# changelog

author: Don Zickus <dzickus@redhat.com> [2.6.18-74.el5]
changelog:
  - Revert: [s390] qeth: create copy of skb for modification (Hans-Joachim Picht ) [354861]
  - Revert: [xen] allow more than 3 VNIFs (Tetsu Yamamoto ) [297331]
  - [nfs] discard pagecache data for dirs on dentry_iput (Jeff Layton ) [364351]
  - [net] link_watch: always schedule urgent events (Herbert Xu ) [251527]
  - [audit] ratelimit printk messages (Eric Paris ) [428701]
  - [misc] kprobes: fix reentrancy (Dave Anderson ) [232489]
  - [misc] kprobes: inatomic __get_user and __put_user (Dave Anderson ) [232489]
  - [misc] kprobes: support kretprobe blacklist (Dave Anderson ) [232489]
  - [misc] kprobes: make probe handler stack unwind correct (Dave Anderson ) [232489]
  - [net] ipv6: use correct seed to compute ehash index (Neil Horman ) [248052]
  - [scsi] areca: update to latest (Tomas Henzl ) [429877]
  - [net] fix potential SKB invalid truesize bug (Hideo AOKI ) [429417]
  - [ia64] enable CMCI on hot-plugged processors (Fabio Olive Leite ) [426793]
  - [s390] system z large page support (Hans-Joachim Picht ) [318951]
  - [mm] introduce more huge pte handling functions (Jan Glauber ) [318951]
  - [mm] make page->private usable in compound pages (Jan Glauber ) [318951]
  - [net] udp: update infiniband driver (Hideo AOKI ) [223593]
  - [net] udp: add memory accounting (Hideo AOKI ) [223593]
  - [net] udp: new accounting interface (Hideo AOKI ) [223593]
  - [misc] support module taint flag in /proc/modules (Jon Masters ) [253476]
  - [scsi] sym53c8xx: add PCI error recovery callbacks (Ed Pollard ) [207977]
  - [usb] sierra MC8755: increase HSDPA performance (Ivan Vecera ) [232885]


author: Don Zickus <dzickus@redhat.com> [2.6.18-73.el5]
changelog:
  - [xen] ia64: domHVM with pagesize 4k hangs (Tetsu Yamamoto ) [428124]
  - [xen] ia64: guest has bad network performance (Tetsu Yamamoto ) [272201]
  - [xen] ia64: create 100GB mem guest, HV softlockup (Tetsu Yamamoto ) [251353]
  - [xen] ia64: create 100GB mem guest fixes (Tetsu Yamamoto ) [251353]
  - [xen] x86-pae: support >4GB memory ia64 fixes (Bhavana Nagendra ) [316371]
  - [xen] x86-pae: support >4GB memory (Bhavana Nagendra ) [316371]
  - [kABI] RHEL-5.2 updates (Jon Masters ) [282881 284231 252994 371971 403821 264701 422321]
  - [ia64] xen: create 100GB mem guest, fix softlockup#2 (Tetsu Yamamoto ) [251353]
  - [ia64] xen: create 100GB mem guest, fix softlockup (Tetsu Yamamoto ) [251353]
  - [acpi] backport video support from upstream (Dave Airlie ) [428326]
  - [audit] break execve records into smaller parts (Eric Paris ) [429692]
  - [scsi] qla2xxx fw: driver doesn't login to fabric (Marcus Barrow ) [253477]
  - [x86] pci: use pci=norom to disable p2p rom window (Konrad Rzeszutek ) [426033]
  - [s390] crypto: new CP assist functions (Hans-Joachim Picht ) [318961]
  - [s390] OSA 2 Ports per CHPID support (Hans-Joachim Picht ) [318981]
  - [s390] STSI change for capacity provisioning (Hans-Joachim Picht ) [318991]
  - [s390] HiperSockets MAC layer routing support (Hans-Joachim Picht ) [319001]
  - [scsi] aic94xx: version 1.0.2-2 (Konrad Rzeszutek ) [253301]
  - [ppc64] cell: support for Performance Tools part4 (Scott Moser ) [253211]
  - [ppc64] cell: support for Performance Tools part3 (Brad Peters ) [253211]
  - [ppc64] cell: support for Performance Tools part2 (Scott Moser ) [253211]
  - [ppc64] cell: support for Performance Tools part1 (Brad Peters ) [253211]


author: Don Zickus <dzickus@redhat.com> [2.6.18-72.el5]
changelog:
  - [ppc64] backport PMI driver for cell blade (Scott Moser ) [279171]
  - [fs] ecryptfs: fix dentry handling (Eric Sandeen ) [228341]
  - [net] IPV6 SNMP counters fix (Ed Pollard ) [421401]
  - [gfs2] lock the page on error (Bob Peterson ) [429168]
  - [fs] manually d_move inside of rename() (Peter Staubach ) [427472]
  - [dlm] validate lock name length (Patrick Caulfeld ) [409221]
  - [net] IPv6 TAHI RH0 RFC5095 update (Thomas Graf ) [426904]
  - [mm] using hugepages panics the kernel (Larry Woodman ) [429205]
  - [sound] enable HDMI for AMD/ATI integrated chipsets (Bhavana Nagendra ) [428963]
  - [net] wireless: introduce WEXT scan capabilities (John W. Linville ) [427528]
  - [mm] hugepages: leak due to pagetable page sharing (Larry Woodman ) [428612]
  - [nfs] acl support broken due to typo (Steve Dickson ) [429109]
  - [ide] hotplug docking support for some laptops (Alan Cox ) [230541]
  - [x86] cpufreq: unknown symbol fixes (Rik van Riel ) [427368]
  - [mm] prevent cpu lockups in invalidate_mapping_pages (Larry Woodman ) [427798]
  - [x86] mmconfig: call pcibios_fix_bus_scan (tcamuso@redhat.com ) [408551]
  - [x86] mmconfig: introduce pcibios_fix_bus_scan (tcamuso@redhat.com ) [408551]
  - [x86] mmconfig: init legacy pci conf functions (tcamuso@redhat.com ) [408551]
  - [x86] mmconfig: add legacy pci conf functions (tcamuso@redhat.com ) [408551]
  - [x86] mmconfig: introduce PCI_USING_MMCONF flag (tcamuso@redhat.com ) [408551]
  - [x86] mmconfig: remove platforms from the blacklist (tcamuso@redhat.com ) [239673 253288 408551]
  - [fs] hfs: make robust to deal with disk corruption (Eric Sandeen ) [213773]
  - [acpi] improve reporting of power states (Brian Maly ) [210716]
  - [net] e1000: update to lastest upstream (Andy Gospodarek ) [253128]
  - [net] e1000e: update to latest upstream (Andy Gospodarek ) [252003]
  - [xen] xenoprof: loses samples for passive domains (Markus Armbruster ) [426200]
  - [cpufreq] ondemand governor update (Brian Maly ) [309311]
  - [input] enable HP iLO2 virtual remote mouse (Alex Chiang ) [250288]
  - [misc] ioat: support for 1.9 (John Feeney ) [209411]
  - [ppc64] oprofile: power5+ needs unique entry (Scott Moser ) [244719]
  - [ppc64] oprofile: distinguish 970MP from other 970s (Scott Moser ) [216458]
  - [wd] hpwdt: initial support (pschoell ) [251063]
  - [xen] x86: more improved TPR/CR8 virtualization (Bhavana Nagendra ) [251985]
  - [xen] domain debugger for VTi (Tetsu Yamamoto ) [426362]
  - [xen] virtualize ibr/dbr for PV domains (Tetsu Yamamoto ) [426362]


author: Don Zickus <dzickus@redhat.com> [2.6.18-71.el5]
changelog:
  - [scsi] cciss: fix incompatibility with hpacucli (Tomas Henzl ) [426873]
  - Revert: [net] udp: update infiniband driver (Hideo AOKI ) [223593]
  - Revert: [net] udp: add memory accounting (Hideo AOKI ) [223593]
  - Revert: [net] udp: new accounting interface (Hideo AOKI ) [223593]
  - Revert: [misc] add a new /proc/modules_taint interface (Jon Masters ) [253476]


author: Don Zickus <dzickus@redhat.com> [2.6.18-70.el5]
changelog:
  - [xen] move hvm_maybe_deassert_evtchn_irq early (Don Dutile ) [412721]
  - [xen] hvm: tolerate intack completion failure (Don Dutile ) [412721]
  - [xen] hvm: evtchn to fake pci interrupt propagation (Don Dutile ) [412721]
  - [char] R500 drm support (Dave Airlie ) [429012]
  - [x86] correct cpu cache info for Tolapai (Geoff Gustafson ) [426172]
  - [ia64] xen: fix bogus IOSAPIC (Doug Chapman ) [246130]
  - [misc] enabling a non-hotplug cpu should cause panic (Kei Tokunaga ) [426508]
  - [cpufreq] booting with maxcpus=1 panics (Doug Chapman ) [428331]
  - [net] fix missing defintions from rtnetlink.h (Neil Horman ) [428143]
  - [xen] kdump: fix dom0 /proc/vmcore layout (Neil Horman ) [423731]
  - [xen] ia64: access extended I/O spaces from dom0 (Jarod Wilson ) [249629]
  - [net] udp: update infiniband driver (Hideo AOKI ) [223593]
  - [net] udp: add memory accounting (Hideo AOKI ) [223593]
  - [net] udp: new accounting interface (Hideo AOKI ) [223593]
  - [xen] idle=poll instead of hypercall block (Markus Armbruster ) [416141]
  - [net] get minimum RTO via tcp_rto_min (Anton Arapov ) [427205]
  - [xen] fixes a comment only (Bill Burns ) [328321]
  - [xen] make dma_addr_to_phys_addr static (Bill Burns ) [328321]
  - [xen] allow sync on offsets into dma-mapped region (Bill Burns ) [328321]
  - [xen] keep offset in a page smaller than PAGE_SIZE (Bill Burns ) [328321]
  - [xen] handle sync invocations on mapped subregions (Bill Burns ) [328321]
  - [xen] handle multi-page segments in dma_map_sg (Bill Burns ) [328321]
  - [misc] add a new /proc/modules_taint interface (Jon Masters ) [253476]
  - [scsi] iscsi: Boot Firmware Table tool support (Konrad Rzeszutek ) [307781]
  - [mm] make zonelist order selectable in NUMA (Kei Tokunaga ) [251111]
  - [ide] handle DRAC4 hotplug (John Feeney ) [212391]
  - [xen] allow more than 3 VNIFs (Tetsu Yamamoto ) [297331]
  - [misc] enable support for CONFIG_SUNDANCE (Andy Gospodarek ) [252074]
  - [ia64] use thread.on_ustack to determine user stack (Luming Yu ) [253548]
  - [xen] export cpu_llc_id as gpl (Rik van Riel ) [429004]
  - [md] avoid reading past end of bitmap file (Ivan Vecera ) [237326]
  - [acpi] Support external package objs as method args (Luming Yu ) [241899]


author: Don Zickus <dzickus@redhat.com> [2.6.18-69.el5]
changelog:
  - [xen] incorrect calculation leads to wrong nr_cpus (Daniel P. Berrange ) [336011]
  - [xen] ia64: hv hangs on Corrected Platform Errors (Tetsu Yamamoto ) [371671]
  - [xen] ia64: warning fixes when checking EFI memory (Tetsu Yamamoto ) [245566]
  - [Xen] ia64: stop all CPUs on HV panic (Tetsu Yamamoto ) [426129]
  - [Xen] ia64: failed domHVM creation causes HV hang (Tetsu Yamamoto ) [279831]
  - [xen] export NUMA topology info to domains (Bill Burns ) [235848]
  - [xen] provide NUMA memory usage information (Bill Burns ) [235850]
  - [xen] x86: barcelona hypervisor fixes (Bhavana Nagendra ) [421021]
  - [xen] improve checking in vcpu_destroy_pagetables (Bill Burns ) [227614]
  - [xen] domain address-size clamping (Bill Burns ) [227614]
  - [xen] x86: fix continuation translation for large HC (Bill Burns ) [227614]
  - [xen] x86: make HV respect the e820 map < 16M (Chris Lalancette ) [410811]
  - [xen] x86: vTPR support and upper address fix (Bill Burns ) [252236]
  - [xen] x86: fix hp management support on proliant (Bill Burns ) [415691]
  - [xen] x86: improved TPR/CR8 virtualization (Bhavana Nagendra ) [251985]
  - [xen] ia64: running java-vm causes dom0 to hang (Tetsu Yamamoto ) [317301]
  - [xen] enable nested paging by default on amd-v (Bhavana Nagendra ) [247190]
  - [fs] corruption by unprivileged user in directories (Vitaly Mayatskikh ) [428797] {CVE-2008-0001}
  - [gfs2] Reduce gfs2 memory requirements (Bob Peterson ) [428291]
  - [gfs2] permission denied on first attempt to exec (Abhijith Das ) [422681]
  - [openib] OFED 1.3 support (Doug Ledford ) [253023 254027 284861]
  - [scsi] qla2xxx: fix bad nvram kernel panic (Marcus Barrow ) [367201]
  - [scsi] qla2xxx: fix for infinite-login-retry (Marcus Barrow ) [426327]
  - [misc] increase softlockup timeout maximum (George Beshers ) [253124]
  - [misc] firewire: latest upstream (Jay Fenlason ) [370421]
  - [misc] pci rom: reduce number of failure messages (Jun'ichi "Nick" Nomura ) [217698]
  - [s390] pte type cleanup (Hans-Joachim Picht ) [360701]
  - [s390] qdio: output queue stall on FCP and net devs (Hans-Joachim Picht ) [354871]
  - [s390] qdio: many interrupts on qdio-driven devices (Hans-Joachim Picht ) [360821]
  - [s390] qdio: time calculation is wrong (Hans-Joachim Picht ) [360631]
  - [s390] crash placing a kprobe on  instruction (Hans-Joachim Picht ) [253275]
  - [s390] data corruption on DASD while toggling CHPIDs (Hans-Joachim Picht ) [360611]
  - [s390] fix dump on panic for DASDs under LPAR (Hans-Joachim Picht ) [250352]
  - [s390] qeth: crash during activation of OSA-cards (Hans-Joachim Picht ) [380981]
  - [s390] qeth: hipersockets supports IP packets only (Hans-Joachim Picht ) [329991]
  - [s390] cio: Disable chan path measurements on reboot (Hans-Joachim Picht ) [354801]
  - [s390] zfcp: remove SCSI devices then adapter (Hans-Joachim Picht ) [382841]
  - [s390] zfcp: error messages when LUN 0 is present (Jan Glauber ) [354811]
  - [s390] qeth: drop inbound pkt with unknown header id (Hans-Joachim Picht ) [360591]
  - [s390] qeth: recognize/handle RC=19 from Hydra 3 OSA (Hans-Joachim Picht ) [354891]
  - [char] tpm: cleanups and fixes (Konrad Rzeszutek ) [184784]
  - [s390] z/VM monitor stream state 2 (Hans-Joachim Picht ) [253026]
  - [s390] support for z/VM DIAG 2FC (Hans-Joachim Picht ) [253034]
  - [s390] Cleanup SCSI dumper code part 2 (Hans-Joachim Picht ) [253104]
  - [s390] AF_IUCV Protocol support (Jan Glauber ) [228117]
  - [s390] z/VM unit-record device driver (Hans-Joachim Picht ) [253121]
  - [s390] cleanup SCSI dumper code (Hans-Joachim Picht ) [253104]
  - [s390] qeth: skb sg support for large incoming msgs (Hans-Joachim Picht ) [253119]
  - [ia64] /proc/cpuinfo of Montecito (Luming Yu ) [251089]


author: Don Zickus <dzickus@redhat.com> [2.6.18-68.el5]
changelog:
  - [misc] offline CPU with realtime process running v2 (Michal Schmidt ) [240232]
  - Revert: [misc] offlining a CPU with realtime process running (Don Zickus ) [240232]
  - [x86] fix build warning for command_line_size (Prarit Bhargava ) [427423]
  - [mm] show_mem: include count of pagecache pages (Larry Woodman ) [428094]
  - [nfs] Security Negotiation (Steve Dickson ) [253019]
  - [net] igb: update to actual upstream version (Andy Gospodarek ) [252004]
  - [scsi] cciss: move READ_AHEAD to block layer (Tomas Henzl ) [424371]
  - [scsi] cciss: update copyright information (Tomas Henzl ) [423841]
  - [scsi] cciss: support new controllers (Tomas Henzl ) [423851]
  - [scsi] cciss version change (Tomas Henzl ) [423831]
  - [md] dm-mpath: send uevents for path fail/reinstate (dwysocha@redhat.com ) [184778]
  - [md] dm-uevent: generate events (Dave Wysochanski ) [184778]
  - [md] dm: add uevent to core (dwysocha@redhat.com ) [184778]
  - [md] dm: export name and uuid (dwysocha@redhat.com ) [184778]
  - [md] dm: kobject backport (Dave Wysochanski ) [184778]
  - [sata] rhel5.2 driver update (Jeff Garzik ) [184884 307911]
  - [sata] rhel5.2 general kernel prep (Jeff Garzik ) [184884 307911]
  - [md] dm: auto loading of dm-mirror log modules (Jonathan Brassow ) [388661]
  - [scsi] areca driver update rhel part (Tomas Henzl ) [363961]
  - [scsi] areca driver update (Tomas Henzl ) [363961]
  - [firewire] limit logout messages in the logs (Jay Fenlason ) [304981]
  - - [net] add support for dm9601 (Ivan Vecera ) [251994]
  - [ia64] ACPICA: allow Load tables (Luming Yu ) [247596]


author: Don Zickus <dzickus@redhat.com> [2.6.18-67.el5]
changelog:
  - [xfrm] drop pkts when replay counter would overflow (Herbert Xu ) [427877]
  - [xfrm] rfc4303 compliant auditing (Herbert Xu ) [427877]
  - [ipsec] add ICMP host relookup support (Herbert Xu ) [427876]
  - [ipsec] added xfrm reverse calls (Herbert Xu ) [427876]
  - [ipsec] make xfrm_lookup flags argument a bit-field (Herbert Xu ) [427876]
  - [ipv6] esp: discard dummy packets from rfc4303 (Herbert Xu ) [427872]
  - [ipv4] esp: discard dummy packets from rfc4303 (Herbert Xu ) [427872]
  - [ipsec] add support for combined mode algorithms (Herbert Xu ) [253051]
  - [ipsec] allow async algorithms (Herbert Xu ) [253051]
  - [ipsec] use crypto_aead and authenc in ESP (Herbert Xu ) [253051]
  - [ipsec] add new skcipher/hmac algorithm interface (Herbert Xu ) [253051]
  - [ipsec] add async resume support on input (Herbert Xu ) [253051]
  - [crypto] aead: add authenc (Herbert Xu ) [253051]
  - [ipsec] add async resume support on output (Herbert Xu ) [253051]
  - [crypto] xcbc: new algorithm (Herbert Xu ) [253051]
  - [crypto] ccm: added CCM mode (Herbert Xu ) [253051]
  - [crypto] tcrypt: add aead support (Herbert Xu ) [253051]
  - [crypto] ctr: add CTR  block cipher mode (Herbert Xu ) [253051]
  - [crypto] hmac: add crypto template implementation (Herbert Xu ) [253051]
  - [crypto] tcrypt: hmac template and hash interface (Herbert Xu ) [253051]
  - [crypto] tcrypt: use skcipher interface (Herbert Xu ) [253051]
  - [crypto] digest: added user api for new hash type (Herbert Xu ) [253051]
  - [crypto] cipher: added block ciphers for CBC/ECB (Herbert Xu ) [253051]
  - [crypto] cipher: added encrypt_one/decrypt_one (Herbert Xu ) [253051]
  - [crypto] seqiv: add seq num IV generator (Herbert Xu ) [253051]
  - [crypto] api: add aead crypto type (Herbert Xu ) [253051]
  - [crypto] eseqiv: add encrypted seq num IV generator (Herbert Xu ) [253051]
  - [crypto] chainiv: add chain IV generator (Herbert Xu ) [253051]
  - [crypto] skcipher: add skcipher infrastructure (Herbert Xu ) [253051]
  - [crypto] api: add cryptomgr (Herbert Xu ) [253051]
  - [crypto] api: add new bottom-level crypto_api (Herbert Xu ) [253051]
  - [crypto] api: add new top-level crypto_api (Herbert Xu ) [253051]
  - [scsi] mpt fusion: set config_fusion_max=128 (Chip Coldwell ) [426533]
  - [xen] ia64: fix ssm_i emulation barrier and vdso pv (Tetsu Yamamoto ) [426015]
  - [xen] ia64: cannot create guest having 100GB memory (Tetsu Yamamoto ) [251353]
  - [ia64] altix acpi iosapic warning cleanup (George Beshers ) [246130]
  - [x86] add pci quirk to HT enabled systems (Neil Horman ) [336371]
  - [fs] ecryptfs: check for existing key_tfm at mount (Eric Sandeen ) [228341]
  - [fs] ecryptfs: redo dget,mntget on dentry_open fail (Eric Sandeen ) [228341]
  - [fs] ecryptfs: upstream fixes (Eric Sandeen ) [228341]
  - [fs] ecryptfs: connect sendfile ops (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport to rhel5 netlink api (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport to rhel5 scatterlist api (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport to crypto hash api (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport to rhel5 cipher api (Eric Sandeen ) [228341]
  - [fs] ecryptfs: un-constify ops vectors (Eric Sandeen ) [228341]
  - [fs] ecryptfs: convert to memclear_highpage_flush (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport to rhel5 memory alloc api (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport sysf API for kobjects/ksets (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport generic_file_aio_read (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport f_path to f_dentry (Eric Sandeen ) [228341]
  - [fs] ecryptfs: convert to vfsmount/dentry (Eric Sandeen ) [228341]
  - [fs] ecryptfs: stacking functions from upstream vfs (Eric Sandeen ) [228341]
  - [fs] ecryptfs: backport from 2.6.24-rc4 (Eric Sandeen ) [228341]
  - [firewire] fix uevent to handle hotplug (Jay Fenlason ) [302981]
  - [cpufreq] fix non-smp compile and warning (Prarit Bhargava ) [413941]
  - [net] r8169: support realtek 8111c and 8101e loms (Ivan Vecera ) [276421 251259 248534 247142 238187]
  - specfile: xen - see more than 32 vpcus on x86_64 (Bill Burns) [228572]
  - specfile: cleanups, add new build options (Jarod Wilson) [248753 232602 247118]


author: Don Zickus <dzickus@redhat.com> [2.6.18-65.el5]
changelog:
  - [audit] add session id to easily correlate records (Eric Paris ) [242813]
  - [audit] log uid, auid, and comm in obj_pid records (Eric Paris ) [284531]
  - [net] cxgb3: update to latest upstream (Andy Gospodarek ) [253195]
  - [net] bnx2x: support Broadcom 10GbE Hardware (Andy Gospodarek ) [253346]
  - [misc] enable i2c-piix4 (Bhavana Nagendra ) [424531]
  - [net] ixgbe: support for new Intel 10GbE Hardware (Andy Gospodarek ) [252005]
  - [net] iwl4965 updates (John W. Linville ) [252981]
  - [net] mac80211 updates (John W. Linville ) [253015]
  - [net] cfg80211 updates to support mac80211/iwl4965 (John W. Linville ) [252981]
  - [net] infrastructure updates to mac80211/iwl4965 (John W. Linville ) [252981 253015 253027 256001]
  - [net] NULL dereference in iwl driver (Vitaly Mayatskikh ) [401431] {CVE-2007-5938}
  - [scsi] iscsi_tcp update (Mike Christie ) [253989 245823]
  - [aio] account for I/O wait properly (Jeff Moyer ) [253337]
  - [alsa] disabling microphone in bios panics kernel (John Feeney ) [240783]
  - [lockdep] make cli/sti annotation warnings clearer (Peter Zijlstra ) [193729]
  - [lockdep] fixup mutex annotations (Peter Zijlstra ) [193729]
  - [lockdep] mismatched lockdep_depth/curr_chain_hash (Peter Zijlstra ) [193729]
  - [lockdep] avoid lockdep & lock_stat infinite output (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: documentation (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: better class name representation (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: measure lock bouncing (Peter Zijlstra ) [193729]
  - [lockdep] fixup sk_callback_lock annotation (Peter Zijlstra ) [193729]
  - [lockdep] various fixes (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: hook into the lock primitives (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: human readability tweaks (Peter Zijlstra ) [193729]
  - [lockdep] lockstat: core infrastructure (Peter Zijlstra ) [193729]
  - [lockdep] sanitise CONFIG_PROVE_LOCKING (Peter Zijlstra ) [193729]
  - [misc] fix raw_spinlock_t vs lockdep (Peter Zijlstra ) [193729]
  - [alsa] support for realtek alc888s (Brian Maly ) [251253]
  - [xen] save/restore: pv oops when mmap prot_none (Chris Lalancette ) [294811]
  - [net] dod ipv6 conformance (Neil Horman ) [253278]
  - [audit] log eintr, not erestartsys (Eric Paris ) [234426]
  - [misc] ipmi: panic handling enhancement (Geoff Gustafson ) [277121]
  - [misc] fix softlockup warnings/crashes (Chris Lalancette ) [250994]
  - [misc] core dump masking support (Takahiro Yasui ) [223616]
  - [fs] executing binaries with >2GB debug info (Dave Anderson ) [224679]
  - [sched] return first time_slice to correct process (Vitaly Mayatskikh ) [238035]


author: Don Zickus <dzickus@redhat.com> [2.6.18-64.el5]
changelog:
  - Fixes: [kexec] fix vmcoreinfo patch that breaks kdump (Neil Horman ) [424511]
  - Fixes: [fs] nfs: byte-range locking support for cfs (Konrad Rzeszutek ) [196318]


author: Don Zickus <dzickus@redhat.com> [2.6.18-63.el5]
changelog:
  - [scsi] lpfc:  update to version 8.2.0.13 (Chip Coldwell ) [426281]
  - [scsi] qla2xxx: rediscovering luns takes 5 min (Marcus Barrow ) [413211]
  - [misc] edac: add support for intel 5000 mchs (Aristeu Rozanski ) [249335]
  - [fs] ext3: error in ext3_lookup if corruption found (Eric Sandeen ) [181662]
  - [scsi] stex: use resid for xfer len information (Prarit Bhargava ) [251557]
  - [scsi] qla2xxx: msi-x hardware issues on platforms (Marcus Barrow ) [253629]
  - [net] ipv6: ip6_mc_input: sense of promiscuous test (Neil Horman ) [390071]
  - [x86] Add warning to nmi failure message (Prarit Bhargava ) [401631]
  - [misc] enable s/pdif in fila/converse (John Feeney ) [240783]
  - [scsi] qla2xxx: add support for npiv - firmware (Marcus Barrow ) [249618]
  - [scsi] qla2xxx: pci ee error handling support (Marcus Barrow ) [253267]
  - [scsi] qla2xxx: add support for npiv (Marcus Barrow ) [249618]
  - [scsi] mpt fusion: fix sas hotplug (Chip Coldwell ) [253122]
  - [misc] export radix-tree-preload (George Beshers ) [422321]
  - [net] forcedeth: boot delay fix (Andy Gospodarek ) [405521]
  - [kexec] fix vmcoreinfo patch that breaks kdump (Neil Horman ) [424511]
  - Revert: [misc] add vmcoreinfo support to kernel (Neil Horman ) [253850]
  - [scsi] mpt fusion: update to version 3.04.05+ (Chip Coldwell ) [253122]
  - [scsi] mpt fusion: add accessor for version 3.04.05+ (Chip Coldwell ) [253122]
  - [scsi] mpt fusion: pci ids for version 3.04.05+ (Chip Coldwell ) [253122]
  - [misc] offlining a CPU with realtime process running (Michal Schmidt ) [240232]
  - [misc] ioat dma: support unisys (Ivan Vecera ) [248767]
  - [md] dm ioctl: fix 32bit compat layer (Milan Broz ) [360441]
  - [ppc64] enable CONFIG_FB_RADEON (Scott Moser ) [281141]
  - [audit] race checking audit_context and loginuid (Eric Paris ) [241728]
  - [scsi] update megaraid_sas to version 3.15 (Tomas Henzl ) [243154]
  - [x86_64] calioc2 iommu support (Konrad Rzeszutek ) [253302]
  - [x86] cpuinfo: list dynamic acceleration technology (Geoff Gustafson ) [252229]
  - [ppc64] unequal allocation of hugepages (Scott Moser ) [239790]
  - [md] fix bitmap support (Doug Ledford ) [210178]
  - [misc] tlclk driver for telco blade systems (Geoff Gustafson ) [233512]
  - [fs] nfs: byte-range locking support for cfs (Konrad Rzeszutek ) [196318]
  - [x86_64] nmi watchdog: incorrect logic for amd chips (Prarit Bhargava ) [391741]
  - [x86] edac: add support for Intel i3000 (Aristeu Rozanski ) [295501]
  - [mm] fix hugepage allocation with memoryless nodes (Scott Moser ) [239790]
  - [mm] make compound page destructor handling explicit (Scott Moser ) [239790]
  - [scsi] qla2xxx: more improvements and cleanups part2 (Marcus Barrow ) [253272]
  - [scsi] qla2xxx: 8 GB/S support (Marcus Barrow ) [249796]
  - [scsi] qla2xxx: upstream improvements and cleanups (Marcus Barrow ) [253272]
  - [ppc64] ehea: sync with upstream (Scott Moser ) [253414]
  - [ia64] fix kernel warnings from rpm prep stage (Luming Yu ) [208271]


author: Don Zickus <dzickus@redhat.com> [2.6.18-62.el5]
changelog:
  - [xen] ia64: hvm guest memory range checking (Jarod Wilson ) [408711]
  - [xen] x86: support for architectural pstate driver (Bhavana Nagendra ) [419171]
  - [xen] disable cpu freq scaling when vcpus is small (Rik van Riel ) [251969]
  - [xen] hv: cpu frequency scaling (Rik van Riel ) [251969]
  - [xen] ia64: vulnerability of copy_to_user in PAL emu (Jarod Wilson ) [425939]
  - [net] bonding: documentation update (Andy Gospodarek ) [235711]
  - [net] bonding: update to upstream version 3.2.2 (Andy Gospodarek ) [251902 236750 268001]
  - [misc] utrace: update for 5.2 (Roland McGrath ) [299941 309461 309551 309761]
  - [ia64] ptrace: access to user register backing (Roland McGrath ) [237749]
  - [ia64] utrace: forbid ptrace changes psr.ri to 3 (Roland McGrath ) [247174]
  - [net] bnx2: update to upstream version 1.6.9 (Andy Gospodarek ) [251109]
  - [net] tg3: update to upstream version 3.86 (Andy Gospodarek ) [253344]
  - [net] sunrpc: make clients take ref to rpciod workq (Jeff Layton ) [246642]
  - [scsi] aacraid: update to 1.1.5-2453 (Chip Coldwell ) [364371]
  - [md] dm-mirror: write_callback might deadlock (Jonathan Brassow ) [247877]
  - [md] dm-mirror: shedule_timeout call causes slowdown (Jonathan Brassow ) [358881]
  - [md] mirror presuspend causing cluster mirror hang (Jonathan Brassow ) [358871]
  - [acpi] docking/undocking: oops when _DCK eval fails (John Feeney ) [252214]
  - [acpi] docking/undocking: check if parent is on dock (John Feeney ) [252214]
  - [acpi] docking/undocking: error handling in init (John Feeney ) [252214]
  - [acpi] docking/undocking: add sysfs support (John Feeney ) [252214]
  - [acpi] docking/undocking support (John Feeney ) [252214]
  - [xen] support for architectural pstate driver (Bhavana Nagendra ) [419171]
  - [usb] wacom: fix 'side' and 'extra' mouse buttons (Aristeu Rozanski ) [249415]
  - [audit] netmask on xfrm policy configuration changes (Eric Paris ) [410531]
  - [xen] rapid block device plug/unplug leads to crash (Don Dutile ) [308971]
  - [net] fix refcnt leak in optimistic dad handling (Neil Horman ) [423791]
  - [net] ixgb: resync upstream and transmit hang fixes (Andy Gospodarek ) [252002]
  - [xen] kernel: cpu frequency scaling (Rik van Riel ) [251969]
  - [md] dm snapshot: excessive memory usage (Milan Broz ) [421451]
  - [md] dm-crypt: possible max_phys_segments violation (Milan Broz ) [421441]
  - [xen] xenbus has use-after-free (Don Dutile ) [249728]
  - [fs] cifs: update CHANGES file and version string (Jeff Layton ) [417961]
  - [fs] cifs: endian conversion problem in posix mkdir (Jeff Layton ) [417961]
  - [fs] cifs: corrupt data with cached dirty page write (Jeff Layton ) [329431]
  - [fs] cifs: missing mount helper causes wrong slash (Jeff Layton ) [417961]
  - [fs] cifs: fix error message about packet signing (Jeff Layton ) [417961]
  - [fs] cifs: shut down cifsd when signing mount fails (Jeff Layton ) [417961]
  - [fs] cifs: reduce corrupt list in find_writable_file (Jeff Layton ) [417961]
  - [fs] cifs: fix memory leak in statfs to old servers (Jeff Layton ) [417961]
  - [fs] cifs: buffer overflow due to corrupt response (Jeff Layton ) [373001]
  - [fs] cifs: log better errors on failed mounts (Jeff Layton ) [417961]
  - [fs] cifs: oops on second mount to same server (Jeff Layton ) [373741]
  - [fs] cifs: fix spurious reconnect on 2nd peek (Jeff Layton ) [417961]
  - [fs] cifs: bad handling of EAGAIN on kernel_recvmsg (Jeff Layton ) [336501]
  - [fs] cifs: small fixes to make cifs-1.50c compile (Jeff Layton ) [417961]
  - [net] cifs: stock 1.50c import (Jeff Layton ) [417961]
  - [nfs4] client: set callback address properly (Steve Dickson ) [264721]
  - [sched] fair scheduler (Peter Zijlstra ) [250589]
  - [net] s2io: correct VLAN frame reception (Andy Gospodarek ) [354451]
  - [net] s2io: allow VLAN creation on interfaces (Andy Gospodarek ) [354451]
  - [mm] soft lockups when allocing mem on large systems (Doug Chapman ) [281381]
  - [md] dm mpath: hp retry if not ready (Dave Wysochanski ) [208261]
  - [md] dm mpath: add retry pg init (Dave Wysochanski ) [208261]
  - [md] dm mpath: add hp handler (Dave Wysochanski ) [208261]
  - [x86] fix race with 'endflag' in NMI setup code (Prarit Bhargava ) [357391]
  - [xen] fix behavior of invalid guest page mapping (Markus Armbruster ) [254208]
  - [misc] tux: get rid of O_ATOMICLOOKUP (Michal Schmidt ) [358661]
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [229882]
  - [x86_64] fix race conditions in setup_APIC_timer (Geoff Gustafson ) [251869]


author: Don Zickus <dzickus@redhat.com> [2.6.18-61.el5]
changelog:
  - [net] sunhme: fix failures on x86 (John W. Linville ) [254234]
  - [ppc64] power6 SPURR support (Scott Moser ) [253114]
  - [usb] fix for error path in rndis (Pete Zaitcev ) [236719]
  - [ipmi] legacy ioport setup changes (Peter Martuccelli ) [279191]
  - [ipmi] add PPC SI support (Peter Martuccelli ) [279191]
  - [ipmi] remove superfluous semapahore from watchdog (Peter Martuccelli ) [279191]
  - [ipmi] do not enable interrupts too early (Peter Martuccelli ) [279191]
  - [ipmi] fix memory leak in try_init_dmi (Peter Martuccelli ) [279191]
  - [net] sunrpc: lockd recovery is broken (Steve Dickson ) [240976]
  - [fs] core dump file ownership (Don Howard ) [397001]
  - [cpufreq] don't take sem in cpufreq_quick_get (Doug Chapman ) [253416]
  - [cpufreq] remove hotplug cpu cruft (Doug Chapman ) [253416]
  - [cpufreq] governor: use new rwsem locking in work cb (Doug Chapman ) [253416]
  - [cpufreq] ondemand governor restructure the work cb (Doug Chapman ) [253416]
  - [cpufreq] rewrite lock to eliminate hotplug issues (Doug Chapman ) [253416]
  - [ppc64] spufs: context destroy vs readdir race (Scott Moser ) [387841]
  - [scsi] update lpfc driver to 8.2.0.8 (Chip Coldwell ) [252989]
  - [ppc64] utrace: fix PTRACE_GETVRREGS data (Roland McGrath ) [367221]
  - [scsi] ipr: add dual SAS RAID controller support (Scott Moser ) [253398]
  - [net] backport of functions for sk_buff manipulation (Andy Gospodarek ) [385681]
  - [gfs2] recursive locking on rgrp in gfs2_rename (Abhijith Das ) [404711]
  - [gfs2] check kthread_should_stop when waiting (David Teigland ) [404571]
  - [dlm] don't print common non-errors (David Teigland ) [404561]
  - [dlm] tcp: bind connections from known local address (David Teigland ) [358841]
  - [dlm] block dlm_recv in recovery transition (David Teigland ) [358821]
  - [dlm] fix memory leak in dlm_add_member (David Teigland ) [358791]
  - [dlm] zero unused parts of sockaddr_storage (David Teigland ) [358771]
  - [dlm] dump more lock values (David Teigland ) [358751]
  - [gfs2] remove permission checks from xattr ops (Ryan O'Hara ) [307431]
  - [x86] report_lost_ticks fix up (Prarit Bhargava ) [394581]
  - [ppc64] SLB shadow buffer support (Scott Moser ) [253112]
  - [ppc64] handle alignment faults on new FP load/store (Scott Moser ) [253111]
  - [xen] PVFB frontend can send bogus screen updates (Markus Armbruster ) [370341]
  - [nfs] let rpciod finish sillyrename then umount (Steve Dickson ) [253663]
  - [nfs] fix a race in silly rename (Steve Dickson ) [253663]
  - [nfs] clean up the silly rename code (Steve Dickson ) [253663]
  - [nfs] infrastructure changes for silly renames (Steve Dickson ) [253663]
  - [nfs] introducde nfs_removeargs and nfs_removeres (Steve Dickson ) [253663]
  - [xen] avoid dom0 hang when disabling pirq's (Chris Lalancette ) [372741]
  - [ppc64] cell: support for msi on axon (Scott Moser ) [253212]
  - [ppc64] cell: enable rtas-based ptcal for xdr memory (Scott Moser ) [253212]
  - [ppc64] cell: ddr2 memory driver for axon (Scott Moser ) [253212]
  - [ppc64] spu: add temperature and throttling support (Scott Moser ) [279171]
  - [ppc64] sysfs: support for add/remove cpu sysfs attr (Scott Moser ) [279171]
  - [ppc64] cbe_cpufreq: fixes from 2.6.23-rc7 (Scott Moser ) [279171]
  - [ppc64] typo with mmio_read_fixup (Scott Moser ) [253208]
  - [ppc64] spufs: feature updates (Scott Moser ) [253208]
  - [ppc64] export last_pid (Scott Moser ) [253208]
  - [ppc64] cell: support pinhole-reset on blades (Scott Moser ) [253208]
  - [s390] use IPL CLEAR for reipl under z/VM (Hans-Joachim Picht ) [386991]
  - [net] sunrpc: fix hang due to eventd deadlock (Jeff Layton ) [246642]
  - [misc] : misrouted interrupts deadlocks (Dave Anderson ) [247379]
  - [fs] ignore SIOCIFCOUNT ioctl calls (Josef Bacik ) [310011]
  - [ppc64] fixes PTRACE_SET_DEBUGREG request (Roland McGrath ) [253117]
  - [fs] dm crypt: memory leaks and workqueue exhaustion (Milan Broz ) [360621]
  - [md] dm: panic on shrinking device size (Milan Broz ) [360151]
  - [md] dm: bd_mount_sem counter corruption (Milan Broz ) [360571]
  - [fs] udf: fix possible leakage of blocks (Eric Sandeen ) [221282]
  - [fs] udf: Fix possible data corruption (Eric Sandeen ) [221282]
  - [fs] udf: support files larger than 1G (Eric Sandeen ) [221282]
  - [fs] udf: add assertions (Eric Sandeen ) [221282]
  - [fs] udf: use get_bh (Eric Sandeen ) [221282]
  - [fs] udf: introduce struct extent_position (Eric Sandeen ) [221282]
  - [fs] udf: use sector_t and loff_t for file offsets (Eric Sandeen ) [221282]
  - [misc] use touch_softlockup_watchdog when no nmi wd (Prarit Bhargava ) [367251]
  - [misc] backport upstream softlockup_tick code (Prarit Bhargava ) [367251]
  - [misc] pass regs struct to softlockup_tick (Prarit Bhargava ) [336541]
  - [misc] fix bogus softlockup warnings (Prarit Bhargava ) [252360]
  - [x86] use pci=bfsort for certain boxes (Michal Schmidt ) [242990]
  - [x86] Change command line size to 2048 (Prarit Bhargava ) [247477]
  - [misc] systemtap uprobes: access_process_vm export (Frank Ch. Eigler ) [424991]
  - [nfs] fix ATTR_KILL_S*ID handling on NFS (Jeff Layton ) [222330]
  - [mm] oom: prevent from killing several processes (Larry Woodman ) [392351]


author: Don Zickus <dzickus@redhat.com> [2.6.18-60.el5]
changelog:
  - [xen] x86: suppress bogus timer warning (Chris Lalancette ) [317201]
  - [xen] ia64: saner default mem and cpu alloc for dom0 (Jarod Wilson ) [248967]
  - [xen] x86_64: add stratus hooks into memory (Kimball Murray ) [247833]
  - [ia64] mm: register backing store bug (Luming Yu ) [310801]
  - [serial] irq -1 assigned to serial port (Luming Yu ) [227728]
  - [utrace] s390 regs fixes (Roland McGrath ) [325451]
  - [x86] use pci=bfsort on Dell R900 (Michal Schmidt ) [242990]
  - [nfs] server support 32-bit client and 64-bit inodes (Peter Staubach ) [253589]
  - [nfs] support 32-bit client and 64-bit inode numbers (Peter Staubach ) [253589]
  - [dlm] Don't overwrite castparam if it's NULL (Patrick Caulfield ) [318061]
  - [s390] panic with lcs interface as dhcp server (Hans-Joachim Picht ) [350861]
  - [s390] qeth: do not free memory on failed init (Hans-Joachim Picht ) [330211]
  - [s390] qeth: default performace_stats attribute to 0 (Hans-Joachim Picht ) [248897]
  - [s390] qeth: create copy of skb for modification (Hans-Joachim Picht ) [354861]
  - [s390] qeth: up sequence number for incoming packets (Hans-Joachim Picht ) [354851]
  - [s390] qeth: use correct MAC address on recovery (Hans-Joachim Picht ) [241276]
  - [s390] cio: handle invalid subchannel setid in stsch (Hans-Joachim Picht ) [354831]
  - [s390] cio: Dynamic CHPID reconfiguration via SCLP (Hans-Joachim Picht ) [253120]
  - [s390] cio: fix memory leak when deactivating (Hans-Joachim Picht ) [213272]
  - [s390] cio: Device status validity (Hans-Joachim Picht ) [354821]
  - [s390] cio: reipl fails after channel path reset (Hans-Joachim Picht ) [231306]
  - [usb] reset LEDs on Dell keyboards (Pete Zaitcev ) [228674]
  - [x86] hotplug: PCI memory resource mis-allocation (Konrad Rzeszutek ) [252260]
  - [ppc64] Make the vDSO handle C++ unwinding correctly (David Howells ) [420551]
  - [ppc64] add AT_NULL terminator to auxiliary vector (Vitaly Mayatskikh ) [231442]
  - [x86] Add Greyhound Event based Profiling support (Bhavana Nagendra ) [314611]
  - [nfs] reset any fields set in attrmask (Jeff Layton ) [242482]
  - [nfs] Set attrmask on NFS4_CREATE_EXCLUSIVE reply (Jeff Layton ) [242482]
  - [fs] proc: add /proc/<pid>/limits (Neil Horman ) [253762]
  - [xen] ia64: make ioremapping work (Jarod Wilson ) [240006]
  - [ia64] bte_unaligned_copy transfers extra cache line (Luming Yu ) [218298]
  - [xen] inteface with stratus platform op (Kimball Murray ) [247841]
  - [mm] xen: export xen_create_contiguous_region (Kimball Murray ) [247839]
  - [mm] xen: memory tracking cleanups (Kimball Murray ) [242514]


author: Don Zickus <dzickus@redhat.com> [2.6.18-59.el5]
changelog:
  - [net] ipv6: backport optimistic DAD (Neil Horman ) [246723]
  - [crypto] aes: Rename aes to aes-generic (Herbert Xu ) [245954]
  - [xen] ia64: fix free_irq_vector: double free (Aron Griffis ) [208599]
  - [selinux] don't oops when using non-MLS policy (Eric Paris ) [223827]
  - [net] qla3xxx: new 4032 does not work with VLAN (Marcus Barrow ) [253785]
  - [ide] SB700 contains two IDE channels (Bhavana Nagendra ) [314571]
  - [edac] fix return code in e752x_edac probe function (Aristeu Rozanski ) [231608]
  - [scsi] cciss: disable refetch on P600 (Aron Griffis ) [251563]
  - [misc] Intel Tolapai SATA and I2C support (Ivan Vecera ) [251086]
  - [net] ibmveth: Checksum offload support (Scott Moser ) [254035]
  - [misc] Allow a hyphenated range for isolcpus (Jonathan Lim ) [328151]
  - [misc] sched: force /sbin/init off isolated cpus (Jonathan Lim ) [328091]
  - [ia64] contig: show_mem cleanup output (George Beshers ) [221612]
  - [ia64] discontig: show_mem cleanup output (George Beshers ) [221612]
  - [ia64] show_mem printk cleanup (George Beshers ) [221612]
  - [net] ppp_mppe: avoid using a copy of interim key (Michal Schmidt ) [248716]
  - [ppc64] mpstat reports wrong per-processor stats (Scott Moser ) [212234]
  - [net] labeled: memory leak calling secid_to_secctx (Eric Paris ) [250442]
  - [misc] /proc/<pid>/environ stops at 4k bytes (Anton Arapov ) [308391]
  - [net] kernel needs to support TCP_RTO_MIN (Anton Arapov ) [303011]
  - [x86_64] kdump: shutdown gart on k8 systems (Prarit Bhargava ) [264601]
  - [input] psmouse: add support to 'cortps' protocol (Aristeu Rozanski ) [248759]
  - [nfs] nfs_symlink: allocate page with GFP_HIGHUSER (Jeff Layton ) [245042]
  - [ia64] enable kprobe's trap code on slot 1 (Masami Hiramatsu ) [207107]
  - [misc] Fix relay read start in overwrite mode (Masami Hiramatsu ) [250706]
  - [misc] Fix relay read start position (Masami Hiramatsu ) [250706]
  - [x86_64] 'ide0=noprobe' crashes the kernel (Michal Schmidt ) [241338]
  - [ia64] proc/iomem wiped out on non ACPI kernel (George Beshers ) [257001]
  - [net] CIPSO packets generate kernel unaligned access (Luming Yu ) [242955]
  - [ia64] ioremap: fail mmaps with incompat attributes (Jarod Wilson ) [240006]
  - [ia64] ioremap: allow cacheable mmaps of legacy_mem (Jarod Wilson ) [240006]
  - [ia64] ioremap: avoid unsupported attributes (Jarod Wilson ) [240006]
  - [ia64] ioremap: rename variables to match i386 (Jarod Wilson ) [240006]
  - [ia64] validate and remap mmap requests (Jarod Wilson ) [240006]
  - [ia64] kdump: deal with empty image (Doug Chapman ) [249724]
  - [net] NetXen: allow module to unload (Konrad Rzeszutek ) [245751]
  - [net] clean up in-kernel socket api usage (Neil Horman ) [246851]
  - [hotplug] slot poweroff problem on systems w/o _PS3 (Prarit Bhargava ) [410611]
  - [PPC64] kdump: fix irq distribution on ppc970 (Jarod Wilson ) [208659]
  - [serial] support PCI Express icom devices (Chris Snook ) [243806]
  - [xen] Rebase HV to 15502 (Bill Burns) [318891]


