# changelog

author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.1
changelog:
  - latest Xpm patches: CAN-2004-0914 (#134631)
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library (#134631)


author: Thomas Woerner <twoerner@redhat.com> 2.1.30-11.RHEL4.2
changelog:
  - allow to write XPM files with absolute path names again (#140815)
  - new patch for tmpnam in imake (only used for build)


author: - Benjamin Otte <otte@redhat.com> - 0.8.5-1.EL.4
changelog:
  - Add patches for CVE-2011-2911, CVE-2011-2912, CVE-2011-2913, CVE-2011-2914
    and CVE-2011-2915
  Related: rhbz #730997


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.135
changelog:
  - Avoid false warning on shared objects bfd close on ia64 (BZ 200402).
  - Bugfix segv on the source display by ^X 1 (fixes Patch130, BZ 200048).
  - Bugfix object names completion (fixes Patch116, BZ 193763).
  - Avoid crash of 'info threads' if stale threads exist (BZ 195429).
  - Fix occasional failure to load shared libraries (BZ 202682).
  - Fix exec() from threaded program, partial CVS backport (BZ 202689).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.137
changelog:
  - Support TLS symbols for -lpthread programs w/o -debuginfo package (BZ 185337).
  - Suggest TLS `errno' resolving by hand if no -lpthread was found (BZ 185337).


author: Jan Kratochvil <jan.kratochvil@redhat.com> - 6.3.0.0-1.143
changelog:
  - Fix unhandled race cases of exec() from threaded program (BZ 202689).
  - Add testcase for exec() from threaded program (BZ 202689).


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - fix korean #79977
  - add new less.sh from #89780, s/ko/korean/ and write .csh script
  - add patch from #91661: /japanses/japanese-euc/


author: Ivana Varekova <varekova@redhat.com> 382-4.rhel4
changelog:
  - fix problem with vt100-nav terminal (#136266)
  - fix problem with less with tcsh's shell and printexitvalue=1
    (#186931)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Tom Lane <tgl@redhat.com> 4.1.20-2.RHEL4.1.0.1
changelog:
  - Fix CVE-2007-3780: remote DOS via bad password length byte
  Resolves: #257621
  - Workaround for new gcc bug on ia64: it locks up while compiling sql_table.cc


author: Christopher Aillon <caillon@redhat.com> 37:1.7.12-1.4.1
changelog:
  - Update to 1.7.12, containing fixes for:
    CAN-2005-2701 CAN-2005-2702 CAN-2005-2703 CAN-2005-2704
    CAN-2005-2705 CAN-2005-2706 CAN-2005-2707 CAN-2005-2968


author: Johnny Hughes <johnny@centos.org> 2.13-9.centos4
changelog:
  - Fixed a hang in ypserv caused by a calling non-reentrant function
    inside of a signal handler (RH bugzilla #184405) by rolling a in a new
    ypserv-2.13-dns-lookup.patch from RH bugzilla #184405.


author: Steve Grubb <sgrubb@redhat.com> 0.9.16-1.EL4
changelog:
  - Adjust umask
  - Adjust length of strings for file system watches to not include NUL
  - Remove extra error message from audit_send


author: Steve Grubb <sgrubb@redhat.com> 0.9.17-1.EL4
changelog:
  - Fix ausearch buffers to hold long filenames
  - Make a0 long long for 64 bit kernels & 32 bit ausearch


author: Steve Grubb <sgrubb@redhat.com> 0.9.20-1.EL4
changelog:
  - Fix ausearch to handle missing audit log better
  - Fix auditctl blank line handling
  - Trim trailing '/' from file system watches in auditctl
  - Catch cases where parameter was passed without option being given to auditctl
  - Add CAPP sample configuration


author: Jason Vas Dias <jvdias@redhat.com> 3.0.1-33_EL
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings            
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.115
changelog:
  - Change dwarf2 frame identifiers to use the actual PC instead of the
  function's entry point.
  - Fix FSF and GDB contact addresses in new testcases.
  - Do not try to compile x86_64-only CFA testcase on 32-bit x86.
  - Change prelink test to issue untested instead of warning message if
  system libraries are not prelinked.


author: Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.119
changelog:
  - Fix regression in PIE debugging (BZ 133944) (re?)introduced by the
  prelink fix (BZ 175075, BZ 190545).  Improve testcase for the prelink
  fix.
  - Revert dwarf2 frame identifier change.


author: Stepan Kasal <skasal@redhat.com> - 6.3.0.0-1.123
changelog:
  - Use fopen64 where available.  Fixes BZ 178796, BZ 190547.
  - Use bigger numbers than int.  Fixes BZ 171783, BZ 179096.


author: Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.128
changelog:
  - Avoid race conditions caused by exceptions messing with signal masks.
  (BZ 175270, BZ 175083, maybe BZ 172938).
  - Hardcode /bin and /usr/bin paths into gstack (BZ 179829, BZ 190548).
  - Build in a subdir of the source tree instead of in a sibling directory.
  - Switch to versioning scheme that uses the same base revision number
  for all OSes, and uses a suffix to tell the builds apart and ensure
  upgradability.


author: Alexandre Oliva <aoliva@redhat.com> - 6.3.0.0-1.130
changelog:
  - Rewrite patch for BZ 175270, BZ 175083 so as to catch the exception
  earlier.
  - Remove too-fragile testcases from patches for CFA value and "S"
  augmentation.


