to fake transition key generation
    + TE: Minor cleanup
    + CTS: Support the setting of a few more options for lrmadmin calls
    + crmd: Remove dead code
    + CTS: Rewrite the ResourceRecover to use asynchronous failures
    + CTS: Move a comment to a more appropriate location
    + CTS: Remove debug message
    + CTS: Rewrite the LSBDummy RA
    + Hg: Merge in some changes related to async failure notifications
    + CTS: Ignore ResourceRecover testing artifacts
    + Core: Allow writing to syslog to be turned off
    + CRM: Correctly handle syslog facility == 0
    + Core: Fix stupid cut/paste error
    + Add some defaults to configure.in to reduce buildrequires.
    + Fix a typo in the default path to scp. (Only mattered if scp wasn't
    + clplumbing: use the result of strcmp correctly
    + PE: Fix group recovery when a group it depends on is restarted
    + PE: Stop regenerating expected test results
    + PE: Have group-group recovery work for the right reasons
    + PE: Rename elements of the pe_ordering enum for clarity
    + PE: Move DeleteRsc to a more appropriate location
    + PE: Shift code out of the PE library that is only used by the PE application
    + PE: Change for code clarity
    + PE: Fix group recovery
    + PE: Allow order_constraint_t to represent multiple ordering conditions concurrently
    + PE: Not all pseudo operations should be included in the graph
    + PE: Correct arguments to CRM_CHECK()
    + PE: Clean up generation of and contents of dot-files
    + PE: Updated regression tests with the revised consistant format
    + PE: Only show elements of the graph in the dot-file by default
    + RA: -eq is for integer comparisions
    + CTS: Remove resource tied to the DC - the #is_dc comparision is irrelevant
    + Build: .cvsignore maintainence
    + CRM: Fix replace_xml_child() when neither child nor update have an id
    + Admin: Auto populate the provider for OCF resources if one is not provided
    + Admin: Include rsc_location details in the resource listing
    + Admin: Use the current node uname by default when invoked as crm_standby
    + RA: Fix up the Dummy metadata
    + Admin: crm_primitive.py: Include all node preferences in the one rsc_location constraint
    + RA: drbd: Fix some issues and work-arounds for drbdadm bugs.
    + RA: IPsrcaddr wrapper: Fix silly typo.
    + RPM: Improved grammar in gui package description
    + DEBIAN: Packaging updates for 2.0.8-1 release
    + CIB: ODSL #1480 - Create synchronous r/w connections correctly
    + DTD: The DTD used "integer" instead of "number" (which was used by the code)
    + CRM: Repair the status_printw macro now that we do logging slightly differently
    + Tools: Dont do ID checks on cibadmin diff's, duplicates are expected
    + Build: Use existing accounts when building on OSX
    + Tools: Help text and input sanity checks for ocf-tester
    + Advertise migrate_from and _to actions. Mention migrate in meta-data.
    + Add heartbeat-2-gui package control files to Makefile
    + Relaxed a stonithd timeout so that start will succeed if it completes in a minute.
    + Finally get a chance to correct lmb's spelling
    + Build: Include the exact version being built even when building an archived tree
    + configure: Check for more pre-requisites of the mgmt/quorum components.
    + Remove a bunch of dead code (Perl/SWIG bindings).
    + Remove a few work-arounds now that notifications work correctly.
    + Core: Allow the malloc tracking code to compile on systems where size_t != int
    + cib: Compile when malloc tracking is enabled
    + CRM: When malloc tracking is enabled, pass through the person that called crm_strdup
    + Tools: Fix a number of memory leaks in attrd
    + Tools: Compile when malloc checking is off, fix last mem leak
    + moved drbd peer outdater into contrib/
    + We _never_ want to trim memory, use -1 instead of 4*size.
    + CRM: Delete dead code, make empty_uuid_cache() safe with NULLs
    + crmd: Resolve a number of memory leaks
    + CRM: Fix memory leak in compare_version()
    + cib: Clean up the list of clients wishing to be notified
    + crmd: Clean up leak in crmd_ccm_msg_callback()
    + crmd: dump newly allocated memory at each state change not only at idle
    + crmd: clean up more data at exit
    + CRM: Remove noisy and inaccurate memory logging
    + cib: Remove more ill-advised memory checking code
    + CRM: Remove the last references to cl_mem_stats from CRM code
    + Core: Add a (disabled) block of code that allows heartbeat to easily run with standard libc malloc-and-friends
    + crmd: Memory leak - Clean up the XML result of the LRM queries
    + crmd: Free the LRM connection at shutdown
    + cib: Memory leak - Free query matches in update_attr()
    + cib: Memory leak - Free intermediate results of find_attr_details()
    + cib: Memory leak - ensure the digest is always cleaned up
    + cib: Free various bits of memory at shutdown
    + PE: Logging
    + TE: Clean up the current graph on exit
    + CRM: Memory leak - Ensure libxml2 objects are always cleaned up in validate_with_dtd()
    + cib: Clean up the libxml2 parser at exit
    + TE: Always exit via mainloop
    + TE: Delete more items at exit
    + TE: Free the transition_timer at exit
    + CIB: Free the channel names at exit
    + CIB: Memory leak - free the digest file handle
    + crmd: Free the metadata hashtable and lrm connection at exit
    + cib: Clean up some hash tables at exit
    + crmd: Memory leak - ensure 'key' is free'd in get_rsc_metadata(), create 'restart' only when required in append_restart_list()
    + crmd: Memory leak - free the metadata list after use
    + CRM: Use unique top-level function names
    + Build: Configure switch to easily enable Valgrind'ing of the CRM
    + cib: Allow forked writer processes to clean themselves up before exiting
    + crmd: Enable Valrind'ing of the PE and TE
    + crmd: Delete the HA connection only at exit
    + Backed out changeset c65afe1e2d9006d0c6ec887359ba31d81bca5671
    + Hg: Backout changeset c65afe1e2d9006d0c6ec887359ba31d81bca5671
    + CRM: Convenience macro for list deletion
    + PE: Valgrind was complaining about this for some reason
    + crmd: Small documentation update
    + crmd: Memory leak - free the ping reply fragment after use
    + cib: Exit the writer process correctly so we'll continue to do write outs
    + crmd: Sort out the whole client deletion business.  Also delete the resources hash at shutdown.
