# changelog

author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2725.el5]
changelog:
  - Duplicate dput in sysfs_update_file can cause a panic. (Prarit Bhargava) [209454] 
  - Lock issue with 2.6.18-1.2702.el5, NetworkManager and ipw3945 (John W. Linville) [208890] 
  - cpqarray module fails to detect arrays (Chip Coldwell) [205653] 
  - stex.c driver for Promise SuperTrak EX is missing (Jeff Garzik) [209179] 
  - NetLabel does not audit configuration changes (Eric Paris) [208456] 
  - NetLabel has a race problem in the cache (Eric Paris) [209324] 
  - kernel/lockdep.c:1814/trace_hardirqs_on() (Not tainted) for APM (Peter Zijlstra) [209480] 
  -  correct netlabel secid for packets without a known label (Eric Paris) [210032] 
  - IPSec information leak with labeled networking (Eric Paris) [209171] 
  - NetLabel hot-add memory confict pre-beta2 kenrel x86_64 (Konrad Rzeszutek) [208445] 
  - NFS data corruption (Steve Dickson) [210071] 
  - kernel dm multipath: ioctl support (Alasdair Kergon) [207575] 
  - kernel dm: fix alloc_dev error path (Alasdair Kergon) [209660] 
  - kernel dm snapshot: fix invalidation ENOMEM (Alasdair Kergon) [209661] 
  - kernel dm snapshot: chunk_size parameter is not required after creation (Alasdair Kergon) [209840] 
  - kernel dm snapshot: fix metadata error handling (Alasdair Kergon) [209842] 
  - kernel dm snapshot: fix metadata writing when suspending (Alasdair Kergon) [209843] 
  - kernel dm: full snapshot removal attempt causes a seg fault/kernel bug (Alasdair Kergon) [204796] 
  - dm mirror: remove trailing space from table (Alasdair Kergon) [209848] 
  - kernel dm: add uevent change event on resume (Alasdair Kergon) [209849] 
  - kernel dm crypt: Provide a mechanism to clear key while device suspended (Milan Broz) [185471] 
  - kernel dm: use private biosets to avoid deadlock under memory pressure (Alasdair Kergon) [209851] 
  - kernel dm: add feature flags to structures for future kABI compatibility (Alasdair Kergon) [208543] 
  - kernel dm: application visible I/O errors with dm-multipath and queue_if_no_path when adding new path (Alasdair Kergon) [169302] 
  - refresh ia64-kexec-kdump patch (Don Zickus) 
  - update exec-shield patch (Don Zickus) 
  - revert x86 unwinder fixes (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2722.el5]
changelog:
  - update utrace patch to fix s390 build problems
  - ia64 hotswap cpu patch fixes to compile under xen
  - ia64 export fixes


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2718.el5]
changelog:
  - Audit Filtering on PPID for = and != is inverted (Eric Paris) [206425] 
  - Adding Hitachi SANRISE entries into SCSI white list (Chip Coldwell) [206532] 
  - forward port of SCSI blacklist from RHEL4 (Chip Coldwell) [208256] 
  - Need to add ALSA support for Broadwater platform (John W. Linville) [184855] 
  - /proc/<pid>/smaps doesn't give any data (Alexander Viro) [208589] 
  - ACPI based CPU hotplug causes kernel panic (Keiichiro Tokunaga) [208487] 
  - New infiniband 12x power driver opensourced from IBM (Janice Girouard) [184791] 
  - iscsi oops when connection creation fails (Mike Christie) [209006] 
  - nommconf work-around still needed for AMD chipsets (Jim Baker) [207396] 
  - ProPack XPMEM exported symbols (Greg Edwards) [206215] 
  - PCI error recovery bug in e100 and e1000 cards (John W. Linville) [208187] 
  - / on raid fails to boot post-install system (Jan Glauber) [196943] 
  - auditctl fails to reject malformed ARCH filter (Eric Paris) [206427] 
  - oom-killer updates (Larry Woodman) [208583] 
  - NFS is revalidating directory entries too often (Steve Dickson) [205454] 
  - kernel-xen cannot reboot (Stephen Tweedie) [209841] 
  - Unsupported FS's in RHEL 5 Beta 1 (Don Zickus) [206486]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2715.el5]
changelog:
  - RDTSCP Support (Bhavana Nagendra) [185057] 
  - s390 kprobe on larl instruction crashes system (Jan Glauber) [205738] 
  - single stepping is broken when kprobes is configured (Jan Glauber) [205739] 
  - autofs kernel patches resulting from Connectathon testing (Ian Kent) [206952] 
  - Include the qla3xxx networking driver (Konrad Rzeszutek) [208182] 
  - overzealous sanity checking in sys_poll() (Chris Snook) [204705] 
  - automounter cannot shutdown when timeout=0 (Ian Kent) [205836] 
  - Rewrite of journaling data commit code (Eric Sandeen) [207739] 
  - qla4xxx soft lockup when ethernet cable disconnected (Mike Christie) [206063] 
  - hypfs_kill_super() check for initialized root inode (Jan Glauber) [207717] 
  - The Matrox graphics driver is not built (Janice Girouard) [207200]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2714.el5]
changelog:
  - Wrong SELinux context prevents hidd from working (David Woodhouse) [204655] 
  - nfs connectathon component basic test 6 fails.... (Steve Dickson) [208637] 
  - unstick STICKY bit to fix suspend/resume (Dave Jones)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - s390 ccs/ccw subsystem does not have proper uevent support (Pete Zaitcev) [199994] 
  - 'Cannot allocate memory' when cat /proc/scsi/scsi (Chip Coldwell) [200299] 
  - Add support for Kirkwood and Kirkwood LP NICs (John W. Linville) [207776] 
  - remove userspace support from qla4xxx (Mike Christie) [206063] 
  - NetLabel interface has changed in the upstream kernels (Eric Paris) [208119] 
  - lockdep fixes (Peter Zijlstra) [208304 204795]


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Multiple routing tables for IPv6 (Thomas Graf) [179612] 
  -bunch of lockdep fixes (Peter Zijlstra) [200520 208294 208293 208292 208290] 
  -rearrange the cachefs patches for easier future maintance (Steve Dickson) 
  -enable some TCP congestion algorithms (David Miller) 
  -add a test patch (Eric Paris)


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Native SAS and SATA device support - SATA/IDE converter (Janice Girouard) [196336] 
  -kernel unaligned access messages in rhel5a1 (Prarit Bhargava) [198572] 
  -problems with LUNs mapped at LUN0 with iscsi and netapp filers (Mike Christie) [205802] 
  -ext3 fails to mount a 16T filesystem due to overflows (Eric Sandeen) [206721] 
  -possible recursive locking detected - swapper/1 (Peter Zijlstra) [203098] 
  -FS-Cache: error from cache: -28 (David Howells) [204614] 
  -aic94xx driver does not recognise SAS drives in x366 (Konrad Rzeszutek) [206526] 
  -Support for 3945 driver (John W. Linville) [195534] 
  -Memory Hotplug fails due to relocatable kernel patches (Vivek Goyal) [207596] 
  -Potential overflow in jbd for filesystems > 8T (Eric Sandeen) [208024] 
  -2,4-node x460 halts during bootup after installation (Konrad Rzeszutek) [203971]


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix PowerPC audit syscall success/failure check (#204927)
  - Remove offsetof() from <linux/stddef.h> (#207569)
  - One line per header in Kbuild files to reduce conflicts
  - Fix visibility of ptrace operations on ppc32
  - Fix ppc32 SECCOMP


author: Dave Jones <davej@redhat.com>
changelog:
  - reiserfs: make sure all dentry refs are released before
    calling kill_block_super
  - Fix up some compile warnings


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV printf rate limit (rostedt).
  - xen HV update to xen-unstable cset11540:9837ff37e354
  - xen-update:
    * linux-2.6 changeset:   34294:dc1d277d06e0
    * linux-2.6-xen-fedora changeset:   36184:47c098fdce14
    * xen-unstable changeset:   11540:9837ff37e354


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update to 2.6.18-rc7-git4.
    * linux-2.6 changeset: 34288:3fa5ab23fee7
    * linux-2.6-xen-fedora changeset: 36175:275f8c0b6342
    * xen-unstable changeset: 11486:d8bceca5f07d


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update:
    * linux-2.6 changeset: 34228:ea3369ba1e2c
    * linux-2.6-xen-fedora changeset: 36107:47256dbb1583
    * linux-2.6-xen changeset: 22905:d8ae02f7df05
    * xen-unstable changeset: 11460:1ece34466781ec55f41fd29d53f6dafd208ba2fa


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Implement futex primitives on IA64 and wire up [gs]et_robust_list again
    (patch from Jakub, #206613)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - add include/asm-x86_64/const.h to exported header file list
    used by the x86 relocatable patch (inside include/asm-x86_64/page.h)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - sync up beta1 fixes and patches
     - includes infiniband driver
     - aic9400/adp94xx updates
     - squashfs s390 fix
  - include x86 relocatable patch at end of list
  - some /proc/kcore changes for x86 relocatable kernel


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - 2.6.18rc7-git1
  - header file fixups
  - use correct arch for 'make headers_install' when cross-building


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xenoprof upstream fix.
  - update xen HV to cset 11394.
  - xen update (3hypercall incompatibility included)
  - linux-2.6 changeset: 34073:b1d36669f98d
  - linux-2.6-xen-fedora changeset: 35901:b7112196674e
  - xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29
  - fix ia64 (xen & net xen).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen-hv to cset 11256 (pre 3 hypercall breakage).
  - remove debug=y from HV compilation.
  - xen update (pre 3 hypercall breakage)
    * linux-2.6 changeset: 33957:421a6d428e95
    * linux-2.6-xen-fedora changeset: 35756:78332fcbe5b0
    * xen-unstable changeset: 11251:5fc1fe79083517824d89309cc618f21302724e29
    * get new irqflags code from linux-2.6.tip-xen.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen HV to xen-unstable cset 11251.
  - fix ia64 xen HV compilation.
  - linux xen kernel update:
    * linux-2.6 changeset: 33681:2695586981b9
    * linux-2.6-xen-fedora changeset: 35458:b1b8e00e7a17
    * linux-2.6-xen changeset: 22861:0b726fcb6780
    * xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29


author: Don Zickus <dzickus@redhat.com>
changelog:
  - update utrace
  - more gfs2-dlm fixes
  - fix xen-devel build directory issue
  - add x86, x86_64 relocatable kernel patch for rhel only (davej, forgive my sins)
    - applied xen relocatable cleanup on top of it
  - add ia64 kexec/kdump pieces


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update GFS2 patch (from swhiteho)
  - Enable kernel-headers build
  - Enable i386 build _only_ for kernel-headers


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Another lockdep-fix
  - NFS fix for the connectathon test
  - Enable mmtimer for ia64
  - Add support for iscsi qla4xxx


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen kernel update.
    * linux-2.6 changeset: 33525:dcc321d1340a
    * linux-2.6-xen-fedora changeset: 35247:400b0cf28ee4
    * linux-2.6-xen changeset: 22813:80c2ccf5c330
    * xen-unstable changeset: 11069:0340e579f06544431e915d17596ac144145a077e
  - xen big config update.  Every config option is the same than normal kernel
    except MICROCODE, TCG_TPM & CONFIG_DEBUG_SLAB.
  - disable XEN_FRAMEBUFFER & XEN_KEYBOARD.
  - make sysrq c to "crash" all kernels.


author: Don Zickus <dzickus@redhat.com>
changelog:
  - NFS 64-bit inode support
  - QLogic firmware
  - SELinux support for range transitions
  - EHEA ethernet driver
  - ppc irq mapping fix


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - Fix s390 single-step for real this time.
    - Revamp how arch code defines ptrace compatibility.


author: Dave Jones <davej@redhat.com>
changelog:
  - Update to squashfs 3.1 which should fix stack overflows seen
    during installation.
  - Merge framebuffer driver for OLPC.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable ia64 xen again.
  - xen kernel-update linux-2.6-xen-fedora cset 35236:70890e6e4a72.
    * fix ia64 compilation problems.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable ia64 xen, it doesn't compile.
  - xen HV update cset 11057:4ee64035c0a3
    (newer than that don't compile on ia64).
  - update linux-2.6-xen patch to fix sort_regions on ia64.
  - fix %setup for xen HV to work at xen HV upgrades.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV update cset 11061:80f364a5662f.
  - xen kernel update
    * linux-2.6-xen-fedora cset
    * linux-2.6-xen cset 22809:d4b3aba8876df169ffd9fac1d17bd88d87eb67c5.
    * xen-unstable 11060:323eb29083e6d596800875cafe6f843b5627d77b
    * Integrate xen virtual frame buffer patch.
    * Enable CONFIG_CRASH on xen.


author: Dave Jones <davej@redhat.com>
changelog:
  - Another lockdep fix for networking.
  - Change some hotplug PCI options.
  - Daily update from GregKH's git tree.
  - Unbreak SMP locking in oprofile.
  - Fix hotplug CPU locking in workqueue creation.
  - K8 EDAC support.
  - IPsec labelling enhancements for MLS
  - Netlabel: CIPSO labeled networking


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - fix s390 single-step
    - first third of ia64 support, enable CONFIG_UTRACE (no ptrace yet)


author: Juan Quintela <quintela@anano.mitica>
changelog:
  - Update linux-2.6-xen patch.
    * linux-2.6-xen-fedora cset 34931:a3fda906fb82
    * linux-2.6-xen cset 22777:158b51d317b76ebc94d61c25ad6a01d121dff750
    * xen-unstable cset  10866:4833dc75ce4d08e2adc4c5866b945c930a96f225


author: Jon Masters <jcm@redhat.com>
changelog:
  - Copy .config to include/config/auto.conf to avoid unnecessary "make prepare".
  - This should finally fix #197220.
  - Pulled in patch-2.6.18-rc3-git2.bz2.sign to fix SRPM build failure.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc3-git2
  - Readd patch to allow 460800 baud on 16C950 UARTs.
  - Fix backtracing for interrupt stacks


author: Dave Jones <davej@redhat.com>
changelog:
  - s390 kprobes support.
  - Fix oops in libata ata_device_add()
  - Yet more fixes for lockdep triggered bugs.
  - Merge numerous patches from -mm to improve software suspend.
  - Fix incorrect section usage in MCE code that blew up on resume.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable blktap for xen-ia64 (don't compile).
  - enable ia64-xen (it compiles, but still don't boot).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Update xen patch to linux-2.6-xen-fedora cset 34801.
  	* linux-2.6 cset 33175
  	* no linux-2.6-xen updates.
  - Remove xen x86_64 8 cpu limit.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - review all xen related patches.
  - x86_64 dom0, x86_64 domU and i386 domU should work.
  - fix xen i386 dom0 boot (#200382).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Workaround the huge timeouts problems on xen HV x86.
  - xen update and cleanup/reorgatization of xen patches.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc2-git2 & git3
  - Fix PI Futex exit crash.
  - Fix an inotify locking bug.
  - Add device mapper mirroring patches.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Patch from jakub to use sysv style hash for VDSO to fix booting
    on ia64 (#199634, #199595)
  - Fix e1000 crc calculation for things to work with xen
  - Update gfs2 patchset


author: Roland McGrath <roland@redhat.com>
changelog:
  - Clean up spec changes for debuginfo generation to cover Xen case.
  - New version of utrace patch, fixes /proc permissions. (#199014)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Add in support for nfs superblock sharing and cachefs
    patches from David Howells
  - Disable 'make prepare' hack as it is breaking ppc symlinks
  - Added tracking dirty pages patch from Peter Zijlstra
  - Fix for Opteron timer scaling
  - Fix for Calgary pci hang


author: Juan Quintela <quintela@redhat>
changelog:
  - big xen patch.
  - enable xen again.
  - redo xen config.
  - i686 kernel for xen uses PAE now.
  - new xen Hypervisor cset 10711.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Check in new version of kabitool for kernel deps.
  - Fix kabitool for correct location of symvers.
  - Various other fixes when things broke.


author: Dave Jones <davej@redhat.com>
changelog:
  - Support up to 4GB in the 586 kernel again.
  - Drop the FPU optimisation, it may be the reason for
    strange SIGFPE warnings various apps have been getting.


author: Dave Jones <davej@redhat.com>
changelog:
  - Cleaned up a bunch of bogons in the config files.
  - 2.6.18-rc1-git9,git10 & 2.6.18-rc2
  - improvements to linked list debugging.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Temporarily disable -headers subpackage until the problems which
    arise from brew not using older package are dealt with.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - No headers subpackage for noarch build
  - Fix PI-futexes to be properly unlocked on unexpected exit


author: Dave Jones <davej@redhat.com>
changelog:
  - Add sleazy fpu optimisation.   Apps that heavily
    use floating point in theory should get faster.


author: Dave Jones <davej@redhat.com>
changelog:
  - Add lockdep annotate for bdev warning.
  - Enable autofs4 to return fail for revalidate during lookup


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-git10 & git11
  - Enable fake PCI hotplug driver. (#190437)
  - Remove lots of 'modprobe loop's from specfile.


author: Dave Jones <davej@redhat.com>
changelog:
  - Enable profiling for 586 kernels.
  - 2.6.17-git6 & git7
    This required lots of rediffing. SATA suspend, Promise PATA-on-SATA,
    Xen, exec-shield, and more.  Tread carefully, harmful if swallowed etc.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen0/xenU/xen0-PAE/xenU-PAE packages
  - disable xen PAE kernel for i386 for now
  - create xen-PAE kernel
  - remove %requires xen from xen kernels


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Honza Horak <hhorak@redhat.com> 5.5.36-1
changelog:
  - Update to MySQL 5.5.36, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-36.html
    Including fixes for CVE-2014-0412, CVE-2014-0437, CVE-2013-5908,
    CVE-2013-5807, CVE-2014-0420, CVE-2014-0393, CVE-2013-5891,
    CVE-2014-0386, CVE-2013-3839, CVE-2014-0401, CVE-2014-0402,
    Resolves: #1055875


author: Honza Horak <hhorak@redhat.com> 5.5.32-2
changelog:
  - Fix text in mysql-readme-devel for RHEL-5
    Resolves: #975119
  - Fix misleading error message when uninstalling built-in plugins
    Resolves: #985402
  - Do not use pie linker flags, they don't work in RHEL-5
    Resolves: #985418


author: Honza Horak <hhorak@redhat.com> 5.5.32-1
changelog:
  - Update to MySQL 5.5.32, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-32.html
    Resolves: #975113
  - Use man pages from 5.5.30 due to license change
    Resolves: #975785
  - Fix issues found by Coverity
    Resolves: #975904


author: Honza Horak <hhorak@redhat.com> 5.5.31-10
changelog:
  - Fix service status for unprivileged user
    Resolves: #975117
  - Add README.mysql-devel to document how -devel package should be used
    Resolves: #975119


author: Honza Horak <hhorak@redhat.com> 5.5.31-4
changelog:
  - Fix reporting of service starting
    Resolves: #958098
  - Include mysqlhotcopy utility and -devel sub-package for building
    daemon plugins


author: Honza Horak <hhorak@redhat.com> 5.5.31-2
changelog:
  - Fix building with relro and PIE
  - Don't use SSL_OP_NO_COMPRESSION since it doesn't exist in openssl-0.9.8


author: Honza Horak <hhorak@redhat.com> 5.5.31-1
changelog:
  - Update to MySQL 5.5.31, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-31.html
  - Turn on hardened build


author: Honza Horak <hhorak@redhat.com> 5.5.30-6
changelog:
  - Spec file fixes found in Package Review #950053
  - Use log file prefixed by scl name and located in /var/log


author: Honza Horak <hhorak@redhat.com> 5.5.30-1
changelog:
  - Update to MySQL 5.5.30, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-30.html


author: Honza Horak <hhorak@redhat.com> 5.5.29-1
changelog:
  - Update to MySQL 5.5.29, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-29.html
  - Fix inaccurate default for socket location in mysqld-wait-ready
  Resolves: #890535


author: Honza Horak <hhorak@redhat.com> 5.5.28-5
changelog:
  - Add patch for CVE-2012-5611
  Resolves: #883642
  - Widen DH key length from 512 to 1024 bits to meet minimum requirements
    of FIPS 140-2
  Related: #877124
  - Use --no-backup-if-mismatch to prevent including backup files


author: Honza Horak <hhorak@redhat.com> 5.5.28-3
changelog:
  - Use a config file for specifying SCLS enabled when starting service
  - Changed way how patches are enhanced with SCL values
  - Fixed scl scripts path replacement
  - Create /var/lib/mysql for socket file
  - Use scl-service wrapper to fix systemd start issues


author: Honza Horak <hhorak@redhat.com> 5.5.28-2
changelog:
  - Re-enable SCLs after /sbin/service clears environment variables
  - Have socket file the same path as core mysql
  - Do not use systemd macros


author: Tom Lane <tgl@redhat.com> 5.5.28-1
changelog:
  - Update to MySQL 5.5.28, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-28.html
  - Clean up partially-created database files when mysql_install_db fails
  Related: #835131
  - Honor user and group settings from service file in mysqld-prepare-db-dir
  Resolves: #840431
  - Export THR_KEY_mysys as a workaround for inadequate threading support
  Resolves: #846602
  - Adopt new systemd macros for server package install/uninstall triggers
  Resolves: #850222
  - Use --no-defaults when invoking mysqladmin to wait for the server to start
  Related: #855704


author: Tom Lane <tgl@redhat.com> 5.5.27-1
changelog:
  - Update to MySQL 5.5.27, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-27.html


author: Tom Lane <tgl@redhat.com> 5.5.25a-1
changelog:
  - Update to MySQL 5.5.25a, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25a.html
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-25.html
  - Don't use systemd's Restart feature; rely on mysqld_safe instead
  Resolves: #832029


author: Tom Lane <tgl@redhat.com> 5.5.24-1
changelog:
  - Update to MySQL 5.5.24, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-24.html
    including the fix for CVE-2012-2122
  Resolves: #830680
  - Tweak logrotate script to put the right permissions on mysqld.log
  - Minor specfile fixes for recent packaging guidelines changes


author: Tom Lane <tgl@redhat.com> 5.5.23-1
changelog:
  - Update to MySQL 5.5.23, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-23.html


author: Tom Lane <tgl@redhat.com> 5.5.22-1
changelog:
  - Update to MySQL 5.5.22, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-22.html
  - Turn on PrivateTmp in service file
  Resolves: #782513
  - Comment out the contents of /etc/logrotate.d/mysqld, so that manual
    action is needed to enable log rotation.  Given the multiple ways in
    which the rotation script can fail, it seems imprudent to try to make
    it run by default.
  Resolves: #799735


author: Honza Horak <hhorak@redhat.com> 5.5.21-3
changelog:
  - Revise mysql_plugin test patch so it moves plugin files to
    a temporary directory (better solution to #789530)


author: Honza Horak <hhorak@redhat.com> 5.5.21-2
changelog:
  - Fix ssl-related tests to specify expected cipher explicitly
  Related: #789600
  - Fix several strcpy calls to check destination size


author: Tom Lane <tgl@redhat.com> 5.5.21-1
changelog:
  - Update to MySQL 5.5.21, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-21.html
  - Hack openssl regression test to still work with rawhide's openssl
  - Fix assorted failures in post-install regression tests (mysql-test RPM)
  Resolves: #789530


author: Tom Lane <tgl@redhat.com> 5.5.20-2
changelog:
  - Revise our test-disabling method to make it possible to disable tests on a
    platform-specific basis, and also to get rid of mysql-disable-test.patch,
    which broke in just about every upstream update (Honza Horak)
  - Disable cycle-counter-dependent regression tests on ARM, since there is
    not currently any support for that in Fedora ARM kernels
  Resolves: #773116
  - Add some comments to mysqld.service documenting how to customize it
  Resolves: #785243


author: Tom Lane <tgl@redhat.com> 5.5.20-1
changelog:
  - Update to MySQL 5.5.20, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html
    as well as security fixes described at
    http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
  Resolves: #783828
  - Re-include the mysqld logrotate script, now that it's not so bogus
  Resolves: #547007


author: Tom Lane <tgl@redhat.com> 5.5.19-1
changelog:
  - Update to MySQL 5.5.19, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-19.html


author: Tom Lane <tgl@redhat.com> 5.5.18-1
changelog:
  - Update to MySQL 5.5.18, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-18.html


author: Tom Lane <tgl@redhat.com> 5.5.17-1
changelog:
  - Update to MySQL 5.5.17, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
  - Get rid of version-number assumption in sysv-to-systemd conversion trigger


author: Honza Horak <hhorak@redhat.com> 5.5.16-4
changelog:
  - Don't assume all ethernet devices are named ethX
  Resolves: #682365
  - Exclude user definition from my.cnf, user is defined in mysqld.service now
  Resolves: #661265


author: Tom Lane <tgl@redhat.com> 5.5.16-2
changelog:
  - Update to MySQL 5.5.16, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-16.html


author: Tom Lane <tgl@redhat.com> 5.5.15-2
changelog:
  - Update to MySQL 5.5.15, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-15.html


author: Tom Lane <tgl@redhat.com> 5.5.14-2
changelog:
  - Remove make_scrambled_password and make_scrambled_password_323 from mysql.h,
    since we're not allowing clients to call those functions anyway
  Related: #690346


author: Tom Lane <tgl@redhat.com> 5.5.14-1
changelog:
  - Update to MySQL 5.5.14, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-14.html


author: Tom Lane <tgl@redhat.com> 5.5.13-1
changelog:
  - Update to MySQL 5.5.13, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-13.html


author: Tom Lane <tgl@redhat.com> 5.5.12-1
changelog:
  - Update to MySQL 5.5.12, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-12.html


author: Tom Lane <tgl@redhat.com> 5.5.10-3
changelog:
  - Add LSB init block to initscript, to ensure sane ordering at system boot
  Resolves: #703214
  - Improve initscript start action to notice when mysqladmin is failing
    because of configuration problems
  Related: #703476
  - Remove exclusion of "gis" regression test, since upstream bug 59908
    is fixed (for some value of "fixed") as of 5.5.10.


author: Tom Lane <tgl@redhat.com> 5.5.10-2
changelog:
  - Add my_make_scrambled_password to the list of symbols exported by
    libmysqlclient.so.  Needed at least by pure-ftpd.


author: Tom Lane <tgl@redhat.com> 5.5.10-1
changelog:
  - Update to MySQL 5.5.10, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-10.html
    Note that this includes a rather belated soname version bump for
    libmysqlclient.so, from .16 to .18
  - Add tmpfiles.d config file so that /var/run/mysqld is recreated at boot
    (only needed in Fedora 15 and later)
  Resolves: #658938


author: Tom Lane <tgl@redhat.com> 5.5.9-1
changelog:
  - Update to MySQL 5.5.9, for various fixes described at
    http://dev.mysql.com/doc/refman/5.5/en/news-5-5-9.html
  - Add %{?_isa} to cross-subpackage Requires, per latest packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.5.8-9
changelog:
  - Support s390/s390x in performance schema's cycle-counting functions
    (needed to make regression tests pass on these platforms)


author: Tom Lane <tgl@redhat.com> 5.5.8-8
changelog:
  - PPC64 floating-point differences are not masked by -ffloat-store after all,
    so let's just disable gis regression test till upstream makes it less picky
  Resolves: #674253
  - Add __perllib_requires setting to make rpm 4.9 do what we need


author: Tom Lane <tgl@redhat.com> 5.5.8-6
changelog:
  - Remove no-longer-needed special switches in CXXFLAGS, per yesterday's
    discussion in fedora-devel about -fexceptions.
  - Rebuild needed anyway to check compatibility with latest systemtap.


author: Tom Lane <tgl@redhat.com> 5.5.8-3
changelog:
  - my_print_help, load_defaults, free_defaults, and handle_options all turn
    out to be documented/recommended in Paul DuBois' MySQL book, so we'd better
    consider them part of the de-facto API.
  Resolves: #666728


author: Tom Lane <tgl@redhat.com> 5.5.8-1
changelog:
  - Update to MySQL 5.5.8 (major version bump).  Note this includes removal
    of libmysqlclient_r.so.
  - Add a linker version script to hide libmysqlclient functions that aren't
    part of the documented API.


author: Tom Lane <tgl@redhat.com> 5.1.52-1
changelog:
  - Update to MySQL 5.1.52, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
  Resolves: #646569


author: Tom Lane <tgl@redhat.com> 5.1.51-1
changelog:
  - Update to MySQL 5.1.51, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html


author: Tom Lane <tgl@redhat.com> 5.1.50-2
changelog:
  - Include my_compiler.h in distribution, per upstream bug #55846.
    Otherwise PHP, for example, won't build.