author: Steve Dickson <SteveD@RedHat.com> 2.12a-16.EL4.3
changelog:
  - Made NFS mounts adhere to the IP protocol if specified on
    command line as well as made NFS umounts adhere to the
    current IP protocol. Fix #140016


author: Elliot Lee <sopwith@redhat.com> 2.12a-16.EL4.6
changelog:
  - Revert patches 162-164 that were rejected for RHEL4
  - Fix swap partition header format to not clobber reserved space (fixedswaplabel patch)


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-23.RHEL4
changelog:
  - Updated to latest source (tO_4_5_post66)
  - Added cciss device support
  - added tpc checker.
  - Resolves: bz #247891, #242724, #242097, #235081, #231244


author: Soren Sandmann <sandmann@redhat.com> - 2.8.6-2.12
changelog:
  - Add patch to get rid of crossing events in
    sloppy-focus/no-raise-on-click mode. RHEL 4.6.
    Resolves: #184143, #236207


author: Milan Broz <mbroz@redhat.com> - 2.02.27-2.el4_6.2
changelog:
  - Fix a segfault if using pvs with --all argument.
  - Fix vgreduce PV list processing not to process every PV in the VG.
    Resolves: #427382


author: Karel Zak <kzak@redhat.com> 2.12a-17.el4_6.1
changelog:
  - fix #324441 - CVE-2007-5191 util-linux (u)mount doesn't drop
  		privileges properly when calling helpers


author: Ondrej Vasik <ovasik@redhat.com> 2.5-15.el4
changelog:
  - BuildRequires: rsh (gcc compiler option -DHAVE_NETDB_H=1 brew
    fallback is causing rsh unfunctionality) - #238862


author: Ondrej Vasik <ovasik@redhat.com> 2.5-16.el4
changelog:
  - change multiple archive fix in 2.5-14.el4 (bz#253917)
    (now the code is ifdef'd instead of removed to prevent possible
     regressions and could be deactivated by rebuilding from srpm
     with multitape 1)


author: Peter Vrabec <pvrabec@redhat.com> 2:4.0.3-66.RHEL4
changelog:
  - improve the patch that fix infinitive loop if there are 
    duplicate entries in /etc/group
  - Resolves: rhbz#444107 rhbz#240915


author: Ian Kent <ikent@redhat.com> - 1:4.1.3-235.2
changelog:
  - Bug 453999 - autofs not unmounting idle mounts
    - correct pointer reference in walk_tree().
  - Related: bz#453999


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-235.4
changelog:
  - Fix a race in the multi-map lookup code (Jeff Moyer)
  - Fix problem detecting localhost with multiple nics (Ian Kent)
  - Document the -null map (Jeff Moyer)
  - Resolves: bz#466044 bz#476767 bz#436060


author: Jeff Moyer <jmoyer@redhat.com> - 1:4.1.3-236
changelog:
  - Build the 4.8 release candidate package.
  - Related: bz#452202 bz#466044 bz#47676 bz#436060 bz#466040 bz#453999 bz#465237


author: Ian Kent <ikent@redhat.com> - 1:4.1.3-240
changelog:
  - eliminate redundant DNS name lookups
  - use lstat() on expire check.
  - Resolves: bz#500673 bz#623170


author: Jeff Johnson <jbj@jbj.org>
changelog:
  - bump micro version.
  - make peace with libtool-1.5.10 and automake-1.9.3.
  - python: add python 2.4 support.
  - selinux: use rpm_execcon, not execv, to run scriptlets (#136848).
  - fix: segfault on --verifydb (#138589).


author: Jeff Johnson <jbj@redhat.com> 4.3.3-5_nonptl
changelog:
  - fix: avoid computing md5 digest on sparse /var/log/lastlog file.
  - fix: do not optimize /sbin/ldconfig execution, always run (#139233).


author: Martin Stransky <stransky@redhat.com> 0.17-19.RHEL4
changelog:
  - fix #144933 (bootparamd does not return the right line from /etc/bootparams)
  - new parameter "-l" can exclude dns lookup during host search


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Tom Lane <tgl@redhat.com> 5.0.17-1.el4s1.1
changelog:
  - Revert to 5.0.17 for compatibility with the 5.0.17c "certified" server
    executables that we have now decided to ship.  The rest of the package
    is still built from source in the normal way, but we plug in the mysql
    executable as a binary blob.  Note loss of SSL functionality.


author: Tom Lane <tgl@redhat.com> 5.0.30-1.el4s1.1
changelog:
  - Update to MySQL 5.0.30 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  - Fix init script to return status 1 on server start timeout
  Related: #203910
  - Move mysqldumpslow from base package to mysql-server
  Related: #193559
  - Adjust link options for BDB module
  Related: #199368


author: Miloslav Trmac <mitr@redhat.com> - 1:4.1.20-7.el4.3
changelog:
  - Remove the remaining "G" and "M" size qualifiers from the find(1) man page
    (#149176)
  - Fix xargs -[EIL] (#199424)


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-1
changelog:
  - Fix VG clustered read locks to use PR not CR. 
  - Adjust some alignments for ia64. 
  - Fix mirror segment removal to use temporary error segment.