author: Don Zickus <dzickus@redhat.com> [2.6.18-58.el5]
changelog:
  - Updated: [net] panic when mounting with insecure ports (Anton Arapov ) [294881]
  - [kabitool] - fail on missing symbols (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-57.el5]
changelog:
  - [misc] lockdep: fix seqlock_init (Peter Zijlstra ) [329851]
  - [ppc64] Remove WARN_ON from disable_msi_mode() (Scott Moser ) [354241]
  - [GFS2] sysfs  file should contain device id (Bob Peterson ) [363901]
  - [x86_64] update IO-APIC dest field to 8-bit for xAPIC (Dave Anderson ) [224373]
  - [ia64] add global ACPI OpRegion handler for fw calls (Doug Chapman ) [262281]
  - [ia64] add driver for ACPI methods to call native fw (Doug Chapman ) [262281]
  - [ppc64] eHEA: ibm,loc-code not unique (Scott Moser ) [271821]
  - [ata] SB800 SATA/IDE LAN support (Bhavana Nagendra ) [252961]
  - [net] ibmveth: enable large rx buf pool for large mtu (Scott Moser ) [250827]
  - [net] ibmveth: h_free_logical_lan err on pool resize (Scott Moser ) [250827]
  - [net] ibmveth: fix rx pool deactivate oops (Scott Moser ) [250827]
  - [gfs2] Fix ordering of page lock and transaction lock (Steven Whitehouse ) [303351]
  - [net] panic when mounting with insecure ports (Anton Arapov ) [294881]
  - [ia64] fix vga corruption with term blanking disabled (Jarod Wilson ) [291421]
  - [ppc64] panic on DLPAR remove of eHEA (Scott Moser ) [253767]
  - [ppc64] boot Cell blades with >2GB memory (Scott Moser ) [303001]
  - [x86_64] Add NX mask for PTE entry (Jarod Wilson ) [232748]
  - [hotplug] acpiphp: System error during PCI hotplug (Konrad Rzeszutek ) [243003]
  - [misc] softirq: remove spurious BUG_ON's (Jarod Wilson ) [221554]
  - [audit] collect events for segfaulting programs (Eric Paris ) [239061]
  - [misc] cfq-iosched: fix deadlock on nbd writes (Jarod Wilson ) [241540]
  - [scsi] stale residual on write following BUSY retry (Jonathan Lim ) [300871]
  - ext3: orphan list check on destroy_inode (Eric Sandeen ) [269401]
  - [scsi] always update request data_len with resid (George Beshers ) [282781]
  - [misc] add vmcoreinfo support to kernel (Neil Horman ) [253850]
  - [ia64] remove stack hard limit (Aron Griffis ) [251043]
  - [fs] Fix unserialized task->files changing (Vitaly Mayatskikh ) [253866]
  - [ide] allow disabling of drivers (Gerd Hoffmann ) [247982]
  - [net] fail multicast with connection oriented socket (Anton Arapov ) [259261]
  - [net] fix race condition in netdev name allocation (Neil Horman ) [247128]
  - [char] tty: set pending_signal on return -ERESTARTSYS (Aristeu Rozanski ) [253873]
  - [fs] aio: account for I/O wait properly (Jeff Moyer ) [253337]
  - [x86_64] Switching to vsyscall64 causes oops (Jeff Burke ) [224541]
  - [net] lvs syncdaemon causes high avg load on system (Anton Arapov ) [245715]
  - [i2c] SB600/700/800 use same SMBus controller devID (Bhavana Nagendra ) [252286]
  - [acpi] sbs: file permissions set incorrectly (Vitaly Mayatskikh ) [242565]
  - [net] ipv6: support RFC4193 local unicast addresses (Neil Horman ) [252264]
  - [misc] serial: fix console hang on HP Integrity (Doug Chapman ) [244054]
  - [tux] fix crashes during shutdown (Ernie Petrides ) [244439]
  - [usb] Support for EPiC-based io_edgeport devices (Jarod Wilson ) [249760]
  - [misc] Prevent NMI watchdog triggering during sysrq-T (Konrad Rzeszutek ) [248392]
  - [hotplug] acpiphp: 'cannot get bridge info' with PCIe (Konrad Rzeszutek ) [248571]
  - [misc] serial: assert DTR for serial console devices (Michal Schmidt ) [244728]
  - [net] sctp: rewrite receive buffer management code (Neil Horman ) [246722]
  - [net] NetXen: MSI: failed interrupt after fw enabled (Konrad Rzeszutek ) [246019]
  - [cifs] make demux thread ignore signals from userspace (Jeff Layton ) [245674]
  - [ia64] misc DBS cleanup (Luming Yu ) [245217]
  - [misc] Remove non-existing SB600 raid define (Prarit Bhargava ) [244038]


author: Don Zickus <dzickus@redhat.com> [2.6.18-56.el5]
changelog:
  - [fs] missing dput in do_lookup error leaks dentries (Eric Sandeen ) [363491] {CVE-2007-5494}
  - [ppc] System cpus stuck in H_JOIN after migrating (Scott Moser ) [377901]
  - [scsi] ibmvSCSI: Unable to continue migrating lpar after errors (Scott Moser ) [377891]
  - [scsi] ibmvSCSI: client can't handle deactive/active device from server (Scott Moser ) [257321]
  - [audit] still allocate contexts when audit is disabled (Alexander Viro ) [360841]


author: Don Zickus <dzickus@redhat.com> [2.6.18-55.el5]
changelog:
  - Revert [misc] Denial of service with wedged processes (Jerome Marchand ) [229882] {CVE-2006-6921}
  - [autofs4] fix race between mount and expire (Ian Kent ) [354621]
  - [net] ieee80211: off-by-two integer underflow (Anton Arapov ) [346401] {CVE-2007-4997}
  - [fs] sysfs: fix race condition around sd->s_dentry (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [fs] sysfs: fix condition check in sysfs_drop_dentry() (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [fs] sysfs: store inode nrs in s_ino (Eric Sandeen ) [243728] {CVE-2007-3104}
  - [nfs] v4: umounts oops in shrink_dcache_for_umount (Steve Dickson ) [254106]
  - [net] tg3: Fix performance regression on 5705 (Andy Gospodarek ) [330181]
  - [net] forcedeth: MSI interrupt bugfix (Andy Gospodarek ) [353281]
  - [ppc] kexec/kdump kernel hung on Power5+ and Power6 (Scott Moser ) [245346]


author: Don Zickus <dzickus@redhat.com> [2.6.18-54.el5]
changelog:
  - [misc] Denial of service with wedged processes (Jerome Marchand ) [229882] {CVE-2006-6921}
  - [alsa] Convert snd-page-alloc proc file to use seq_file (Jerome Marchand ) [297771] {CVE-2007-4571}
  - [x86] Fixes for the tick divider patch (Chris Lalancette ) [315471]
  - [mm] ia64: flush i-cache before set_pte (Luming Yu ) [253356]
  - [fs] jbd: wait for t_sync_datalist buffer to complete (Eric Sandeen ) [250537]
  - [audit] improper handling of audit_log_start return values (Eric Paris ) [335731]
  - [cifs] fix memory corruption due to bad error handling (Jeff Layton ) [336501]
  - [net] bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek ) [317331]


author: Don Zickus <dzickus@redhat.com> [2.6.18-53.el5]
changelog:
  - [GFS2] handle multiple demote requests (Wendy Cheng ) [295641]
  - [scsi] megaraid_sas: kabi fix for /proc entries (Chip Coldwell ) [323231]
  - [sound] allow creation of null parent devices (Brian Maly ) [323771]


author: Don Zickus <dzickus@redhat.com> [2.6.18-52.el5]
changelog:
  - [net] iwlwifi: avoid BUG_ON in tx cmd queue processing (John W. Linville ) [306831]
  - [GFS2] Get super block a different way (Steven Whitehouse ) [306621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-51.el5]
changelog:
  - [GFS2] dlm: schedule during recovery loops (David Teigland ) [250464]
  - Revert: [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]


author: Don Zickus <dzickus@redhat.com> [2.6.18-50.el5]
changelog:
  - Revert: [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [pata] enable IDE (siimage) DRAC4 (John Feeney ) [212391]
  - [GFS2] gfs2_writepage(s) workaround (Wendy Cheng ) [252392]
  - [scsi] aacraid: Missing ioctl() permission checks (Vitaly Mayatskikh ) [298381] {CVE-2007-4308}
  - [GFS2] Solve journaling/{release|invalidate}page issues (Steven Whitehouse ) [253008]
  - [x86_64] syscall vulnerability (Anton Arapov ) [297881] {CVE-2007-4573}
  - [GFS2] Fix i_cache stale entry (Wendy Cheng ) [253756]
  - [GFS2] deadlock running revolver load with lock_nolock (Benjamin Marzinski ) [288581]
  - [net] s2io: check for error_state in ISR (more) (Scott Moser ) [276871]


author: Don Zickus <dzickus@redhat.com> [2.6.18-49.el5]
changelog:
  - [sata] libata probing fixes and other cleanups (Jeff Garzik ) [260281]
  - [net] cxgb3: backport fixups and sysfs corrections (Andy Gospodarek ) [252243]


author: Don Zickus <dzickus@redhat.com> [2.6.18-48.el5]
changelog:
  - [net] s2io: check for error_state in ISR (Scott Moser ) [276871]
  - [fs] ext3: ensure do_split leaves enough free space in both blocks (Eric Sandeen ) [286501]
  - [kabi] whitelist GFS2 export symbols to allow driver updates (Jon Masters) [282901]
  - [gfs2] allow process to handle multiple flocks on a file (Abhijith Das ) [272021]
  - [gfs2] operations hang after mount--RESEND (Bob Peterson ) [276631]
  - [scsi] qlogic: fix nvram/vpd update memory corruptions (Marcus Barrow ) [260701]
  - [fs] Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra) [251119] {CVE-2007-3848}
  - [gfs2] mount hung after recovery (Benjamin Marzinski ) [253089]
  - [GFS2] Move inode delete logic out of blocking_cb (Wendy Cheng ) [286821]
  - [dlm] Make dlm_sendd cond_resched more (Patrick Caulfield ) [250464]
  - [x86_64] fix 32-bit ptrace access to debug registers (Roland McGrath ) [247427]
  - [autofs4] fix deadlock during directory create (Ian Kent ) [253231]
  - [nfs] enable 'nosharecache' mounts fixes (Steve Dickson ) [243913]
  - [usb] usblcd: Locally triggerable memory consumption (Anton Arapov ) [276011] {CVE-2007-3513}
  - [misc] Bounds check ordering issue in random driver (Anton Arapov ) [275971] {CVE-2007-3105}


author: Don Zickus <dzickus@redhat.com> [2.6.18-47.el5]
changelog:
  - [ppc64] Fix SPU slb size and invalidation on hugepage faults (Scott Moser ) [285981]
  - [s390] qdio: Refresh buffer states for IQDIO Asynch output queue (Hans-Joachim Picht ) [222181]
  - [scsi] fusion: allow VMWare's emulator to work again (Chip Coldwell ) [279571]


author: Don Zickus <dzickus@redhat.com> [2.6.18-46.el5]
changelog:
  - [XEN] x86: 32-bit ASID mode hangs dom0 on AMD (Chris Lalancette ) [275371]
  - [scsi] megaraid_sas: intercept cmd timeout and throttle io (Chip Coldwell ) [245184 247581]
  - [s390] hypfs: inode corruption due to missing locking (Brad Hinson ) [254169]
  - [Xen] Allow 32-bit Xen to kdump >4G physical memory (Stephen C. Tweedie ) [251341]
  - [ptrace] NULL pointer dereference triggered by ptrace (Anton Arapov ) [275991] {CVE-2007-3731}
  - [XEN] ia64: allocating with GFP_KERNEL in interrupt context fix (Josef Bacik ) [279141]


author: Don Zickus <dzickus@redhat.com> [2.6.18-45.el5]
changelog:
  - [XEN] Update spec file to provide specific xen ABI version (Stephen C. Tweedie ) [271981]
  - [scsi] qla2xxx: nvram/vpd updates produce soft lockups and system hangs (Marcus Barrow ) [260701]
  - [scsi] iscsi: borked kmalloc  (Mike Christie ) [255841]
  - [net] qla3xxx: Read iSCSI target disk fail (Marcus Barrow ) [246123]
  - [net] igmp: check for NULL when allocating GFP_ATOMIC skbs (Neil Horman ) [252404]
  - [mm] madvise call to kernel loops forever (Konrad Rzeszutek ) [263281]


author: Don Zickus <dzickus@redhat.com> [2.6.18-44.el5]
changelog:
  - [misc] re-export some symbols as EXPORT_SYMBOL_GPL (Jon Masters ) [252377]
  - [xen] ia64: set NODES_SHIFT to 8 (Doug Chapman ) [254050]
  - [xen] Fix privcmd to remove nopage handler (Chris Lalancette ) [249409]
  - [xen] increase limits to boot on large ia64 platforms (Doug Chapman ) [254062]
  - [autofs] autofs4 - fix race between mount and expire (Ian Kent ) [236875]
  - [nfs] NFS4: closes and umounts are racing (Steve Dickson ) [245062]
  - [GFS2] Fix lock ordering of unlink (Steven Whitehouse ) [253609]
  - [openib] Fix two ipath controllers on same subnet (Doug Ledford ) [253005]
  - [net] tg3: update to fix suspend/resume problems (Andy Gospodarek ) [253988]
  - [GFS2] distributed mmap test cases deadlock (Benjamin Marzinski ) [248480]
  - [GFS2] Fix inode meta data corruption (Wendy Cheng ) [253590]
  - [GFS2] bad mount option causes panic with NULL superblock pointer (Abhijith Das ) [253921]
  - [fs] hugetlb: fix prio_tree unit (Konrad Rzeszutek ) [253930]
  - [misc] Microphone stops working (John Feeney ) [240716]
  - [GFS2] glock dump dumps glocks for all file systems (Abhijith Das ) [253238]
  - [scsi] qla2xxx: disable MSI-X by default (Marcus Barrow ) [252410]


author: Don Zickus <dzickus@redhat.com> [2.6.18-42.el5]
changelog:
  - [GFS2] More problems unstuffing journaled files (Bob Peterson ) [252191]
  - [DLM] Reuse connections rather than freeing them (Patrick Caulfield ) [251179]
  - [ppc] EEH: better status string detection (Scott Moser ) [252405]
  - [scsi] cciss: set max command queue depth (Tomas Henzl ) [251167]
  - [audit] Stop multiple messages from being printed (Eric Paris ) [252358]
  - [scsi] uninitialized field in gdth.c (Chip Coldwell ) [245550]
  - [scsi] SATA RAID 150-4/6 do not support 64-bit DMA (Chip Coldwell ) [248327]
  - [gfs2] fix truncate panic (Wendy Cheng ) [251053]
  - [gfs2] panic after can't parse mount arguments  (Benjamin Marzinski ) [253289]
  - [fs] CIFS: fix deadlock in cifs_get_inode_info_unix (Jeff Layton ) [249394]
  - [sound] support ad1984 codec (Brian Maly ) [252373]
  - [scsi] fix iscsi write handling regression (Mike Christie ) [247827]
  - [ppc] Fix detection of PCI-e based devices (Doug Ledford ) [252085]
  - [gfs2] unstuff quota inode (Abhijith Das ) [250772]
  - [net] fix DLPAR remove of eHEA logical port (Scott Moser ) [251370]
  - [gfs2] hang when using a large sparse quota file (Abhijith Das ) [235299]
  - [x86_64] Fix MMIO config space quirks (Bhavana Nagendra ) [252397]
  - [misc] Convert cpu hotplug notifiers to use raw_notifier (Peter Zijlstra ) [238571]
  - [sound] fix panic in hda_codec (Brian Maly ) [251854]
  - [mm] separate mapped file and anonymous pages in show_mem() output. (Larry Woodman ) [252033]
  - [misc] Fix broken AltSysrq-F (Larry Woodman ) [251731]
  - [scsi] cciss: increase max sectors to 2048 (Tomas Henzl ) [248121]
  - Revert [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]


author: Don Zickus <dzickus@redhat.com> [2.6.18-40.el5]
changelog:
  - [net] s2io: update to driver version 2.0.25.1 (Andy Gospodarek ) [223033]
  - [XEN] ia64: use panic_notifier list (Kei Tokunaga ) [250456]
  - [XEN] ia64: support nvram (Kei Tokunaga ) [250203]
  - [XEN] Allow dom0 to boot with greater than 2 vcpus (Kei Tokunaga ) [250441]
  - [XEN] Fix MCE errors on AMD-V (Bhavana Nagendra ) [251435]
  - [XEN] set correct paging bit identifier when NP enabled (Chris Lalancette ) [250857]
  - [XEN] ia64: fix for hang when running gdb (Doug Chapman ) [246482]
  - [XEN] AMD-V fix for W2k3 guest w/ Nested paging (Bhavana Nagendra ) [250850]
  - [XEN] blktap tries to access beyond end of disk (Kei Tokunaga ) [247696]
  - [ia64] fsys_gettimeofday leaps days if it runs with nojitter (Luming Yu ) [250825]
  - [x86] Blacklist for HP DL585G2 and HP dc5700 (Tony Camuso ) [248186]
  - [misc] Missing critical phys_to_virt in lib/swiotlb.c (Anton Arapov ) [248102]
  - [mm] Prevent the stack growth into hugetlb reserved regions (Konrad Rzeszutek ) [247658]
  - [scsi] fix qla4xxx underrun and online handling (Mike Christie ) [242828]
  - [sound] Audio playback does not work (John Feeney ) [250269]
  - [XEN] ia64: allow guests to vga install (Jarod Wilson ) [249076]
  - [net] forcedeth: optimize the tx data path (Andy Gospodarek ) [252034]
  - [agp] 945/965GME: bridge id, bug fix, and cleanups (Geoff Gustafson ) [251166]
  - [net] tg3: pci ids missed during backport (Andy Gospodarek ) [245135]
  - [misc] workaround for qla2xxx vs xen swiotlb (Rik van Riel ) [219216]
  - [XEN] netfront: Avoid deref'ing skb after it is potentially freed. (Herbert Xu ) [251905]
  - [ia64] validate and remap mmap requests (Jarod Wilson ) [240006]
  - [ppc] DLPAR REMOVE I/O resource failed (Scott Moser ) [249617]
  - [XEN] ia64: Cannot use e100 and IDE controller (Kei Tokunaga ) [250454]
  - [wireless] iwlwifi: update to version 1.0.0 (John W. Linville ) [223560 250675]
  - [ppc] make eHCA driver use remap_4k_pfn in 64k kernel (Scott Moser ) [250496]
  - [audit] sub-tree signal handling fix (Alexander Viro ) [251232]
  - [audit] sub-tree memory leaks (Alexander Viro ) [251160]
  - [audit] sub-tree cleanups (Alexander Viro ) [248416]
  - [GFS2] invalid metadata block (Bob Peterson ) [248176]
  - [XEN] use xencons=xvc by default on non-x86 (Aron Griffis ) [249100]
  - [misc] i915_dma: fix batch buffer security bit for i965 chipsets (Aristeu Rozanski ) [251188] {CVE-2007-3851}
  - [Xen] Fix restore path for 5.1 PV guests (Chris Lalancette ) [250420]
  - [x86] Support mobile processors in fid/did to frequency conversion (Bhavana Nagendra ) [250833]
  - [dlm] fix basts for granted PR waiting CW (David Teigland ) [248439]
  - [scsi] PCI shutdown for cciss driver (Chip Coldwell ) [248728]
  - [scssi] CCISS support for P700m (Chip Coldwell ) [248735]
  - [net] forcedeth: fix nic poll (Herbert Xu ) [245191]
  - [ppc] 4k page mapping support for userspace 	in 64k kernels (Scott Moser ) [250144]
  - [net] tg3: small update for kdump fix (Andy Gospodarek ) [239782]
  - [ppc] Cope with PCI host bridge I/O window not starting at 0 (Scott Moser ) [242937]
  - [ata]: Add additional device IDs for SB700 (Prarit Bhargava ) [248109]
  - [fs] - fix VFAT compat ioctls on 64-bit systems (Eric Sandeen ) [250666] {CVE-2007-2878}
  - [fs] - Move msdos compat ioctl to msdos dir (Eric Sandeen ) [250666]


author: Don Zickus <dzickus@redhat.com> [2.6.18-39.el5]
changelog:
  - [net] e1000: add support for Bolton NICs (Bruce Allan ) [251221]
  - [net] e1000: add support for HP Mezzanine cards (Bruce Allan ) [251214]
  - [net] igb: initial support for igb netdriver (Andy Gospodarek ) [244758]
  - [net] e1000e: initial support for e1000e netdriver (Andy Gospodarek ) [240086]


author: Don Zickus <dzickus@redhat.com> [2.6.18-38.el5]
changelog:
  - [ppc] No Boot/Hang response for PCI-E errors (Scott Moser ) [249667]
  - [GFS2] Reduce number of gfs2_scand processes to one (Steven Whitehouse ) [249905]
  - [scsi] Adaptec: Add SC-58300 HBA PCI ID (Konrad Rzeszutek ) [249275]
  - [GFS2] Fix bug relating to inherit_jdata flag on inodes (Steven Whitehouse ) [248576]
  - [ppc] Disable PCI-e completion timeouts on I/O Adapters (Scott Moser ) [232004]
  - [x86] Fix tscsync frequency transitions (Bhavana Nagendra ) [245082]
  - [CIFS] respect umask when unix extensions are enabled (Jeff Layton ) [246667]
  - [CIFS] fix signing sec= mount options (Jeff Layton ) [246595]
  - [XEN] netloop: Do not clobber cloned skb page frags (Herbert Xu ) [249683]


author: Don Zickus <dzickus@redhat.com> [2.6.18-37.el5]
changelog:
  - [net] Using mac80211 in ad-hoc mode can result in a kernel panic (John W. Linville ) [223558]
  - [ppc] Axon memory does not handle double bit errors (Scott Moser ) [249910]
  - [xen] x86: HV workaround for invalid PAE PTE clears (Chris Lalancette ) [234375]
  - [scsi] Update stex driver (Jeff Garzik ) [241074]
  - [scsi] cciss: Re-add missing kmalloc (Prarit Bhargava ) [249104]
  - [GFS2] Fix an oops in the glock dumping code (Steven Whitehouse ) [248479]
  - [GFS2] locksmith/revolver deadlocks (Steven Whitehouse ) [249406]
  - [xen] race loading xenblk.ko and scanning for LVM partitions (Richard Jones ) [247265]


author: Don Zickus <dzickus@redhat.com> [2.6.18-36.el5]
changelog:
  - [NFS] Re-enable force umount (Steve Dickson ) [244949]
  - [sata] regression in support for third party modules (Jeff Garzik ) [248382]
  - [utrace] set zombie leader to EXIT_DEAD before release_task (Roland McGrath ) [248621]


author: Don Zickus <dzickus@redhat.com> [2.6.18-35.el5]
changelog:
  - [XEN] fix time going backwards in gettimeofday (Rik van Riel ) [245761]
  - [GFS2] soft lockup in rgblk_search (Bob Peterson ) [246114]
  - [DLM] fix NULL reference in send_ls_not_ready (David Teigland ) [248187]
  - [DLM] Clear othercon pointers when a connection is closed (David Teigland ) [220538]


author: Don Zickus <dzickus@redhat.com> [2.6.18-34.el5]
changelog:
  - [wireless] iwlwifi: add driver (John W. Linville ) [223560]
  - [XEN] make crashkernel=foo@16m work (Gerd Hoffmann ) [243880]
  - [XEN] ia64: HV built with crash_debug=y does not boot on NUMA machine (Kei Tokunaga ) [247843]
  - [edac] allow edac to panic with memory corruption on non-kdump kernels (Don Zickus ) [237950]
  - [GFS2] Mounted file system won't suspend (Steven Whitehouse ) [192082]
  - [GFS2] soft lockup detected in databuf_lo_before_commit (Bob Peterson ) [245832]
  - [sata] Add Hitachi HDS7250SASUN500G 0621KTAWSD to NCQ blacklist (Prarit Bhargava ) [247627]
  - [PCI] unable to reserve mem region on module reload (Scott Moser ) [247701 247400]
  - [PPC] eHEA driver can cause kernel panic on recv of VLAN packets (Scott Moser ) [243009]
  - [PPC] Fix 64K pages with kexec on native hash table (Scott Moser ) [242550]
  - Reverts: Mambo driver on ppc64 [208320]


author: Don Zickus <dzickus@redhat.com> [2.6.18-33.el5]
changelog:
  - [XEN] ia64: Windows guest cannot boot with debug mode (Kei Tokunaga ) [245668]
  - [XEN] ia64: SMP Windows guest boot fails sometimes (Kei Tokunaga ) [243870]
  - [XEN] ia64: Dom0 boot fails on NUMA hardware (Kei Tokunaga ) [245275]
  - [XEN] ia64: Windows guest sometimes panic by incorrect ld4.s emulation (Kei Tokunaga ) [243865]
  - [XEN] ia64: boot 46 GuestOS makes Dom0 hang (Kei Tokunaga ) [245667]
  - [XEN] ia64: HVM guest hangs on vcpu migration (Kei Tokunaga ) [233971]
  - [XEN] ia64: Cannot create guest domain due to rid problem (Kei Tokunaga ) [242040]
  - [XEN] ia64: HVM domain creation panics if xenheap is not enough. (Kei Tokunaga ) [240108]
  - [XEN] ia64: DomU panics by save/restore (Kei Tokunaga ) [243866]
  - [XEN] ia64: Guest OS hangs on IPF montetito (Kei Tokunaga ) [245637]
  - [xen] Guest access to MSR may cause system crash/data corruption (Bhavana Nagendra ) [245186]
  - [xen] Windows HVM guest image migration causes blue screen (Bhavana Nagendra ) [245169]
  - [xen] ia64: enable blktap driver (Jarod Wilson ) [216293]
  - [scsi] check portstates before invoking target scan (David Milburn ) [246023]
  - [nfs] NFSd oops when exporting krb5p mount (Steve Dickson ) [247120]
  - [misc] Overflow in CAPI subsystem (Anton Arapov ) [231072] {CVE-2007-1217}
  - [dlm] A TCP connection to DLM port blocks DLM operations (Patrick Caulfield ) [245892] {CVE-2007-3380}
  - [dm] allow invalid snapshots to be activated (Milan Broz ) [244215]
  - [gfs2] inode size inconsistency (Wendy Cheng ) [243136]
  - [gfs2] Remove i_mode passing from NFS File Handle (Wendy Cheng ) [243136]
  - [gfs2] Obtaining no_formal_ino from directory entry (Wendy Cheng ) [243136]
  - [gfs2] EIO error from gfs2_block_truncate_page (Wendy Cheng ) [243136]
  - [gfs2] remounting w/o acl option leaves acls enabled (Bob Peterson ) [245663]
  - [GFS2] igrab of inode in wrong state (Steven Whitehouse ) [245646]
  - [audit] subtree watching cleanups (Alexander Viro ) [182624]


author: Don Zickus <dzickus@redhat.com> [2.6.18-32.el5]
changelog:
  - [ppc64] Data buffer miscompare (Konrad Rzeszutek ) [245332]
  - [xen] fix kexec/highmem failure (Gerd Hoffmann ) [245585]
  - [audit] kernel oops when audit disabled with files watched (Eric Paris ) [245164]
  - [scsi] Update aic94xx and libsas to 1.0.3 (Ryan Powers ) [224694]
  - [xen] ia64: kernel-xen panics when dom0_mem is specified(2) (Kei Tokunaga ) [217593]
  - [md] fix EIO on writes after log failure (Jonathan Brassow ) [236271]
  - [net] bonding: convert timers to workqueues (Andy Gospodarek ) [210577]
  - [scsi] cciss driver updates (Tomas Henzl ) [222852]
  - [sata] combined mode regression fix (Jeff Garzik ) [245052]
  - Reverts: [audit] protect low memory from user mmap operations (Eric Paris ) [233021]


author: Don Zickus <dzickus@redhat.com> [2.6.18-31.el5]
changelog:
  - [firewire] New stack technology preview (Jay Fenlason ) [182183]
  - [xen] kdump/kexec support (Gerd Hoffmann ) [212843]
  - [xen] Add AMD-V support for domain live migration (Chris Lalancette ) [222131]
  - [GFS2] assertion failure after writing to journaled file, umount (Bob Peterson ) [243899]
  - [pata] IDE (siimage) panics when DRAC4 reset (John Feeney ) [212391]
  - [agp] Fix AMD-64 AGP aperture validation (Bhavana Nagendra ) [236826]
  - [x86_64] C-state divisor not functioning correctly  (Bhavana Nagendra ) [235404]
  - [i2c] SMBus does not work on ATI/AMD SB700 chipset (Bhavana Nagendra ) [244150]
  - [ide] Cannot find IDE device with ATI/AMD SB700 (Bhavana Nagendra ) [244150]
  - [pci] PCI-X/PCI-Express read control interface (Bhavana Nagendra ) [234335]
  - [pata] IDE hotplug support for Promise pata_pdc2027x (Scott Moser ) [184774]


author: Don Zickus <dzickus@redhat.com> [2.6.18-30.el5]
changelog:
  - [md] add dm rdac hardware handler (Mike Christie ) [184635]
  - [sound]  ALSA update (1.0.14) (Brian Maly ) [227671 240713 223133 238004 223142 244672]
  - [xen] : AMD's ASID implementation  (Bhavana Nagendra ) [242932]
  - [x86_64] Fix casting issue in tick divider patch (Prarit Bhargava ) [244861]
  - [fs] setuid program unable to read own /proc/pid/maps file (Konrad Rzeszutek ) [221173]
  - [x86_64] Fixes system panic during boot up with no memory in Node 0 (Bhavana Nagendra ) [218641]
  - [nfs] closes and umounts are racing.  (Steve Dickson ) [225515]
  - [security] allow NFS nohide and SELinux to work together (Eric Paris ) [219837]
  - [ia64] Altix ACPI support (Greg Edwards ) [223577]
  - [net] ixgb: update to driver version 1.0.126-k2 (Bruce Allan ) [223380]
  - [net] Update netxen_nic driver to version 3.x.x (Konrad Rzeszutek ) [244711]
  - [misc] utrace update (Roland McGrath ) [229886 228397 217809 210693]
  - [misc] disable pnpacpi on IBM x460 (Brian Maly ) [243730]
  - [gfs2] posix lock fixes (David Teigland ) [243195]
  - [gfs2] panic in unlink (Steven Whitehouse ) [239737]
  - [input] i8042_interrupt() race can deliver bytes swapped to serio_interrupt() (Markus Armbruster ) [240860]
  - [s390] qdio: system hang with zfcp in case of adapter problems (Jan Glauber ) [241298]
  - [net] Fix tx_checksum flag bug in qla3xxx driver (Marcus Barrow ) [243724]
  - [openib] Update OFED code to 1.2 (Doug Ledford ) [225581]
  - [openib] kernel backports for OFED 1.2 update (Doug Ledford ) [225581]
  - [ppc64] donate cycles from dedicated cpu (Scott Moser ) [242762]
  - [scsi] RAID1 goes 'read-only' after resync (Chip Coldwell ) [231040]
  - [md] move fn call that could block outside spinlock (Jonathan Brassow ) [242069]
  - [fs] FUSE: Minor vfs change (Eric Sandeen ) [193720]
  - [net] s2io: Native Support for PCI Error Recovery (Scott Moser ) [228052]
  - [xen] x86_64: Fix FS/GS registers for VT bootup (Rik van Riel ) [224671]
  - [misc] Add RHEL version info to version.h (Konrad Rzeszutek ) [232534]
  - Revert: [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - Revert: [x86_64] Set CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT=n (Konrad Rzeszutek ) [222035]
  - Revert: [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]


author: Don Zickus <dzickus@redhat.com> [2.6.18-29.el5]
changelog:
  - [xen] Expand VNIF number per guest domain to over four (Kei Tokunaga ) [223908]
  - [xen] change interface version for 3.1 (Kei Tokunaga ) [242989]
  - [xen] ia64: Fix PV-on-HVM driver (Kei Tokunaga ) [242144]
  - [xen] ia64: use generic swiotlb.h header (Kei Tokunaga ) [242138]
  - [xen] ia64: xm save/restore does not work (Kei Tokunaga ) [240858]
  - [xen] ia64: Skip MCA setup on domU (Kei Tokunaga ) [242143]
  - [xen] ia64: Cannot measure process time accurately (Kei Tokunaga ) [240107]
  - [xen] Support new xm command: xm trigger (Kei Tokunaga ) [242140]
  - [xen] ia64: Fix for irq_desc() missing in new upstream (Kei Tokunaga ) [242137]
  - [xen] ia64: Set IRQ_PER_CPU status on percpu IRQs (Kei Tokunaga ) [242136]
  - [xen] ia64: improve performance of system call (Kei Tokunaga ) 
  - [xen] ia64: para domain vmcore does not work under crash (Kei Tokunaga ) [224047]
  - [xen] ia64: kernel-xen panics when dom0_mem=4194304 is specified (Kei Tokunaga ) [217593]
  - [xen] ia64: evtchn_callback fix and clean (Kei Tokunaga ) [242126]
  - [xen] ia64: changed foreign domain page mapping semantic (Kei Tokunaga ) [242779]
  - [xen] Change to new interrupt deliver mechanism (Kei Tokunaga ) [242125]
  - [xen] ia64: Uncorrectable error makes hypervisor hung (MCA  support) (Kei Tokunaga ) [237549]
  - [xen] Xen0 can not startX in tiger4 (Kei Tokunaga ) [215536]
  - [xen] ia64: Fix xm mem-set hypercall on IA64 (Kei Tokunaga ) [241976]
  - [xen] ia64: Fix HVM interrupts on IPF (Kei Tokunaga ) [242124]
  - [xen] save/restore fix (Gerd Hoffmann ) [222128]
  - [xen] blkback/blktap: fix id type (Gerd Hoffmann ) [222128]
  - [xen] xen: blktap race #2 (Gerd Hoffmann ) [222128]
  - [xen] blktap: race fix #1 (Gerd Hoffmann ) [222128]
  - [xen] blktap: cleanups. (Gerd Hoffmann ) [242122]
  - [xen] blktap: kill bogous flush (Gerd Hoffmann ) [222128]
  - [xen] binmodal drivers: block backends (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, blkfront driver (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, pvfb frontend (Gerd Hoffmann ) [222128]
  - [xen] bimodal drivers, protocol header (Gerd Hoffmann ) [222128]


author: Don Zickus <dzickus@redhat.com> [2.6.18-28.el5]
changelog:
  - [net] netxen: initial support for NetXen 10GbE NIC (Andy Gospodarek ) [231724]
  - [net] cxgb3: initial support for Chelsio T3 card (Andy Gospodarek ) [222453]
  - [drm] agpgart and drm support for bearlake graphics (Geoff Gustafson ) [229091]
  - [acpi] acpi_prt list incomplete (Kimball Murray ) [214439]
  - [mm] memory tracking patch only partially applied to Xen kernel (Kimball Murray ) [242514]
  - [x86_64] Fix TSC reporting for processors with constant TSC (Bhavana Nagendra ) [236821]
  - [pci] irqbalance causes oops during PCI removal (Kimball Murray ) [242517]
  - [net] Allow packet drops during IPSec larval state resolution (Vince Worthington ) [240902]
  - [net] bcm43xx: backport from 2.6.22-rc1 (John W. Linville ) [213761]
  - [net] softmac: updates from 2.6.21 (John W. Linville ) [240354]
  - [net] e1000: update to driver version 7.3.20-k2 (Andy Gospodarek ) [212298]
  - [net] bnx2: update to driver version 1.5.11 (Andy Gospodarek ) [225350]
  - [net] ipw2[12]00: backports from 2.6.22-rc1 (John W. Linville ) [240868]
  - [net] b44 ethernet driver update (Jeff Garzik ) [244133]
  - [net] sky2: update to version 1.14 from 2.6.21 (John W. Linville ) [223631]
  - [net] forcedeth: update to driver version 0.60 (Andy Gospodarek ) [221941]
  - [net] bonding: update to driver version 3.1.2 (Andy Gospodarek ) [210577]
  - [net] tg3: update to driver version 3.77 (Andy Gospodarek ) [225466 228125]
  - [PPC] Update of spidernet to 2.0.A for Cell (Scott Moser ) [227612]
  - [scsi] SPI DV fixup (Chip Coldwell ) [237889]
  - [audit] audit when opening existing messege queue (Eric Paris ) [223919 ]
  - [audit] audit=0 does not disable all audit messages (Eric Paris ) [231371]
  - [net] mac80211 inclusion (John W. Linville ) [214982 223558]


author: Don Zickus <dzickus@redhat.com> [2.6.18-26.el5]
changelog:
  - [x86_64] sparsemem memmap allocation above 4G (grgustaf) [227426]
  - [net] ip_conntrack_sctp: fix remotely triggerable panic (Don Howard ) [243244] {CVE-2007-2876}
  - [usb] Strange URBs and running out IOMMU (Pete Zaitcev ) [230427]
  - [audit] broken class-based syscall audit (Eric Paris ) [239887]
  - [audit] allow audit filtering on bit & operations (Eric Paris ) [232967]
  - [x86_64] Add L3 cache support to some processors (Bhavana Nagendra ) [236835]
  - [x86_64] disable mmconf for HP dc5700 Microtower (Prarit Bhargava ) [219389]
  - [misc] cpuset information leak (Prarit Bhargava ) [242811] {CVE-2007-2875}
  - [audit] stop softlockup messages when loading selinux policy (Eric Paris ) [231392]
  - [fs] nfs does not support leases, send correct error (Peter Staubach ) [216750]
  - [dlm] variable allocation types (David Teigland ) [237558]
  - [GFS2] Journaled data issues (Steven Whitehouse ) [238162]
  - [ipsec] Make XFRM_ACQ_EXPIRES proc-tunable (Vince Worthington ) [241798]
  - [GFS2] Missing lost inode recovery code (Steven Whitehouse ) [201012]
  - [GFS2] Can't mount GFS2 file system on AoE device (Robert Peterson ) [243131]
  - [scsi] update aacraid driver to 1.1.5-2437 (Chip Coldwell ) [197337]
  - [scsi] cciss: ignore results from unsent commands on kexec boot (Neil Horman ) [239520]
  - [scsi] update iscsi_tcp driver (Mike Christie ) [227739]
  - [x86_64] Fix regression in kexec (Neil Horman ) [242648]
  - [x86] rtc support for HPET legacy replacement mode (Brian Maly ) [220196]
  - [scsi] megaraid_sas update (Chip Coldwell ) [225221]
  - [fs] fix ext2 overflows on filesystems > 8T (Eric Sandeen ) [237188]
  - [x86] MCE thermal throttling (Brian Maly ) [224187]
  - [audit] protect low memory from user mmap operations (Eric Paris ) [233021]
  - [scsi] Add FC link speeds. (Tom Coughlan ) [231888]
  - [pci] I/O space mismatch with P64H2 (Geoff Gustafson ) [220511]
  - [scsi] omnibus lpfc driver update (Chip Coldwell ) [227416]
  - [scsi] Update qla2xxx firmware (Marcus Barrow ) [242534]
  - [ide] Serverworks data corruptor (Alan Cox ) [222653]
  - [scsi] update qla4xxx driver (Mike Christie ) [224435 223087 224203]
  - [scsi] update iser driver (Mike Christie ) [234352]
  - [dlm] fix debugfs ref counting problem (Josef Bacik ) [242807]
  - [md] rh_in_sync should be allowed to block (Jonathan Brassow ) [236624]
  - [md] unconditionalize log flush (Jonathan Brassow ) [235039]
  - [GFS2] Add nanosecond timestamp feature  (Steven Whitehouse ) [216890]
  - [GFS2] quota/statfs sign problem and cleanup _host structures (Steven Whitehouse ) [239686]
  - [scsi] mpt adds DID_BUS_BUSY host status on scsi BUSY status (Chip Coldwell ) [228108]
  - [scsi] fix for slow DVD drive (Chip Coldwell ) [240910]
  - [scsi] update MPT Fusion to 3.04.04 (Chip Coldwell ) [225177]
  - [GFS2] Fix calculation for spare log blocks with smaller block sizes (Steven Whitehouse ) [240435]
  - [gfs2] quotas non-functional (Abhijith Das ) [201011]
  - [gfs2] Cleanup inode number handling (Abhijith Das ) [242584]


author: Don Zickus <dzickus@redhat.com> [2.6.18-25.el5]
changelog:
  - [s390] fix possible reboot hang on s390 (Jan Glauber ) [222181]
  - [cifs] Update CIFS to version 1.48aRH (Jeff Layton ) [238597]
  - [audit] Make audit config immutable in kernel (Eric Paris ) [223530]
  - [dio] invalidate clean pages before dio write (Jeff Moyer ) [232715]
  - [nfs] fixed oops in symlink code.  (Steve Dickson ) [218718]
  - [mm] shared page table for hugetlb  page (Larry Woodman ) [222753]
  - [nfs] Numerous oops, memory leaks and hangs found in upstream (Steve Dickson ) [242975]
  - [misc] include taskstats.h in kernel-headers package (Don Zickus ) [230648]
  - [ide] packet command error when installing rpm (John Feeney ) [229701]
  - [dasd] export DASD status to userspace (Chris Snook ) [242681]
  - [dasd] prevent dasd from flooding the console (Jan Glauber ) [229590]
  - [s390] ifenslave -c causes kernel panic with VLAN and OSA Layer2 (Jan Glauber ) [219826]
  - [s390] sclp race condition (Jan Glauber ) [230598]
  - [audit] SAD/SPD flush have no security check (Eric Paris ) [233387]
  - [audit] Add space in IPv6 xfrm audit record (Eric Paris ) [232524]
  - [audit] Match proto when searching for larval SA (Eric Paris ) [234485]
  - [audit] pfkey_spdget does not audit xrfm policy changes (Eric Paris ) [229720]
  - [audit] collect audit inode information for all f*xattr commands (Eric Paris ) [229094]
  - [audit] Initialize audit record sid information to zero (Eric Paris ) [223918]
  - [audit] xfrm_add_sa_expire return code error (Eric Paris ) [230620]
  - [net] NetLabel: Verify sensitivity level has a valid CIPSO mapping (Eric Paris ) [230255]
  - [audit] pfkey_delete and xfrm_del_sa audit hooks wrong (Eric Paris ) [229732]
  - [block] Fix NULL bio crash in loop worker thread (Eric Sandeen ) [236880]
  - [x86]: Add Greyhound performance counter events (Bhavana Nagendra ) [222126]
  - [dio] clean up completion phase of direct_io_worker() (Jeff Moyer ) [242116]
  - [audit] add subtrees support (Alexander Viro ) [182624]
  - [audit] AVC_PATH handling (Alexander Viro ) [224620]
  - [audit] auditing ptrace (Alexander Viro ) [228384]
  - [x86_64] Fix a cast in the lost ticks code (Prarit Bhargava ) [241781]
  - [PPC64] DMA 4GB boundary protection  (Scott Moser ) [239569]
  - [PPC64] MSI support for PCI-E (Scott Moser ) [228081]
  - [ppc64] Enable DLPAR support for HEA (Scott Moser ) [237858]
  - [ppc64] update ehea driver to latest version. (Janice M. Girouard ) [234225]
  - [PPC64] spufs move to sdk2.1 (Scott Moser ) [242763]
  - [PPC64] Cell SPE and Performance (Scott Moser ) [228128]
  - [cpufreq] Identifies correct number of processors in powernow-k8 (Bhavana Nagendra ) [229716]


author: Don Zickus <dzickus@redhat.com> [2.6.18-24.el5]
changelog:
  - [ipmi] update to latest (Peter Martuccelli ) [241928 212415 231436]
  - [sata] super-jumbo update (Jeff Garzik ) [203781]
  - [sata] move SATA drivers to drivers/ata (Jeff Garzik ) [203781]


author: Don Zickus <dzickus@redhat.com> [2.6.18-23.el5]
changelog:
  - [dlm] Allow unprivileged users to create the default lockspace (Patrick Caulfield ) [241902]
  - [dlm] fix queue_work oops (David Teigland ) [242070]
  - [dlm] misc device removed when lockspace removal fails (David Teigland ) [241817]
  - [dlm] dumping master locks (David Teigland ) [241821]
  - [dlm] canceling deadlocked lock (David Teigland ) [238898]
  - [dlm] wait for config check during join (David Teigland ) [206520]
  - [dlm] fix new_lockspace error exit (David Teigland ) [241819]
  - [dlm] cancel in conversion deadlock (David Teigland ) [238898]
  - [dlm] add lock timeouts and time warning (David Teigland ) [238898]
  - [dlm] block scand during recovery (David Teigland ) [238898]
  - [dlm] consolidate transport protocols (David Teigland ) [219799]
  - [audit] log targets of signals (Alexander Viro ) [228366]