author: Tom Lane <tgl@redhat.com> 5.1.50-1
changelog:
  - Update to MySQL 5.1.50, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html


author: Tom Lane <tgl@redhat.com> 5.1.48-2
changelog:
  - Duplicate COPYING and EXCEPTIONS-CLIENT in -libs and -embedded subpackages,
    to ensure they are available when any subset of mysql RPMs are installed,
    per revised packaging guidelines
  - Allow init script's STARTTIMEOUT/STOPTIMEOUT to be overridden from sysconfig
  Related: #609734


author: Tom Lane <tgl@redhat.com> 5.1.48-1
changelog:
  - Update to MySQL 5.1.48, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html
    including a fix for CVE-2010-2008
  Related: #614214


author: Tom Lane <tgl@redhat.com> 5.1.47-2
changelog:
  - Add back "partition" storage engine
  Resolves: #597390
  - Fix broken "federated" storage engine plugin
  Related: #587170
  - Read all certificates in SSL certificate files, to support chained certs
  Related: #598656


author: Tom Lane <tgl@redhat.com> 5.1.47-1
changelog:
  - Update to MySQL 5.1.47, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
    including fixes for CVE-2010-1848, CVE-2010-1849, CVE-2010-1850
  Resolves: #592862
  Resolves: #583717
  - Create mysql group explicitly in pre-server script, to ensure correct GID
  Related: #594155


author: Tom Lane <tgl@redhat.com> 5.1.46-1
changelog:
  - Update to MySQL 5.1.46, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html


author: Tom Lane <tgl@redhat.com> 5.1.45-2
changelog:
  - Fix multiple problems described in upstream bug 52019, because regression
    tests fail on PPC if we don't.


author: Tom Lane <tgl@redhat.com> 5.1.45-1
changelog:
  - Update to MySQL 5.1.45, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-45.html


author: Tom Lane <tgl@redhat.com> 5.1.44-2
changelog:
  - Add "Obsoletes: mysql-cluster" to fix upgrade-in-place from F-12
  - Bring init script into some modicum of compliance with Fedora/LSB standards
  Related: #557711
  Related: #562749


author: Tom Lane <tgl@redhat.com> 5.1.44-1
changelog:
  - Update to MySQL 5.1.44, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html
  - Remove mysql.info, which is not freely redistributable
  Resolves: #560181
  - Revert broken upstream fix for their bug 45058
  Resolves: #566547


author: Tom Lane <tgl@redhat.com> 5.1.43-2
changelog:
  - Remove mysql-cluster, which is no longer supported by upstream in this
    source distribution.  If we want it we'll need a separate SRPM for it.


author: Tom Lane <tgl@redhat.com> 5.1.43-1
changelog:
  - Update to MySQL 5.1.43, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html


author: Tom Lane <tgl@redhat.com> 5.1.42-7
changelog:
  - Add backported patch for CVE-2008-7247 (upstream bug 39277)
  Related: #543619
  - Use non-expired certificates for SSL testing (upstream bug 50702)


author: Tom Lane <tgl@redhat.com> 5.1.42-3
changelog:
  - Remove static libraries (.a files) from package, per packaging guidelines
  - Change %define to %global, per packaging guidelines


author: Tom Lane <tgl@redhat.com> 5.1.42-2
changelog:
  - Disable building the innodb plugin; it tickles assorted gcc bugs and
    doesn't seem entirely ready for prime time anyway.


author: Tom Lane <tgl@redhat.com> 5.1.42-1
changelog:
  - Update to MySQL 5.1.42, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-42.html
  - Start mysqld_safe with --basedir=/usr, to avoid unwanted SELinux messages
  Resolves: #547485


author: Tom Lane <tgl@redhat.com> 5.1.41-1
changelog:
  - Update to MySQL 5.1.41, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
    including fixes for CVE-2009-4019
  Related: #540906
  - Don't set old_passwords=1; we aren't being bug-compatible with 3.23 anymore
  Resolves: #540735


author: Tom Lane <tgl@redhat.com> 5.1.40-1
changelog:
  - Update to MySQL 5.1.40, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-40.html
  - Do not force the --log-error setting in mysqld init script
  Resolves: #533736


author: Tom Lane <tgl@redhat.com> 5.1.39-3
changelog:
  - Work around two different compiler bugs on sparc, one by backing off
    optimization from -O2 to -O1, and the other with a klugy patch
  Related: #529298, #529299
  - Clean up bogosity in multilib stub header support: ia64 should not be
    listed (it's not multilib), sparc and sparc64 should be


author: Tom Lane <tgl@redhat.com> 5.1.39-1
changelog:
  - Update to MySQL 5.1.39, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-39.html


author: Tom Lane <tgl@redhat.com> 5.1.37-5
changelog:
  - Work around unportable assumptions about stpcpy(); re-enable main.mysql test
  - Clean up some obsolete parameters to the configure script


author: Tom Lane <tgl@redhat.com> 5.1.37-4
changelog:
  - Remove one misguided patch; turns out I was chasing a glibc bug
  - Temporarily disable "main.mysql" test; there's something broken there too,
    but we need to get mysql built in rawhide for dependency reasons


author: Tom Lane <tgl@redhat.com> 5.1.37-2
changelog:
  - Add a couple of patches to improve the probability of the regression tests
    completing in koji builds


author: Tom Lane <tgl@redhat.com> 5.1.37-1
changelog:
  - Update to MySQL 5.1.37, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-37.html


author: Tom Lane <tgl@redhat.com> 5.1.36-1
changelog:
  - Update to MySQL 5.1.36, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-36.html


author: Tom Lane <tgl@redhat.com> 5.1.35-1
changelog:
  - Update to MySQL 5.1.35, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-35.html
  - Ensure that /var/lib/mysql is created with the right SELinux context
  Resolves: #502966


author: Tom Lane <tgl@redhat.com> 5.1.34-1
changelog:
  - Update to MySQL 5.1.34, for various fixes described at
    http://dev.mysql.com/doc/refman/5.1/en/news-5-1-34.html
  - Increase startup timeout per bug #472222


author: Tom Lane <tgl@redhat.com> 5.1.33-1
changelog:
  - Update to MySQL 5.1.33.
  - Disable use of pthread_setschedparam; doesn't work the way code expects.
  Related: #477624


author: Tom Lane <tgl@redhat.com> 5.1.30-2
changelog:
  - hm, apparently --with-innodb and --with-ndbcluster are still needed
    even though no longer documented ...


author: Tom Lane <tgl@redhat.com> 5.1.30-1
changelog:
  - Update to MySQL 5.1.30.  Note that this includes an ABI break for
    libmysqlclient (it's now got .so major version 16).
  - This also updates mysql for new openssl build


author: Tom Lane <tgl@redhat.com> 5.0.67-2
changelog:
  - Build the "embedded server" library, and package it in a new sub-RPM
    mysql-embedded, along with mysql-embedded-devel for devel support files.
  Resolves: #149829


author: Tom Lane <tgl@redhat.com> 5.0.67-1
changelog:
  - Update to mysql version 5.0.67
  - Move mysql_config's man page to base package, again (apparently I synced
    that change the wrong way while importing specfile changes for ndbcluster)


author: Tom Lane <tgl@redhat.com> 5.0.51a-2
changelog:
  - Enable ndbcluster support
  Resolves: #163758
  - Suppress odd crash messages during package build, caused by trying to
    build dbug manual (which we don't install anyway) with dbug disabled
  Resolves: #437053
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Related: #450178


author: Tom Lane <tgl@redhat.com> 5.0.45-11
changelog:
  - Fix mysql-stack-guard patch to work correctly on IA64
  - Fix mysql.init to wait correctly when socket is not in default place
  Related: #435494


author: Dennis Gilmore <dennis@ausil.us> 5.0.45-10
changelog:
  - add sparc64 to 64 bit arches for test suite checking
  - add sparc, sparcv9 and sparc64 to multilib handling


author: Tom Lane <tgl@redhat.com> 5.0.45-9
changelog:
  - Fix the stack overflow problem encountered in January.  It seems the real
  issue is that the buildfarm machines were moved to RHEL5, which uses 64K not
  4K pages on PPC, and because RHEL5 takes the guard area out of the requested
  thread stack size we no longer had enough headroom.
  Related: #435337


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Unbelievable ... upstream still thinks that it's a good idea to have a
    regression test that is guaranteed to begin failing come January 1.
  - ... and it seems we need to raise STACK_MIN_SIZE again too.


author: Tom Lane <tgl@redhat.com> 5.0.45-4
changelog:
  - Seems we need explicit BuildRequires on gawk and procps now
  - Rebuild to fix Fedora toolchain issues


author: Tom Lane <tgl@redhat.com> 5.0.45-2
changelog:
  - Update License tag to match code.
  - Work around recent Fedora change that makes "open" a macro name.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #246535
  - Move mysql_config's man page to base package
  Resolves: #245770
  - move my_print_defaults to base RPM, for consistency with Stacks packaging
  - mysql user is no longer deleted at RPM uninstall
  Resolves: #241912


author: Tom Lane <tgl@redhat.com> 5.0.37-2
changelog:
  - Use a less hacky method of getting default values in initscript
  Related: #233771, #194596
  - Improve packaging of mysql-libs per suggestions from Remi Collet
  Resolves: #233731
  - Update default /etc/my.cnf ([mysql.server] has been bogus for a long time)


author: Tom Lane <tgl@redhat.com> 5.0.37-1
changelog:
  - Update to MySQL 5.0.37
  Resolves: #231838
  - Put client library into a separate mysql-libs RPM to reduce dependencies
  Resolves: #205630


author: Tom Lane <tgl@redhat.com> 5.0.33-1
changelog:
  - Update to MySQL 5.0.33
  - Install band-aid fix for "view" regression test designed to fail after 2006
  - Don't chmod -R the entire database directory tree on every startup
  Related: #221085
  - Fix unsafe use of install-info
  Resolves: #223713
  - Cope with new automake in F7
  Resolves: #224171


author: Tom Lane <tgl@redhat.com> 5.0.27-1
changelog:
  - Update to MySQL 5.0.27 (see CVE-2006-4031, CVE-2006-4226, CVE-2006-4227)
  Resolves: #202247, #202675, #203427, #203428, #203432, #203434, #208641
  - Fix init script to return status 1 on server start timeout
  Resolves: #203910
  - Move mysqldumpslow from base package to mysql-server
  Resolves: #193559
  - Adjust link options for BDB module
  Resolves: #199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrd <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrd <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Remi Collet <rcollet@redhat.com> - 5.3.3-23
changelog:
  - core: type confusion issue in phpinfo(). CVE-2014-4721
  - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
  - core: fix heap-based buffer overflow in DNS TXT record parsing.
    CVE-2014-4049
  - core: unserialize() SPL ArrayObject / SPLObjectStorage type
    confusion flaw. CVE-2014-3515
  - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
  - fileinfo: unrestricted recursion in handling of indirect type
    rules. CVE-2014-1943
  - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
  - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
  - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
  - fileinfo: cdf_unpack_summary_info() excessive looping
    DoS. CVE-2014-0237
  - fileinfo: CDF property info parsing nelements infinite
    loop. CVE-2014-0238


author: Remi Collet <rcollet@redhat.com> - 5.3.3-17
changelog:
  - reorder security patches
  - add security fixes for CVE-2012-2688, CVE-2012-0831,
    CVE-2011-1398, CVE-2013-1643


author: Remi Collet <rcollet@redhat.com> - 5.3.3-15
changelog:
  - fix segfault in error_handler with
    allow_call_time_pass_reference = Off (#951075)
  - fix double free when destroy_zend_class fails (#951076)


author: Remi Collet <rcollet@redhat.com> - 5.3.3-14
changelog:
  - fix possible buffer overflow in pdo_odbc (#869694)
  - rename php-5.3.3-extrglob.patch and reorder
  - php script hangs when it exceeds max_execution_time
    when inside an ODBC call (#864954)
  - fix zend garbage collector (#892695)
  - fix transposed memset arguments in libzip (#953818)
  - fix possible segfault in pdo_mysql (#869693)
  - fix imap_open DISABLE_AUTHENTICATOR param ignores array (#859369)
  - fix stream support in fileinfo (#869697)
  - fix setDate when DateTime created from timestamp (#869691)
  - fix permission on source files (#869688)
  - add php(language) and missing provides (#837044)
  - fix copy doesn't report failure on partial copy (#951413)


author: Joe Orton <jorton@redhat.com> - 5.3.3-9
changelog:
  - add security fixes for CVE-2011-4153, CVE-2012-0057, CVE-2012-0789,
    CVE-2012-1172, CVE-2012-2143, CVE-2012-2386


author: Joe Orton <jorton@redhat.com> - 5.3.3-2
changelog:
  - add php-$subpkg = V-R provides (#717158)
  - add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 (#670464)
  - add security fixes for CVE-2011-2483, CVE-2011-0708, CVE-2011-1148,
    CVE-2011-1466, CVE-2011-1468, CVE-2011-1469, CVE-2011-1471,
    CVE-2011-1938, CVE-2011-2202 (#740734)
  - fix negative keys with var_export (#700724)


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-3870 CVE-2010-3709 (#650877)
  - provide php-devel from -devel (#642701)


author: Joe Orton <jorton@redhat.com> - 5.3.2-2
changelog:
  - add LGPLv2{,+} to License; ship text in -bcmath, -mbstring
  - apply phar patch correctly
  - fix permissions on sources, README.namespaces
  - drop EXTENSIONS from %doc
  - fix Provides for php-cli
  - drop inappropriate/obsolete Obsoletes


author: Joe Orton <jorton@redhat.com> - 5.3.2-6
changelog:
  - add security fixes for CVE-2010-1866, CVE-2010-2094, CVE-2010-1917,
    CVE-2010-2531, MOPS-2010-060 (#624469)


author: Remi Collet <Fedora@famillecollet.com>
changelog:
  - PHP 5.3.2 Released!
  - remove mime_magic option (now provided by fileinfo, by emu)
  - add patch for http://bugs.php.net/50578
  - remove patch for libedit (upstream)


author: Remi Collet <Fedora@famillecollet.com> 5.3.1-1
changelog:
  - update to 5.3.1
  - remove openssl patch (merged upstream)
  - add provides for php-pecl-json
  - add prod/devel php.ini in doc


author: Joe Orton <jorton@redhat.com> 5.3.0-2
changelog:
  - update to v5 of systzdata patch; parses zone.tab and extracts
    timezone->{country-code,long/lat,comment} mapping table


author: Remi Collet <Fedora@famillecollet.com> 5.3.0-1
changelog:
  - update to 5.3.0
  - remove ncurses, dbase, mhash extensions
  - add enchant, sqlite3, intl, phar, fileinfo extensions
  - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension)
  - sync with upstream "production" php.ini


author: Joe Orton <jorton@redhat.com> 5.2.8-9
changelog:
  - add recode support, -recode subpackage (#106755)
  - add -zts subpackage with ZTS-enabled build of httpd SAPI
  - adjust php.conf to use -zts SAPI build for worker MPM


author: Joe Orton <jorton@redhat.com> 5.2.8-4
changelog:
  - move wddx to php-xml, build curl shared in -common
  - remove BR for expat-devel, bogus configure option


author: Joe Orton <jorton@redhat.com> 5.2.6-6
changelog:
  - move gd_README to php-gd
  - update to r4 of systzdata patch; introduces a default timezone
    name of "System/Localtime", which uses /etc/localtime (#469532)


author: Joe Orton <jorton@redhat.com> 5.2.6-3
changelog:
  - update to 5.2.6
  - sync default php.ini with upstream
  - drop extension_dir from default php.ini, rely on hard-coded
    default, to make php-common multilib-safe (#455091)
  - update to r3 of systzdata patch


author: Joe Orton <jorton@redhat.com> 5.2.3-3
changelog:
  - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy)
  - enable dbase extension and package in -common


author: Joe Orton <jorton@redhat.com> 5.2.0-10
changelog:
  - bump default memory_limit to 32M (#220821)
  - mark config files noreplace again (#174251)
  - drop trailing dots from Summary fields
  - use standard BuildRoot
  - drop libtool15 patch (#226294)


author: Joe Orton <jorton@redhat.com> 5.2.0-9
changelog:
  - add php(api), php(zend-abi) provides (#221302)
  - package /usr/share/php and append to default include_path (#225434)


author: Joe Orton <jorton@redhat.com> 5.2.0-5
changelog:
  - build json and zip shared, in -common (Remi Collet, #215966)
  - obsolete php-json and php-pecl-zip
  - build readline extension into /usr/bin/php* (#210585)
  - change module subpackages to require php-common not php (#177821)


author: Joe Orton <jorton@redhat.com> 5.2.0-4
changelog:
  - provide php-zend-abi (#212804)
  - add /etc/rpm/macros.php exporting interface versions
  - synch with upstream recommended php.ini


author: Joe Orton <jorton@redhat.com> 5.2.0-3
changelog:
  - update to 5.2.0 (#213837)
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> - 5.1.6-30
changelog:
  - add security fixes for CVE-2011-0708, CVE-2011-1148, CVE-2011-1466, 
    CVE-2011-1469, CVE-2011-2202 (#768025)


author: Joe Orton <jorton@redhat.com> - 5.1.6-29
changelog:
  - odbc: don't re-enter unixODBC during unclean shutdown (#594813)
  - update description (Lana Brindley, #572359)
  - gd: support additional PNG type (#548142)
  - date: allow 64-bit times on 64-bit platforms (#607453)
  - pdo_pgsql: fix unset of prepared stmt (#611662)
  - fix negative keys with var_export (#695251)
  - imap: support disabling authenticators (#552436)


author: Joe Orton <jorton@redhat.com> - 5.1.6-28
changelog:
  - add security fixes for CVE-2009-5016, CVE-2010-1917, CVE-2010-3065, 
    CVE-2010-2531, CVE-2010-1128, CVE-2010-0397, CVE-2010-3870 (#626736)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.1.el5
changelog:
  - increase default memory_limit to 128M; mark php.ini noreplace (#517604)
  - php_stream_filter_api.h: fix trailing comma in enum (#530824)
  - soap: fix empty tag for NULL variables (#511175)
  - soap: fix refcounting bug in SoapClient::__setSoapHeaders (#505355)
  - soap: fix partial request with minOccurs=0 in XSD (#500383)
  - don't link odbc.so directly against -lodbcsql (#483690)
  - fix possible integer overflow in substr_compare (#469807)
  - fix possible integer overflow in substr_count (#470971)
  - fix move_uploaded_file to respect the umask (#498031)
  - mbstring: fix possible crash in mb_detect_encoding() (#486651)
  - add experimental ZTS build (#484058)


author: Joe Orton <jorton@redhat.com> - 5.1.6-25.el5
changelog:
  - add build fix for mysqli, pdo_mysql on some biarch systems (#491050)
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541598)
  - add security fixes for CVE-2008-3658, CVE-2008-5624, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814 (#487370)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 4.3.7-3
changelog:
  - add gmp_powm fix (Oskari Saarenmaa, #124318)
  - split mbstring, ncurses, gd, openssl extns into subpackages
  - fix memory leak in apache2handler; use ap_r{write,flush}
    rather than brigade interfaces


author: Joe Orton <jorton@redhat.com> 4.3.6-6
changelog:
  - buildrequire smtpdaemon (#124430)
  - try switching to system libgd again (prevent symbol conflicts
    when e.g. mod_perl loads the system libgd library.)


author: Joe Orton <jorton@redhat.com> 4.3.4-7
changelog:
  - gd fix for build with recent Freetype2 (from upstream)
  - remove easter egg (Oden Eriksson, Mandrake)


author: Joe Orton <jorton@redhat.com> 4.3.4-6
changelog:
  - php-pear requires php
  - also remove extension=imap from php.ini in upgrade trigger
  - merge from Taroon: allow upgrade from Stronghold 4.0


author: Joe Orton <jorton@redhat.com> 4.3.4-5
changelog:
  - add defattr for php-pear subpackage
  - restore defaults: output_buffering=Off, register_argc_argv=On
  - add trigger to handle php.ini upgrades smoothly (#112470)


author: Joe Orton <jorton@redhat.com> 4.3.4-4
changelog:
  - conditionalize support for imap extension for the time being
  - switch /etc/php.ini to use php.ini-recommended (but leave
    variables_order as EGPCS) (#97765)
  - set session.path to /var/lib/php/session by default (#89975)
  - own /var/lib/php{,/session} and have apache own the latter
  - split off php-pear subpackage (#83771)


author: Joe Orton <jorton@redhat.com> 4.3.4-2
changelog:
  - rebuild for new libxslt (#110658) 
  - use --with-{mssql,oci8} for enabling extensions (#110482)
  - fix rebuild issues (Jan Visser, #110274)
  - remove hard-coded LIBS
  - conditional support for mhash (Aleksander Adamowski, #111251)


author: Joe Orton <jorton@redhat.com> 4.3.3-6
changelog:
  - use bundled libgd (#107407)
  - remove manual: up-to-date manual sources are no longer DFSG-free;
    it's too big; it's on the web anyway; #91292, #105804, #107384


author: Joe Orton <jorton@redhat.com> 4.3.3-3
changelog:
  - split domxml extension into php-domxml subpackage
  - enable xslt and xml support in domxml extension (#106042)
  - fix httpd-devel build requirement (#104341)
  - enable recode extension (#106755)
  - add workaround for #103982


author: Joe Orton <jorton@redhat.com> 4.3.2-2
changelog:
  - update the -tests and -lib64 patches
  - fixes for db4 detection
  - require aspell-devel >= 0.50.0 for pspell compatibility


author: Joe Orton <jorton@redhat.com> 4.3.1-3
changelog:
  - link odbc module correctly
  - patch so that php -n doesn't scan inidir
  - run tests using php -n, avoid loading system modules


author: Petr Machata <pmachata@redhat.com> - 2013c-2
changelog:
  - Update descriptions in iso3166.tab; make Jerusalem coordinates in
    zone.tab more precise
    (0001-Adjust-commentary-to-try-to-defuse-recent-issues-som.patch)
  - Update local mean time for Jerusalem to match more-precise longitude
    (0002-asia-Asia-Jerusalem-Fix-LMT-to-match-more-precise-lo.patch)
  - Move Morocco's midsummer 2013 transitions
    (0003-Move-Morocco-s-midsummer-2013-transitions.patch)
    Fixes 980805 980807 981019 981020
  - Israel now falls back on the last Sunday of October
    (0004-Israel-now-falls-back-on-the-last-Sunday-of-October.patch)


author: Petr Machata <pmachata@redhat.com> - 2013c-1
changelog:
  - Upstream 2013c
    - Sync past stamps for Palestine and West Bank with timeanddate.com
    - Assume that the recent change to Paraguay's DST rules is permanent
    - Macquarie was uninhabited between 1919 and 1948.  It's also part
      of Australia (update in zone.tab).


author: Petr Machata <pmachata@redhat.com> - 2013b-1
changelog:
  - Upstream 2013b
    - Paraguay will end DST on March 24 this year
    - Haiti uses US daylight-saving rules this year
    - Morocco does not observe DST during Ramadan
  - Upstream 2013a
    - Retire Chile patch, 2013a has the data
    - New Zones Asia/Khandyga, Asia/Ust-Nera, Europe/Busingen
    - Many changes in historical timestamps


author: Petr Machata <pmachata@redhat.com> - 2012h-2
changelog:
  - Switch back to using system zic, ignore upstream Makefile at all.
    We do so for java anyway.
  - Drop Factory from distribution


author: Petr Machata <pmachata@redhat.com> - 2012h-1
changelog:
  - Upstream 2012h
    - Brazilian state Bahia no longer has DST.
    - Brazilian state Tocantins now has DST.
    - Israel has new DST rules next year.
    - Jordan stays on DST this winter.


author: Petr Machata <pmachata@redhat.com> - 2012g-1
changelog:
  - Upstream 2012g
    - Adjust the packaging for new Makefile
    - Palestine: Fall transition was Sep 21, not Sep 28
    - Samoa: Daylight Saving Time commences on Sunday 30th September
      2012 and ends on Sunday 7th of April 2013.
  - Resolves: #868173


author: Petr Machata <pmachata@redhat.com> - 2012f-1.el5
changelog:
  - Upstream 2012f
    - Fiji will start daylight savings at 2 am on Sunday 21st October 2012
      and end at 3 am on Sunday 20th January 2013.  Guess it will be like
      that in following years as well.
  - Upstream 2012e
    - Tokelau is in time zone UTC+13, not UTC+14 (and always was)
  - Upstream 2012d
    - Morocco will not observe DST during the month of Ramadan.
      DST cessation end date was corrected.
    - Drop tzdata-2012c-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2012c-1.el5
changelog:
  - Upstream 2012c
    - Haiti observes DST from 2012 on
    - Gaza Strip and Hebron observe DST in 2012
    - Change start of DST in Syria to last Friday in March
  - Resolves: #820689


author: Petr Machata <pmachata@redhat.com> - 2012b-2.el5
changelog:
  - Morocco DST starts on the last Sunday of March (March 25, 2012) and
    ends on last Sunday of September, except the month of Ramadan.  It
    is currently unclear what that Ramadan bit means, so this is not
    covered by the patch as of now.
  - Resolves: #802541


author: Petr Machata <pmachata@redhat.com> - 2012b-1.el5
changelog:
  - Rebase to 2012b; changes vs. 2011n-2:
    - Changes to zones for Antarctica stations
    - Armenia abolished DST in 2012 and forward
    - Cuba enters DST on 31st March
    - Falkland Islands will stay on permanent Summer Time
    - New zone for Creston Valley, Canada, which differs from Dawson
      Creek in past stamps.  Changes to historical stamps in Canada.
    - Last year, Tokelau skipped over the date line together with Samoa
  - Resolves: #802541


author: Petr Machata <pmachata@redhat.com> - 2011n-2.el5
changelog:
  - The Chilean Government has decided to postpone the entrance into
    winter time (to leave DST) from March 11 2012 to April 28th 2012
  - Resolves: #796747


author: Petr Machata <pmachata@redhat.com> - 2011n-1.el5
changelog:
  - Rebase to 2011n
    - Cuba postponed DST by two weeks to Nov 13
    - Fiji will enter DST on Jan 21
  - Add a patch for the leap second that will occur this summer
  - Resolves: #782173


author: Petr Machata <pmachata@redhat.com> - 2011l-3.el5
changelog:
  - State of Bahia, Brazil, to resume Summer Time on Oct 16
  - The project moved, reflect this in URL
  - Resolves: #739916


author: Petr Machata <pmachata@redhat.com> - 2011l-2
changelog:
  - Upstream 2011l:
    - Fix ancient stamps for America/Sitka
    - Asia/Hebron transitioned to standard time already on Sep 30, not Oct 3
    - Fiji will introduce DST on Oct 22
  - Resolves: #739916


author: Petr Machata <pmachata@redhat.com> - 2011k-0.1.20110921
changelog:
  - Upstream 2011i:
    - Add Africa/Juba (South Sudan) zone
    - Samoa skips over the date line on 2011-12-30
    - Use KALT as abbreviation for Europe/Kalinigrad
    - Canonical version of the Newfoundland patch
    - Change America/Resolute use of EST to 2006-2007 only
    - Assume Metlakatla abandoned use of daylight saving in 1983
    - Sync iso3166.tab and zone.tab with above
  - Upstream 2011j:
    - Fix the Samoa date line skip
    - Changes in past timestamp typos several Africa zones
  - Proposed upstream 2011k:
    - Belarus and Ukraine adopt permanent DST in 2011
    - Palestine suspends DST during Ramadan in 2011
    - Gaza and West Bank split in 2011.  West Bank is tracked in the
      timezone Asia/Hebron.  zone.tab update accordingly.
  - Resolves: #739916
  - Resolves: #739668


author: Petr Machata <pmachata@redhat.com> - 2011h-2.el5
changelog:
  - Patch for upcoming change in Newfoundland.  The transition time
    changes from 12:01 AM to 2:00 AM.
  - Resolves: #729697


author: Petr Machata <pmachata@redhat.com> - 2011h-1.el5
changelog:
  - Upstream 2011h:
    - Russia abandons DST in 2011.
    - *.tab: change AN (Netherlands Antilles) to CW (Curacao)
  - Resolves: #701268


author: Petr Machata <pmachata@redhat.com> - 2011g-1.el5
changelog:
  - Upstream 2011e:
    - Morocco introduced DST for 2011 from April 2 to July 31.
    - Delay end of DST in Chile in 2011 until May 7.
  - Resolves: #698608
  - Upstream 2011f:
    - The Falkland Islands will not turn back clocks this winter, but
      stay on daylight saving time.
  - Upstream 2011g:
    - Egypt abandons DST in 2011 (and forward)
  - Resolves: #698397
  - Dropped tzdata-2011d-chile.patch
  - Dropped tzdata-2011d-morocco.patch


author: Petr Machata <pmachata@redhat.com> - 2011d-3.el5
changelog:
  - Morocco introduced DST for 2011 from April 2 to July 31. (tzdata-2011d-morocco.patch)
  - Resolves: #692160


author: Petr Machata <pmachata@redhat.com> - 2011d-1.el5
changelog:
  - Upstream 2011d:
    - Change end of DST in Samoa in 2011.
    - Change start of DST in Cuba in 2011.
    - Move start of DST in Turkey by one day in 2011.
  - Dropped tzdata-2011b-c.patch
  - Resolves: #684212