author: Alasdair Kergon <agk@redhat.com> - 2.02.17-1
changelog:
  - Add missing pvremove error message when device doesn't exist.
  - When lvconvert allocates a mirror log, respect parallel area constraints.
  - Check for failure to allocate just the mirror log.
  - Support mirror log allocation when there is only one PV: area_count now 0.
  - Fix detection of smallest area in _alloc_parallel_area() for cling policy.


author: Mark McLoughlin <markmc@redhat.com> 2.8.0.1-1.1
changelog:
  - Don't hang with metacity's "reduced resources" mode (#134240) 
  - Improve the key repeat rate situation a good deal (#134451)


author: Tru Huynh <tru@centos.org> - [2.6.9-89.0.25]
changelog:
  - rolled in standard centos changes (build for i586, change genkey to genkey.centos )
  - bugs.centos.org#3976 fixed


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.13]
changelog:
  -add 'panic_on_unrecovered_nmi' proc setting (Linda Wang) [186141]
  -OProfile: Support model 4 P4 (Jeff Burke) [176601]


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.14]
changelog:
  -SELinux: mls filesystem security labeling compatibility (James Morris) [177439]
  -fix PPR negotiation in sym53c8xxx_2 driver (Jeff Layton) [180366]
  -fix speed of diskdump on the CPU0 is slow (Nobuhiro Tachino) [177959]
  -make scheduler multi-core aware (Ingo Molnar,Geoff Gustafson ) [182128]
  -fix speedstep for constant TSC on new processors (Geoff Gustafson) [182140]
  -diskdump: dump memory with a swap partition whose size is less than memory size (Akira Imamura) [175854]
  -Correctly ignore expired IPv6 default routes (Thomas Graf) [180621]
  -Fix Linux zero IP ID vulnerability (Thomas Graf) [186057] {CVE-2006-1242}
  -Fix small information leak in SO_ORIGINAL_DST (Thomas Graf) {CVE-2006-1343}
  -Fix netfilter do_replace() overflow (Thomas Graf) {CVE-2006-0038}


author: Jason Baron <jbaorn@redhat.com> [2.6.9-34.15]
changelog:
  -fix build break when CONFIG_4KSTACKS=n (Neil Horman) [165113]
  -correct dpt_i2o proc_info oops (Don Howard) [180400]
  -e100: update to 3.5.10-k2 (John Linville) [180912]
  -s390: fix lost timer interrupts (Jan Glauber) [172418]
  -s390: fix cio path recovery (Jan Glauber) [175350]
  -s390: qdio: remove duplicate timeout (Jan Glauber)
  -enable lapic and i/o apic for UP kernels (Konrad Rzeszutek) [168584]


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.16]
changelog:
  -fix Tar with verify (-W) gives 'Cannot seek: Illegal seek' error (Peter Staubach) [174522]
  -autofs4: fix race between mount/expire (Jeff Moyer) [175778]
  -fix netconsole to emit proper message to trigger netdump-start script on server (Neil Horman) [177628]
  -Enable DMA on SGI CDROMs (Prarit Bhargava)
  -ia64: irq sharing (Jim Paradis) [170266]
  -Resolve incorrect IPMI generator ID (Peter Martuccelli) [174606]
  -revised x86_64 page tracking (Kimball Murray) [179696]
  -fix NFS cache consistency when a file is mmap'ed (Jeff Layton) [186142]
  -Keys: Fix oops when adding key to non-keyring (David Howells) [188466]


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.17]
changelog:
  -irq compression for x86/x86_64 (Jim Paradis) [168361]
  -x86_64: default gtod to tsc for Intel (Jason Baron)
  -Do not force softrepeat on certain keyboards (Pete Zaitcev) [181457]
  -Fix Direct IO deadlock for out of tree fs (Peter Staubach) [173586]
  -ramfs: update dir mtime and ctime (Peter Staubach) [183661]
  -fix ibmvscsi (Doug Ledford) [183502]
  -bnx2: update to 1.4.38 (John Linville) [182105]
  -tg3: update to 3.52-rh (John Linville) [174019 174470 180070 180081]
  -ia64: sn update (Prarit Bhargava) [183156]


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.18]
changelog:
  -fix possible DoS attack via nfsservctl (Peter Staubach) [183416]
  -fix ENOMEM errors when adding large numbers of netfilter rules (Jeff Layton) [182573]
  -nfsv4: fix oops resulting from incorrect propogation of nfsv4 specific errors to vfs (Neil Horman) [185306]
  -Bonding: Layer3+4 hashing support for XOR and 802.3ad modes (Andy Gospodarek) [168857]
  -Bonding: Stop reception of duplicate frames (Andy Gospodarek) [168857]
  -optimize fork() by not copying ptes that can be faulted in later (Adam Stokes) [185386]
  -VLAN initialization before interface link-up stops VLAN activation (Andy Gospodarek) [188087]
  -ppc64: System crash when kprobing conditional trap instructions (Anil Keshavamurthy) [188262]
  -fix race in net bonding driver (Kimball Murray) [188296]