    + cib: Dont examine the group ownership of cib.xml since we set perms to rw-------
    + mgmtd: Certain versions of SWIG do not convert the Python "None" to a
    + Build: Make supplying a Valgrind suppression file simpler
    + Build: Remove redundant and useless items from the build
    + Build: Remove more redundant and useless items from the build
    + crmd: Memory leak - clean up the intermdiate reload data
    + Added count of how many inet lines to use for the diff -B?
    + Enhance Pgsql ocf resource to handle multiple instances
    + Initial implementation of remote CIB connections using TLS and PAM
    + Switch to G_main_add_fd() instead of using io channels directly
    + cib: Support processing of commands sent via remote TLS connections
    + cib: Allow the remote connection code to be used with or without PAM/TLS
    + cib: Hook up the CIB remote connection listener
    + PE: Fix gcc warning - dont ignore the result of mktemp()
    + build: Always check for the presence of PAM an TLS headers
    + cib: Start a remote access listener on a port specified by the user
    + cib: Check for membership of the correct group
    + cib: Attend to various autobuild warnings
    + Coverity 53: Potential NULL pointer dereference.
    + Uninitialized string in heartbeat/findif.c
    + cib: Add but do not install a PAM file for the CIB
    + Build: Not all platforms need -lpam
    + cib: Older versions of gnutls used gnutls_session without the _t
    + CRM: Fixes for Coverty issues: 52, 55-58, 61-66, 68-69, 71-73 in run 240
    + Determine GNUTLS libs centrally in 'configure.in' rather than in individual Makefiles
    + Pulled in current changes from the 'dev' branch
    + Determine GNUTLS cflags centrally (follow-on from 7a742e29e3f8).
    + Use centrally determined GNUTLS cflags and libs
    + Bourne shell 'test' does not support '-e' flag.  Using '-r' instead.
    + libgnutls: if no 'libgnutls-config', try 'AC_CHECK_LIB(...)'
    + Remove CVS artifacts. ($Id$ and $Log$ have no meaning to mercurial.)
    + crm_attribute/master/standby: Always default the uname to the current
    + PE: Make sure things that shouldn't be true are never true (added asserts)
    + Fixes for Coverity issues in Run 243
    + cib: valgrind - Only close the File* if we were able to open the file
    + CRM: Prevent a number of potential use-after-free's by zero'ing out free'd loop variables
    + PE: Simplify the logic in native_rsc_order_rh
    + Put the compression buffers on the heap instead of the stack.
    + Improve portability across versions of 'gcc'.
    + Fix blatant memory leak on non-failure leg ...
    + RA: drbd: When using the nodename-override, drbdadm likes to print an
    + Update ignore files
    + CRM: Make the use of valgrind a run-time option
    + tools: Terminate the attrd process if heartbeat exits from under it
    + crmd: Clean up the voted hash at exit
    + PE: Fix a use-after-free of {key} when the monitor op already existed
    + Build: Always process the Valgrind logging option
    + build: commas mean something in autofoo
    + Core: Sanitize the "crm xyz" option processing.  Dont run valgrind if not using libc malloc
    + Revert 45354b6012c8 a807c29d883a 3de0ed0510d7: For some entirely unclear
    + RA: Filesystem: Increase default suggested timeouts.
    + Core: Better information about valgrind enablement
    + PE: Remove erroneous if-clause
    + crmd: ALL completed actions should be removed from the shutdown_list
    + PE: Prevent a potential NULL deference in clone allocation
    + PE: Provide useful feedback when a cloned resource is found active somewhere it shouldn't be
    + RA: drbd: Make parsing of drbdadm output more robust.
    + PE: Log the transition at a lower level in ptest
    + PE: Re-use StartRsc/StopRsc for consistancy
    + RA: Xen: Add a little reminder to the code.
    + crmd: Downgrade logging
    + Hg: fun with multiple concurrent committers
    + CRM: Fix a use-after-free in parse_time_duration()
    + CIB: Downgrade one log message (Deallocating the CIB.)
    + Part of the reversion of a previous changeset got stuck in here. Doh.
    + TE: Detect changes to attributes of the cib object
    + STONITH: external/riloe misspelled RI_LOGIN variable name.
    + TE: Only a limited number of cib attributes warrent aborting the transition
    + Stonith: Update the rilo RA with enhacements from Tijl Van den broeck and Guy Coates
    + RA: The first argument to os.environ.get() was supposed to be a string
    + Fixed a URL referencing where to find the APC UPS protocol description.