author: Petr Machata <pmachata@redhat.com> - 2011b-1.el5
changelog:
  - Upstream 2011a:
    - Updates of historical stamps for Hawaii
  - Upstream 2011b:
    - America/North_Dakota/Beulah: Mercer County, North Dakota, changed
      from the mountain time zone to the central time zone
  - Kemerovo oblast should use OMST/OMSST abbreviation (tzdata-2011b-kemerovo.patch)
  - tzdata-2011b-c.patch
    - Update of historical stamps for Juneau, Sitka, and histcurrent
      stamps for Metlakatla.  Sitka and Metlakatla are new zones.
    - Delay end of DST in Chile in 2011 until first Sunday in April.
  - Resolves: #681594


author: Petr Machata <pmachata@redhat.com> - 2010o-1.el5
changelog:
  - Upstream 2010m:
    - Hong Kong didn't observe DST in 1977
    - In zone.tab, remove obsolete association of Vostok Station with
      South Magnetic Pole; add association with Lake Vostok
  - Upstream 2010n:
    - Change end of DST in Samoa in 2011 from 2011-04-03 0:00 to
      2011-04-03 1:00
  - Upstream 2010o:
    - Fiji will end DST on March 6, 2011, not March 27, 2011
  - Resolves: #662777


author: Petr Machata <pmachata@redhat.com> - 2010l-1.el5
changelog:
  - Upstream 2010l:
    - Change Cairo's 2010 reversion to DST from the midnight between
      September 8 and 9 to the midnight between September 9 and 10.
    - Change Gaza's 2010 return to standard time to the midnight between
      August 10 and 11.
    - Bahia de Banderas (Mexican state of Nayarit) changed time zone
      UTC-7 to new time zone UTC-6 on April 4, 2010
  - Resolves: #628637


author: Andreas Schwab <schwab@redhat.com> - 2010k-1.el5
changelog:
  - Upadate to 2010k (#618593)
    - No DST in Egypt during Ramadan in 2010
    - Bahía de Banderas moved to UTC-6 on April 4, 2010, new time zone
      America/Bahia_Banderas
    - Rename Pacific/Truk to Pacific/Chuuk and Pacific/Ponape to Pacific/Pohnpei
    - Update historical data of Europe/Helsinki
    - Update tz-links page


author: Petr Machata <pmachata@redhat.com> - 2010i-1.el5
changelog:
  - Upstream 2010g:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates
  - Upstream 2010h:
    - No DST in Tunisia in 2010 and forward
    - No DST in Pakistan in 2010 and forward
  - Upstream 2010i:
    - Morocco will have DST from 2010-05-02 to 2010-08-08
    - San Luis, Argentina will keep permanent DST after April 11, 2010
    - Updates of historical stamps for Taiwan
  - Dropped tzdata-2010g-tunis.patch
  - Dropped tzdata-2010f-g.patch
  - Dropped tzdata-2010g-karachi.patch
  - Resolves: #584847


author: Petr Machata <pmachata@redhat.com> - 2010f-9.el5
changelog:
  - Tunisia not to observe DST in 2010 (tzdata-2010g-tunis.patch)
  - Resolves: #577793
  - Pakistan not to observe DST in 2010 (tzdata-2010g-karachi.patch)
  - Resolves: #577710


author: Petr Machata <pmachata@redhat.com> - 2010f-8.el5
changelog:
  - On RHEL 5, arch package cannot have noarch subpackages.  Instead we
    build tzdata as arch package.  Or argh.
  - Resolves: #576611


author: Petr Machata <pmachata@redhat.com> - 2010f-7.el5
changelog:
  - Introduce tzdata-java
    - The java subpackage has to be built on java-enabled architecture.
      But we can't use ExclusiveArch with noarch package.  So instead we
      make tzdata arch, and then conditionally enable noarch java
      subpackage.
    - Original tzdata package became tzdata-c, a noarch subpackage.
    - Credits go to msivak@redhat.com and dbhole@redhat.com
  - Resolves: #576611


author: Petr Machata <pmachata@redhat.com> - 2010f-1.el5
changelog:
  - Upstream 2010f:
    - Changes to Australian stations in Antarctica
    - Correct 2010 Samoa DST start date
    - New zone Antarctica/Macquarie
    - Change Syria DST start from last Friday in March to first Friday
      in April in 2010 and forward
  - Upstream 2010g proposal:
    - No Bangladesh DST in 2010 and forward.
    - Gaza DST starts last Saturday in March at 12:01 a.m. in 2010 and forward
    - Kamchatka and Anadyr change to Moscow+8 on 2010-03-28
    - Samara changes to Moscow+0 on 2010-03-28
    - Related zone.tab updates (tzdata-2010f-g.patch)
  - Resolves: #576268


author: Petr Machata <pmachata@redhat.com> - 2010e-1.el5
changelog:
  - Upstream 2010d
    - The DST change in Bangladesh takes place a minute earlier
    - Fiji to end DST on 2010-03-28 at 03:00, about a month earlier
    - Samoa to observe DST this year; they didn't observe DST last year
    - DST in Chile extended to 3 April
    - Resolves: #571538
  - Upstream 2010e:
    - Fix a typo in Bangladesh DST rule


author: Petr Machata <pmachata@redhat.com> - 2010c-1.el5
changelog:
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Resolves: #568667


author: Petr Machata <pmachata@redhat.com> - 2009u-1.el5
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
    - Resolves: #550570
  - Dropped tzdata-2009o-argentinas.patch


author: Petr Machata <pmachata@redhat.com> - 2009o-2.el5
changelog:
  - San Luis (Argentina) entered DST on October 11 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009o-1.el5
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009m-1.el5
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1
  - Resolves: #524198


author: Petr Machata <pmachata@redhat.com> - 2009k-1.el5
changelog:
  - Upstream 2009j
    - DST switch for Bangladesh will occur an hour earlier than was
      thought (we can drop Bangladesh patch).
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file
  - Egypt starts winter time on August 21.
  - Resolves: #517009


author: Petr Machata <pmachata@redhat.com> - 2009i-2.el5
changelog:
  - Official announcement is for the Bangladesh change to occur at 23:00
    of local time, not 24:00.  Add upstream patch implementing the same.
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009i-1.el5
changelog:
  - Upstream 2009i
    - Bangladesh introduces DST 2009-06-20
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009f-1.el5
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Resolves: #495470
  - Egypt ends DST on 2009-09-24
  - Resolves: #492263


author: Petr Machata <pmachata@redhat.com> - 2008i-1.el5
changelog:
  - Upstream 2008g
    - Fixed future DST transitions for Brazil
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).
  - Resolves: #467188


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Gaza strip runs on different clocks during Ramadan
    - Argentina and Brazil will start DST on Sunday October 19, 2008
  - Drop Pakistan & Morocco patches
  - Resolves: #462707


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Upstream 2008d
    - Changes for Brazil and Mauritius
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Pakistan DST is scheduled until Oct/31
  - Morocco DST is scheduled until Aug/31
  - Resolves: #460059 #460365 #452679


author: Petr Machata <pmachata@redhat.com> - 2008b-2
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information
  - Pakistan introduces DST
  - Resolves: #447270


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS
  - Resolves: #410101


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, and New South Wales are
      changing their DST rules effective next year
    - Several Antarctic station's rules weren't properly updated to account
      for this year's change to the New Zealand daylight saving rules
  - Venezuela timezone changes from -4:00 to -4:30 at 24 September
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.
  - Resolves: #240786


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".
  - Resolves: #230089


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a:
    - Cuba has ended its three years of permanent DST.
    - Western Australia DST trial changes
    - Updates to Bahamas, they will be in sync with 2007 US DST change
  - Resolves: #228732


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in /usr/share/doc;
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.8.1.el5]
changelog:
  - [virt] HID: memory corruption flaw drivers/usb/input/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [virt] HID: memory corruption flaw in drivers/hv/hid-core.c (Jacob Tanenbaum) [1032996 1032999] {CVE-2013-2888}
  - [scsi] lpfc: Fix task management commands having a fixed timeout (Ewan Milne) [1073123 1061120]
  - [net] tcp: drop SYN+FIN messages (Jiri Pirko) [1066057 1066058] {CVE-2012-6638}
  - [fs] GFS2: Check if glock held in gfs2_readpage (Robert S Peterson) [1073953 1063434]
  - [net] sunrpc: fix deadlock in task wakeup code (Jeff Layton) [1073731 998126]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.7.1.el5]
changelog:
  - [s390x] af_iucv: Kernel panic during connect (IUCV transport) (Hendrik Brueckner) [1077045 1026388]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.6.1.el5]
changelog:
  - [net] be2net: don't use skb_get_queue_mapping() (Ivan Vecera) [1066302 1063955]
  - [ipc] change refcount to atomic_t (Phillip Lougher) [1024866 1024868] {CVE-2013-4483}
  - [s390] qeth: buffer overflow in snmp ioctl (Jacob Tanenbaum) [1034402 1034404] {CVE-2013-6381}
  - [scsi] AACRAID Driver compat IOCTL missing capability check (Jacob Tanenbaum) [1033531 1033532] {CVE-2013-6383}
  - [xen] x86/AMD: work around erratum 793 (Radim Krcmar) [1035834 1035836] {CVE-2013-6885}
  - [xen] do not expose hypercalls to rings 1 and 2 of HVM guests (Andrew Jones) [1029112 1029113] {CVE-2013-4554}
  - [redhat] kabi: Adding symbol print_hex_dump (Jiri Olsa) [1054055 662558]
  - [scsi] Add 'eh_deadline' to limit SCSI EH runtime (Ewan Milne) [1050097 956132]
  - [scsi] remove check for 'resetting' (Ewan Milne) [1050097 956132]
  - [scsi] dc395: Move 'last_reset' into internal host structure (Ewan Milne) [1050097 956132]
  - [scsi] tmscsim: Move 'last_reset' into host structure (Ewan Milne) [1050097 956132]
  - [scsi] advansys: Remove 'last_reset' references (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: return SCSI_MLQUEUE_HOST_BUSY when in reset (Ewan Milne) [1050097 956132]
  - [scsi] dpt_i2o: Remove DPTI_STATE_IOCTL (Ewan Milne) [1050097 956132]
  - [net] ipv6: fix leaking uninit port number of offender sockaddr (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] fix addr_len/msg->msg_namelen assign in recv_error funcs (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] prevent leakage of uninitialized memory to user in recv (Florian Westphal) [1035880 1035881] {CVE-2013-7264 CVE-2013-7265 CVE-2013-7281 CVE-2013-7263}
  - [net] be2net: prevent Tx stall on SH-R when packet size < 32 (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Trim padded packets for Lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: Pad skb to meet min Tx pkt size in lancer (Ivan Vecera) [1051535 1007995]
  - [net] be2net: refactor HW workarounds in be_xmit() (Ivan Vecera) [1051535 1007995]
  - [fs] exec/ptrace: fix get_dumpable() incorrect tests (Petr Oros) [1039483 1039484] {CVE-2013-2929}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.4.1.el5]
changelog:
  - [char] ipmi: fix message handling during panics (Tony Camuso) [1049731 995293]
  - [net] igb: Use 32bit mask calculating the flow control watermarks (Stefan Assmann) [1041694 1036115]
  - [fs] NTLM auth and sign - Use appropriate server challenge (Sachin Prabhu) [1029865 1018286]
  - [xen] gnttab: correct locking order reversal (Radim Krcmar) [1026245 1026246] {CVE-2013-4494}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.3.1.el5]
changelog:
  - [net] be2net: don't use GRO for packets w/ re-inserted VLAN tags (Ivan Vecera) [1023348 1008691]
  - [net] tg3: call pci_enable_wake() to set power state (John Feeney) [1014973 996331]
  - [misc] backport fixes for percpu-rw-semaphore (Mikulas Patocka) [1014715 867997]
  - [xen] information leak via I/O instruction emulation (Igor Mammedov) [1009602 1009603] {CVE-2013-4355}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.2.1.el5]
changelog:
  - [scsi] mpt2sas: bump version (Tomas Henzl) [1018458 956330]
  - [scsi] mpt2sas: fix the incorrect scsi_dma_map error checking (Tomas Henzl) [1018458 956330]
  - [xen] x86: check segment descriptor read result in 64-bit OUTS emulation (Radim Krcmar) [1012958 1012959] {CVE-2013-4368}
  - [md] dm snapshot: fix data corruption (Mikulas Patocka) [1004734 975353] {CVE-2013-4299}


author: Patsy Franklin <pfrankli@redhat.com> 2013i-1
changelog:
  - Rebase with early release of 2013i from Paul Eggert github.
    - Jordan switches back to standard time at 00:00 on December 20,2013.
    - The 2006-2011 transition schedule is planned to resume in 2014.
    - The compile-time flag NOSOLAR has been removed.
    - The files solar87, solar88, and solar89 are no longer distributed.
    - tz-link.htm now mentions Noda Time.


author: Šimon Lukašík <slukasik@redhat.com> - 1.0.0-2
changelog:
  - dlopen libopenscap_sce.so.{current-age} explicitly
    That allows for SCE to work without openscap-engine-sce-devel


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-5
changelog:
  - Remove two unused patches
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-4
changelog:
  - Revoke trust in one mis-issued anssi certificate
  - Resolves: Bug 1042683 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117)


author: Kai Engert <kaie@redhat.com> - 3.15.3-3
changelog:
  - remove unnecessary and problematic template-removal patch
    which was added as part of the 3.15.1 rebase
  - bump release number


author: Elio Maldonado <emaldona@redhat.com> - 3.15.3-1
changelog:
  - Update to nss-3.15.3
  - Remove unused patch
  - Resolves: rhbz#1032466 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 nss: various flaws [rhel-5.10]


author: Elio Maldonado <emaldona@redhat.com> - 3.15.1-1
changelog:
  - Rebase to nss-3.15.1
  - Resolves: rhbz#1033478 - Rebase RHEL 5 to NSS 3.15.1 (for FF 24.x)
  - Resolves: rhbz#1033499 - [Regression] NSS no longer trusts MD5 certificates
  - Split %check section tests in two: freebl/softoken and rest of nss tests
  - Adjust various patches and spec file steps on account of the rebase
  - Add various patches and remove obsoleted ones on account of the rebase
  - Renumber patches so freeb/softoken ones match the corresponding ones in rhel-6 nss-softokn


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Adjust the patches to complete the syncup with upstrean nss
  - Use NSS_DISABLE_HW_GCM on the patch as we do on the spec file
  - Ensure softoken/freebl code is the same on nss side as on the softoken side
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-16
changelog:
  - Add disable_hw_gcm.patch and in the spec file export NSS_DISABLE_HW_GCM=1
  - Disable HW GCM on RHEL-5 as the older kernel lacks support for it
  - Related: rhbz#987131


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-14
changelog:
  - Resolves: rhbz#987131 - Pick up various upstream GCM code fixes applied since nss-3.14.3 was released


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-13
changelog:
  - Roll back to 79c87e69caa7454cbcf5f8161a628c538ff3cab3
  - Peviously added patch hasn't solved the sporadic core dumps
  - Related: rhbz#983766 - nssutil_ReadSecmodDB leaks memory


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-12
changelog:
  - Resolves: rhbz#983766 - nssutil_ReadSecmodDB leaks memory
  - Add patch to get rid of sporadic blapitest core dumps


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-11
changelog:
  - Restore 'export NO_FORK_CHECK=1' required for binary compatibility on RHEL-5
  - Remove an unused patch
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-9
changelog:
  - Apply upstream fixes for ecc enabling and aes gcm
  - Rename two macros EC_MIN_KEY_BITS and EC_MAX_KEY_BITS per upstream
  - Apply several upstream AES GCM fixes
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl
  - Resolves: rhbz#918948 - [RFE][RHEL5]


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-8
changelog:
  - Enable ECC support limited to suite b
  - Export NSS_ENABLE_ECC=1 in the %check section to properly test ecc
  - Resolves: rhbz#960241 - Enable ECC in nss and freebl


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-7
changelog:
  - Define -DNO_FORK_CHECK when compiling softoken for ABI compatibility
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-4
changelog:
  - Fix rpmdiff test reported failures and remove other unwanted changes
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-3
changelog:
  - Update to NSS_3_14_3_RTM
  - Rework the rebase to preserve needed idiosynchracies
  - Ensure we install frebl/softoken from the extra build tree
  - Don't include freebl static library or its private headers
  - Add patch to deal with system sqlite not being recent enough
  - Don't install nss-sysinit nor sharedb
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado - 3.14.3-2
changelog:
  - Restore the freebl-softoken source tar ball updated to 3.14.3
  - Renumbering of some sources for clarity
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.14.3-1
changelog:
  - Update to NSS_3_14_3_RTM
  - Resolves: rhbz#918948 - [RFE][RHEL5] Rebase to nss-3.14.3 to fix the lucky-13 issue


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-8
changelog:
  - Resolves: rhbz#820684
  - Fix last entry in attrFlagsArray to be {NAME_SIZE(unextractable), PK11_ATTR_UNEXTRACTABLE}


author: Robert Relyea <rrelyea@redhat.com> - 3.13.5-7
changelog:
  - Resolves: rhbz#820684
  - Enable certutil handle user supplied flags for PKCS #11 attributes.
  - This will enable certutil to generate keys in fussy hardware tokens.


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-5
changelog:
  - Related: rhbz#830304 - Fix ia64 / i386 multilib nss install failure
  - Remove no longer needed %pre and %preun scriplets meant for nss updates from RHEL-5.0


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-4
changelog:
  - Related: rhbz#830304 - Fix the changes to the %post line
  - Having multiple commands requires that /sbin/lconfig be the beginning of the scriptlet


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-3
changelog:
  - Resolves: rhbz#830304 - Fix multilib and scriptlet problems
  - Fix %post and %postun lines per packaging guildelines
  - Add %{?_isa} to tools Requires: per packaging guidelines
  - Fix explicit-lib-dependency zlib error reported by rpmlint


author: Elio Maldonado <emaldona@redhat.com> - 3.13.5-1
changelog:
  - Update to NSS_3_13_5_RTM
  - Resolves: rhbz#830304 - Update RHEL 5.x to NSS 3.13.5 and NSPR 4.9.1 for Mozilla 10.0.6


author: Elio Maldonado Batiz <emaldona@redhat.com> - 3.12.10-9
changelog:
  - Resolves: Bug 713373 - File descriptor leak after service httpd reload
  - Don't initialize nss if already initialized or if there are no dbs


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Kai Engert <kengert@redhat.com> - 3.11.5-3
changelog:
  - Prevent .chk files from being modified by prelink and rpm building
    by generating chk files at install time and setting immutable
    filesystem attribute (230546, 231367).


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Jozef Mlich <jmlich@redhat.com> - 8.4.18-1
changelog:
  - Update to PostgreSQL 8.4.18, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
    including fixes for CVE-2013-0255, CVE-2013-1900 (#1017833)


author: Tom Lane <tgl@redhat.com> 8.4.13-1
changelog:
  - Update to PostgreSQL 8.4.13, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
    including the fixes for CVE-2012-3488, CVE-2012-3489
  Resolves: #852019


author: Tom Lane <tgl@redhat.com> 8.4.12-1
changelog:
  - Update to PostgreSQL 8.4.12, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-12.html
    including the fixes for CVE-2012-2143, CVE-2012-2655
  Resolves: #830724


author: Tom Lane <tgl@redhat.com> 8.4.11-1
changelog:
  - Update to PostgreSQL 8.4.11, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-11.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-10.html
    including the fixes for CVE-2012-0866, CVE-2012-0867, CVE-2012-0868
  Resolves: #812078


author: Tom Lane <tgl@redhat.com> 8.4.9-1
changelog:
  - Update to PostgreSQL 8.4.9, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-9.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-8.html
    including the fix for CVE-2011-2483
  Resolves: #740740


author: Tom Lane <tgl@redhat.com> 8.4.7-1
changelog:
  - Update to PostgreSQL 8.4.7, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-7.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-6.html
    including the fix for CVE-2010-4015
  Resolves: #672637
  - Ensure we don't package any .gitignore files from the source tarball


author: Tom Lane <tgl@redhat.com> 8.4.5-1
changelog:
  - Update to PostgreSQL 8.4.5, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-5.html
    including the fix for CVE-2010-3433
  Resolves: #639934


author: Tom Lane <tgl@redhat.com> 8.4.4-1
changelog:
  - Update to PostgreSQL 8.4.4, for various fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-4.html
    including fixes for CVE-2010-1169 and CVE-2010-1170
  Resolves: #586061


author: Tom Lane <tgl@redhat.com> 8.4.2-3
changelog:
  - Add % release unintentionally omitted from Provides
  - Adjust BuildRequires back to RHEL-5 environment
  - Don't run autoconf on the main package: we don't currently need to,
    and the RHEL5 version is too old for some of the macros used here
  - Revert patch for bug 228263, since that only works with tcl >= 8.5
  Related: #489479


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-83
changelog:
  - make net-tools actually build after dist-git conversion
  - correct 'netstat --sctp -n' output (#982179)
  - 'netstat --sctp -n' was crashing on bad input (#982638)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-82
changelog:
  - hostname -s returns short host name even if the host name doesn't resolve (#319981)
  - mii-tool now checks only generic MII registers defined in <linux/mii.h> (#531980)
  - fixed statistics.c to use unsigned long long (instead of int)
    to handle 64 bit integers (#622734)
  - prevent 'netstat -nr -A inet6' from smashing stack
    when /proc/net/ipv6_route is broken (#668047)
  - Improve route(8) man page saying that 'route mss' actually sets MTU (#699698)
  - patch netstat to separate basename of -p only if it is absolute path in order
    to make argv[0]="sshd pty/0" display as sshd, and not as /0 (#707427)
  - plipconfig man page and usage output fixes (#707460)
  - improved netstat_stop_trim.patch to not truncate IPV6 UDP sockets (#732983)


author: Jiri Popelka <jpopelka@redhat.com> - 1.60-79
changelog:
  - fixed warning: Interface eth0 still in ALLMULTI mode (#477876)
  - fixed german man page for arp (#322901)
  - fixed tcp timers info in netstat (#466845)
  - fixed ifconfig's man page (#453918)
  - fixed buffers lengths in statistics.c (#493314)


author: Radek Vokál <rvokal@redhat.com> - 1.60-76
changelog:
  - make sctp quiet on systems without sctp and also add description to netstat.8
  - fixed arp unaligned access error
  - netplugd init script fixed
  - Resolves: #242916, #220438, #229232


author: Radek Vokal <rvokal@redhat.com> 1.60-57
changelog:
  - add note to hostname man page about gethostbyname() (#166581)
  - don't ship any rarp man page (#170537)


author: Radek Vokal <rvokal@redhat.com> 1.60-52
changelog:
  - don't show "duplicate line" warning (#143933)
  - netstat has new statistcs (#133032)
  - /etc/neplug is owned by net-tools (#130621)


author: Radek Vokal <rvokal@redhat.com> 1.60-50
changelog:
  - added mii-diag tool
  - added newer ether-wake
  - remove useless -i option from ifconfig
  - stop trimming interface names (#152457)


author: Radek Vokal <rvokal@redhat.com> 1.60-48
changelog:
  - behaviour of netstat -i option changed (#115987)
  - netstat -i shows all interface, -I<Iface> only one


author: Radek Vokal <rvokal@redhat.com> 1.60-44
changelog:
  - net-plug-1.2.9 - no changes, upstream included Red Hat patches
  - ether-wake-1.08 - few changes in implementation (#145718)


author: Radek Vokal <rvokal@redhat.com> 1.60-43
changelog:
  - don't report statistics for virtual devices (#143981) <kzak@redhat.com>
  - fixing translation headers - content type format
  - kill bitkeeper warning messages


author: Radek Vokal <rvokal@redhat.com> 1.60-40
changelog:
  - mii-tool(8) fixed, labeled as obsolete, added info (#138687)
  - netstat crashing on i64 fixed (#138804) Patch by <Andreas.Hirstius@cern.ch>


author: Radek Vokal <rvokal@redhat.com> 1.60-39
changelog:
  - IBM patch for netstat -s returning negative values on 64bit arch (#144064)
  - broadcast calulated if only netmask provided (#60509)


author: Radek Vokal <rvokal@redhat.com> 1.60-38
changelog:
  - fixed fail to assign the specified netmask before adress is assigned
  - patch by Malita, Florin <florin.malita@glenayre.com>


author: Phil Knirsch <pknirsch@redhat.com> 1.60-27
changelog:
  - Fixed compiler warning/error in netplug.
  - Updated to netplug-1.2.6 for security update and fixes.


author: Phil Knirsch <pknirsch@redhat.com> 1.60-19
changelog:
  - Fixed trailing blank bug in hostname output (#101263).
  - Remove -O2 fir alpha (#78955).
  - Updated netstat statistic output, was still broken.


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Added inet6-lookup patch from John van Krieken (#84108).
  - Fixed outdated link in ifconfig manpage (#91287).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Fixed incorrect address display for ipx (#46434).
  - Fixed wrongly installed manpage dirs (#50664).