author: Don Zickus <dzickus@redhat.com> [2.6.18-22.el5]
changelog:
  - [scsi] Add kernel support for Areca RAID controllers (Tomas Henzl ) [205897]
  - [s390] runtime switch for qdio performance statistics (Jan Glauber ) [228048]
  - [nfs] enable 'nosharecache' mounts. (Steve Dickson ) [209964]
  - [scsi] scsi_error.c - Fix lost EH commands (Chip Coldwell ) [227586]
  - [s390] zfcp driver fixes (Jan Glauber ) [232002 232006]
  - [misc] synclink_gt: fix init error handling  (Eric Sandeen) [210389]
  - [edac] k8_edac: don't panic on PCC check (Aristeu Rozanski ) [237950]
  - [mm] Prevent OOM-kill of unkillable children or siblings (Larry Woodman ) [222492]
  - [aio] fix buggy put_ioctx call in aio_complete (Jeff Moyer ) [219497]
  - [scsi] 3ware 9650SE not recognized by updated  3w-9xxx module (Chip Coldwell ) [223465]
  - [scsi] megaraid: update version reported by  MEGAIOC_QDRVRVER (Chip Coldwell ) [237151]
  - [nfs] NFS/NLM - Fix double free in __nlm_async_call (Steve Dickson ) [223248]
  - [ppc] EEH is improperly enabled for some Power4  systems (Scott Moser ) [225481]
  - [net] ixgb: update to 1.0.109 to add pci error recovery (Andy Gospodarek ) [211380]
  - [ppc] Fix xmon=off and cleanup xmon initialization (Scott Moser ) [229593]
  - [mm] reduce MADV_DONTNEED contention (Rik van Riel ) [237677]
  - [x86_64] wall time is not compensated for lost timer ticks (Konrad Rzeszutek ) [232666]
  - [PPC] handle <.symbol> lookup for kprobes (Scott Moser ) [238465]
  - [pci] Dynamic Add and Remove of PCI-E (Konrad Rzeszutek ) [227727]
  - [PPC64] Support for ibm,power-off-ups RTAS  call (Scott Moser ) [184681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-21.el5]
changelog:
  - [net] Re-enable and update the qla3xxx networking driver (Konrad Rzeszutek ) [225200]
  - [misc] xen: kill sys_{lock,unlock} dependency on microcode driver (Gerd Hoffmann ) [219652]
  - [acpi] Update ibm_acpi module (Konrad Rzeszutek ) [231176]
  - [nfs] NFSv4: referrals support (Steve Dickson ) [230602]
  - [misc] random: fix error in entropy extraction (Aristeu Rozanski ) [241718] {CVE-2007-2453}
  - [net] fix DoS in PPPOE (Neil Horman ) [239581] {CVE-2007-2525}
  - [GFS2] Fixes related to gfs2_grow (Steven Whitehouse ) [235430]
  - [gfs2] Shrink size of struct gdlm_lock (Steven Whitehouse ) [240013]
  - [misc] Bluetooth setsockopt() information leaks (Don Howard ) [234292] {CVE-2007-1353}
  - [net] RPC/krb5 memory leak (Steve Dickson ) [223248]
  - [mm] BUG_ON in shmem_writepage() is triggered (Michal Schmidt ) [234447]
  - [nfs] protocol V3 :write procedure patch (Peter Staubach ) [228854]
  - [fs] invalid segmentation violation during exec (Dave Anderson ) [230339]
  - [md] dm io: fix panic on large request (Milan Broz ) [240751]
  - [nfs] RPC: when downsizing response buffer, account for checksum (Jeff Layton ) [238687]
  - [md] incorrect parameter to dm_io causes read failures (Jonathan Brassow ) [241006]
  - [ia64] eliminate potential deadlock on XPC disconnects (George Beshers ) [223837]
  - [md] dm crypt: fix possible data corruptions (Milan Broz ) [241272]
  - [ia64] SN correctly update smp_affinity mask (luyu ) [223867]
  - [mm]fix OOM wrongly killing processes through MPOL_BIND (Larry Woodman ) [222491]
  - [nfs] add nordirplus option to NFS client  (Steve Dickson ) [240126]
  - [autofs] fix panic on mount fail - missing autofs module (Ian Kent ) [240307]
  - [scsi] Fix bogus warnings from SB600 DVD drive (Prarit Bhargava ) [238570]
  - [acpi] _CID support for PCI Root Bridge  detection. (Luming Yu ) [230742]
  - [ia64] platform_kernel_launch_event is a noop in non-SN kernel (Luming Yu ) [232657]
  - [net] high TCP latency with small packets (Thomas Graf ) [229908]
  - [misc] xen: fix microcode driver for new firmware (Gerd Hoffmann ) [237434]
  - [GFS2] Bring GFS2 uptodate (Steven Whitehouse ) [239777]
  - [scsi] update for new SAS RAID  (Scott Moser ) [228538]
  - [md] dm: allow offline devices in table (Milan Broz ) [239655]
  - [md] dm: fix suspend error path (Milan Broz ) [239645]
  - [md] dm multipath: rr path order is inverted (Milan Broz ) [239643]
  - [net] RPC: simplify data check, remove BUG_ON (Jeff Layton ) [237374]
  - [mm] VM scalability issues (Larry Woodman ) [238901 238902 238904 238905]
  - [misc] lockdep: annotate DECLARE_WAIT_QUEUE_HEAD (Chip Coldwell ) [209539]
  - [mm] memory-less node support (Prarit Bhargava ) [228564]


author: Don Zickus <dzickus@redhat.com> [2.6.18-19.el5]
changelog:
  - [ia64] MCA/INIT issues with printk/messages/console (Kei Tokunaga ) [219158]
  - [ia64] FPSWA exceptions take excessive system time  (Erik Jacobson ) [220416]
  - [GFS2] flush the glock completely in inode_go_sync (Steven Whitehouse ) [231910]
  - [GFS2] mmap problems with distributed test cases (Steven Whitehouse ) [236087]
  - [GFS2] deadlock running d_rwdirectlarge (Steven Whitehouse ) [236069]
  - [GFS2] panic if you try to rm -rf the lost+found directory (Steven Whitehouse ) [232107]
  - [misc] Fix softlockup warnings during sysrq-t (Prarit Bhargava ) [206366]
  - [pty] race could lead to double idr index free (Aristeu Rozanski ) [230500]
  - [v4l] use __GFP_DMA32 in videobuf_vm_nopage (Aristeu Rozanski ) [221478]
  - [scsi] Update QLogic qla2xxx driver to 8.01.07-k6 (Marcus Barrow ) [225249]
  - [mm] OOM killer breaks s390 CMM (Jan Glauber ) [217968]
  - [fs] stack overflow with non-4k page size (Dave Anderson ) [231312]
  - [scsi] scsi_transport_spi: sense buffer size error (Chip Coldwell ) [237889]
  - [ppc64] EEH PCI error recovery  support (Scott Moser ) [207968]
  - [mm] optimize kill_bdev() (Peter Zijlstra ) [232359]
  - [x86] tell sysrq-m to poke the nmi watchdog (Konrad Rzeszutek ) [229563]
  - [x86] Use CPUID calls to check for mce (Bhavana Nagendra ) [222123]
  - [x86] Fix to nmi to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Fix CPUID calls to support GH processors (Bhavana Nagendra ) [222123]
  - [x86] Greyhound cpuinfo output cleanups (Bhavana Nagendra ) [222124]
  - [misc] intel-rng: fix deadlock in smp_call_function (Prarit Bhargava ) [227696]
  - [net] ixgb: fix early TSO completion (Bruce Allan ) [213642]


author: Don Zickus <dzickus@redhat.com> [2.6.18-18.el5]
changelog:
  - [e1000] fix watchdog timeout panics (Andy Gospodarek ) [217483]
  - [net] ipv6_fl_socklist is inadvertently shared (David S. Miller ) [233088] {CVE-2007-1592}
  - [dlm] expose dlm_config_info fields in configfs (David Teigland ) [239040]
  - [dlm] add config entry to enable log_debug (David Teigland ) [239040]
  - [dlm] rename dlm_config_info fields (David Teigland ) [239040]
  - [mm] NULL current->mm dereference in grab_swap_token causes oops (Jerome Marchand ) [231639]
  - [net] Various NULL pointer dereferences in netfilter code (Thomas Graf ) [234287] {CVE-2007-1496}
  - [net] IPv6 fragments bypass in nf_conntrack netfilter code (Thomas Graf ) [234288] {CVE-2007-1497}
  - [net] disallow RH0 by default (Thomas Graf ) [238065] {CVE-2007-2242}
  - [net] fib_semantics.c out of bounds check (Thomas Graf ) [236386]
  - [misc] getcpu system call (luyu ) [233046]
  - [ipc] bounds checking for shmmax (Anton Arapov ) [231168]
  - [x86_64] GATT pages must be uncacheable (Chip Coldwell ) [238709]
  - [gfs2] does a mutex_lock instead of a mutex_unlock (Josef Whiter ) [229376]
  - [dm] failures when creating many snapshots (Milan Broz ) [211516 211525]
  - [dm] kmirrord: deadlock when dirty log on mirror itself (Milan Broz ) [218068]
  - [security] Supress SELinux printk for messages users don't care about (Eric Paris ) [229874]
  - [serial] panic in check_modem_status on 8250 (Norm Murray ) [238394]
  - [net] Fix user OOPS'able bug in FIB netlink (David S. Miller ) [237913]
  - [misc] EFI: only warn on pre-1.00 version (Michal Schmidt ) [223282]
  - [autofs4] fix race between mount and expire (Ian Kent ) [236875]
  - [GFS2] gfs2_delete_inode: 13 (Steven Whitehouse ) [224480]
  - [misc] k8temp (Florian La Roche ) [236205]


author: Don Zickus <dzickus@redhat.com> [2.6.18-17.el5]
changelog:
  - [x86_64] Calgary IOMMU cleanups and fixes (Konrad Rzeszutek ) [222035]
  - [GFS2] lockdump support (Robert Peterson ) [228540]
  - [net] kernel-headers: missing include of types.h (Neil Horman ) [233934]
  - [mm] unmapping memory range disturbs page referenced state (Peter Zijlstra ) [232359]
  - [IA64] Fix stack layout issues when using ulimit -s (Jarod Wilson ) [234576]
  - [CIFS] Windows server bad domain name null terminator fix (Jeff Layton ) [224359]
  - [x86_64] Fix misconfigured K8 north bridge (Bhavana Nagendra ) [236759]
  - [gfs2] use log_error before LM_OUT_ERROR (David Teigland ) [234338]
  - [dlm] fix mode munging (David Teigland ) [234086]
  - [dlm] change lkid format (David Teigland ) [237126]
  - [dlm] interface for purge (David Teigland ) [237125]
  - [dlm] add orphan purging code (David Teigland ) [237125]
  - [dlm] split create_message function (David Teigland ) [237125]
  - [dlm] overlapping cancel and unlock (David Teigland ) [216113]
  - [dlm] zero new user lvbs (David Teigland ) [237124]
  - [PPC64] Handle Power6 partition modes (2) (Janice M. Girouard ) [228091]
  - [ppc64] Handle Power6 partition modes (Janice M. Girouard ) [228091]
  - [mm] oom kills current process on memoryless node. (Larry Woodman ) [222491]
  - [x86] Tick Divider (Alan Cox ) [215403]
  - [GFS2] hangs waiting for semaphore (Steven Whitehouse ) [217356]
  - [GFS2] incorrect flushing of rgrps (Steven Whitehouse ) [230143]
  - [GFS2] Clean up of glock code (Steven Whitehouse ) [235349]
  - [net] IPsec: panic when large security contexts in ACQUIRE (James Morris ) [235475]
  - [ppc64] Cell Platform Base kernel support (Janice M. Girouard ) [228099]
  - [s390] fix dasd reservations (Chris Snook ) [230171]
  - [x86] Fix invalid write to nmi MSR (Prarit Bhargava ) [221671]


author: Don Zickus <dzickus@redhat.com> [2.6.18-16.el5]
changelog:
  - [s390] crypto driver update (Jan Glauber ) [228049]
  - [NMI] change watchdog timeout to 30 seconds (Larry Woodman ) [229563]
  - [ppc64] allow vmsplice to work in 32-bit mode on ppc64 (Don Zickus ) [235184]
  - [nfs] fix multiple dentries pointing to same directory inode (Steve Dickson ) [208862]
  - [ipc] mqueue nested locking annotation (Eric Sandeen ) 
  - [net] expand in-kernel socket api (Neil Horman ) [213287]
  - [XEN] Better fix for netfront_tx_slot_available(). (Herbert Xu ) [224558]
  - [fs] make static counters in new_inode and iunique be 32 bits (Jeff Layton ) [215356]
  - [ppc64] remove BUG_ON() in hugetlb_get_unmapped_area() (Larry Woodman ) [222926]
  - [dm] stalls on resume if noflush is used (Milan Broz ) [221330]
  - [misc]: AMD/ATI SB600 SMBus support (Prarit Bhargava ) [232000]
  - [mm] make do_brk() correctly return EINVAL for ppc64.   (Larry Woodman ) [224261]
  - [agp] agpgart fixes and new pci ids (Geoff Gustafson ) [227391]
  - [net] xfrm_policy delete security check misplaced (Eric Paris ) [228557]
  - [x86]: Fix mtrr MODPOST warnings (Prarit Bhargava ) [226854]
  - [elevator] move clearing of unplug flag  earlier (Eric Sandeen ) [225435]
  - [net] stop leak in flow cache code (Eric Paris ) [229528]
  - [ide] SB600 ide only has one channel (Prarit Bhargava ) [227908]
  - [scsi] ata_task_ioctl should return ata registers (David Milburn ) [218553]
  - [pcie]: Remove PCIE warning for devices with no irq pin (Prarit Bhargava ) [219318]
  - [x86] ICH9 device IDs  (Geoff Gustafson ) [223097]
  - [mm] Some db2 operations cause system to hang (Michal Schmidt ) [222031]
  - [security] invalidate flow cache entries after selinux policy reload (Eric Paris ) [229527]
  - [net] wait for IPSEC SA resolution in socket contexts. (Eric Paris ) [225328]
  - [net] clean up xfrm_audit_log interface (Eric Paris ) [228422]
  - [ipv6]: Fix routing regression. (David S. Miller ) [222122]
  - [tux] date overflow fix (Jason Baron ) [231561]
  - [cifs] recognize when a file is no longer read-only (Jeff Layton ) [231657]
  - [module] MODULE_FIRMWARE support (Jon Masters ) [233494]
  - [misc] some apps cannot use IPC msgsnd/msgrcv larger than 64K (Jerome Marchand ) [232012]
  - [xen] Fix netfront teardown (Glauber de Oliveira Costa ) [219563]


author: Don Zickus <dzickus@redhat.com> [2.6.18-15.el5]
changelog:
  - [x86_64] enable calgary support for x86_64 system (Neil Horman ) [221593]
  - [s390] pseudo random number generator (Jan Glauber ) [184809]
  - [ppc64] Oprofile kernel module does not distinguish PPC 970MP  (Janice M. Girouard ) [216458]
  - [GFS2] honor the noalloc flag during block allocation (Steven Whitehouse ) [235346]
  - [GFS2] resolve deadlock when writing and accessing a file (Steven Whitehouse ) [231380]
  - [s390] dump on panic support (Jan Glauber ) [228050, 227841]
  - [pci] include devices in NIC ordering patch and fix whitespace (Andy Gospodarek ) [226902]
  - [ext3] handle orphan inodes vs. readonly snapshots (Eric Sandeen ) [231553]
  - [fs] - Fix error handling in check_partition(), again (Eric Sandeen ) [231518]
  - [ipv6] /proc/net/anycast6 unbalanced inet6_dev refcnt (Andy Gospodarek ) [231310]
  - [s390] kprobes breaks BUG_ON (Jan Glauber ) [231155]
  - [edac] add support for revision F processors (Aristeu Rozanski ) [202622]
  - [scsi] blacklist touch-up (Chip Coldwell ) [232074]
  - [gfs2] remove an incorrect assert (Steven Whitehouse ) [229873]
  - [gfs2] inconsistent inode number lookups (Wendy Cheng ) [229395]
  - [gfs2] NFS cause recursive locking (Wendy Cheng ) [229349]
  - [gfs2] NFS v2 mount failure (Wendy Cheng ) [229345]
  - [s390] direct yield for spinlocks on s390 (Jan Glauber ) [228869]
  - [s390] crypto support for 3592 tape devices (Jan Glauber ) [228035]
  - [cpu-hotplug] make and module insertion script cause a panic (Konrad Rzeszutek ) [217583]
  - [s390] runtime switch for dasd erp logging (Jan Glauber ) [228034]
  - [suspend] Fix x86_64/relocatable kernel/swsusp breakage. (Nigel Cunningham ) [215954]
  - [ext3] buffer: memorder fix (Eric Sandeen ) [225172]
  - [scsi] fix incorrect last scatg length (David Milburn ) [219838]
  - [usb]: airprime driver corrupts ppp session for EVDO card (Jon Masters ) [222443]
  - [misc] Fix race in efi variable delete code (Prarit Bhargava ) [223796]
  - [ext3] return ENOENT from ext3_link when racing with unlink (Eric Sandeen ) [219650]
  - [scsi] Missing PCI Device in aic79xx driver (Chip Coldwell ) [220603]
  - [acpi]: Fix ACPI PCI root bridge querying time (Prarit Bhargava ) [218799]
  - [kdump]: Simple bounds checking for crashkernel args (Prarit Bhargava ) [222314]
  - [misc] longer CD timeout (Erik Jacobson ) [222362]
  - [nfs] Disabling protocols when starting NFS server is broken. (Steve Dickson ) [220894]
  - [s390] page_mkclean causes data corruption on s390 (Jan Glauber ) [235373]


author: Don Zickus <dzickus@redhat.com> [2.6.18-14.el5]
changelog:
  - [ppc] reduce num_pmcs to 6 for Power6 (Janice M. Girouard ) [220114]
  - [sched] remove __cpuinitdata from cpu_isolated_map (Jeff Burke ) [220069]
  - [gfs2] corrrectly display revalidated directories (Robert Peterson ) [222302]
  - [gfs2] fix softlockups (Josef Whiter ) [229080]
  - [gfs2] occasional panic in gfs2_unlink while running bonnie++ (Steven Whitehouse ) [229831]
  - [gfs2] Shrink gfs2 in-core inode size (Steven Whitehouse ) [230693]
  - [GFS2] Fix list corruption in lops.c (Steven Whitehouse ) [226994]
  - [gfs2] fix missing unlock_page() (Steven Whitehouse ) [224686]
  - [dlm] make lock_dlm drop_count tunable in sysfs (David Teigland ) [224460]
  - [dlm] increase default lock limit (David Teigland ) [224460]
  - [dlm] can miss clearing resend flag (David Teigland ) [223522]
  - [dlm] fix master recovery (David Teigland ) [222307]
  - [dlm] fix user unlocking (David Teigland ) [219388]
  - [dlm] saved dlm message can be dropped (David Teigland ) [223102]


author: Don Zickus <dzickus@redhat.com> [2.6.18-13.el5]
changelog:
  - [x86_64] Don't leak NT bit into next task (Dave Anderson ) [213313]
  - [mm] Gdb does not accurately output the backtrace. (Dave Anderson ) [222826]
  - [net] IPV6 security holes in ipv6_sockglue.c - 2 (David S. Miller ) [231517] {CVE-2007-1000}
  - [net] IPV6 security holes in ipv6_sockglue.c (David S. Miller ) [231668] {CVE-2007-1388}
  - [audit] GFP_KERNEL allocations in non-blocking context fix (Alexander Viro ) [228409]
  - [NFS] version 2 over UDP is not working properly (Steve Dickson ) [227718]
  - [x86] Fix various data declarations in cyrix.c (Prarit Bhargava ) [226855]
  - [sound] Fix various data declarations in sound/drivers (Prarit Bhargava ) [227839]
  - [mm] remove __initdata from initkmem_list3 (Prarit Bhargava ) [226865]


author: Don Zickus <dzickus@redhat.com> [2.6.18-12.el5]
changelog:
  - [xen] move xen sources out of kernel-xen-devel (Don Zickus ) [212968]
  - [net] __devinit & __devexit cleanups for de2104x driver (Prarit Bhargava ) [228736]
  - [video] Change rivafb_remove to __deviexit (Prarit Bhargava ) [227838]
  - [x86] Reorganize smp_alternatives sections in vmlinuz (Prarit Bhargava ) [226876]
  - [atm] Fix __initdata declarations in drivers/atm/he.c (Prarit Bhargava ) [227830]
  - [video] Change nvidiafb_remove to __devexit (Prarit Bhargava ) [227837]
  - [usb] __init to __devinit in isp116x_probe (Prarit Bhargava ) [227836]
  - [rtc] __init to __devinit in rtc drivers' probe functions (Prarit Bhargava ) [227834]
  - [x86] remove __init from sysenter_setup (Prarit Bhargava ) [226852]
  - [irq] remove __init from noirqdebug_setup (Prarit Bhargava ) [226851]
  - [x86] remove __init from efi_get_time (Prarit Bhargava ) [226849]
  - [x86] Change __init to __cpuinit data in SMP code (Prarit Bhargava ) [226859]
  - [x86] apic probe __init fixes (Prarit Bhargava ) [226875]
  - [x86] fix apci related MODPOST warnings (Prarit Bhargava ) [226845]
  - [serial] change serial8250_console_setup to __init (Prarit Bhargava ) [226869]
  - [init] Break init() into two parts to avoid MODPOST warnings (Prarit Bhargava ) [226829]
  - [x86] declare functions __init to avoid  compile warnings (Prarit Bhargava ) [226858]
  - [x86] cpu hotplug/smpboot misc MODPOST warning fixes (Prarit Bhargava ) [226826]
  - [x86] Fix boot_params and .pci_fixup warnings (Prarit Bhargava ) [226824 226874]
  - [xen] Enable Xen booting on machines with > 64G (Chris Lalancette ) [220592]
  - [utrace] exploit and unkillable cpu fixes (Roland McGrath ) [229886]
  - [pcmcia] buffer overflow in omnikey cardman driver    (Don Howard ) [227478]


author: Don Zickus <dzickus@redhat.com> [2.6.18-10.el5]
changelog:
  - [cpufreq] Remove __initdata from tscsync (Prarit Bhargava ) [223017]
  - [security] Fix key serial number collision problem (David Howells ) [227497] {CVE-2007-0006}
  - [fs] core dump of read-only binarys (Don Howard ) [228886] {CVE-2007-0958}


author: Don Zickus <dzickus@redhat.com> [2.6.18-5.el5]
changelog:
  - x86: /proc/mtrr interface MTRR bug fix (Bhavana Nagendra ) [223821]
  - Revert: bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - ia64: Check for TIO errors on shub2 Altix (George Beshers ) [223529]
  - nfs: Unable to mount more than 1 Secure NFS mount (Steve Dickson ) [220649]


author: Don Zickus <dzickus@redhat.com> [2.6.18-4.el5]
changelog:
  - IPSec: incorrect return code in xfrm_policy_lookup (Eric Paris ) [218591]
  - more kabi whitelist updates (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-3.el5]
changelog:
  - scsi: fix EX8350 panic (stex.ko) (Jun'ichi Nick Nomura ) [220783]
  - Audit: Mask upper bits on 32 bit syscall auditing on ppc64 (Eric Paris ) [213276]


author: Don Zickus <dzickus@redhat.com> [2.6.18-2.el5]
changelog:
  - mm: handle mapping of memory without a struct page backing it (Erik Jacobson ) [221029]
  - rng: check to see if bios locked device (Erik Jacobson ) [221029]
  - sata: support legacy IDE mode of SB600 SATA (Bhavana Nagendra ) [221636]
  - xen: quick fix for Cannot allocate memory (Steven Rostedt ) [217056]
  - XEN: Register PIT handlers to the correct domain (Herbert Xu ) [222520]
  - SATA AHCI: support AHCI class code (Jeff Garzik ) [222674]
  - fix vdso in core dumps (Roland McGrath ) [211744]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3014.el5]
changelog:
  - XEN: Replace inappropriate domain_crash_synchronous use (Herbert Xu ) [221239]
  - SATA timeout boot message  (Peter Martuccelli ) [222108]
  - Netlabel: off by one and init bug in netlbl_cipsov4_add_common (Eric Paris ) [221648]
  - NetLabel: fix locking issues (Eric Paris ) [221504]
  - mm: fix statistics in vmscan.c (Peter Zijlstra ) [222030]
  - usb: Sun/AMI virtual floppy issue (Pete Zaitcev ) [219628]
  - bonding: eliminate rtnl assertion spew (Andy Gospodarek ) [210577]
  - Xen: Make HVM hypercall table NR_hypercalls entries big. (Herbert Xu ) [221818]
  - xen: Add PACKET_AUXDATA cmsg (Herbert Xu ) [219681]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.3002.el5]
changelog:
  - ppc64: initialization of hotplug memory fixes (Janice M. Girouard ) [220065]
  - GFS2: return error for NULL inode (Russell Cattelan ) [217008]
  - scsi: prevent sym53c1510 from claiming the wrong pci id (Chip Coldwell ) [218623]
  - net: Disable the qla3xxx network driver. (Tom Coughlan ) [221328]
  - xen: Disable CONFIG_IDE_GENERIC (Jarod Wilson ) [220099]
  - sound: add support for STAC9205 codec (John Feeney ) [219494]
  - ipv6: panic when bringing up multiple interfaces (Thomas Graf ) [218039]
  - XFRM Audit: correct xfrm auditing panic (Eric Paris ) [222033]
  - edac: fix /proc/bus/pci/devices to allow X to start (John Feeney ) [219288]
  - x86_64: clear_kernel_mapping: mapping has been split. will leak memory. (Larry Woodman ) [218543]
  - xen: >4G guest fix (Steven Rostedt ) [217770]
  -  fs: listxattr syscall can corrupt user space programs (Eric Sandeen ) [220119]
  - CacheFiles: Fix object struct recycling (David Howells ) [215599]
  - Remove capability requirement to reading cap-bound (Eric Paris ) [219230]
  - disable building ppc64iseries (Don Zickus) [219185]
  - update: utrace fixes (Roland McGrath) [214405 215052 216150 209118]
  - PPC config file changes for IPMI and DTLK (Peter Martuccelli ) [210214]
  - update: Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - net: qla3xxx panics when eth1 is sending pings (Konrad Rzeszutek ) [220246]
  - s390: inflate spinlock kabi (Jan Glauber ) [219871]
  - x86: Add panic on unrecovered NMI (Prarit Bhargava ) [220829]
  - ppc64: fix booting kdump env. w/maxcpus=1 on power5 (Jarod Wilson ) [207300]
  - netfilter: iptables stop fails because ip_conntrack cannot unload. (Thomas Graf ) [212839]
  - gfs: Fix gfs2_rename lock ordering (for local filesystem) (Wendy Cheng ) [221237]
  - GFS2: Fix ordering of page disposal vs. glock_dq (Steven Whitehouse ) [220117]
  - xen: fix nosegneg detection (Rik van Riel ) [220675]
  - mm: Fix for shmem_truncate_range() BUG_ON() (Larry Woodman ) [219821]
  - x86_64: enabling lockdep hangs the system (Don Zickus ) [221198]
  - dlm: change some log_error to log_debug (David Teigland ) [221326]
  - dlm: disable debugging output (David Teigland ) [221326]
  - fs: ext2_check_page denial of service (Eric Sandeen ) [217018]
  - CPEI - prevent relocating hotplug irqs (Kei Tokunaga ) [218520]
  - Networking: make inet->is_icsk assignment binary (Eric Paris ) [220482]
  - net: b44: phy reset problem that leads to link flap  (Neil Horman ) [216338]
  - autofs - fix panic on mount fail - missing autofs module update (Ian Kent ) [221118]
  - net: act_gact: division by zero (Thomas Graf ) [218348]
  - ppc64: Avoid panic when taking altivec exceptions from userspace. (David Woodhouse ) [220586]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2961.el5]
changelog:
  - new set of kabi whitelists (Jon Masters) [218682]
  - x86: remove unwinder patches from x86/x86_64 (Don Zickus ) [220238]
  - usb: disable ub and libusual (Pete Zaitcev ) [210026]
  - NetLabel: stricter configuration checking (Eric Paris ) [219393]
  - scsi: fix iscsi sense len handling (Mike Christie ) [217933]
  - Xen: emulate PIT channels for vbios support (Stephen C. Tweedie ) [215647]
  - VM: Fix nasty and subtle race in shared mmap'ed page writeback (Eric Sandeen ) [220963]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - NFS: system stall on NFS stress under high memory  pressure (Steve Dickson ) [213137]
  - netfilter: IPv6/IP6Tables Vulnerabilities (Thomas Graf ) [220483]
  - acpi: increase ACPI_MAX_REFERENCE_COUNT (Doug Chapman ) [217741]
  - Race condition in mincore can cause ps -ef to hang (Doug Chapman ) [220480]
  - Call init_timer() for ISDN PPP CCP reset state timer (Marcel Holtmann ) [220163]
  - Race condition concerning VLAPIC interrupts (Bhavana Nagendra ) [213858]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2943.el5]
changelog:
  - CIFS: Explicitly set stat->blksize (Steve Dickson ) [210608]
  - FS-Cache: dueling read/write processes fix (Steve Dickson ) [212831]
  - xen: Use swiotlb mask for coherent mappings too (Herbert Xu ) [216472]
  - ia64: Kexec, Kdump on SGI IA64 NUMA machines fixes (George Beshers ) [219091]
  - splice : Must fully check for fifos (Don Zickus ) [214289]
  - Xen: Fix potential grant entry leaks on error (Herbert Xu ) [217993]
  - e1000: truncated TSO TCP header with 82544, workaround (Herbert Xu ) [206540]
  - scsi: fix bus reset in qla1280 driver (George Beshers ) [219819]
  - scsi: add qla4032 and fix some bugs (Mike Christie ) [213807]
  - XFRM: Config Change Auditing (Eric Paris ) [209520]
  - Xen: ia64 guest networking finally works (Jarod Wilson ) [218895]
  - scsi structs for future known features and fixes (Mike Christie ) [220458]
  - squashfs fixup (Steve Grubb ) [219534]
  - ppc64: DLPAR virtual CPU removal failure - cppr bits (Janice M. Girouard ) [218058]
  - ia64: allow HP ZX1 systems to initalize swiotlb in kdump (Neil Horman ) [220064]
  - export tasklist_lock (David Howells ) [207992]
  - gfs2: Initialization of security/acls (Steven Whitehouse ) [206126]
  - x86: handle _PSS object range corectly in speedstep-centrino (Brian Maly ) [211690]
  - GFS2 change nlink panic (Wendy Cheng ) [215088]
  - scsi: fix oops in iscsi packet transfer path (Mike Christie ) [215381]
  - Fix Emulex lpfc ioctl on PPC (Tom Coughlan ) [219194]
  - Xen: Fix agp on x86_64 under Xen (Stephen C. Tweedie ) [217715]
  - Emulex lpfc update to 8.1.10.2 (Tom Coughlan ) [218243]
  - bluetooth: Add packet size checks for CAPI messages (Marcel Holtmann ) [219139]
  - x86_64: create Calgary boot knob (Konrad Rzeszutek ) [220078]
  - cciss bugfixes (Tom Coughlan ) [185021]
  - ia64: Do not call SN_SAL_SET_CPU_NUMBER twice on cpu 0 on booting (Erik Jacobson ) [219722]
  - scsi: Empty /sys/class/scsi_host/hostX/config  file (Janice M. Girouard ) [210239]
  - refresh: Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - update: Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2910.el5]
changelog:
  - xen: Update xen paravirt framebuffer to upstream protocol (fixes) (Stephen C. Tweedie ) [218048]
  - xen: Update xen paravirt framebuffer to upstream protocol (Stephen C. Tweedie ) [218048]
  - nfs: disable Solaris NFS_ACL version 2  (Steve Dickson ) [215073]
  - xen: EXPORT_SYMBOL(zap_page_range) needs to be moved (Stephen C. Tweedie ) [218476]
  - ppc64: disable unused drivers that cause oops on insmod/rmmod (Janice M. Girouard ) [206658]
  - scsi: GoVault not accessible due to software reset. (Konrad Rzeszutek ) [215567]
  - GFS2 fix DIO deadlock (Steven Whitehouse ) [212627]
  - dlm: fix lost flags in stub replies (David Teigland ) [218525]
  - CacheFiles: Improve/Fix reference counting (David Howells ) [212844]
  - gfs2: Fails back to readpage() for stuffed files (Steven Whitehouse ) [218966]
  - gfs2: Use try locks in readpages (Steven Whitehouse ) [218966]
  - GFS2 Readpages fix (part 2) (Steven Whitehouse ) [218966]
  - gfs2: Readpages fix  (Steven Whitehouse ) [218966]
  - bonding: Don't release slaves when master is admin down (Herbert Xu ) [215887]
  - x86_64: fix execshield randomization for heap (Brian Maly ) [214548]
  - x86_64: check and enable NXbit support during resume (Vivek Goyal ) [215954]
  - GPL export truncate_complete_page (Eric Sandeen ) [216545]
  - mm: reject corrupt swapfiles earlier (Eric Sandeen ) [213118]
  - QLogic qla2xxx - add missing PCI device IDs (Tom Coughlan ) [219350]
  - mpt fusion bugfix and maintainability improvements (Tom Coughlan ) [213736]
  - scsi: make fc transport removal of target configurable (Mike Christie ) [215797]
  - gfs2: don't try to lockfs after shutdown (Steven Whitehouse ) [215962]
  - xen: emulation for accesses faulting on a page boundary (Stephen C. Tweedie ) [219275]
  - gfs2: dirent format compatible with gfs1 (Steven Whitehouse ) [219266]
  - gfs2: Fix size caclulation passed to the allocator. (Russell Cattelan ) [218950]
  - ia64: PAL_GET_PSTATE implementation (Prarit Bhargava ) [184896]
  - CacheFiles: Handle ENOSPC on create/mkdir better (David Howells) [212844]
  - connector: exessive unaligned access (Erik Jacobson ) [218882]
  - revert: Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2876.el5]
changelog:
  - touch softdog during oops (Dave Jones ) [218109]
  - selinux: allow quoted commas for certain catagories in context mounts (Eric Paris ) [211857]
  - xen: oprofile on Intel CORE (Glauber de Oliveira Costa ) [213964]
  - Xen: make ballooning work right (xen part) (Rik van Riel ) [212069]
  - Xen: make ballooning work right (Rik van Riel ) [212069]
  - Xen: HVM crashes on IA32e SMP (Glauber de Oliveira Costa ) [214774]
  - gfs2: Fix uninitialised variable (Steven Whitehouse ) [219212]
  - GFS2: Don't flush everything on fdatasync (Steven Whitehouse ) [218770]
  - Disable PCI mmconf and segmentation on HP xw9300/9400 (Bhavana Nagendra ) [219159]
  - Audit: Add type for 3rd party, emit key for audit events (Eric Paris ) [217958]
  - Fix time skew on Intel Core 2 processors (Prarit Bhargava ) [213050]
  - Xen : Fix for SMP Xen guest slow boot issue on AMD systems (Bhavana Nagendra ) [213138]
  - GFS2: fix mount failure (Josef Whiter ) [218327]
  - cramfs: fix zlib_inflate oops with corrupted image (Eric Sandeen ) [214705]
  - xen: Fix xen swiotlb for b44 module (xen part) (Stephen C. Tweedie ) [216472]
  - xen: Fix xen swiotlb for b44 module (Stephen C. Tweedie ) [216472]
  - scsi: fix stex_intr signature (Peter Zijlstra ) [219370]
  - GFS2: Fix recursive locking in gfs2_permission (Steven Whitehouse ) [218478]
  - GFS2: Fix recursive locking in gfs2_getattr (Steven Whitehouse ) [218479]
  - cifs: Fix mount failure when domain not specified (Steve Dickson ) [218322]
  - GFS2: Fix memory allocation in glock.c (Steven Whitehouse ) [204364]
  - gfs2: Fix journal flush problem (Steven Whitehouse ) [203705]
  - gfs2: Simplify glops functions (Steven Whitehouse ) [203705]
  - gfs2: Fix incorrect fs sync behaviour (Steven Whitehouse ) [203705]
  - fix check_partition routines to continue on errors (David Milburn ) [210234]
  - fix rescan_partitions to return errors properly (David Milburn ) [210234]
  - gfs2: Tidy up bmap & fix boundary bug (Steven Whitehouse ) [218780]
  - Fix bmap to map extents properly (Steven Whitehouse ) [218780]
  - ide-scsi/ide-cdrom module load race fix (Alan Cox ) [207248]
  - dlm: fix receive_request lvb copying (David Teigland ) [214595]
  - dlm: fix send_args lvb copying (David Teigland ) [214595]
  - device-mapper mirroring - fix sync status change (Jonathan Brassow ) [217582]
  - Xen: Copy shared data before verification (Herbert Xu ) [217992]
  - s390: common i/o layer fixes (Jan Glauber ) [217799]
  - Spurious interrups from ESB2 in native mode (Alan Cox ) [212060]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2839.el5]
changelog:
  - Xen: fix xen/ia64/vti panic when config sets maxmem (Aron Griffis ) [214161]
  - Xen: ia64 making it work (Aron Griffis ) [210637]
  - Xen: upstream patches to make Windows Vista work (Steven Rostedt) [214780]
  - enable PCI express hotplug driver (Kei Tokunaga ) [207203]
  - d80211: kABI pre-compatibility (John W. Linville ) [214982]
  - Xen: ia64 kernel unaligned access (Aron Griffis ) [212505]
  - Xen: getting ia64 working; kernel part (Aron Griffis) [210637]
  - Xen: Properly close block frontend on non-existant file (Glauber de Oliveira Costa ) [218037]
  - SHPCHP driver doesn't work if the system was under heavy load (Kei Tokunaga ) [215561]
  - SHPCHP driver doesn't work in poll mode (Kei Tokunaga) [211679]
  - pciehp: free_irq called twice (Kei Tokunaga ) [216940]
  - pciehp: pci_disable_msi() called to early (Kei Tokunaga ) [216939]
  - pciehp: parallel hotplug operations cause kernel panic (Kei Tokunaga ) [216935]
  - pciehp: info messages are confusing (Kei Tokunaga ) [216932]
  - pciehp: Trying to enable already enabled slot disables the slot (Kei Tokunaga ) [216930]
  - CacheFiles: cachefiles_write_page() shouldn't indicate error twice (David Howells) [204570]
  - IPMI - allow multiple Baseboard Management Centers (Konrad Rzeszutek ) [212572]
  - nfs - set correct mode during create operation (Peter Staubach ) [215011]
  - Xen: blkback: Fix potential grant entry leaks on error (Rik van Riel ) [218355]
  - Xen: blkback: Copy shared data before verification (Rik van Riel) [217994]
  - revert: Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2817.el5]
changelog:
  - Adding in a kabi_whitelist (Jon Masters) [218402]
  - Xen: AMD-V HVM fix for Windows hibernate (Bhavana Nagendra ) [217367]
  - Xen: fix SMP HVM guest timer irq delivery (Rik van Riel ) [213138]
  - NetLabel: bring current with upstream: cleanup/future work (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: performance (Eric Paris ) [218097]
  - NetLabel: bring current with upstream: bugs (Eric Paris ) [218097]
  - TG3 support Broadcom 5756M/5756ME  Controller (John Feeney ) [213204]
  - tg3: BCM5752M crippled after reset (Andy Gospodarek ) [215765]
  - sata ata_piix map values (Geoff Gustafson ) [204684]
  - e1000: Reset all functions after a PCI error (Janice M. Girouard) [211694]
  - prevent /proc/meminfo's HugePages_Rsvd from going negative. (Larry Woodman ) [217910]
  - netlabel: disallow editing of ip options on packets with cipso options (Eric Paris ) [213062]
  - xen netback: Fix wrap to zero in transmit credit scheduler. (Herbert Xu ) [217574]
  - megaraid initialization fix for kdump (Jun'ichi Nick Nomura ) [208451]
  - HFS: return error code in case of error (Eric Paris ) [217009]
  - Xen: fix 2TB overflow in virtual disk driver (Rik van Riel ) [216556]
  - e1000: fix garbled e1000 stats (Neil Horman ) [213939]
  - dlm: use recovery seq number to discard old replies (David Teigland ) [215596]
  - dlm: resend lock during recovery if master not ready (David Teigland ) [215596]
  - dlm: check for incompatible protocol version (David Teigland ) [215596]
  - NetLabel: Do not send audit messages if audit is off (Eric Paris ) [216244]
  - selinux: give correct response to get_peercon() calls (Eric Paris ) [215006]
  - SELinux: Fix oops with non-mls policies (Eric Paris ) [214397]
  - Xen blkback: Fix first_sect check. (Rik van Riel ) [217995]
  - allow the highest frequency if bios think so. (Dave Jones ) [218106]
  - AGP corruption fixes. (Dave Jones ) [218107]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2789.el5]
changelog:
  - Xen: fix vcpu hotplug statistics (Rik van Riel ) [209534]
  - DLPAR and Hotplug not enabled (Janice M. Girouard ) [207732]
  - Reduce iommu page size to 4K on 64K page PPC systems (Janice M. Girouard) [212097]
  - e1000: add (2) device ids (Bruce Allan) [184864]
  - power6: illegal instruction errors during install (Janice M. Girouard) [216972]
  - update_flash is broken across PPC (Janice M. Girouard) [214690]
  - write failure on swapout could corrupt data (Peter Zijlstra) [216194]
  - IBM veth panic when buffer rolls over (Janice M. Girouard ) [214486]
  - Make the x86_64 boot gdt limit exact (Steven Rostedt ) [214736]
  - Xen: make netfront device permanent (Glauber de Oliveira Costa ) [216249]
  - lockdep: fix ide/proc interaction (Peter Zijlstra ) [210678]
  - Xen: fix iSCSI root oops on x86_64 xen domU (Rik van Riel ) [215581]
  - Fix flowi clobbering (Chris Lalancette ) [216944]
  - Enable netpoll/netconsole for ibmveth (Neil Horman ) [211246]
  - dlm: fix size of STATUS_REPLY message (David Teigland ) [215430]
  - dlm: fix add_requestqueue checking nodes list (David Teigland ) [214475]
  - dlm: don't accept replies to old recovery messages (David Teigland ) [215430]
  - x86_64: kdump mptable reservation fix  (Vivek Goyal ) [215417]
  - Add Raritan KVM USB dongle to the USB HID blacklist (John Feeney ) [211446]
  - Fix bogus warning in [un]lock_cpu_hotplug (Prarit Bhargava ) [211301]
  - Xen: Avoid touching the watchdog when gone for too long (Glauber de Oliveira Costa ) [216467]
  - add missing ctcmpc Makefile target (Jan Glauber ) [184608]
  - remove microcode size check for i386 (Geoff Gustafson ) [214798]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2769.el5]
changelog:
  - add the latest 2.6.18.4 security patches (Don Zickus) [217904]
  - revert: mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2767.el5]
changelog:
  - disable W1 config (Dave Jones ) [216176]
  - Xen netback: Reenable TX queueing and drop pkts after timeout (Herbert Xu ) [216441]
  - Xen: fix profiling (Rik van Riel ) [214886]
  - bnx2: update firmware to correct rx problem in promisc mode (Neil Horman ) [204534]
  - sound-hda: fix typo in patch_realtek.c (John W. Linville) [210691]
  - Fix sys_move_pages when a NULL node list is passed. (Dave Jones ) [214295]
  - proc: readdir race fix (Nobuhiro Tachino ) [211682]
  - device mapper: /sys/block/dm-* entries remain after removal (Milan Broz ) [214905]
  - Fix 64k page table problems on ppc specific ehca driver (Doug Ledford ) [199765]
  - configfs: mutex_lock_nested() fix (Eric Sandeen ) [211506]
  - CIFS: Explicitly set stat->blksize (Eric Sandeen ) [214607]
  - Compute checksum properly in netpoll_send_udp (Chris Lalancette ) [214542]
  - Noisy stack trace by memory hotplug on memory busy system (Kei Tokunaga ) [213066]
  - catch blocks beyond pagecache limit in __getblk_slow (Eric Sandeen ) [214419]
  - xen privcmd: Range-check hypercall index. (Herbert Xu ) [213178]
  - strange messages around booting and acpi-memory-hotplug (Kei Tokunaga) [212231]
  - Fix panic in CPU hotplug on ia64 (Prarit Bhargava ) [213455]
  - Fix spinlock bad magic when removing xennet device (Chris Lalancette ) [211684]
  - netlabel: various error checking cleanups (Eric Paris ) [210425]
  - mspec failures due to memory.c bad pte problem (Erik Jacobson ) [211854]
  - Fix autofs creating bad dentries in NFS mount (David Howells ) [216178]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2747.el5]
changelog:
  - Set HZ to 1000 for kernel and 250 for Xen (Don Zickus) [198594] 
  - Custom Diagnostics kernel module fails to load on RHEL5 (Janice Girouard) [213020] 
  - kernel: FS-Cache: error from cache: -105 (2nd part) (Don Zickus) [214678]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2746.el5]
changelog:
  - configure XPC as a loadable kernel module instead of static (Erik Jacobson) [213903] 
  - kernel BUG at drivers/xen/core/evtchn.c:482! (Glauber de Oliveira Costa) [210672] 
  - IPv6 MRT: 'lockdep' annotation is missing? (Thomas Graf) [209313] 
  - sort PCI device list breadth-first (John Feeney) [209484] 
  - reenable xen pae >4GB patch (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2744.el5]
changelog:
  - Kernel Panic on Initial boot of guest (Steven Rostedt) [211633] 
  - kernel unable to read partition (device busy) (Peter Zijlstra) [212191] 
  - QEMU always crashes (Don Zickus) [212625] 
  - kernel: FS-Cache: error from cache: -105 (Steve Dickson) [212831] 
  - DLM oops in kref_put when umounting (Patrick Caulfield) [213005] 
  - gfs umount hung, message size too big (Patrick Caulfield) [213289] 
  - CPU hotplug doesn't work trying to BSP offline (Keiichiro Tokunaga) [213324] 
  - status messages ping-pong between unmounted nodes (Dave Teigland) [213682] 
  - res_recover_locks_count not reset when recover_locks is aborted (Dave Teigland) [213684] 
  - disable CONFIG_ISA (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2740.el5]
changelog:
  - Remove support for ipw3945 driver (Don Zickus) [195534] 
  - acpiphp will not load due to unknown symbols (Prarit Bhargava) [209506] 
  - Can not install rhel5 b1 on ipr dasd. (Janice Girouard) [210851] 
  - Can't make SCTP connections between Xen guests (Don Zickus) [212550] 
  - eHEA update to support 64K pages for Power6 (Janice Girouard) [212041] 
  - Failure to boot second kernel on HP hardware (Don Zickus) [212578] 
  - dlm deadlock during simultaneous mount attempts (Dave Teigland) [211914] 
  - CMT-eligible ipw2200/2915 driver (John W. Linville) [184862] 
  - CVE-2006-5174 copy_from_user information leak on s390 (Jan Glauber) [213568] 
  - NFSv4: fs_locations support (Steve Dickson) [212352] 
  - [IPv6] irrelevant rules break ipv6 routing. (Thomas Graf) [209354] 
  - [IPv6] blackhole and prohibit rule types not working (Thomas Graf) [210216] 
  - [KEXEC] bad offset in icache instruction crashes Montecito systems (Jarod Wilson) [212643] 
  - assertion "FALSE" failed in gfs/glock.c (Dave Teigland) [211622] 
  - I/O DLPAR and Hotplug not enabled in RHEL5 (Janice Girouard) [207732]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2739.el5]
changelog:
  - SHPCHP driver doesn't work (Keiichiro Tokunaga) [210478] 
  - ext3/jbd panic (Eric Sandeen) [209647] 
  - Oops in nfs_cancel_commit_list (Jeff Layton) [210679] 
  - kernel Soft lockup detected on corrupted ext3 filesystem (Eric Sandeen) [212053] 
  - CIFS doesn't work (Steve Dickson) [211070]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2737.el5]
changelog:
  - Grant table operations unsuitable for guest domains (Rik van Riel) [210489] 
  - AMD-V HVM windows guest boot menu timer issue (Steven Rostedt) [209001] 
  - iflags.h is not upstream (Steve Whitehouse) [211583] 
  - ACPIPHP doesn't work (Keiichiro Tokunaga) [209677] 
  - IBMVSCSI does not correctly reenable the CRQ (Janice Girouard) [211304] 
  - librdmacm-utils failures (Doug Ledford) [210711] 
  - Badness in debug_mutex_unlock at kernel/mutex-debug.c:80 (Janice Girouard) [208500] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173, 211604]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2736.el5]
changelog:
  - Can't unload gnbd module, 128 references (Peter Zijlstra) [211905]
  - ddruid does not recognize dasd drives (Peter Zijlstra) [210030]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2732.el5]
changelog:
  - possible recursive locking detected: cachefilesd (David Howells) [204615] 
  - Stratus memory tracking functionality needed in RHEL5 (Kimball Murray) [209173] 
  - nfs handled rpc error incorrectly (Steve Dickson) [207040] 
  - cachefiles: inode count maintance (Steve Dickson) [209434] 
  - mkinitrd: iSCSI root requires crc32c module (Mike Christie) [210232] 
  - implemented sysrq-w to dump all cpus (Larry Woodman) 
  - enable panic_on_oops (Dave Anderson) 
  - re-enable x86_64 stack unwinder fixes (Don Zickus) 
  - disable kernel debug flags (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2728.el5]
changelog:
  - Update FC transport and Emulex lpfc Fibre Channel Driver (Tom Coughlan) [207551] 
  - NFSv4 using memory after its freed fix (Steve Dickson) [206996] 
  - GFS2 dirents are 'unkown' type (Steve Whitehouse) [210493] 
  - Cachefs double unlock (Steve Dickson) [210701] 
  - tty locking cleanup (Prarit Bhargava) [210249] 
  - ibmveth fails in kdump boot (Janice Girouard - IBM on-site partner) [199129] 
  - Kpobes backport from 2.6.19-rc1 (Anil S Keshavamurthy) [210555] 
  - Ia64 - kprobe opcode must reside on 16 bytes alignment (Anil S Keshavamurthy) [210552] 
  - GFS2 forgets to unmap pages (Steve Whitehouse) [207764] 
  - DIO needs to avoid using page cache (Jeffrey Moyer) [207061] 
  - megaraid_sas: update (Chip Coldwell) [209463] 
  - NFS data corruption (Steve Dickson) [210071] 
  - page align bss sections on x86_64 (Vivek Goyal) [210499] 
  - blkbk/netbk modules don't load (Aron Griffis) [210070] 
  - blktap does not build on ia64 (Aron Griffis) [208895] 
  - blkbk/netbk modules don't load (Rik van Riel) [202971] 
  - patches from xen-ia64-unstable (Rik van Riel) [210637] 
  - Xen version strings need to reflect exact Red Hat build number (Stephen Tweedie) [211003] 
  - updated to 2.6.18.1 stable series (Don Zickus) 
  - updated execshield patch (Don Zickus) 
  - revert CONFIG_PCI_CALGARY_IOMMU config (Don Zickus) 
  - disable CONFIG_MAMBO (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2727.el5]
changelog:
  - I/O errors with dm-multipath when adding new path (Alasdair Kergon) [169302] 
  - Kdump on i386 fails - Second kernel panics (Vivek Goyal) [207598] 
  - patch to qla4xxx for supporting ioctl module (Mike Christie) [207356] 
  - lockdep fixes (Peter Zijlstra) [208165 209135 204767] 
  - printk cleanup (Dave Jones) 
  - spec file cleanup (Dave Jones, Bill Nottingham) 
  - gfs-dlm fix (Patrick Caulfield) 
  - find-provides fix (Jon Masters)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2726.el5]
changelog:
  - need to disable all cpu frequency scaling drivers in Xen kernel (Rik van Riel) [210336 208942] 
  - radeon hangs DMA when CONFIG_CALGARY_IOMMU is build in kernel. (Konrad Rzeszutek) [210380] 
  - Got Call Trace message when remove veth module (Janice Girouard) [208938] 
  - cannot generate kABI deps unless kernel is installed (Jon Masters) [203926] 
  - ctcmpc driver (Jan Glauber) [184608] 
  - PTRACE_DETACH doesn't deliver signals under utrace. (Aristeu S. Rozanski F.) [207674] 
  - SG_SCATTER_SZ causing Oops during scsi disk microcode update (Doug Ledford) [207146] 
  - ia64 kprobe fixes (David Smith)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2725.el5]
changelog:
  - Duplicate dput in sysfs_update_file can cause a panic. (Prarit Bhargava) [209454] 
  - Lock issue with 2.6.18-1.2702.el5, NetworkManager and ipw3945 (John W. Linville) [208890] 
  - cpqarray module fails to detect arrays (Chip Coldwell) [205653] 
  - stex.c driver for Promise SuperTrak EX is missing (Jeff Garzik) [209179] 
  - NetLabel does not audit configuration changes (Eric Paris) [208456] 
  - NetLabel has a race problem in the cache (Eric Paris) [209324] 
  - kernel/lockdep.c:1814/trace_hardirqs_on() (Not tainted) for APM (Peter Zijlstra) [209480] 
  -  correct netlabel secid for packets without a known label (Eric Paris) [210032] 
  - IPSec information leak with labeled networking (Eric Paris) [209171] 
  - NetLabel hot-add memory confict pre-beta2 kenrel x86_64 (Konrad Rzeszutek) [208445] 
  - NFS data corruption (Steve Dickson) [210071] 
  - kernel dm multipath: ioctl support (Alasdair Kergon) [207575] 
  - kernel dm: fix alloc_dev error path (Alasdair Kergon) [209660] 
  - kernel dm snapshot: fix invalidation ENOMEM (Alasdair Kergon) [209661] 
  - kernel dm snapshot: chunk_size parameter is not required after creation (Alasdair Kergon) [209840] 
  - kernel dm snapshot: fix metadata error handling (Alasdair Kergon) [209842] 
  - kernel dm snapshot: fix metadata writing when suspending (Alasdair Kergon) [209843] 
  - kernel dm: full snapshot removal attempt causes a seg fault/kernel bug (Alasdair Kergon) [204796] 
  - dm mirror: remove trailing space from table (Alasdair Kergon) [209848] 
  - kernel dm: add uevent change event on resume (Alasdair Kergon) [209849] 
  - kernel dm crypt: Provide a mechanism to clear key while device suspended (Milan Broz) [185471] 
  - kernel dm: use private biosets to avoid deadlock under memory pressure (Alasdair Kergon) [209851] 
  - kernel dm: add feature flags to structures for future kABI compatibility (Alasdair Kergon) [208543] 
  - kernel dm: application visible I/O errors with dm-multipath and queue_if_no_path when adding new path (Alasdair Kergon) [169302] 
  - refresh ia64-kexec-kdump patch (Don Zickus) 
  - update exec-shield patch (Don Zickus) 
  - revert x86 unwinder fixes (Don Zickus)