author: Jason Baron <jbaron@redhat.com> [2.6.9-34.19]
changelog:
  -reorder timesource selection on x86 (Brian Maly) [172199]
  -emu10k1: add support for Sound Blaster Audigy 2 Value (John Linville) [154984]
  -sym53c8xx_2 - IGNORE WIDE RESIDUE (David Milburn) [167366]
  -fix and enable dcssblk driver (Jan Glauber) [180738]
  -iseries_veth: Fix bogus counting of TX errors (John Linville) [167372]
  -fix SRAT parser (Konrad Rzeszutek) [181895]
  -ppc64: fix invalid use of get_user() (Manoj Iyer) [171780]
  -fix lsof causes kernel oops under heavy load (Adam Stokes) [189260]
  -prevent anonymous page from being in an inconsistant state and crashing system (Larry Woodman) [171645]


author: Johnny Hughes <johnny@centos.org> [2.6.9-34.19.livecd]
changelog:
  - Using Urs Beyerle <urs.beyerle@psi.ch> [2.6.9-34.livecd] as an example
    from http://linux.web.psi.ch/livecd/
  - squashfs2.1-patch (Patch2888)
  - modify kernel-2.6.9-*.config via the spec file:
    add CONFIG_SQUASHFS=m
    add CONFIG_NTFS_FS=m CONFIG_NTFS_DEBUG=y CONFIG_NTFS_RW=y
  - modified to build only the UP kernel for the livecd


author: Johnny Hughes <johnny@centos.org> [2.6.9-34.19.livecd.2]
changelog:
  - Added reiserfs, xfs, other hardware from the centosplus kernel to
    the livecd kernel
  - Added the CONFIG_SQUASHFS=m CONFIG_NTFS_FS=m CONFIG_NTFS_DEBUG=y 
    CONFIG_NTFS_RW=y to the .config files and removed from spec.


author: Matthew Barnes <mbarnes@redhat.com> - 1.8.0-25.el4
changelog:
  - Disable the internal dependency generator.
  - Add patch for RH bug #215702 (bad search filter on LDAP queries).
  - Add patch for RH bug #217055 (crash on exit).
  - Add patch for RH bug #229658 (untranslated "Any Category").


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-2
changelog:
  - update to 2.8.9
  - only create compat symlinks for the dictionaries if we aren't installing
    them into the old locations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.8.9-1
changelog:
  - rebuild with a lower release number
  - move dictionaries from %{_datadir} back to %{_libdir} for RHEL


author: Nalin Dahyabhai <nalin@redhat.com> 2.8.9-1.1
changelog:
  - backport fix for checking for the existence of dictionaries when the caller
    specifies a location to the python binding (#225860, upstream #1644628)
  - add word list from attachment #126053 (#185314)


author: Marcela Maslanova <mmaslano@redhat.com> - 21.4.15-13.EL4
changelog:
  - blinking menu bar, backport from upstream
  - xemacs compilation problem fixed in spec
  - rebuilt (forgot apply patch in spec file)
  - Resolves: #426272, #172109


author: Daniel Novotny <dnovotny@redhat.com> - 21.4.15-14.EL4
changelog:
  - blinking menu bar solved by Olivier Fourdan, drop previous
    non-working patch, apply patch30 (metacity-maximize)
  - Related: #426272


author: Monty <cmontgom@redhat.com>
changelog:
  - Add patch to ignore FACT chunk in uncompressed files; 
    avoids blowing up on WAVE files with a corrupt FACT chunk 
    such as those being distributed by OOo.


author: Than Ngo <than@redhat.com> 3.3.3-13.RHEL4
changelog:
  - Resolves: #276991, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269101, Qt off by one buffer overflow, CVE-2007-4137


author: Johnny Hughes <johnny@centos.org> 0.14
changelog:
  - updated to new version 0.14
  - removed a spurious /usr/include with 2 perl searches in the build section
  - added BuildRequires for openssl-devel pkgconfig
  - moved the x86_64 package to /usr/lib64


author: Jason Vas Dias <jvdias@redhat.com> - 1:0.17-31
changelog:
  - bug 143929 / 145004 : fix race condition in telnetd on wtmp lock 
  - when cleanup() is entered from main process and in signal
  - handler


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-10
changelog:
  - apply patches to use Pango for printing addressbooks and calendars, fixing issues with non-Roman scripts (#138075)
  This introduces an ABI dependency on libgnomeprint >= 2.7.0; however this is dependency is already pulled in by the gtkhtml3 package


author: David Malcolm <dmalcolm@redhat.com> - 2.0.2-11
changelog:
  - Removed explicit run-time spec-file requirement on mozilla.
    The Mozilla NSS API/ABI stabilised by version 1.7.3
    The libraries are always located in the libdir
    However, the headers are in /usr/include/mozilla-1.7.10
    and so they move each time the mozilla version changes.
    So we no longer have an explicit mozilla run-time requirement in the specfile; 
    a requirement on the appropriate NSS and NSPR .so files is automagically generated on build.
    We have an explicit, exact build-time version, so that we can find the headers (without
    invoking an RPM query from the spec file; to do so is considered bad practice)
  - Introduced mozilla_build_version, to replace mozilla_version


author: Joe Orton <jorton@redhat.com> - 2.0.52-41.ent.7
changelog:
  - add security fix for CVE-2010-0434 (#572955)
  - mod_dav: don't delete the existing resource if a PUT fails (#572932)
  - mod_ssl: add SSLInsecureRenegotiation directive (#575805)
  - Require and BR sufficient openssl with secure reneg API