    + CRM: Return defaults correctly when no hash is used
    + Admin: map cib_NOTEXISTS to 0 for crm_failcount
    + RA: Filesystem - When checking ocfs2 is cloned, look for variables that are always set
    + RA: pgsql: Several enhancements to by Keisuke MORI
    + Tools: Centrally define CIB call options so that -f always works in crm_resource
    + RA: pgsql improvements
    + Build: Header-file related cleanup
    + Build: Add lha_internal to c-files that dont include it
    + Build: typo
    + follow-on from Andrew's recent changes
    + Correct omission of <lha_internal.h>
    + Another omission of <lha_internal.h>
    + Build: cvsignore additions
    + Build: include stdlib.h for exit()
    + Build: Fix typo in configure.in
    + Build: Fix recent cleanup.  Dispite the names, HALIB != HA_LIBDIR
    + Build: Fix recent cleanup.  Dispite the names, HALIB != HA_LIBDIR
    + TE: Minor log change
    + TE: Remove dead code
    + TE: Small logging improvement
    + TE: Unpack graph actions correctly
    + RA: Fix variable initialization in pgsql
    + Minor declaration fixes following Andrew's code re-working.
    + RA: Avoid concatination with None in riloe stonith agent
    + RA: Use configured scratch locations in ibmrsa stonith agent
    + Core: Set HA_DIR to the correct location after recent cleanup
    + RA: pgsql fixes and enhacements
    + crm: Gracefully fail when the target XML file is not writable
    + PE: Move Ncurses related defines to a more optimal location and make sure its included by crm_mon
    + RA: LVM: Add some hints for future todo items.
    + Build: Allow debian packages to also be built directly from Hg archives
    + Build: Misc changes to allow building with crm disabled
    + debian: sort out a kink in the configure vs. bootstrap logic
    + debian: reflect the new header locations in .files
    + debian: correct the location of stonith headers in *.files
    + PE: Fix anti-colocation when the RHS is not running
    + tools: Teach crm_uuid to write ascii-form UUIDs to hb_uuid
    + tools: show help text for crm_uuid
    + tools: Better help when an invalid uuid is passed to crm_uuid
    + crm: Check the return code from fflush() when writing xml files - AnÌbal Monsalve Salazar
    + crmd: No need to create the resource if we're trying to delete it
    + build: Add explanatory comment for configure kludge
    + Tools: Include class/type/provider in resource delete commands
    + tools: re-default to read if the are no arguments to crm_uuid
    + CTS: Account for a small timing window in the ResourceRecover test
    + Fix a Linux compiler warn/error
    + PE: Make clones semi-sticky by default
    + Fix typo.
    + crmd: dont update the restart list with unset attributes
    + Trivial documentation fix:  added the --enable-snmp-subagent to the configure help message.
    + crmd: Create the restart digest from an object with the same name that the PE uses
    + build: dopd doesnt build without the crm, disable it if the crm is disabled
    + crmd: remove dead makefile entry
    + Build: Dont install crm-related man pages when --disable-crm is used
    + RA: Return after performing a stop action in the Filesystem agent
    + Eligable is not a word ;-)
    + ocf-tester: Continue if validate-all succeeds.
    + build: Trial a slightly cleaner way of specifying required libraries
    + crm: Fix memory leak in error path
    + build: make life easier on OSX
    + RA: Filesystem: Prune duplicates from active and starting list.
    + Whitespace cleanup and minor fixes ("" for -z arguments, using -ne when
    + Build: Restore build dependencies. (Reverts http://hg.linux-ha.org/dev/rev/27394b5c56e3)
    + Correct a typo.
    + BSC: Test Dummy, IPaddr, IPaddr2, Filesystem RAs.
    + ocf-tester: Exit with appropriate exit code for success or failure.
    + BSC: Skip IPaddr2 test if ip not installed.
    + build: removed unused library dependancies
    + CRM: Comprehensive review of error recovery logic for potentially failed calls to fopen()
    + tools: return the rc we calculated in read_hb_uuid()
    + PE: Make internal group ordering of bullet-proof
    + PE: Code optimization.  No functional change
    + PE: Always print the resource's node scores
    + PE: Avoid a potential NULL dereference in an error path
    + crmd: Indicate the LRM error code if an operation cannot be cancelled
    + Ensure 'awk' is found in runtime environment
    + PE: tweak the dot file handling in ptest
    + Fixed a stupid error in some new (unused) code.
    + Allow data size to be specified
    + Updated version to 2.0.9
    + ocf-tester: Various integers were compared as strings.
    + CRM: LF #1514 - Empty values in cib.xml loses other RA parameters
    + Replace multiple derivations (poor) of locations with direct derivation from configure
    + ipctransient tests: Add some flexibility; rationalise some duplicate code
    + CRM: Make sure buffer is set to NULL after we free it
    + ipcsocket: remove some code duplication; other minor tidy-ups.
    + Make ldirectord's version valid
    + Broken ldirectord reload
    + Use the -w flag to perl to find warnings/errors
    + Remove useless calls to lc()
    + Remove duplicate $recstr
    + Use $arrayOfDNs[0] instead of @arrayOfDNs[0] to get rid of the following
    + Make sure that DEBUG is initialised
    + Change the code around a bit to avoid a warning about code following exec
    + Use $$ instead of (the uninitialised) $pid
    + If weight is not supplied, set it to 1
    + Dont use SIGENT, as it doesn't seem to exist.