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2722.el5]
changelog:
  - update utrace patch to fix s390 build problems
  - ia64 hotswap cpu patch fixes to compile under xen
  - ia64 export fixes


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2718.el5]
changelog:
  - Audit Filtering on PPID for = and != is inverted (Eric Paris) [206425] 
  - Adding Hitachi SANRISE entries into SCSI white list (Chip Coldwell) [206532] 
  - forward port of SCSI blacklist from RHEL4 (Chip Coldwell) [208256] 
  - Need to add ALSA support for Broadwater platform (John W. Linville) [184855] 
  - /proc/<pid>/smaps doesn't give any data (Alexander Viro) [208589] 
  - ACPI based CPU hotplug causes kernel panic (Keiichiro Tokunaga) [208487] 
  - New infiniband 12x power driver opensourced from IBM (Janice Girouard) [184791] 
  - iscsi oops when connection creation fails (Mike Christie) [209006] 
  - nommconf work-around still needed for AMD chipsets (Jim Baker) [207396] 
  - ProPack XPMEM exported symbols (Greg Edwards) [206215] 
  - PCI error recovery bug in e100 and e1000 cards (John W. Linville) [208187] 
  - / on raid fails to boot post-install system (Jan Glauber) [196943] 
  - auditctl fails to reject malformed ARCH filter (Eric Paris) [206427] 
  - oom-killer updates (Larry Woodman) [208583] 
  - NFS is revalidating directory entries too often (Steve Dickson) [205454] 
  - kernel-xen cannot reboot (Stephen Tweedie) [209841] 
  - Unsupported FS's in RHEL 5 Beta 1 (Don Zickus) [206486]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2715.el5]
changelog:
  - RDTSCP Support (Bhavana Nagendra) [185057] 
  - s390 kprobe on larl instruction crashes system (Jan Glauber) [205738] 
  - single stepping is broken when kprobes is configured (Jan Glauber) [205739] 
  - autofs kernel patches resulting from Connectathon testing (Ian Kent) [206952] 
  - Include the qla3xxx networking driver (Konrad Rzeszutek) [208182] 
  - overzealous sanity checking in sys_poll() (Chris Snook) [204705] 
  - automounter cannot shutdown when timeout=0 (Ian Kent) [205836] 
  - Rewrite of journaling data commit code (Eric Sandeen) [207739] 
  - qla4xxx soft lockup when ethernet cable disconnected (Mike Christie) [206063] 
  - hypfs_kill_super() check for initialized root inode (Jan Glauber) [207717] 
  - The Matrox graphics driver is not built (Janice Girouard) [207200]


author: Don Zickus <dzickus@redhat.com> [2.6.18-1.2714.el5]
changelog:
  - Wrong SELinux context prevents hidd from working (David Woodhouse) [204655] 
  - nfs connectathon component basic test 6 fails.... (Steve Dickson) [208637] 
  - unstick STICKY bit to fix suspend/resume (Dave Jones)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - s390 ccs/ccw subsystem does not have proper uevent support (Pete Zaitcev) [199994] 
  - 'Cannot allocate memory' when cat /proc/scsi/scsi (Chip Coldwell) [200299] 
  - Add support for Kirkwood and Kirkwood LP NICs (John W. Linville) [207776] 
  - remove userspace support from qla4xxx (Mike Christie) [206063] 
  - NetLabel interface has changed in the upstream kernels (Eric Paris) [208119] 
  - lockdep fixes (Peter Zijlstra) [208304 204795]


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Multiple routing tables for IPv6 (Thomas Graf) [179612] 
  -bunch of lockdep fixes (Peter Zijlstra) [200520 208294 208293 208292 208290] 
  -rearrange the cachefs patches for easier future maintance (Steve Dickson) 
  -enable some TCP congestion algorithms (David Miller) 
  -add a test patch (Eric Paris)


author: Don Zickus <dzickus@redhat.com>
changelog:
  -Native SAS and SATA device support - SATA/IDE converter (Janice Girouard) [196336] 
  -kernel unaligned access messages in rhel5a1 (Prarit Bhargava) [198572] 
  -problems with LUNs mapped at LUN0 with iscsi and netapp filers (Mike Christie) [205802] 
  -ext3 fails to mount a 16T filesystem due to overflows (Eric Sandeen) [206721] 
  -possible recursive locking detected - swapper/1 (Peter Zijlstra) [203098] 
  -FS-Cache: error from cache: -28 (David Howells) [204614] 
  -aic94xx driver does not recognise SAS drives in x366 (Konrad Rzeszutek) [206526] 
  -Support for 3945 driver (John W. Linville) [195534] 
  -Memory Hotplug fails due to relocatable kernel patches (Vivek Goyal) [207596] 
  -Potential overflow in jbd for filesystems > 8T (Eric Sandeen) [208024] 
  -2,4-node x460 halts during bootup after installation (Konrad Rzeszutek) [203971]


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix PowerPC audit syscall success/failure check (#204927)
  - Remove offsetof() from <linux/stddef.h> (#207569)
  - One line per header in Kbuild files to reduce conflicts
  - Fix visibility of ptrace operations on ppc32
  - Fix ppc32 SECCOMP


author: Dave Jones <davej@redhat.com>
changelog:
  - reiserfs: make sure all dentry refs are released before
    calling kill_block_super
  - Fix up some compile warnings


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV printf rate limit (rostedt).
  - xen HV update to xen-unstable cset11540:9837ff37e354
  - xen-update:
    * linux-2.6 changeset:   34294:dc1d277d06e0
    * linux-2.6-xen-fedora changeset:   36184:47c098fdce14
    * xen-unstable changeset:   11540:9837ff37e354


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update to 2.6.18-rc7-git4.
    * linux-2.6 changeset: 34288:3fa5ab23fee7
    * linux-2.6-xen-fedora changeset: 36175:275f8c0b6342
    * xen-unstable changeset: 11486:d8bceca5f07d


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen update:
    * linux-2.6 changeset: 34228:ea3369ba1e2c
    * linux-2.6-xen-fedora changeset: 36107:47256dbb1583
    * linux-2.6-xen changeset: 22905:d8ae02f7df05
    * xen-unstable changeset: 11460:1ece34466781ec55f41fd29d53f6dafd208ba2fa


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Implement futex primitives on IA64 and wire up [gs]et_robust_list again
    (patch from Jakub, #206613)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - add include/asm-x86_64/const.h to exported header file list
    used by the x86 relocatable patch (inside include/asm-x86_64/page.h)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - sync up beta1 fixes and patches
     - includes infiniband driver
     - aic9400/adp94xx updates
     - squashfs s390 fix
  - include x86 relocatable patch at end of list
  - some /proc/kcore changes for x86 relocatable kernel


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - 2.6.18rc7-git1
  - header file fixups
  - use correct arch for 'make headers_install' when cross-building


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xenoprof upstream fix.
  - update xen HV to cset 11394.
  - xen update (3hypercall incompatibility included)
  - linux-2.6 changeset: 34073:b1d36669f98d
  - linux-2.6-xen-fedora changeset: 35901:b7112196674e
  - xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29
  - fix ia64 (xen & net xen).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen-hv to cset 11256 (pre 3 hypercall breakage).
  - remove debug=y from HV compilation.
  - xen update (pre 3 hypercall breakage)
    * linux-2.6 changeset: 33957:421a6d428e95
    * linux-2.6-xen-fedora changeset: 35756:78332fcbe5b0
    * xen-unstable changeset: 11251:5fc1fe79083517824d89309cc618f21302724e29
    * get new irqflags code from linux-2.6.tip-xen.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - update xen HV to xen-unstable cset 11251.
  - fix ia64 xen HV compilation.
  - linux xen kernel update:
    * linux-2.6 changeset: 33681:2695586981b9
    * linux-2.6-xen-fedora changeset: 35458:b1b8e00e7a17
    * linux-2.6-xen changeset: 22861:0b726fcb6780
    * xen-unstable changeset: 11204:5fc1fe79083517824d89309cc618f21302724e29


author: Don Zickus <dzickus@redhat.com>
changelog:
  - update utrace
  - more gfs2-dlm fixes
  - fix xen-devel build directory issue
  - add x86, x86_64 relocatable kernel patch for rhel only (davej, forgive my sins)
    - applied xen relocatable cleanup on top of it
  - add ia64 kexec/kdump pieces


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update GFS2 patch (from swhiteho)
  - Enable kernel-headers build
  - Enable i386 build _only_ for kernel-headers


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Another lockdep-fix
  - NFS fix for the connectathon test
  - Enable mmtimer for ia64
  - Add support for iscsi qla4xxx


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen kernel update.
    * linux-2.6 changeset: 33525:dcc321d1340a
    * linux-2.6-xen-fedora changeset: 35247:400b0cf28ee4
    * linux-2.6-xen changeset: 22813:80c2ccf5c330
    * xen-unstable changeset: 11069:0340e579f06544431e915d17596ac144145a077e
  - xen big config update.  Every config option is the same than normal kernel
    except MICROCODE, TCG_TPM & CONFIG_DEBUG_SLAB.
  - disable XEN_FRAMEBUFFER & XEN_KEYBOARD.
  - make sysrq c to "crash" all kernels.


author: Don Zickus <dzickus@redhat.com>
changelog:
  - NFS 64-bit inode support
  - QLogic firmware
  - SELinux support for range transitions
  - EHEA ethernet driver
  - ppc irq mapping fix


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - Fix s390 single-step for real this time.
    - Revamp how arch code defines ptrace compatibility.


author: Dave Jones <davej@redhat.com>
changelog:
  - Update to squashfs 3.1 which should fix stack overflows seen
    during installation.
  - Merge framebuffer driver for OLPC.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable ia64 xen again.
  - xen kernel-update linux-2.6-xen-fedora cset 35236:70890e6e4a72.
    * fix ia64 compilation problems.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable ia64 xen, it doesn't compile.
  - xen HV update cset 11057:4ee64035c0a3
    (newer than that don't compile on ia64).
  - update linux-2.6-xen patch to fix sort_regions on ia64.
  - fix %setup for xen HV to work at xen HV upgrades.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - xen HV update cset 11061:80f364a5662f.
  - xen kernel update
    * linux-2.6-xen-fedora cset
    * linux-2.6-xen cset 22809:d4b3aba8876df169ffd9fac1d17bd88d87eb67c5.
    * xen-unstable 11060:323eb29083e6d596800875cafe6f843b5627d77b
    * Integrate xen virtual frame buffer patch.
    * Enable CONFIG_CRASH on xen.


author: Dave Jones <davej@redhat.com>
changelog:
  - Another lockdep fix for networking.
  - Change some hotplug PCI options.
  - Daily update from GregKH's git tree.
  - Unbreak SMP locking in oprofile.
  - Fix hotplug CPU locking in workqueue creation.
  - K8 EDAC support.
  - IPsec labelling enhancements for MLS
  - Netlabel: CIPSO labeled networking


author: Roland McGrath <roland@redhat.com>
changelog:
  - New utrace patch:
    - fix s390 single-step
    - first third of ia64 support, enable CONFIG_UTRACE (no ptrace yet)


author: Juan Quintela <quintela@anano.mitica>
changelog:
  - Update linux-2.6-xen patch.
    * linux-2.6-xen-fedora cset 34931:a3fda906fb82
    * linux-2.6-xen cset 22777:158b51d317b76ebc94d61c25ad6a01d121dff750
    * xen-unstable cset  10866:4833dc75ce4d08e2adc4c5866b945c930a96f225


author: Jon Masters <jcm@redhat.com>
changelog:
  - Copy .config to include/config/auto.conf to avoid unnecessary "make prepare".
  - This should finally fix #197220.
  - Pulled in patch-2.6.18-rc3-git2.bz2.sign to fix SRPM build failure.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc3-git2
  - Readd patch to allow 460800 baud on 16C950 UARTs.
  - Fix backtracing for interrupt stacks


author: Dave Jones <davej@redhat.com>
changelog:
  - s390 kprobes support.
  - Fix oops in libata ata_device_add()
  - Yet more fixes for lockdep triggered bugs.
  - Merge numerous patches from -mm to improve software suspend.
  - Fix incorrect section usage in MCE code that blew up on resume.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable blktap for xen-ia64 (don't compile).
  - enable ia64-xen (it compiles, but still don't boot).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Update xen patch to linux-2.6-xen-fedora cset 34801.
  	* linux-2.6 cset 33175
  	* no linux-2.6-xen updates.
  - Remove xen x86_64 8 cpu limit.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - review all xen related patches.
  - x86_64 dom0, x86_64 domU and i386 domU should work.
  - fix xen i386 dom0 boot (#200382).


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Workaround the huge timeouts problems on xen HV x86.
  - xen update and cleanup/reorgatization of xen patches.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.18rc2-git2 & git3
  - Fix PI Futex exit crash.
  - Fix an inotify locking bug.
  - Add device mapper mirroring patches.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - Patch from jakub to use sysv style hash for VDSO to fix booting
    on ia64 (#199634, #199595)
  - Fix e1000 crc calculation for things to work with xen
  - Update gfs2 patchset


author: Roland McGrath <roland@redhat.com>
changelog:
  - Clean up spec changes for debuginfo generation to cover Xen case.
  - New version of utrace patch, fixes /proc permissions. (#199014)


author: Don Zickus <dzickus@redhat.com>
changelog:
  - Add in support for nfs superblock sharing and cachefs
    patches from David Howells
  - Disable 'make prepare' hack as it is breaking ppc symlinks
  - Added tracking dirty pages patch from Peter Zijlstra
  - Fix for Opteron timer scaling
  - Fix for Calgary pci hang


author: Juan Quintela <quintela@redhat>
changelog:
  - big xen patch.
  - enable xen again.
  - redo xen config.
  - i686 kernel for xen uses PAE now.
  - new xen Hypervisor cset 10711.


author: Jon Masters <jcm@redhat.com>
changelog:
  - Check in new version of kabitool for kernel deps.
  - Fix kabitool for correct location of symvers.
  - Various other fixes when things broke.


author: Dave Jones <davej@redhat.com>
changelog:
  - Support up to 4GB in the 586 kernel again.
  - Drop the FPU optimisation, it may be the reason for
    strange SIGFPE warnings various apps have been getting.


author: Dave Jones <davej@redhat.com>
changelog:
  - Cleaned up a bunch of bogons in the config files.
  - 2.6.18-rc1-git9,git10 & 2.6.18-rc2
  - improvements to linked list debugging.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Temporarily disable -headers subpackage until the problems which
    arise from brew not using older package are dealt with.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - No headers subpackage for noarch build
  - Fix PI-futexes to be properly unlocked on unexpected exit


author: Dave Jones <davej@redhat.com>
changelog:
  - Add sleazy fpu optimisation.   Apps that heavily
    use floating point in theory should get faster.


author: Dave Jones <davej@redhat.com>
changelog:
  - Add lockdep annotate for bdev warning.
  - Enable autofs4 to return fail for revalidate during lookup


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-git10 & git11
  - Enable fake PCI hotplug driver. (#190437)
  - Remove lots of 'modprobe loop's from specfile.


author: Dave Jones <davej@redhat.com>
changelog:
  - Enable profiling for 586 kernels.
  - 2.6.17-git6 & git7
    This required lots of rediffing. SATA suspend, Promise PATA-on-SATA,
    Xen, exec-shield, and more.  Tread carefully, harmful if swallowed etc.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen0/xenU/xen0-PAE/xenU-PAE packages
  - disable xen PAE kernel for i386 for now
  - create xen-PAE kernel
  - remove %requires xen from xen kernels


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17-rc6-git2
  - Add MyMusix PD-205 to the unusual USB quirk list.
  - Silence noisy unimplemented 32bit syscalls on x86-64.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase xen to linux-2.6 cset 27412
  - rebase xen to linux-2.6-xen cset 22608
  - rebase HV cset 10314


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc6. Special 6/6/6 edition, what could go wrong?
  - Add a kdump kernel for PPC64 (Don Zickus)
  - Enable SCHED_STATS


author: Dave Jones <davej@redhat.com>
changelog:
  - Do PCI config space restore on resume in reverse.
  - Make Powernow-k7 work again.
  - Fix the setuid /proc/self/maps fix (#165351, #190128)


author: Juan Quintela <quintela@redhat.com>
changelog:
  - disable PAE for now
  - update xen HV to xen-unstable cset 10243
  - rebase xen-patch to linux-2.6-xen cset 22568
  - rebase xen-patch to linux-2.6 cset 27329


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc5-git5
  - autofs4: spoof negative dentries from mount fails on browseable
    indirect map mount points
  - Make acpi-cpufreq sticky.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - enable xen PAE kernels for testing.
  - rebase xen patch (linux-2.6-xen cset 22558, linux-2.6 cset 27227)


author: Juan Quintela <quintela@redhat.com>
changelog:
  - remove xen-irq-patch included upstream.
  - rebase xen hipervisor to xen-unstable cset 10140.
  - rebase xen patch linux-2.6-xen cset 22552.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Fix #190776 by rediffing the patch so it actually gets applied properly
  - Fix the machine check too.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Remove bcm43xx-assoc-on-startup patch. I don't think the original
    problem is fixed upstream yet, but this patch causes BZ #190776.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - rebase on linux-2.6 & linux-2.6-xen as of May,1st.
  - new HV from xen-unstable as of 20060428.
  - fixed the binaries included on xen tarball :p


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Disable Xen on the basis that it doesn't build
  - Check for Xen tarball being unclean, abort early even on i386.


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Remove figlet by hand again.
  - Enable xen again
  - rebase linux-2.6-xen linux-2.6-xen
  - fix & enable xenoprof


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Don't include /usr/include/scsi in kernel-headers for now, because
    glibc ships those for itself. Update header cleanup patches so that
    glibc actually builds against the resulting headers


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc2
  - 2.6.17rc1-git13
  - Enable DECNET to keep both users happy. (#120628)
  - Enable TPM modules. (#189020)
  - Enable some SGI specific ia64 options. (#188915)
  - Add missing -kdump %preuninstall (#189100)


author: Juan Quintela <quintela@redhat.com>
changelog:
  - Enable xen again.
  - Update xen hypervisor to cset 9638.
  - Update xen patch to linux-2.6.tip-xen.hg cset 26602.
  - Remove/rediff lots of patches.
  - x86_64 xen don't work, fixing that.


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.17rc1-git2 & git3
  - Enable SMP on all x86 kernels.
    SMP_ALTERNATIVES disables the spinlocks etc at runtime.
  - setuid /proc/self/maps fix (#165351)


author: Dave Jones <davej@redhat.com>
changelog:
  - Reenable non-standard serial ports. (#187466)
  - Reenable snd-es18xx for x86-32 (#187733)
  - Map x86 kernel to 4MB physical address.


author: David Woodhouse <dwmw2@redhat.com>
changelog:
  - Update the bcm43xx driver to make it work nicely with initscripts
    and NetworkManager without user intervention.
  - Fix Tux build


author: Dave Jones <davej@redhat.com>
changelog:
  - 2.6.16 & 2.6.16-git1
  - Tux 2.6.16-A0 (Just rediffing)
  - Update Ingo's latency tracer patch.
  - Update exec-shield to Ingo's latest.
    (Incorporates John Reiser's "map the vDSO intelligently" patch
     which increases the efficiency of prelinking - #162797).
  - ACPI ecdt uid hack. (#185947)


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.15.1.el5]
changelog:
  - [net] sctp: backport cleanups for ootb handling V2 (Neil Horman) [555666 555667] {CVE-2010-0008}
  - Reverting: [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.14.1.el5]
changelog:
  - [fs] ext4: Avoid null pointer dereference when decoding EROFS w/o a journal (Jiri Pirko) [547256 547257] {CVE-2009-4308}
  - [net] sctp: backport cleanups for ootb handling (Neil Horman) [555666 555667] {CVE-2010-0008}
  - [mm] fix sys_move_pages infoleak (Eugene Teo) [562589 562590] {CVE-2010-0415}
  - [x86_64] wire up compat sched_rr_get_interval (Danny Feng) [557684 557092]
  - [net] netfilter: enforce CAP_NET_ADMIN in ebtables (Danny Feng) [555242 555243] {CVE-2010-0007}
  - [misc] fix kernel info leak with print-fatal-signals=1 (Danny Feng) [554583 554584] {CVE-2010-0003}
  - [net] ipv6: fix OOPS in ip6_dst_lookup_tail (Thomas Graf) [559238 552354]
  - [kvm] pvclock on i386 suffers from double registering (Glauber Costa) [561454 557095]
  - [pci] VF can't be enabled in dom0 (Don Dutile) [560665 547980]
  - [kvm] kvmclock won't restore properly after resume (Glauber Costa) [560640 539521]
  - [mm] prevent performance hit for 32-bit apps on x86_64 (Larry Woodman) [562746 544448]
  - [fs] fix possible inode corruption on unlock (Eric Sandeen) [564281 545612]
  - [gfs2] careful unlinking inodes (Steven Whitehouse ) [564288 519049]
  - [gfs2] gfs2_delete_inode failing on RO filesystem (Abhijith Das ) [564290 501359]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.13.1.el5]
changelog:
  - [net] e1000e: fix broken wol (Andy Gospodarek) [559335 557974]
  - [net] gro: fix illegal merging of trailer trash (Herbert Xu) [561417 537876]
  - [xen] hook sched rebalance logic to opt_hardvirt (Christopher Lalancette ) [562777 529271]
  - [xen] crank the correct stat in the scheduler (Christopher Lalancette ) [562777 529271]
  - [xen] whitespace fixups in xen scheduler (Christopher Lalancette ) [562777 529271]
  - [scsi] cciss: ignore stale commands after reboot (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: version change (Tomas Henzl ) [562772 525440]
  - [scsi] cciss: switch to using hlist (Tomas Henzl ) [562772 525440]
  - [net] bonding: allow bond in mode balance-alb to work (Jiri Pirko ) [560588 487763]
  - [net] e1000e: fix WoL on 82577/82578 (Jiri Pirko ) [543449 517593]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.12.1.el5]
changelog:
  - [net] e1000: fix rx length check errors (Neil Horman) [552137 552138] {CVE-2009-4536}
  - Revert: [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550914 550915]
  - [fs] jbd: fix race in slab creation/deletion (Josef Bacik) [553132 496847]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.11.1.el5]
changelog:
  - [firewire] ohci: handle receive packets with zero data (Jay Fenlason) [547241 547242] {CVE-2009-4138}
  - [x86] sanity check for AMD northbridges (Andrew Jones) [549905 547518]
  - [x86_64] disable vsyscall in kvm guests (Glauber Costa) [550968 542612]
  - [fs] ext3: replace lock_super with explicit resize lock (Eric Sandeen) [549908 525100]
  - [fs] respect flag in do_coredump (Danny Feng) [544188 544189] {CVE-2006-6304}
  - [gfs2] make O_APPEND behave as expected (Steven Whitehouse) [547521 544342]
  - [fs] hfs: fix a potential buffer overflow (Amerigo Wang) [540740 540741] {CVE-2009-4020}
  - [fuse] prevent fuse_put_request on invalid pointer (Danny Feng) [538736 538737] {CVE-2009-4021}
  - [mm] call vfs_check_frozen after unlocking the spinlock (Amerigo Wang) [548370 541956]
  - [infiniband] init neigh->dgid.raw on bonding events (Doug Ledford) [543448 538067]
  - [scsi] gdth: prevent negative offsets in ioctl (Amerigo Wang) [539420 539421] {CVE-2009-3080}
  - [fs] gfs2: fix glock ref count issues (Steven Whitehouse) [544978 539240]
  - [net] call cond_resched in rt_run_flush (Amerigo Wang) [547530 517588]
  - [scsi] megaraid: fix sas permissions in sysfs (Casey Dahlin) [537312 537313] {CVE-2009-3889 CVE-2009-3939}
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542582 515753]
  - [x86] kvm: don't ask HV for tsc khz if not using kvmclock (Glauber Costa ) [537027 531268]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [x86_64] fix 32-bit process register leak (Amerigo Wang ) [526797 526798]
  - [cpufreq] add option to avoid smi while calibrating (Matthew Garrett ) [537343 513649]
  - [kvm] use upstream kvm_get_tsc_khz (Glauber Costa ) [540896 531025]
  - [net] fix unbalance rtnl locking in rt_secret_reschedule (Neil Horman ) [549907 510067]
  - [net] r8169: imporved rx length check errors (Neil Horman ) [550914 550915] {CVE-2009-4537}
  - [scsi] lpfc: fix FC ports offlined during target controller faults (Rob Evers ) [549906 516541]
  - [net] emergency route cache flushing fixes (Thomas Graf ) [545662 545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng ) [548656 548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan ) [537317 537318] {CVE-2009-3556}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.10.1.el5]
changelog:
  - [net] e1000, r9169: fix rx length check errors (Cong Wang ) [550914 550915]
  - [net] e1000e: fix rx length check errors (Amerigo Wang ) [551222 551223]
  - [net] ipv6: fix ipv6_hop_jumbo remote system crash (Amerigo Wang ) [548642 548643] {CVE-2007-4567}


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-5
changelog:
  - Remove unneeded changes on QE request
  - Note: still includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)
  - Resolves: RHBZ #478419 (Improve fairness)


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-4
changelog:
  - Restore ^C handling inadvertently disabled in fairness fix
  - Note: previous version (4.5.18-3) includes fixes for these bugs:
  - Resolves: RHBZ #471169 (incorrent formatting of fcntl64() on32/64 system)
  - Resolves: RHBZ #472053 (SIGKILL might be improperly traced)


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-3
changelog:
  - Partial sync up with upsteam #1: whitespace changes
  - Partial sync up with upsteam #2: trivial changes (comments etc)
  - Partial sync up with upsteam #3: flock reporting, fix network ops selection
  - Resolves: RHBZ #471169
  - Partial sync up with upsteam #4: support -D option, blackfin cpu support
  - Partial sync up with upsteam #5: update SIGKILL detection machinery
  - Resolves: RHBZ #472053
  - Improve fairness - do not allow a few threads to usurp strace's attention
  - Resolves: RHBZ #478419


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2.el5.1
changelog:
  - Fix the case where we did not nicely report that traced process
    disappeared (SIGKILL etc) while we were examining its state.
  - Resolves: RHBZ #472053


author: Denys Vlasenko <dvlasenk@redhat.com> - 4.5.18-2
changelog:
  - Fix "strace -s N sets string size to N+1" problem (patch by Jeff Bastian)
  - Resolves: RHBZ #467776


author: Roland McGrath <roland@redhat.com> - 4.5.18-1
changelog:
  - build fix for newer kernel headers (#457291)
  - fix CLONE_VFORK handling (#455078)
  - Support new Linux/PPC system call subpage_prot and PROT_SAO flag.
  - In sigaction system call, display sa_flags value along with SIG_DFL/SIG_IGN.
  - Resolves: RHBZ #455874, RHBZ #452501, RHBZ #453438
  - Resolves: RHBZ #454431, RHBZ #455088, RHBZ #445849, RHBZ #435444


author: Roland McGrath <roland@redhat.com> - 4.5.17-1
changelog:
  - handle O_CLOEXEC, MSG_CMSG_CLOEXEC (#365781)
  - fix biarch stat64 decoding (#222275)
  - fix spurious "..." in printing of environment strings (#358241)
  - improve prctl decoding (#364401)
  - fix hang wait on exited child with exited child (#354261)
  - fix biarch fork/vfork (-f) tracing (#447475)
  - fix biarch printing of negative argument kill (#430585)
  - fix biarch decoding of error return values (#447587)
  - fix -f tracing of CLONE_VFORK (#455078)
  - fix ia64 register clobberation in -f tracing (#453438)
  - print SO_NODEFER, SA_RESETHAND instead of SA_NOMASK, SA_ONESHOT (#455821)
  - fix futex argument decoding (#448628, #448629)


author: Roland McGrath <roland@redhat.com> - 4.5.16-1
changelog:
  - fix multithread issues (#240962, #240961, #247907)
  - fix spurious SIGSTOP on early interrupt (#240986)
  - fix utime for biarch (#247185)
  - fix -u error message (#247170)
  - better futex syscall printing (##241467)
  - fix argv/envp printing with small -s settings, and for biarch
  - new syscalls: getcpu, eventfd, timerfd, signalfd, epoll_pwait,
    move_pages, utimensat


author: Roland McGrath <roland@redhat.com> - 4.5.15-1
changelog:
  - biarch fixes (#179740, #192193, #171626, #173050, #218433, #218043)
  - fix -ff -o behavior (#204950, #218435, #193808, #219423)
  - better quotactl printing (#118696)
  - *at, inotify*, pselect6, ppoll and unshare syscalls (#178633, #191275)
  - glibc-2.5 build fixes (#209856)
  - memory corruption fixes (#200621
  - fix race in child setup under -f (#180293)
  - show ipc key values in hex (#198179, #192182)
  - disallow -c with -ff (#187847)
  - Resolves: RHBZ #179740, RHBZ #192193, RHBZ #204950, RHBZ #218435
  - Resolves: RHBZ #193808, RHBZ #219423, RHBZ #171626, RHBZ #173050
  - Resolves: RHBZ #218433, RHBZ #218043, RHBZ #118696, RHBZ #178633
  - Resolves: RHBZ #191275, RHBZ #209856, RHBZ #200621, RHBZ #180293
  - Resolves: RHBZ #198179, RHBZ #198182, RHBZ #187847


author: Jakub Jelinek <jakub@redhat.com> - 4.5.14-4
changelog:
  - Fix ia64 syscall decoding (#206768)
  - Fix build with glibc-2.4.90-33 and up on all arches but ia64
  - Fix build against 2.6.18+ headers


author: Roland McGrath <roland@redhat.com> - 4.5.14-1
changelog:
  - Fix biarch decoding of socket syscalls (#174354).
  - Fix biarch -e support (#173986).
  - Accept numeric syscalls in -e (#174798).
  - Fix ipc syscall decoding (#164755).
  - Improve msgrcv printing (#164757).
  - Man page updates (#165375).
  - Improve mount syscall printing (#165377).
  - Correct printing of restarting syscalls (#165469).


author: Roland McGrath <roland@redhat.com> - 4.5.13-1
changelog:
  - Fix setsockopt decoding on 64-bit (#162449).
  - Fix typos in socket option name strings (#161578).
  - Display more IPV6 socket options by name (#162450).
  - Don't display inappropriate syscalls for -e trace=file (#159340).
  - New selector type -e trace=desc for file-descriptor using calls (#159400).
  - Fix 32-bit old_mmap syscall decoding on x86-64 (#162467, #164215).
  - Fix errors detaching from multithreaded process on interrupt (#161919).
  - Note 4.5.12 fix for crash handling bad signal numbers (#162739).


author: Roland McGrath <roland@redhat.com> - 4.5.12-1
changelog:
  - Fix known syscall recognition for IA32 processes on x86-64 (#158934).
  - Fix bad output for ptrace on x86-64 (#159787).
  - Fix potential buffer overruns (#151570, #159196).
  - Make some diagnostics more consistent (#159308).
  - Update PowerPC system calls.
  - Better printing for Linux aio system calls.
  - Don't truncate statfs64 fields to 32 bits in output (#158243).
  - Cosmetic code cleanups (#159688).


author: Roland McGrath <roland@redhat.com> - 4.5.10-1
changelog:
  - Fix select handling on nonstandard fd_set sizes.
  - Don't print errors for null file name pointers.
  - Fix initial execve output with -i (#143365).


author: Roland McGrath <roland@redhat.com> - 4.5.9-2
changelog:
  - update ia64 syscall list (#146245)
  - fix x86_64 syscall argument extraction for 32-bit processes (#146093)
  - fix -e signal=NAME parsing (#143362)
  - fix x86_64 exit_group syscall handling
  - improve socket ioctl printing (#138223)
  - code cleanups (#143369, #143370)
  - improve mount flags printing (#141932)
  - support symbolic printing of x86_64 arch_prctl parameters (#142667)
  - fix potential crash in getxattr printing


author: Roland McGrath <roland@redhat.com> - 4.5.8-1
changelog:
  - fix multithreaded exit handling (#132150, #135254)
  - fix ioctl name matching (#129808)
  - print RTC_* ioctl structure contents (#58606)
  - grok epoll_* syscalls (#134463)
  - grok new RLIMIT_* values (#133594)
  - print struct cmsghdr contents for sendmsg (#131689)
  - fix clock_* and timer_* argument output (#131420)


author: Roland McGrath <roland@redhat.com> - 4.5.7-2
changelog:
  - new upstream version, misc fixes and updates (#128091, #129166, #128391, #129378, #130965, #131177)


author: Roland McGrath <roland@redhat.com> 4.5.6-1
changelog:
  - new upstream version, updates ioctl lists (#127398), fixes quotactl (#127393), more ioctl decoding (#126917)


author: Roland McGrath <roland@redhat.com> 4.5.3-1
changelog:
  - new upstream version, mq_* calls (#120701), -p vs NPTL (#120462), more fixes (#118694, #120541, #118685)


author: Jakub Jelinek <jakub@redhat.com> 4.4-8
changelog:
  - newer version of the clone fixing patch (Roland McGrath)
  - aio syscalls for i386/ia64/ppc (Ben LaHaise)


author: Preston Brown <pbrown@redhat.com> 4.3-1
changelog:
  - new upstream version.  Seems to have integrated most new syscalls
  - tracing threaded programs is now functional.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - doh, actually apply the 2.4 syscalls patch
  - make it compile with 2.4.0-test7-pre4+ headers, add
    getdents64 and fcntl64


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 3.99 in order to
  -    add new 2.2.x open flags (#2955).
  -    add new 2.2.x syscalls (#2866).
  - strace 3.1 patches carried along for now.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added the umoven patch from James Youngman <jay@gnu.org>
  - fixed build problems on newer glibc releases


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Guenther Deschner <gdeschner@redhat.com> 3.0.33-3.15.el5
changelog:
  - Security Release, fixes CVE-2009-1888, CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906
  - resolves: #526660


author: Simo Sorce <ssorce@redhat.com> 3.0.33-3.9.el5
changelog:
  - Raise log level for annoying messages that are normal with
    some idmap backends.
  - resolves: #485382


author: Guenther Deschner <gdeschner@redhat.com> 3.0.28-3.2.el5
changelog:
  - Fix joining and authentication with NT4 and Windows 2000 domains.
  - resolves: #449000
  - resolves: #450533


author: Simo Sorce <ssorce@redhat.com> 3.0.28-1.el5_2.1
changelog:
  - Security fix for CVE-2008-1105
  - Fix join verification
  - Fix smb signing
  - resolves: CVE-2008-1105
  - resolves: #447380
  - resolves: #444637


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.8
changelog:
  - Yet another 2 patches for regressions related to operations on a DC with
    trusted domains. Fiux idmap with legacy configuration options, and fix the
    pam module, pam logins were broken for trusted domains
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.7
changelog:
  - Add another 2 patches to solve 429024 completely, as some cases were not
    covered:
    - Fix domain trusts while running as a DC
    - Fix credential chain with windows 2008
  - Make some configure flag explicit even if they are on by default so that we
    can catch build errors if something is wrong instead of silently missing
    features supposed to be compiled in
  - related: #429024


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
changelog:
  - Back out moiunt cifs patches for prepath, as the corresponding
    kernel changes can't be put in at this time
  - Add a minor SPNEGO fix
  - related: #370501
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.4
changelog:
  - Add another set of fixes for 429024, turned out this was not
    completely fixed as expected
  - Add some other patches from Guenther to join Windows 2008 (Rc1)
    domain controllers
  - Make sure bad port numbers are reported and smbd exits if it
    can't bind to any port (completes fix for #429003)
  - Fix a regression in ACLs code that was causing samba to set the
    wrong inherited permissions
  - resolves: #429024
  - related: #291501
  - resolves: #429003
  - resolves: #431243


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.3
changelog:
  - Add 2 more patches to fix a Samba DC talking to trusted
    domains.
  - resolves: #429024
  - related: #291501


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.1
changelog:
  - Add more fixes on top 3.0.28 as committed upstream
  - Fixes typo and removes trailing spaces in default smb.conf file
  - resolves: #426244
  - related: #291501
  - resolves: #426623
  - resolves: #383351
  - resolves: #425996


author: Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5
changelog:
  - rebase to 3.0.28 (3.0.x is in bugfix/security fix only mode
    since 3.2.x was announced) + later Vista fixes
  - resolves: #291501
  - resolves: #370501


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-1.el5_1.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: CVE-2007-6015
  - resolves: CVE-2007-4572


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-0.el5_1.2
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351511
  - resolves: #350771
  - resolves: #359161
  - resolves: #338141


author: Jay Fenlason <fenlason@redhat.com> 3.0.23a-3
changelog:
  - Fix the -logfiles patch to close
    bz#199607 Samba compiled with wrong log path.
    bz#199206 smb.conf has incorrect log file path


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-2
changelog:
  - New upstream release.
  - Use modified filter-requires-samba.sh from packaging/RHEL/setup/
    to get rid of bogus dependency on perl(Unicode::MapUTF8)
  - Update the -logfiles and -smb.conf patches to work with 3.0.23


author: Jay Fenlason <fenlason@redhat.com> 3.0.23-0.RC3
changelog:
  - New upstream RC release.
  - Update the -logfiles, and -passwd patches for
    3.0.23rc3
  - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>)
    to close
    bz#182560 Wrong retval for initscript when smbd is dead
  - Update this spec file to build with 3.0.23rc3
  - Remove the -install.mount.smbfs patch, since we don't install
    mount.smbfs any more.


author: Jay Fenlason <fenlason@redhat.com> 3.0.21b-2
changelog:
  - New upstream version.
  - Since the rawhide kernel has dropped support for smbfs, remove smbmount
    and smbumount.  Users should use mount.cifs instead.
  - Upgrade to 3.0.21b


author: Jay Fenlason <fenlason@redhat.com> 3.0.20b-2
changelog:
  - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have
    been depricated in 2.3.11, but which don't have well-documented
    replacements (ldap_simple_bind_s(), for example).
  - Upgrade to 3.0.20b, which includes all the previous upstream patches.
  - Updated the -warnings patch for 3.0.20a.
  - Include  --with-shared-modules=idmap_ad,idmap_rid to close
    bz#156810 --with-shared-modules=idmap_ad,idmap_rid
  - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close
    bz#170259 pam_stack is deprecated


author: Jay Fenlason <fenlason@redhat.com> 3.0.20-2
changelog:
  - New upstream release
    Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3,
      -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1
    This obsoletes the -pie and -delim patches
    the -warning and -gcc4 patches are obsolete too
    The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1
    Also, the -quoting patch was implemented differently upstream
    There is now a umount.cifs executable and manpage
    We run autogen.sh as part of the build phase
    The testprns command is now gone
    libsmbclient now has a man page
  - Include -bug106483 patch to close
    bz#106483 smbclient: -N negates the provided password, despite documentation
  - Added the -warnings patch to quiet some compiler warnings.
  - Removed many obsolete patches from CVS.


author: Jay Fenlason <fenlason@redhat.com> 3.0.14a-2
changelog:
  - New upstream release.
  - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1,
    winbind_find_dc_v2 patches are now obsolete.


author: Jay Fenlason <fenlason@redhat.com> 3.0.13-2
changelog:
  - New upstream release
  - add my -quoting patch, to fix swat with strings that contain
    html meta-characters, and to use correct quote characters in
    lists, closing bz#134310
  - include the upstream winbindd_2k3sp1 patch
  - include the -smbclient patch.
  - include the -hang patch from upstream.


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-4
changelog:
  - Use the updated filter-requires-samba.sh file, so we don't accidentally
    pick up a dependency on perl(Crypt::SmbHash)


author: Jay Fenlason <fenlason@redhat.com> 3.0.11-3
changelog:
  - add -gcc4 patch to compile with gcc 4.
  - remove the now obsolete -smbclient-kerberos.patch
  - Include four upstream patches from
    http://samba.org/~jerry/patches/post-3.0.11/
    (Slightly modified the winbind_find_dc_v2 patch to apply easily with
    rpmbuild).


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-4
changelog:
  - Update the -man patch to fix ntlm_auth.1 too.
  - Move pam_smbpass.so to the -common package, so both the 32
    and 64-bit versions will be installed on multiarch platforms.
    This closes bz#143617
  - Added new -delim patch to fix mount.cifs so it can accept
    passwords with commas in them (via environment or credentials
    file) to close bz#144198


author: Jay Fenlason <fenlason@redhat.com> 3.0.10-2
changelog:
  - New upstream release that closes CAN-2004-1154  bz#142544
  - Include the -64bit patch from Nalin.  This closes bz#142873
  - Update the -logfiles patch to work with 3.0.10
  - Create /var/run/winbindd and make it part of the -common rpm to close
    bz#142242


author: Jay Fenlason <fenlason@redhat.com> 3.0.9-2
changelog:
  - New upstream release.  This obsoletes the -secret patch.
    Include my changetrustpw patch to make "net ads changetrustpw" stop
    aborting.  This closes #134694
  - Remove obsolete triggers for ancient samba versions.
  - Move /var/log/samba to the -common rpm.  This closes #76628
  - Remove the hack needed to get around the bad docs files in the
    3.0.8 tarball.
  - Change the comment in winbind.init to point at the correct pidfile.
    This closes #76641


author: Than Ngo <than@redhat.com> 3.0.8-4
changelog:
  - fix unresolved symbols in libsmbclient which caused applications
    such as KDE's konqueror to fail when accessing smb:// URLs. #139894


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3.1
changelog:
  - Rescue the install.mount.smbfs patch from Juanjo Villaplana
    (villapla@si.uji.es) to prevent building the srpm from trashing your
    installed /usr/bin/smbmount


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-3
changelog:
  - Include the corrected docs tarball, and use it instead of the
    obsolete docs from the upstream 3.0.8 tarball.
  - Update the logfiles patch to work with the updated docs.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-2
changelog:
  - New upstream version fixes CAN-2004-0930.  This obsoletes the
    disable-sendfile, salt, signing-shortkey and fqdn patches.
  - Add my <fenlason@redhat.com> ugly non-ascii-domain patch.
  - Updated the pie patch for 3.0.8.
  - Updated the logfiles patch for 3.0.8.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.3
changelog:
  - disable the -salt patch, because it causes undefined references in
    libsmbclient that prevent gnome-vfs from building.


author: Jay Fenlason <fenlason@redhat.com> 3.0.8-0.pre1.2
changelog:
  - Re-enable the x_fclose patch that was accidentally disabled
    in 3.0.8-0.pre1.1.  This closes #135832
  - include Nalin's -fqdn and -salt patches.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies
    smbmnt to work with 32-bit uids.