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix nstrcmp() to be correct in the case where there are many devices 
    of the same type, eg, "eth10" > "eth1"  (#61436)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.57.
  - MTU (and other) option(s) not parsed correctly (#9215).
  - allow more granularity iwth --numeric (#9129).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.50.
  - added slattach/plipconfig/ipmaddr/iptunnel commands.
  - enabled translated man pages.


author: Pavel Raiskup <praiskup@redhat.com> - 8.1.23-9
changelog:
  - fix #1065840: CVE-2014-0060, CVE-2014-0061, CVE-2014-0063, CVE-2014-0064,
    CVE-2014-0065
  - better incorporate strlcpy function (upstream git diff c92f7e..062421)


author: Tom Lane <tgl@redhat.com> 8.1.23-1
changelog:
  - Update to PostgreSQL 8.1.23, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    This is the last upstream release in the 8.1.x series.
  - Ensure we don't package any .gitignore files from the source tarball
  - Back-port upstream fix for CVE-2010-4015
  Resolves: #672633


author: Tom Lane <tgl@redhat.com> 8.1.22-1
changelog:
  - Update to PostgreSQL 8.1.22, for various fixes described at
    http://www.postgresql.org/docs/8.1/static/release.html
    including the fix for CVE-2010-3433
  Resolves: #639932


author: Tom Lane <tgl@redhat.com> 8.1.21-1
changelog:
  - Update to PostgreSQL 8.1.21 to fix CVE-2010-1169, CVE-2010-1170,
    CVE-2009-4136, CVE-2010-0733, CVE-2010-0442, and assorted other bugs
    described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #586059


author: Tom Lane <tgl@redhat.com> 8.1.18-1
changelog:
  - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230,
    and assorted other bugs described at
    http://www.postgresql.org/docs/8.1/static/release.html
  Resolves: #525285


author: Tom Lane <tgl@redhat.com> 8.1.11-1
changelog:
  - Update to PostgreSQL 8.1.11 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427138
  - Use tzdata package's data files instead of private copy, so that
    postgresql-server need not be turned for routine timezone updates


author: Tom Lane <tgl@redhat.com> 8.1.7-1
changelog:
  - Update to PostgreSQL 8.1.7 to fix CVE-2007-0555, CVE-2007-0556
  Resolves: #225496
  - Sync init script and Makefile.regress with current Fedora scripts


author: Tom Lane <tgl@redhat.com> 8.1.4-1
changelog:
  - Update to PostgreSQL 8.1.4 (includes fixes for CVE-2006-2313, CVE-2006-2314;
    see bug #192173)
  - Update to PyGreSQL 3.8
  - Suppress noise from chcon, per bug #187744


author: Tom Lane <tgl@redhat.com> 8.1.3-1
changelog:
  - Update to PostgreSQL 8.1.3 (fixes bug #180617, CVE-2006-0553)
  - Update to jdbc driver build 405
  - Modify multilib header hack to not break non-RH arches, per bug #177564


author: Tom Lane <tgl@redhat.com> 8.1.2-1
changelog:
  - Update to PostgreSQL 8.1.2
  - Repair extraneous quote in pgtcl configure script ... odd that bash
    didn't use to spit up on this.


author: Tom Lane <tgl@redhat.com> 8.1.1-3
changelog:
  - fix pg_config.h for 64-bit and ppc platforms
  - update Makefile.regress (needs to --load-language=plpgsql)


author: Tom Lane <tgl@redhat.com> 8.1.1-1
changelog:
  - Update to PostgreSQL 8.1.1
  - Make pg_config.h architecture-independent for multilib installs;
    put the original pg_config.h into pg_config_$ARCH.h


author: Tom Lane <tgl@redhat.com> 8.1.0-1
changelog:
  - Update to PostgreSQL 8.1.0, PyGreSQL 3.7, and jdbc driver build 404
  - Fix PAM config file (must have account not only auth) (bug #167040)
  - Add BuildPrereq: libxslt-devel (bug #170141)
  - Sync with PGDG SRPM as much as feasible


author: Tom Lane <tgl@redhat.com> 8.0.4-1
changelog:
  - Update to PostgreSQL 8.0.4, PyGreSQL 3.6.2, and jdbc driver build 312
  - Adjust pgtcl link command to ensure it binds to correct libpq (bug #166665)
  - Remove obsolete Conflicts: against other python versions (bug #166754)
  - Add /etc/pam.d/postgresql (bug #167040)
  - Include contrib/xml2 in build (bug #167492)


author: Tom Lane <tgl@redhat.com> 8.0.3-1
changelog:
  - Update to PostgreSQL 8.0.3 (includes security and data-loss fixes; see
    bz#156727, CAN-2005-1409, CAN-2005-1410)
  - Update to jdbc driver build 311
  - Recreate postgres user after superseding an rh-postgresql install (bug #151911)
  - Ensure postgresql server is restarted if running during an upgrade


author: Tom Lane <tgl@redhat.com> 8.0.1-4
changelog:
  - Attach Obsoletes: declarations for rh-postgresql to subpackages (bz#144435)
  - Make Requires: and Prereq: package linkages specify release not only
    version, as per recent mailing list discussion.


author: Tom Lane <tgl@redhat.com> 8.0.1-2
changelog:
  - Repair improper error message in init script when PGVERSION doesn't match.
  - Arrange for auto update of version embedded in init script.


author: Tom Lane <tgl@redhat.com> 8.0.0-1
changelog:
  - Update to PostgreSQL 8.0.0, PyGreSQL 3.6.1, pgtcl 1.5.2,
    and jdbc driver build 309.
  - Extensive cleanout of obsolete cruft in patch set.
  - Regression tests are run during RPM build (NOTE: cannot build as root when
    this is enabled).
  - Postmaster stderr goes someplace useful, not /dev/null (bz#76503, #103767)
  - Make init script return a useful exit status (bz#80782)
  - Move docs' tutorial directory to %{_libdir}/pgsql/tutorial, since it
    includes .so files that surely do not belong under /usr/share.
  - Remove useless .sgml files from docs RPM (bz#134450)
  - Put regression tests under /usr/lib64 on 64-bit archs, since .so files
    are not architecture-independent.


author: Tom Lane <tgl@redhat.com> 7.4.6-3
changelog:
  - Update to PyGreSQL 3.6 (to fix bug #142711)
  - Adjust a few file permissions (bug #142431)
  - Assign %{_libdir}/pgsql to base package instead of -server (bug #74003)


author: Tom Lane <tgl@redhat.com> 7.4.6-1
changelog:
  - Update to PostgreSQL 7.4.6 (bugs 136947, 136949)
  - Make init script more paranoid about mkdir step of initializing a new
    database (bugs 136947, 136949)


author: Tom Lane <tgl@redhat.com> 7.4.5-4
changelog:
  - Remove contrib/oidjoins stuff from installed fileset; it's of no use
    to ordinary users and has a security issue (bugs 136300, 136301)
  - adjust chkconfig priority (bug 128852)


author: Tom Lane <tgl@redhat.com> 7.4.5-3
changelog:
  - Solve the stale lockfile problem (bugs 71295, 96981, 134090)
  - Use runuser instead of su for SELinux (bug 134588)


author: Tom Lane <tgl@redhat.com> 7.4.5-1
changelog:
  - Update to PostgreSQL 7.4.5.
  - Update JDBC jars to driver build 215.
  - Add Obsoletes: entries for rh-postgresql packages, per bug 129278.


author: Tom Lane <tgl@redhat.com> 7.4.3-3
changelog:
  - Undo ill-considered chkconfig change that causes server to start
    immediately upon install.  Mea culpa (bug 127552).


author: Tom Lane <tgl@redhat.com> 7.4.3-1
changelog:
  - Update to PostgreSQL 7.4.3.
  - Uninstalling server RPM stops postmaster first, per bug 114846.
  - Fix su commands to not assume PG user's shell is sh-like, per bug 124024.
  - Fix permissions on postgresql-python doc files, per bug 124822.
  - Minor postgresql.init improvements.


author: Tom Lane <tgl@redhat.com> 7.4.2-1
changelog:
  - Update to PostgreSQL 7.4.2; sync with community SRPM as much as possible.
  - Support PGOPTS from /etc/sysconfig/pgsql, per bug 111504.
  - Fix permissions on /etc/sysconfig/pgsql, per bug 115278.
  - SELinux patch in init file: always su </dev/null, per bug 117901.
  - Rebuilt


author: Lamar Owen <lowen@pari.edu>
changelog:
  - 7.4.1-1PGDG
  - Merge Sander Steffann's changes up to 7.4-0.5PGDG
  - Proper 7.4.1 JDBC jars this time.
  - Patch for no pl/python from Alvaro


author: David Jee <djee@redhat.com> 7.4-4
changelog:
  - Add PyGreSQL patch for deprecated column pg_type.typprtlen [Bug #111263]
  - Add headers patch which moves ecpg headers to /usr/include/ecpg
    [Bug #111195]


author: Lamar Owen <lowen@pari.edu> <lamar.owen@wgcr.org>
changelog:
  - 7.4-0.1PGDG
  - Development JDBC jars in addition to the 7.3 jars; will replace the
  - 7.3 jars once 7.4 official jars are released.
  - Changed to use the bzip2 source to save a little size.
  - Removed some commented out portions of the specfile.
  - Removed the 7.3.4 PDF docs.  Will replace with 7.4 PDF's once they
  - are ready.


author: Kaj J. Niemi <kajtzu@fi.basen.net> 7.4-0.1
changelog:
  - 7.4
  - Fixed Patch #1 (now rpm-pgsql-7.4.patch)
  - Fixed Patch #2 (now rpm-multilib-7.4.patch):
  - Patch #4 is unnecessary (upstream)
  - Fixed Patch #6 (now postgresql-7.4-src-tutorial.patch)
  - Added Patch #8 (postgresql-7.4-com_err.patch) as com_err()
    is provided by e2fsprogs and CPPFLAGS gets lost somewhere
    inside configure (bad macro?)
  - No 7.4 PDF docs available yet (Source #17)
  - PyGreSQL is separated from the upstream distribution but
    we include it as usual (Source #18)
  - Default to compiling libpq and ECPG as fully thread-safe

  - 7.4 Origin.  See previous spec files for previous history. Adapted
  - from Red Hat and PGDG's 7.3.4 RPM, directly descended from 
  - postgresql-7.3.4-2 as shipped in Fedora Core 1.


author: Martin Stransky <stransky@redhat.com> - 24.4.0-3
changelog:
  - Added a workaround for Bug 1054242 - RHEVM: Extremely high memory
    usage in Firefox 24 ESR on RHEL 6.5


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Martin Stransky <stransky@redhat.com> - 17.0.8-3
changelog:
  - Fixed rhbz#818636 - Firefox allows install of addons,
    disregarding xpinstall.enabled flag set as false.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.42.1.11.14
changelog:
  - updated to icedtea6-1.11.14.tar.gz
  - added and applied 1.11.14-fixes.patch, patch10 to fix build issues
  - Resolves: rhbz#1017615


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.41.1.11.11.90
changelog:
  - updated to icedtea6-1.11.11.90.tar.gz
  - removed upstreamed patch9 jaxp-backport-factoryfinder.patch
  - removed upstreamed patch10 fixToFontSecurityFix.patch.
  - modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#973128


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.61.1.11.11
changelog:
  - added and applied (temporally) patch10   fixToFontSecurityFix.patch.
   - fixing regression in fonts introduced by one security patch.
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.39.1.11.11
changelog:
  - added and applied (temporally) one more patch to xalan/xerces privileges
   - patch9 jaxp-backport-factoryfinder.patch
  - will be upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.59.1.11.11
changelog:
  - Updated to icedtea6 1.11.11 - fixed xalan/xerxes privledges
  - removed patch 9 -  removingOfAarch64.patch.patch - fixed upstream
  - removed patch10  patchToFixMalformed8007667.patch - upstreamed
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.37.1.11.10
changelog:
  - Updated to icedtea6 1.11.10
  - rewritten java-1.6.0-openjdk-java-access-bridge-security.patch
  - excluded aarch64.patch
    - by patch 8 -  removingOfAarch64.patch.patch
  - due to old patch on rhel5 added patch10  patchToFixMalformed8007667.patch
   - fixing 8007667 patch  to be valid for rhel5 patch
  - Resolves: rhbz#950384


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911523


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.25.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787142
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
  - Removed and deleted upstreamed Hugepages patches:
    - Source100: 7034464-hugepage.patch
    - Source101: 7037939-hugepage.patch
    - Source102: 7043564-hugepage.patch


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.7
changelog:
  - Resolves bz690289
  - Import from RHEL-5_6-Z
  - Updated to IcedTea6 1.9.7
  - Removed all plugin/webstart related commented lines
  - Modified bz entry format in previous logs to get around cvs ack checking bug


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Martin Matejovic <mmatejov@redhat.com> - 1:1.6.0-1.10.b16
changelog:
  - Update to openjdk build b16
  - Update to icedtea6-1.6
  - Added tzdata-java requirement
  - Added autoconf and automake build requirement
  - Added tzdata-java requirement
  - Added java-1.6.0-openjdk-gcc-stack-markings.patch
  - Added java-1.6.0-openjdk-memory-barriers.patch
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch
  - Added java-1.6.0-openjdk-securitypatches-20100323.patch
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Resolves: rhbz#576124


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.1.b09
changelog:
  - Moved policytool to devel package.
  - Updated release to 1.1, so there is considered newer than the outdated 
  EPEL package.
  - Resolves: rhbz#499079


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.26.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch.
  - Added java-1.6.0-openjdk-lcms.patch.
  - Updated release.
  - Removed fedora sources. We can now build with system-installed openjdk.
  - Resolves: rhbz#490182


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 1.4.1-14
changelog:
  - Renamed gnutls-1.4.1-cve-2014-0092-1.patch to cve-2014-5138.patch
  - Renamed gnutls-1.4.1-cve-2014-0092-2.patch to cve-2014-0092.patch


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-10
changelog:
  - do not generate invalid certificate requests without challenge password
  - store subject DN instead of issuer DN in the CA list


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-9
changelog:
  - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
  - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
  - fix CVE-2012-1573 - security issue in packet parsing (#805432)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-8
changelog:
  - fix multiple possible NULL dereferences and other problems
    that can potentially lead to segfault in the client


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-6
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-7
changelog:
  - fixed strings in LabelGadget are not displayed (rhbz#867792)
  - fixed Performance issue: XmListSetPos() is very very slow (rhbz#864409)
    (MotifZone bug #1536)
  - fixed frame size too large (rhbz#880914) (related to MotifZone bug #1299)
  - fixed handling of of keys in numpad section if numlock is disabled
    using the upstream fix (rhbz#818655) (MotifZone bug #1300)
  - added NumLockMask to esm_mask Modifiers to fix keypad key lookup after 
    enabling or disabling NumLock (1300_additional)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-6
changelog:
  - fixed Label size computed wrong within a Form (rhbz#583977)
  - fixed LabelGadget draws background over border of its parent (rhbz#584287)
    and LabelGadget draws Xft text over border of its parent (rhbz#584300#c3)
    (MotifZone bug #1517 and #1521)
  - fixed memory leaks from OpenMotif 2.3.3 (rhbz#644824)
    (MotifZone bug #1388 refixed and #1502)
  - fixed invisible XFT text for insensitive labels (rhbz#684210)
    (missing parts of MotifZone bug #1381)
  - fixed im_widget double-free issue (rhbz#695650)
    (MotifZone bug #1534)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-3
changelog:
  - fixed BadDrawable error (rhbz#557453)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#568730)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#568730)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#492529)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.55-2.4.7.0.el5
changelog:
  - bumped to future icedtea-forest 2.4.7
  - updatever set to 55, buildver se to 13, release reset to 0
  - removed BuildRequires on pulseaudio >= 0.9.1, devel is enough
  - removed Requires: rhino, BuildRequires is enough
  - updated patch400, java-1.7.0-openjdk-remove-gstabs.patch
  - added JRE_RELEASE_VERSION and ALT_PARALLEL_COMPILE_JOBS
  - ppc64 repalced by power64 macro
  - patch111 applied as dry-run (6.5 forward port)
  - Resolves: rhbz#1085000


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.51-2.4.4.1.el5
changelog:
  - updated to security icedtea 2.4.4
   - icedtea_version set to 2.4.4
   - updatever bumped to       51
   - release reset to 1
  - build requires: java-devel >= 1:1.6.0 changed java7-devel 
  - Resolves: rhbz#1050192


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.45-2.4.3.0.el5
changelog:
  - fixed and updated tapset
  - removed bootstrap
  - source 11 redeclared to 1111
  - added source12: TestCryptoLevel.java
  - removed upstreamed patch103 java-1.7.0-openjdk-arm-fixes.patch
  - removed unnecessary patch112 java-1.7.0-openjdk-doNotUseDisabledEcc.patch
  - added patch120: java-1.7.0-openjdk-freetype-check-fix.patch
  - fixed nss 
  - cleaned sources
  - Resolves: rhbz#1017623


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.25-2.4.1.4.el5
changelog:
  - updated to icedtea 2.4.1
  - improoved handling of patch111 - nss-config-2.patch
  - backported uniquesuffix from 6.5
  - Resolves: rhbz#978421


author: Jiri Vanek <jvanek@redhat.com - 1.7.0.9-2.3.8.1.el5
changelog:
  - Added latest Fedora spec changes and nss (disabled) support
  - Bumped release
  - Removed patch2 java-1.7.0-openjdk-java-access-bridge-idlj.patch (unapplied)
  - zlib in BuildReq restricted for  1.2.3-7 or higher
   - see https://bugzilla.redhat.com/show_bug.cgi?id=904231
  - Removed a -icedtea tag from the version
    - package have less and less connections to icedtea7
  - Added gcc-c++ build dependence. Sometimes caused troubles during rpm -bb
  - Added (Build)Requires for fontconfig and xorg-x11-fonts-Type1
    - see https://bugzilla.redhat.com/show_bug.cgi?id=721033 for details
  - Removed all fonconfig files. Fonts are now handled differently in JDK 
    and those files are redundant. This is going to be usptreamed.
    - see https://bugzilla.redhat.com/show_bug.cgi?id=902227 for details
  - logging.properties marked as config(noreplace)
    - see https://bugzilla.redhat.com/show_bug.cgi?id=679180 for details
  - nss.cfg was marked as config(noreplace)
  - Added and applied if enable_nss patch113: java-1.7.0-openjdk-aes-update_reset.patch
  - Added and applied if enable_nss patch114: java-1.7.0-openjdk-nss-tck.patch
  - Added and applied if enable_nss patch115: java-1.7.0-openjdk-nss-split_results.patch
  - Added and applied if enable_nss patch 116 - Patch116: rh905128-non_block_ciphers.patch
  - NSS disabled by default - enable_nss set to 0
  - Added and applied if enable_nss patch109 - java-1.7.0-openjdk-nss-config-1.patch
  - Added and applied if enable_nss patch111 - java-1.7.0-openjdk-nss-config-2.patch
  - Added nss.cfg file
  - Resolves: rhbz#950378


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre4.3.el5
changelog:
  - Updated  to icedtea 2.4.0.pre4, 
  - Rewritten (again) patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre3.3.el6
changelog:
  - Updated  to icedtea 2.4.0.pre3, updated!
  - Rewritten patch3 java-1.7.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.4.0.pre2.3.el5
changelog:
  - Removed testing
   - mauve was outdated and
   - jtreg was icedtea relict
  - Updated  to icedtea 2.4.0.pre2, updated?
  - Resolves: rhbz#911528


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.11-2.4.0.el6.1
changelog:
  - Rewritten patch105: java-1.7.0-openjdk-disable-system-lcms.patch
  - Added jxmd and idlj to alternatives
  - make executed with   DISABLE_INTREE_EC=true and UNLIMITED_CRYPTO=true
  - Unapplied patch302 and deleted systemtap.patch
  - buildver increased to 11
  - icedtea_version set to 2.4.0
  - Added and applied patch112 java-1.7.openjdk-doNotUseDisabledEcc.patch
  - Added /lib/security/US_export_policy.jar and lib/security/local_policy.jar
  - Resolves: rhbz#895032


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.9-2.3.3.el5.1
changelog:
  - Changed permissions of sa-jdi.jar to correct 644
  - Correctly removed noarch tag form javadoc, rhel5 donot support noarch subpackages
  - Resolves: rhbz#803732


author: Deepak Bhole <dbhole@redhat.com> - 1.7.0.9-2.3.3.el5
changelog:
  - Updated to IcedTea7-OpenJDK 2.3.3
  - Removed upstreamed java-1.7.0-openjdk-rhel5-gio.patch
  - Updated java-1.7.0-openjdk-java-access-bridge-security.patch
  - Updated java-1.7.0-openjdk-remove-gstabs.patch
  - Resolves rhbz#s 856124, 865346, 865348, 865350, 865352, 865354, 865357,
    865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514,
    865519, 865531, 865541, 865568


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.3.el5
changelog:
  - Added patch499: java-1.7.0-openjdk-remove-gstabs.patch, fixing debuginfo package
  - Resolves: rhbz#803732


author: jiri Vanek <jvanek@redhat.com> - 1.7.0.5-2.2.1.1.el5
changelog:
  - ca-certificates replaced by in-package script
  - Re-added debuginfo package
  - Priority kept as 17xxx
  - Resolves: rhbz#803732


author: Deepak Bhole <dbhole@redhat.com> - 1:3.0-6jpp_1fc
changelog:
  - Added conditional native compilation.
  - Disable certain ssl related tests that are known to fail with libgcj.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc2.1jpp
changelog:
  - Update to 2.0rc2.
  - Manual subpackage.
  - Crosslink with local J2SE javadocs.
  - Own unversioned javadoc dir symlink.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.0-3.rc1.1jpp
changelog:
  - Update to 2.0rc1.
  - Include "jakarta-"-less jar symlinks for consistency with other packages.
  - Exclude example and contrib sources from main package, they're in -demo.


author: Ville Skyttä <ville.skytta at iki.fi> 2.0-0.20020909alpha1.1jpp
changelog:
  - 2.0alpha1 snapshot 20020909.
  - Use sed instead of bash extensions when symlinking jars during build.
  - Add distribution tag.
  - Require commons-logging instead of log4j.


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 1.0-4jpp
changelog:
  - renamed to jakarta-commons-httpclient
  - additional sources in individual archives
  - versioned dir for javadoc
  - no dependencies for javadoc package
  - dropped j2ee package
  - adapted to new jsse package
  - section macro


author: Jan Horak <jhorak@redhat.com> - 3.0-2.beta2
changelog:
  - Fixed clicked link does not open in browser (#489120)
  - Fixed missing help in thunderbird (#488885)


author: Christopher Aillon <caillon@redhat.com> 2.0.0.6-4
changelog:
  - Fix crashes when using GTK+ themes containing a gtkrc which specify 
    GtkOptionMenu::indicator_size and GtkOptionMenu::indicator_spacing


author: Christopher Aillon <caillon@redhat.com> 2.0.0.0-0.5.rc1
changelog:
  - Fix the desktop file
  - Clean up the files list
  - Remove the default client stuff from the pref window


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-7
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.
  - Patch to add support for printing via pango from Behdad.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.7-2
changelog:
  - Fix crash when changing gtk key theme
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.5-5
changelog:
  - Update nopangoxft.patch
  - Fix rendering of MathML thanks to Behdad Esfahbod.
  - Update start page text to reflect the MathML fixes.
  - Enable pango by default on all locales
  - Build using -rpath
  - Re-enable GCC visibility


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.6.rc1
changelog:
  - Fix crash when deleting highlighted text while composing mail within
    plaintext editor with spellcheck enabled.


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.3.rc1
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944

  - Use the system NSS libraries
  - Build on ppc64


author: Kristian Høgsberg <krh@redhat.com> 1.0.2-7
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.


author: Christopher Aillon <caillon@redhat.com> 1.0.2-3
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications
  - Add patch to properly link against libgfxshared_s.a
  - Fix multilib conflicts


author: Christopher Blizzard <blizzard@redhat.com> 0.8.0-8
changelog:
  - Pull over patches from firefox build:
    - disable default application dialog
    - don't include software update since it doesn't work
    - make external app support work


author: Christopher Aillon <caillon@redhat.com> 0.8.0-1
changelog:
  - Update to 0.8.0
  - Remove enigmail
  - Update BuildRequires
  - Remove gcc34 and extension manager patches -- they are upstreamed.
  - Fix for gnome-vfs2 error at component registration


author: Warren Togami <wtogami@redhat.com> 0.7.3-3
changelog:
  - rawhide import
  - apply NetBSD's freetype 2.1.8 patch
  - apply psfonts patch
  - remove BR on /usr/bin/ex, breaks beehive


author: David Hill <djh[at]ii.net> 0.7.3-0.fdr.1
changelog:
  - update to Thunderbird 0.7.3 and Enigmail 0.85.0
  - remove XUL.mfasl on startup, add Debian enigmail patches
  - add Xvfb hack for -install-global-extension


author: David Hill <djh[at]ii.net> 0.7.2-0.fdr.0
changelog:
  - update to 0.7.2, just because it's there
  - update gcc-3.4 patch (Kaj Niemi)
  - add EM registration patch and remove instdir hack


author: David Hill <djh[at]ii.net> 0.7-0.fdr.1
changelog:
  - re-enable Enigmail 0.84.1
  - add gcc-3.4 patch (Kaj Niemi)
  - use official branding (with permission)


author: David Hill <djh[at]ii.net> 0.7-0.fdr.0
changelog:
  - update to 0.7
  - temporarily disable Enigmail 0.84.1, make ftp links work (#1634)
  - specify libdir, change BR for apt (V. Skyttä, #1617)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.3
changelog:
  - installation directory now versioned
  - allow root to run the program (for installing extensions)
  - remove unnecessary %pre and %post
  - remove separators, update mozconfig and launch script (M. Schwendt, #1460)


author: David Hill <djh[at]ii.net> 0.6-0.fdr.0.20040415
changelog:
  - update to latest CVS, update mozconfig and %build accordingly
  - update to Enigmail 0.83.6
  - remove x-remote and x86_64 patches
  - build with -Os


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.8
changelog:
  - minor improvements to open-browser.sh and startup script
  - update to latest version of Blizzard's x-remote patch


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.6
changelog:
  - update open-browser script, modify BuildRequires (Warren)
  - add Blizzard's x-remote patch
  - initial attempt at x-remote-enabled startup script


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.4
changelog:
  - add Mozilla x86_64 patch (Oliver Sontag)
  - Enigmail source filenames now include the version
  - modify BuildRoot


author: David Hill <djh[at]ii.net> 0:0.5-0.fdr.1
changelog:
  - update Enigmail to 0.83.3
  - use official source tarball (after removing the CRLFs)
  - package renamed to thunderbird


author: Warren Togami <warren@togami.com> 0:0.4-0.fdr.3
changelog:
  - open-browser.sh release 3
  - patch broken /usr/bin/mozilla script during install
  - dir ownership
  - XXX: Source fails build on x86_64... fix later


author: David Hill <djh[at]ii.net>
changelog:
  - update to latest CVS (0.4a)
  - update Enigmail to 0.82.2
  - alter mozconfig for new build requirements
  - add missing BuildReq (#987)


author: Joe Orton <jorton@redhat.com> - 1.6.11-8
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783 (#709219)
  - add fix for svnadmin hotcopy (#669535)
  - add security fix for CVE-2011-0715 (#681172)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672677)


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-5.1.13.3
changelog:
  - updated to icedtea 1.13.3
  - updated to openjdk-6-src-b31-15_apr_2014
  - renmoved upstreamed patch7, 1.13_fixes.patch
  - Resolves: rhbz#1085007


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.1-3.1.13.0
changelog:
  - updated to icedtea 1.13.1
   - http://blog.fuseyism.com/index.php/2014/01/23/security-icedtea-1-12-8-1-13-1-for-openjdk-6-released/
  - updated to jdk6, b30,  21_jan_2014
   - https://openjdk6.java.net/OpenJDK6-B30-Changes.html
  - adapted patch7 1.13_fixes.patch
  - pre 2011 changelog moved to (till now  wrong) pre-2009-spec-changelog (rh1043611)
  - added --disable-system-lcms to configure options to pass build
  - adapted patch3 java-1.6.0-openjdk-java-access-bridge-security.patch
  - Resolves: rhbz#1050187


author: Pavel Raiskup <praiskup@redhat.com> - 8.4.20-1
changelog:
  - Update to PostgreSQL 8.4.20 (#1065839) for fixes described at
    http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
    http://www.postgresql.org/docs/8.4/static/release-8-4-20.html


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.136
changelog:
  - resolves: #984807 - CVE-2013-4124: DoS via integer overflow when reading
                        an EA list


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.135
changelog:
  - Fix PIDL parsing with newer versions of gcc.
  - Fix dereferencing a unique pointer in the WKSSVC server.
  - resolves: #982484


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.134
changelog:
  - Check for system libtevent and require version 0.9.18.
  - Use tevent epoll backend in winbind.
  - resolves: #869295


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.130
changelog:
  - Fix netlogon failover for LogonSamLogon.
  - resolves: #862872
  - Fix write operations as guest with security = share
  - resolves: #905071
  - Disable building cifs idmap and acl binaries.
  - resolves: #873692
  - Change chkconfig order to start winbind before netfs.
  - resolves: #948614
  - Fix cache issue when resoliving groups without domain name.
  - resolves: #948923
  - Fix pam_winbind upn to username conversion if you have different seperator.
  - resolves: #949611
  - Fix the username map optimization.
  - resolves: #917564
  - Fix leaking sockets of smb dc connection.
  - resolves: #883861
  - Fix 'net ads keytab add' not respecting the case.
  - resolves: #955680
  - Fix 'map untrusted to domain' with NTLMv2.
  - resolves: #947999


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.128
changelog:
  - Fix loading the imap hash module.
  - resolves: #863192
  - Fix raw printing support.
  - related: #855312


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.125
changelog:
  - Handle error if invalid ports have been specified gracefully.
  - resolves: #845761
  - Fix printing regression with builtin forms.
  - resolves: #860965


author: - Andreas Schneider <asn@redhat.com> - 3.6.6-0.123
changelog:
  - Fix rap printing access to spoolss (smbclient print queue access).
  - resolves: #855312
  - Fix mount.cifs return codes.
  - resolves: #856168


author: Simo Sorce <ssorce@redhat.com> 3.5.4-0.84
changelog:
  - Security Release, fixes CVE-2011-2694, CVE-2011-2522, CVE-2011-1678,
    CVE-2011-2724
  - resolves: #722556


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.74
changelog:
  - Fix lsa lookupsids calls over ncacn_ip_tcp that caused getent passwd queries
    to fail
  - resolves: #679066


author: Guenther Deschner <gdeschner@redhat.com> - 3.5.4-0.63
changelog:
  - Make sure samba3x provides samba and also versions the conflicts
  - resolves: #582756
  - resolves: #609578


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.43
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526663


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.42
changelog:
  - Add appropriate licensing information to samba3-common, libsmbclient, libtalloc,
    libtdb and tdb-tools
  - resolves: #520652


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.5-0.40
changelog:
  - Fix password expiry calculation in pam_winbind
  - Remove popt dependency from mount/umount.cifs
  - Fix libsmbclient packaging
  - resolves: #506932


author: Guenther Deschner <gdeschner@redhat.com> - 3.3.4-0.34
changelog:
  - Add new package samba3x
  - Fix various Requires and Provides tags in order to meet conflict and update
    requirements
  - resolves: #454460


author: Jiri Vanek <jvanek@redhat.com> - 1.7.0.65-2.5.1.2
changelog:
  - added and applied fix for samrtcard io patch405, pr1864_smartcardIO.patch
  - Resolves: rhbz#1115872