    + Use implicit variables in read_config()
    + Handle $line more carefully
    + Make sure that frequency is intialised before it is used
    + CIB: Allow cluster options to be created when the default set is not present
    + Admin: Allow cluster config options to be queried/modified/deleted.  Broken in cs: 13c450735ba7
    + CIB: Prevent node_uuid from having any effect for <crm_config> changes
    + CRM: Dont call fflush() or flclose() if the output stream was NULL
    + PE: Create an implicit "cant run here" constraint if an action returns "not installed"
    + LRM: Inform clients when an RA is not installed on the machine
    + Dev version didn't build RPMs.  Added in missing EXTRA_SOURCES macro for transient-test.sh
    + Brought the web site up to date, and also fixed / finished (hopefully) the multi-language support.
    + Fixed a bug in the changelog date which was pointed out by
    + Cleaned up more of the mess left by a sloppy developer in this changeset:
    + Changed the web site php scripts so that they will substitute the English page if
    + RA: Filesystem: Harmless typo corrected.
    + RA: drbd: If drbd is stopped, demote should fail with NOT_RUNNING.
    + Fixed a bug pointed out by Pavol Gono <palo.gono@gmail.com> where heartbeat
    + RA: Fixed the three pseudo RAs to use ha_pseudo_resource. Extended the Dummy RA to support checks for serialization and to survive the TERM signal.
    + lrmadmin: fix the provider list function: first free data and then the list member.
    + CRM: size_t is always positive... broke error handling in XML parser.
    + bladehpi readme update
    + ConfigureMe: make usage info a little clearer
    + Fixed a bug reported by Max Hofer <max.hofer@apus.co.at> - crm_uuid didn't return proper exit codes.
    + configure: Add closing information to user about '/etc/passwd' and 'make install'
    + Upgraded the web site to accommodate the new version of MoinMoin
    + Fixed a small complaint about unnecessary warnings from Paulo F. Andrade
    + Put in a small fix for to relax some warnings which Paulo F. Andrade complained about.
    + Got embedded (FLASH) objects to work.  Cool!
    + Fixed a couple of minor spelling errors.
    + Fixed our id tags to be unique -- MoinMoin creates each page with a line-1 tag, and when we combine severa
    + Changed the php so that id tags with slashes in them get the slashes removed...
    + Put in changes from _29 to %29 in file names since Moin seems to have changed that...
    + Reverted a misguided change to the web site...  We should NOT replace / with %2f in URLs...
    + Output to stderr works again. Cleanup. A few more fixes.
    + RA: Filesystem: Fix metadata require/unique settings.
    + Reconciling heads within dev.
    + CRM: Use-of-NULL in validate_with_dtd() error path... Only clean up what we created
    + Admin: Allow crm_verify to be used with a named DTD file
    + Fix xml parser bug.
    + crmd: logging
    + crmd: Correctly parse the shutdown timer option
    + RA: Convert SAP* from dos :) Allow ManageRAID to show meta-data at all times.
    + lrmadmin: fixed wording; output to stderr.
    + RA: fix meta-data to conform to XML.
    + RA: fix meta-data to conform to XML.
    + LRM: new regression test (initial)
    + LRM: convert the LSB meta-data to XML.
    + LRM: fix my own fix, it broke lrmd.
    + CIB: Some extra options for developer testing
    + Tools: Add two new views to crm_mon.  Patch by Christofer Edvardsen.
    + Remove an unnecessary 'include' that broke building on some OSes.  It continues to build OK on various OSes.
    + BSC: (1) test IPC before its dependencies; (2) signal-handling: improve and catch some more.
    + PE: Don't start resources until we can verify they're not still running
    + Hg: Update ignore file
    + LRM: regression testing update; a new set of test cases added
    + LRM: regression testing, here the promissed new set of tests
    + LRM: regression testing: documentation update.
    + Switched the to using an IE-specific comment hack instead of javascript.
    + Fixed a stupid option processing error - where some option errors would be ignored.
    + Fixed an error message which used a parameter that hadn't been supplied,
    + LRM: regression testing; warning about security implications.
    + LRM: regression testing: tests could run in background; a new test case to check if ops are serialized.
    + LRM: regression testing: small fixes and update of the serialize test.
    + LRM: regression testing: update comments for the serialize test.
    + Tools: crm_verify - dont complain about missing status section
    + CRM: handle NULL inputs to xml_has_children() gracefully
    + cib: Don't increase the version number if nothing changed
    + cib: Fix stupid compile error
    + cib: Warn at startup if important version information is missing
    + cib: Fix memory leak in cib_config_changed()
    + Correct a comment.
    + Added tag SLE10-SP1 for changeset 906283515e3b
    + Added tag SLE10-SP1 for changeset a5f71c2dea64
    + Added tag SLES10-GA-2.0.7-1.5 for changeset 91de0c9c401c
    + cib: remove dead code
    + PE: Memory leak fixes
    + Added a little code to find out increase process tracking
    + fix compiling warnings
    + Tools: LF #1500 - Calls to attrd_updater with dampen=0 not processed correctly
    + RA: ocf-shellfuncs.in invokes ha_debug instead of ha_log when appropriate.
    + RA: Dummy and Delay fixed to use OCF_RESOURCE_INSTANCE. Dummy got a couple of extra variables to control TERM signal handling and verbosity.
    + LRM regression testing: new features; a new testcase: flood; some fixes; more testcases needed.
    + LRM regression testing: better separation of the driver and the engine---evaltest.sh can be used on console now.