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.5-22.RHEL4
changelog:
  - Fix hardware defaults for IBM dasd and DS8000 and various HITACHI arrays
  - Added implicit alua support
  - Resolves: bz #231546, #233629, #238983, #239069, #240075


author: Benjamin Marzinski <bmarzins@redhat.com> -0.4.6-27.el4_6.1
changelog:
  - kpartx now reads from the config file /etc/kpartx.conf. If this file exists
    and has the config option consistent_suffix=yes, then kpartx will always
    use 'p' as the default suffix.
  - Resolves: bz #350231


author: Jiri Skala <jskala@redhat.com> 3.0.6-6
changelog:
  - Resolves: #358181 "lftp" disconnects FTP data connection if remote dir is found empty
  - Resolves: #433640 lftp - high cpu usage


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.13.1-4
changelog:
  - fix CVE-2009-4565 (#554987)
  - fix MAXHOSTNAMELEN (#485380)
  - fix stale files in mqueue upon DATA timeout (#434645)
  - add purge-mqueue script for cleaning stalled files from mqueue
  - regenerate op.ps
  - defuzzification of patches for clean apply


author: Ondrej Vasik <ovasik@redhat.com> 1.14-13.2
changelog:
  - CVE-2007-4476 - fix stack crashing in safer_name_suffix
  - CVE-2010-0624 - fix heap-based buffer overflow by expanding
    a specially-crafted archive


author: Adam Tkac <atkac redhat com> 0.4b39-5
changelog:
  - restore: don't segfault when restoring incremental backup (#557026)
  - restore: don't try set EAs when -N is specified (#568457)


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Dan Walsh <dwalsh@redhat.com> 0.1.14-1
changelog:
  - Apply Ronny Buchmann patch
  	system-config-netboot.glade has a wrong id for the kickstart file input.
  	pxeosdialog.py wants osKickstartEntry and produces a traceback later, 
  	because it didn't get a node for it.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-21_EL
changelog:
  - Fix bug 146073 - allow the 'pam_access' module to be used with
  - cron - set 'PAM_TTY' item to 'cron' .


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-22_EL
changelog:
  - Fix bug 147636 - disable silly mail recipient name checking 
  - (do_command.c's safe_p()) by default . Can be enabled by 
  - presence of CRON_VALIDATE_MAILRCPTS variable in crond's 
  - environment.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1.22_EL
changelog:
  - Add an /etc/sysconfig/crond file for containing CRONDARGS and
  - settings like CRON_VALIDATE_MAILRCPTS .


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-24_EL
changelog:
  - fix bug 151145: segfault if cronjob runs without any SELinux user 
  - security context (eg. in a broken chroot environment)


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-28_EL
changelog:
  - Required for EAL Audit certification: 
  - If pam_setcred should fail, the pam_session could fail to be
  - closed, leaving autofs user directories still mounted.


author: - Bastien Nocera <bnocera@redhat.com> - 0.15-10.2
changelog:
  - Add OpenOffice2 and OpenDocument types, patch from Olivier Fourdan
    <ofourdan@redhat.com>
  Related: rhbz #225339


author: Dan Walsh <dwalsh@redhat.com> 1.18.1-4.13
changelog:
  - Add back -e hanlding for restorecon
  - setfiles script was exiting too early
  Resolves: #244636
  Resolves: #250158


author: Rick Stout <zipsonic[AT]gmail.com> - 1.5.0-7.FC5
changelog:
  - added a section to %post that links /usr/X11R6/lib/X11 to /usr/share/X11
    which is needed for nxagent to function properly


author: Doug Ledford <dledford@redhat.com> - 1.0-3
changelog:
  - Add a modprobe conf file so that the mlx4 IB driver will get loaded after
    the core driver is loaded
  - Related: bz441825


author: - Chris Chabot <chabotc@xs4all.nl> - 3.0.10-3
changelog:
  - Renamed to php-pecl-apc and added provides php-apc
  - Removed php version string from the package version


author: Phil Knirsch <pknirsch@redhat.com> 1.22-3.el5.1
changelog:
  - Rebase to sg3_utils-1.22 (#194465)
  - Some required specfile and files section updates due to the rebase


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Yu Shao <yshao@redhat.com> 3.0.9-8
changelog:
  - patch for building package against freetype-2.1.7
  - from kanagawa jigorou (jigorou3@mail.goo.ne.jp) #114682


author: Peter Jones <pjones@redhat.com> - 10.1.1.58-1
changelog:
  - Fix installation of cached keymaps so we actually use them during
    buildinstall runs
    Resolves: #182325


author: Peter Jones <pjones@redhat.com> - 10.1.1.60-1
changelog:
  - Don't use the bootLoaderInfo drivelist to determine bootloader choices
    on zFCP-only zSeries machines (dcantrell)
    Resolves: #165098


author: Peter Jones <pjones@redhat.com> - 10.1.1.61-1
changelog:
  - Put the keymap for ppc with all the other keymaps, so it actually gets
    pulled in correctly.
    Related: #182325


author: Peter Jones <pjones@redhat.com> - 10.1.1.62-1
changelog:
  - Update the keymaps in our cache from ones generated on recent installs,
    so they won't be missing anything.
    Resolves: #229030