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-4
changelog:
  - Update docs section to not carryover the docs/manpages directory
    This moved many files from /usr/share/doc/samba-3.0.7/docs/* to
    /usr/share/doc/samba-3.0.7/*
  - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu)
    to correctly create libsmbclient.so.0 and to use /etc/rc.d/init.d instead
    of rolling our own.  This closes #132642
  - Add patch to default "use sendfile" to no, since sendfile appears to
    be broken
  - Add patch from Volker Lendecke <vl@samba.org> to help make
    ldapsam_compat work again.
  - Add patch from "Vince Brimhall" <vbrimhall@novell.com> for ldapsam_compat
    These two patches close bugzilla #132169


author: Jay Fenlason <fenlason@redhat.com> 3.0.7-3
changelog:
  - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808
    This obsoletes the 3.0.6-schema patch.
  - Update BuildRequires line to include openldap-devel openssl-devel
    and cups-devel


author: Jay Fenlason <fenlason@redhat.com> 3.0.6-3
changelog:
  - New upstream version.
  - Include post 3.0.6 patch from "Gerald (Jerry) Carter" <jerry@samba.org>
    to fix a duplicate in the LDAP schema.
  - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com)
    to allow correct timestamp handling on 64-bit platforms and fix #126109.
  - reenable the -pie patch.  Samba is too widely used, and too vulnerable
    to potential security holes to disable an important security feature
    like -pie.  The correct fix is to have the toolchain not create broken
    executables when programs compiled -pie are stripped.
  - Remove obsolete patches.
  - Modify this spec file to put libsmbclient.{a,so} in the right place on
    x86_64 machines.


author: Jason Vas Dias <jvdias@redhat.com> 3.0.5-3
changelog:
  - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination
  - resulted in executables getting corrupt stacks, causing smbmnt to
  - get a SIGBUS in the mount() call (bug 127420).


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-2
changelog:
  - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a
    security fix.
  - Include the 3.0.4-backport patch from the 3E branch.  This restores
    some of the 3.0.5pre1 and 3.0.5rc1 functionality.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5-0.pre1.1
changelog:
  - Backport base64_decode patche to close CAN-2004-0500
  - Backport hash patch to close CAN-2004-0686
  - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com>
  - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com>
  - passwd patch uses "*" instead of "x" for "hashed" passwords for
    accounts created by winbind.  "x" means "password is in /etc/shadow" to
    brain-damaged pam_unix module.


author: Jay Fenlason <fenlason@redhat.com> 3.0.5.0pre1.0
changelog:
  - New upstream version
  - use % { SOURCE1 } instead of a hardcoded path
  - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org)
    https://bugzilla.samba.org/show_bug.cgi?id=1315
    to make winbindd work against Windows versions that do not have
    128 bit encryption enabled.
  - Moved /usr/bin/net to the -common package, so that folks who just
    want to use winbind, etc don't have to install -client in order to
    "net join" their domain.
  - New upstream version obsoletes the patches added in 3.0.3-5
  - Remove smbgetrc.5 man page, since we don't ship smbget.


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-5
changelog:
  - Patch to allow password changes from machines patched with
    Microsoft hotfix MS04-011.
  - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302
    and https://bugzilla.samba.org/show_bug.cgi?id=1309


author: jay Fenlason <fenlason@redhat.com> 3.0.3-3.rc1
changelog:
  - New upstream version
  - updated spec file to make libsmbclient.so executable.  This closes
    bugzilla #121356


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-2.pre2
changelog:
  - New upstream version  
  - Updated configure line to remove --with-fhs and to explicitly set all
    the directories that --with-fhs was setting.  We were overriding most of
    them anyway.  This closes #118598


author: Jay Fenlason <fenlason@redhat.com> 3.0.3-1.pre1
changelog:
  - New upstream version.
  - Updated -pie and -logfiles patches for 3.0.3pre1
  - add krb5-devel to buildrequires, fixes #116560
  - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run
    "service smb status".  This fixes #116559


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Change all requires lines to list an explicit epoch.  Closes #102715
  - Add an explicit Epoch so that 0 is defined.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-5
changelog:
  - New upstream version: 3.0.2 final includes security fix for #114995
    (CAN-2004-0082)
  - Edit postun script for the -common package to restart winbind when
    appropriate.  Fixes bugzilla #114051.


author: Jay Fenlason <fenlason@redhat.com> 3.0.2-3rc2
changelog:
  - add %dir entries for /usr/lib64/samba and /usr/lib64/samba/charset
  - Upgrade to new upstream version
  - build mount.cifs for the new cifs filesystem in the 2.6 kernel.


author: Felipe Alfaro Solana <felipe_alfaro@linuxmail.org> 3.0.1-1
changelog:
  - Update to 3.0.1
  - Removed testparm patch as it's already merged
  - Removed Samba.7* man pages
  - Fixed .buildroot patch
  - Fixed .pie patch
  - Added new /usr/bin/tdbdump file


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-15
changelog:
  - New 3.0.0 final release
  - merge nmbd-netbiosname and testparm patches from 3E branch
  - updated the -logfiles patch to work against 3.0.0
  - updated the pie patch
  - update the VERSION file during build
  - use make -j if avaliable
  - merge the winbindd_privileged change from 3E
  - merge the "rm /usr/lib" patch that allows Samba to build on 64-bit
    platforms despite the broken Makefile


author: Jay Fenlason <fenlason@redhat.com> 3.0.0-3beta3
changelog:
  - Merge from 3.0.0-2beta3.3E
  - (Correct log file names (#100981).)
  - (Fix pidfile directory in samab.log)
  - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file)
  - (Move libsmbclient to the -common package (#99449))


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-2
changelog:
  - add libsmbclient.so for gnome-vfs-extras
  - Edit specfile to specify /var/run for pid files
  - Move /tmp/.winbindd/socket to /var/run/winbindd/socket


author: Jay Fenlason <fenlason@redhat.com> 2.2.8a-1
changelog:
  - upgrade to 2.2.8a
  - remove old .md5 files
  - add "pid directory = /var/run" to the smb.conf file.  Fixes #88495
  - Patch from jra@dp.samba.org to fix a delete-on-close regression


author: Jay Fenlason <fenlason@redhat.com> 2.2.8-0
changelog:
  - Upgrade to 2.2.8
  - removed commented out patches.
  - removed old patches and .md5 files from the repository.
  - remove duplicate /sbin/chkconfig --del winbind which causes
    warnings when removing samba.
  - Fixed minor bug in smbprint that causes it to fail when called with
    more than 10 parameters: the accounting file (and spool directory
    derived from it) were being set wrong due to missing {}.  This closes
    bug #86473.
  - updated smb.conf patch, includes new defaults to close bug #84822.


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.7a-4
changelog:
  - relink libnss_wins.so with SHLD="gcc -lnsl" to force libnss_wins.so to
    link with libnsl, avoiding unresolved symbol errors on functions in libnsl


author: Jay Fenlason <fenlason@redhat.com> 2.2.7a-3
changelog:
  - edited spec file to put .so files in the correct directories
    on 64-bit platforms that have 32-bit compatability issues
    (sparc64, x86_64, etc).  This fixes bugzilla #83782.
  - Added samba-2.2.7a-error.patch from twaugh.  This fixes
    bugzilla #82454.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.5-7
changelog:
  - Enable VFS support and compile the "recycling" module (#69796)
  - more selective includes of the examples dir


author: Nalin Dahyabhai <nalin@redhat.com> 2.2.3a-3
changelog:
  - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o
    (patch posted to samba-list by Ilia Chipitsine)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-6
changelog:
  - Move winbind files to samba-common. Add separate initscript for
    winbind 
  - Fixes for winbind - protect global variables with mutex, use
    more secure getenv


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-5
changelog:
  - Teach smbadduser about "getent passwd" 
  - Fix more pid-file references
  - Add (conditional) winbindd startup to the initscript, configured in
    /etc/sysconfig/samba


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2.2-3
changelog:
  - Add "--with-utmp" to configure options (#55372)
  - Include winbind, pam_smbpass.so, rpcclient and smbcacls
  - start using /var/cache/samba, we need to keep state and there is
    more than just locks involved


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Don't include smbpasswd in samba, it's in samba-common (#51598)
  - Add a disabled "obey pam restrictions" statement - it's not
    active, as we use encrypted passwords, but if the admin turns
    encrypted passwords off the choice is available. (#31351)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Use /var/cache/samba instead of /var/lock/samba 
  - Remove "domain controller" keyword from smb.conf, it's 
    deprecated (from #13704)
  - Sync some examples with smb.conf.default
  - Fix password synchronization (#16987)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  (these changes are from the non-head version)
  - Don't include /usr/sbin/samba, it's the same as the initscript
  - unset TMPDIR, as samba can't write into a TMPDIR owned 
    by root (#41193)
  - Add pidfile: lines for smbd and nmbd and a config: line
    in the initscript  (#15343)
  - don't use make -j
  - explicitly include /usr/share/samba, not just the files in it


author: Helge Deller <hdeller@redhat.de>
changelog:
  - build as 2.2.0-1 release
  - skip the documentation-directories docbook, manpages and yodldocs
  - don't include *.sgml documentation in package
  - moved codepage-directory to /usr/share/samba/codepages
  - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to samba 2.2.0
  - moved codepages to /usr/share/samba/codepages
  - use all available CPUs for building rpm packages
  - use %{_xxx} defines at most places in spec-file
  - "License:" replaces "Copyright:"
  - dropped excludearch sparc
  - de-activated japanese patches 100 and 200 for now 
    (they need to be fixed and tested wth 2.2.0)
  - separated swat.desktop file from spec-file and added
    german translations
  - moved /etc/sysconfig/samba to a separate source-file
  - use htmlview instead of direct call to netscape in 
    swat.desktop-file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak the PAM code some more to try to do a setcred() after initgroups()
  - pull in all of the optflags on i386 and sparc
  - don't explicitly enable Kerberos support -- it's only used for password
    checking, and if PAM is enabled it's a no-op anyway


author: Bill Nottingham <notting@redhat.com>
changelog:
  - i18n-ize initscript
  - add a sysconfig file for daemon options (#23550)
  - clarify smbpasswd man page (#23370)
  - build with LFS support (#22388)
  - avoid extraneous pam error messages (#10666)
  - add Urban Widmark's bug fixes for smbmount (#19623)
  - fix setgid directory modes (#11911)
  - split swat into subpackage (#19706)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - set a default CA certificate path in smb.conf (#19010)
  - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix swat only_from line (#18726, others)
  - fix attempt to write outside buildroot on install (#17943)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - move initscript back
  - remove 'Using Samba' book from %doc 
  - move stuff to /etc/samba (#13708)
  - default configuration tweaks (#13704)
  - some logrotate tweaks


author: Than Ngo <than@redhat.de>
changelog:
  - add initdir macro to handle the initscript directory
  - add a new macro to handle /etc/pam.d/system-auth


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix yp_get_default_domain in autoconf
  - only link against readline for smbclient
  - fix log rotation (#9909)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - use cp rather than mv to preserve /etc/services perms (#4938 et al).
  - use mktemp to generate /etc/tmp.XXXXXX file name.
  - add prereqs on sed/mktemp/killall (need to move killall to /bin).
  - fix trigger syntax (i.e. "samba < 1.9.18p7" not "samba < samba-1.9.18p7")


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.0.5
  - fix mount.smb - smbmount options changed again.........
  - fix postun. oops.
  - update some stuff from the samba team's spec file.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add a mount.smb to make smb mounting a little easier.
  - smb filesystems apparently don't work on alpha. Oops.


author: Erik Troan <ewt@redhat.com>
changelog:
  - made the %postun script a tad less agressive; no reason to remove
    the logs or lock file (after all, if the lock file is still there,
    samba is still running)
  - the %postun and %preun should only exectute if this is the final
    removal
  - migrated %triggerpostun from Red Hat's samba package to work around
    packaging problems in some Red Hat samba releases


author: John H Terpstra <jht@samba.anu.edu.au>
changelog:
  - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com>
  - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb
  - Compounded make line
  - Updated smb.init restart mechanism
  - Use compound mkdir -p line instead of individual calls to mkdir
  - Fixed smb.conf file path for log files
  - Fixed smb.conf file path for incoming smb print spool directory
  - Added a number of options to smb.conf file
  - Added smbadduser command (missed from all previous RPMs) - Doooh!
  - Added smbuser file and smb.conf file updates for username map


author: Joe Orton <jorton@redhat.com> - 5.1.6-24.3
changelog:
  - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292,
    CVE-2009-3546 CVE-2009-4017 (#541597)
  - add build fix for mysqli on some biarch systems (#543469)


author: Joe Orton <jorton@redhat.com> 5.1.6-23.1.el5
changelog:
  - add security fixes for CVE-2008-3658, CVE-2008-3660,
    CVE-2008-5498, CVE-2008-5557, CVE-2008-5814, and mbstring
    func_overload issue (#487369)


author: Joe Orton <jorton@redhat.com> 5.1.6-22.el5
changelog:
  - fix possible crash in metaphone() (#446183)
  - imap: link in AUTH=PLAIN authenticator (#447983)
  - Zend: fix class name case in error messages (#446180)
  - move gd_README from -common to -gd (#443812)
  - pdo: fix possible crash in error path (#429693)
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445924)
  - date: fix handling of relative days in strtotime (#444419)
  - date: fix test suite failure with current tzdata (#454863)
  - Zend: fix behaviour of constructors during destructors (#456313)
  - pdo_mysql: detect stale db connections (#450880)


author: Joe Orton <jorton@redhat.com> 5.1.6-16.el5
changelog:
  - add dbase extension in -common (#161639)
  - add /usr/share/php to builtin include_path (#238455)
  - ext/ldap: enable ldap_sasl_bind (#336221)
  - ext/libxml: reset stream context (#298031)


author: Joe Orton <jorton@redhat.com> 5.1.6-13.el5
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, 
    CVE-2007-3799, CVE-2007-3996, CVE-2007-3998, CVE-2007-4658,
    CVE-2007-4670 (#278411)


author: Joe Orton <jorton@redhat.com> 5.1.6-12.el5
changelog:
  - add security fix for CVE-2007-1864, SOAP redirect handling issue,
    FTP CRLF injection issue (#235016)


author: Joe Orton <jorton@redhat.com> 5.1.6-9.el5
changelog:
  - add security fix for CVE-2007-1583 (#235016)
  - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036)


author: Joe Orton <jorton@redhat.com> 5.1.6-6.el5
changelog:
  - add security fixes for: CVE-2007-0906, CVE-2007-0907, 
    CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013)


author: Joe Orton <jorton@redhat.com> 5.1.6-4.el5
changelog:
  - php-xml provides php-domxml (#215656)
  - fix php-pdo-abi provide (#214281)
  - provide php-zend-abi (#212804)
  - don't Obsolete mod_php
  - fix PDO sqlite TEXT extraction truncate-by-one (#217033)
  - package php{ize,-config} man pages in -devel (#199382)
  - change module subpackages to require php-common not php (#177821)
  - add security fix for CVE-2006-5465 (#216114)


author: Joe Orton <jorton@redhat.com> 5.1.4-8
changelog:
  - Provide php-posix (#194583)
  - only provide php-pcntl from -cli subpackage
  - add missing defattr's (thanks to Matthias Saou)


author: Joe Orton <jorton@redhat.com> 5.1.4-5
changelog:
  - provide mod_php (#187891)
  - provide php-cli (#192196)
  - use correct LDAP fix (#181518)
  - define _GNU_SOURCE in php_config.h and leave it defined
  - drop (circular) dependency on php-pear


author: Joe Orton <jorton@redhat.com> 5.1.2-5
changelog:
  - provide php-api (#183227)
  - add provides for all builtin modules (Tim Jackson, #173804)
  - own %{_libdir}/php/pear for PEAR packages (per #176733)
  - add obsoletes to allow upgrade from FE4 PDO packages (#181863)


author: Joe Orton <jorton@redhat.com> 5.1.1-2
changelog:
  - update to 5.1.1
  - remove pear subpackage
  - enable pdo extensions (php-pdo subpackage)
  - remove non-standard conditional module builds
  - enable xmlreader extension


author: Joe Orton <jorton@redhat.com> 5.0.5-3
changelog:
  - update to 5.0.5
  - add fix for upstream #34435
  - devel: require autoconf, automake (#159283)
  - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1
  - fix imagettftext et al (upstream, #161001)


author: Joe Orton <jorton@redhat.com> 5.0.4-9
changelog:
  - build simplexml_import_dom even with shared dom (#156434)
  - prevent truncation of copied files to ~2Mb (#155916)
  - install /usr/bin/php from CLI build alongside CGI
  - enable sysvmsg extension (#142988)


author: Joe Orton <jorton@redhat.com> 5.0.4-7
changelog:
  - split out dba and bcmath extensions into subpackages
  - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221)
  - pear: update to DB-1.7.6
  - enable FastCGI support in /usr/bin/php-cgi (#149596)


author: Joe Orton <jorton@redhat.com> 5.0.4-6
changelog:
  - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi,
    built with the CGI SAPI (thanks to Edward Rudd, #137704)
  - add php(1) man page for CLI
  - fix more test cases to use -n when invoking php


author: Joe Orton <jorton@redhat.com> 5.0.4-4
changelog:
  - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP
  - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988)
  - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282)


author: Joe Orton <jorton@redhat.com> 5.0.4-1
changelog:
  - update to 5.0.4 (#153068)
  - add .phps AddType to php.conf (#152973)
  - better gcc4 fix for libxmlrpc


author: Joe Orton <jorton@redhat.com> 5.0.3-5
changelog:
  - BuildRequire mysql-devel >= 4.1
  - don't mark php.ini as noreplace to make upgrades work (#152171)
  - fix subpackage descriptions (#152628)
  - fix memset(,,0) in Zend (thanks to Dave Jones)
  - fix various compiler warnings in Zend


author: Joe Orton <jorton@redhat.com> 5.0.3-4
changelog:
  - package mysqli extension in php-mysql
  - really enable pcntl (#142903)
  - don't build with --enable-safe-mode (#148969)
  - use "Instant Client" libraries for oci8 module (Kai Bolay, #149873)


author: Joe Orton <jorton@redhat.com> 5.0.3-2
changelog:
  - install the ext/gd headers (#145891)
  - enable pcntl extension in /usr/bin/php (#142903)
  - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795)
  - add BuildRequire for recent pcre-devel (#147448)


author: Joe Orton <jorton@redhat.com> 5.0.3-1
changelog:
  - update to 5.0.3 (thanks to Robert Scheck et al, #143101)
  - enable xsl extension (#142174)
  - package both the xsl and dom extensions in php-xml
  - enable soap extension, shared (php-soap package) (#142901)
  - add patches from upstream 5.0 branch:
   * Zend_strtod.c compile fixes
   * correct php_sprintf return value usage


author: Joe Orton <jorton@redhat.com> 5.0.2-7
changelog:
  - truncate changelog at 4.3.1-1
  - merge from 4.3.x package:
   - enable mime_magic extension and Require: file (#130276)


author: Joe Orton <jorton@redhat.com> 5.0.2-5
changelog:
  - fix phpize installation for lib64 platforms
  - add fix for segfault in variable parsing introduced in 5.0.2


author: Joe Orton <jorton@redhat.com> 5.0.2-4
changelog:
  - update to 5.0.2 (#127980)
  - build against mysqlclient10-devel
  - use new RTLD_DEEPBIND to load extension modules
  - drop explicit requirement for elfutils-devel
  - use AddHandler in default conf.d/php.conf (#135664)
  - "fix" round() fudging for recent gcc on x86
  - disable sqlite pending audit of warnings and subpackage split


author: Joe Orton <jorton@redhat.com> 5.0.1-1
changelog:
  - update to 5.0.1
  - only build shared modules once
  - put dom extension in php-dom subpackage again
  - move extension modules into %{_libdir}/php/modules
  - don't use --with-regex=system, it's ignored for the apache* SAPIs


author: Tom Callaway <tcallawa@redhat.com>
changelog:
  - bump to 5.0.0
  - add patch to prevent clobbering struct re_registers from regex.h
  - remove domxml references, replaced with dom now built-in
  - fix php.ini to refer to php5 not php4


author: Joe Orton <jorton@redhat.com> 4.3.7-3
changelog:
  - add gmp_powm fix (Oskari Saarenmaa, #124318)
  - split mbstring, ncurses, gd, openssl extns into subpackages
  - fix memory leak in apache2handler; use ap_r{write,flush}
    rather than brigade interfaces


author: Joe Orton <jorton@redhat.com> 4.3.6-6
changelog:
  - buildrequire smtpdaemon (#124430)
  - try switching to system libgd again (prevent symbol conflicts
    when e.g. mod_perl loads the system libgd library.)


author: Joe Orton <jorton@redhat.com> 4.3.4-7
changelog:
  - gd fix for build with recent Freetype2 (from upstream)
  - remove easter egg (Oden Eriksson, Mandrake)


author: Joe Orton <jorton@redhat.com> 4.3.4-6
changelog:
  - php-pear requires php
  - also remove extension=imap from php.ini in upgrade trigger
  - merge from Taroon: allow upgrade from Stronghold 4.0


author: Joe Orton <jorton@redhat.com> 4.3.4-5
changelog:
  - add defattr for php-pear subpackage
  - restore defaults: output_buffering=Off, register_argc_argv=On
  - add trigger to handle php.ini upgrades smoothly (#112470)


author: Joe Orton <jorton@redhat.com> 4.3.4-4
changelog:
  - conditionalize support for imap extension for the time being
  - switch /etc/php.ini to use php.ini-recommended (but leave
    variables_order as EGPCS) (#97765)
  - set session.path to /var/lib/php/session by default (#89975)
  - own /var/lib/php{,/session} and have apache own the latter
  - split off php-pear subpackage (#83771)


author: Joe Orton <jorton@redhat.com> 4.3.4-2
changelog:
  - rebuild for new libxslt (#110658) 
  - use --with-{mssql,oci8} for enabling extensions (#110482)
  - fix rebuild issues (Jan Visser, #110274)
  - remove hard-coded LIBS
  - conditional support for mhash (Aleksander Adamowski, #111251)


author: Joe Orton <jorton@redhat.com> 4.3.3-6
changelog:
  - use bundled libgd (#107407)
  - remove manual: up-to-date manual sources are no longer DFSG-free;
    it's too big; it's on the web anyway; #91292, #105804, #107384


author: Joe Orton <jorton@redhat.com> 4.3.3-3
changelog:
  - split domxml extension into php-domxml subpackage
  - enable xslt and xml support in domxml extension (#106042)
  - fix httpd-devel build requirement (#104341)
  - enable recode extension (#106755)
  - add workaround for #103982


author: Joe Orton <jorton@redhat.com> 4.3.2-2
changelog:
  - update the -tests and -lib64 patches
  - fixes for db4 detection
  - require aspell-devel >= 0.50.0 for pspell compatibility


author: Joe Orton <jorton@redhat.com> 4.3.1-3
changelog:
  - link odbc module correctly
  - patch so that php -n doesn't scan inidir
  - run tests using php -n, avoid loading system modules


author: Karanbir Singh <kbsingh@centos.org> 0.12.2-6.1.el5.centos
changelog:
  - Upstream logo removed : Fabian Arrotin <arrfab@centos.org>
  - Added support for CentOS recognition : Fabian Arrotin <arrfab@centos.org>


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-1
changelog:
  - Fix bz452704 (Unable to add existing RHEL4 clusters with RHEL5.2 Luci)
  - Fix bz467464 (adding qdisk to existing cluster fails to update cman entry in cluster.conf)
  - Fix bz460038 (Conga fs resource error when editing service)
  - Fix bz483067 (adding resource in conga doesn't work in IE)
  - Fix bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)
  - Fix bz450007 (cannot remove shared fence device through luci)
  - Fix bz466013 (Add luci GUI support for LPAR and vmware fencing)
  - Fix bz459160 (fenced config option to skip nodes with undefined fencing)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-4
changelog:
  - Fix bz459562 (charset configuration fix for luci)
  - Fix bz459469 (An unknown device type was given: "gnbd.")
  - Fix bz454933 (Add Support in Conga for Xen migration mapping)
  - Fix bz459623 (Conga error adding new node to existing cluster)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-1
changelog:
  - Fix bz444938 (conga fails to create proper cluster.conf entries for gfs2 filesystem type)
  - Fix bz444210 (Adding multiple fence devices at the same time causes duplicate entries)
  - Fix bz444381 (conga writes 'exportpath' instead of 'export' attribute for netfs)
  - Fix bz446907 (rpm -V luci fails)
  - Fix bz450854 (luci doesn't start because of a missing dep /usr/bin/dc)
  - Fix bz206570 (RFE: vm list from ricci)
  - Fix bz430737 (Conga should install the 'cmirror' package when clustered storage is requested)
  - Fix bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fix bz433089 (when adding multiple nodes the order is reversed.)
  - Fix bz441581 (Don't allow both label and device for qdisk config if only one can be specified)
  - Fix bz223785 (Storage 'Display Devices by' option does not work)
  - Fix bz250439 (conga is unable to delete snapshot volumes)
  - Fix bz414551 (Sector size list is improperly sorted)
  - Fix bz429350 (RFE: GUI support for failing over a service to another node after X number of restarts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-8
changelog:
  - Fix bz441580 (conga should install 'sg3_utils' and start service 'scsi_reserve' when scsi fencing is used)
  - Fix bz441573 ("nodename" field for fence_scsi disabled when adding a new fence device/instance)
  - Fix bz442997 (Luci inserts "hostname" instead of "ipaddr" for rsa II fencing device)
  - Fix bz442806 (luci shows wrong state for 'Monitor link' checkbox in IP resource)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-0
changelog:
  - Fixed bz230462 (RFE: Only reboot installation target machines when needed)
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz239387 (RFE: add timeouts for actions that can leave cluster unreachable)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz249619 (luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded)
  - Fixed bz252348 (RFE: should only have to enter a system's password once)
  - Fixed bz253223 (When deleting a node from conga, the fence device isn't deleted)
  - Fixed bz253720 ("trust" box shouldn't be an option if it is required)
  - Fixed bz253727 (RFE: graphical view should be default in partiton tables view)
  - Fixed bz253842 (luci ignores File System Resource Configuration)
  - Fixed bz253879 (RFE: drop the link/details column in the resource section table)
  - Fixed bz264161 (RFE: support setting the "__independent_subtree" attribute on cluster resources)
  - Fixed bz277661 (RFE: Better instructions on the luci login page if luci_admin not run.)
  - Fixed bz277711 (RFE: luci_admin should check that luci is running before asking for the password)
  - Fixed bz295771 (RFE: add ability to set self_fence attribute for clusterfs resources)
  - Fixed bz301411 (conga shouldn't turn on init scripts if the user turned them off)
  - Fixed bz303661 (Browser support to encompass Internet Explorer on Windows Vista and XP)
  - Fixed bz304891 (Browser support to encompass Firefox on Windows Vista and XP.)
  - Fixed bz315631 (conga doesn't handle the cluster restart operation properly)
  - Fixed bz317261 (Check for dual power fencing fails when adding new fence instances)
  - Fixed bz320411 (conga should use the node name in cluster.conf and not FQDN for fencing)
  - Fixed bz337041 (Add option to not fail-back service)
  - Fixed bz340111 (Storage redirection after probe does not work on WinXP with FF2)
  - Fixed bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fixed bz383071 (Virtual machine configuration - add field for "migration type" xml attr = "migrate")


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-3
changelog:
  - Fixed bz245947 (luci/Conga cluster configuration tool not initializing cluster node members)
  - Fixed bz249641 (conga is unable to do storage operations if there is an lvm snapshot present)
  - Fixed bz249342 (unknown ricci error when adding new node to cluster)
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz249091 (RFE: tell user they are about to kill all their nodes)
  - Fixed bz249066 (AttributeError when attempting to configure a fence device)
  - Fixed bz249086 (Unable to add a new fence device to cluster)
  - Fixed bz249868 (Use of failover domain not correctly shown)
  - Resolves bz245947, bz249641, bz249342, bz249291, bz249091,
  - Resolves bz249066, bz249086, bz249868
  - Related: bz249351


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-2
changelog:
  - Fixed bz245202 (Conga needs to support Internet Explorer 6.0 and later)
  - Fixed bz248317 (luci sets incorrect permissions on /usr/lib64/luci and /var/lib/luci) 
  - Resolves: bz245202 bz248317


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz221899 (Node log displayed in partially random order)
  - Fixed bz225782 (Need more luci service information on startup - no info written to log about failed start cause)
  - Fixed bz227743 (Intermittent/recurring problem - when cluster is deleted, sometimes a node is not affected)
  - Fixed bz227682 (saslauthd[2274]: Deprecated pam_stack module called from service "ricci")
  - Fixed bz238726 (Conga provides no way to remove a dead node from a cluster)
  - Fixed bz239389 (conga cluster: make 'enable shared storage' the default)
  - Fixed bz239596
  - Fixed bz240034 (rpm verify fails on luci)
  - Fixed bz240361 (Conga storage UI front-end is too slow rendering storage)
  - Fixed bz241415 (Installation using Conga shows "error" in message during reboot cycle.)
  - Fixed bz241418 (Conga tries to configurage cluster snaps, though they are not available.)
  - Fixed bz241706 (Eliminate confusion in add fence flow)
  - Fixed bz241727 (can't set user permissions in luci)
  - Fixed bz242668 (luci init script can return non-LSB-compliant return codes)
  - Fixed bz243701 (ricci init script can exit with non-LSB-compliant return codes)
  - Fixed bz244146 (Add port number to message when ricci is not started/firewalled on cluster nodes.)
  - Fixed bz244878 (Successful login results in an infinite redirection loop with MSIE)
  - Fixed bz239388 (conga storage: default VG creation should be clustered if a cluster node)
  - Fixed bz239327 (Online User Manual needs modification)
  - Fixed bz227852 (Lack of debugging information in logs - support issue)
  - Fixed bz245025 (Conga does not accept '&amp;' character in password field for Fence configuration)
  - Fixed bz225588 (luci web app does not enforce selection of fence port)
  - Fixed bz212022 (cannot create cluster using ip addresses)
  - Fixed bz223162 (Error trying to create a new fence device for a cluster node)
  - Upgraded to the latest Plone (2.5.3)
  - Added a "reprobe storage" button that invalidates cached storage reports
    and forces a new probe.
  - Resolves: bz238655, bz221899, bz225782, bz227682, bz227743, bz239389,
  - Resolves: bz239596, bz240034, bz240361, bz241415, bz241418, bz241706,
  - Resolves: bz241727, bz242668, bz243701, bz244146, bz244878, bz238726,
  - Resolves: bz239388, bz239327, bz227852, bz245025, bz225588, bz212022


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Fixed bz225206 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz225164 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz227758 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Resolves: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz229027 (luci failover domain forms are missing/empty)
  - Fixed bz230447 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz230452 (Advanced options parameters settings don't do anything)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Fixed bz230457 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz230461 ('enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz230469 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Resolves: bz230461, bz230469, bz228637, bz233326, bz225747


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-27
changelog:
  - Fixed bz214989 (Package download not working for Conga during cluster creation)
  - Fixed bz219522 (Restarting a cluster via luci web gui = UnboundLocalError - local variable 'e' referenced before assignment)
  - Fixed bz201394 (luci doesn't verify ricci's SSL cert against trusted list)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212448 (release blocker: turn off debug mode of server)
  - Fixed bz212445 (release blocker: prevent management page access)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-26
changelog:
  - luci storage: fix bytes->TB conversion
  - Improved bz201394: luci doesn't verify ricci's SSL cert against trusted list (step 1 - backend)
  - Fixed bz217387 (luci - HTML error shows up in display (minor))
  - Fixed bz215031 (Cannot add a resource to a service via luci web app)
  - Fixed bz218040 (luci reports "unknown" as cluster name if cluster creation fails)
  - Fixed bz218941 (Conga/luci - cannot add node to cluster via luci web app)
  - Fixed bz219156 (Errors in performing node-specific tasks due to ricci outage not reflected in luci display)
  - Fixed bz217703 (clustered vg creation fails)
  - Resolves: bz217387, bz215031, bz218040, bz218941, bz219156, bz217703
  - Related: bz201394


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-24
changelog:
  - Fixed bz215039 (Cannot create a new resource via luci web app)
  - Fixed bz215034 (Cannot change daemon properties via luci web app)
  - Fixed bz214790 (Stop/restart cluster not working via luci web app)
  - Fixed bz213690 (luci - Reversed links in colophon (gui - minor))
  - Fixed bz213266 (Conga - modifying a cluster node's cluster membership in a subnet with other clusters results in the wrong cluster.conf)
  - Fixed bz213083 (luci - should display usernames in some logical/sorted order (usability))
  - Fixed bz212601 (luci - selecting cluster name or cluster node name indicates error in install and displays empty form)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212006 (create cluster does not show status as cluster is being created)
  - Fixed bz212584 (luci does not retrieve failed ricci queue elements)
  - Fixed bz212440 (luci persists possibly incorrect name for a system)
  - Improved bz213306 (ricci - log probing can take minutes to complete)
  - Fixed starting/stopping services
  - Fixed deleting cluster
  - Fixed deleting node
  - Fixed redirection for all async->busy wait calls
  - Storage module: properly probe cluster quorum if LVM locking
    is marked as clustered
  - Resolves: bz215039, bz215034, bz214790, bz213690, bz213266
  - Resolves: bz213083, bz212601, bz212021, bz212006, bz212584
  - Resolves: bz212440
  - Related: bz213306


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-21
changelog:
  - 211564: ricci allocates huge memory chunk, causing long swapping
  - 211345: cluster_adapters is missing import of Xenvm module
  - 211191: SELinux issues tracking bug
  - 211370: retrieving log from node fails
  - 211942: Xenvm moniker must be eradicated from UI
  - 211375: unable to reliably create a cluster
  - 211373: reboot node fails from storage tab


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-16
changelog:
  - Enable zope/plone inclusion on RHELs
  - Remove luci's dependency on ricci
  - Many improvements of cluster management interface
  - Add full GFS1/2 support; detect many other filesystems
  - Suppress msgs from init script (bz204235)
  - Upgrade zope to 2.9.4 (track Fedora Core)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Don't auto-start ricci after installation, do it manually
  - Under certain circumstances, default luci password would not get reset
  - Many Luci improvements


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11.7
changelog:
  - Move ricci-modrpm, ricci-modlog, ricci-modstorage, ricci-modservice
    from /usr/sbin to /usr/libexec


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11
changelog:
  - Spin off clustermon.srpm (modcluster, cluster-snmp and
    cluster-cim) from conga.srpm
  - Luci: tighten down security


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added "Requires: xorg-x11-proto-devel" to devel package for xi.pc
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-2
changelog:
  - Replace "makeinstall" with "make install DESTDIR=..." for (#192721)
  - Remove package ownership of mandir/libdir/etc.


author: Mike A. Harris <mharris@redhat.com> 0.99.2-1
changelog:
  - Updated libXi to version 0.99.2 from X11R7 RC3
  - Added "Requires(pre): xorg-x11-filesystem >= 0.99.2-3", to ensure
    that /usr/lib/X11 and /usr/include/X11 pre-exist.
  - Removed 'x' suffix from manpage directories to match RC3 upstream.


author: Mike A. Harris <mharris@redhat.com> 0.99.1-3
changelog:
  - Added "BuildRequires: libXau-devel", as build fails without it, but does
    not check for it with ./configure.  Bug (fdo#5065)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Changed 'Conflicts: XFree86-devel, xorg-x11-devel' to 'Obsoletes'
  - Changed 'Conflicts: XFree86-libs, xorg-x11-libs' to 'Obsoletes'


author: Mike A. Harris <mharris@redhat.com> 0.99.1-1
changelog:
  - Updated libXi to version 0.99.1 from X11R7 RC1
  - Updated file manifest to find manpages in "man3x"


author: Mike A. Harris <mharris@redhat.com> 0.99.0-3
changelog:
  - Renamed package to remove xorg-x11 from the name due to unanimous decision
    between developers.
  - Use Fedora Extras style BuildRoot tag.
  - Disable static library creation by default.
  - Add missing defattr to devel subpackage
  - Add missing documentation files to doc macro


author: Mike A. Harris <mharris@redhat.com> 0.99.0-2
changelog:
  - Renamed package to prepend "xorg-x11" to the name for consistency with
    the rest of the X11R7 packages.
  - Added "Requires: %{name} = %{version}-%{release}" dependency to devel
    subpackage to ensure the devel package matches the installed shared libs.
  - Added virtual "Provides: lib<name>" and "Provides: lib<name>-devel" to
    allow applications to use implementation agnostic dependencies.
  - Added post/postun scripts which call ldconfig.
  - Added Conflicts with XFree86-libs and xorg-x11-libs to runtime package,
    and Conflicts with XFree86-devel and xorg-x11-devel to devel package.


author: Karsten Hopp <karsten@redhat.com> 1.5.22-7
changelog:
  - add fix for CVE-2009-3736,
    libltdl may load and execute code from a library in the current directory


author: Karsten Hopp <karsten@redhat.de> 1.5.22-1
changelog:
  - update to 1.5.22, most prominent fixes are:
    - Fix 1.5 regression that caused linking a program `-static' to also
      link statically against installed libtool libraries, contrary to
      documented (and actual 1.4.x) behavior.
    - Fix silent failure of `libtoolize --ltdl' if libltdl files not present.


author: Florian La Roche <laroche@redhat.com>
changelog:
  - add version-release to the Provides: and fix our own
    Requires: line to the current naming scheme


author: Daniel Reed <djr@redhat.com> 1.5.12.multilib2-3.4.3
changelog:
  - update to the 1.5.12 bugfix release
    - Makes use of $datarootdir, which is necessary for Autoconf >= 2.60.
    - Correctly skip hppa, x86_64, and s390* in tests/demo-nopic.test.
    - Interpret `include' statements in toplevel ld.so.conf file.
    - While "parsing" /etc/ld.so.conf, skip comments.
  - add dependency on gcc version; /usr/bin/libtool hardcodes paths into gcc's internal directories
  - replace "libtool-libs" with "libtool-ltdl" and "libtool-ltdl-devel"


author: Daniel Reed <djr@redhat.com> 1.5.10-1
changelog:
  - update to the 1.5.10 bugfix release
    - obsoletes libtool-1.4-nonneg.patch
    - obsoletes libtool-1.5-libtool.m4-x86_64.patch
    - obsoletes libtool-1.4.2-multilib.patch
    - obsoletes libtool-1.4.2-demo.patch
    - obsoletes libtool-1.5-testfailure.patch


author: Jens Petersen <petersen@redhat.com> - 1.5.4-1
changelog:
  - 1.5.4 bugfix release
  - improve libtool-1.4.2-multilib.patch (Albert Chin) and only apply to
    libtool.m4
  - use bootstrap instead of autoreconf to update configuration
  - update libtool-1.4.3-ltmain-SED.patch to libtool-1.5.4-ltmain-SED.patch


author: Jens Petersen <petersen@redhat.com> - 1.5.2-1
changelog:
  - update to 1.5.2 bugfix release
  - update libtool-1.5-libtool.m4-x86_64.patch
  - nolonger need libtool-1.5-mktemp.patch, libtool-1.5-expsym-linux.patch,
    libtool-1.5-readonlysym.patch, libtool-1.5-relink-libdir-order-91110.patch,
    libtool-1.5-AC_PROG_LD_GNU-quote-v-97608.patch and libtool-1.5-nostdlib.patch


author: Jens Petersen <petersen@redhat.com> - 1.5-4
changelog:
  - remove the quotes around LD in AC_PROG_LD_GNU (#97608)
    [reported by twaugh]
  - use -nostdlib also when linking with g++ and non-GNU ld in
    _LT_AC_LANG_CXX_CONFIG [reported by fnasser, patch by aoliva]
  - use %configure with CC and CXX set


author: Jens Petersen <petersen@redhat.com> - 1.5-3
changelog:
  - don't use %configure since target options caused libtool to assume
    i386-redhat-linux-gcc instead of gcc for CC (reported by Joe Orton)
  - add libtool-1.5-relink-libdir-order-91110.patch to fix order of lib dirs
    searched when relinking (#91110) [patch from Joe Orton]


author: Jens Petersen <petersen@redhat.com> - 1.5-1
changelog:
  - update to 1.5
  - no longer override config.{guess,sub} for rpmbuild %configure,
    redhat-rpm-config owns those now
  - update and rename libtool-1.4.2-s390_x86_64.patch to
    libtool-1.5-libtool.m4-x86_64.patch since s390 now included
  - buildrequire autoconf and automake, no longer automake14
  - skip make check on s390 temporarily
  - no longer skip demo-nopic.test on x86_64, s390 and s390x
  - from Owen Taylor
    - add libtool-1.4.2-expsym-linux.patch (#55607) [from James Henstridge]
    - add quoting in mktemp patch
    - add libtool-1.5-readonlysym.patch
    - add libtool-1.5-testfailure.patch workaround
    - no longer need libtool-1.4.2-relink-58664.patch


author: Florian La Roche <Florian.LaRoche@redhat.de> - 1.4.3-5
changelog:
  - add config.guess and config.sub, otherwise old versions of
    these files can creep into /usr/share/libtool/


author: Jens Petersen <petersen@redhat.com> 1.4.3-3
changelog:
  - fix mktemp to work when running mktemp fails (#76602)
    [reported by (Oron Peled)]
  - remove info dir file, don't exclude it
  - fix typo in -libs description (#79619)
  - use buildroot instead of RPM_BUILD_ROOT


author: Jens Petersen <petersen@redhat.com>
changelog:
  - add --without check build option to allow disabling of "make check"
  - exclude info dir file rather than removing


author: Jens Petersen <petersen@redhat.com> 1.4.3-2
changelog:
  - define SED in ltmain.sh for historic ltconfig files
  - define macro AUTOTOOLS to hold automake-1.4 and aclocal-1.4, and use it
  - leave old missing file for now
  - general spec file cleanup
    - don't copy install files to demo nor mess with installed ltdl files
    - don't need to run make in doc
    - force removal of info dir file
    - don't need to create install prefix dir
    - don't bother gzipping info files ourselves


author: Jens Petersen <petersen@redhat.com> 1.4.3-1
changelog:
  - update to 1.4.3
  - remove obsolete patches (test-quote, dup-deps, libtoolize-configure.ac)
  - apply the multilib patch to just the original config files
  - update x86_64/s390 patch and just apply to original config files
  - use automake-1.4 in "make check" for demo-make.test to pass!
  - remove info dir file that is not installed
  - make autoreconf update missing


author: Jens Petersen <petersen@redhat.com> 1.4.2-11
changelog:
  - don't hardcode "configure.in" in libtoolize (#70864)
    [reported by bastiaan@webcriminals.com]
  - make check, but not on ia64


author: Jens Petersen <petersen@redhat.com> 1.4.2-8
changelog:
  - add old patch from aoliva to fix relinking when installing into a buildroot
  - backport dup-deps fix from cvs stable branch


author: Jens Petersen <petersen@redhat.com> 1.4.2-5
changelog:
  - revert filemagic and archive-shared patches following cvs (#54887)
  - don't change "&& test" to "-a" in ltmain.in


author: Jens Petersen <petersen@redhat.com> 1.4.2-3
changelog:
  - test quoting patch should be on ltmain.in not ltmain.sh (#53276)
  - use file_magic for Linux ELF (#54887)
  - allow link against an archive when building a shared library (#54887)
  - include ltdl.m4 in manifest (#56671)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch to use mktemp to create the tempdir
  - use %configure after defining __libtoolize to /bin/true


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - explicitly disable per-arch libraries (#2210)
  - undo hard links and remove zero length file (#2689)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - disable the --cache-file passing to ltconfig; this breaks the older
    ltconfig scripts found around.