    + LRM regression testing: updated readme.
    + Removed a message about attempt to remove ping node, since this is a "normal" condition.
    + RA: eDirectory: Some cleanups.
    + Add eDirectory RA to configure.in.
    + Wrong closing parenthesis.
    + Renamed eDirectory RA to eDir88.
    + RA: eDir88: Updates from Yan Fitterer.
    + [IPv6addr] send_ua() is leaking l
    + [IPv6addr] create_pid_directory() leaks dir
    + [IPv6addr] overrun in find_if() for 128bit prefixes
    + [IPv6addr] Use memset to set mask in find_if()
    + [IPv6addr] Merge duplicated code from find_if() and get_if() into scan_if()
    + [IPv6addr] devname in scan_if() is too short
    + [IPv6addr] Handle scanf failures in scan_if()
    + [IPv6addr] scan address directly into integers in scan_if()
    + [IPv6addr] Use the 32bit wide field of in6_addr in scan_if()
    + [IPv6addr] Remove resources/heartbeat/IPv6addr.c
    + stonithd: fixed logging to print symbolic names for operation types and results.
    + stonith external: more debugging to show various lists retrieved from a stonith plugin.
    + Dummy: Reverting the poor ole RA to it's previous Dummy state. Perhaps it should loose the delay param too.
    + LRM regression tests: lrmregtest takes place of the ocf RA Dummy.
    + stonithd: mixed up op_result from st_op and ra_op. fixing it back.
    + RA: Return to a simple but correct Dummy RA
    + PE: Logging tweaks
    + PE: Logging
    + crmd: logging
    + PE: Logging
    + PE: Make clones ever so slightly sticky by default
    + CTS: Explain why we're aborting when nodes aren't found in DNS
    + crmd: Logging
    + TE: Tweak logging of unconfirmed actions
    + Fixed a format so that it works without warnings on 32-bit machines also.
    + ec9b93d18e47 had allowed a variable to be possibly uninitialised
    + [IPv6ADDR] Fill in address bytes and use correct endienness
    + [LDIRECTORD] recieved -> received in ldirectord.cf
    + [LDIRECTORD] Fix thinko in range error message
    + [LDIRECTORD] fix copy-paste error in smtp_check's log
    + Merging from upstream (dev)
    + Remove bashim from IPaddr
    + [IPaddr] Switch back to sh now bashims are gone
    + [DEBIAN] Close #420206
    + [DEBIAN] Depend on libsnmp10-dev rather than libsnmp9-dev
    + RA: Make sure eDir88 is installed
    + RA: eDir88 - monitor() returning incorrect exit code when monitoring fails.
    + crmd: Logging
    + CTS: Logging
    + PE: Memory leak fixes
    + Added tag SLE10-SP1 for changeset 558427e03930
    + Hg: Tag maintenance
    + IPaddr/Solaris: code re-factoring (e.g. 026bab6b8384) had lost 'netmask' keyword to 'ifconfig' command
    + IPaddr/monitor: rationalise some duplicated 'ping' code
    + [DEBIAN] Update documentation location
    + Add alternate build dependancy on libsnmp-dev
    + update priority of ldirectord to extra to match dependancies
    + [DEBIAN] Update changelog for 2.0.8-2 release
    + cib: Potential logging of NULL
    + cib: Potential printing of NULL
    + cib: Remove redundant cleanup calls
    + crmd: Logging for improved debuging of parameter changes
    + cib: reduce info-level logging
    + stonith/ibmrsa: improved Bourne shell syntax
    + RA eDir88: meta-data fixed.
    + LRM: regression.sh update for portability.
    + plugins/stonith/{ssh,suicide}.c: Better OS portability
    + Pulled from upstream (dev)
    + Fixed a typo that I made that I have no idea how it went undetected.
    + [DEBIAN] Rename the heartbeat-2 source package heartbeat
    + [DEBIAN] Documentation path of ldirectord should be /usr/share/doc/ldirectord
    + [LDIRECTORD] Make the help text reflect the supported actions
    + [DEBIAN] Make a debian init script for ldirectord
    + [DEBIAN] update priority of ldirectord to extra to match dependancies
    + [DEBIAN] fix rules, fix changelog
    + PE: Remove duplicate function declarations
    + PE: Code formatting and logging
    + Admin: Dont output the transition graph by default when calling ptest
    + Remove Duplicate EXTRA_DIST from ldirectord/init.d/Makefile.am
    + Admin: crm_master: adjust expected return code from uname() to accomodate Solaris
    + uname() return code: add (heartbeat/heartbeat.c) and improve error message (crm/admin/crm_attribute.c)
    + debian: Add missing files to the package list
    + PE: Stop of a partially stopped group failed when there was only two child resources
    + TE: Fix potential printing of NULL
    + [DEBIAN] 2.0.8-4 release
    + [DEBIAN] 2.0.8-5 release
    + Found one of the reasons why cl_malloc was slower than malloc.
    + Fixed a tengine compile error.
    + cib: More accurate logging
    + LRM: replace "agency" with "agent."
    + logd: remove spurious occurence of "ha_logd."
    + LRM: on_op_done simplified. Also fixes 1583.
    + cib: improved logging for the remote listener
    + build: portability and cleanliness updates to configure.in
    + LRM audit: false positives.
    + CTS: Advertise the option to add resources to the CIB.