author: Dave Lehman <dlehman@redhat.com> - 10.1.1.63-1
changelog:
  - Allow graphical xen installs to proceed with no mouse
    Resolves: #229588
  - Add qla2400 to the list of drivers that get loaded later than ipr
    Resolves: #230644
  - Add support for IBM HEA devices
    Resolves: #225451


author: Dave Lehman <dlehman@redhat.com> - 10.1.1.63-2
changelog:
  - Fix rescue mode selinuxfs mount (#234137)
  - Add stex driver to module-info (#230214)
  - Actually create the /bin/echo symlink on all arches (#178781)
  - Detect FBA storage devices on zSeries 
    Resolves: #227913


author: Johnny Hughes <johnny@centos.org> - 10.1.1.63-4.centos4
changelog:
  - modified to include the centos anaconda spec file in the build as it is used
    in the build process (SOURCE1).
  - rolled in previous centos changes


author: Matthias Saou <http://freshrpms.net/> 5.1.x_0.9.3-0.1
changelog:
  - Update to 5.1.x compatible snapshot.
  - Will try to make re2c available in Extras in order to build require it.


author: Matthias Saou <http://freshrpms.net/> 5.1.x_0.9.5-0.2.beta2
changelog:
  - Rework heavily the API version requirement detection, should work with
    chroots builds where PHP isn't installed outside.
  - Replace the CC way of getting the API version with php -i output.


author: Matthias Saou <http://freshrpms.net/> 5.1.4_0.9.5-0.3.rc1
changelog:
  - Update to 0.9.5-rc1.
  - Enable shared-memory, sessions and content-caching (#201319).
  - Remove both patches of fixes, merged upstream.
  - Change from creating a full eaccelerator.ini to using the included one with
    path substitutions and a patch to change default values.


author: Matthias Saou <http://freshrpms.net/> 5.1.6_0.9.5-0.4.rc1
changelog:
  - Rebuild for PHP 5.1.6, eA still checks the exact PHP version it seems :-(
  - Put "Requires: php = %{php_version}" back to avoid broken setups if/when
    PHP gets updated.


author: Milan Broz <mbroz@redhat.com> - 2.02.36-1
changelog:
  - Update to latest upstream bugfix release.
  - Fix fsadm to work with older blockdev, blkid & readlink binaries.
  - Exclude VG_GLOBAL from internal concurrent VG lock counter.
  - Fix metadata corruption writing lvm1-formatted metadata with snapshots.
  - Fix lvconvert -m0 allocatable space check.        
    Resolves: #443839 #209927 #440405 #444355


author: Than Ngo <than@redhat.com> - 3.00-24.1
changelog:
  - Resolves: #639829
      CVE-2010-3702, uninitialized Gfx::parser pointer dereference
      CVE-2010-3704, array indexing error in FoFiType1::parse()


author: Harald Hoyer <harald@redhat.com> - 039-10.3.EL4
changelog:
  - fixed possible cause of bug 139989
  - added missing '"' in udev.rules for floppy devices (bug 139939)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Jay Fenlason <fenlason@redhat.com> 2.3.12-3
changelog:
  - build in HEAD for pre FC-2
  - merge from xinetd-3E-branch to fix bugzilla #103009
    also includes:
     New upstream version, which obsoletes most of my patches
     Remove /usr/share/man/man8/xconv.pl*  fixing #90730
     Remove the servers service, which was removed from 2.3.12
     Change localization: instead of using en_US in /etc/rc.d/init.d/xinetd
      (overriding the system default and preventing any customization),
      /etc/sysconfig/xinetd sets XINETD_LANG, which is either a locale to use
      or the word "none", which causes all locale environment variables to be
      cleared before xinetd is started.  This fixes #91403
        include post 2.3.12 patch from upstream (originally by
      Matthias Andree <ma+xi@dt.e-technik.uni-dortmund.de>) to add a new
      "libwrap" parameter.
      This closes bugs (#91555,#91135,#77724) by making xinetd's behavior
      documented and user-configurable.
     Removed the old libwrap/TCP/wait patch.  If anyone actually cares,
      they can add "flags = NOLIBWRAP" to the configuration of TCP/wait
      services to get the old behavior.
     Mark /etc/sysconfig/xinetd as a config file in xinetd.spec
     Add pie support


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - use new technology to filter python dep for inetdconvert instead
    of changing the -x bit on file permissions


author: Jay Fenlason <fenlason@redhat.com> 2.3.13-1
changelog:
  - Upgrade to new upstream version, which obsoletes most patches.
  - Add new tcp_rpc patch, to turn on the nolibwrap flag on tcp rpc services,
    since libwrap cannot be used on them.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add patch to allow multiple rpc services to cooexist as long as they're
    different program numbers or different versions.


author: Jay Fenlason <fenlason@redhat.com> 2:2.3.13-4.4E
changelog:
  - Added patch from Glen Johnson <gjohnson@austin.ibm.com>
    (as modified by Steve Grubb for inclusion upstream)
    to prevent the msg functions from using one of the standard
    file descriptors (stdin, stdout, stderr).  This closes bz#140084


author: Jay Fenlason <fenlason@redhat.com> 2:2.3.13-4.4E.1
changelog:
  - Add one-line patch to close
    bz#158754 CRM#526424 xinetd consuming all system resources S/390
  - Remove duplicate line for /etc/sysconfig/xinetd from this spec file.