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20.1
changelog:
  - Fixed CVE-2012-6151: snmpd crashing when AgentX subagent disconnects in
    the middle of request processing (#1073224)
  - Fixed CVE-2014-2285: snmptrapd crash when using a trap with empty community
    string (#1073224)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-20
changelog:
  - fixed error message when the address specified by clientaddr option
    is wrong or cannot be bound (#840861)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-19
changelog:
  - fixed support for port numbers in 'clientaddr' configuration option
    (#840861, #845974)
  - added support of cvfs filesystem hrStorageTable (#846391)
  - removed various error log messages when IPv6 is disabled (#845155)
  - removed various error log messages related to counte64 expansions
    (#846905)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-18
changelog:
  - added support of ocfs2, tmpfs and reiserfs in hrStorageTable
    (#754652, #755958, #822061)
  - updated documentation of '-c' option of snmptrapd (#760001)
  - fixed endless loop after truncating 64bit int (#783892)
  - fixed snmpd exiting shortly after startup due to incoming signal (#799699)
  - fixed decoding of COUNTER64 values from AgentX (#803585)
  - fixed engineID of outgoing traps if 'trapsess -e <engineID>' is used in
    snmpd.conf (#805689)
  - fixed CVE-2012-2141, an array index error in the extension table (#815813)
  - fixed snmpd showing "failed to run mteTrigger query" when 'monitor'
    config option is used (#830042)
  - added support for port numbers in 'clientaddr' configuration option
    (#828691)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-16
changelog:
  - fixed snmpd showing wrong UCD-SNMP-MIB::ssCpuIdle after 30 days of uptime
    on 32-bit platforms (#663789)
  - fixed parsing of OID argument of 'smuxpeer' configuration option (#751235)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-15
changelog:
  - removed 'error finding row index in _ifXTable_container_row_restore'
    error message (#736264)
  - fixed a crash when DisMan Event MIB was used simultaneously with AgentX
    extensions (#725966)
  - fixed references to OBJECT-GROUP between MIB files (#716470)
  - disabled 'rpm -V' checking content of /usr/share/snmp/mibs/.index file,
    it is generated dynamically (#714976)
  - fixed crash when getting out-of-memory in inetNetToMediaTable (#706916)
  - fixed slow (re-)loads of TCP-MIB::tcpConnectionTable (#698562)
  - fixed HOST-RESOURCES-MIB::hrStorageUsed with realStorageUnits disabled
    (#741789)
  - fixed vxfs filesystem support in hrStorageTable (#744112)
  - fixed snmpd sigsegv when embedded perl script registers one handler
    twice (#743167)
  - fixed AgentX subagent sigsegv when reconnecting to AgentX master
    (#748390)
  - fixed reporting of UCD-SNMP-MIB::dskPercentNode missing in previous
    release (#725339)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27.4
changelog:
  - fix CVE-2014-0221 - recursion in DTLS code leading to DoS
  - fix CVE-2014-3505 - doublefree in DTLS packet processing
  - fix CVE-2014-3506 - avoid memory exhaustion in DTLS
  - fix CVE-2014-3508 - fix OID handling to avoid information leak
  - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-27
changelog:
  - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589)
  - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052)
  - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB
    environment variable is set (fixes CVE-2012-4929 #857051)
  - use __secure_getenv() everywhere instead of getenv() (#839735)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-23
changelog:
  - fix problem with the SGC restart patch that might terminate handshake
    incorrectly
  - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725)
  - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-22
changelog:
  - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery
    vulnerability and additional DTLS fixes (#771770)
  - fix for CVE-2011-4109 - double free in policy checks (#771771)
  - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775)
  - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-21
changelog:
  - add known answer test for SHA2 algorithms (#740866)
  - make default private key length in certificate Makefile 2048 bits
    (can be changed with PRIVATE_KEY_BITS setting) (#745410)
  - fix incorrect return value in parse_yesno() (#726593)
  - added DigiCert CA certificates to ca-bundle (#735819)
  - added a new section about error states to README.FIPS (#628976)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-19
changelog:
  - presort list of ciphers available in SSL (#688901)
  - accept connection in s_server even if getaddrinfo() fails (#561260)
  - point to openssl dgst for list of supported digests (#608639)
  - fix handling of future TLS versions (#599112)
  - added VeriSign Class 3 Public Primary Certification Authority - G5
    and StartCom Certification Authority certs to ca-bundle (#675671, #617856)
  - upstream fixes for the CHIL engine (#622003, #671484)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-17
changelog:
  - fix CVE-2010-4180 - completely disable code for
    SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG (#659462)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-15
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-14
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-13
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-23
changelog:
  - new feature update: honor priority/weight with ldap_domain2hostlist (#733435)
  - fix: initscript marked as %config incorrectly (#738768)


author: Jan Vcelak <jvcelak@redhat.com> 2.3.43-20
changelog:
  - fix: OpenLDAP packages lack debug data (#684630)
  - doc: Document preferred use of TLS_CACERT instead of TLS_CACERTDIR to specify Certificate Authorities (#699652)
  - fix: libldap ignores a directory of CA certificates if any of them can't be read (#609722)
  - fix: Migration: migrate_all_offline.sh can't handle duplicate entries (#563148)
  - fix: Init script is working wrong if database recovery is needed (#604092)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-13
changelog:
  - fixed segfault issues in modrdn (#606375)
  - added patch handling null char in TLS to compat package
    (#606375, patch backported by Jan Vcelak <jvcelak@redhat.com>)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-6
changelog:
  - fixed possible double free() in rwm overlay (#495628)
  - updated slapd man page and slapcat usage string (#468206)
  - updated default config for slapd - deleted syncprov module (#466937)
  - fixed migration tools autofs generated format (#460331)
  - fixed migration tools numbers detection in /etc/shadow (#113857)
  - fixed migration tools base ldif (#104585)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-5
changelog:
  - implementation of limit adjustment before starting slapd (#527313)
  - init script no longer executes script in /tmp (#483356)
  - slapd not starting with ldap:/// every time (#481003)
  - delay between TERM and KILL when shutting down slapd (#452064)


author: Jan Zeleny <jzeleny@redhat.com> - 2.3.43-4
changelog:
  - fixed compat libs linking (#503734)
  - activated lightweight dispatcher feature (#507276)
  - detection of timeout after failed result (#495701)


author: Jan Safranek <jsafranek@redhat.com> 2.3.43-1
changelog:
  - rebase to openldap-2.3.43 (#454994)
  - apply latest db-4 patches (#454857)
  - package openldap overlays, including smbk5pwd (#329441 #248549 #370411
    - check for TLS_CACERT file permissions in /etc/init.d/ldap (#356401)
  - rework the database upgrade logic, it should dump/restore the BDB
    database only when really needed (#436046)
  - introduce NETWORK_TIMEOUT in ldap.conf file to configure timeout of
    connect() operation (#459132)
  - allow to set SLURPD_KRB5CCNAME in /etc/sysconfig/ldap to set KRB5CCNAME
    of the slurpd process (#428638)


author: Jan Safranek <jsafranek@redhat.com> 2.3.27-6
changelog:
  - Include sals patch to close #230395
  - Include manual bind timeout patch to close #230388
  - Include patch to allow write access to ldap socket to close #237417
  - Fix the upgrade logic so database is not deleted on upgrade (#240834)
  - Fix the memory leak on ACL rules (#241636)
  - Fix initscript return codes (#242665)


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-5
changelog:
  - Include the -getdn patch to close
    bz#214768: CVE-2006-5779 Specially crafted authcid makes OpenLDAP fail an assertion
    Resolves: rhbz#214768


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-3
changelog:
  - Include --enable-multimaster to close
    bz#185821: adding slapd_multimaster to the configure options
  - Upgade guide.html to the correct one for openladp-2.3.27, closing
    bz#190383: openldap 2.3 packages contain the administrator's guide for 2.2
  - Remove the quotes from around the slaptestflags in ldap.init
    This closes one part of
    bz#204593: service ldap fails after having added entries to ldap
  - include __db.* in the list of files to check ownership of in
    ldap.init, as suggested in
    bz#199322: RFE: perform cleanup in ldap.init


author: Jay Fenlason <fenlason@redhat.com> 2.3.27-2
changelog:
  - New upstream release
  - Include the gethostbyname_r patch so that nss_ldap won't hang
    on recursive attemts to ldap_initialize.


author: Jay Fenlason <fenlason@redhat.com> 2.3.19-2
changelog:
  - Upgrade to 2.3.19, which upstream now considers stable
  - Modify the -config.patch, ldap.init, and this spec file to put the
    pid file and args file in an ldap-owned openldap subdirectory under
    /var/run.
  - Move back_sql* out of /usr/sbin/openldap , which requires
    hand-moving slapd and slurpd to _sbindir, and recreating symlinks
    by hand.
  - Retire openldap-2.3.11-ads.patch, which went upstream.
  - Update the ldap.init script to run slaptest as the ldap user rather
    than as root.  This solves
    bz#150172 Startup failure after database problem
  - Add to the servers post and preun scriptlets so that on preun, the
    database is slapcatted to /var/lib/ldap/upgrade.ldif and the
    database files are saved to /var/lib/ldap/rpmorig.  On post, if
    /var/lib/ldap/upgrade.ldif exists, it is slapadded.  This means that
    on upgrades from 2.3.16-2 to higher versions, the database files may
    be automatically upgraded.  Unfortunatly, because of the changes to
    the preun scriptlet, users have to do the slapcat, etc by hand when
    upgrading to 2.3.16-2.  Also note that the /var/lib/ldap/rpmorig
    files need to be removed by hand because automatically removing your
    emergency fallback files is a bad idea.
  - Upgrade internal bdb to db-4.4.20.  For a clean upgrade, this will
    require that users slapcat their databases into a temp file, move
    /var/lib/ldap someplace safe, upgrade the openldap rpms, then
    slapadd the temp file.


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-3
changelog:
  - Remove Requires: cyrus-sasl and cyrus-sasl-md5 from openldap- and
    compat-openldap- to close
    bz#173313 Remove exlicit 'Requires: cyrus-sasl" + 'Requires: cyrus-sasl-md5'


author: Jay Fenlason <fenlason@redhat.com> 2.3.11-2
changelog:
  - Upgrade to 2.3.11, which upstream now considers stable.
  - Switch compat-openldap to 2.2.29
  - remove references to nss_ldap_build from the spec file
  - remove references to 2.0 and 2.1 from the spec file.
  - reorganize the build() function slightly in the spec file to limit the
    number of redundant and conflicting options passedto configure.
  - Remove the attempt to hardlink ldapmodify and ldapadd together, since
    the current make install make ldapadd a symlink to ldapmodify.
  - Include the -ads patches to allow SASL binds to an Active Directory
    server to work.  Nalin <nalin@redhat.com> wrote the patch, based on my
    broken first attempt.


author: Jay Fenlason <fenlason@redhat.com> 2.2.26-2
changelog:
  - Move the slapd.pem file to /etc/pki/tls/certs
    and edit the -config patch to match to close
    bz#143393  Creates certificates + keys at an insecure/bad place
  - also use _sysconfdir instead of hard-coding /etc


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add the tls-fix-connection-test patch to close
    bz#161991 openldap password disclosure issue
  - add the hop patches to prevent infinite looping when chasing referrals.
    OpenLDAP ITS #3578


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.26-1
changelog:
  - run slaptest with the -u flag if no id2entry db files are found, because
    you can't check for read-write access to a non-existent database (#156787)
  - add /etc/openldap/cacerts, which authconfig sets as the
    TLS_CACERTDIR path in /etc/openldap/ldap.conf now
  - use a temporary wrapper script to launch slapd, in case we have arguments
    with embedded whitespace (#158111)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.26 (stable 20050429)
  - enable the lmpasswd scheme
  - print a warning if slaptest fails, slaptest -u succeeds, and one of the
    directories listed as the storage location for a given suffix in slapd.conf
    contains a readable file named __db.001 (#118678)


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.24-1
changelog:
  - update to 2.2.24 (stable 20050318)
  - export KRB5_KTNAME in the init script, in case it was set in the sysconfig
    file but not exported


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.23-1
changelog:
  - update to 2.2.23 (stable-20050125)
  - update notes on upgrading from earlier versions
  - drop slapcat variations for 2.0/2.1, which choke on 2.2's config files


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.20-1
changelog:
  - update to 2.2.20 (stable-20050103)
  - warn about unreadable krb5 keytab files containing "ldap" keys
  - warn about unreadable TLS-related files
  - own a ref to subdirectories which we create under %{_libdir}/tls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.2.17 (stable-20040923) (#135188)
  - move nptl libraries into arch-specific subdirectories on %{ix86} boxes
  - require a newer glibc which can provide nptl libpthread on i486/i586


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move slapd startup to earlier in the boot sequence (#103160)
  - update to 2.2.15 (stable-20040822)
  - change version number on compat-openldap to include the non-compat version
    from which it's compiled, otherwise would have to start 2.2.15 at release 3
    so that it upgrades correctly


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-2
changelog:
  - build a separate, static set of libraries for openldap-devel with the
    non-standard ntlm bind patch applied, for use by the evolution-connector
    package (#125579), and installing them under
    %{evolution_connector_prefix} (/usr/lib/evolution-openldap)
  - provide openldap-evolution-devel = %{version}-%{release} in openldap-devel
    so that evolution-connector's source package can require a version of
    openldap-devel which provides what it wants


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.13-1
changelog:
  - add compat-openldap subpackage
  - default to bdb, as upstream does, gambling that we're only going to be
    on systems with nptl now


author: Thomas Woerner <twoerner@redhat.com> 2.1.29-3
changelog:
  - removed rpath
  - added pie patch: slapd and slurpd are now pie
  - requires libtool >= 1.5.6-2 (PIC libltdl.a)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-2
changelog:
  - fix incorrect use of find when attempting to detect a common permissions
    error in the init script (#114866)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.25-1
changelog:
  - change logging facility used from daemon to local4 (#112730, reversing #11047)
    BEHAVIOR CHANGE - SHOULD BE MENTIONED IN THE RELEASE NOTES.


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-8
changelog:
  - add another section to the ABI note for the TLS libdb so that it's marked as
    not needing an executable stack (from Arjan Van de Ven)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build bundled libdb for slapd dynamically to make the package smaller,
    among other things
  - on tls-capable arches, build libdb both with and without shared posix
    mutexes, otherwise just without
  - disable posix mutexes unconditionally for db 4.0, which shouldn't need
    them for the migration cases where it's used
  - update to MigrationTools 45


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually require newer libtool, as was intended back in 2.1.22-0, noted as
    missed by Jim Richardson


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.22-0
changelog:
  - 2.1.22 now badged stable
  - be more aggressive in what we index by default
  - use/require libtool 1.5


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - install the db utils for the bundled libdb as %{_sbindir}/slapd_db_*
  - install slapcat/slapadd from 2.0.x for migration purposes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17
  - disable the shell backend, not expected to work well with threads
  - drop the kerberosSecurityObject schema, the krbName attribute it
    contains is only used if slapd is built with v2 kbind support


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.27-8
changelog:
  - back down to db 4.0.x, which 2.0.x can compile with in ldbm-over-db setups
  - tweak SuSE patch to fix a few copy-paste errors and a NULL dereference


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - incorporate fixes from SuSE's security audit, except for fixes to ITS 1963,
    1936, 2007, 2009, which were included in 2.0.26.
  - add two more patches for db 4.1.24 from sleepycat's updates page
  - use openssl pkgconfig data, if any is available


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-2
changelog:
  - change LD_FLAGS to refer to /usr/kerberos/lib instead of
    /usr/kerberos/lib, which might not be right on some arches


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.25-1
changelog:
  - update to 2.0.25 "stable", ldbm-over-gdbm (putting off migration of LDBM
    slapd databases until we move to 2.1.x)
  - use %{_smp_mflags} when running make
  - update to MigrationTools 44
  - enable dynamic module support in slapd


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.22-2
changelog:
  - switch to an internalized Berkeley DB as the ldbm back-end  (NOTE: this breaks
    access to existing on-disk directory data)
  - add slapcat/slapadd with gdbm for migration purposes
  - remove Kerberos dependency in client libs (the direct Kerberos dependency
    is used by the server for checking {kerberos} passwords)


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.20-2
changelog:
  - temporarily disable optimizations for ia64 arches
  - specify pthreads at configure-time instead of letting configure guess


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable kbind support (deprecated, and I suspect unused)
  - configure with --with-kerberos=k5only instead of --with-kerberos=k5
  - build slapd with threads


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.12-1
changelog:
  - update to 2.0.12 to pull in fixes for setting of default TLS options, among
    other things
  - update to migration tools 39
  - drop tls patch, which was fixed better in this release


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a build-time requirement on pam-devel
  - add a build-time requirement on a sufficiently-new libtool to link
    shared libraries to other shared libraries (which is needed in order
    for prelinking to work)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - require cyrus-sasl-md5 (support for DIGEST-MD5 is required for RFC
    compliance) by name (follows from #43079, which split cyrus-sasl's
    cram-md5 and digest-md5 modules out into cyrus-sasl-md5)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move shared libraries to /lib
  - redo init script for better internationalization (#26154)
  - don't use ldaprc files in the current directory (#38402) (patch from
    hps@intermeta.de)
  - add BuildPrereq on tcp wrappers since we configure with
    --enable-wrappers (#43707)
  - don't overflow debug buffer in mail500 (#41751)
  - don't call krb5_free_creds instead of krb5_free_cred_contents any
    more (#43159)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build dummy certificate in %post, use it in default config
  - configure-time shenanigans to help a confused configure script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - back out pidfile patches, which interact weirdly with Linux threads
  - mark non-standard schema as such by moving them to a different directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add support for additional OPTIONS, SLAPD_OPTIONS, and SLURPD_OPTIONS in
    a /etc/sysconfig/ldap file (#23549)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change automount object OID from 1.3.6.1.1.1.2.9 to 1.3.6.1.1.1.2.13,
    per mail from the ldap-nis mailing list


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Norbert Klasen's patch (via Del) to fix searches using ldaps URLs
    (OpenLDAP ITS #889)
  - add "-h ldaps:///" to server init when TLS is enabled, in order to support
    ldaps in addition to the regular STARTTLS (suggested by Del)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - reorganize the patch list to separate MigrationTools and OpenLDAP patches
  - switch to Luke Howard's rfc822MailMember schema instead of the aliases.schema
  - configure slapd to run as the non-root user "ldap" (#19370)
  - chdir() before chroot() (we don't use chroot, though) (#19369)
  - disable saving of the pid file because the parent thread which saves it and
    the child thread which listens have different pids


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add missing required attributes to conversion scripts to comply with schema
  - add schema for mail aliases, autofs, and kerberosSecurityObject rooted in
    our own OID tree to define attributes and classes migration scripts expect
  - tweak automounter migration script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - try adding the suffix first when doing online migrations
  - force ldapadd to use simple authentication in migration scripts
  - add indexing of a few attributes to the default configuration
  - add commented-out section on using TLS to default configuration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.6
  - add buildprereq on cyrus-sasl-devel, krb5-devel, openssl-devel
  - take the -s flag off of slapadd invocations in migration tools
  - add the cosine.schema to the default server config, needed by inetorgperson


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add the nis.schema and inetorgperson.schema to the default server config
  - make ldapadd a hard link to ldapmodify because they're identical binaries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - build a semistatic slurpd with threads, everything else without
  - disable reverse lookups, per email on OpenLDAP mailing lists
  - make sure the execute bits are set on the shared libraries


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split off clients and servers to shrink down the package and remove the
    base package's dependency on Perl
  - make certain that the binaries have sane permissions


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch to gdbm; I'm getting off the db merry-go-round
  - tweak the init script some more
  - add instdir to @INC in migration scripts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak init script to return error codes properly
  - change initscripts dependency to one on /etc/init.d


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.11
  - add condrestart logic to init script
  - munge migration scripts so that you don't have to be 
    /usr/share/openldap/migration to run them
  - add code to create pid files in /var/run


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - more minimalistic fix for bug #11111 after consultation with OpenLDAP team
  - backport replacement for the ldapuser patch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 1.2.10
  - add revamped version of patch from kos@bastard.net to allow execution as
    any non-root user
  - remove test suite from %build because of weirdness in the build system


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the defaults for databases and whatnot to /var/lib/ldap (bug #10714)
  - fix some possible string-handling problems


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add -D_REENTRANT to make threaded stuff more stable, even though it looks
    like the sources define it, too
  - mark *.ph files in migration tools as config files


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 1.2.7
  - fix some bugs from bugzilla (#4885, #4887, #4888, #4967)
  - take include files out of base package


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.12.1.el5]
changelog:
  - [audit] auditsc: audit_krule mask accesses need bounds checking (Denys Vlasenko) [1102702 1102703] {CVE-2014-3917}
  - [mm] writeback: Fix hang when low on memory due to NFS traffic (Larry Woodman) [1125246 1080194]
  - [net] tg3: Fix Read DMA workaround for 5719 A0 (Ivan Vecera) [1121017 924590]
  - [fs] jbd: don't wake kjournald unnecessarily (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: don't wait (forever) for stale tid caused by wraparound (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix waiting and sending of barrier in ext4_sync_file() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: Add function jbd2_trans_will_send_data_barrier() (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd2: fix sending of data flush on journal commit (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4, jbd2: Add barriers for file systems with ext journals (Denys Vlasenko) [1116027 1081785]
  - [fs] jbd: fix fsync() tid wraparound bug (Denys Vlasenko) [1116027 1081785]
  - [fs] ext4: fix fdatasync() for files with only i_size changes (Eric Sandeen) [1117665 1102768]


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.11.1.el5]
changelog:
  - [fs] dcache: fix cleanup on warning in d_splice_alias (Denys Vlasenko) [1109720 1080606]
  - [net] neigh: Make neigh_add_timer symmetrical to neigh_del_timer (Marcelo Ricardo Leitner) [1111195 1109888]
  - [net] neigh: set NUD_INCOMPLETE when probing router reachability (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: router reachability probing (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: probe routes asynchronous in rt6_probe (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ndisc: Update neigh->updated with write lock (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: remove the unnecessary statement in find_match() (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: fix route selection if CONFIG_IPV6_ROUTER_PREF unset (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Fix def route failover when CONFIG_IPV6_ROUTER_PREF=n (Marcelo Ricardo Leitner) [1106354 1090806]
  - [net] ipv6: Prefer reachable nexthop only if the caller requests (Marcelo Ricardo Leitner) [1106354 1090806]
  - [fs] ext4/jbd2: don't wait forever stale tid caused by wraparound (Eric Sandeen) [1097528 980268]
  - [fs] ext4: Initialize fsync transaction ids in ext4_new_inode() (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: don't wake kjournald unnecessarily (Eric Sandeen) [1097528 980268]
  - [fs] jbd2: fix fsync() tid wraparound bug (Eric Sandeen) [1097528 980268]
  - [infiniband] rds: do not deref NULL dev in rds_iw_laddr_check() (Jacob Tanenbaum) [1093311 1093312] {CVE-2014-2678}
  - [fs] nfs4: Add recovery for individual stateids - partial backport. (Dave Wysochanski) [1113468 867570]
  - [fs] nfs4: Don't start state recovery in nfs4_close_done - clean backport. (Dave Wysochanski) [1113468 867570]
  - [xen] page-alloc: scrub anonymous domain heap pages upon freeing (Vitaly Kuznetsov) [1103648 1103649] {CVE-2014-4021}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [2.6.18-371.9.1.el5]
changelog:
  - [nfs] sunrpc: don't use a credential with extra groups (Mateusz Guzik) [1095062 976201]
  - [scsi] lpfc: Remove NDLP reference put in lpfc_cmpl_els_logo_acc (Rob Evers) [1096061 1075228]
  - [infiniband] rds: dereference of a NULL device (Jacob Tanenbaum) [1079216 1079217] {CVE-2013-7339}
  - [kernel] futex: check relative timeouts for overflow (Denys Vlasenko) [1091832 1084168]
  - [virt] kvm: correctly detect KVM when hv emulation is enalbed (Jason Wang) [1094152 985767]
  - [security] Fix spurious warnings in security_ops_task_setrlimit (Mateusz Guzik) [1092869 916235]
  - [block] floppy: don't write kernel-only members to FDRAWCMD output (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}
  - [block] floppy: ignore kernel-only members in FDRAWCMD input (Denys Vlasenko) [1094302 1094303] {CVE-2014-1738 CVE-2014-1737}


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-5jpp.1
changelog:
  - Resync with latest from JPP.
  - Partially adopt new naming convention (.1 suffix).
  - Use ln and rm explicitly instead of core-utils in Requires(x).


author: Vivek Lakshmanan <vivekl@redhat.com> - 0:2.7.0-3jpp_1fc
changelog:
  - Merge with latest version from jpp.
  - Undo ExcludeArch since eclipse available for all arch-es.
  - Remove jars from sources for new upstream version.
  - Purge unused patches from previous release.
  - Conditional native compilation with GCJ.
  - Use NVR macros wherever possible.


author: Gary Benson <gbenson at redhat.com> 0:2.6.0-3jpp_3fc
changelog:
  - Build on ia64, ppc64, s390 and s390x.
  - Switch to aot-compile-rpm (also BC-compiles xsltc and samples).


author: Gary Benson <gbenson@redhat.com> 0:2.6.0-2jpp_3fc
changelog:
  - Remove now-unnecessary workaround for #130162.
  - Rearrange how BC-compiled stuff is built and installed.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.2-1jpp
changelog:
  - Update to 2.5.2.
  - Re-enable javadocs, new style versionless symlink handling, crosslink
    with local J2SE javadocs.
  - Spec cleanups.


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.1-1jpp
changelog:
  - Update to 2.5.1.
  - Fix jpackage-utils version in BuildRequires, add xerces-j2.
  - Non-versioned javadoc symlinking.
  - Add one missing epoch.
  - Clean up manifests from Class-Path's and other stuff we don't include.
  - xsltc no longer provides a jaxp_transform_impl because of huge classpath
    and general unsuitablity for production-use, system-installed transformer.
  - Own (ghost) %{_javadir}/jaxp_transform_impl.jar.
  - Remove alternatives in preun instead of postun.
  - Disable javadoc subpackage for now:
    <http://issues.apache.org/bugzilla/show_bug.cgi?id=20572>


author: Ville Skyttä <ville.skytta at iki.fi> - 2.4.1-2jpp
changelog:
  - bsf -> oldbsf.
  - Use non-versioned jar in alternative, don't remove it on upgrade.
  - Remove hardcoded packager tag.


author: Ville Skyttä <ville.skytta at iki.fi> 2.4-0.D1.2jpp
changelog:
  - Remove xerces-j1 runtime dependency.
  - Add bcel, jlex, regexp to xsltc runtime requirements:
    <http://xml.apache.org/xalan-j/xsltc_usage.html>
  - Build with -Dbuild.compiler=modern (IBM 1.3.1) to avoid stylebook errors.
  - XSLTC now provides jaxp_transform_impl too.
  - Earlier changes by Henri, from unreleased 2.4-D1.1jpp:
      Mon Jul 15 2002 Henri Gomez <hgomez@users.sourceforge.net> 2.4-D1.1jpp
    - 2.4D1
    - use the jlex 1.2.5-5jpp (patched by Xalan/XSLTC team) rpm
    - use the stylebook-1.0-b3_xalan-2.jar included in source file till it will
      be packaged in jpackage
    - use jaxp_parser_impl (possibly xerces-j2) instead of xerces-j1 for docs
      generation, since it's tuned for stylebook-1.0-b3_xalan-2.jar
    - build and provide xsltc in a separate rpm


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - provides jaxp_transform_impl
  - requires jaxp_parser_impl
  - stylebook already requires xml-commons-apis
  - jaxp_parser_impl already requires xml-commons-apis
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Henri Gomez <hgomez@users.sourceforge.net> 2.3.1-2jpp
changelog:
  - fix built classpath (bsf, bcel are existing jpackage rpms),
  - add buildrequires for javacup and JLex


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.0-1jpp
changelog:
  - 2.2.0 final
  - versioned dir for javadoc
  - no dependencies for manual and javadoc packages
  - stricter dependency for compat and demo packages
  - fixed package confusion
  - adaptation for new servlet3 package
  - requires xerces-j1 instead of jaxp_parser
  - xml-apis jar now in required xml-commons-apis external package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D14-1jpp
changelog:
  - 2.2.D14
  - javadoc into javadoc package
  - compat.jar into compat package
  - compat javadoc into compat-javadoc package


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.2.D10-1mdk
changelog:
  - cvs references
  - splitted demo package
  - moved demo files to /usr/share/xalan-j2
  - only manual package requires stylebook-1.0b3
  - only demo package requires servletapi3


author: Brian C. Lane <bcl@redhat.com> 5.1.19.6-78
changelog:
  - Use multipath -B to prevent it from writing to bindings file in the initrd (bcl)
    Resolves: rhbz#782615


author: Brian C. Lane <bcl@redhat.com> - 5.1.19.6-72
changelog:
  - Add multipath to the list of FIPS limitations. (#700102) (bcl)
    Resolves: rhbz#700102
  - rootdev should be a dev node (#532207) (bcl)
    Resolves: rhbz#532207
  - exit() from nash-hotplug when the parent pid dies (#700592) (oblin)
    Resolves: rhbz#700592
  - Add test for updating an existing arg on ALL kernels (#696971) (bcl)
    Resolves: rhbz#696971
  - Allow args changes to affect all kernel entries (#696971) (bcl)
    Resolves: rhbz#696971
  - Fix segfault on other sections (#679581) (bcl)
    Resolves: rhbz#679581
  - Support dirsync option in nash's mount command (#602409) (cdahlin)
    Resolves: rhbz#602409
  - Clear lvm command_names and prefix (#593096) (bcl)
    Resolves: rhbz#593096
  - Add channel bonding support when root is on iscsi (#529158) (bcl)
    Resolves: rhbz#529158
  - Only add a module once (#512892) (bcl)
    Resolves: rhbz#512892
  - s390 now requires dmraid (#620699) (bcl)
    Resolves: rhbz#620699
  - libdhcp-1.20-12 or later now required (#660731) (bcl)
    Resolves: rhbz#660731


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-64
changelog:
  - Set up each network interface only once.
    Resolves: rhbz#499781
  - Don't fail on s390* when dmraid.static isn't there but withdmraid is true
    Resolves: rhbz#513961


author: Peter Jones <pjones@redhat.com>
changelog:
  - Handle options with spaces in /etc/modprobe.conf
    Resolves: rhbz#467850
  - Handle root vg spanning multiple multipaths
    Resolves: rhbz#501535
  - Use lvm --dumpconfig to retrieve the lvm configuration
    Resolves: rhbz#517868


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-55
changelog:
  - Stop local loop variable clobbering global rootdev
    Resolves: rhbz#503567
  - Don't try to activate RAID sub sets
    Resolves: rhbz#526246


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-54
changelog:
  - Handle cciss controllers correctly in fips mode
    Resolves: rhbz#505108
  - IA64 has /boot/efi instead of /boot, handle this correctly in fips mode
    Resolves: rhbz#505111
  - Don't require prelink in fips mode
    Resolves: rhbz#505113


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-49
changelog:
  - When in fips mode load tcrypt module to self test all crypto algorithms
    Resolves: rhbz#499639
  - Add --rm_partitions to dmraid invocation to stop IO-errors when booting
    from striped dmraid.
    Resolves: rhbz#475384


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-48
changelog:
  - Fix swsuspdev label/uuid handling
    Resolves: rhbz#489836
  - Fix symlink generation in installkernel on ia64
    Resolves: rhbz#227711
  - Make netname command handle environmental variables correctly.
    Resolves: rhbz#474422


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-47
changelog:
  - Force loading of all crypto modules in fips mode, so that they all get
    integrity checked before any of them are used.
    Resolves: rhbz#467497


author: Hans de Goede <hdegoede@redhat.com> - 5.1.19.6-46
changelog:
  - Add integrity checking of the kernel image to the generated initrd when in
    fips mode.
    Resolves: rhbz#467497


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-41
changelog:
  - Don't treat the first iteration of stabilized as a change
    Resolves: rhbz#464636
  - Revert "fix" in -40, as it breaks dmraid and multipath.