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-9.el5_4
changelog:
  - Ensure a connection is not used after its CA certificate has been deleted
  - Resolves: CVE-2009-4144
  - Fix possible information disclosure by nm-connection-editor
  - Resolves: CVE-2009-4145


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-9
changelog:
  - Don't show the applet's VPN submenu if no VPN plugins are installed
  - Resolves: #464604
  - Revert fix for #494212, since it breaks multilib (see 351101)
  - Related: #494212


author: Matthew Barnes <mbarnes@redhat.com> - 1:0.7.0-6
changelog:
  - Add new /etc/sysconfig/network options to disable wifi sharing
  - Resolves: #496247
  - Fix a compiler warning in nm-applet-wifi-passphrase-not-hex-rh466509.patch
  - Related: #466509


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-5
changelog:
  - Fix AP signal strength display in multi-BSSID networks
  - Resolves: #485477
  - Fix VPN export in the connection editor
  - Resolves: #485345
  - Close applet context menu before requesting keyring items
  - Resolves: #476020
  - Silence ifcfg-rh plugin warning about invalid 'lo' connections
  - Resolves: #484060
  - Show wifi passphrases instead of hashed hex keys
  - Resolves: #466509
  - Fix wpa_supplicant requires
  - Resolves: #486688


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-4
changelog:
  - CVE-2009-0365: GetSecrets disclosure
  - CVE-2009-0578: local users can modify the connection settings
  - Resolves: #487778
  - Resolves: #487779


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-2
changelog:
  - Always bring the secrets dialog to the front (updated)
  - Resolves: #467728
  - Prevent stuck grabs between applet menu and the keyring password dialog (updated)
  - Resolves: #465154
  - Fix issues with creating wired 802.1x connections
  - Resolves: #474879


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-1
changelog:
  - Update to NetworkManager 0.7 final release
  - Rename 'ifcfg-fedora' plugin to 'ifcfg-rh'
  - Resolves: #471932


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4326
changelog:
  - Initially ignore ONBOOT to preserve RHEL 5.2 behavior
  - Resolves: #467243
  - Fix routing when the gateway is not on the local subnet (rh #434625)


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.12.svn4185
changelog:
  - Defer notification bubbles a bit longer
  - Resolves: #467037
  - Always bring the secrets dialog to the front
  - Resolves: #467728
  - Prevent stuck grabs between applet menu and the keyring password dialog
  - Resolves: #465154


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4185
changelog:
  - Explicitly allow HAL to send signals to NM
  - Resolves: #463930
  - Always use AP_SCAN=2 on airo
  - Resolves: #467117
  - Fix default route behavior
  - Resolves: #466166
  - Remove un-needed dependency on gnome-panel
  - Suppress applet notification bubbles for short period after startup
  - Resolves: #467037


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4133
changelog:
  - Fix resume issues with ipw3945 driver
  - Resolves: #463930
  - Related: #362421
  - Power up mobile broadband cards before trying to use them
  - Fix VPN connection importing
  - Recognize additional Dell mobile broadband cards
  - Related: #455790


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4088
changelog:
  - Related: #455790
  - Fix desktop file validation
  - Disable hostname updates to match previous NM behavior
  - Remove bogus BuildRequires on external libnl
  - Add support for Sierra Wireless AC860


author: Dan Williams <dcbw@redhat.com> - 1:0.7.0-0.11.svn4082
changelog:
  - Update to NetworkManager 0.7
  - Resolves: #455790
  - Resolves: #221773
  - Resolves: #223119
  - Resolves: #224022
  - Resolves: #434625
  - Resolves: #437873


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-8
changelog:
  - Ensure dialog is realized before setting it's time (Related: #219155)
  - Fix check when moving WPA private key password (Related: #220915)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-7
changelog:
  - Add LEAP authentication support (Resolves: #224922)
  - Suppress initial wireless device activation until wired devices have had
      time to figure out their link state (Related: #362421)
  - Give drivers some time to recover after suspend/resume (Resolves: #362421)
  - Increase D-Bus pending call limit for applet and NM (Resolves: #221323)
  - Send default EAP fragment size of 1300 to supplicant for better 802.1x
      compatibility (Related: #427843)
  - Move WPA-Enterprise passwords to the GNOME Keyring (Resolves: #220915)
  - Fix the focus-stealing-prevention workarounds to always show the wireless
      secrets dialog (Resolves: #219155)
  - Fix a race when checking whether to activate devices (Resolves: #215720)
  - Indicate when an IPv4 autoip address has been acquired on a wired interface
      (Resolves: #213094)
  - Make use of driver-reported scan capabilities if supported (Related: #427528)


author: Dan Williams <dcbw@redhat.com> - 1:0.6.4-2
changelog:
  - Revert FC6 to latest stable NM
  - Update to stable snapshot
  - Remove bind/caching-nameserver hard requirement


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060529
changelog:
  - Update to latest CVS
  	o Gnome.org #333420: dialog do not have window icons
  	o Gnome.org #336913: HIG tweaks for vpn properties pages
  	o Gnome.org #336846: HIG tweaks for nm-vpn-properties
  	o Gnome.org #336847: some bugs in nm-vpn-properties args parsing
  	o Gnome.org #341306: nm-vpn-properties crashes on startup
  	o Gnome.org #341263: Version 0.6.2-0ubuntu5 crashes on nm_device_802_11_wireless_get_type
  	o Gnome.org #341297: displays repeated keyring dialogs on resume from suspend
  	o Gnome.org #342400: Building libnm-util --without-gcrypt results in linker error
  	o Gnome.org #342398: Eleminate Gnome dependency for NetworkManager
  	o Gnome.org #336532: declaration of 'link' shadows a global declaration
  - Specfile fixes (#rh187489#)


author: Dan Williams <dcbw@redhat.com> - 0.7.0-0.cvs20060521
changelog:
  - Update to latest CVS
  - Drop special-case-madwifi.patch, since WEXT code is in madwifi-ng trunk now


author: Bill Nottingham <notting@redhat.com> - 0.6.2-3.fc6
changelog:
  - use the same 0.6.2 tarball as FC5, so we have the same VPN interface
    (did he fire ten args, or only nine?)


author: Jeremy Katz <katzj@redhat.com> - 0.6.2-2.fc6
changelog:
  - use the hal device type instead of poking via ioctl so that wireless 
    devices are properly detected even if the kill switch has been used


author: Dan Williams <dcbw@redhat.com> - 0.6.2-1
changelog:
  - Update to 0.6.2:
      * Fix various WPA-related bugs
      * Clean up leaks
      * Increased DHCP timeout to account for slow DHCP servers, or STP-enabled
          switches
      * Allow applet to reconnect on dbus restarts
      * Add "Dynamic WEP" support
      * Allow hiding of password/key entry text
      * More responsive connection switching


author: Dan Williams <dcbw@redhat.com> 0.5.1-18.cvs20060301
changelog:
  - Fix VPN-related crash
  - Fix issue where NM would refuse to activate a VPN connection once it had timed out
  - Log wpa_supplicant output for better debugging


author: Dan Williams <dcbw@redhat.com> 0.5.1-13.cvs20060221
changelog:
  - Add BuildRequires: libnl-devel (#rh179438#)
  - Fix libnm_glib to not clobber an application's existing dbus connection
  	(#rh177546#, gnome.org #326572)
  - libnotify support
  - AP compatibility fixes


author: Dan Williams <dcbw@redhat.com> 0.5.1-10.cvs20060205
changelog:
  - Workarounds for madwifi/Atheros cards
  - Do better with non-SSID-broadcasting access points
  - Fix hangs when access points change settings


author: Dan Williams <dcbw@redhat.com> 0.5.1-8.cvs20060131
changelog:
  - Switch to autostarting the applet instead of having it be session-managed
  - Work better with non-broadcasting access points
  - Add more manufacturer default SSIDs to the blacklist


author: Christopher Aillon <caillon@redhat.com> - 0.5.1-3
changelog:
  - Split out the -glib subpackage to have a -glib-devel package as well
  - Add epoch to version requirements for bind and wireless-tools
  - Update URL of project


author: Dan Williams <dcbw@redaht.com> - 0.4.1-5.cvs20051010
changelog:
  - Fix automatic wireless connections
  - Remove usage of NMLoadModules callout, no longer needed
  - Try to fix deadlock when menu is down and keyring dialog pops up


author: Dan Williams <dcbw@redhat.com> - 0.4.1-4.cvs20051009
changelog:
  - Update to latest CVS
  	o Integrate connection progress with applet icon (Chris Aillon)
  	o More information in "Connection Information" dialog (Robert Love)
  	o Shorten time taken to sleep
  	o Make applet icon wireless strength levels a bit more realistic
  	o Talk to named using DBUS rather than spawning our own
  		- You need to add "-D" to the OPTIONS line in /etc/sysconfig/named
  		- You need to set named to start as a service on startup


author: Dan Williams <dcbw@redhat.com> - 0.4-35.cvs20050811
changelog:
  - Update to latest CVS
  	o Use DHCP server address as gateway address if the DHCP server doesn't give
  		us a gateway address #rh165698#
  	o Fixes to the applet (Robert Love)
  	o Better caching of information in the applet (Bill Moss)
  	o Generate automatic suggested Ad-Hoc network name from machine's hostname
  		(Robert Love)
  	o Update all network information on successfull connect, not just 
  		authentication method


author: David Zeuthen <davidz@redhat.com> - 0.4-33.cvs20050629
changelog:
  - Update to latest CVS to get latest VPN interface settings to satisfy
    BuildReq for NetworkManager-vpnc in Fedora Extras Development
  - Latest CVS also contains various bug- and UI-fixes


author: Dan Williams <dcbw@redhat.com> - 0.4-32.cvs20050617
changelog:
  - Update to latest CVS
  	o VPN connection import/export capability
  	o Fix up some menu item names
  - Move nm-vpn-properties.glade to the gnome subpackage


author: Dan Williams <dcbw@redhat.com> - 0.4-31.cvs20050616
changelog:
  - Update to latest CVS
  	o Clean up wording in Wireless Network Discovery menu
  	o Robert Love's applet beautify patch


author: Dan Williams <dcbw@redhat.com> - 0.4-12.cvs20050404
changelog:
  - Enable OK button correctly in Passphrase and Other Networks dialogs when
  	using ASCII or Hex WEP keys


author: Dan Williams <dcbw@redhat.com> - 0.4-9.cvs20050404
changelog:
  - Fix some memory leaks (Tom Parker)
  - Join to threads rather than spinning for their completion (Tom Parker)
  - Fix misuse of a g_assert() (Colin Walters)
  - Fix return checking of an ioctl() (Bill Moss)
  - Better detection and matching of hidden access points (Bill Moss)
  - Don't use varargs, and therefore don't crash on PPC (Peter Jones)


author: Dan Williams <dcbw@redhat.com> 0.3.3-2.cvs20050214
changelog:
  - Never automatically choose a device that doesn't support carrier detection
  - Add right-click menu to applet, can now "Pause/Resume" scanning through it
  - Fix DHCP Renew/Rebind timeouts
  - Fix frequency cycling problem on some cards, even when scanning was off
  - Play better with IPv6
  - Don't send kernel version in DHCP packets, and ensure DHCP packets are at
  	least 300 bytes in length to work around broken router
  - New DHCP options D-BUS API by Dan Reed
  - Handle multiple domain search options in DHCP responses


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050202
changelog:
  - Display wireless network name in applet tooltip
  - Hopefully fix double-default-route problem
  - Write out valid resolv.conf when we exit
  - Make multi-domain search options work
  - Rework signal strength code to be WEXT conformant, if strength is
  	still wierd then its 95% surely a driver problem
  - Fix annoying instances of suddenly dropping and reactivating a
  	wireless device (Cisco cards were worst offenders here)
  - Fix some instances of NetworkManager not remembering your WEP key
  - Fix some races between NetworkManager and NetworkManagerInfo where
  	NetworkManager wouldn't recognize changes in the allowed list
  - Don't shove Ad-Hoc Access Point MAC addresses into GConf


author: Dan Williams <dcbw@redhat.com> 0.3.3-1.cvs20050124
changelog:
  - Update to latest CVS
  - Make sure we start as late as possible so that we ensure dbus & HAL
  	are already around
  - Fix race in initial device activation


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050118
changelog:
  - Fix issue where NM wouldn't recognize that access points were
  	encrypted, and then would try to connect without encryption
  - Refine packaging to put client library in separate package
  - Remove bind+caching-nameserver dep for FC-3, use 'nscd -i hosts'
  	instead.  DNS queries may timeout now right after device
  	activation due to this change.


author: <dcbw@redhat.com> - 0.3.3-1.cvs20050112
changelog:
  - Update to latest CVS
  - Fixes to DHCP code
  - Link-Local (ZeroConf/Rendezvous) support
  - Use bind in "caching-nameserver" mode to work around stupidity
  	in glibc's resolver library not recognizing resolv.conf changes
  - #rh144818# Clean up the specfile (Patch from Matthias Saou)
  - Ad-Hoc mode support with Link-Local addressing only (for now)
  - Fixes for device activation race conditions
  - Wireless scanning in separate thread


author: <dcbw@redhat.com> - 0.3.2-4.3.cvs20041208
changelog:
  - Update to CVS
  - Updates to link detection, DHCP code
  - Remove NMLaunchHelper so we start up faster and don't
  	block for a connection.  This means services that depend
  	on the network may fail if they start right after NM
  - Make sure DHCP renew/rebinding works


author: <dcbw@redhat.com> - 0.3.2-3.cvs20041117
changelog:
  - Update to CVS
  - Fixes to link detection
  - Better detection of non-ESSID-broadcasting access points
  - Don't dialog-spam the user if a connection fails


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041115
changelog:
  - Update to CVS
  - Much better link detection, works with Open System authentication
  - Blacklist wireless cards rather than whitelisting them


author: <dcbw@redhat.com> - 0.3.2-2.cvs20041029
changelog:
  - #rh134893# NetworkManagerInfo and the panel-icon life-cycle
  - #rh134895# Status icon should hide when in Wired-only mode
  - #rh134896# Icon code needs rewrite
  - #rh134897# "Other Networks..." dialog needs implementing
  - #rh135055# Menu highlights incorrectly in NM
  - #rh135648# segfault with cipsec0
  - #rh135722# NetworkManager will not allow zaurus to sync via usb0
  - #rh135999# NetworkManager-0.3.1 will not connect to 128 wep
  - #rh136866# applet needs tooltips
  - #rh137047# lots of applets, yay!
  - #rh137341# Network Manager dies after disconnecting from wired network second time
  - Better checking for wireless devices
  - Fix some memleaks
  - Fix issues with dhclient declining an offered address
  - Fix an activation thread deadlock
  - More accurately detect "Other wireless networks" that are encrypted
  - Don't bring devices down as much, won't hotplug-spam as much anymore
  	about firmware
  - Add a "network not found" dialog when the user chooses a network that could
  	not be connected to


author: Dan Williams <dcbw@redhat.com> 0.2-4
changelog:
  - Update from CVS
  - Improvements:
  	o Better link checking on wireless cards
  	o Panel applet now a Notification Area icon
  	o Static IP configuration support


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-5
changelog:
  - don't modify imapd.conf if not necessary, 
    fix different time for source files across archs (#497317)


author: Michal Hlavinka <mhlavink@redhat.com> - 2.3.7-4
changelog:
  - fix mupdate connection (#326511)
  - fix tls and authentication for LMTP (#250189)
  - extend ctl_cyrusdb man page (#463230)


author: Petr Rockai <prockai@redhat.com> - 2.3.7-1
changelog:
  - update to latest upstream version, fixes a fair amount of issues
  - forward-port the autocreate and rmquota patches (used latest
    upstream patches, those are for 2.3.3)


author: Petr Rockai <prockai@redhat.com> - 2.3.1-3
changelog:
  - install perl modules into vendor_perl instead of site_perl
  - change mode of perl .so files to 755 instead of 555
  - update pam configuration to use include directive instead
    of deprecated pam_stack
  - change prereq on cyrus-imapd-utils to requires


author: Petr Rockai <prockai@redhat.com> - 2.3.1-2.99.test1
changelog:
  - testing build for RHEL5
  - address bunch of rpmlint errors and warnings
  - rename perl-Cyrus to cyrus-imapd-perl to be consistent with rest
    of package (the cyrus modules are not part of cpan)
  - added provides on cyrus-nntp and cyrus-murder (the functionality
    is part of main package now)
  - hardcoded a bunch of build parameters for RHEL-5
  - removed generation of README.buildoptions
  - the two above made it possible to get rid of most build-time parameter
    guessing from environment
  - get rid of internal autoconf (iew)
  - don't strip binaries, renders -debuginfo useless...
  - remove prereq's in favour of newly added requires(...)


author: John Dennis <jdennis@redhat.com> - 2.3.1-2
changelog:
  - bring up to Simon Matter's 2.3.1-2 release
  - fix bug #173319, require cyrus-sasl-lib instead of cyrus-sasl
  - fix bug #176470, hardcoded disttag


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.18
changelog:
  - update rpm_set_permissions script
  - add snmp support as build time option, disabled by default
    because it doesn't build on older distributions


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.13
changelog:
  - add autosievefolder patch
  - add rmquota+deletemailbox patch
  - change default path for make_md5, add md5 directory


author: Simon Matter <simon.matter@invoca.ch> 2.3.1-0.10
changelog:
  - spec file cleanup
  - add more cvt_cyrusdb_all fixes
  - fix pre/post scripts
  - fix requirements
  - add patch to set Invoca RPM config defaults
  - add sync directory used for replication
  - add autocreate patch


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-12
changelog:
  - add quickstart/stop option to init script to bypass db import/export
  - add authid_normalize patch
  - add allow_auth_plain_proxying patch
  - update gcc4 patch
  - remove useless fdatasync patch
  - add private autoconf used for build, remove autoconf dependency
  - generate correct docs including man pages
  - remove unneeded files from doc directory


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-6
changelog:
  - fix recovery problems with db4, which do not exist with db3
  - fix logic for handling ssl certs
  - remove initlog from init script


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-5
changelog:
  - add notifytest to the distribution
  - add functionality to convert all berkeley databases to skiplist
    on shutdown and convert them back as needed on startup. This should
    solve the upgrade problems with Berkeley databases.


author: Simon Matter <simon.matter@invoca.ch> 2.2.12-4.14
changelog:
  - add gcc4 patch
  - determine and handle pki directory for openssl correctly
  - add skiplist recovery docs
  - add notify_sms patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added nolinkimapspool patch
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - change license field to BSD, its not exact BSD, but BSD is the closest


author: John Dennis <jdennis@redhat.com> - 2.2.12-6.fc4
changelog:
  - the openssl package moved all its certs, CA, Makefile, etc. to /etc/pki
    now we are consistent with the openssl directory changes.


author: John Dennis <jdennis@redhat.com> - 2.2.12-5.fc4
changelog:
  - we finally have a common directory, /etc/pki for certs, so create
    /etc/pki/cyrus-imapd and put the ssl pem file there. The /etc/cyrus-imapd
    location will not be used, this change supercedes that.


author: John Dennis <jdennis@redhat.com> - 2.2.12-4.fc4
changelog:
  - fix bug #141479, move ssl pem file from /usr/share/ssl/certs to /etc/cyrus-imapd/cyrus-imapd.pem
  - change license field to BSD, its not exact BSD, but BSD is the closest.


author: John Dennis <jdennis@redhat.com> - 2.2.12-1.2.fc4
changelog:
  - fix debug_package macro, it was still being expanded,
    comments don't hide macro expansion
  - fix changelog chronological order
  - fix bug 118832, cyrus-imapd is modifying /etc/services


author: John Dennis <jdennis@redhat.com> - 2.2.10-11.2.fc4
changelog:
  - make _contribdir identical to Simon's,
    I had been getting burned by rpm's bizarre handling of macros in comments


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - remove special ownership and permissions from deliver
  - enable deliver-wrapper per default
  - enable OutlookExpress seenstate patch per default


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib64 for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib64 for symlinks
  - remove /usr/lib64 pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed allnumeric patch, not needed anymore
  - made groupcache a compile time option
  - rename nntp's pam service, fixes RedHat's bug #142672


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated groupcache patch
  - updated cvt_cyrusdb_all to use runuser instead of su if available
  - added upd_groupcache tool


author: John Dennis <jdennis@redhat.com> 2.2.10-3.devel
changelog:
  - fix bug #141673, dup of bug #141470
    Also make cyrus.conf noreplace in addition to imapd.conf
    Remove the verify overrides on the noreplace config files,
    we do want config file changes visible when verifying


author: John Dennis <jdennis@redhat.com> 2.2.10-1.devel
changelog:
  - update to Simon Matter's 2.2.10 RPM,
    fixes bug #139382, 
    security advisories: CAN-2004-1011 CAN-2004-1012 CAN-2004-1013 CAN-2004-1015


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - changed requirement for file >= 3.35-1 from BuildPrereq to
    Requires, fixes RedHat's bug #124991
  - added acceptinvalidfrom patch to fix RedHat's bug #137705


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - fixed symlinks for x86_64, now uses the _libdir macro
    reported by John Dennis, fixes RedHat's bug #128964
  - removed obsoletes tag, fixes RedHat's bugs #127448, #129274


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate and autosieve patches
  - made authorization a compile time option
  - added sieve-bc_eval patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated to 2.2.7
  - modified autocreate patch or 2.2.7
  - removed snmpargs patch which was needed for RedHat 6.2


author: John Dennis <jdennis@redhat.com> - 2.2.6-2,FC3,1
changelog:
  - bring up to date with Simon Matter's latest upstream rpm 2.2.6-2
  - comment out illegal tags Packager, Vendor, Distribution
    build for FC3


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate, autosieve and rmquota patches
  - fixed rmquota patch to build on gcc v3.3.x
  - added lmtp_sieve patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - don't enable cyrus-imapd per default
  - rename fetchnews to cyrfetchnews to avoid namespace conflicts with leafnode
  - replace fetchnews with cyrfetchnews in man pages
  - replace master with cyrus-master in man pages


author: Dan Walsh <dwalsh@redhat.com>
changelog:
  - change su within init script to get input from /dev/null
    this prevents hang when running in SELinux
  - don't use -fpie as default, it breaks different distributions


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - merged in most changes from Karsten Hopp's RedHat package
  - fixed permissions of files in contrib, thank you
    Edward Rudd for reporting it.
  - modified snmp patch to make it build on RedHat 6.2 again


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - switch to Simon Matter's cyrus-imapd package, which has
    some major improvements over the old Red Hat package.
    - configdirectory moved from /var/imap to /var/lib/imap
    - sasl_pwcheck_method changed to saslauthd
  - needed to delete package/vendor tags for buildsystem.
  - added USEPIE variable for linking with -fpie flag
  - removed rpath from linker arguments
  - removed email header from README.HOWTO-recover-mailboxes
  - added lib64 patch
  - use CFLAGS from specfile in imtest subdir
  - disable -pie on ppc for now


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - convert sieve scripts to UTF-8 only if sievec failed before
  - add note to the readme about limiting loggin on busy servers
  - added build time option to chose the syslog facility


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - add sendmail m4 macro, some people were looking for it
  - just one source for pam default configuration (they were all the same)
  - added /etc/pam.d/lmtp
  - added build support for RedHat Beta severn


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - updated autocreate patch to 0.8.1
  - removed creation of spool/config dirs, not needed anymore
  - added cyrus_sharedbackup to contrib


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - upgraded to 2.1.14
  - removed now obsolete forcedowncase patch
  - use --with-extraident to add extra version information
  - updated munge8bit patch


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added functionality to patch the IPv6 patch on the fly if
    autoconf > 2.13, we can now use newer autoconf again.


author: Paul Bender <pbender@qualcomm.com>
changelog:
  - fixed spec file so that autoconf 2.13 will always be used,
    since the IPv6 patch requires autoconf <= 2.13


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - update to 2.1.12
  - added logrotate entry for /var/log/auth.log
  - modified init script to use builtin daemon mode


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - removed autoconf hack, not needed anymore
  - enabled build on RedHat Beta Phoebe
  - added services entry for lmtp
  - cleanup spec file


author: Troels Arvin <troels@arvin.dk>
changelog:
  - Explicitly changed files-section to
     - use defattr for simple (root-owned 0644) files
     - explictly set root as user/group owner where
       the user/group ownership was previously indicated
       as "-"; this allows building valid packages without
       having to being root when building


author: Simon Matter <simix@datacomm.ch>
changelog:
  - remove creation of cyrus user at build time
  - added scripts from ftp://kalamazoolinux.org/pub/projects/awilliam/cyrus/


author: Simon Matter <simix@datacomm.ch>
changelog:
  - modified path in deliver-wrapper, thank you Richard L. Phipps
  - added RedHat 2.1AS support to the perlhack detection
  - added build time option to force syncronous updates on ext3


author: Simon Matter <simix@datacomm.ch>
changelog:
  - included support for different autoconf versions
  - modified the perl build and install process
  - made some .spec changes to build on RedHat 7.x and limbo


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added compile time parameters to configure the package based on
    the idea from Luca Olivetti <luca@olivetti.cjb.net>
  - make deliver-wrapper a compile time option


author: Simon Matter <simix@datacomm.ch>
changelog:
  - upgraded to cyrus-imapd 2.1.3
  - removed some stuff that was cleaned up in the sources
  - added compile time options for db backends


author: Simon Matter <simix@datacomm.ch>
changelog:
  - added some %dir flags
  - removed /usr/lib/sasl/Cyrus.conf
  - added conf templates
  - build time option for usage of saslauth group


author: Simon Matter <simix@datacomm.ch>
changelog:
  - dependency of cyrus-sasl >= 1.5.24-22
  - dotstuffing patch for sendmail calls made by sieve for outgoing
    mails
  - patch for ability to force ipurge to traverse personal folders


author: Simon Matter <simix@datacomm.ch>
changelog:
  - changed default auth to pam
  - remove several %dir from %files sections
  - change from /usr/lib/cyrus -> /usr/libexec/cyrus
  - rename source files to something like cyrus...
  - added rehash tool
  - changed to hashed spool


author: Martin Stransky <stransky@redhat.com> - 3.0.1-2
changelog:
  - Fixed #447535 - RHEL 5.2 beta / upstream Firefox 3 beta 5
    autoConfig broken
  - Fixed #445304 - HTML/index.html always redirects to en-US/index.html


author: Martin Stransky <stransky@redhat.com> - 3.0-0.beta2.9
changelog:
  - added pathes for Mozilla bugs 311008, 410852, 411037, 412519
  - fixed bookmarks
  - fixed homepage
  - disabled startup notification


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-4
changelog:
  - added patches for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942


author: Kai Engert <kengert@redhat.com> - 1.5.0.12-2
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-10
changelog:
  - Updated cursor position patch from tagoh to fix issue with "jumping"
    cursor when in a textfield with tabs.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.9-6
changelog:
  - Extract the source into a versioned directory to help with
    parallel compiles and -debuginfo packages


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-2
changelog:
  - Updated pango patches from behdad
  - Fix a leak in liveconnect
  - Fix a potential crash in CSS
  - Let Firefox handle gcc warnings; it weeds out frequent offenders.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.8-1
changelog:
  - Update to 1.5.0.8
  - Allow choosing of download directory
  - Take the user to the correct directory from the Download Manager.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.7-5
changelog:
  - Fix crash when changing gtk key theme
  - Fix gtkmozembed window visibility
  - Prevent UI freezes while changing GNOME theme
  - Remove verbiage about pango; no longer required by upstream.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-10
changelog:
  - Enable GCC visibility
  - export XLIB_SKIP_ARGB_VISUALS=1 as a temporary workaround to prevent
    a broken Adobe/Macromedia Flash Player plugin taking the X server.


author: Christopher Aillon <caillon@redhat.com> 1.5.0.6-4
changelog:
  - Update NSS requires to workaround a bug introduced by NSS changes.
    https://bugzilla.mozilla.org/show_bug.cgi?id=294542
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=201922


author: Behdad Esfahbod <besfahbo@redhat.com>
changelog:
  - Add a better nopangoxft patch that doesn't depend on pangocairo
  - Add firefox-1.5-pango-mathml.patch (bug 150393)


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.4-4
changelog:
  - Ugh:
    - Mozilla the platform is deprecated
    - XULrunner has been promised for a while but is still not 1.0
    - Ship a firefox-devel for now as we need a devel platform.
    - The plan is to kill firefox-devel when xulrunner 1.0 ships. 
  - Clean up the files list a little bit.


author: Christopher Aillon <caillon@redhat.com> - 1.5.0.1-9
changelog:
  - Add a notice to the about dialog denoting this is a pango enabled build.
  - Tweak the user agent denoting this is a pango enabled build.


author: Christopher Aillon <caillon@redhat.com> - 1.5-3
changelog:
  - Once again, disable ppc64 because of a new issue.
    See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175944


author: Christopher Aillon <caillon@redhat.com> - 1.5-0.5.0.beta1
changelog:
  - Update to 1.5 beta 1.
  - Add patch to svg rendering to adjust for cairo behavior.
  - Happy birthday, dad!


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.5.deerpark.alpha2
changelog:
  - Re-enable ppc now that its binutils are fixed.
  - Disable SVG and canvas again.  The in-tree copy does not build against new pango.
  - When clicking a link and going back via history, don't keep the link focused.


author: Christopher Aillon <caillon@redhat.com> 1.1-0.2.4.deerpark.alpha2
changelog:
  - Add patch from Christian Persch to make the file chooser modal
  - Change default behavior of opening links from external apps to: New Tab
  - New build options:
    --enable-svg
    --enable-canvas


author: Christopher Aillon <caillon@redhat.com> 1.1-0.0.1.deerpark.alpha2
changelog:
  - Update to Deer Park Alpha 2
    - STILL TODO:
      - This build is not localized yet.
      - Theme issues not yet resolved.
      - Building on ppc platforms is busted, disable them for now.
      - Forward port all remaining patches.


author: Kristian Høgsberg <krh@redhat.com> 0:1.0.4-5
changelog:
  - Add firefox-1.0-pango-cairo.patch to get rid of the last few Xft
    references, fixing the "no fonts" problem.
  - Copy over changes from FC4 branch.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-4
changelog:
  - Only install searchplugins for en-US, since there isn't any way
    to dynamically select searchplugins per locale yet.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.4-3
changelog:
  - Add support for locales:
      af-ZA, ast-ES, ca-AD, cs-CZ, cy-GB, da-DK, de-DE, el-GR,
      en-GB  es-AR, es-ES, eu-ES, fi-FI, fr-FR, ga-IE, he-IL,
      hu-HU, it-IT, ko-KR, ja-JP, ja-JPM, mk-MK, nb-NO, nl-NL,
      pa-IN, pl-PL, pt-BR, pt-PT, ro-RO, ru-RU, sk-SK, sl-SI,
      sq-AL, sv-SE, tr-TR, zh-CN, zh-TW


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-5
changelog:
  - Correctly position the IM candidate window for most locales
    Note: it is still incorrectly positioned for zh_TW after this fix
  - Add temporary workaround to not create files in the user's $HOME (#149664)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.3-3
changelog:
  - Firefox script fixes to support multilib installs.
  - Add upstream patch to fix bidi justification of pango
  - Add patch to fix launching of helper applications


author: Christopher Aillon <caillon@redhat.com> 0:1.0.2-3
changelog:
  - Updated firefox icon (https://bugzilla.mozilla.org/show_bug.cgi?id=261679)
  - Fix for some more cursor issues in textareas (149991, 150002, 152089)


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-6
changelog:
  - Add patch to fix italic rendering errors with certain fonts (e.g. Tahoma)
  - Re-enable jsd since there is now a venkman version that works with Firefox.


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-3
changelog:
  - Remerge firefox-1.0-pango-selection.patch
  - Add execshield patches for ia64 and ppc
  - BuildRequires libgnome-devel, libgnomeui-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-2
changelog:
  - Add upstream fix to reduce round trips to xserver during remote control
  - Add upstream fix to call g_set_application_name


author: Christopher Aillon <caillon@redhat.com> 0:1.0.1-1
changelog:
  - Update to 1.0.1 fixing several security flaws.
  - Temporarily disable langpacks to workaround startup issues (#145806)
  - Request the correct system colors from gtk (#143423)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-7
changelog:
  - Make sure we get a URL passed in to firefox (#138861)
  - Mark some generated files as ghost (#136015)


author: Christopher Aillon <caillon@redhat.com> 0:1.0-6
changelog:
  - Don't have downloads "disappear" when downloading to desktop (#139015)
  - Add RPM version to the useragent
  - BuildRequires pango-devel


author: Christopher Aillon <caillon@redhat.com> 0:1.0-5
changelog:
  - Fix spacing in textareas when using pango for rendering
  - Enable pango rendering by default.
  - Enable smooth scrolling by default


author: Christopher Aillon <caillon@redhat.com> 0:1.0-4
changelog:
  - Add StartupWMClass patch from Damian Christey (#135830)
  - Use system colors by default (#137810)
  - Re-add s390(x)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.20
changelog:
  - More file chooser fixes:
      Pop up a confirmation dialog before overwriting files (#134648)
      Allow saving as complete once again
  - Fix for upstream 263263.


author: Christopher Blizzard <blizzard@redhat.com> 0:0.10.1-1.0PR1.15
changelog:
  - Fix problem where default apps aren't showing up in the download
    dialog (#136261)
  - Fix default height being larger than the available area, cherry picked
    from upstream


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.12
changelog:
  - Disable the default application checks. (#133713)
  - Disable the software update feature. (#136017)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.1-1.0PR1.9
changelog:
  - Fix compile issues (#134914)
  - Add patch to fix button focus issues (#133507)
  - Add patches to fix tab focus stealing issue (b.m.o #124750)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.2
changelog:
  - Change the vendor to mozilla not fedora
  - Build with --disable-strip so debuginfo packages work (#133738)
  - Add pkgconfig patch (bmo #261090)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.1
changelog:
  - Add a BR for desktop-file-utils
  - Update default configuration options to use the firefox mozconfig (#132916)
  - Use Red Hat bookmarks (#133262)
  - Update default homepage (#132721)
  - Fix JS math on AMD64 (#133226)
  - Build with MOZILLA_OFICIAL (#132917)


author: Christopher Aillon <caillon@redhat.com> 0:0.10.0-1.0PR1.0
changelog:
  - Update to 1.0PR1
  - Update man page references to say Firefox instead of Firebird
  - Remove gcc34 and extensions patch; they are now upstream
  - Update desktop database
  - Minor tweaks to the .desktop file


author: Christopher Aillon <caillon@redhat.com> 0:0.9.3-8
changelog:
  - Fixup .desktop entry Name, GenericName, and Comment (#131602)
  - Add MimeType desktop entry (patch from jrb@redhat.com)
  - Build with --disable-xprint


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.5
changelog:
  - remove ldconfig from scriptlets (bug #1846 comment #40)
  - reenabled mng support (bug #1971)
  - removed --enable-strip to let rpm to the stripping (bug #1971)
  - honor system settings in firefox.sh (bug #1971)
  - setting umask 022 in scriptlets (bug #1962)


author: Adrian Reber <adrian@lisas.de> 0:0.9.3-0.fdr.1
changelog:
  - updated to 0.9.3
  - removed following from .mozconfig:
      ac_add_options --with-system-mng
      ac_add_options --enable-xprint
      ac_add_options --disable-dtd-debug
      ac_add_options --disable-freetype2
      ac_add_options --enable-strip-libs
      ac_add_options --enable-reorder
      ac_add_options --enable-mathml
      ac_add_options --without-system-nspr


author: Adrian Reber <adrian@lisas.de> 0:0.9.2-0.fdr.5
changelog:
  - applied parts of the patch from Matthias Saou (bug #1846)
  - delete empty directories in %{ffdir}/chrome
  - more cosmetic changes to the spec file


author: Adrian Reber <adrian@lisas.de> 0:0.9-0.fdr.4
changelog:
  - remove extensions patch
  - add post hack to create extensions
  - enable negotiateauth extension
  - copy icon to browser/app/default.xpm
  - --enable-official-branding


author: Gene Czarcinski <gene@czarc.net>
changelog:
  - more x86_64 fixes
  - fix firefix-xremote-client for x86_64 (similar to what is done for
    firefox.sh.in)


author: Warren Togami <wtogami@redhat.com> 0:0.8-0.fdr.9
changelog:
  - xremote patch for thunderbird integration #1113
  - back out ugly hack from /usr/bin/firefox
  - correct default bookmarks


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.2
changelog:
  - s/0.6.1/0.7/
  - changed user-app-dir back to .phoenix as .mozilla-firebird
    is not working as expected
  - manpage now also available as MozillaFirebird.1


author: Adrian Reber <adrian@lisas.de> - 0:0.7-0.fdr.1
changelog:
  - updated to 0.7
  - provides webclient
  - run regxpcom and regchrome after installation and removal
  - added a man page from the debian package
  - changed user-app-dir from .phoenix to .mozilla-firebird


author: Adrian Reber <adrian@lisas.de> - 0:0.6.1-0.fdr.1
changelog:
  - updated to 0.6.1
  - changed buildrequires for XFree86-devel from 0:4.3.0 to 0:4.2.1 
    it should now also build on RH80


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.4.rh90
changelog:
  - renamed it again back to MozillaFirbird
  - added libmng-devel to BuildRequires
  - startup homepage is now www.fedora.us
  - improved the startup script to use the unix remote protocol 
    to open a new window


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.3.rh90
changelog:
  - new icon from http://iconpacks.mozdev.org/phoenix/iconshots/flame48true.png
  - now using gtk2 as toolkit
  - renamed again back to mozilla-firebird (I like it better)
  - Provides: MozillaFirebird for compatibility with previous releases
  - changed default bookmarks.html to contain links to www.fedora.us


author: Adrian Reber <adrian@lisas.de> - 0:0.6-0.fdr.2.rh90
changelog:
  - renamed package to MozillaFirebird and all files with the old name
  - enabled mng, mathml, xinerama support
  - now honouring RPM_OPT_FLAGS


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.3.cvs20030402.rh90
changelog:
  - Changed Prereq to Requires.
  - Changed BuildRequires to gtk+-devel (instead of file).
  - Recompressed source with bzip2.
  - Removed post.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0:0.6-0.fdr.0.2.cvs20030402.rh90
changelog:
  - Added desktop-file-utils to BuildRequires.
  - Changed category to X-Fedora-Extra.
  - Updated to CVS.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030326.rh90
changelog:
  - Updated to latest CVS.
  - Changed release to 9 vs 8.1.
  - Added cvs script.
  - added encoding to desktop file.


author: Phillip Compton <pcompton[AT]proteinmedia.com> - 0.6-0.fdr.0.1.cvs20030323.rh81
changelog:
  - Updated to latest CVS.
  - added release specification XFree86-devel Build Requirement.
  - changed chmod to %attr


author: Dan Williams <dcbw@redhat.com> - 1.1.2-12
changelog:
  - Fix for CVE-2008-3834
  - Resolves: #466227
  - Remove dbus-libs Obsoletes on dbus; not needed
  - Resolves: #466007


author: Ray Strode <rstrode@redhat.com> - 1.0.0-4
changelog:
  Resolves: #217721
  - Don't die on SIGHUP when rereading config file, if it's no
    longer compatible with the version of the bus running


author: John (J5) Palmieri <johnp@redhat.com> - 1.0.0-1
changelog:
  - update to D-Bus 1.0.0 "Blue Bird"
  - build tests, asserts and verbose mode off
  - patch so we are not fatal when checks fail


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-6
changelog:
  - change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
    in the dbus-1.pc file after compile


author: John (J5) Palmieri <johnp@redhat.com> - 0.90-4
changelog:
  - add patch that pregenerates the xml introspect file so d-bus doesn't
    have to be running suring the build.


author: Karsten Hopp <karsten@redhat.de> 0.61-5.2
changelog:
  - add buildrequires libICE-devel, libSM-devel, libcap-devel
  - change buildrequires form libX11 to libX11-devel


author: John (J5) Palmieri <johnp@redhat.com> - 0.61-5
changelog:
  - Backport patch from dbus-connection.c
    - Allows interfaces to be NULL in the message header as per the spec
    - Fixes a problem with pendings calls blocking on a data starved socket


author: John (J5) Palmieri <johnp@redhat.com> 0.61-3
changelog:
  - ABI hasn't changed so add patch that makes dbus-sharp think
    it is still 0.60 (mono uses hard version names so any change
    means apps need to recompile)


author: John (J5) Palmieri <johnp@redhat.com> 0.60-7
changelog:
  - Add patch to fix the python callchain
  - Symlink dbus-send to /usr/bin because some applications
    look for it there


author: John (J5) Palmieri <johnp@redhat.com> 0.60-5
changelog:
  - move base libraries and binaries to /bin and /lib so they can be started
    before /usr is mounted on network mounted /usr systems
  - have D-Bus start early


author: John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
changelog:
  - upgrade to 0.36.2 which fixes an exploit where
    users can attach to another user's session bus (CAN-2005-0201)


author: John (J5) Palmieri <johnp@redhat.com> - 0.36-1
changelog:
  - Upgrade to dbus-0.36
  - Split modules that go into lib64/python2.4/site-packages/dbus
  and those that go into %{python_sitelib}/dbus (they differ on 64bit)
  - Renable Qt bindings since packages in core can use them


author: John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
changelog:
  - Upgrade to dbus-0.35.2
  - removed dbus-0.34-kill-babysitter.patch
  - removed dbus-0.34-python-threadsync.patch
  - removed dbus-0.23-selinux-avc-audit.patch
  - added dbus-0.35.2-selinux-avc-audit.patch
  - take out restarts on upgrade


author: John (J5) Palmieri <johnp@redhat.com> - 0.34-1
changelog:
  - Upgrade to dbus-0.34
  - added dbus-0.34-kill-babysitter.patch
  - added dbus-0.34-python-threadsync.patch
  - remove dbus-0.32-print_child_pid.patch
  - remove dbus-0.32-deadlock-fix.patch
  - remove dbus-0.33-types.patch


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-5
changelog:
  - replace selinux_init patch with selinux_chroot_workaround patch
    to work around bad selinux interactions when using chroots
    on the beehive build machines


author: John (J5) Palmieri <johnp@redhat.com> - 0.32-2
changelog:
  - add selinux-init patch to fix dbus from segfaulting when
    building on machines that don't have selinux enabled


author: John (J5) Palmieri <johnp@redhat.com> - 0.31-1
changelog:
  - update to upstream version 0.31
  - take out user has same id patch (merged upstream)
  - udi patch updated
  - dbus-daemon-1 renamed to dbus-daemon
  - dbus-glib-tool renamed to dbus-binding-tool
  - force gcc33 because pyrex generate improper lvalue code
  - disable audit patch for now


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-4
changelog:
  - Explicitly pass in the pid file location to ./configure instead of
    letting it guess based on the build enviornment


author: John (J5) Palmieri <johnp@redhat.com> - 0.23-1
changelog:
  - Update to upstream version 0.23
  - Drop all patches except for the UDI patch as they have been 
    integrated upstream 
  - List of API changes:
        * add setgroups() to drop supplementary groups
        * removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
        * added support for int64 and uint64 to the python bindings
        * use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Add a requires for glib2-devel in the devel package
  - Add SE-Linux backport from Colin Walters that fixes 
    messages getting lost in SE-Linux contexts


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Fixed patch to use dbus-1 instead of dbus-1.0
  - (configure.in): Exported just the datadir instead of
    the full path to the dbus datadir for consistency


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - reverting BuildRequires: redhat-release because of issues with build system
  - added precompiled version of the messagebus init script


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer to new dbus-gtk package so that dbus-glib
    no longer requires X or GTK libraries. (RH Bug #130029)


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Added lib64 workaround for python bindings installing to
    the wrong lib directory on 64 bit archs


author: John (J5) Palmieri <johnp@redhat.com>
changelog:
  - Moved dbus-viewer, dbus-monitor and dbus-glib-tool 
    into the dbus-glib package so that the main dbus
    package does not depend on glib (Bug #125285)


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Conflict with cups prior to configuration file change, so that the
    %postun service condrestart works.


author: Havoc Pennington <hp@redhat.com> 0.13-2
changelog:
  - see if removing qt subpackage for now will get us through the build system,
    qt bindings not useful yet anyway


author: Havoc Pennington <hp@redhat.com> 0.11.91-3
changelog:
  - break the tiny dbus-launch that depends on X into separate package
    so a CUPS server doesn't need X installed


author: Havoc Pennington <hp@redhat.com> 0.6.93-1
changelog:
  - new cvs snap that actually forks to background and changes 
    user it's running as and so forth
  - create our system user in pre


author: Havoc Pennington <hp@redhat.com> 0.6.91-1
changelog:
  - disable qt for now because beehive hates me
  - pull a slightly newer cvs snap that creates socket directory
  - cat the make check log after make check fails


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.11
changelog:
  - 549629 Sync brcm uio to 0.4.8 to fix ifdown reconnection handling
  - 520508 Fix login/connect timeout due to MAC addr mishandling.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.8
changelog:
  - 508782 fix iscsid/iscsistart segfault due to bad conn context cast
  - Fix bnx2i login when iface uses only the hwaddress.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.7
changelog:
  - 505958 load bnx2i and cxgb3i drivers
  - 481807 Fix ownership of /etc/iscsi dir
  - Fix leak in iscsid when setting iscsi wq thread nice/priority.
  - 442418 Add Broadcom bnx2i userspace support.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.871-0.2
changelog:
  - 249049 create debug rpms by removing -s from the install command
  - 499565 Install libfwparam.a and headers for anaconda


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.18
changelog:
  - 476752 Must install list.h (install as iscsi_list.h) because fw_context.h
  is bringing it in. Also revert ibft name changes because anaconda is using
  them instead of the fw_context.h functions.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.17
changelog:
  - 472562 (additional fixup to patch) only use logout time2wait for
  relogins when response code is 2 or 3.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.9
changelog:
  - Related to 445721 - Install fw helpers as lib so first stage of
  installer can easily use it. This is a temp lib, and is not a stable
  interface. For now, just for install, we are adding this library.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.8
changelog:
  - Related to 445721 - when using intel nics some network values are
  not set, so iscsiadm would fail instead of just printing what we got.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.868-0.5
changelog:
  - 438092 Print ibft net info (waiting on ppc support from IBM).
  - 437195 Use CHAP values from sysfs during resync, incase they were from ibft.
  - 437195 Update README to reflect that users should set node.startup


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.7
changelog:
  - 250140 Document how to set timers when using multipath or iscsi root.
  - 249053 Document iscsid and iscsiadm debug argument.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.2
changelog:
  - 244987 old tools used to make the root db dir for apps and anaconda relied
  on that. This is a regression from 227554.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.1
changelog:
  - Bring in fixes that got merged in git but did not make the 865 release and
  code that partners need to test due to lack of hw limitations.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.865-0.0
changelog:
  - Rebase to upstream to bring in bug and security fixes.
  - 243727 CVE-2007-3099 CVE-2007-3100
  - 227554 Support only passing in a target with iscsiadm commands.
  - 227698 ipv6 fixups


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.6
changelog:
  -  Patch for 218841 was not getting applied because 'BZ' in the patch
  caused rpm to try and bunzip it instead of apply it.
  - 227815 update docs to make it more clear what is node mode.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.742-0.5
changelog:
  - BZ 218791 - We get a network hang when the firewall is started
  - and to allow iscsi root boot to work we start iscsid early.
  - This breaks up iscsi.init into iscsidevs.init (start iscsi targets)
  - and iscsid.init (start iscsi daemon). Users should be using
  - iscsiadm for management instead of the rc script, but we add some compat
  - code to make it a little easier.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.730-0.0
changelog:
  - BZ 212263 - load iser
  - Rebase to upstream open-iscsi-2.0-730 to bring in fixes we were
  - managing but are now upstream and bring in fixes I had done upstream
  - for other partner/distro testing.


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.7
changelog:
  - BZ 210470 update man pages for file moves
  - Fix targetname strcmp
  - read default config before doing discovery


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.6
changelog:
  - BZ 209523 make sure the network is not going to get shutdown so
  iscsi devices (include iscsi root and dm/md over iscsi) get syncd.
  - BZ 209415 have package create iscsi var dirs


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.2
changelog:
  - BZ 208050 - change default initiator name to reflect redhat
  - Move pid from /etc/iscsi to /var/run/iscsid.pid


author: Mike Christie <mchristie@redhat.com> - 6.2.0.695-0.1
changelog:
  - Add compat with FC kernel so iscsid will pass startup checks and run.
  - Fix bug when using hw iscsi and software iscsi and iscsid is restarted.
  - Fix session matching bug when hw and software iscsi is both running


author: Mike Christie <mchristie@redhat.com> - 6.1.1.685
changelog:
  - Rebase to upstream to bring in many bug fixes and rm db.
  - iscsi uses /etc/iscsi instead of just etc now


author: Mike Christie <mchristie@redhat.com> - 6.1.1.645
changelog:
  - update to upstream 1.1.645
  - Note DB and interface changed so you must update kernel, tools and DB


author: Mike Christie <mchristi@redhat.com> - 6.0.5.595-2
changelog:
  - add PatM's statics.c file. This is needed for boot since 
    there is no getpwuid static available at that time.


author: Jeremy Katz <katzj@redhat.com> - 6.0.5.595-1
changelog:
  - ensure that we respect %{optflags}
  - cleaned up initscript to make use of standard functions, return right 
    values and start by default
  - build iscsistart as a static binary for use in initrds


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to svn rev 595 to fix several bugs
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - update package to open-iscsi svn rev 571
    NOTE!!!!!!!! This is not compatible with the older open-iscsi modules
    and tools. You must upgrade.


author: Mike Christie <mchristi@redhat.com>
changelog:
  - From Andy Henson <andy@zexia.co.uk>:
    Autogenerate /etc/initiatorname.iscsi during install if not already present
  - Remove code to autogenerate /etc/initiatorname.iscsi from initscript
  - From dan.y.roche@gmail.com:
    add touch and rm lock code
  - update README
  - update default iscsid.conf. "cnx" was not supported. The correct
    id was "conn".


author: Mike Christie <mchristi@redhat.com>
changelog:
  - rebase package to bring in ppc64 unsigned long vs unsigned
    long long fix and iscsadm return value fix. Also drop rdma patch
    becuase it is now upstream.