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-60
changelog:
  - fix bug 131510: no_export env. var. blacklisting should not
  - remove 'SHELL' when only 'SHELLOPTS' is blacklisted.
  - at(1) man-page should not say 'commands are run with /bin/sh'
  - and should explain usage of SHELL environement variable and
  - details of blacklisted variables.


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-68
changelog:
  - Put PAM authentication check in 'check_permissions()', so
  - user can know when using at(1) if PAM permission is denied.


author: Jason Vas Dias <jvdias@redhat.com> 3.1.8-78
changelog:
  - fix bug 159220: add pam_loginuid to pam session stack in /etc/pam.d/atd 
  - fix bug 102341: add '-r' synonym for '-d' / atrm for POSIX / SuS conformance


author: Dan Walsh <dwalsh@redhat.com> 1.18.1-4.1
changelog:
  - backport restorecon and fixfiles from rawhide. to eliminate bad warning 
  - messages and fix handling of rpm files in fixfiles


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-2
changelog:
  - Capitalized first letter of Summary in devel section to quiet rpmlint
  - Added dbh-devel to BuildRequires
  - Capitalized the GTK in the Summary to queit rpmlint
  - Moved all the module *.a and *.la libraries to the devel package
  - Added Provides: libxfcegui4-devel to devel package


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix Tux crash if restarted with live connections that are in a particular
    state. (#140916)
  - Fix regression introduced by the recent CMSG security fixes. (#143975)
  - Various vm tuning to prevent possibility of OOM kill. (#141173)
    - Lower dirty limit for mappings which can't be cached in highmem
    - Don't oomkill when congested
    - Increment total_scanned var to throttle kswapd
  - Prevent panic with CD errors.
  - Enable SL82C104 IDE driver as built-in on PPC64 (#131033)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix flaws in IGMP code (CAN-2004-1137) (#142670)
  - Fix several corner cases in the 4g4g patch. (#144131, #144658)
  - Fix do_brk priveledge escalation. (CAN-2004-1235) (#144136)
  - Fix insuffient locking in DRM code. (CAN-2004-1056) (#144391)
  - Fix RLIMIT_MEMLOCK bypass and unpriveledged user DoS. (#144528)
  - Fix random poolsize sysctl handler integer overflow. (#144532)
  - Fix SCSI IOCTL integer overflow and information leak. (#144522)


author: Dave Jones <davej@redhat.com>
changelog:
  - Drop the deprecated SG_IO warning. (#141390)
  - Close information leak in sysenter (#146083)
  - Fix race in expand stack (CAN-2005-0001) (#144412)


author: Dave Jones <davej@redhat.com>
changelog:
  - Fix shmctl SHM_LOCK perms. (#144471)
  - Various fixes from 2.6.10-ac (#146095, #146101)
  - OOM-killer tweak.


author: Dave Jones <davej@redhat.com>
changelog:
  - Numerous security issues.
    Signedness issues in sysfs (CAN-2005-0867)
    ia64 ptrace stack unwind local DoS (CAN-2005-0135)
    NFSD O_DIRECT flaw (CAN-2005-0207)
    IP output route leak. (CAN-2005-0209)
    PPP Denial of service. (CAN-2005-0384) (#151240)
    EXT2 information leak. (CAN-2005-0400)
    Remote oops in ip_defrag() (CAN-2005-0449)
    Various size_t flaws (CAN-2005-0529, CAN-2005-0530, CAN-2005-0531)
    return proper error on overflow condition in epoll. (CAN-2005-0736)
    Incorrect kfree in ELF loader. (CAN-2005-0749)
    Missing range checks in bluetooth. (CAN-2005-0750)
    Race in Radeon DRM (CAN-2005-0767)
    Various missing sanity checks in isofs. (CAN-2005-0815)
    Only root should be able to set the N_MOUSE line discipline. (CAN-2005-0839)


author: Pasi Pirhonen <upi@iki.fi>
changelog:
  - added support for i586 kernel
  - modified version to build with the same number as RHEL-4
  - modfied generated key to say CentOS vice RedHat.
  - restored the kernel-source build
  - enabled JFS
  - enabled XFS
  - fix the rx1600 console=ttySO w/o MP
  - rx1600: linux-2.6.9-EC-ia64-early-uart.patch
  - rx1600: linux-2.6.9-EC-ia64-move-hcdp-pcdp-to-early-uart-console2.patch
  - Enabled the ppc32 build (w/SMP)
  - enabled CONFIG_SERIAL_8250_CONSOLE for ppc32


author: Tru Huynh <tru@centos.org> - kernel-vm [2.6.9-55.0.9]
changelog:
  - removed the vm in the release name
  - removed the doc target (ExcludeArch: noarch)
  - added vm configs (plain copies of to the non vm target)
  - 100Hz patch from Akemi from vmware guest kernels (Akemi Yagi <amyagi@gmail.com>)
  - signmodules reverted to 1
  - no xen building


author: Karsten Hopp <karsten@redhat.de> 2.7-8
changelog:
  - use included sl_fts.h, fix handling of large files (#105950)
  - use one single file to configure updatedb (#112964)


author: Aristeu Rozanski <arozansk@redhat.com> 0:0.7.4_3-EL4.2
changelog:
  - Improving 10-wacom.rules to create symbolic links named after the tablet
    model and unique names based in model and USB port.