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-39
changelog:
  - Revert the fix to rhbz#276911, as it causes more bugs.
    Resolves: rhbz#466848
  - Improve handling of encrypted cciss devices. (dlehman)
    Resolves: rhbz#467839


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-33
changelog:
  - Allow findstoragedriverinsys() to handle nodes in /sys without a slaves tree
    Resolves: rhbz#461536


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-31
changelog:
  - Don't limit zipl kernel label length to 15 any more.
    Resolves: rhbz#426992
  - Handle sysfs slave device directories slightly better.
    Related: rhbz#447841
  - Don't put all network interface's dhcp leases in the same file.
    Related: rhbz#447375


author: Peter Jones <pjones@redhat.com>
changelog:
  - Fix typo in patch for bz241763
    Resolves: rhbz#241763
  - All ppc uses vmlinux instead of vmlinuz in new-kernel-package
    Resolves: rhbz#276911
  - Add support for DKMS hooks
    Resolves: rhbz#440584


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-28
changelog:
  - Fix bad regexp in devicemapper dependency resolution code
    Resolves: rhbz#439371
  - Re-do workaround for gfs2/lock_nolock dep brokenness
    Resolves: rhbz#438743


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-27
changelog:
  - Fix initialization of "withusb" on s390/s390x
    Resolves: rhbz#432776
  - Fix application of patch 15
    Resolves: rhbz#428723
  - Fix netdev naming with drivers specified on the command line
    Resolves: rhbz#436509


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-21
changelog:
  - Fix firmware loader completion logic
    Resolves: rhbz#235277
  - Support spaces in the kernel command line
    Resolves: rhbz#240779
  - Clarify module option documentation
    Resolves: rhbz#241763


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-20
changelog:
  - Add iSCSI Boot Firmware Table support
    Resolves: rhbz#307771
  - Handle empty dm rules better
    Resolves: rhbz#244202
  - Load usb modules in correct order
    Resolves: rhbz#234847
  - Fix multipath on iscsi
    Resolves: rhbz#428723


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-16
changelog:
  - Invoke kpartx the same was as rc.sysinit to maintain naming consistency
    Related: rhbz#185852
  - Remove unused code
    Related: rhbz#185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-14
changelog:
  - Add support for disabling dmraid from a config file so we don't regress
    Related: #185852
  - Clean up new mpath code.
    Related: #185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-13
changelog:
  - Fix "--without-usb"
    Resolves: #230852
  - Make /lib/firmware before trying to put things there
    Related: #218452


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-12
changelog:
  - Don't try to guess a module path if modprobe can find it
    Resolves: #218452
  - Load sd_mod explicitly during iscsi boot.
    Resolves: #222685


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-11
changelog:
  - Remove unnecessary text
    Resolves: rhbz#238019
  - Handle EMC storage arrays when gathering WWIDs for multipath devices
    Related: rhbz#185852


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-9
changelog:
  - Quote tr arguments to avoid errors from certain input
    Related: rhbz#185852
  - In the inst() function, make the destination directory if it doesn't exist
    Related: rhbz#185852


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-4
changelog:
  - Make sure to copy in /var/lib/multipath/bindings to the initrd
  - Bring up multipath devices by WWID on initrd boot
  - Resolves: rhbz#185852
  - Resolves: rhbz#216240


author: Jon Masters <jcm@redhat.com> - 5.1.19.6-3
changelog:
  - Backport firmware fixes from Fedora 7 into RHEL5
    (use modinfo to discover firmware files required).
    Related: rhbz#184773


author: Jon Masters <jcm@redhat.com> - 5.1.19.6-2
changelog:
  - Add support for modinfo to locate modules.
  - Add elilo fixes for IA64 to new-kernel-pkg.
    Resolves: #239392
    Related: #224076


author: Jeremy Katz <katzj@redhat.com> - 5.1.19.3-1
changelog:
  - don't create /dev/tty* on s390 (#209204)
  - handle multi-line options (#209447)
  - ensure that scsi devices have stabilized to ensure the rootdev 
    is available (#213039)
  - iscsi tools changed their syntax somewhat (#221088)


author: Peter Jones <pjones@redhat.com> - 5.1.19-1
changelog:
  - Fix booting on non-LVM devices where sysfs uses a '!' in the device path,
    such as cciss.  (#201875, #196360)


author: Peter Jones <pjones@redhat.com> - 5.1.16-1
changelog:
  - Don't require non-tmpfs tmpdir unless we're using loopback
  - Fix symlink chasing for yaboot.conf in grubby (#207302)


author: Peter Jones <pjones@redhat.com> - 5.1.11-1
changelog:
  - Pull in bdevid properly (not two sources any more)
  - Lots of minor bugfixes, leak fixups, etc.
  - Updates for new iScsi userland (katzj)
  - ata and usb device id probes in bdevid
  - preliminary work for boot-time device identification.
  - Fixes for network driver selection (katzj)


author: Peter Jones <pjones@redhat.com> - 5.1.10-1
changelog:
  - Fix %setup args
  - Work around lvm locking problems when clvm is installed (#203904)
  - Work around lvm segfault by always using lvm.static
  - Fix label scanning on dm devices (based on a patch from Hans de Goede)
    (#204763)
  - handle the /proc/bus/usb mounting with a state machine in the module
    loading emission, not with a sentinal value
  - do forced finding of devices *after* auto-detection of the root fs, so
    we're not blindsided by bogus scsi_hostadapter aliases and the like.
  - move nashDm* functions to libnash so stuff in block.c can call them.


author: Peter Jones <pjones@redhat.com> - 5.1.7-1
changelog:
  - Make "stabilized" work better (patch from Alexandre Oliva)
  - Rewrite usb handling (notting and pjones)
  - Fix libbdevid provides/obsoletes.
  - Include usb hcd drivers by default


author: Bill Nottingham <notting@redhat.com> - 5.1.3-1
changelog:
  - replace various sed/grep/cut/head calls with bash & awk equivalents
  - fix a typo
  - nfs loop fixes
  - silence xen errors when sysfs layout is different


author: Peter Jones <pjones@redhat.com> - 5.1.2-1
changelog:
  - pull in new libbdevid for scsi probing fix
  - restructure package so things can include libbdevid (and its modules)
    without depending on python


author: Jeremy Katz <katzj@redhat.com> - 5.1.0-1
changelog:
  - allow rootdev/rootfs/rootopts parsing on the mkinitrd command line (notting)
  - fix case where we'd spin forever resolving a device (#199046)


author: Peter Jones <pjones@redhat.com> - 5.0.47-1
changelog:
  - add libbdevid
  - fix mode handling on open syscall wrapper (patch from Mark McLoughlin)
  - save dhcp lease file after network initialization (patch from markmc)


author: Peter Jones <pjones@redhat.com>
changelog:
  - make libnash.a and the nash-devel package
  - use libdhcp instead of pump (patch from Mark McLoughlin)


author: Jeremy Katz <katzj@redhat.com> - 5.0.46-1
changelog:
  - if we don't get a modalias for a net driver, try via 
    ethtool (notting, #196104)
  - add patches from Aron Griffis (aron AT hp DOT com) for multiboot 
    support on ia64


author: Jeremy Katz <katzj@redhat.com> - 5.0.44-1
changelog:
  - fix so we only use iscsistart if we're doing root on iscsi 
  - fix spurious shell error (noticed by karsten)


author: Jeremy Katz <katzj@redhat.com> - 5.0.43-1
changelog:
  - Add back patches from pjones which had just been in the package for 
    * fix bad shell code to detect DMs in use
    * fix "stabilized" to stat where appropriate
    * use stabilized for sbp2


author: Jeremy Katz <katzj@redhat.com> - 5.0.42-1
changelog:
  - add a hack to handle xennet devices not having a modalias (#196104)
  - initial pass at support for root on iscsi (patch from Patrick 
    Mansfield <patmans@us.ibm.com>)


author: Peter Jones <pjones@redhat.com> - 5.0.38-1
changelog:
  - handle bringing up multiple network devices (katzj)
  - make "withusb=yes" default
  - add --without-usb
  - make usb load [euo]hci_hcd correctly


author: Peter Jones <pjones@redhat.com> - 5.0.33-1
changelog:
  - fix unbalanced pushd in mkinitrd (patch from Pete Zaitcev, bz# 185822)
  - add "cond" command for simple conditionals (bz# 182938)
  - add "status" command to see/set the exit status for testing
  - add "--remove-args" and "--update" args for new-kernel-pkg (patch from
    Don Zickus, bz# 183917)


author: Peter Jones <pjones@redhat.com> - 5.0.32-1
changelog:
  - handle sd_mod on scsi_mod in findmodule, not in the scsi setup.  This
    fixes the "no scsi_hostadapter" alias problem better (#182008).


author: Peter Jones <pjones@redhat.com> - 5.0.30-1
changelog:
  - move blkid.tab* references to /etc/blkid/blkid.tab*
  - don't do the selinux context stuff on blkid.tab*, as it now inherits from
    the directory.


author: Peter Jones <pjones@redhat.com> - 5.0.29-1
changelog:
  - Fix pump-devel buildrequires
  - Fix grubby's getpathbyspec() usage (#183010)
  - Fix grubby's makefile
  - Make readlink command work with super scary huge sysfs paths (#183091)
  - Make readlink handle directories better (#166666)
  - Don't create ramdisk blockdevs, mkblkdevs does it (#181873)
  - Don't use showlabels to resolve labels, use resolveDevice so we don't
    need messy awk (#180372)


author: Peter Jones <pjones@redhat.com> - 5.0.28-1
changelog:
  - Make /dev/efirtc on ia64 boxes (#182598)
  - Handle selinux contexts on /etc/blkid.tab* since we can't do it in
    libblkid.
  - Make building from the "nash" subdir work again
  - Make getpathbyspec() allocate on the caller's stack, eliminating
    several memory leaks in callers.
  - Don't strip nash


author: Peter Jones <pjones@redhat.com> - 5.0.27-1
changelog:
  - Fix multiboot argument quoting in new-kernel-package (#182243)
  - Fix "netlink" fd error in hotplug initialization.
  - Fix directory creation in smartmknod()
  - Fix find command when it's not run alone (#181874, patch from Mark
    McLoughlin)
  - Don't use 0-length uuids
  - Update /dev/mapper nodes more often
  - Allow dm partadd not to include the /dev/mapper path
  - Use /etc/fstab, not /fstab, so if you've got /sbin/mount it'll work
  - Bring in sd_mod if libata or scsi_mod is selected (#181983)
  - use -Wl,--wrap,open and __wrap_open() instead of coeOpen()


author: Peter Jones <pjones@redhat.com> - 5.0.26-1
changelog:
  - fix detection of floppy devices, don't probe them for labels
  - fix grubby to use the same label scanning code as nash
  - senseless rewriting of makefiles so that grubby can use nash's .o's, uh,
    "more easily".


author: Peter Jones <pjones@redhat.com> - 5.0.24-1
changelog:
  - use the right nash-dm command to get the device list
  - check if a subdevice has the same partition table, not if it starts
    at the right place (fixes partition comparison on !mirror devices)


author: Peter Jones <pjones@redhat.com> - 5.0.22-1
changelog:
  - formatting cleanups
  - prefix partition number with "p" for partitions on dmraid
  - add support for disabling partitions which overlap with partitions on
    dm devices.
  - add multipath support
  - fix dm creation ordering and partition detection
  - add "network" command (katzj)
  - add nfsroot support (katzj)
  - put "showlabels" back into nash


author: Peter Jones <pjones@redhat.com> - 5.0.21-1
changelog:
  - add "mount -o bind" support and "mount --move" support (#109366, patch
    from Kasper Dupont)
  - add resolveDevice command, which cases down device labels.
  - remove "findlodev" from the documentation (#178587)
  - fix nash command name parsing bug (#178587)
  - fix "find" argument parsing (#178587)
  - add "find" handling for "-type d"


author: Peter Jones <pjones@redhat.com> - 5.0.19-1
changelog:
  - mkinitrd: get resolve_dm_name() and get_numeric_dev() from initscripts
    instead of a private copy
  - add block.[ch]:
    - move parse_sysfs_devnum(), sysfs_blkdev_probe(), and
      mkpathbyspec() from nash.c
    - add label/uuid/name lookups for block devices using libblkid
  - add lib.[ch]:
    - move makeFdCoe(), coeOpen(), coeFopen(), coeOpendir(), readFD(),
      nashLoggerV(), nashLogger(), qprintf(), eprintf(), smartmknod(),
      testing, quiet, reallyquiet from nash.c
    - move nashDefaultLogger(), from dm.c
    - move log enums and declarations from dm.h
  - dm.c: add dm_finish(), which does dm_task_destroy() and then library cleanup
    (solves an fd leak)
  - remove linux_fs.h, mount_by_label.[ch], name_to_dev_t.[ch]


author: Peter Jones <pjones@redhat.com> - 5.0.18-1
changelog:
  - make mkinitrd discover dm uuids
  - add uuid support to nash's "dm create" and "dm partadd"
  - add nash command "dm get_uuid $NAME"
  - add support for renamed dm raids


author: Peter Jones <pjones@redhat.com> - 5.0.14-1
changelog:
  - Remove vestigial loopback support.
  - Remove email addresses from man pages (which still need some work)


author: Peter Jones <pjones@redhat.com> - 5.0.11-1
changelog:
  - audit for open()s without appropriate closes()
  - make new functions coeOpen(), coeFopen(), and coeOpendir().  These behave
    like open(), fopen(), and opendir() except that they set any associated
    file descriptors to close on exec().
  - use them everywhere except where we open a console.


author: Peter Jones <pjones@redhat.com> - 5.0.5-1
changelog:
  - make PROBE, MODULES, and PREMODS load defaults from a config file
  - get rid of support for not using a dynamic /dev
  - add options to force device probes (for when PROBE is "no")
  - consolidate some duplicate code paths
  - make nash's otherCommand check PATH first and use what it finds there for
    any commands it needs to run, unless the command starts with "nash-",
    in which case the internal version is used unconditionally
  - remove the symlink hack for setuproot/preswitchroot/switchroot
  - wrap all the nash commands in mkinitrd with shell functions and use the
    "nash-" varient.
  - rework root fs creation so Jeremy can use the otherCommand feature


author: Peter Jones <pjones@redhat.com> - 5.0.4-1
changelog:
  - split switchroot into setuproot and switchroot, with presetuproot in
    between
  - make preswitchroot and setuproot execute through symlinks, so they may
    be replaced by a second initramfs image
  - add logic to mount filesystems specified in /etc/fstab.sys during setuproot
  - general code cleanups


author: Peter Jones <pjones@redhat.com> - 5.0.2-1
changelog:
  - add error and quiet printf functions
  - use them instead of testing quiet and typing stderr everywhere
  - actually make _all_ errors use eprintf (and thus stderr)
  - print strerror in errors instead of raw errno
  - make "getKernelCmdLine use readFD
  - make "getKernelArg" picky about if you've got the right command vs
    just one that starts with the same string
  - make "getKernelArg" handle "=" for you, so it either gives you the value
    when there is one, '\0' when there's not and it's EOL, or whitespace.
  - reformat some two-space-indent spots
  - check for short reads in catCommand
  - kill pivotroot
  - cleaned up resume messages
  - make mkrootdev use readFD
  - combine mkdevies and makedevs into mkblkdevs, no longer
    using /proc/partitions
  - don't use callocs+memcpy/strcpy+strcat when we can use asprintf
  - make setQuietCommand use getKenrelArg
  - make runStartup use readFD
  - patch from Alexandre Oliva to fix LVM-on-RAID1 /root and swap-on-LVM
    (bz #169059)
  - reorder device creation for easier maintenance create /dev/rtc
  - change fixme comment about lvm vgs
  - use cemit at some places we used a lot of emits before
  - reorder device node creation for clarity
  - use mkblkdevs instead of makedevs and mkdevices
  - decouple loopback root and lvm


author: Peter Jones <pjones@redhat.com> - 5.0.1-1
changelog:
  - create /dev/rtc
  - create /dev/tty, /dev/tty{0..11}, and /dev/ttyS{0..4}
  - tweak the messages output in loud mode during device node creation


author: Peter Jones <pjones@redhat.com> - 5.0.0-1
changelog:
  - remove support for pivotroot
  - remove support for non-initramfs initrds
  - remove support for 2.4 kernels
  - don't force scsi_mod before scsi modules; deps should bring it in.
    same for "unknown"; it's not needed any more.
  - lots of whitespace adjustment
  - minor messaging changes
  - no manual redirection to stderr or RCFILE, nor manual verbose checking
  - in light of these changes and other planned changes, this is 5.0.0


author: Peter Jones <pjones@redhat.com> - 4.2.23-2
changelog:
  - Fix module discovery to not always use the modules /dev/hda1 requires
    when using root-on-label.
  - Put the lvm check after the raid check, so the raid check atually gets run.


author: Peter Jones <pjones@redhat.com> - 4.2.22-1
changelog:
  - Only scan appended kernel command line args for duplicates once.
  - handle short reads correctly in nash's readFD
  - use calloc for things instead of malloc, since we usually need zeroed memory
    and we never memset
  - use canonicalize_file_name instead of malloc+realpath
  - honor quiet flag on suspend/resume
  - autodetect storage drivers in mkinitrd


author: Peter Jones <pjones@redhat.com> - 4.2.17-1
changelog:
  - Don't use udev or udevstart in the initrd; it's trivial to do
    all that work by looking for directories with "dev" nodes in sysfs
    and making the device from the dirname using major/minor from "dev"


author: Peter Jones <pjones@redhat.com> - 4.2.16-1
changelog:
  - Add a patch from Jeff Layton to remove files from the initramfs
    before executing the new init.  (slightly modified, #153069)


author: Peter Jones <pjones@redhat.com> - 4.2.11-1
changelog:
  - don't copy "rw" option into the initrd; use "ro" instead if it's
    the only option.
  - Don't print "unmounting old ..." messages in nash if we're set to quiet


author: Peter Jones <pjones@redhat.com> - 4.2.9-1
changelog:
  - invoke bash with "--norc" (#155986)
  - use binary udevstart.static, not a symlink
  - print exit status in nash when programs return an error


author: Peter Jones <pjones@redhat.com> - 4.2.6-1
changelog:
  - work correctly with "set -o noclobber"
  - wait longer after modprobe of usb-storage
  - fix a wrong error output file


author: Peter Jones <pjones@redhat.com> - 4.2.3-1
changelog:
  - use --ignorelockingfailure with lvm commands in the initrd, and only
    activate the volume / is on.  (#151172)


author: Peter Jones <pjones@redhat.com> - 4.2.0.3-1
changelog:
  - Make nash expand environment variables on command lines (#144474)
  - Make nash check pids returned from wait*() (#145660)


author: Jeremy Katz <katzj@redhat.com> - 4.1.17-1
changelog:
  - run udevstart again instead of sleeping, this will ensure all 
    devices are created in all cases after modules have been 
    loaded (thanks to notting)


author: Jeremy Katz <katzj@redhat.com> - 4.1.15-1
changelog:
  - new-kernel-pkg: set new kernels as default (#135161) when
    a) /etc/sysconfig/kernel contains UPDATEDEFAULT=yes
    b) --package foo is passed in and foo matches DEFAULTKERNEL 
       in /etc/sysconfig/kernel


author: Jeremy Katz <katzj@redhat.com> - 4.1.12-1
changelog:
  - update to work with udev 032, conflict with old udev
  - if udev is present, use it.  trying to avoid the use of udev if it's 
    installed is the road to things not working


author: Jeremy Katz <katzj@redhat.com> - 4.1.0-1
changelog:
  - mkinitrd: if using udev for the initrd, set things up appropriately 
    (based on patches from Harald Hoyer and Thomas Woerner)
  - nash: support for echo -n
  - nash: better error message on exec failures
  - nash: exec udev if we're called as a hotplug handler


author: Jeremy Katz <katzj@redhat.com> - 4.0.6-1
changelog:
  - various fixes from a code review by Steve Grubb which should fix 
    some of the lingering problems (#129673)
  - nash: warning fix from Michal Jaegermann (#129673)
  - grubby: removal with (hd0,0)


author: Jeremy Katz <katzj@redhat.com> - 4.0.4-1
changelog:
  - nash: fix mounting by label in some cases (tracked down by 
    Erik Jacobson, #129581, #129673, #129667, #129635)


author: Jeremy Katz <katzj@redhat.com> 4.0.3-1
changelog:
  - grubby: more (hd0,0) support (#125156)
  - mkinitrd.8: update manpage (#129585)
  - nash: fix some warnings


author: Jeremy Katz <katzj@redhat.com> 4.0.2-1
changelog:
  - nash: support bind mounting
  - grubby: support the (hd0,0)/path syntax for kernels and initrds in
    grub.conf (#114758, #125156, #120906)


author: Jeremy Katz <katzj@redhat.com> - 4.0.0-1
changelog:
  - create an initramfs on 2.6 kernels instead of an initrd
  - use new mount magic instead of pivot_root 
    on 2.6 kernels
  - try to handle the case of modules going away on kernel upgrades a 
    little bit more nicely (#123994)
  - avoid over-zealous creation of /dev/mapper/control (#127115)
  - improve nash(8) manpage (#127413)


author: Jeremy Katz <katzj@redhat.com> - 3.5.21-1
changelog:
  - new-kernel-package: add patch from Ryan Tilder to allow setting new 
    kernel as default (#117605)
  - mkinitrd: i2o_pci isn't in 2.6 (#120827)
  - new-kernel-pkg: conditionalize kernel binary name for 2.6 vs 2.4 
    on ppc/ppc64 (as it's vmlinuz in 2.6 instead of the 
    vmlinux from 2.4) (#120868)


author: Jeremy Katz <katzj@redhat.com> - 3.5.19-1
changelog:
  - nash/mkinitrd: quiet mode for nash and necessary mkinitrd changes 
    to work with it
  - mkinitrd: add lxo's patch for copying lvm.conf (#112099)
  - new-kernel-pkg: allow specifying the banner used in the boot loader config
    on the command line (#114809)


author: Jeremy Katz <katzj@redhat.com> 3.5.17-1
changelog:
  - mkinitrd: handle multiple spaces in modules.conf (from Lubomir Bulej)
  - nash: rebuild against new dietlibc fixing problems with root=LABEL= (#112623)
  - mkinitrd: determine kernel version and adjust modulefile appropriately 
    so that we look at /etc/modprobe.conf for 2.6 kernels
  - mkinitrd: first pass at getting lvm working on 2.4 -> 2.6 upgrade


author: Jeremy Katz <katzj@redhat.com> 3.5.16-1
changelog:
  - fixing handling of non-lvm case when /dev/mapper/control isn't present
  - add patch from Al Viro to get root dev in numeric form by grokking sysfs


author: Jeremy Katz <katzj@redhat.com> 3.5.15-1
changelog:
  - mkinitrd: add support for lvm2 (note: will not currently handle being
    on a running 2.4 kernel and installing 2.6 with lvm rootfs)


author: Jeremy Katz <katzj@redhat.com> 3.5.10-1
changelog:
  - clean up bogus warning in installkernel
  - only try to do grub configs on arches which support grub (#103261)


author: Matt Wilson <msw@redhat.com> 3.5.9-1
changelog:
  - add \n to error messages in grubby
  - NUL terminate buffer returned from readlink properly
  - symlinks are most likely relative, chdir to / before trying to
    follow them
  - yaboot needs boot prefix
  - silo needs boot prefix too


author: Jeremy Katz <katzj@redhat.com> 3.5.7-1
changelog:
  - pick modules from /lib/modules/$(uname -r)/updates first
  - be less confused by more than one module of a name


author: Jeremy Katz <katzj@redhat.com> 3.5.3-1
changelog:
  - mkinitrd: fix copying of pvs (#97314, #97289)
  - mkinitrd: use pvscan instead of lvmdiskscan to find PVs to work 
    better on other arches
  - mkinitrd: better check for dasd existence
  - mkinitrd: make certain lvm-mod is included if root on lvm


author: Jeremy Katz <katzj@redhat.com> 3.5.2-1
changelog:
  - mkinitrd: revert use of modprobe -c.  it breaks in the installer when we 
    don't have a modules.dep for the BOOT kernel
  - nash: return pivot_root call correctly (#97753)


author: Jeremy Katz <katzj@redhat.com> 3.5.0-1
changelog:
  - mkinitrd: add patch from gc@mandrakesoft.com to determine module 
    deps from modules.dep (#87873)
  - tweak patch to not break weird cases where module deps aren't all 
    you need :/
  - grubby: don't remove the last kernel (#60041)
  - mkinitrd: use modprobe -c to find module options (#89794)


author: Jeremy Katz <katzj@redhat.com> 3.4.51-1
changelog:
  - grubby: error out gracefully if we run out of space (#85424)
  - mkinitrd: copy parent dirs for pvs (#88962)
  - mkinitrd: exit with an exit status if tar fails (#90123)
  - new-kernel-pkg: only use the first entry for / (#90155)
  - grubby: fix a buffer overflow  (#90444)


author: Jeremy Katz <katzj@redhat.com> 3.4.49-1
changelog:
  - new-kernel-pkg: on iSeries, we don't have a boot loader, just make the 
    kernel + initrd combo file (/boot/vmlinux-version.img)


author: Jeremy Katz <katzj@redhat.com> 3.4.47-1
changelog:
  - mkinitrd: fix using options for loading modules
  - mkinitrd: don't use kernel parameters for dasd at mkinitrd time, 
    use what's in modules.conf


author: Jeremy Katz <katzj@redhat.com> 3.4.46-1
changelog:
  - new-kernel-pkg: add necessary bits for s390, some logic cleanups
  - grubby: fix root detection for s390{,x}


author: Jeremy Katz <katzj@redhat.com> 3.4.45-1
changelog:
  - grubby: add silo support (sparc)
  - grubby: add zipl support (s390{,x})
  - add grubby test cases for zipl support


author: Jeremy Katz <katzj@redhat.com> 3.4.43-1
changelog:
  - apply ppc patches for new-kernel-pkg and installkernel from Dan 
    Burcaw <dburcaw@terrasoftsolutions.com>
  - man page tweak (#85471)


author: Jeremy Katz <katzj@redhat.com> 3.4.40-1
changelog:
  - fix i2o module ordering (#83447)
  - ifarch'd build requires of dietlibc now that the build system has a way to
    handle these


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change one test from a number to a string test that could otherwise
    fail in not properly setup chroot environments


author: <ewt@redhat.com>
changelog:
  - added support for yaboot
  - test script runs tests for all platforms
  - separated elilo configuration from lilo mode, allowing elilo specific
    tests to be run on any platform


author: <ewt@redhat.com>
changelog:
  - grubby now shortens lilo titles to ensure they are less then 16 characters
    long (76236)
  - mkinitrd would only turn on /dev/md0 if raid was needed; now it enables
    all raid devices listed in /proc/mdstat (82209)
  - use product name from /etc/redhat-release to generate label in grub.conf
    (82352)


author: <ewt@redhat.com>
changelog:
  - all mkdev() actions will create directories as needed (some code in
    mkdevices is now obsolete; I'll remove it later) (#73317)
  - added mkdev command to test the above
  - support diratime/nodiratime mount options (#78738)
  - grubby will follow symlinks when writing new config file (#78713)
  - don't depend on raidtab, use /proc/mdstat instead (#80424) this covers
    both mkinitrd and grubby


author: Jeremy Katz <katzj@redhat.com> 3.4.34-1
changelog:
  - grubby: fix segfault finding default if default doesn't have a root= (#66000)
  - don't include usb modules by default.  pass --with-usb to get usb modules
  - make sure kudzu exists before trying to exec it
  - handle multiple scsi hosts being present (#77422)
  - add /usr/sbin to default path (#79581)
  - fix using --builtin= (#80448)
  - grubby: preserve the mode on config files (#80776)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - mkinitrd: add support for finding gzipped modules
  - mkinitrd: don't be noisy if we don't have lvm-mod loaded