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.5
changelog:
  - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which
    in the RHEL-5 and newer versions will crash in such case (#569774)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.4
changelog:
  - do not disable SSLv2 in the renegotiation patch - SSLv2 does
    not support renegotiation
  - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.2
changelog:
  - fix CVE-2009-3555 - support the safe renegotiation extension and
    do not allow legacy renegotiation on the server by default (#533125)


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.11.1.el5]
changelog:
  - [firewire] ohci: handle receive packets with zero data (Jay Fenlason) [547241 547242] {CVE-2009-4138}
  - [x86] sanity check for AMD northbridges (Andrew Jones) [549905 547518]
  - [x86_64] disable vsyscall in kvm guests (Glauber Costa) [550968 542612]
  - [fs] ext3: replace lock_super with explicit resize lock (Eric Sandeen) [549908 525100]
  - [fs] respect flag in do_coredump (Danny Feng) [544188 544189] {CVE-2009-4036}
  - [gfs2] make O_APPEND behave as expected (Steven Whitehouse) [547521 544342]
  - [fs] hfs: fix a potential buffer overflow (Amerigo Wang) [540740 540741] {CVE-2009-4020}
  - [fuse] prevent fuse_put_request on invalid pointer (Danny Feng) [538736 538737] {CVE-2009-4021}
  - [mm] call vfs_check_frozen after unlocking the spinlock (Amerigo Wang) [548370 541956]
  - [infiniband] init neigh->dgid.raw on bonding events (Doug Ledford) [543448 538067]
  - [scsi] gdth: prevent negative offsets in ioctl (Amerigo Wang) [539420 539421] {CVE-2009-3080}
  - [fs] gfs2: fix glock ref count issues (Steven Whitehouse) [544978 539240]
  - [net] call cond_resched in rt_run_flush (Amerigo Wang) [547530 517588]
  - [scsi] megaraid: fix sas permissions in sysfs (Casey Dahlin) [537312 537313] {CVE-2009-3889 CVE-2009-3939}
  - [ia64] kdump: restore registers in the stack on init (Takao Indoh ) [542582 515753]
  - [x86] kvm: don't ask HV for tsc khz if not using kvmclock (Glauber Costa ) [537027 531268]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [x86_64] fix 32-bit process register leak (Amerigo Wang ) [526797 526798]
  - [cpufreq] add option to avoid smi while calibrating (Matthew Garrett ) [537343 513649]
  - [kvm] use upstream kvm_get_tsc_khz (Glauber Costa ) [540896 531025]
  - [net] fix unbalance rtnl locking in rt_secret_reschedule (Neil Horman ) [549907 510067]
  - [net] r8169: imporved rx length check errors (Neil Horman ) [552913 552438]
  - [scsi] lpfc: fix FC ports offlined during target controller faults (Rob Evers ) [549906 516541]
  - [net] emergency route cache flushing fixes (Thomas Graf ) [545662 545663] {CVE-2009-4272}
  - [fs] fasync: split 'fasync_helper()' into separate add/remove functions (Danny Feng ) [548656 548657] {CVE-2009-4141}
  - [scsi] qla2xxx: NPIV vport management pseudofiles are world writable (Tom Coughlan ) [537317 537318] {CVE-2009-3556}


author: Milan Broz <mbroz@redhat.com> - 2.02.46-8.el5_4.1
changelog:
  - Add write lock write prioritization to avoid possible starvation.
  - Fix orphan order locking (fix vgextend to use blocking lock).
  - Use read lock for lvchange activation commands.
    Related: #523440 #523441


author: Milan Broz <mbroz@redhat.com> - 2.02.46-6
changelog:
  - Fix partial activation and lvconvert --repair on clusters.
    Resolves: #505141
    Related:  #505143


author: Milan Broz <mbroz@redhat.com> - 2.02.46-4
changelog:
  - Fix virtual origin snapshot manipulation.
  - Implement mirror repair policies.
    Related: #249478 #503708


author: Milan Broz <mbroz@redhat.com> - 2.02.46-3
changelog:
  - Fix crash when calculating readahead on missing device in vgreduce.
  - Fix mirror log allocation when smallest PV has only 1 extent.
    Related: #502899 #502671


author: Milan Broz <mbroz@redhat.com> - 2.02.40-6
changelog:
  - Avoid overwriting in-use on-disk text metadata.
  - Fix mirror upconvert for active mirrors.
    Resolves: #467435 #455670


author: Milan Broz <mbroz@redhat.com> - 2.02.32-3
changelog:
  - clvmd no longer crashes if it sees nodeids over 50.
  - Fix potential deadlock in clvmd thread handling.
    Resolves: #437446 #438434


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-2
changelog:
  - Adjust some alignments for ia64. 
  - Fix VG clustered read locks to use PR not CR. 
  - Add startup timeout to clvmd startup script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-4
changelog:
  - Make spec file closer to lvm2.spec for easier maintenance.
  - Use the built-in cluster support (locking_type 3) by default,
    replacing the shared library, removing ldconfig and updating
    the lvmconf script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.12-1.0
changelog:
  - Change package suffix to use dist variable.
  - Fall back to internal locking if external locking lib is missing or fails.


author: Alasdair Kergon <agk@redhat.com> - 2.02.11-1.0
changelog:
  - lvmconf --enable-cluster no longer requires locking library post-installation
  - clvmd accepts -R to instruct a running daemon to reload its internal cache
  - Remote error messages are transmitted back across the cluster.
  - Fix bug that caused clvmd to die if node with a long name crashed.
  - Fix vgsplit to retain clustered VG attribute.


author: Alasdair Kergon <agk@redhat.com> - 2.02.06-4.0
changelog:
  - Avoid clvm 'unaligned access' error on some archs. (194626, lost)
  - Rebuild after recent lvm2 patches.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.1
changelog:
  - Switch from 'ExcludeArch: s390 s390x ppc' to 
    'ExclusiveArch: i386 ia64 x86_64' to match dlm dependency.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.0
changelog:
  - clvmd: Don't allow user operations to start until lvm thread is fully up.
  - clvmd-gulm: Set KEEPALIVE on sockets.


author: Alasdair Kergon <agk@redhat.com> - 2.01.07-1.0
changelog:
  - clvmd FDs close-on-exec
  - unlock gulm VG & orphan locks at startup in case they are stale
  - unlock gulm VG & orphan locks if client dies.


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-5.el5
changelog:
  - fix crash on "ipmitool sol payload status" command without
    /dev/ipmi device (#470031)
  - fix ipmievd init script, it's off by default now (#509490)


author: Jan Safranek <jsafrane@redhat.com> 2.0.16-1.el5
changelog:
  - Rebased to OpenIPMI-2.0.16 (#475542)
  - Fixed sporadic crash when connecting using 'ipmicmd lan' (#437013)
  - Added command-line checks to rmcp_ping (#437256)
  - Removed wrong RPATH from compiled binaries (#466119)
  - Removed duplicate man pages from OpenIPMI-devel package (#466487)
  - Package documentation files
  - Provide sample xinetd service which blocks RMCP port so portmap and other
    random-port-using services can't bind to it (#429329)
  - ipmitool updated to version 1.8.11 (#475542)
  - Added ipmievd init script and sysconfig file (#469979)
  - Added Provides: ipmitool to OpenIPMI-tools (#442784)
  - Added documentation of 'fwum' and 'hpm' commands to ipmitool man page
    (#438539)


author: Phil Knirsch <pknirsch@redhat.com> 2.0.6-8.el5
changelog:
  - Add support for Pigeon Point BMC (#349551)
  - Added enabled user status to user list command (#430306)
  - Fixed several manpage typos (#437020,#437021,#437026)
  - Update to ipmitool-1.8.10 (#439557)


author: Phil Knirsch <pknirsch@redhat.com> - 2.0.6-5.el5.5
changelog:
  - Added -K option for ipmitool to hide keyword from cmdline (#238970)
  - Added -p option for ipmicmd to hide password from cmdline (#239186)
  - Fixed OpenIPMI-python package description (#314031)


author: Phil Knirsch <pknirsch@redhat.com> 2.0.6-1
changelog:
  - Fixed bug with type conversion in ipmitool (#191091)
  - Added python bindings 
  - Split off perl and python bindings in separate subpackages
  - Dropped obsolete patches
  - Added missing buildprereq on readline-devel
  - Made it install the python bindings properly on 64bit archs


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-18
changelog:
  - Updated ipmitool to latest upstream version.
  - Removed 3 patches for already fixed bugs in latest ipmitool.
  - Adapted warning message fix for ipmitool for latest version.


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-16
changelog:
  - Included FRU fix for displaying FRUs with ipmitool
  - Included patch for new option to specify a BMC password for IPMI 2.0 sessions


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-13
changelog:
  - Rebuilt to link against latest openssl libs.
  - Fixed ipmitool not setting session privilege level (#172312)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-9
changelog:
  - Another update to latest initscripts from Dell
  - Fixed some missing return statements for non-void functions (#164138)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-7
changelog:
  - Fixed the unwanted output of failed module loading of the initscript. Behaves
    now like all our other initscripts (#165476)


author: Phil Knirsch <pknirsch@redhat.com> 1.4.14-2
changelog:
  - Updated to OpenIPMI-1.4.14
  - Split the main package into normal and libs package for multilib support
  - Added ipmitool-1.8.2 to OpenIPMI and put it in tools package
  - Added sysconf and initscript (#158270)
  - Fixed oob subscripts (#149142)


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-27.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_16
  - Resolves: bz #437588, #474451, #462776, #477023, #485296, #489030, #481227, #484711


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-25.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_14
  - Resolves: bz #452897, #480048, #457776, #459629, #470896, #493402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-19.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_13
  - Resolves: bz #238421, #419581, #449097, #455692, #456126, #456228, #457226


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-18.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_12
  - Resolves: bz #431843, #434588, #434988, #439366, #440123, #442000, #444421, #446223, #448655, #454928


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Mike A. Harris <mharris@redhat.com> 215-2.fc6
changelog:
  - Replace BuildRequires utempter with libutempter-devel
  - Change BuildRoot tag to comply with Fedora packaging guidelines
  - Use pkg-config to autodetect the location of the system app-defaults dir
  - Add BuildRequires: pkgconfig


author: Jason Vas Dias <jvdias@redhat.com> - 213-1
changelog:
  - Upgrade to upstream version 213 (fixes bug 192627)
  - fix bug 189161 : make -r/-rv do reverseVideo with or without
                     xterm*{fore,back}ground set


author: Jason Vas Dias <jvdias@redhat.com> - 209-2
changelog:
  - fix bug 182382: check for (VWindow(screen)!=0) in set_cursor_gcs
  - further fix for bug 178302: allow *vt100*cursorColor to be same as fg


author: Jason Vas Dias<jvdias@redhat.com> - 208-1
changelog:
  - Upgrade to upstream version 208
  - Allow root user to grab the console, even if /dev/console 
    not owned by root
  - restore Red Hat '*VT100*scrollBar:1' default Xresource


author: Jason Vas Dias<jvdias@redhat.com> - 207-8
changelog:
  - Fix bug 175684: compile with --enable-256-color
  - Fix bug 155538 addenda - restore '*VT100*backarrowKey:0'


author: Jason Vas Dias<jvdias@redhat.com> - 207-5
changelog:
  - fix bug 173703: remove reference to /usr/X11R6/bin/luit :
    PROJECTROOT should be /usr, not /usr/X11R6


author: Mike A. Harris <mharris@redhat.com> 200-10
changelog:
  - Updated xterm-resources-redhat.patch to add "xterm*ttyModes: erase ^?"
    resource to fix bug (#155538,160354,163812,162549)


author: Mike A. Harris <mharris@redhat.com> 200-9
changelog:
  - Updated xterm-resources-redhat.patch to remove utf8 resource which was
    added in the 200-7 build, as it was incorrectly set to 'true' instead
    of '1', and bug #138681 turned out to be a gdm bug instead of an xterm
    bug.  This fixes bug (#163568).


author: Mike A. Harris <mharris@redhat.com> 200-7
changelog:
  - Updated xterm-resources-redhat.patch to enable xterm utf8 resource by
    default, as our default OS environment is UTF-8, for bug (#138681)


author: Mike A. Harris <mharris@redhat.com> 200-6
changelog:
  - Added option to spec file to allow easy rebuilding with 256 color option
    for those who prefer this non-default behaviour (#103402)


author: Mike A. Harris <mharris@redhat.com> 200-4
changelog:
  - Added libtermcap-devel and utempter to BuildRequires
  - Changed BuildRequires from XFree86-devel to xorg-x11-devel


author: Mike A. Harris <mharris@redhat.com> 200-1
changelog:
  - Updated main tarball to xterm-200 for FC4 devel
  - Disabled xterm-179-ppc-fix-bug-101472.patch for now, to see if the problem
    occurs on ppc still or not.


author: Mike A. Harris <mharris@redhat.com> 191-1
changelog:
  - Updated main tarball to xterm-191 for FC3 devel
  - Disabled xterm-resources-redhat.patch to see what if anything breaks, as
    it no longer applies cleanly.  Hopefully we can just ship stock xterm
    resources now, although I realize that is more likely to be a pie in the
    sky fantasy once the bug reports trickle in from this change.  ;o)


author: Mike A. Harris <mharris@redhat.com> 179-3
changelog:
  - Added symlink /usr/X11R6/bin/xterm pointing to _bindir/xterm so that apps
    and scripts which invoke xterm explicitly as /usr/X11R6/bin/xterm, will
    continue to work correctly without surprises (#101994)


author: Mike A. Harris <mharris@redhat.com> 179-1
changelog:
  - Updated to upstream xterm 179
  - [SECURITY] Added xterm-can-2003-0063.patch from XFree86 4.3.0-12 package
  - Added Red Hat xterm-resources-redhat.patch from XFree86 4.3.0-12 package
  - Added "chmod -R u+w *" after source is decompressed or else patches can not
    be applied due to upstream source being read only files
  - Built xterm 179-1 in rawhide


author: Mike A. Harris <mharris@redhat.com> 177-2
changelog:
  - Build fix for lib64:  _x11datadir == /usr/X11R6/lib
  - Another lib64 build fix:  xterm uses /usr/%{_lib}/X11/app-defaults when it
    should be using an arch-neutral dir {_x11datadir}/X11/app-defaults instead


author: Mike A. Harris <mharris@redhat.com> 177-1
changelog:
  - Call configure with "--enable-luit --enable-warnings --enable-wide-chars
    --with-utempter"
  - Initial build.


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-5
changelog:
  - add group audio to sound devices when no console user owns them (#244688)
  - resolve pam access origin entry only when it makes sense (#459057)
  - silence the strict-aliasing warnings (#462647)
  - pam_keyinit: save old uid so we can revert to it (#466411)
  - pam_filter: make it use pty subsystem (#473970)
  - add pam_faildelay module to be able to set the failure delay (#476217)
  - pam_tty_audit: fix double free when open_only option is used (#476833)
  - allow root to change users passwords when helper is needed (#476904)
  - make package's requires more correct (#497570)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-4
changelog:
  - add pam_tty_audit module (#244352)
  - pam_cracklib: additional optional checks for password quality (#438994)
  - pam_lastlog: display failed login attempts if requested (#438990)
  - pam_unix: do not check new passwords through cracklib (#448860)
  - pam_unix: clear PAM_AUTHTOK item if new password is bad (#443872)
  - comment in the limits.conf manpage that rss limit is ignored (#459624)
  - allow larger entries in pammodutil_get functions (#445355)
  - pam_tally: do not leak fds in tally_check (#457024)
  - pam_loginuid: use correct format when printing uid type (#460263)
  - pam_rhosts_auth: correct test for IP address (#461917)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.27
changelog:
  - support sha256 and sha512 password hashes (#427389)
  - fixed in operator of pam_succeed_if module (#295151)
  - fixed audit option of pam_tally and pam_tally2 (#328281)
  - do not free putenved pointer in pam_xauth (#402391)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.26
changelog:
  - removed realtime default limits (#240123) from the package as
    it caused regression on machines with nonexistent realtime group


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.25
changelog:
  - added and improved translations (#219124)
  - adjusted the default limits for realtime users (#240123)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.23
changelog:
  - pam_unix: truncated MD5 passwords in shadow shouldn't match (#219258)
  - pam_limits: add limits.d support (#232700)
  - pam_limits, pam_time, pam_access: add auditing of failed logins (#232993)
  - pam_namespace: expand $HOME even when appended with text (#237163)
    original patch by Ted X. Toth
  - add some default limits for users in realtime group (#240123)
  - CVE-2007-3102 - prevent audit log injection through user name (#243204)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.21
changelog:
  - pam_namespace: better document behavior on failure (#237249)
  - pam_unix: split out passwd change to a new helper binary (#236316)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.18
changelog:
  - pam_console: always decrement use count (#233581)
  - pam_namespace: fix parsing config file with unknown users (#234513)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.17
changelog:
  - pam_namespace: unmount poly dir for override users (#229689)
  - pam_namespace: use raw context for poly dir name (#227345)
  - pam_namespace: truncate long poly dir name (append hash) (#230120)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.14
changelog:
  - properly include /var/log/faillog and tallylog as ghosts
    and create them in post script (#209646)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.7
changelog:
  - No shortcut on Password: in ja locale (#218271)
  - Revert to old euid and not ruid when setting euid in pam_keyinit (#219486)
  - Fix no answer to select_context question (#213812)
  - Rename selinux-namespace patch to namespace-level


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.4
changelog:
  - move setgid before setuid in pam_keyinit (#212329)
  - make username check in pam_unix consistent with useradd (#212153)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-3.1
changelog:
  - preserve effective uid in namespace.init script (LSPP for newrole)
  - include /var/log/faillog and tallylog to filelist (#209646)
  - add ids to .xml docs so the generated html is always the same (#210569)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-2
changelog:
  - silence pam_succeed_if in default system-auth (#205067)
  - round the pam_timestamp_check sleep up to wake up at the start of the
    wallclock second (#205068)


author: Tomas Mraz <tmraz@redhat.com> 0.99.6.2-1
changelog:
  - upgrade to new upstream version, as there are mostly bugfixes except
    improved documentation
  - add support for session and password service for pam_access and
    pam_succeed_if
  - system-auth: skip session pam_unix for crond service


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-7
changelog:
  - revoke keyrings properly when pam_keyinit called as root (#201048)
  - pam_succeed_if should return PAM_USER_UNKNOWN when getpwnam fails (#197748)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-6
changelog:
  - revoke keyrings properly when pam_keyinit called more than once (#201048)
    patch by David Howells


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-3
changelog:
  - don't report error in pam_selinux for nonexistent tty (#188722)
  - add pam_keyinit to the default system-auth file (#198623)


author: Tomas Mraz <tmraz@redhat.com> 0.99.5.0-1
changelog:
  - updated to a new upstream release
  - added service as value to be matched and list matching to
    pam_succeed_if
  - namespace.init was missing from EXTRA_DIST


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-5
changelog:
  - updated pam_namespace with latest patch by Janak Desai
  - merged pam_namespace patches
  - added buildrequires libtool
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-3
changelog:
  - use md5 implementation from pam_unix in pam_namespace
  - pam_namespace should call setexeccon only when selinux is enabled


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-2
changelog:
  - pam_console_apply shouldn't access /var when called with -r (#191401)
  - actually apply the large-uid patch
  - don't build hmactest in pam_timestamp so openssl-devel is not required
  - add missing buildrequires (#191915)


author: Tomas Mraz <tmraz@redhat.com> 0.99.4.0-1
changelog:
  - upgrade to new upstream version
  - make pam_console_apply not dependent on glib
  - support large uids in pam_tally, pam_tally2


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-5
changelog:
  - the namespace instance init script is now in /etc/security (#190148)
  - pam_namespace: added missing braces (#190026)
  - pam_tally(2): never call fclose twice on the same FILE (from upstream)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-4
changelog:
  - fixed console device class for irda (#189966)
  - make pam_console_apply fail gracefully when a class is missing


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-3
changelog:
  - added pam_namespace module written by Janak Desai (per-user /tmp
  support)
  - new pam-redhat modules version


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-2
changelog:
  - added try_first_pass option to pam_cracklib
  - use try_first_pass for pam_unix and pam_cracklib in
    system-auth (#182350)


author: Tomas Mraz <tmraz@redhat.com> 0.99.3.0-1
changelog:
  - new upstream version
  - updated db4 to 4.3.29
  - added module pam_tally2 with auditing support
  - added manual pages for system-auth and config-util (#179584)


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-2
changelog:
  - fix dangling symlinks in -devel (#175929)
  - link libaudit only where necessary
  - actually compile in audit support


author: Tomas Mraz <tmraz@redhat.com> 0.99.2.1-1
changelog:
  - support netgroup matching in pam_succeed_if
  - upgrade to new release
  - drop pam_pwdb as it was obsolete long ago
  - we don't build static libraries anymore


author: Tomas Mraz <tmraz@redhat.com> 0.80-13
changelog:
  - fixed CAN-2005-2977 unix_chkpwd should skip user verification only if
    run as root (#168181)
  - link pam_loginuid to libaudit
  - support no tty in pam_access (#170467)
  - updated audit patch (by Steve Grubb)
  - the previous pam_selinux change was not applied properly
  - pam_xauth: look for the xauth binary in multiple directories (#171164)


author: Tomas Mraz <tmraz@redhat.com> 0.80-9
changelog:
  - don't include ps and pdf docs (#168823)
  - new common config file for configuration utilities
  - remove glib2 dependency (#166979)


author: Tomas Mraz <tmraz@redhat.com> 0.80-8
changelog:
  - process limit values other than RLIMIT_NICE correctly (#168790)
  - pam_unix: always honor nis flag on password change (by Aaron Hope)


author: Tomas Mraz <tmraz@redhat.com> 0.80-2
changelog:
  - fixed module tests so the pam doesn't require itself to build (#163502)
  - added buildprereq for building the documentation (#163503)
  - relaxed permissions of binaries (u+w)


author: Tomas Mraz <tmraz@redhat.com> 0.80-1
changelog:
  - upgrade to new upstream sources
  - removed obsolete patches
  - pam_selinux module shouldn't fail on broken configs unless
    policy is set to enforcing (Dan Walsh)


author: Tomas Mraz <tmraz@redhat.com> 0.79-10
changelog:
  - add the Requires dependency on audit-libs (#159885)
  - pam_loginuid shouldn't report error when /proc/self/loginuid
    is missing (#159974)


author: Tomas Mraz <tmraz@redhat.com> 0.79-9
changelog:
  - update the pam audit patch to support newest audit library,
    audit also pam_setcred calls (Steve Grubb)
  - don't use the audit_fd as global static variable
  - don't unset the XAUTHORITY when target user is root


author: Tomas Mraz <tmraz@redhat.com> 0.79-7
changelog:
  - pam_xauth: unset the XAUTHORITY variable on error, fix
    potential memory leaks
  - modify path to IDE floppy devices in console.perms (#155560)


author: Tomas Mraz <tmraz@redhat.com> 0.79-5
changelog:
  - added auditing patch by Steve Grubb
  - added cleanup patches for bugs found by Steve Grubb
  - don't clear the shadow option of pam_unix if nis option used


author: Tomas Mraz <tmraz@redhat.com> 0.79-3
changelog:
  - make pam_unix LSB 2.0 compliant even when SELinux enabled
  - #88127 - change both local and NIS passwords to keep them in sync,
    also fix a regression in passwd functionality on NIS master server


author: Tomas Mraz <tmraz@redhat.com> 0.78-9
changelog:
  - fix wrong logging in pam_console handlers
  - add executing ainit handler for alsa sound dmix
  - #147879, #112777 - change permissions for dri devices


author: Tomas Mraz <tmraz@redhat.com> 0.78-8
changelog:
  - remove ownership and permissions handling from pam_console call
    pam_console_apply as a handler instead


author: Tomas Mraz <tmraz@redhat.com> 0.78-6
changelog:
  - add functionality for running handler executables from pam_console
    when console lock was obtained/lost
  - removed patches merged to pam-redhat


author: Tomas Mraz <tmraz@redhat.com> 0.78-5
changelog:
  - echo why tests failed when rebuilding
  - fixed some warnings and errors in pam_console for gcc4 build
  - improved parsing pam_console config file


author: Tomas Mraz <tmraz@redhat.com> 0.78-1
changelog:
  - update to Linux-PAM-0.78
  - #140451 parse passwd entries correctly and test for failure
  - #137802 allow using pam_console for authentication


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.99.6.2, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Matt Wringe <mwringe at redhat.com> 0:2.7.1-7jpp
changelog:
  - Add conditional native compiling
  - Add missing requires for javadocs
  - Add missing requires for post and preun
  - Update version to 7jpp at Fedora's request


author: Ralph Apel <r.apel at r-apel.de> 0:2.7.1-2jpp
changelog:
  - First JPP-1.7 release
  - use tools subdir and give it as java.endorsed.dirs (for java-1.4.2-bea e.g.)


author: Gary Benson <gbenson at redhat.com> 0:2.6.2-5jpp
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Patch xjavac to fix the classpath under libgcj too.


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_8fc
changelog:
  - Remove the tools tarball, and build xjavac from source.
  - Replace classpath workaround to xjavac task and use
    xml-commons classes again (#152255).


author: Gary Benson <gbenson@redhat.com> 0:2.6.2-4jpp_3fc
changelog:
  - Revert xjavac classpath workaround, and patch to use libgcj's
    classes instead of those in xml-commons (#152255).


author: Kaj J. Niemi <kajtzu@fi.basen.net> 0:2.6.2-3jpp
changelog:
  - Updated Patch #0 to fix breakage using BEA 1.4.2 SDK, new patch
    from <mwringe@redhat.com> and <vivekl@redhat.com>.


author: Vivek Lakshmanan <vivekl@redhat.com> 0:2.6.2-2jpp_2rh
changelog:
  - Added new Source1 URL and added new %setup to expand it under the
    expanded result of Source0.
  - Updated Patch0 to fix version discrepancies.
  - Added build requirement for xml-commons-apis


author: Ville Skyttä <ville.skytta at iki.fi> - 0:2.5.0-1jpp
changelog:
  - Update to 2.5.0.
  - Clean up versionless javadoc dir symlinking, own (ghost) the symlinks.
  - Mark javadocs as %doc.


author: David Walluck <david@anti-microsoft.org> 0:2.4.0-1jpp
changelog:
  - 2.4.0
  - BuildRequires: jikes
  - update for JPackage 1.5
  - re-diff'ed build patch for 2.4.0
  - bug #17325 handled by perl now
  - scripts: s|find-jar|build-classpath| and don't test for java-functions


author: Nicolas Mailhot <Nicolas.Mailhot (at) JPackage.org> - 2.3.0-2jpp
changelog:
  - For jpackage-utils 1.5
  - zapped manual, since it doesn't want to build
  - as a consequence, removed uneeded dependencies


author: Ville Skyttä <ville.skytta at iki.fi> - 2.3.0-1jpp
changelog:
  - Update to 2.3.0.
  - Add a crude patch to work around invalid XML in doc sources, see
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=17325>.
  - Built with IBM's 1.3.1 SR3.


author: Ville Skyttä <ville.skytta at iki.fi> - 2.2.1-2jpp
changelog:
  - Add upstream patch which fixes problems with Tomcat's webapps.
    <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13282>
    <http://marc.theaimsgroup.com/?l=xerces-cvs&m=103791990130308>
  - Separate scripts subpackage.


author: Ville Skyttä <ville.skytta at iki.fi> - 2.2.1-1jpp
changelog:
  - Update to 2.2.1.
  - Change alternative to point to non-versioned jar.
  - Don't remove alternative on upgrade.
  - Fix Group tag for demo, javadoc and manual subpackages.
  - Add version and constants scripts.
  - Some spec file cleanup.


author: Ville Skyttä <ville.skytta at iki.fi> 2.1.0-2jpp
changelog:
  - Rebuild with -Dcompiler=modern, not a Jikes bug this time, but sloppy code
    that is tolerated by javac.  See <http://www-124.ibm.com/developerworks/bugs/?func=detailbug&bug_id=3218&group_id=10> for details.


author: Ville Skyttä <ville.skytta at iki.fi> 2.1.0-1jpp
changelog:
  - 2.1.0.
  - Updated description.
  - Changed javadoc and manual group to Documentation.
  - Spec file cleanups.


author: Henri Gomez <hgomez@users.sourceforge.net> 2.0.2-4jpp
changelog:
  - add BuildRequires xerces-j1 and xalan-j2
  - removed BuildRequires xml-commons-api since ant require jaxp_parser_impl
    which in turn require xml-commons-api ;)


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.0.2-3jpp
changelog:
  - vendor, distribution, group tags
  - provides jaxp_parser_impl
  - dropped api jar
  - renamed lone jar to xerces-j2.jar
  - priority bumped to 40
  - fixed stylebook build (add xerces-j1 in classpath)


author: Guillaume Rousse <guillomovitch@users.sourceforge.net> 2.0.2-2jpp
changelog:
  - rebuild for missing symlinks
  - use sed instead of bash 2.x extension in link area to make spec compatible with distro using bash 1.1x


author: Jiri Popelka <jpopelka@redhat.com> - 12:3.0.5-21.1
changelog:
  - Memory leak in the load_balance_mine() function is fixed. This would leak ~20-30 octets
    per DHCPDISCOVER packet while failover was in use and in normal state.


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-21
changelog:
  - Display usage if init scripts get 'try-restart' or 'reload' args,
    set exit code to 3
    Resolves: rhbz#491868


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-20
changelog:
  - Restrict interface names given on the dhcpd command line to length
    IFNAMSIZ or shorter
    Resolves: rhbz#441524


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-19
changelog:
  - Do not restart ntpd service unless necessary
    Resolves: rhbz#450301
  - Carry over relay agent options when client enters INIT or REBIND
    Resolves: rhbz#450545
  - Honor PEERNIS and PEERNTP variables completely in dhclient-script
    Resolves: rhbz#471543


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-14
changelog:
  - Display dhcpd error messages for 'service dhcpd configtest'
    Resolves: rhbz#447003
  - Parse dates and times correctly in lease files on 64-bit systems
    Resolves: rhbz#448615


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-12
changelog:
  - Avoid printing two OK/FAILURE messages when the stop() function runs
    in the dhcpd and dhcrelay init scripts
    Resolves: rhbz#439800


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-9
changelog:
  - Updated dhcpd init script to conform to script guidelines
    Resolves: rhbz#237978
  - Updated dhcrelay init script to conform to script guidelines
    Resolves: rhbz#237980


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-4
changelog:
  - Updated Xen partial checksums patch using PACKET_AUXDATA
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-3
changelog:
  - Skip checksum check on local packets so dhcpd runs correctly in Xen
    guests
  - Resolves: rhbz#221964
  - Related: rhbz#219681


author: David Cantrell <dcantrell@redhat.com> - 12:3.0.5-1
changelog:
  - Rebase dhcp package (#218083)
  - Roll md5 patch in to libdhcp4client patch since it's related
  - Do not overwrite /etc/ntp/step-tickers (#217663)
  - Resolves: rhbz#217663
  - Build the MD5 functions we link against.
  - Set permission of libdhcp4client.so.1 to 0755 (#215910)
  - Do not link res_query.o in to libdhcp4client (#215501)
  - Enable relinquish_timeouts() and cancel_all_timeouts() even when
    DEBUG_MEMORY_LEAKAGE_ON_EXIT is not defined
  - Add prototypes for b64_pton() and b64_ntop in dst/
  - Move variable declarations and labels around in the fix-warnings patch
  - Expand the list of objects needed for libdhcp4client (#215328)
  - Use libres.a in libdhcp4client since it gives correct minires objects
  - Remove the dhcp options table in C, Perl, Python, and text format (these
    were reference files added to /usr/share/doc)
  - Remove struct universe *universe from envadd_state in the client patch
  - Add struct universe *universe to envadd_state in the enoi patch
  - Add example dbusified dhclient-script in the enoi patch
  - Change the way libdhcp4client is compiled (patch main source, create new
    Makefile rather than copy and patch code after main patches)
  - Fix up problems generating compiler warnings
  - Use 'gcc' for making dependencies
  - Pass -fPIC instead of -fpie/-fPIE in compiler flags
  - Combine the extended new option info changes in to one patch file (makes
    it easier for outside projects that want to use dhcdbd and NetworkManager)
  - Upgrade to ISC dhcp-3.0.5
  - Put typedef for dhcp_state_e before it's used in libdhcp_control.h (#212612)
  - Remove dhcpctl.3 from minires/Makefile.dist because it's in dhcpctl
  - Remove findptrsize.c and just set compiler flag for ppc64 and s390x
  - Remove NODEBUGINFO junk from the spec file as well as old/unused code
  - Rolled all 68 patches in to one patch since more than half of them get
    overridden by later patches anyway.
  - Send usage() screen in dhclient to stdout rather than the syslog (#210524)
  - Resolves: rhbz#218083


author: Peter Jones <pjones@redhat.com> - 12:3.0.4-15
changelog:
  - Make timeout dispatch code not recurse while traversing a linked
    list, so it doesn't try to free an entries that have been removed.
    (bz #195723)
  - Don't patch in a makefile, do it in the spec.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-14
changelog:
  - fix bug 191461: preserve ntp.conf local clock fudge statements
  - fix bug 193047: both dhcp and dhclient need to ship common
                    man-pages: dhcp-options(5) dhcp-eval(5)


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-10
changelog:
  - fix bug 193047: allow $METRIC to be specified for dhclient routes
  - add a '-R <request option list>' dhclient argument


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-8.1
changelog:
  - fix a libdhcp4client memory leak (1 strdup) and 
    fill in client->packet.siaddr before bind_lease() for pump
    nextServer option.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Fix bug 191470: prevent dhcpd writing 8 byte dhcp-lease-time 
                    option in packets on 64-bit platforms


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-2
changelog:
  - Add the libdhcp4client library package for use by the new libdhcp 
    package, which enables dhclient to be invoked by programs in a 
    single process from the library. The normal dhclient code is
    unmodified by this.


author: Jason Vas Dias <jvdias@redhat.com> - 12:3.0.4-1
changelog:
  - Upgrade to upstream version 3.0.4, released Friday 2006-05-05 .
  - Add new dhclient command line arguments:
    -H <host-name> : parse as dhclient.conf 'send host-name "<host-name>";'
    -F <fqdn>      : parse as dhclient.conf 'send fqdn.fqdn "<fqdn>";'
    -T <timeout>   : parse as dhclient.conf 'timeout <timeout>;'


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-26
changelog:
  - fix bug 181908: enable dhclient to operate on IBM zSeries z/OS linux guests:
    o add -I <dhcp-client-identifier> dhclient command line option
    o add -B "always broadcast" dhclient command line option
    o add 'bootp-broadcast-always;' dhclient.conf statement


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-22
changelog:
  - fix bug 181482: resolv.conf not updated on RENEW :
    since dhcp-3.0.1rc12-RHScript.patch: "$new_domain_servers" should have
    been "$new_domain_name_servers" :-(


author: Dan Williams <dcbw@redhat.com> - 11:3.0.3-21
changelog:
  - Fix dhclient-script to use /bin/dbus-send now that all dbus related
      binaries are in /bin rather than /usr/bin


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-20
changelog:
  - fix bug 177845: allow client ip-address as default router 
  - fix bug 176615: fix DDNS update when Windows-NT client sends 
  	          host-name with trailing nul


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-12
changelog:
  - fix bug 173619: dhclient-script should reconfig on RENEW if 
                    subnet-mask, broadcast-address, mtu, routers, etc.
  		  have changed
  - apply upstream improvements to trailing nul options fix of bug 160655


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-11
changelog:
  - Rebuild for FC-5
  - fix bug 167028 - test IBM's unicast bootp patch (from xma@us.ibm.com)
  - fix bug 171312 - silence chkconfig error message if ypbind not installed
  - fix dhcpd.init when -cf arg given to dhcpd
  - make dhcpd init touch /var/lib/dhcpd/dhcpd.leases, not /var/lib/dhcp/dhcpd.leases


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-10
changelog:
  - Allow dhclient route metrics to be specified with DHCP options:
    The dhcp-options(5) man-page states:
    'option routers ... Routers should be listed in order of preference' 
    and
    'option static-routes ... are listed in descending order of priority' .
    No preference / priority could be set with previous dhclient-script .
    Now, dhclient-script provides: 
    Default Gateway (option 'routers') metrics:
      Instead of allowing only one default gateway, if more than one router 
      is specified in the routers option, routers following the first router
      will have a 'metric' of their position in the list (1,...N>1).
    Option static-routes metrics:
      If a target appears in the list more than once, routes for duplicate
      targets will have successively greater metrics, starting at 1.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-8
changelog:
  - further fix for bug 160655 / ISC bug 15293 - upstream patch:
    do NOT always strip trailing nulls in the dhcpd server
  - handle static-routes option properly in dhclient-script :
    trailing 0 octets in the 'target' IP specify the class -
    ie '172.16.0.0 w.x.y.z' specifies '172.16/16 via w.x.y.z'.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-7
changelog:
  - fix bug 169164: separate /var/lib/{dhcpd,dhclient} directories
  - fix bug 167292: update failover port info in dhcpd.conf.5; give
                    failover ports default values in server/confpars.c


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-6
changelog:
  - fix bug 167273: time-offset should not set timezone by default
                    tzdata's Etc/* files are named with reverse sign
                    for hours west - ie. 'GMT+5' is GMT offset -18000seconds.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-4
changelog:
  - fix bug 166926: make dhclient-script handle interface-mtu option
    make dhclient-script support /etc/dhclient{,-$IF}-{up,down}-hooks scripts
    to allow easy customization to support other non-default DHCP options -
    documented in 'man 8 dhclient-script' .
  - handle the 'time-offset' DHCP option, requested by default.


author: Jason Vas Dias <jvdias@redhat.com> - 11:3.0.3-3
changelog:
  - fix bug 160655: strip trailing '\0' bytes from text options before append
  - fix gcc4 compiler warnings ; now compiles with -Werror
  - add RPM_OPT_FLAGS to link as suggested in gcc man-page on '-pie' option
  - change ISC version string to 'V3.0.3-RedHat' at request of ISC


author: Jason Vas Dias <jvdias@redhat.com> 11:3.0.3-1
changelog:
  - Upgrade to upstream version 3.0.3 
  - Don't apply the 'default boot file server' patch: legacy
    dhcp behaviour broke RFC 2131, which requires that the siaddr
    field only be non-zero if the next-server or tftp-server-name
    options are specified.
  - Try removing the 1-5 second wait on dhclient startup altogether.
  - fix bug 163367: supply default configuration file for dhcpd


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.3rc1-1
changelog:
  - Upgrade to upstream version 3.0.3rc1
  - fix bug 163203: silence ISC blurb on configtest 
  - fix default 'boot file server' value (packet->siaddr):
    In dhcp-3.0.2(-), this was defaulted to the server address;
    now it defaults to 0.0.0.0 (a rather silly default!) and 
    must be specified with the 'next-server' option ( not the tftp-boot-server option ?!?)
    which causes PXE boot clients to fail to load anything after the boot file.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-14
changelog:
  - Fix bug 159929: prevent dhclient flooding network on repeated DHCPDECLINE
  - dhclient fast startup: 
     remove dhclient's  random 1-5 second delay on startup if only
     configuring one interface 
     remove dhclient_script's "sleep 1" on PREINIT
  - fix new gcc-4.0.0-11 compiler warnings for binding_state_t


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-11
changelog:
  - as pointed out by Peter Jones, dhclient-script spews
  - 'chkconfig: Usage' if run in init state 1 (runlevel returns "unknown".)
  - this is now corrected.


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-9
changelog:
  - bugs 153244 & 155143 are now fixed with SELinux policy; 
    autotrans now works for dhcpc_t, so restorecons are not required,
    and dhclient runs OK under dhcpc_t with SELinux enforcing.
  - fix bug 155506: 'predhclien' typo (emacs!).


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-8
changelog:
  - Fix bugs 153244 & 155143: 
        o restore dhclient-script 'restorecon's
        o give dhclient and dhclient-script an exec context of 
          'system_u:object_r:sbin_t' that allows them to run
          domainname / hostname and to update configuration files
          in dhclient post script.       
  - Prevent dhclient emitting verbose ISC 'blurb' on error exit in -q mode


author: Jason Vas Dias <jvdias@redhat.com> 10:3.0.2-7
changelog:
  - Add '-x' "extended option environment" dhclient argument:
  -  When -x option given to dhclient:
  -    dhclient enables arbitrary option processing by writing information
  -    about user or vendor defined option space options to environment.
  -
  - fix bug 153244: dhclient should not use restorecon
  - fix bug 151023: dhclient no 'headers & libraries' 
  - fix bug 149780: add 'DHCLIENT_IGNORE_GATEWAY' variable
  - remove all usage of /sbin/route from dhclient-script


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-8
changelog:
  - Add better execshield security link options
  - fix dhcpd.init when no /etc/dhcpd.conf exists and -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 8:3.0.2rc3-4
changelog:
  - make dhclient-script TIMEOUT mode do exactly the same configuration
  - as BOUND / RENEW / REBIND / REBOOT if router ping succeeds


author: Jason Vas Dias <jvdias@redhat.com> 3.0.2rc3-4
changelog:
  - fix bug 147926: dhclient-script should do restorecon for modified conf files
  - optimize execshield protection


author: Jason Vas Dias <jvdias@redhat.com> 8.3.0.4rc3-3
changelog:
  - fix bug 147375: dhcpd heap corruption on 32-bit 'subnet' masks
  - fix bug 147502: dhclient should honor GATEWAYDEV and GATEWAY settings            
  - fix bug 146600: dhclient's timeout mode ping should use -I
  - fix bug 146524: dhcpd.init should discard dhcpd's initial output message
  - fix bug 147739: dhcpd.init configtest should honor -cf in DHCPDARGS


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-17
changelog:
  - fix bug 144250: gcc-3.4.3-11 is broken :
  - log_error ("Lease with bogus binding state: %d size: %d",
  -			   comp -> binding_state,
  -			   sizeof(comp->binding_state));
  - prints:    'Lease with bogus binding state: 257 1'    !
  - compiling with gcc33 (compat-gcc-8-3.3.4.2 fixes for now).


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-16
changelog:
  - fix bug 143704: dhclient -r does not work if lease held by
  - dhclient run from ifup . dhclient will now look for the pid
  - files created by ifup .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-14
changelog:
  - NTP: fix bug 139715: merge in new ntp servers only rather than replace
  - all the ntp configuration files; restart ntpd if configuration changed.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-12
changelog:
  - fix bug 138181 & bug 139468: do not attempt to listen/send on
  -     unconfigured  loopback, point-to-point or non-broadcast 
  -     interfaces (don't generate annoying log messages)
  - fix bug 138869: dhclient-script: check if '$new_routers' is
  -     empty before doing 'set $new_routers;...;ping ... $1'


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-11
changelog:
  - dhcp-3.0.2b1 came out today. A diff of the 'ack_lease' function
  - Dave Hankins and I patched exposed a missing '!' on an if clause
  - that got dropped with the 'new-host' patch. Replacing the '!' .
  - Also found one missing host_dereference.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-10
changelog:
  - clean-up last patch: new-host.patch adds host_reference(host)
  - without host_dereference(host) before returns in ack_lease
  - (dhcp-3.0.1-host_dereference.patch)


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-9
changelog:
  - Fix bug 133522:
  - PXE Boot clients with static leases not given 'file' option
  - 104 by server - PXE booting was disabled for 'fixed-address'
  - clients.


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-8
changelog:
  - Fix bug 131212: 
  - If "deny booting" is defined for some group of hosts,
  - then after one of those hosts is denied booting, all
  - hosts are denied booting, because of a pointer not being
  - cleared in the lease record. 
  - An upstream patch was obtained which will be in dhcp-3.0.2 .


author: Jason Vas Dias <jvdias@redhat.com> 7:3.0.1-7
changelog:
  - Forward DNS update by client was disabled by a bug that I
  - found in code where 'client->sent_options' was being 
  - freed too early.
  - Re-enabled it after contacting upstream maintainer
  - who confirmed that this was a bug (bug #130069) -
  - submitted patch dhcp-3.0.1.preserve-sent-options.patch.
  - Upstream maintainer informs me this patch will be in dhcp-3.0.2 .


author: Dan Walsh <dwalsh@redhat.com> 1:3.0.1rc14-1
changelog:
  - User kernelversion instead of uname-r
  - Update to latest package from ISC
  - Remove inherit-leases patch for now.


author: Elliot Lee <sopwith@redhat.com> 3.0pl1-8
changelog:
  - More #68650 (modify requested options)
  - Fix #71453 (dhcpctl man page) and #71474 (include libdst.a) and


author: David Sainty <saint@redhat.com> 3.0pl1-1
changelog:
  - Change to dhclient, dhcp, dhcp-devel packaging
  - Move to 3.0pl1, do not strip binaries
  - Drop in sysconfig-enabled dhclient-script


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix booting of JavaStations
    (reported by Pete Zaitcev <zaitcev@metabyte.com>).
  - fix SIGBUS crashes on SPARC (apparently gcc is too clever).


author: Erik Troan <ewt@redhat.com>
changelog:
  - applied patch from Chris Evans which makes the server a bit more paranoid
    about dhcp requests coming in from the wire


author: Erik Troan <ewt@redhat.com>
changelog:
  - updated to build in a buildroot properly
  - don't package up the client, as it doens't work very well <sigh>


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed the actual inet.d links (chkconfig takes care of this for us)
    and made the %postun section handle upgrades.