author: Nalin Dahyabhai <nalin@redhat.com> 226-20.0.0.1
changelog:
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#439775)


author: Nalin Dahyabhai <nalin@redhat.com> 226-20.0.0.3
changelog:
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#439775)


author: Nalin Dahyabhai <nalin@redhat.com> 226-22
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#439775)


author: Adrian Likins <alikins@redhat.com> 4.4.63-4
changelog:
  - rest of fix for #169880 up2date --arch updates primary arch if package is out of date instead of arch specified.
  - even better fix for #178261 "Invalid function call attempted" when installing a RHN proxy


author: Bret McMillan <bretm@redhat.com> 4.4.65-3
changelog:
  - fix for #176195 "up2date-nox --configure changes current value of numeric attribute to Yes/No if 1/0 is selected"


author: Adrian Likins <alikins@redhat.com> 4.4.67-3
changelog:
  - fix for #179110 - up2date fails to update xerces-j
  - more fixed for #176195 "up2date-nox --configure changes current value of numeric attribute to Yes/No if 1/0 is selected"


author: Jakub Jelinek <jakub@redhat.com> 3.4.6-11.el4_8.1
changelog:
  - fix libjava to avoid opening *.la/dlopening *.so files from current
    working directory or subdirectories thereof (#545670, CVE-2009-3736)


author: Jason Vas Dias<jvdias@redhat.com> - 2:7.1.2-1.fc6
changelog:
  - Upgrade to upstream version 7.1.2
  - fix bug 191433 - Split into -libs and -devel packages
    ( apply .spec file patch from Orion Poplawski <orion@cora.nwra.com> )
  - fix bug 194747 - fix BuildRequires for mock


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-4.fc6
changelog:
  - Remove Apple Public Source License licensed files from the tarball (they
    aren't used anyway since we aren't the Darwin OS, but the license language
    is problematic for people distributing the files regardless) (bz205998)
  - Fix up file conflicts for lam_build_info.h and lam_config.h (bz205218)


author: Doug Ledford <dledford@redhat.com> - 2:7.1.2-6.fc6
changelog:
  - Fix alternatives setup of mpi.conf in /etc/ld.so.conf.d so we find both
    sets of libs on multilib arches


author: Norm Murray <nmurray@redhat.com> 6.0.7.1-17.el4_6.1
changelog:
  - add fixes for CVE-2008-1096, CVE-2008-1097
  - update quantum memory patch that various CVEs depend upon
  - Add patch for CVE-2007-1797 (#235071)
  - Add patch for CVE-2007-4988 (#310081)
  - Add patch for CVE-2007-4985 (#310091)
  - Add patch for CVE-2007-4986 (#310121)
  Related: rhbz #411361


author: Bret McMillan <bretm@redhat.com> 4.4.60-4
changelog:
  - rebuild with fixes for:
  - fix #169293 -- up2date unable to download very large rpms
  - fix #177784 -- up2date gives error if select-all is checked
  - fix #177786 -- up2date unselects all pakcages if select-all is checked and user selects 'back'


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-3
changelog:
  - (#122817: libboost_*.so symlinks missing)
  - (#141574: half of the package is missing)
  - (#141617: bad patch boost-base.patch)


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-4
changelog:
  - (#142612: Compiling Boost 1.32.0 Failed in RHEL 3.0 on Itanium2) 
  - (#150069: libboost_python.so is missing)
  - (#141617: bad patch boost-base.patch)
  - (#122817: libboost_*.so symlinks missing)
  - Re-add boost-thread.patch.
  - Change boost-base.patch to show thread tags.
  - Change boost-gcc-tools.patch to use SOTAG, compile with dllversion.
  - Add symbolic links to files.
  - Sanity check can compile with gcc-3.3.x, gcc-3.4.2, gcc-4.0.x., gcc-4.1.x.


author: Tim Waugh <twaugh@redhat.com> 6.0.7.1-4
changelog:
  - The devel subpackage requires XFree86-devel (bug #126509).
  - Fixed build requirements (bug #120776).  From Robert Scheck.


author: Marek Kasik <mkasik@redhat.com> - 2.8.2-7.7.2.el4_8.7
changelog:
  - Add gpdf-2.8.2-CVE-2010-3702.patch
      (Properly initialize parser)
  - Add gpdf-2.8.2-CVE-2010-3704.patch
      (Fix crash in broken pdf (code < 0))
  - Resolves: #639831


author: Miloslav Trmac <mitr@redhat.com> - 1.0.3-2
changelog:
  - Update to 1.0.3 (fixes #128834)
  - s/Copyright/License/
  - Add logrotate config file (#110677, from Michal Jaegermann)
  - Don't verify contents of /var/log/acpid (#125862)
  - Use $RPM_OPT_FLAGS
  - Fix and cleanup acpid-1.0.1-pm1.patch
  - Add condrestart to %postun


author: Kevin Fenzi <kevin@tummy.com> - 4.2.0-2
changelog:
  - Fixed to use /usr/lib/rpm/redhat/find-lang.sh /var/tmp/xfce4-toys-4.2.3-1.c4-root-buildcentos
  - Removed generic INSTALL from %doc
  - Fixed case of Xfce