    + [DEBIAN] 2.0.8-7 release
    + Updated version to 2.1.1
    + configure: Make test for /proc/<pid>/exe functionality more explicit.
    + LF #1588 - Bad string comparision in IsRunning() prevents BSC from passing
    + [PATCH] Use elapsed in G_main_setall_id()
    + [DEBIAN] Add --enable-glib-malloc to configure's arguments
    + [DEBIAN] Use << instead of < for dependancy relations
    + core: handle zero length cl_malloc requests.
    + LRM audit: update and more false positives.
    + LRM: a semantic typo :-|
    + configure: Fix test -L -> -h portability issue.
    + Build: Remove legacy crud
    + build: remove unused Make variable CRM_DEBUG_LIBS
    + crmd: Potentially correct a potential logging of NULL
    + PE: Downgrade logging
    + PE: Add a dummy variable to struct native_variant_data_s so that it has a non-zero size
    + RA: edir88 - Improved monitor action by Yan Fitterer
    + Build: Remove all CRM references to HA_MALLOC_TRACK
    + Complete Andrew's removal of autoconf-2.53.diff
    + PE: Indicate orphan status when displayuing resources
    + Admin: crm_mon - Indicate the correct number of configured resources (excluding orphans)
    + LRM: notify clients on ops with lingering processes.
    + CTS: Update log pattern to match new log message output
    + crmd: make sure fsa_cluster_conn is not NULL before we try to delete it
    + RA eDir88: meta-data fixed again.
    + imported patch wordexp.patch
    + RA: eDir88 - Repair a patch mangled by email
    + RA: ocf-shellfuncs - Add some lockfile-related functions
    + Hg: ignore maintenance
    + CRM: Logging enhancements
    + CRM: Logging enhancements
    + crmd: note-to-self for future handling of cancelled ops
    + LRM audit: resource parameters are not allocated by the clplumbing library.
    + LRM: rename op to rapop in ra_pipe_op_destroy to avoid confusion.
    + configure: lack of 'libgnutls-config' need not stop 'mgmt' and 'quorumd' from building
    + CTS: a new script to collect pe input files for one CTS test.
    + crmd: remove dead cib-related code
    + CRM: Remove unnecessary logging
    + Tools: haresources2cib - Use the correct name for no-quorum-policy
    + RA: IPaddr2 - Refine and fix Cluster IP functionality by Michael Schwartzkopff.
    + TE: Reduce logging
    + CIB: Fix cib_config_changed() for when it becomes enabled
    + CIB: Only write the CIB to disk when the configuration changed (not just the status section)
    + CIB: #undef shouldnt supply a value
    + cl_longclock: Update wrapcount and static data in proper order (by Simon Graham).
    + Add comment explaining why times_longclock() calls cl_log() where it
    + Initial implementation of a STONITH module for VMWare Server guests
    + cib: Remove logging we dont care about
    + STONITH: Improvements to external/vmware
    + cib: More effective mehtod of turning off cib_config_changed() for now
    + [PATCH] Use sys/types.h instead of asm/types.h in configure(.in)
    + [DEBIAN] 2.0.8-8 release
    + [DEBIAN] 2.0.8-9 release
    + Hg: Make it official that SLE10-SP1 == STABLE-2.1.0 since we're working on 2.1.1
    + LRM: fixed timeouts and operations killed by signals.
    + LRM: fix cancel operations.
    + PE: Do not test for changes to dead actions
    + crmd: Delete cancelled operations from the CIB
    + build: Remove dead code as sanctioned by Alan on the Linux-HA Users list Feb 20, 2007
    + Build: Remove one more dead file
    + tools: crm_resource - prevent attempts to clean up non-primitive resources
    + clplumbing: convenience function for logging command invokations
    + LRM: cancel, delete, and flush requests revisited.
    + crmd: crmd changes required by lrmd changeset 58b250732bf1
    + cib: Use a BadNews pattern to catch diff failures instead of ERROR
    + lrmadmin: fix output of op status on monitor.
    + LRM: remove op's history on cancel.
    + Admin: crm_resource - Prevent user's from cleaning up non-failed resources (unless --force is supplied).
    + Admin: Log how various CRM-related CLIs are invoked
    + Logging
    + PE: Provide the call id for ops to be cancelled
    + PE: Ensure stop ops happen before cancelations
    + crmd: Revise operation tracking
    + CRM: Re-impliment asynchronous failures without need of trickery from the lrmd
    + CRM: Additional files part of the async failure reimplimentation
    + Admin: abort only when a host is _not_ set
    + RA: eDir - failed stop doesn't exit with error (Yan Fitterer)
    + lrm: stonith: fix spelling in a log message and lower log level.
    + RA: Filesystem: Improve OCFS2 UUID retrival and error handling
    + Stonith: vmware - fix metadata and optimize
    + Stonith: vmware - Now that it seems to work, allow it to be installed
    + CTS: Consistant and configurable STONITH usage
    + PE: Prevent a potential use of NULL
    + PE: Pre-emptive change anticipating a change in the LRM
    + Stonith: external - Dont make all possible parameters manditory
    + [DEBIAN] Close #420206
    + [DEBIAN] Depend on libsnmp10-dev rather than libsnmp9-dev
    + [DEBIAN] Update documentation location
    + Add alternate build dependancy on libsnmp-dev
    + update priority of ldirectord to extra to match dependancies
    + [DEBIAN] Update changelog for 2.0.8-2 release
    + [DEBIAN] Rename the heartbeat-2 source package heartbeat
    + [DEBIAN] Documentation path of ldirectord should be /usr/share/doc/ldirectord
    + [DEBIAN] Make a debian init script for ldirectord
    + [DEBIAN] update priority of ldirectord to extra to match dependancies
    + [DEBIAN] fix rules, fix changelog
    + debian: Add missing files to the package list
    + [DEBIAN] 2.0.8-4 release
    + [DEBIAN] 2.0.8-5 release
    + Added tag STABLE-2.1.0 for changeset 70067cb78a6e
    + [DEBIAN] 2.0.8-7 release
    + [DEBIAN] Add --enable-glib-malloc to configure's arguments
    + Another patch for LF 1595: findif not being useful
    + cl_malloc: a typo renders cl_malloc unusable.