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby: don't bail when looking for root in appends of lilo-style configs
  - include grubby on x86_64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix some syntax errors
  - use grep's -q flag to save a redirect in places where we're not redirecting
    stderr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby could segfault by going into its lilo checking if it couldn't find 
    a default to copy (default had no root= and --bad-image-okay wasn't 
    being used)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - nash: create directories if needed in mkdevices command (#73090)
  - grubby: handle lilo case of non-linux default (#72202)


author: Erik Troan <ewt@redhat.com>
changelog:
  - --ifneeded is obsolete; we always need initrds
  - grubby lets you specify multiple indexes for --info
  - grubby lets you select kernels by title
  - added showlabels to nash
  - new-kernel-pkg sets the root device from /etc/fstab rather then inheriting it
  - new-kernel-pkg removes all entries w/ a duplicate label (67459)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added loadinitrd (used by mkbootdisk) on ia32 and sparc
  - modules "off" and "null" should be ignored (67086)
  - mkrootdev looks for root=LABEL=/ in /proc/cmdline, so root by label
    works again (fully determined by root= kernel parameter)
  - added --update-kernel and --remove-args arguments to grubby
  - kernel specification of ALL supported by grubby
  - DEFAULT accepted much more consistently
  - grubby --info displays info on all kernels specified, not just the first
  - ext3 need mbcache now (67354)
  - grubby allows config file entry numbers to be used as kernel paths
  - support /etc/sysconfig/grub.conf
  - display lba info from lilo.conf file in --info


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - don't run lilo twice on kernel removal in new-kernel-pkg
  - don't run grubby to add/remove kernels from new-kernel-pkg if 
    bootloader config doesn't


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --bootloader-probe to grubby
  - wrote a man page for grubby
  - include grubby on ia64
  - updated new-kernel-pkg to work with lilo/elilo
  - added --info=DEFAULT option


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --grub option so grub tests could run on ia64
  - added some basic tests of lilo default directive handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --nopivot (53679)
  - honor INSTALL_PATH in installkernel (32833)
  - installkernel versions old kernels as well (52756)
  - lilo support added to grubby


author: Erik Troan <ewt@redhat.com>
changelog:
  - cleaned up usage message
  - added --omit-lvm-modules to man page
  - added --builtin option (65250)
  - skip comments in fstab (65249)
  - added findlodev to nash, use that to pick block device (63421)
  - support -o option in nash's mount (59185)
  - look for xfs_dmapi (60066)
  - added > support for executed commands (61180)
  - grubby copies permissions from old config file (59227)
  - use options from fstab for root filesystem (56071)
  - try and be better about returning nonzero on error (60203)
  - make modprobe symlink properly to avoid kernel message (62145)
  - support linear raid (12775)
  - support fallback option in grub config (54794)
  - comments in template entries not handled quite right (65198)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix probing for LVM usage to require a volume group to exist before adding
    the module
  - --omit-lvm-modules will omit LVM modules
  - add support for root device being LVM


author: Erik Troan <ewt@redhat.com>
changelog:
  - look for a non /tmpfs directory
  - added support for xfs
  - use with raid md.o if it exists
  - fixed bug in echo
  - use find form nash rather then /usr (mkinitrd shouldn't need /usr
    mounted)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added support for mounting root filesystem by label
  - switched to dietlibc from minilibc
  - fix so --preload= works [33675,57560,44377]
  - added info on --image-version and --nocompress to man page [57560]
  - set fileystem check interval to 0 in case the system clock
    is borked [51454]
  - give a proper error when run by a user other then root [27218,53159]
  - grubby statically linked against popt [55305]
  - cleaned up verbose output a bit [21791]


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed bug handling invalid default (MF #52889)
  - in some cases we would set the default to point at a removed image


author: Matt Wilson <msw@redhat.com>
changelog:
  - make consoles with the correct minor numbers
  - applied patch from hjl to fix fstab parsing (#50819)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - skip errors finding jbd as a module if we're skipping them trying to find
    ext3 so that you can build a kernel with ext3 built-in and still use an
    initrd


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't print errors if /etc/raidtab doesn't exist
  - or /etc/{modules.conf,conf.modules}, for that matter


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't dig through /etc/fstab to find out if we have a filesystem on
    a RAID device, it's usually mounted by label so /dev/mdN isn't there
    at all (#46525)


author: Erik Troan <ewt@redhat.com>
changelog:
  - let nash be invoked as modprobe to avoid a modprobe failure to exec
  - nash will try to run arbitrary commands now (removing insmod as a special 
    case)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch from twaugh to avoid blindly adding scsi_mod
    and sd_mod to initrd if they are not needed (#24114)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Enlarge initrds, needed for systems with both IDE and SCSI
    (Bug #23846)
  - Version 2.[6789] probably shouldn't identify itself as 2.6
    with --version. ;)
  - bzip2 source


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - now works when /usr is not mounted (do not rely on /usr/bin/install)
  - slight cleanups, better usage message


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Now automatically includes necessary raid modules
  - --omit-raid-modules now omits raid modules
  - tiny doc updates


author: Matt Wilson <msw@redhat.com>
changelog:
  - --omit-scsi-modules now omits all scsi modules
  - updated documentation
  - mkinitrd now grabs scsi_hostadapter modules from anywhere -
    some RAID controller modules live in block/


author: Matt Wilson <msw@redhat.com>
changelog:
  - Ignore the absence of scsi modules, include them if they are there, but
    don't complain if they are not.
  - changed --no-scsi-modules to --omit-scsi-modules (as it should have been)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - fix for combined sparc/sparc64 insmod, also pluto module is really
    fc4:soc:pluto and we don't look at deps, so special case it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - added 'make archive' rule to Makefile
  - rewrote install procedure for more robust version handling
  - be smarter about grabbing options from /etc/conf.modules


author: Erik Troan <ewt@redhat.com>
changelog:
  - Only use '-s' to install binaries if /usr/bin/strip is present.
  - Use an image size of 2500 if binaries can't be stripped (1500 otherwise)
  - Don't use "mount -o loop" anymore -- losetup the proper devices manually
  - Requires losetup, e2fsprogs


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Fixed a bug in parsing options.
  - Changed to use a build tree, then copy the finished tree into the
    image after it is built.
  - Added patches derived from ones written by Christian Hechelmann which
    add an option to put the kernel version number at the end of the module
    name and use install -s to strip binaries on the fly.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.100
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Cope with root cursor refcounting
    being differently broken in different DDXes. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.97
changelog:
  - xserver-1.1.1-x86emu-1.13.patch: Sync x86emu bugfixes with upstream
    xserver. (#858014)
  - xserver-1.1.1-xkb-width-fix.patch: Fix a crash in XKB keymap resize
    across different RHELs. (#822438)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.95
changelog:
  - xserver-1.1.1-more-regen-leaks.patch: Fix memory leaks at regeneration in
    XKB, root cursor, and GLX. (#498357)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.88
changelog:
  - cve-2011-4818.patch: Multiple input sanitization flaws in Render and GLX
  - xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch: Likewise.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.87
changelog:
  - xserver-1.1.1-fbdev-iterate-modes.patch: fix fbdev driver not iterating
    across all modes of a certain dimension (#740497)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.86
changelog:
  - xserver-1.1.1-midc-double-free.patch: Don't double-free the picture for
    the root window when using the mi (software) cursor path. (#674741)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.84
changelog:
  - xserver-1.1.1-xinerama-crash.patch: Fix a crash in XineramaQueryScreens
    when client is swapped (#588346)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.78
changelog:
  - cve-2010-1166.patch: Fix broken modulo math in Render and arc code.
    Identical to xserver-1.1.1-mod-macro-parens.patch in 5.5.z. (#582651)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.77
changelog:
  - xserver-1.1.1-dbe-validate-gc.patch: Validate the GC against both front
    and back buffers (#596899)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.73
changelog:
  - randr-disabled-fb.patch: Drop. (#496108)
  - xserver-1.1.1-no-randr-while-off-vt.patch: Just refuse RANDR changes while
    VT switched away, rather than try to fake them (#496108)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.71
changelog:
  - fix randr upsizing not resizing pixmap (#515609)
  - fix bug in overlapping bugfix (#530309,#516204,#554571)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.70
changelog:
  - xserver-1.1.1-improve-mode-selection.patch: Improve mode selection when
    validation filters away all modes that exactly match aspect ratio (#507536)


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-48.63
changelog:
  - Pull in fixes for x86emu from upstream as x86emu-update.patch.  This
    adds support for RDTSC, CPUID and fixes BSF and BSR and a 64 bit
    bug.  Drop xserver-1.1.1-int10-bsf.patch (#503182).


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.60
changelog:
  - xserver-1.1.1-randr-panning-fix.patch: Install a null PointerMoved hook
    so we don't pan the second head on randrful drivers. (#477177)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.58
changelog:
  - xserver-1.1.1-hw-xfree86-modes-16.patch: Update RANDR code to 1.6ish.
  - xserver-1.1.1-randr-abi.patch: Export the RANDR symbols that the drivers
    use, and compensate for i2c/ddc/ramdac still being loadables in 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.57
changelog:
  - xserver-1.1.1-ddc-update.patch: Update DDC code to xserver 1.6.
  - xserver-1.1.1-hw-xfree86-modes: Add RANDR setup code, equivalent to the
    old randr-source subpackage (Fedora's 1.5.3 ish)
  - drop the randr-* patches, merged into the above.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.56
changelog:
  - Drop the -randr-source subpackage
  - Delete with_developer_utils macro and some boring/misleading comments


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.54
changelog:
  - randr-xinerama.patch - add xinerama support to the randr source code
    tree (#481067)
  - drop the randr source updates for now as the patch fails
  - fix spec file so if patches to randr source fail, build fails


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.53
changelog:
  - xserver-1.1.1-autoreconf-pedantry.patch: Fix autoreconf with new autotools
  - xserver-1.1.1-saturate-trap-walks.patch: Saturate span walks in Render,
    so we don't wrap around. (#448586)
  - xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch,
    xorg-redhat-die-ugly-pattern-die-die-die.patch: Rediff for patch fuzz.


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.52
changelog:
  - randr-source-compat.patch - backport fixes from upstream (#466987)
  - xserver-1.1.1-fb24-32-fix.patch + xserver-1.1.1-ia64-memops.patch:
  - Altix fixes to make nautilus + s-c-d work. (#468015)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.45
changelog:
  - rebase the source code for drivers to build against and add compat patches
  - xserver-1.1.1-randr-fix.patch - set the -1 to 0 like upstream this fixes some randr1.2 compat output problems


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.44
changelog:
  - xserver-1.1.1-automouse-crash-fix.patch: Fix a rare crash when starting
    under anaconda. (#249567)


author: Dave Airlie <airlied@redhat.com> 1.1.1-48.42
changelog:
  - cve-2008-1377.patch: Record and Security Extension Input validation
  - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
  - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
  - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
  - cve-2008-2362.patch: Render Gradient extension Integer overflows


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.37
changelog:
  - xserver-1.1.1-ia64-old-kernel-warning.patch - warn about older MCA causing
    kernels on IA64 (#432796)


author: Dave Airlie <airlied@redhat.com> - 1.1.1-48.36
changelog:
  - cve-2007-3920.patch: gnome-screensaver loses keyboard grab when running under compiz (#357111)
  - cve-2007-6429.patch: Update patch to final upstream solution (#431191)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.30
changelog:
  - Sync with zstream 1.1.1-48.26.el5_1.4:
  - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability
  - cve-2007-5958.patch: Xorg / XFree86 file existence disclosure vulnerability
  - cve-2007-6427.patch: XInput Extension Memory Corruption Vulnerability
  - cve-2007-6428.patch: TOG-CUP Extension Memory Corruption Vulnerability
  - cve-2007-6429.patch: EVI and MIT-SHM Extension Integer Overflow Vulnerability


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.29
changelog:
  - Add -randr-source subpackage for source compatibility with newer drivers.
  - xserver-1.1.1-mode-bandwidth.patch: Match enums with 1.5 server.
  - randr-source-compat.patch: Fix miscellaneous drift since 1.1.


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.26
changelog:
  - xserver-1.1.1-mmap-{expansion,failure}: Revert, required kernel changes
    not included in 5.1. (#233981)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.25
changelog:
  - xserver-1.1.1-acpi-tokenising-fix.patch: Also expose the builderstring
    as an exported server symbol so external drivers can notice the bugfix.
    (#246175)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.23
changelog:
  - xserver-1.3.0-xkb-and-loathing.patch: Ignore (not just block) SIGALRM
    around calls to Popen()/Pclose().  Fixes a hang in openoffice when
    opening menus. (#210750)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.22
changelog:
  - xserver-1.1.1-vbe-panelid.patch: Add VBE core call for panel information,
    so we can better handle panels with no EDID. (#237121)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.21
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Fix cases where the VGA adaptor is
    not in the first 128 devices. (#236202)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.17
changelog:
  - xserver-1.1.1-silence-warnings.patch: Reduce several harmless warning
    messages to X_DEFAULT or X_INFO. (#227386)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.15
changelog:
  - xserver-1.3.0-pci-bus-count.patch: Allocate pci_devp dynamically, to handle
    machines with more than 128 PCI devices. (#219390 and others)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.12.el5
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: During server
    shutdown, be sure to wait for the VT switch to finish before actually
    terminating.  Works around a race seen in rhgb. (#219184)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.11.el5
changelog:
  - define-xfree86-server.patch: Define XFree86Server even on arches where
    we don't compile the Xorg DDX (ie. s390). Resolves: 219253


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.10.el5
changelog:
  - xorg-x11-server-1.1.1-glcore-visual-matching.patch: When matching GLX to
    X visuals, scan both lists. (#218395)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.7.el5
changelog:
  - xorg-x11-server-1.1.1-xkb-vidmode-switch.patch: Fix string matching on XKB
    actions to be case-insensitive again. (#218336)
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Change behaviour
    to simply exit if we lose the VT switch race. (#218396)
  - Fix OS name from FC5 to RHEL5.


author: Soren Sandmann <sandmann@redhat.coM> 1.1.1-48.6.el5
changelog:
  - Disable composite when xinerama is enabled. 
  - Resolves: #213102
  - Make sure no-pseudocolor-composite.patch is applied
  - Related: #215576


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.5.el5
changelog:
  - xorg-x11-server-1.1.1-maxpixclock-option.patch: Allow the maximum pixel
    clock of a monitor to be specified in the config file. (#214869)


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.4.el5
changelog:
  - xorg-x11-server-1.1.1-no-pseudocolor-composite.patch: Don't attempt to
    initialize Composite when the default visual is < 16bpp. (#215576)


author: Soren Sandmann <sandmann@redhat.com> 1.1.1-48.3.el5
changelog:
  - randr-disabled-fb.patch
    Add patch to prevent RandR from disabling (and then enabling) access to
    the framebuffer. Bug 214739.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.2.el5
changelog:
  - Build both x86emu and vm86 backends on x86.  Prefer x86emu when running
    in Xen dom0.  Add "Int10Backend" option to the ServerLayout section to
    allow runtime configuration.  (#213151)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-48.1.el5
changelog:
  - Deliver SecurityPolicy in the Xvfb subpackage on arches without hardware
    servers (s390{,x} atm).  (#213026)


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-48.el
changelog:
  - Add xorg-x11-server-1.1.1-ia64-int10.patch to not define -DPC_ on
    ia64. Bugs 210149 and 210153.
  - Add xorg-x11-server-1.1.1-ia64-pci-chipsets.patch to probe
    ia64 specific chipsets. Bug 210150


author: Soren Sandmann <sandmann@redhat.com> - 1.1.1-45.fc6
changelog:
  - xorg-x11-server-1.1.1-graphics-expose.patch: call
    miHandleExposures() in CopyArea/CopyPlane explicitly in cw to
    generate GraphicsExposes correctly. (#209336).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-44.fc6
changelog:
  - xorg-x11-server-1.1.1-offscreen-pixmaps.patch: Take the server lock
    before calling back into XAA to evict pixmaps (#204810).


author: Adam Jackson <ajackson@redhat.com> 1.1.1-43.fc6
changelog:
  - xorg-x11-server-1.1.1-vt-activate-is-a-terrible-api.patch: Since the
    VT_ACTIVATE/VT_WAITACTIVE pair are never guaranteed to successfully
    complete, set a 5 second timeout on the WAITACTIVE, and retry the pair
    until we win.  (#207746)
  - xorg-x11-server-1.1.0-pci-scan-fixes.patch: Partial revert to unbreak some
    (but not all) domainful machines, including Pegasos. (#207659)


author: Adam Jackson <ajackson@redhat.com> 1.1.1-41.fc6
changelog:
  - xorg-x11-server-1.1.1-vbe-filter-less.patch: Be gentler about rejecting
    VESA modes early, since xf86ValidateModes should handle them just fine.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-40.fc6
changelog:
  - xorg-x11-server-1.1.1-pclose-confusion.patch: Be sure to call Pclose()
    on pipes created with Popen(), since the additional magic done by Popen()
    relative to popen() is not undone by plain pclose().  (Third base!)
  - xorg-x11-server-1.1.1-edid-hex-dump.patch: Backport EDID hex dump code
    from git.


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-39.fc6
changelog:
  - Bump xorg-x11-proto-devel BuildRequires version and add Conflict
    line for older mesa releases, so GLX_EXT_texture_from_pixmap opcodes
    match.


author: Adam Jackson <ajackson@redhat.coM> - 1.1.1-38.fc6
changelog:
  - xorg-x11-server-1.1.1-believe-monitor-rb-modes.patch: Always believe the
    monitor when it reports a reduced-blanking mode, even over VGA.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-35.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: Fix the check to look
    for mouse/void drivers in the running layout, as opposed to the config file,
    so as not to synthesize two mouse devices.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-34.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Be slightly more paranoid about
    setting line pitch, and rescan the mode list after pruning to re-validate
    the estimated virtual size.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-33.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to evict pixmap
    when GLX_EXT_texture_from_pixmap is first used.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-32.fc6
changelog:
  - Drop xorg-x11-server-1.1.0-gl-include-inferiors.patch now that
    compiz can uses the composite overlay window.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-31.fc6
changelog:
  - Update xorg-x11-server-1.1.1-offscreen-pixmaps.patch to log transitions.
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to always bind to
    GL_TEXTURE_RECTANGLE_ARB target.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-30.fc6
changelog:
  - xorg-x11-server-1.1.1-pci-paranoia.patch: In xf86MatchPciInstances, fail
    gracefully if xf86PciVideoInfo is NULL (like, on Xen).


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-29.fc6
changelog:
  - Add xorg-x11-server-1.1.1-aiglx-happy-vt-switch.patch to fix VT
    switching (and suspend/resume) when using AIGLX. (#199692, fdo #7916).
  - Bump mesa source and libGL BuildRequires.
  - Update mesa-6.5.1 patch to work with 6.5.1 rc1 (slang_version_syn.h
    renamed to slang_pp_version_syn.h).


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-28.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: Only flag modes as preferred
    if the EDID block says to.
  - xorg-x11-server-1.1.1-mode-sort-kung-fu.patch: Enforce a sort order on
    modes during lookup: builtin before driver before userdef before other,
    and preferred modes within a class before others in that class.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-27.fc6
changelog:
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Don't set an arbitrary
    pixclock limit if the monitor didn't claim to have one.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-25.fc6
changelog:
  - xorg-x11-server-1.1.1-xvfb-composite-crash.patch: Fix Xvfb's -render flag
    to also disable the Composite extension.
  - xorg-x11-server-1.1.1-mesa-6.5.1.patch: Update build system to account for
    Mesa 6.5.1 snapshots.
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Add all available
    standard timings from EDID rather than just the first five.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-22.fc6
changelog:
  - xorg-x11-server-1.1.1-infer-virtual.patch: When no modes or virtual size
    are given in the config file, attempt to pick a sensible one by examining
    the EDID modes and physical geometry.  Also generally make the server
    aware of driver-provided modes.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Redo, since the property I was
    checking for is both fairly common and fairly predictable.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-20.fc6
changelog:
  - xorg-x11-server-1.1.1-always-mouse-thyself.patch: If we lack a mouse
    device in the config, and the user hasn't asked for any void devices,
    synthesize a mouse section.  (#200347)
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Better formatting.


author: Adam Jackson <ajackson@redhat.com> - 1.1.1-19.fc6
changelog:
  - xorg-x11-server-1.1.1-builderstring.patch: Enable the builder info
    string at configure time;
  - ... and use it to print the package name and version.
  - xorg-x11-server-1.1.1-defaultdepth-24.patch: Set default depth to 24.
  - xorg-x11-server-1.1.1-edid-quirks-list.patch: Add EDID quirks list as
    an experiment; needs a better solution though.


author: Kristian Høgsberg <krh@redhat.com> - 1.1.1-17.fc6
changelog:
  - Add xorg-x11-server-1.1.1-offscreen-pixmaps.patch to default
    XaaNoOffscreenPixmaps to false, for now.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-15.fc6
changelog:
  - xorg-x11-server-1.1.0-edid-mode-injection-2.patch: Allow HorizSync and
    VertRefresh to be overridden independently.


author: Kevin E Martin <kem@redhat.com> - 1.1.1-14.fc6
changelog:
  - xorg-x11-server-1.1.1-revert-xkb-change.patch: Revert change to xkb that
    broke XkbGetKeyboard().


author: Adam Jackson <ajackson@redhat.com> 1.1.1-13.fc6
changelog:
  - Comment out the 848x480 modes from the extramodes patch.  Any panel that
    wants it should be doing EDID injection by now, and it screws up
    autoconfig by _just_ fitting in the ranges for 800x600.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-12.fc6
changelog:
  - Added "1920x1080" CVT modes to Red-Hat-extramodes patch for (#195272)
  - Sorted the extramodes file by X res, then Y res for ease of maintenance.


author: Adam Jackson <ajackson@redhat.com> 1.1.1-10.fc6
changelog:
  - xorg-x11-server-1.1.1-selinux-awareness.patch: Added for new Mesa
    selinux code.
  - xorg-x11-server-1.1.1-Xdmx-render-fix-fdo7482.patch: Backport a Render
    fix for Xdmx.
  - xorg-x11-server-1.1.1-no-composite-in-xnest.patch: Disable Composite in
    Xnest, as it's known not to work.
  - Fix default font path to match the config file we used to generate.
  - Fix default module set to match the config file we used to generate.
  - Disable use of TLS GLX dispatch to match Mesa selinux nonsense.


author: Mike A. Harris <mharris@redhat.com> 1.1.1-7.fc6
changelog:
  - Only ship pcitweak manpage if we are building it (#199653)
  - Fix dist tag usage (Was {dist}, should be {?dist})
  - Added xorg-x11-server-libxf86config-dont-write-empty-sections.patch to
    prevent config file parser/writer from writing out empty sections (#198653)
  - Add dependency on xorg-x11-fonts-base to all X server subpackages (#186091)


author: Kristian Høgsberg <krh@redhat.com> 1.1.1-5.fc5.aiglx
changelog:
  - Enable composite by default.
  - Split spiffiffity patch into one patch per change:
    xorg-x11-server-1.1.0-no-move-damage.patch and
    xorg-x11-server-1.1.0-dont-backfill-bg-none.patch.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-26
changelog:
  - Add xorg-x11-server-1.1.0-mesa-copy-sub-buffer.patch to hook up the
    GLX_MESA_copy_sub_buffer extension.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-25.fc6
changelog:
  - Start using the new %{dist} tag <http://fedoraproject.org/wiki/DistTag>
    experimentally in the package Release field to help prevent problems like
    (#197266) from occuring in the future.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-24
changelog:
  - Don't (uselessly) link the server against zlib.
  - Fix the 1680x1050 modes to be the CVT timings instead of GTF.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-23
changelog:
  - Fix an open-coded check for reduced-blanking modes to only apply to analog
    connectors.
  - Reorder the EDID patches slightly.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-22
changelog:
  - Added xorg-xserver-1.1.0-setuid.diff to fix potential security issue (#196094)
  - Disable DRI on ppc64 builds.
  - Conditionalize inclusion of DRI related X server modules to with_dri builds.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-21
changelog:
  - Update xorg-x11-server-1.1.0-tfp-damage.patch to use glTexSubImage2D
    to only update the part of the texture that changed, based on damage
    regions.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-20
changelog:
  - Remove with_xnest_server conditional, and fix more BuildRequires to pull
    in libX11-devel, libXext-devel, zlib-devel, etc. for Xnest and Xephyr.
  - Remove unwanted files leftover in buildroot for s390/s390x builds.
  - Add Xserver.1x manpage to multiple subpackages, as it applies equally to
    Xorg, Xnest, Xvfb, Xephyr.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-19
changelog:
  - Add with_xnest_server conditional and disable on s390, since Xnest
    fails to build on there (Xlib doesn't get added to the link line).
  - Add -f to removal of xorgconfig and others which may or may not be built.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-18
changelog:
  - Add xorg-x11-server-1.1.0-convolution-filter-fix.patch and
    xorg-x11-server-1.1.0-tfp-damage.patch backported to make compiz go
    faster and make compiz shadows work.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-17
changelog:
  - Disable filling in monitor gamma info from EDID momentarily, since drivers
    will use that field to set the card's gamma ramp.
  - Backport some stuff from git: cw crash fix, faster pci scanning, some
    log message cleanup.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-16
changelog:
  - Enable spec support for s390, s390x, alpha, sparc, and sparc64 architectures.
  - Add with_hw_servers conditional to disable hardware servers on s390/s390x.
  - Add with_dmx_server to disable DMX on s390/s390x.
  - Added "release" number to "BuildRequires: freetype-devel >= 2.1.9-1" for
    dependency futureproofing.
  - Force "--disable-dri" on s390/s390x, to attempt to work around ./configure
    failure to find libdrm, which should not be needed on s390 builds anyway.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-15
changelog:
  - Add loader infrastructure for publishing PCI ID lists in the drivers, and
    autodetecting drivers based on that.  Currently unused since no drivers
    publish such a list yet.
  - Fix mouse autoconfig to use /dev/input/mice instead of /dev/mouse.


author: Kristian Høgsberg <krh@redhat.com> 1.1.0-14
changelog:
  - Change selection atom to _COMPIZ_GL_INCLUDE_INFERIORS in
    xorg-x11-server-1.1.0-gl-include-inferiors.patch.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-7
changelog:
  - Change "BuildRequires: freetype-devel >= 2.1.10" to 2.1.9, as Xorg 7.0
    contains 2.1.9 in "extras" and 7.1 does not appear to have a requirement on
    a newer freetype.
  - Janitorial cleanups for spec file changelog consistency.
  - Call aclocal before automake, otherwise automake >= 1.9.6 is required in
    order to rebuild the package.
  - Build 1.1.0-4, 1.1.0-5, and 1.1.0-6 appear to have failed in brew but nobody
    fixed them.  It appears automake 1.9 breaks the build.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-4
changelog:
  - Hack the kdrive makefile to only attempt to build Xephyr, avoids linking
    sixteen extra servers just to delete them.
  - Move cvt to the default install set, same as gtf.


author: Adam Jackson <ajackson@redhat.com> 1.1.0-3
changelog:
  - Drop the libxf86config -fPIC patch, just build the whole thing with
    --with-pic instead.  Add void and evdev to the required driver list for
    upcoming autoconfig magic.


author: Mike A. Harris <mharris@redhat.com> 1.1.0-2
changelog:
  - Add "Requires: xorg-x11-proto-devel >= 7.1-1" to sdk for numerous (52) bug
    reports of drivers failing to build with mock.


author: Mike A. Harris <mharris@redhat.com> 1.0.99.903-2
changelog:
  - Disable dependency on xorg-x11-drivers package, for OLPC.  (#191781)
  - Add "BuildRequires: freetype-devel >= 2.1.10" for bug (#192021)


author: Adam Jackson <ajackson@redhat.com> 1.0.99.902-1
changelog:
  - Update to 7.1RC2 plus fix for CVE 2006-1526.  Disable the fastpathing
    patch for fdo bug #4320 since that should be covered in the generic
    Render code now.


author: Kristian Høgsberg <krh@redhat.com> 1.0.99.2-1
changelog:
  - Update to 1.0.99.2 snapshot and go back to using mesa-source package.
  - Drop xorg-server-1.0.99-composite-visibility.patch.
  - Drop xorg-server-1.0.1-backtrace.patch.
  - Drop xorg-server-0.99.3-rgb.txt-dix-config-fix.patch.
  - Add xorg-server-1.0.99.2-spiffiffity.patch.


author: Soren Sandmann <sandmann@redhat.com> 1.0.99.1-2
changelog:
  - Add xorg-server-1.0.99-composite-visibility.patch to get rid of flashing
    titlebars in compositing metacity.