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-4
changelog:
  - Made a better fix for the powerdown button which checks if g-p-m is running
  - Don't install sample.conf anymore, not needed


author: Phil Knirsch <pknirsch@redhat.com> - 1.0.4-3
changelog:
  - Disable the automatic shutdown -h via powerdown button by default due to
    conflicts with gnome-power-manager


author: Miloslav Trmac <mitr@redhat.com> - 1.0.3-2
changelog:
  - Update to 1.0.3 (fixes #128834)
  - s/Copyright/License/
  - Add logrotate config file (#110677, from Michal Jaegermann)
  - Don't verify contents of /var/log/acpid (#125862)
  - Use $RPM_OPT_FLAGS
  - Fix and cleanup acpid-1.0.1-pm1.patch
  - Add condrestart to %postun


author: Tim Hockin <thockin@sun.com>
changelog:
  - Updated RPM spec with patch from sun for chkconfig on/off
    - Add Changelog, make 'make rpm' use it.


author: Tim Hockin <thockin@sun.com>
changelog:
  - Fixed logging bug - not appending to log (O_APPEND needed)
    - Fix 'make install' to not need root access
    - Fix RPM spec to not need root


author: Miroslav Grepl <mgrepl@redhat.com> 2.4.6-255.el5_4.2
changelog:
  - Allow sysadm_t to transition to setkey_t
  Resolves: #538449
  - Fix ipsec policy
  Resolves: #538452
  - Allow ssh_keygen_t to write to /root/.ssh directory
  Resolves: #538453
  -Allow sysadm_t execute init scripts
  Resolves: #538503


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-254
changelog:
  - Add ipsec_match_default_spd back into userdomain
  - Allow sysadm_t to execute setkey and racoon executables
  - Dontaudit write of logwatch to etc_t
  - Allow samba as domain controller to change passwords
  Resolves: #475562


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-252
changelog:
  - Change mmap_low boolean to effect unconfined_t
  - Allow ipsec_t to read its init script
  Resolves: #511359


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-247
changelog:
  - Additional privs for privoxy, kpropd found in other dists
  - iscsi wants to look at the process state of all domains
  Resolves: #506057


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-246
changelog:
  - Allow semanage_t to transition to initrc_t in order to restart mcstrans
  Resolves: #460970
  - Additional rules for ipsec
  Resolves: #443646


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-242
changelog:
  - Allow all domains to search  bin_t and sbin_t
  - Allow qemu to write to /var/run/svirt/qemu
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-233
changelog:
  - Add rsync_client for Fedora Infrastructure
  - Allow spamd to exec itself when it gets a hup signal
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-232
changelog:
  - Allow spamd to exec itself when it gets a hup signal
  - Add Minimum policy for Ovirt to RHEL5
  Resolves: #499701


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-230
changelog:
  - Allow amanda to signal fsadm
  - Add context for /var/cache/cgit
  - Dontaudit apache leaked tcp_sockets
  - Fixes for cvs service
  -allow initrc_t and inetd_t siginh over their children
  - add privoxy_connect_any boolean
  - Allow smbd_t to signal nmbd_t
  Resolves: #498596


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-229
changelog:
  - Fix sepolgen error regression
  - Fix milter implementaion 
  - Additional rules required for update to automount
  Resolves: #497273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-227
changelog:
  - Allow nfs to share removable devices
  - Allow ipsec additional privs for FIPS compliance
  Resolves: #497168


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-225
changelog:
  - add context for rpc.quoatad
  - Allow spamassassin to append to user_home_t for log files
    Resolves: #481387
  Resolves: #486187


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-222
changelog:
  - Allow spamc to append to user_home_t
  Resolves: #486187
  - Allow dbus to send message back to all services
  Resolves: #481628


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-217
changelog:
  - Allow saslauthd access to kerberos host rcache
  - Allow dbus to read all domains states
  Resolves: #489899


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-213
changelog:
  - Allow postfix_virtual_t to use private steam sock_file
  - Fix java shared library in IBM package
  Resolves: #486608


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-211
changelog:
  - Allow samba to edit apache files in home dir
  Resolves: #485111
  - Allow procmail to transition to spamassassin domains
  Resolves: #485107


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-208
changelog:
  - Allow samba to manage ALL files in home dir if boolean set
  - Fix typos in man pages
  Resolves: #477123


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-200
changelog:
  - Allow ldap to connect to sasl
  - avc denials during samba active directory join
  Resolves: #474852
  - samba - winbind - periodic avc denials
  Resolves: #474854
  - "Syntax error on line 1 ' [type=SQUOTE]" upgrading selinux-policy-devel
  Resolves: #474868
  - missing policy
  Resolves: #475273


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-199
changelog:
  - Allow apps that check password to write to faillog  
  audisp_remote needs to bind to audit ports
  Resolves: #474481
  - Allow xm to stream connect to virt
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-197
changelog:
  - Dontaudit search of /root for init daemons
  - Fixes for ricci
  - Allow xm to manage virt_image_t
  Resolves: #472903


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-188
changelog:
  - Fixes for Fedora Infrastructure
  - Make pegasus an unconfined_domain 
  - Add pki policy
  Resolves: #440151


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-182
changelog:
  - Change apache httpd_use_nfs to mean managing nfs shares
  - From Fedora Infrastructure
  Resolves: #469943


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-179
changelog:
  - Allow restorecon to read locale_t
  Resolves: #469402
  - Allow hal/pm-utils to look at /var/run/video.rom


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-164
changelog:
  - Fix labeling on dhclient-lease files
  - Allow portmap_helper to bind to rpc ports
  Resolves: #451805


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-162
changelog:
  - Allow domains to read etc_runtime for access to modified denyhosts
  - Allow dhcpc_t to list dbusd_etc_t directory
  Resolves: #459888


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-155
changelog:
  - Complete backport of logging/audit policy
  - Allow pegasus to look at kernel xen information
  Resolves: #461624


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-154
changelog:
  - Allow portmak to read kernel state 
  - Allow ricci to figure out if cluster services are running
  Resolve: #461769


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-149
changelog:
  - Fix file context to install on strict/mls policy
  - Allow hal to modify input device
  Resolves: #442623


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-142
changelog:
  - add mmap_low boolean
  - Upgrade to latest networkmanager policy
  - Add kpropd policy
  - update nscd policy
  - Update ntp policy
  - Update openvpn policy
  - Fix ppp_read_read interface
  - fix portmapper to allow it to connect to all <1024 ports
  - Fix ricci_modstorage to be able to start clvmd
  Resolves: #442028
  Resolves: #447014
  Resolves: #455784


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-138
changelog:
  - Allow pam_console to setattr on cpu_device_t
  Resolves: #447403
  - selinux-policy support for virtio block devices
  Resolves: #446229


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-134
changelog:
  - Allow kerberos daemons to create log files
  - Resolves: 442981
  - Fix label on /usr/libexec/hal_lpadmin
  Resolves: #442951


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-124
changelog:
  - Fix deletion of dovecot files in strict/mls policy Resolves 434843
  - Allow hal to setsched on kernel
  Resolves: #435197


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-117
changelog:
  - Allow mailman to signal itself
  Resolves: #430639
  - Allow iscsid to setrlimit 
  Resolves: #430669
  - Additional fix to allow setroubleshoot to talk to dbus
  Resolves: #224351


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-114
changelog:
  - Allow restorecond to read homedir sym links
  - Allow mailservers/postfix to use nfs file systems
  Resolves: #245605


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-108
changelog:
  - Allow kudzu to domtrans to unconfined_t
  - Allow audit to send mail
  - Allow mailman and postfix to interact
  Resolves: #425806:


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-107
changelog:
  - Remove badly labeled pegasus directory
  - Allow postfix to work with NFS homedirs
  - Allow iptables to connect to ldap
  - Allow apache scripts to run nice
  - Allow ntpd to use /dev/ptmx for setting the time
  - Allow automount to read /dev/random
  - Allow samba to use kerberos
  - Allow squid to access to port 2048
  - Allow amanda to talk to ldap
  - Allow yppasswd to run pwupdate
  - Allow automount to mount squashfs
  - Add new nscd permissions
  - 
  Resolves: #245605
  Resolves: #248838
  Resolves: #251841
  Resolves: #253999
  Resolves: #316011
  Resolves: #326631
  Resolves: #350511
  Resolves: #366461
  Resolves: #390771
  Resolves: #247814
  Resolves: #238347
  Resolves: #351051
  Resolves: #254199
  Resolves: #288771
  Resolves: #294671
  Resolves: #317281
  Resolves: #340311
  Resolves: #340321
  Resolves: #386481
  Resolves: #327121
  Resolves: #416541
  Resolves: #416561
  Resolves: #414891

  Resolves: 383231
  Resolves: 254197
  Resolves: 266341
  Resolves: 248835
  Resolves: 326721
  Resolves: 319791
  Resolves: 359701
  Resolves: 374431
  Resolves: 403241
  Resolves: 251712
  Resolves: 283971
  Resolves: 284361
  Resolves: 300391
  Resolves: 339651
  Resolves: 383191
  Resolves: 279261


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-106.1
changelog:
  - dontaudit consoletype talking to hotplug
  - allow hotplug to signal ifconfig
  Resolves: 328211
  Resolves: 328251


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-97
changelog:
  - Fixup clmvd to allow creation of fixed devices
  - Fixes telnet/rlogin using replay cache
  Resolves: #284831


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-89
changelog:
  - Allow postfix to read master proc info
  - Allow unix_update to talk to nsswitch
  - Allow dmidecode to search sysfs_t
  Resolves: #263141


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-88
changelog:
  - Fix relabel of /var/run dir
  - Allow snmp to read any directory
  - Allow cimserver to create pegasus_data directories
  Resolves: #213809
  - Change to context on /var/run/libvirt
  Resolves: #249069


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-84
changelog:
  - Allow dovecot read of /tmp files for kerberos
  - Fix apache policy for virtual hosting
  - Allow Xen to run on nfs
  Resolves: #253744


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-76
changelog:
  - Allow xenconsole to manage xen log files
  - add mmap_zero for new kernel
  - Fixes for RHEL5
  Resolves:#244690


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-74
changelog:
  - Fix location of ypxfr on 64 bit platforms
  - Fixes for nagios, postfix, procmail, saslauthd, arpwatch, avahi, dovecot
  Resolves: #241621


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-71
changelog:
  - Allow netlable to read etc and work with init terminals
  - Change file context to have all of policy at SystemLow
  Resolves: #239079


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-67
changelog:
  - Allow logging into the console on s390
  Resolves: #237703
  - Additional avc's caused by change in unix_update
  Resolves: #236316


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-61
changelog:
  - Fix admin_domain_template to allow custom user types
  Resolves: #237133
  -Allow lvm to create/delete generic device_t direcories/files under /dev 
  Resolves: #237128


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-52
changelog:
  - Allow netutils to read sysfs
  Resolves: #235357
  - Allow samba to work as a PDC
  Resolves: #235360
  - Allow ypserv to bind to ports 600-1024
  Resolves: #235363
  - Fix kudzu to be able to telinit
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-50
changelog:
  - More work to allow kudzu to setup init correctly so getty will work
  Resolves: #225443
  - Allow pegasus to execute ifconfig
  Resolves: #227485
  - Allow Aide to look at lnk_files and other fixes
  Resolves: #234885
  - querying cups jobs with sysadm_r needs override mls restrictions
  Resolves: #234889


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-49
changelog:
  - Change init_daemon_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  - to init_system_domain(netlabel_mgmt_t,netlabel_mgmt_exec_t)
  Resolves: #233313


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-47
changelog:
  - Allow sysadm_r to transition to netlabel_mgmt
  Resolves: #233313
  - Allow kudzu to setup init correctly so getty will work
  Resolves: #225443


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-42
changelog:
  - Dontaudit restorecon writing to cron pipes
  - Fix filespec for /dev/ub*
  - Allow ftp and telnet to use kerberos key files
  - Allow syslog to use alternate ports
  - Allow radious to look at the routing table
  - Allow pyzor to getattr on autofs


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-39
changelog:
  - Add bugzilla policy
  - Allow procmail to create tmp files so spamassisin will work
  - Some fixes for pyzor


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-36
changelog:
  - Allow xen to work properly on ia64, needs to be able to read dosfs_t
  Resolves: #217362
  - Allow mozilla, evolution and thunderbird to read dev_random.
  Resolves: FC6-227002
  - Allow spamd to connect to smtp port
  Resolves: FC6-227184
  - Fixes to make ypxfr work
  Resolves: FC6-227237
  - Allow audit fsetsid capability
  Resolves: FC6-227423
  - Allow syslog (syslog-ng) to tcp_connect to other syslog servers
  Resolves: FC6-218978


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-31
changelog:
  - Fix clvmd policy
  - Fix squid cgi script to run with correct context.
  - Maintain proper context on /etc/lvm/.cache file
  - Lots of fixes for ricci and friends
  - mount.nfs needs sys_resource
  - Change gstreamer context for only i386
  - Fix libXcomp file_context
  Resolves: #224441


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-28
changelog:
  - Allow logwatch to use ypbind
  - Allow system_crond_t to create cron_var_run_t files (prelink files)
  - dontaudit postfix-smtp reading /boot, fix file context on lmtp
  Resolves: #215722


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-27
changelog:
  - Fix senmail avc trying to read /root
  - More fixes for ssh transitions to userspace
  Resolves: #221608
  Resolves: #222548


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-26
changelog:
  - automounter needs setuid
  - prelink needs to be able to rw_dir_perms on usr_t
  - pcscd_t needs to be able to search sysfs_t
  - Lots of fixes to run sshd under xinetd
  Resolves: #219999


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-24
changelog:
  - Allow prelink when run from rpm to create tmp files
  Resolves: #221865
  - Remove file_context for exportfs
  Resolves: #221181
  - Allow spamassassin to create ~/.spamassissin
  Resolves: #203290
  - Allow netlabel packets to flow.
  Resolves: #210426


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-23
changelog:
  - Allow ssh access to the krb tickets
  - Allow sshd to change passwd
  - Stop newrole -l from working on non securetty
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-16
changelog:
  - Allow semanage to exec it self.  Label genhomedircon as semanage_exec_t
  Resolves: #219421
  - Allow sysadm_lpr_t to manage other print spool jobs
  Resolves: #220080


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-3
changelog:
  - Allow login programs to polyinstatiate homedirs
  Resolves: #216184
  - Allow quotacheck to create database files
  Resolves: #212957


author: Dan Walsh <dwalsh@redhat.com> 2.4.6-1
changelog:
  - Dontaudit appending hal_var_lib files 
  Resolves: #217452
  Resolves: #217571
  Resolves: #217611
  Resolves: #217640
  Resolves: #217725


author: James Antill <james.antill@redhat.com> 2.4.2-6
changelog:
  - Fix policygentool specfile problem.
  - Allow apache to send signals to it's logging helpers.
  - Resolves: rhbz#212731


author: Dan Walsh <dwalsh@redhat.com> 2.3.16-9
changelog:
  - Remove bluetooth-helper transition
  - Add selinux_validate for semanage
  - Require new version of libsemanage


author: Dan Walsh <dwalsh@redhat.com> 2.3.9-4
changelog:
  - Set /usr/lib/ia32el/ia32x_loader to unconfined_execmem_exec_t for ia32 platform
  - Fix spec for /dev/adsp


author: Dan Walsh <dwalsh@redhat.com> 2.3.6-4
changelog:
  - Change allow_execstack to default to on, for RHEL5 Beta.  
    This is required because of a Java compiler problem.
    Hope to turn off for next beta


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-11
changelog:
  - Added Paul Howarth patch to only load policy packages shipped 
    with this package
  - Allow pidof from initrc to ptrace higher level domains
  - Allow firstboot to communicate with hal via dbus


author: Dan Walsh <dwalsh@redhat.com> 2.3.3-3
changelog:
  - Allow prelink to read bin_t symlink
  - allow xfs to read random devices
  - Change gfs to support xattr


author: Dan Walsh <dwalsh@redhat.com> 2.2.32-2
changelog:
  - Add unconfined_mount_t
  - Allow privoxy to connect to httpd_cache
  - fix cups labeleing on /var/cache/cups


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-6
changelog:
  - Allow secadm_t ability to relabel all files
  - Allow ftp to search xferlog_t directories
  - Allow mysql to communicate with ldap
  - Allow rsync to bind to rsync_port_t


author: Russell Coker <rcoker@redhat.com> 2.2.29-5
changelog:
  - Fixed mailman with Postfix #183928
  - Allowed semanage to create file_context files.
  - Allowed amanda_t to access inetd_t TCP sockets and allowed amanda_recover_t
    to bind to reserved ports.  #149030
  - Don't allow devpts_t to be associated with tmp_t.
  - Allow hald_t to stat all mountpoints.
  - Added boolean samba_share_nfs to allow smbd_t full access to NFS mounts.
    - Make mount run in mount_t domain from unconfined_t to prevent mislabeling of
    /etc/mtab.
  - Changed the file_contexts to not have a regex before the first ^/[a-z]/
    whenever possible, makes restorecon slightly faster.
  - Correct the label of /etc/named.caching-nameserver.conf
  - Now label /usr/src/kernels/.+/lib(/.*)? as usr_t instead of
    /usr/src(/.*)?/lib(/.*)? - I don't think we need anything else under /usr/src
    hit by this.
  - Granted xen access to /boot, allowed mounting on xend_var_lib_t, and allowed
    xenstored_t rw access to the xen device node.


author: Dan Walsh <dwalsh@redhat.com> 2.2.29-2
changelog:
  - Add mono dbus support
  - Lots of file_context fixes for textrel_shlib_t in FC5
  - Turn off execmem auditallow since they are filling log files


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-17
changelog:
  - MLS Fixes
  	dmidecode needs mls_file_read_up
  - add ypxfr_t
  - run init needs access to nscd
  - udev needs setuid
  - another xen log file
  - Dontaudit mount getattr proc_kcore_t


author: Dan Walsh <dwalsh@redhat.com> 2.2.23-8
changelog:
  - Blkid changes
  - Allow udev access to usb_device_t
  - Fix post script to create targeted policy config file


author: Dan Walsh <dwalsh@redhat.com> 2.2.20-1
changelog:
  - Fix load_policy to work on MLS
  - Fix cron_rw_system_pipes for postfix_postdrop_t
  - Allow audotmount to run showmount


author: Dan Walsh <dwalsh@redhat.com> 2.2.19-2
changelog:
  - Fix swapon
  - allow httpd_sys_script_t to be entered via a shell
  - Allow httpd_sys_script_t to read eventpolfs


author: Dan Walsh <dwalsh@redhat.com> 2.2.2-1
changelog:
  - Update to upstream
  - Turn off execheap execstack for unconfined users
  - Add mono/wine policy to allow execheap and execstack for them
  - Add execheap for Xdm policy


author: Dan Walsh <dwalsh@redhat.com> 2.1.12-3
changelog:
  - Fix for procmail/spamassasin
  - Update to upstream
  - Add rules to allow rpcd to work with unlabeled_networks.


author: Dan Walsh <dwalsh@redhat.com> 2.1.6-13
changelog:
  - Add dri libs to textrel_shlib_t
  - Add system_r role for java
  - Add unconfined_exec_t for vncserver
  - Allow slapd to use kerberos


author: Dan Walsh <dwalsh@redhat.com> 2.1.3-1
changelog:
  - Turn back on execmem since we need it for java, firefox, ooffice
  - Allow gpm to stream socket to itself


author: Jeremy Katz <katzj@redhat.com> - 2.1.2-3
changelog:
  - fix requirements to be on the actual packages so that policy can get
    created properly at install time


author: Dan Walsh <dwalsh@redhat.com> 2.1.2-1
changelog:
  - Update to upstream 
  - Turn off allow_execmem and allow_execmod booleans
  - Add tcpd and automount policies


author: Dan Walsh <dwalsh@redhat.com> 2.1.1-3
changelog:
  - Add two new httpd booleans, turned off by default
  	* httpd_can_network_relay
  	* httpd_can_network_connect_db


author: Mike Christie <mchristie@redhat.com> - 0.0-6.20091205snap.1
changelog:
  - Rebase to latest upstream snapshot from Dec 5th 2009 (git id
  97832d8dcd00202a493290b5d134b581ce20885c)
  - 545785 fix segfault when running tgtadm --mode connection --op delete
  - 545786 fix tgtd crash under load
  - 531041 fix tgt segfault on 31st target creation


author: Mike Christie <mchristie@redhat.com> - 0.0-5.20080917snap
changelog:
  - Rebase to latest upstream snapshot to include tgt-admin and static config.
  - When doing a "tgtd stop" kill running targets if run level indicates
  system is shutting down or restarting.


author: Christopher Aillon <caillon@redhat.com> 1.2.9-4
changelog:
  - NSS has been split out of the mozilla package, so require that now
    and update separate_nspr.patch to account for the new NSS as well


author: Daniel Veillard <veillard@redhat.com> 1.2.7-1
changelog:
  - Upstream release of 1.2.7, mostly bug fixes plus new functions
    to GetKeys from simple store and X509 handling.


author: Daniel Veillard <veillard@redhat.com> 1.2.1-1
changelog:
  - initial packaging based on the upstream one and libxml2 one.
  - desactivated mozilla-nss due to detection/architecture problems


author: Uri Lublin <uril@redhat.com> - 0.3.0-39.el5_4.1
changelog:
  - spice: server: improve video streaming in low network bandwidth condition
  Resolves: #521792 - Video frames drop in low network bandwidth condition


author: Uri Lublin <uril@redhat.com> - 0.3.0-39.el5_4.1
changelog:
  - spice: server: improve video stream detection
  Resolves: #521791 - Error in detecting the video stream on some web sites


author: Uri Lublin <uril@redhat.com> - 0.3.0-39.el5
changelog:
  - spice: server: improve channel connect/disconnect robustness
  Resolves: #508544 - Crash of a VM due to SPICE: ring_remove: ASSERT


author: Uri Lublin <uril@redhat.com> - 0.3.0-38.el5
changelog:
  - adjust package description and summary to fit the drop of client
    subpackages in release -34 #507718
  Resolves: #507718 - Remove qspice-mozilla subpackage and spicec cli


author: Uri Lublin <uril@redhat.com> - 0.3.0-37.el5
changelog:
  - spice: server: fix is_same_geometry() #508133
  Resolves: #508133 - Wrong path geometry comparison result with bad rendering


author: Yuval Kashtan <kashtan@redhat.com> - 0.3.0-36.el5
changelog:
  - add 'Requires: libXext-devel' to workaround bug #494249 (#503203)
  Resolves: #503203 - qspice-libs-devel doesn't pull libXrandr-devel


author: Yuval Kashtan <ykashtan@redhat.com> - 0.1.0-29.el5
changelog:
  - Compile qspice for 64bit only (#498872)
  Resolves: #498872 - qspice server is being compiled for 32bit machines


author: Yuval Kashtan <ykashtan@redhat.com> - 0.1.0-28.el5
changelog:
  - First RHEL-5 release (#488580)
  - Fix all rpmlint issues (#488580)
  Resolves: #488580 - Add qspice package


author: Dan Kenigsberg <danken@redhat.com> - 0.1.0-25.git4b474d
changelog:
  - fix bad hash key in spice client cache templates #494638
  - fix bug 492322 - client stuck after connection is lost.
  - fix bug 492885 - Fix wrong free memory that own by cache.
  - add insoftware fast stretching #481891
  - add x shared memory support - fix bug 482281 (video in linux is slower)
  - fix unsupported vdagent messages handling #494577
  - fix window messages handling #494367


author: Frank Ch. Eigler <fche@redhat.com> - 0.9.7-2
changelog:
  - rhbz438737.patch
  - rhbz498018-[123].patch
  - rhbz498040.patch
  - rhbz485498 inlined into spec file
  - rhbz499657 inlined into spec file
  - rhbz501759 via bundled elfutils-0.141 build
  - rhbz499688.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-3
changelog:
  - Add zlib-devel to buildreq; missing from crash-devel
  - Process testsuite .stp files for #!stap->#!/usr/bin/stap


author: Frank Ch. Eigler <fche@redhat.com> - 0.6.1-1
changelog:
  - Add crash-devel buildreq to build staplog.so crash(8) module.
  - Many robustness & functionality improvements:


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.14-1
changelog:
  - Many robustness improvements: 1117, 1134, 1305, 1307, 1570, 1806,
    2033, 2116, 2224, 2339, 2341, 2406, 2426, 2438, 2583, 3037,
    3261, 3282, 3331, 3428 3519, 3545, 3625, 3648, 3880, 3888, 3911,
    3952, 3965, 4066, 4071, 4075, 4078, 4081, 4096, 4119, 4122, 4127,
    4146, 4171, 4179, 4183, 4221, 4224, 4254, 4281, 4319, 4323, 4326,
    4329, 4332, 4337, 4415, 4432, 4444, 4445, 4458, 4467, 4470, 4471,
    4518, 4567, 4570, 4579, 4589, 4609, 4664


author: Frank Ch. Eigler <fche@redhat.com> - 0.5.7-1
changelog:
  - PRs 2511 2453 2307 1813 1944 2497 2538 2476 2568 1341 2058 2220 2437
    1326 2014 2599 2427 2438 2465 1930 2149 2610 2293 2634 2506 2433


author: Frank Ch. Eigler <fche@redhat.com> - 0.5-1
changelog:
  - Many fixes and improvements: 1425, 1536, 1505, 1380, 1329, 1828, 1271,
    1339, 1340, 1345, 1837, 1917, 1903, 1336, 1868, 1594, 1564, 1276, 1295


author: Roland McGrath <roland@redhat.com> - 0.4.2-1
changelog:
  - Many fixes and improvements: PRs 1344, 1260, 1330, 1295, 1311, 1368,
    1182, 1131, 1332, 1366, 1456, 1271, 1338, 1482, 1477, 1194.


author: Roland McGrath <roland@redhat.com> - 0.4.1-1
changelog:
  - Many fixes and improvements since 0.2.2; relevant PRs include:
    1122, 1134, 1155, 1172, 1174, 1175, 1180, 1186, 1187, 1191, 1193, 1195,
    1197, 1205, 1206, 1209, 1213, 1244, 1257, 1258, 1260, 1265, 1268, 1270,
    1289, 1292, 1306, 1335, 1257


author: Martin Hunt <hunt@redhat.com>
changelog:
  - Set Version to use version from autoconf.
  - Fix up some of the path names.
  - Add Requires and BuildRequires.


author: Karsten Hopp <karsten@redhat.de> 1.10-2
changelog:
  - update to wget-1.10
    - drop passive-ftp patch, already in 1.10
    - drop CVS patch
    - drop LFS patch, similar fix in 1.10
    - drop protdir patch, similar fix in 1.10
    - drop actime patch, already in 1.10


author: Karsten Hopp <karsten@redhat.de> 1.9.1-20
changelog:
  - texi2pod doesn't handle texinfo xref's. rewrite some lines so that
    the man page doesn't have incomplete sentences anymore (#140470)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-19
changelog:
  - Don't set actime to access time of the remote file or tmpwatch might 
    remove the file again (#146440).  Set it to the current time instead.
    timestamping checks only modtime, so this should be ok.


author: Karsten Hopp <karsten@redhat.de> 1.9.1-18
changelog:
  - add support for --protocol-directories option as documented
    in the man page (Ville Skyttä, #145571)


author: Karsten Hopp <karsten@redhat.de> 1.9.1-7
changelog:
  - clean up manpage (#117519)
  - buildrequire texinfo (#123780)
  - LFS patch, based on wget-LFS-20040630.patch from Leonid Petrov
    (#123524, #124628, #115348)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 1.7
  - Require perl for building (to get man pages)
  - Don't include the Japanese po file, it's now included
  - Use %{_tmppath}
  - no patches necessary
  - Make /etc/wgetrc noreplace
  - More docs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - setlocale for LC_CTYPE too, or else all the translations think their
    characters are unprintable.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 1.5.0
  - they removed the man page from the distribution (Duh!) and I added it back
    from 1.4.5. Hey, removing the man page is DUMB!


author: Daniel Kopecek <dkopecek@redhat.com> 1.6.9p17-4
changelog:
  - audit patch rediff (one chunk failed to apply due to fuzz=0)
  - Fix for incorrect handling of groups in Runas_User (#481720)
    Resolves: #481821


author: Peter Vrabec <pvrabec@redhat.com> 1.6.9p17-1
changelog:
  - rebase 1.6.8 -> 1.6.9
  - patches from F10
  - compiled with secure path(80215)
  - patches for sudoers file provided by sudo are removed,
    because we deliver our own sudoers in sources1
  - compiled without selinux support since there was no 
    selinux support in previous release
    Resolves: #447408


author: Peter Vrabec <pvrabec@redhat.com> 1.6.8p12-11
changelog:
  - fix segfaults when using ldap on s390,
    Resolves: #305331
  - add audit support,
    Resolves: #320671


author: Karel Zak <kzak@redhat.com> 1.6.8p12-7
changelog:
  - fix #198755 - make login processes (sudo -i) initialise session keyring
    (thanks for PAM config files to David Howells)
  - add IPv6 support (patch by Milan Zazrivec)


author: Dan Walsh <dwalsh@redhat.com> 1.6.8p12-3
changelog:
  - Remove selinux patch.  It has been decided that the SELinux patch for sudo is
  - no longer necessary.  In tageted policy it had no effect.  In strict/MLS policy
  - We require the person using sudo to execute newrole before using sudo.


author: Karel Zak <kzak@redhat.com> 1.6.8p9-1
changelog:
  - new version 1.6.8p9 (resolve #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution)


author: Colin Walters <walters@redhat.com> 1.6.7p5-24
changelog:
  - Enhance sesh.c to fork/exec children itself, to avoid
    having sudo reap all domains.
  - Only reinstall default signal handlers immediately before
    exec of child with SELinux patch


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.6-2
changelog:
  - remove absolute path names from the PAM configuration, ensuring that the
    right modules get used for whichever arch we're built for
  - don't try to install the FAQ, which isn't there any more


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-9
changelog:
  - fix screen corruption when half of double width character is overwritten
    (#137957) 
  - fix double width character handling in checkboxtree and listbox


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.2-7
changelog:
  - fix checkboxtree positioning
  - make textbox with scrollbar focusable (#83203)
  - turn off cursor when entry terminated form (#86074)
  - handle listbox and checkboxtree focus better (#186053)
  - make default colors more friendly to 8-color terminals (#187545)


author: Petr Rockai <prockai@redhat.com> - 0.52.2-5
changelog:
  - Fix a crash in checkboxtree.c where pressing pgup/pgdown
    on a checkboxtree with less items than its height would
    cause segmentation violation. Consult BR 165347.


author: Petr Rockai <prockai@redhat.com> - 0.52.2-4
changelog:
  - Apply patch by Bill Nottingham (thanks) to improve scrollbar appearance
    (BR 174771).
  - Add -%{release} to snack's Provides: line (just in case).


author: Petr Rockai <prockai@redhat.com> - 0.52.2-3
changelog:
  - Provide: snack = 0.52.2 instead of plain "snack", so that
    we don't block upgrades of custom "snack" packages. This should
    not break anything. (Hopefully) fixes BR 171415.


author: Petr Rockai <prockai@redhat.com> - 0.52.1-0
changelog:
  - revert bidi patch, objections by Jeremy Katz about
    anaconda breaking
  - this version still only exists as a "ghastly" upstream tarball;
    the patches are now cleaned up and will be integrated into
    rhlinux cvs unless some more breakage akin to bidi occurs
  - the if1close patch is now part of upstream tarball too


author: Petr Rockai <prockai@redhat.com>
changelog:
  - use versioned symbols, patch by Alastair McKinstry, mckinstry at
    debian dot org, thanks
  - need private wstrlen due to versioned syms, patch from debian
    package of newt
  - both of the above needed to be forward-ported


author: Matt Wilson <msw@redhat.com> 0.51.4-1
changelog:
  - fixed help line drawing in UTF-8 (#81718)
  - calculate the width of text in entries using wstrlen
  - always set component width to the new label width in newtLabelSetText
  - fixed snack.CListbox to work properly with UTF-8 (#81718)


author: Adrian Havill <havill@redhat.com> 0.51.3-1
changelog:
  - cleaned up const qualifiers in interfaces
  - added Ctrl-L screen refresh
  - fixed segfault in test.c when listbox items are selected
  - accessibility: made newt useable with monochrome terms (#60931)
  - leave the symbols in the libs (#60400)
  - fixed grammar in tutorial (#63496)
  - error checking (curcomp exists) for formEvent, newtFormGetCurrent,
    removed fifty button limit (#59027)


author: Matt Wilson <msw@redhat.com> 0.51.2-1
changelog:
  - fixed wstrlen() it was calculating wcwidth(first wide char in
    string) * strlen(str) instead of the actual width of the whole
    string
  - fixed newtRedrawHelpLine() to copy all the bytes from a multibyte
    string


author: Bill Nottingham <notting@redhat.com> 0.51.0-1
changelog:
  - changes for element width calculation for UTF-8
  - fix textwrap for UTF-8 in general
  - bump soname to avoid shared library collisions with slang


author: Joe Orton <jorton@redhat.com> 0.50.36-1
changelog:
  - add newtListboxGetItemCount() API call
  - include numeric percentage in scale widget appearace
  - add support for ESC key using NEWT_KEY_ESCAPE


author: Crutcher Dunnavant <crutcher@redhat.com> 0.50.31-1
changelog:
  - right anchor the internal Listbox of CListboxes, so that empty
  - scrollable CListboxes do not look like crape.


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - added python binding for newtListboxClear() for Listbox and CListBox
  - let ButtonBars optionally be made of CompactButtons


author: Matt Wilson <msw@redhat.com>
changelog:
  - change from using SLsmg_touch_screen to SLsmg_touch_lines to prevent
    excessive flashing due to screen clears when using touch_screen (more
    Japanese handling)


author: Matt Wilson <msw@redhat.com>
changelog:
  - redraw the screen in certain situations when LANG=ja_JP.eucJP to
    prevent corrupting kanji characters (#34362)


author: Elloit Lee <sopwith@redhat.com>
changelog:
  - Allow python scripts to watch file handles
  - Fix 64-bit warnings in snackmodule
  - Misc snack.py cleanups
  - Add NEWT_FD_EXCEPT to allow watching for fd exceptions
  - In newtExitStruct, return the first file descriptor that an event occurred on


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't blow the stack if we push a help line that is longer than the
    curret number of columns
  - clip window to screen bounds so that if we get a window that is
    larger than the screen we can still redraw the windows behind it
    when we pop


author: Erik Troan <ewt@redhat.com>
changelog:
  - gave up on separate CHANGES file
  - added newtCheckboxTreeSetCurrent() and snack binding
  - don't require python2 anymore


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bytecompile the snack python module
  - move the libnewt.so symlink to the devel package
  - include popcorn.py and peanuts.py in the devel package,
    so we have some documentation of the snack module


author: Preston Brown <pbrown@redhat.com>
changelog:
  - explicit requirement of devel subpackage on same version of main package
    so that .so file link doesn't break


author: Matt Wilson <msw@redhat.com>
changelog:
  - fixed snack callback function refcounts, as well as optional data args
  - fixed suspend callback ref counts


author: Matt Wilson <msw@redhat.com>
changelog:
  - added snack bindings for setting current listbox selection
  - added argument to set default selection in snack ListboxChoiceWindow


author: Matt Wilson <msw@redhat.com>
changelog:
  - Function to set checkbox flags.  This will go away later when I have
    a generic flag setting function and signals to comps to go insensitive.


author: Matt Wilson <msw@redhat.com>
changelog:
  - Added GPM mouse support
  - Moved to autoconf to allow compiling without GPM support
  - Changed revision to 0.40


author: Erik Troan <ewt@redhat.com>
changelog:
  - added changes from Bruce Perens
      - small cleanups
      - lets whiptail automatically resize windows
  - the order of placing a grid and adding components to a form no longer
    matters
  - added newtGridAddComponentsToForm()


author: Erik Troan <ewt@redhat.com>
changelog:
  - Cleaned up listbox
  - Added whiptail
  - Added newtButtonCompact button type and associated colors
  - Added newtTextboxGetNumLines() and newtTextboxSetHeight()


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move programming docs to /usr/share/doc/kdelibs-devel-3.5.4-22.el5.centos.1
    and to kdelibs-devel package
  - new snapshot


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:4.1-77
changelog:
  - fix setting of pam configuration in vixie-cron-4.1-loginuid.patch
  - move building environment between opening session and setting
  parameters of session
  - Resolves: rhbz#546568


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-76
changelog:
  - 222464 crond failed "Days of week" after a few hours on 1st/Jan
  - 241877 Cron does not handle home directories with group deny permissions
  - 455379 cron jobs for users without home doesn't work
  - Resolves: rhbz#241877, rhbz#222464, rhbz#455379


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-71
changelog:
  - added back patches removed for previous errata - 222461, 223532, 223894
  - Resolves: rhbz#222461, rhbz#223532, rhbz#223894


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-70
changelog:
  - removed last patches, added only CVE 235880. Removed 222461, 223532, 223894.
  - Resolves: rhbz#235880


author: Marcela Maslanova <mmaslano@redhat.com> - 4:4.1-64
changelog:
  - include system-auth for session in crond.pam, it now avoids
    using pam_unix if the process is crond


author: Jason Vas Dias <jvdias@redhat.com> - 4:4.1-58
changelog:
  - fix bug 199294: support for LSPP multiple per-job SELinux contexts
  - fix bug 198019: make database.c correct if crontab mtime changes 
                    while spool dir mtime does not.


author: Jason Vas Dias<jvdias@redhat.com> - 4.1-50.FC5
changelog:
  - fix bug 178436: prevent per-minute jobs being delayed into next minute
  - fix bug 178931: remove pam_unix and pam_krb5 from pam session stack


author: Jason Vas Dias<jvdias@redhat.com>
changelog:
  - fix bug 177476: make minder/mailer process run as job user 
    with user context; re-organize PAM and SELinux code


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-41.FC5
changelog:
  - patches for IBM LSPP testing:
  - Steve Grubb's patch to emit audit log message on crontab denial
  - Use of sendmail unacceptable for LSPP: provide -m <mail command> option


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-40.FC5
changelog:
  - *** NOTE : please do not modify vixie-cron without contacting ***
    *** the package maintainer (me at the moment).                ***
    *** Or at least test it first!                                ***
  - fix bug 170830: it was not the pam_stack change - the setuid
    mode of crontab was dropped for some reason.
  - apply Dan's new getseuserbyname patch
  - somehow build_env() invocation was dropped - use pam_env settings.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-39-FC5
changelog:
  - fix bug 170830: the last PAM change disabled all cron jobs.
    backing out the new PAM configuration file until I've had a
    chance to test it with replacement of pam_stack.so.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-36.FC4
changelog:
  - fix bug 162887: allow multiple /etc/cron.d crontabs for *system* user
  - further fix for bug 154920 / CAN-2005-1038 ( crontab -e ):
       invoke editor and copy operation as non-root user


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-FC4.34
changelog:
  - fix bug 160811: FC3 version compared >= FC4 version
  - fix bug 159216: add pam_loginuid support for new audit system


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-33_FC4
changelog:
  - fix bug 154922 / CAN-2005-1038: check that new crontab is 
        regular file after editor session ends.
  - fix bug 154575: use PATH_MAX (4096) as max filename length; also make 
        limits on command line and env.var. lengths sensible (131072).


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-30_FC4
changelog:
  - fix bug 154065: crontab's job control broken: by 
  -     xpid = waitpid(pid,&waiter,WUNTRACED);... 
  -     if( WIFSTOPPED(waiter) )... kill(getpid(),WSTOPSIG(waiter));
  - crontab should not kill itself with SIGSTOP if its child
  - gets SIGSTOP; hence it does not need the waitpid WUNTRACED flag.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-28_FC4
changelog:
  - Required for EAL Audit certification: 
  - If pam_setcred should fail, the pam_session could fail to be
  - closed, leaving autofs user directories still mounted.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-26_FC4
changelog:
  - fix bug 151145: segfault if cronjob runs without any SELinux user 
  - security context (eg. in a broken chroot environment)


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-24_FC4
changelog:
  - Add an /etc/sysconfig/crond file for containing CRONDARGS and
  - settings like CRON_VALIDATE_MAILRCPTS .


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-24_FC4
changelog:
  - Fix bug 147636 - disable silly mail recipient name checking 
  - (do_command.c's safe_p()) by default . Can be enabled by 
  - presence of CRON_VALIDATE_MAILRCPTS variable in crond's 
  - environment - also '_'s in MAILTOs are allowed.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-22
changelog:
  - Fix bug 146073 - allow the 'pam_access' module to be used with
  - cron - set 'PAM_TTY' item to 'cron' .


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-21
changelog:
  - fix bug 142953 : allow read-only crontabs + provide -p 
  - 'permit all crontabs' option to disable mode checking.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-19
changelog:
  - crontab -e should only strip NHEADER_LINES comments 
  - (NHEADER_LINES==0), not at least one header comment line.
  - (bug 135845)


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-17
changelog:
  - Users not allowed to use 'crontab mycrontab', while
  - 'crontab < mycrontab' allowed; this is because misc.c's
  - swap_uids_back() was not using save_euid / save_egid .
  - Thanks to Mads Martin Joergensen <mmj@suse.de> for pointing this out.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-16
changelog:
  - Just found out in testing that if neither /etc/cron.{deny,allow}
  - exist, root is unable to use crontab - I'm sure root could before,
  - but is in any case meant to be able to. Allowing root to use crontab.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-14
changelog:
  - Fix for bug 130102 got dropped somehow from latest CVS.
  - This is now restored - in %post, if neither /etc/cron.{deny,allow}
  - exist, touch /etc/cron.deny, to allow all users to use crontab,
  - as was previous default vixie-cron behaviour.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-12
changelog:
  - Merged Dan's patch with vixie-cron-4.1-11 which was not 
  - latest version according to new CVS ?!?!


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-11
changelog:
  - Fixed SIGSEGV in free_user when !is_selinux_enabled() and crontab
  - has no valid jobs (bug 131390).


author: Jason Vas Dias <jvdias@redhat.com> - 4.1.10
changelog:
  - Fixed bug 130102: Restored default behaviour if neither 
  - /etc/cron.deny nor /etc/cron.allow exist - 'touch /etc/cron.deny'
  - in %post


author: Jason Vas Dias <jvdias@redhat.com> - 4.1.8
changelog:
  - Allowed editors such as 'gedit' which do not modify original
  - file, but which rename(2) a temp file to original, to be used
  - by crontab -e (bug 129170).


author: Jason Vas Dias <jvdias@redhat.com> - 4.1.8
changelog:
  - Added documentation for '@' nicknames to crontab.5
  - (bugs 107542, 89899). Also removed 'second when' (bug 59802).


author: Jason Vas Dias <jvdias@redhat.com> - 4.1.6
changelog:
  - Added PAM 'auth sufficient pam_rootok.so' to /etc/pam.d/crond
  - (fixes bug 128843) - on dwalsh's advice.


author: Jason Vas Dias <jvdias@redhat.com> - 4.1-1
changelog:
  - Changed post-install to change mode of existing crontabs to
  - 0600 to allow run by new ISC cron 4.1


author: Jens Petersen <petersen@redhat.com> - 3.0.1-94
changelog:
  - add vixie-cron-3.0.1-cron-descriptors-125110.patch to close std descriptors
    when forking (Bernd Schmidt, 121280)
  - add vixie-cron-3.0.1-no-crontab-header-89809.patch to not prepend header to
    crontab files (Damian Menscher, 103899)
  - fix use of RETVAL in init.d script (Enrico Scholz, 97784)
  - add safer malloc call to vixie-cron-3.0.1-sprintf.patch 
  - add cron-3.0.1-crontab-syntax-error-114386.patch to fix looping on crontab
    syntax error (Miloslav Trmac, 89937)


author: Jens Petersen <petersen@redhat.com> - 3.0.1-82
changelog:
  - add vixie-cron-3.0.1-pie.patch to build crond as pie (#108414)
    [Ulrich Drepper]
  - require libselinux and buildrequire libselinux-devel


author: Jens Petersen <petersen@redhat.com> - 3.0.1-80
changelog:
  - add vixie-cron-3.0.1-vfork-105616.patch to use fork instead of vfork
    (#105616) [report and patch from ian@caliban.org]
  - update vixie-cron-3.0.1-redhat.patch not to change DESTMAN redundantly
    (it is overrriden in the spec file anyway)


author: Jens Petersen <petersen@redhat.com> - 3.0.1-75
changelog:
  - add vixie-cron-3.0.1-root_-u-85879.patch from Valdis Kletnieks to allow
    root to run "crontab -u <user>" even for users that aren't allowed to


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.1-72
changelog:
  - adjust cron.d patch so that it ignores file with names that begin with '#'
    or end with '~', '.rpmorig', '.rpmsave', or '.rpmnew'
  - merge hunk of buffer overflow patch into the cron.d patch


author: Bill Nottingham <notting@redhat.com>
changelog:
  - log as 'crond', not 'CROND' (#19410)
  - account for shifts in system clock (#23230, patch from <pererik@onedial.se>)
  - i18n-ize initscript


author: Than Ngo <than@redhat.com>
changelog:
  - add /sbin/service to Prereq
  - call /sbin/service instead service
  - fix startup position (Bug #13353)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix crond logging patch (dan@doom.cmc.msu.ru)
  - log via syslog (suggestion from jos@xos.nl)
  - put system crontab location in crontab(5) (#14842)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to get rid of the dangerous sprintf() calls
  - added BuildRoot and Prereq: /sbin/chkconfig


author: Neil Horman <nhorman@redhat.com> - 1.102pre-72
changelog:
  - Picked up some more fixes for HP systems (bz 277531)
  - Initialized machdep info for dump-dmesg (bz 475414)


author: Neil Horman <nhorman@redhat.com> -1.102pre-63
changelog:
  - Update kdump initscript to offer condrestart (bz 494483)
  - Update mkdumprd to use hostnames for ssh (bz 493690)


author: Neil Horman <nhorman@redhat.com> -1.102pre-59
changelog:
  - Fixed some bad status msgs on ssh target (bz 466450)
  - Fixed ability to detect md arrays (bz 479211)


author: Neil Horman <nhorman@redhat.com> -1.102pre-58
changelog:
  - Add --noio for HP rx series boxes in spec file (bz 277531)
  - Add fix for newer EFI firmware on ia64 (bz 473730)
  - Add fix to mkdumprd for newline in ifcfg files (bz 476063)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-52
changelog:
  - Abort mkdumprd if devices in fstab can't be found (bz 472575)
  - Fix IDE CD-ROM hang fix further, add hdX=noprobe for the
    non-cdrom hdX's (bz 254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-45
changelog:
  - Fixed ability to drop to shell (bz 465453)
  - Fixed typo in changelog (bz 465445)
  - Fixed ability to handle raid5 partitions (bz 465361)


author: Neil Horman <nhorman@redhat.com> -1.102pre-41
changelog:
  - Fix kdump.conf man page to correct default directive (bz 463404)
  - Fix makedumpfile to not build wrong filter bitmap (bz 462864)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-39
changelog:
  - Fix failure to capture vmcore when a panic triggers while
    an IDE CD-ROM drive is busy (bz254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-33
changelog:
  - Fix mkdumprd to support options directive (bz 459686)
  - Update kdump.conf man page to clarify msh use (bz 459622)


author: Neil Horman <nhorman@redhat.com> -1.102pre-23
changelog:
  - Fixed ppc64 kexec to make a page_size section for rtas (bz 438056)
  - Added udev rules to restart kdump on mem/cpu hotplug (bz 446423)


author: Neil Horman <nhorman@redhat.com> -1.102pre-22
changelog:
  - Start here for 5.3 errata
  - Fixed mkdumprd to wait for critical bdevs (bz 446279)
  - Fixed mkdumprd to not spew ld.conf warnings (bz 438459)
  - Fixed mkdumprd to not do extra efirtc create (bz 438755)
  - Enhanced mkdumprd to display progress (bz 223892)
  - Fixed mkdumprd to handle non-default lvm names (bz 360111)
  - Fixed howto to reflect correct scp use (bz 440983)
  - Fixed mkdumprd man page (bz 444824)


author: Neil Horman <nhorman@redhat.com> -1.102pre-1
changelog:
  - Update makedumpfile to use vmcoreinfo information (bz 253852)
  - Update kexec-tools to latest testing tree from horms (bz 253852)
  - Add vmcoreinfo retrieval patch (bz 253852)
  - Update makedumpfile to 1.2.0 to use vmcoreinfo (bz 253852)
  - modify mkdumprd to call makedumpfile properly w/ vmcoreinfo (bz 253852)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.4
changelog:
  - Use PAE kernel for i686 xen kdump if mem > 4GB (bz 284821)
  - Warn users in firstboot if they need kernel-PAE (bz 284841)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.1
changelog:
  - Add support for dumping to partitions on drives attached to cciss
    and cpqarray controllers (bz 228685)
  - Minor updates to kdump initscript for xen kdump support (bz 244301)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194
changelog:
  - Update kdump init script to look for crash kernel reservation in
    /proc/iomem so we can start up on xen kernels too (bz 250803)


author: Neil Horman <nhorman@redhat.com> - 1.101-192
changelog:
  - Update makedumpfile to version 1.1.1 (bz 248235)
  - reconcile mkdumprd options w/ man page (bz 247493)
  - Fix some doc formatting (bz 247552)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-188
changelog:
  - Fix regression in network dump setup introduced by changes to
    support adding arbitrary kernel modules (bz 223929)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-187
changelog:
  - Fix up firstboot memory reservation detection for ppc64 (bz 245980)
  - Minor formatting fix for post-script feature
  - Don't allow user to try to set up kdump on ia64 xen (not supported)
  - Nudge minimum allowed firstboot spinner values down a bit, but
    present same defaults as we always have