    + LRM: remove some obsolete audit calls.
    + RA: Filesystem: search the path as well, if needed.
    + cl_malloc: do not allocate zero size blocks.
    + Portability: some OSes lack 'stdint.h'
    + Portability: ulong is the deprecated name for unsigned long
    + CIB: read_attr() can safely always talk to the local CIB
    + Admin: crm_mon: -X has an argument
    + PE: Dont invoke check_action_definitions() if there are no actions to check
    + Build: Change occurances of HB_RC_DIR, missed in a recent cleanup, to HA_RC_DIR
    + Build: CIM - Remove defines that are always included by lha_internal.h
    + Build: Use the correct (and non-deprecated) #define names
    + crmd: Provide useful feedback when the metadata is unreadable
    + CRM: Delete resources from the status section when they're deleted from the LRM
    + CRM: Further optimize removal of resources from the LRM
    + RA: o2cb: Initial version.
    + Admin: crm_attribute - Support --inhibit-policy-engine for delete operations
    + RA: o2cb: Revamp distribution of cluster.conf
    + TE: Log the node's uname instead of UUID for completed actions
    + Admin: crmadmin - include Hg version in --version output
    + PE: Dont log stopped orphaned resources
    + RA: o2cb: Optimize redistribution of cluster.cnf.
    + RA: o2cb: Improve configuration stability.
    + [LDIRECTORD] Use negotiatetimeout for SIP, DNS and Radius checks
    + [LDIRECTORD] Make parsing of the output of ipvsadm more robust
    + [LDIRECTORD] Use an alarm for HTTPS timeouts
    + [LDIRECTORD] Fix bogus detection of combined check
    + [LDIRECTORD] Fix logic bug in _status_down
    + [LDIRECTORD] Remove stale entries on reload
    + [LDIRECTORD] Don't die if Net::FTP times out
    + [LDIRECTORD] Port of last resort for real server checks
    + [LDIRECOTRD] Use globals for service check return values
    + [LDIRECTORD] Tidy up fallback
    + [LDIRECTORD] Make check_sql < 80col wide
    + [LDIRECTORD] Use $dbh->errstr instead of $dbh->err when logging
    + [LDIRECTORD] Use goto for error handling in check_sql
    + [LDIRECTORD] Handle $dbh->prepare() failure in check_sql()
    + [LDIRECTORD] Clean up execute logic in check_sql
    + [LDIRECTORD] Add forwarding mechanism to real server ID
    + [LDIRECTORD] Document that checktimeout is for ping checks too
    + [LDIRECTORD] Status to stdout
    + [LDIRECTORD] Note negotiatetimeout in documentation of checkcount
    + [LDIRECTORD] document port behaviour of real servers
    + [LDIRECTORD] Document expire_quiescent_template
    + [LDIRECTORD] Cosmetic spelling and grammar fixes
    + [LDIRECTORD] Remove trim down very wordy decripton of read_config
    + [LDIRECTORD] Enhance logging in service_set
    + [LDIRECTORD] List checktype and service in alpabetical order in the documentation
    + [LDIRECTORD] rearange parsing of service to make it <= 80col (more often)
    + [LDIRECTORD] Add Oracle check
    + [LDIRECTORD] Add ld_service_to_port()
    + [LDIRECTORD] Remove connecttimeout
    + [LDIRECTORD] Use negotiatetimeout and connecttimeout as mutual defaults
    + [LDIRECTORD] Set default negotiatetimeout to 30s
    + [LDIRECTORD] Use valid string in log message in check_connect()
    + [LDIRECTORD] Don't access CALLBACK unless it is defined
    + [LDIRECTORD] Call ld_emailalert_send() with correct arguments
    + [LDIRECTORD] Enhance ftp check debugging
    + [LDIRECTORD] Add external check
    + [DEBIAN] Update packaging in preparation for 2.1.1-1
    + [BUILD] make sure vmware stonith plugin is distrubuted
    + RA: IPaddr: Fix a few trivial bugs in lvs_support pointed out by Michael Stiller.