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Added xorg-server-1.0.1-backtrace.patch which enables the Xorg server's
    built in backtrace support by default, as it was inadvertently disabled in
    7.0.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-6
changelog:
  - Added xorg-x11-server-1.0.1-Red-Hat-extramodes.patch which is a merger of
    XFree86-4.2.99.2-redhat-custom-modelines.patch and
    xorg-x11-6.8.2-laptop-modes.patch from FC4 for (#180301)
  - Install a copy of the vesamodes and extramodes files which contain the list
    of video modes that are built into the X server, so that the "rhpxl" package
    does not have to carry around an out of sync copy for itself. (#180301)


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xorg-x11-server-1.0.1-composite-fastpath-fdo4320.patch with changes
    suggested by ajax to fix (fdo#4320).
  - Cosmetic cleanups to satiate the banshees.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Added xorg-x11-server-1.0.1-fbpict-fix-rounding.patch from CVS HEAD.
  - Added xorg-x11-server-1.0.1-SEGV-on-null-interface.patch which prevents a
    SEGV on null interfaces (#174279,178986)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-2
changelog:
  - Added xserver-1.0.0-parser-add-missing-headers-to-sdk.patch to provide the
    necessary libxf86config.a headers to be able to use the library. (#173084)


author: Mike A. Harris <mharris@redhat.com> 1.0.0-1
changelog:
  - Updated to xserver 1.0.0 from X11R7 RC4
  - Removed the following patches, which are now integrated upstream:
    - xorg-server-0.99.3-rgb.txt-dix-config-fix.patch,
    - xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch
  - Changed manNx directories to manN to match upstream defaults.
  - Added libxf86config.a to sdk subpackage.
  - Updated build dependency of "mesa-libGL-devel >= 6.4.1-1"
  - Added "BuildRequires: xorg-x11-font-utils >= 1.0.0-1" to be able to query
    the fontdir from fontutil.pc which is implemented currently by a custom
    patch.
  - Enable xtrap, xcsecurity, xevie, and lbx on all builds, not just DRI builds.
  - Fix sdk installation path, so that drivers can find the files again.
  - Update file manifest, to deal with X server modules that have moved to
    a subdir, etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-9
changelog:
  - Added "Requires: xorg-x11-drivers >= 0.99.2-4" as a dependency of the Xorg
    subpackage, to ensure that anaconda installs all of the drivers during OS
    installs and upgrades, as requested by Jeremy Katz.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-8
changelog:
  - Added xorg-server-0.99.3-rgb.txt-dix-config-fix.patch which fixes the
    --with-rgb-path option to actually *work*.
  - Updated libdrm dep to 1.0.5


author: Mike A. Harris <mharris@redhat.com> 0.99.2-7
changelog:
  - Update xorg-x11-server-utils dep to 0.99.2-5 to ensure rgb.txt is installed
    in correct location - _datadir/X11/rgb
  - Added --with-rgb-path configure option to specify _datadir/X11/rgb so the
    X server finds the rgb.txt database properly, for bugs (#173453, 173435,
    173428, 173483, 173734, 173737, 173594)
  - Added xorg-server-0.99.3-fbmmx-fix-for-non-SSE-cpu.patch to prevent SSE/MMX
    code from being activated on non-capable VIA CPU. (#173384,fdo#5093)


author: Mike A. Harris <mharris@redhat.com> 0.99.2-6
changelog:
  - Add the missing rpm pre script from monolithic xorg-x11 packaging,
    clean it up a bit, reorder it for slight performance gain.
  - Add some perl magic to pre script to remove RgbPath from xorg.conf,
    in order to fix bug (#173036, 173435, 173453, 173428)
  - Add more perl magic to pre script to update ModulePath to the new
    location if it is specified in xorg.conf.
  - Added xorg-x11-server-0.99.3-init-origins-fix.patch ported from monolithic
    xorg-x11 package to fix Xinerama bug.
  - Added xorg-redhat-die-ugly-pattern-die-die-die.patch to kill the ugly grey
    stipple once again for bug (#173423).
  - Added "BuildRequires: libdrm-devel" for DRI enabled builds.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-4
changelog:
  - Added temporary "BuildRequires: libXfont-devel >= 0.99.2-3" and
    "Requires: libXfont-devel >= 0.99.2-3" to ensure early-testers of
    pre-rawhide modular X have installed the work around for (#172997).
  - Added implementation specific "Requires: xkbdata" to Xorg subpackage, as
    we want to ensure the xkb data files are present, but allow us the option
    of easily switching implementations to "xkeyboard-config" at a future
    date, if we decide to go that route.
  - Re-enable _smp_mflags during build.
  - Added "Requires: xorg-x11-drv-vesa" to Xorg subpackage (#173060)


author: Jeremy Katz <katzj@redhat.com> 0.99.3-2
changelog:
  - add some deps to the Xorg subpackage for base fonts, keyboard and mouse 
    drivers, and rgb.txt that the server really wont work without


author: Mike A. Harris <mharris@redhat.com> 0.99.3-1
changelog:
  - Update to xorg-server-0.99.3 from X11R7 RC2.
  - Add xorg-server.m4 to sdk subpackage, and "X" symlink to Xorg subpackage.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-2
changelog:
  - Added versioning to Xorg virtual Provide, to allow config tools and driver
    packages to have version based requires.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Update to xorg-server-0.99.2 from X11R7 RC1.
  - Add "BuildRequires: xorg-x11-util-macros >= 0.99.1".
  - Add "BuildRequires: mesa-source >= 6.4-4" for DRI builds.
  - Added dmx related utilities to Xdmx subpackage.
  - Individually list each X server module in file manifest.
  - Hack man1 manpages to be installed into man1x.
  - Add the following ./configure options --disable-dependency-tracking,
    --enable-composite, --enable-xtrap, --enable-xcsecurity, --enable-xevie,
    --enable-lbx, --enable-dri, --with-mesa-source, --with-module-dir,
    --with-os-name, --with-os-vendor, --with-xkb-output, --disable-xorgcfg
  - Added getconfig, scanpci et al to Xorg subpackage
  - Added inb, inl, inw, ioport, outboutl, outw, pcitweak utils to Xorg package
    conditionally, defaulting to "off".  These utilities are potentially
    dangerous and can physically damage hardware and/or destroy data, so are
    not shipped by default.
  - Added "BuildRequires: libdmx-devel" for dmx utilities
  - Added "BuildRequires: libXres-devel" for Xres examples
  - Added {_libdir}/xserver/SecurityPolicy to Xorg subpackage for XSECURITY


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.2
changelog:
  - Fix license tag to be "MIT/X11"
  - Change Xdmx subpackage to Obsolete xorg-x11-Xdmx instead of xorg-x11-Xnest


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050830.1
changelog:
  - Update BuildRequires for new library package naming (libX...)
  - Use Fedora Extras style BuildRoot tag
  - Invoke make with _smp_mflags to take advantage of SMP systems


author: Kristian Hogsberg <krh@redhat.com> 0.99.1-2.cvs20050830
changelog:
  - Go back to %spec -n, use new cvs snapshot that supports overriding
    moduledir during make install, use %makeinstall.
  - Drop %{moduledir}/multimedia globs.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2.cvs20050825.0
changelog:
  - Added build dependency on xorg-x11-libfontenc-devel, as the build fails
    half way through without it, even though upstream dependencies do not
    specify it as required.


author: Honza Horak <hhorak@redhat.com> - 5.5.37-1
changelog:
  - Update to MySQL 5.5.37, for various fixes described at
    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-37.html
    Includes fixes for: CVE-2014-2440 CVE-2014-0384 CVE-2014-2432
    CVE-2014-2431 CVE-2014-2430 CVE-2014-2436 CVE-2014-2438 CVE-2014-2419
    Resolves: #1089202


author: Adam Jackson <ajax@redhat.com> 1.1.1-48.101.3
changelog:
  - xserver-1.1.1-randr-config-timestamps.patch: Backport timestamp comparison
    fix from upstream RANDR code (#1006076)


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.33.el5
changelog:
  - Security Release, fixes CVE-2010-0547, CVE-2010-0787, CVE-2011-2694,
    CVE-2011-2522, CVE-2011-1678, CVE-2011-2724
  - resolves: #722553


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.24.el5
changelog:
  - Fix smbget, rpcclient, smbtree, pdbedit, smbclient and smbcacls manpage
  - resolves: #457195, #457082, #457203, #457384, #457192, #457097


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.15.el5
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526661


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.9.el5
changelog:
  - Raise log level for annoying messages that are normal with
    some idmap backends.
  - resolves: #485382


author: Guenther Deschner <gdeschner@redhat.com> 3.0.28-3.2.el5
changelog:
  - Fix joining and authentication with NT4 and Windows 2000 domains.
  - resolves: #449000
  - resolves: #450533


author: Simo Sorce <ssorce@redhat.com> 3.0.28-1.el5_2.1
changelog:
  - Security fix for CVE-2008-1105
  - Fix join verification
  - Fix smb signing
  - resolves: CVE-2008-1105
  - resolves: #447380
  - resolves: #444637


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.8
changelog:
  - Yet another 2 patches for regressions related to operations on a DC with
    trusted domains. Fiux idmap with legacy configuration options, and fix the
    pam module, pam logins were broken for trusted domains
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.7
changelog:
  - Add another 2 patches to solve 429024 completely, as some cases were not
    covered:
    - Fix domain trusts while running as a DC
    - Fix credential chain with windows 2008
  - Make some configure flag explicit even if they are on by default so that we
    can catch build errors if something is wrong instead of silently missing
    features supposed to be compiled in
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
changelog:
  - Back out moiunt cifs patches for prepath, as the corresponding
    kernel changes can't be put in at this time
  - Add a minor SPNEGO fix
  - related: #370501
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.4
changelog:
  - Add another set of fixes for 429024, turned out this was not
    completely fixed as expected
  - Add some other patches from Guenther to join Windows 2008 (Rc1)
    domain controllers
  - Make sure bad port numbers are reported and smbd exits if it
    can't bind to any port (completes fix for #429003)
  - Fix a regression in ACLs code that was causing samba to set the
    wrong inherited permissions
  - resolves: #429024
  - related: #291501
  - resolves: #429003
  - resolves: #431243


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.3
changelog:
  - Add 2 more patches to fix a Samba DC talking to trusted
    domains.
  - resolves: #429024
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.1
changelog:
  - Add more fixes on top 3.0.28 as committed upstream
  - Fixes typo and removes trailing spaces in default smb.conf file
  - resolves: #426244
  - related: #291501
  - resolves: #426623
  - resolves: #383351
  - resolves: #425996


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5
changelog:
  - rebase to 3.0.28 (3.0.x is in bugfix/security fix only mode
    since 3.2.x was announced) + later Vista fixes
  - resolves: #291501
  - resolves: #370501


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: CVE-2007-6015
  - resolves: CVE-2007-4572


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.2
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351511
  - resolves: #350771
  - resolves: #359161
  - resolves: #338141


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use /etc/rc.d/init.d instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved /usr/bin/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that 0 is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for /usr/lib/samba and /usr/lib/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="gcc -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to /usr/share/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.5-118.1
changelog:
  - Add support for newer L3 caches on x86-64 and correctly count
    the number of hardware threads sharing a cacheline (#1011424).


author: Carlos O'Donell <carlos@redhat.com> - 2.5-114
changelog:
  - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951132)
    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951132)


author: Jeff Law <law@redhat.com> - 2.5-106
changelog:
  - Fix errno for various overflow situations in vfprintf.  Add
      missing overflow checks. (#857387)


author: Jeff Law <law@redhat.com> - 2.5-105
changelog:
  - Handle failure of _nl_explode_name in all cases (#848481)
    - Define the default fuzz factor to 2 to make it easier to manipulate
      RHEL 5 RPMs on RHEL 6 and newer systems.


author: Jeff Law <law@redhat.com> - 2.5-102
changelog:
  - Really fix POWER4 strncmp crash (#766832).
  - Fix integer overflow leading to buffer overflow in strto* (#847930)


author: Patsy Franklin <patsy@redhat.com> - 2.5-97
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when
    converting from IBM930.    (#823905)


author: Jeff Law <law@redhat.com> - 2.5-92
changelog:
  - Fix return code when stopping already stopped nscd daemon (#678227)
  - Remove MAP_32BIT for pthread stack mappings,
    use MAP_STACK instead (#641094)
  - Fix setuid vs sighandler_setxid race (#769852)
  - Fix access after end of search string in regex matcher (#757887)
  - Fix POWER4 strncmp crash (#766832)
  - Fix SC_*CACHE detection for X5670 cpus (#692182)
  - Fix parsing IPV6 entries in /etc/resolv.conf (#703239)
  - Fix double-free in nss_nis code (#500767)


author: Jeff Law <law@redhat.com> - 2.5-89
changelog:
  - Do not override TTL of CNAME with TTL of its alias (#808014)
  - Fix short month names in fi_FI locale #(657266).
  - Fix nscd crash for group with large number of members (#788989)


author: Jeff Law <law@redhat.com> - 2.5-88
changelog:
  - Fix Slovakia currency (#799853)
  - Fix getent malloc failure check (#806403)
  - Fix short month names in zh_CN locale (#657588)
  - Fix decimal point symbol for Portuguese currency (#710216)
  - Avoid integer overflow in sbrk (#767358)
  - Avoid race between {,__de}allocate_stack and __reclaim_stacks during
    fork (#738665)
  - Fix race between IO_flush_all_lockp & pthread_cancel (#751748)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Andreas Schwab <schwab@redhat.com> - 2.5-67
changelog:
  - ldd: never run file directly (#531160)
  - Implement greedy matching of weekday and month names (#657570)
  - Fix incorrect numeric settings (#675259)
  - Implement new mode for NIS passwd.adjunct.byname table (#678318)
  - Query NIS domain only when needed (#703345)
  - Count total processors using sysfs (#706894)
  - Translate clone error if necessary (#707998)
  - Workaround kernel clobbering robust list (#711531)


author: Andreas Schwab <schwab@redhat.com> - 2.5-66
changelog:
  - Use correct type when casting d_tag (#599056, CVE-2010-0830)
  - Report write error in addmnt even for cached streams (#688980,
    CVE-2011-1089)


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Andreas Schwab <schwab@redhat.com> - 2.5-62
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Andreas Schwab <schwab@redhat.com> - 2.5-54
changelog:
  - Add timestamps to nscd logs (#527558)
  - Fix index wraparound handling in memusage (#531576)
  - Handle running out of buffer space with IPv6 mapping enabled (#533367)
  - Don't deadlock in __dl_iterate_phdr while (un)loading objects (#549813)
  - Avoid alloca in setenv for long strings (#559974)
  - Recognize POWER7 and ISA 2.06 (#563563)
  - Add support for AT_BASE_PLATFORM (#563599)
  - Restore locking in free_check (#585674)
  - Fix lookup of collation sequence value during regexp matching (#587360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Jakub Jelinek <jakub@redhat.com> 2.5-39
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#502901, BZ#9957)
  - avoid extraneous comma at the end of enum in dlfcn.h (#504704)


author: Jakub Jelinek <jakub@redhat.com> 2.5-38
changelog:
  - add optional experimental malloc (enable with MALLOC_PER_THREAD=1
    in environment, #494758)
  - nscd backport (#483636)


author: Jakub Jelinek <jakub@redhat.com> 2.5-37
changelog:
  - remove const attribute from sysconf (#490821, BZ#3493)
  - add RUSAGE_THREAD definition (#484214)
  - update i?86/x86_64 cache info for sysconf on newer CPUs


author: Jakub Jelinek <jakub@redhat.com> 2.5-36
changelog:
  - nscd GC fixes (#483636, BZ#5382, BZ#5381, BZ#9741, BZ#9750)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - fix a corner case in realloc (#478499)
  - fix a setlocale race (#455580, BZ#6712)
  - fix getifaddrs for Infiniband interfaces (#463252, BZ#6589)
  - use private futexes for process private PI mutexes (#495955, BZ#6955)
  - optimize pthread_mutex_{,un}lock for the most common mutex types (#467316)
  - fix getgrouplist with [!NOTFOUND=return] (#470768)
  - don't open /var/run/utmp in setutent_file read-write unnecessarily
    to avoid audit messages (#475332)
  - fix dlopen memory leak (#476725, BZ#6763)
  - fix crashes when fork is running in one thread concurrently with
    pthread stack cache updates in another thread (#477705)
  - fix getent to not print comma in between network aliases (#484082)
  - attempt to preserve nscd process name in paranoia mode restarts
    (#490010)
  - fix inet6_opt_init (#488748, BZ#5760)
  - fix getnameinfo with both nodename and servname NULL
    and NI_NAMEREQD in flags (#489419, BZ#7080)
  - fix inet6_rth_add (#494850, BZ#9881)
  - fix inet6_rth_reverse (#494849, BZ#9880)
  - fix _dl_runtime_profile on s390x (#470300)


author: Jakub Jelinek <jakub@redhat.com> 2.5-35
changelog:
  - increase default buffer size in opendir, if malloc fails,
    retry malloc with smaller size (#484440)


author: Jakub Jelinek <jakub@redhat.com> 2.5-25
changelog:
  - fix yp_order (#435519, BZ#5854)
  - new x86_64 optimized memset (#437394)
  - fix ppc64 dynamic linker synchronization (#441702, BZ#5741)
  - malloc speedup (#451184, #460154, BZ#4349)
  - document that setenv and putenv aren't thread-safe (#316791)
  - speed up qsort (#435182)
  - provide unwind info for x86_64 signal return pad (#445259)
  - use DNS provided TTL for nscd hosts cache (#454299)
  - robustify nscd.conf reading (#438456, BZ#5818)
  - power4/power6 math backports (#440103)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-19
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-15
changelog:
  - robust mutex fixes (BZ#4512)
  - *printf fixes (BZ#4514)
  - as_IN updates (#218035)
  - use MADV_DONTNEED in malloc (#237711)
  - fix sem_timedwait on i?86 and x86_64
  - fix dladdr if some shared library is mapped into ld.so intersegment
    VM hole (#232224, BZ#4131)
  - fdatasync is a cancellation point (BZ#4465)
  - add a temporary hack to avoid reruning DSO initializers if dlopen
    is called from _dl_fini destructors (#234946)
  - build s390 31-bit libs with -march=z900, i.e. only support
    64-bit s390x CPUs (#228127)


author: Jakub Jelinek <jakub@redhat.com> 2.5-14
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix NIS+ __nisfind_server (#235229)
  - assorted NIS+ speedups (#233460)
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - further localedef robustification (#203728)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070)
  - fix _XOPEN_VERSION (BZ#4364)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458,
    BZ#3348, BZ#4344, BZ#4368, BZ#4305, BZ#4306)
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - assorted locale data fixes (BZ#3322, BZ#3995, BZ#3884, BZ#3851, BZ#4411)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - update ru and sv translations
  - fix fesetround return value on ia64
  - fix nscd SIGHUP database invalidation


author: Jakub Jelinek <jakub@redhat.com> 2.5-9
changelog:
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)


author: Jakub Jelinek <jakub@redhat.com> 2.5-8
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5-7
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)
  - fix ttyname and ttyname_r with invalid file descriptor (#218276)
  - fix nis_getnames if the default domain doesn't contain at least
    two dots (#206483)
  - fix memusage with realloc (x, 0)


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.5-4
changelog:
  - fix i?86 6 argument syscalls (e.g. splice)
  - fix rtld minimal realloc (BZ#3352)
  - fix RFC3484 getaddrinfo sorting according to rules 4 and 7 (BZ#3369)
  - fix xdrmem_setpos (#211452)


author: Jakub Jelinek <jakub@redhat.com> 2.5-3
changelog:
  - bump __GLIBC_MINOR__
  - increase PTHREAD_STACK_MIN on ppc{,64} to 128K to allow
    64K pagesize kernels (#209877)
  - speed up initgroups on NIS+ (#208203)


author: Jakub Jelinek <jakub@redhat.com> 2.5-2
changelog:
  - fix nscd database growing (#207928)
  - bypass prelinking when LD_DYNAMIC_WEAK=1 is in the environment


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-35
changelog:
  - fix glob with large number of matches (BZ#3253)
  - fix fchownat on kernels that don't support that syscall (BZ#3252)
  - fix lrintl on s390{,64}


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-34
changelog:
  - fix ppc{32,64} longjmp (BZ#3225)
  - fix user visible spelling errors (BZ#3137)
  - fix l{,l}rint{,f,l} around zero (BZ#2592)
  - avoid stack trampoline in s390{,x} makecontext


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-32
changelog:
  - on ppc* use just AT_PLATFORM and altivec AT_HWCAP bit for library selection
  - fix lrintl and lroundl on ppc{,64}
  - use hidden visibility on fstatat{,64} and mknodat in libc_nonshared.a


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-31
changelog:
  - fix pthread_cond_{,timed}wait cancellation (BZ#3123)
  - fix lrint on ppc32 (BZ#3155)
  - fix malloc allocating more than half of address space (BZ#2775)
  - fix mktime on 32-bit arches a few years after 2038 (BZ#2821)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-30
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - fix or_IN February name (#204730)
  - fix pthread_create called from cancellation handlers (BZ#3124)
  - fix regex case insensitive searches with characters where upper
    and lower case multibyte representations have different length
    (e.g. I and dotless i, #202991)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-29
changelog:
  - randomize resolver query ids before use instead after use (#205113)
  - fix resolver symver checking with DT_GNU_HASH (#204909)
  - put .hash section in glibc libraries at the end of RO segment
    when .gnu.hash is present


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-27
changelog:
  - allow $LIB and $PLATFORM in dlopen parameters even in suid/sgid (#204399)
  - handle $LIB/$PLATFORM in LD_LIBRARY_PATH
  - fix splice prototype (#204530)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-26
changelog:
  - real fix for the doubly linked list corruption problem
  - try harder in realloc to allocate memory (BZ#2684)
  - fix getnameinfo error reporting (#204122)
  - make localedef more robust on invalid input (#203728)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-25
changelog:
  - temporarily back out code to limit number of unsorted block
    sort iterations (#203735, #204027)
  - handle PLT symbols in dladdr properly (BZ#2683)
  - avoid malloc infinite looping for allocations larger than
    the system can allocate (#203915)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-23
changelog:
  - malloc fixes, especially for 32-bit arches (#202309)
  - further *_IN locale fixes (#200230)
  - fix get{serv,rpc}ent{,_r} if NIS map is empty (#203237)
  - fix /usr/bin/iconv (#203400)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-21
changelog:
  - if some test gets stuck, kill the tee process after make check
    finishes
  - build with -mtune=generic on i686 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-19
changelog:
  - adaptive malloc brk/mmap threshold
  - fix fchownat to use kernel syscall (if available) on many arches (#201870)
  - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all
    other arches (#201748)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-18
changelog:
  - NIS+ fixes
  - fix memusage and xtrace scripts (#200736)
  - redirect /sbin/service sshd condrestart std{out,err} to /dev/null
    when executed from glibc_post_upgrade


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-16
changelog:
  - fix dladdr on binaries/libraries with only DT_GNU_HASH and no
    DT_HASH (#200635)
  - fix early timeout of initgroups data in nscd (#173019)
  - add am/pm display to es_PE and es_NI locales (#167101)
  - fix nss_compat failures when nis/nis+ unavailable (#192072)


author: Roland McGrath <roland@redhat.com> 2.4.90-15
changelog:
  - fix missing destructor calls in dlclose (#197932)
  - enable transliteration support in all locales (#196713)
  - disallow RTLD_GLOBAL flag for dlmopen in secondary namespaces (#197462)
  - PI mutex support


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-12
changelog:
  - buildrequire gettext
  - enable fstatat64/newfstatat syscalls even on ppc*/s390*/ia64 (#196494)
  - fix out of memory behavior in gettext (#194321)
  - fix regex on multi-byte non-UTF-8 charsets (#193873)
  - minor NIS+ fixes (#190803)
  - don't use cancellable calls in posix_spawn* and only set{u,g}id
    current thread if requested (#193631)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-11
changelog:
  - don't exit from nscd -i <database> before the database is
    actually invalidated, add locking to prune_cache (#191464)
  - build glibc-devel.i386 static libraries with
    -mno-tls-direct-seg-refs -DNO_TLS_DIRECT_SEG_REFS
  - RFC3542 support (advanced API for IPv6; #191001, BZ##2693)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-8
changelog:
  - update from CVS
    - fix nss_compat when SETENT_BATCH_READ=TRUE is in /etc/default/nss
    - fix RFC3484 precedence table for site-local and ULA addresses (#188364)
    - fix a sunrpc memory leak


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-5
changelog:
  - update from CVS
    - some NIS+ fixes
    - allow overriding rfc3484 address sorting tables for getaddrinfo
      through /etc/gai.conf (sample config file included in %doc directory)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-4
changelog:
  - update from CVS
    - SETENT_BATCH_READ /etc/default/nss option for speeding up
      some usages of NIS+ (#188246)
    - move debug state change notification (#179208)
    - fix ldd script if one of the dynamic linkers is not installed (#190259)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-3
changelog:
  - update from CVS
    - fix a typo in nscd.conf (#190085)
    - fix handling of SIGHUP in nscd when some caches are disabled (#189978)
    - make nscd paranoia mode working with non-root server-user (#189779)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-2
changelog:
  - update from CVS
    - fix getaddrinfo (#190002)
    - add auto-propagate nscd.conf options (#177154)
    - fix nscd auditing (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.4-6
changelog:
  - update from CVS
    - NIS+ fixes
    - don't segfault on too large argp key values (#189545)
    - getaddrinfo fixes for RFC3484 (#188364)


author: Jakub Jelinek <jakub@redhat.com> 2.4-5
changelog:
  - update from CVS
    - pshared robust mutex support
    - fix btowc and bwtoc in C++ (#186410)
    - fix NIS+ (#186592)
    - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - don't mention nscd failures on 2.0 kernels (#185335)


author: Jakub Jelinek <jakub@redhat.com> 2.4-2
changelog:
  - accurate unwind info for lowlevellock.h stubs on %{ix86}
  - fix ppc/ppc64 ceill, floorl, rintl, roundl and truncl (BZ#2423)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-2
changelog:
  - update from CVS
    - fix sYSMALLOc for MALLOC_ALIGNMENT > 2 * SIZE_SZ (#183895)
    - revert ppc32 malloc alignment patch, it breaks malloc_set_state
      and needs some further thoughts and time (#183894)
  - provide accurate unwind info for lowlevellock.h stubs on x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-1
changelog:
  - update from CVS
    - fixes for various arches
  - ensure malloc returns pointers aligned to at least
    MIN (2 * sizeof (size_t), __alignof__ (long double))
    (only on ppc32 this has not been the case lately with addition
     of 128-bit long double, #182742)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-36
changelog:
  - update from CVS
    - fix frequency setting for ITIMER_PROF (#179938, BZ#2268)
    - fix powerpc inline fegetround ()
    - fix nptl_db (#179946)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-35
changelog:
  - update from CVS
    - handle futimesat (fd, NULL, tvp) as futimes (fd, tvp)
  - fix <stdlib.h> q{e,f,g}cvt{,_r} for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-34
changelog:
  - fix <math.h> with C++ and -mlong-double-64 (#179742)
  - add nexttowardl redirect for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-32
changelog:
  - update from CVS
    - 128-bit long double fixes for ppc{,64}, s390{,x} and sparc{,v9},
      alpha 128-bit long double support
  - add inotify syscall numbers to the override <asm/unistd.h> headers
    (#179366)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-31
changelog:
  - update from CVS
    - 128-bit long double on ppc, ppc64, s390, s390x and sparc{,v9}
  - add some new syscall numbers to the override <asm/unistd.h>
    headers


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-30
changelog:
  - update from CVS
    - <pthread.h> initializer fixes for -std=c{8,9}9 on 32-bit
      arches
  - avoid writable .rodata (#177121)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-29
changelog:
  - update from CVS
    - make pthread_mutex_t an unnamed union again, as it affects
      libstdc++ ABI mangling


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-26
changelog:
  - update from CVS
    - for newly linked lio_listio* callers, send per request
      notifications (#170116)
    - fixup nscd -S option removal changes (#176860)
    - remove nonnull attribute from ctermid (#176753)
    - fix PTHREAD_*_INITIALIZER{,_NP} on 64-bit arches
    - SPARC NPTL support for pre-v9 CPUs
  - drop support for 2.4.xx and < 2.6.9 kernels


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-25
changelog:
  - update from CVS
    - s390{,x} and sparc{,64} pointer mangling fixes
  - install a sanitized LinuxThreads <bits/libc-lock.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-23
changelog:
  - update from CVS
    - robust mutexes
  - fix transliteration segfaults (#176573, #176583)
  - ignore prelink temporaries in ldconfig (#176570)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-22
changelog:
  - update from CVS
    - minor fts fixes
  - revert broken _Pragma () workaround
  - fix ldconfig on bi-arch architectures (#176316)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-20
changelog:
  - update from CVS
    - time ((void *) 1) should segfault, not return -EFAULT (#174856, BZ#1952)
    - fix errlist generation
  - update ulps for GCC 4.1 on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on i586 i686 athlon sparcv9 alphaev6,
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