    + CRM: Allow cd-ing to the the core directory to be optional
    + CRM: Allow cd-ing to the the core directory to be optional
    + Admin: ptest is useful enough to warrent installation to sbindir
    + CIB: Revise version changes
    + PE: Fix two small memory leaks detected by Valgrind
    + CIB: config_changed always needs to be calculated when processing write commands
    + cib: Add some comments to the code
    + PE: Make sure ptest always does a POSIX sort
    + cib: Clean up diff logging
    + cib: Fix detection of non-status changes
    + CTS: Stonith monitoring is not interesting to us - make sure it doesn't fail
    + RA: Revised handling of directory locations
    + RA: Move all remaining autoconf variables into common files that are automatically included
    + Misc: Move a few shell functions to the only script that uses them
    + RA: Add some extra variables dug out from configure
    + Build: No longer generate RAs now that there is a sane way to set directory locations and find binaries
    + RA: Move some helper files to their new names (.files dont show up as RAs)
    + OCF: Remove conversation from installed script
    + Build: Remove over-use of autoconf variables
    + RA: ServeRAID - remove commented out code
    + RA: prefer the 'test' program rather than the builtin for some reason
    + RA: Use consistent check for required binaries
    + OCF: Remove unused variables
    + configure: Remove unneeded AC_PATH_PROGS checks
    + RA: Convert a number of checks for required binaries
    + OCF: Fixed the check in have_binary. Handle checks for programs with --arguments
    + RA: IPaddr2 - Remove bash-isms
    + RA: IPaddr2 - handle IP_CIP not being defined
    + Build: Fix installation of .ocf-returncodes to its legacy location
    + Build: Remove generated file from EXTRA_DIST
    + Admin: crm_resource - remove an overly simplistic check for when -C can safely be used
    + Contrib: dopd - Fix usage of crm_log_init() by code that shouldn't be using it
    + OCF: Minor builddir v. srcdir adjustment after recent tidy-up
    + OCF build: 'export PATH=...' is Bash; convert to Bourne
    + RA: v1: IPaddr: Unconditionally enabling LVS support is a mistake.
    + OCF definitions: correct minor typo in recent re-ordering
    + [LDIRECTORD] Add OCF wrapper
    + [DEBIAN] Add the ldirectord OCF resource to the ldirectord package
    + [BUILD] the clean target shouldn't die if files are missing
    + [DEBIAN] Update heartbeat package to reflrect the new location of ptest
    + [DEBIAN] Add new dot-ocf files to the heartbeat package
    + CTS: (minor): autoconfiscate a pathname
    + Admin: Allow crm_diff to operate on compressed inputs
    + CRM: Only detect timeout changes for recurring ops
    + pingd: Hard code the name used for logging
    + CTS: Formatting - tabs->spaces
    + CTS: Rewrite the LSB script as a proper wrapper for the OCF Dummy RA
    + OCF: Detect and warn of use of deprecated 'ocf-shellfuncs' and 'ocf-returncodes'.
    + Restored a missing file from configure.in.  Must have been deleted by accident.
    + PE: NoRoleChange shouldn't always call PromoteRsc for master resources
    + PE: Use master scores to determine which clones to start where
    + configure: Generate heartbeat/shellfuncs again.
    + Fix build - add ha_logger to Debian, fix ha_logger installation.
    + configure.in: Further fix NOARCHLIBHBDIR setting.
    + stonith riloe: fix the xml info.
    + CRM: Clean up processes left over by crm_abort().  Initial patch by DAIKI MATSUDA
    + Build: cvsignore maintenance
    + Removed a line I had to add earlier.  Maybe we had a non-obvious merge conflict?
    + Fixed a syntax error in Filesystem:  missing then symbol
    + A little cleanup to make the RAs more uniformly not have $OCF_ROOT paths in them
    + BSC: Bash/Bourne detail
    + CTS: Improve a pathname construction.
    + heartbeat: tidy some error messages
    + OCF: The compatibility wrappers used to be located in libhbdir, not in
    + stonith riloe: another fix for the xml info.
    + stonith riloe: and yet another fix for the xml info (this one the last, promise).
    + Hopefully fixed a long-time SNMP annoyance.  When the membership layer shuts down (as it does in BSC),
    + RA: Filesystem: Unify coding style to match rest of script.
    + LRM plugins: skip dot-files.
    + ibmrsa: fix the xml info.
    + BSC: 'trap' had been continuing instead of exiting
    + Fix location of pingd binary
    + ibmrsa: allow regular users to use it with 'stonith -n' and similar.
    + shellfuncs: 's%:.:%' should be 's%:.:%:%'; the '.' should be '\.'
    + RA: LSBDummy - Make sure the action is passed to ra_execocf
    + DTD: Add helpful comment regarding rsc_colocation objects
    + CRM: Fix matching of objects with an ID when the match-spec has no ID
    + crmd: No need to log this under normal circumstances
    + Corrected a typo which only matters on 32-bit machines :-(	
    + Corrected so that on *BSD it passes in 2 parameters, instead of 2.	
    + log: avoid handing a null pointer as a '%s' variable	
    + PE: Correct the CRM_CHECK comparision	
    + stonith external/riloe: new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).	
    + RA: Dummy: Just add a comment to make sure people copying from this	
    + OCF: minor Bash/Bourne issue	
    + PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts	
    + remove is_stable() condition from drbd-outdate-peer daemon	
    + import /bin/sh fix from David Lee	
    + Pulled over a change from dev branch
    + Corrected a typo which only matters on 32-bit machines :-(
    + Corrected so that on *BSD it passes in 2 parameters, instead of 2.
    + log: avoid handing a null pointer as a '%s' variable
    + PE: Correct the CRM_CHECK comparision
    + stonith external/riloe: new comment in the xml on how acpid may affect the performance (thanks to Guy Coates).
    + RA: Dummy: Just add a comment to make sure people copying from this
    + OCF: minor Bash/Bourne issue
    + PE: Fix the handling of remove-after-stop=true - it was causing unnecessary restarts
    + remove is_stable() condition from drbd-outdate-peer daemon


