# changelog

author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib64/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib64/tls/librt*so* and /lib64/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2.1
changelog:
  - fixed BadDrawable error (rhbz#569907)
  - fixed MultiList not displayed properly (mzbz#1453) (rhbz#569906)
  - fixed invisible insensitive labels, buttons, icons and list entries
    (mzbz#1381) (rhbz#569906)
  - fixed XmNaccelerator do not work with CapsLock/ScrollLock/NumLock
    modifiers (mzbz#345) (rhbz#569908)


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-2
changelog:
  - more fixes for unreliable pasting into XmTextField (MotifZone bug #1321)
    Resolves: rhbz#405941
  - the fix for MotifZone bug #1400 is not working for remote displays


author: Thomas Woerner <twoerner@redhat.com> 2.3.1-0
changelog:
  - rebase to 2.3.1 (CVS dist release)
    Resolves: rhbz#455736
  - fixes OpenMotif XmList problem
    Resolves: rhbz#405801
  - fixes List.c/ReplaceItem() segfaults when item selected
    Resolves: rhbz#431460
  - fixes [motifzone 1400 ] openmotif/ BadFont on multiple display application
    Resolves: rhbz#438910
  - fixes applications dump core in non-UTF8 environment
    Resolves: rhbz#453722
  - fixes lots of additional bugs: see release notes


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.5
changelog:
  - fixed SEGV error moving mouse over window related to XmToolTipGetLabel
    (MotifZone bug fix #1388)
    Resolves: rhbz#277381


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.9
changelog:
  - new CVS version 2006-02-02
  - fixed CVE-2005-3964: libUil buffer overflows (#174814)
  - fixed XmList out of bound accesses (#167701)
  - fixed pasting into TextField (#179549)


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - moved mwmrc to /etc/X11/mwm
  - moved bindings to /usr/share/X11
  - fixed paths in man pages containing /usr/X11R6


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1.1
changelog:
  - enabled Xft, jpeg and png support
  - patch for missing xft-config
  - dropped duplicate include path in devel package


author: Thomas Woerner <twoerner@redhat.com> 2.3.0-0.1
changelog:
  - new 2.3.0 (beta1)
  - patch for new rgb.txt location (#174210)
    Thanks to Ville Skyttä for the patch


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-11
changelog:
  - fixed mrm initialization error in MrmOpenHierarchyPerDisplay (#167094)
    Thanks to Arjan van de Ven for the patch.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-9
changelog:
  - Upstream Fix: Multiscreen mode
  - Upstream Fix: Crash when restarting by a session manager (motifzone#1193)
  - Upstream Fix: Crash when duplicating a window menu containing f.circle_up
    (motifzone#1202)
  - fixed divide by zero error in ComputeVizCount() (#144420)
  - Xpmcreate: define LONG64 on 64 bit architectures (#143689)


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-6
changelog:
  - fixed CAN-2004-0687 (integer overflows) and CAN-2004-0688 (stack overflows)
    in embedded Xpm library


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-5
changelog:
  - libXp now moved to xorg-x11-deprecated-libs, therefore no compatibility 
    with XFree86 packages anymore.


author: Thomas Woerner <twoerner@redhat.com> 2.2.3-3
changelog:
  - fixed popup menus fail on Tarantella/VNC (#123027)
  - fixed character not supported problem (#124960)
  - fixed data out of bounds bug (#124961)


author: Thomas Woerner <twoerner@redhat.com> 2.2.2-13
changelog:
  - fix for Xmu/EditRes conflict (bug #80777)
  - fix for wml and utf-8 (bug #80271)
  - fix for Ext18List (bug #74502)


author: Than Ngo <than@redhat.com>
changelog:
  - add 3 official motif patches 
  - add rm -rf $RPM_BUILD_ROOT in install section
  - remove some old patches which are now in official patches


author: Than Ngo <than@redhat.de>
changelog:
  - fix imake to built with gcc-2.96 (thanks Jakup)
  - put bitmaps in /usr/X11R6/include/X11/bitmaps
  - put bindings in /usr/X11R6/lib/Xm/bindings
  - add define -D_GNU_SOURCE to build Motif
  - gzip man pages
  - cleanup specfile


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-20.el5
changelog:
  - redefining a Xen domain could reset the domain id
  - fix Xen inotify checking of /etc/xen and avoid vanishing domains
  - resolves: rhbz#508278


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-14.el5
changelog:
  - fix broken behavior on wrong pool creation
  - Resolves: rhbz#496616
  - fix hang of libvirt daemon on node device XML dump
  - Resolves: rhbz#509261


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-12.el5
changelog:
  - fix bogus WWNs when HBA kernel modules are (re)loaded
  - remove a small leak with SCSI node device conf
  - Resolves: rhbz#496925


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-11.el5
changelog:
  - NPIV didn't work due to different paths in /sys for older kernels
  - Resolves: rhbz#496925
  - the domain info API would fail due to the absence of a security model
  - Resolves: rhbz#506688


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-6.el5
changelog:
  - look for kvm binary in libexec
  - Resolves: rhbz#504046
  - Fix build support for qcow2 on x86_64 due to missing binary at build time
  - Resolves: rhbz#504119
  - Take ownership of the /usr/share/augeas subtree
  - Resolves: rhbz#481809


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-5.el5
changelog:
  - error in handling hostdev managed informations
  - Resolves: rhbz#499577
  - detaching Xen devices led to segfaults
  - Resolves: rhbz#497051


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-4.el5
changelog:
  - implement NPIV node device create and destroy
  - Resolves: rhbz#496925
  - avoid daemon crash on TLS auth errors
  - Resolves: rhbz#503178
  - forbid to set autostart on transcient networks
  - Resolves: rhbz#503481


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-3.el5
changelog:
  - Fix serious event handling bug possibly killing random domains
  - Resolves: rhbz#500158
  - XML attribute escaping fix
  - Handle recent QEmu help output
  - Hash destructors should use unref not free
  - Fix some name and uuid uniqueness checks
  - Fix save/restore/migrate for qemu >= 0.10.0
  - Fix QEmu capabilities refresh
  - Extra check in pid file access routines
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-2.el5
changelog:
  - Fix missing ownership of /usr/share/gtk-doc/html/libvirt from spec file
  - Resolves: rhbz#481809
  - Related: rhbz#475821


author: Daniel Veillard <veillard@redhat.com> - 0.6.3-1.el5
changelog:
  - Upstream release 0.6.3
  - various bug fixes
  - a couple of packaging fixes including #496867
  - Related: rhbz#475821


author: Daniel P. Berrange <berrange@redhat.com> - 0.3.3-15.el5
changelog:
  - Add missing readonly checks for APIs (CVE-2008-5086)
  - Add missing buf check in proxy daemon (CVE-2009-0036)


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-9.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - XML string escaping in xm driver
  - Resolves: rhbz#428879


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-8.el5
changelog:
  - man page fix
  - Resolves: rhbz#442429
  - removal of extra_release macro
  - Resolves: rhbz#436803
  - allow to change a Disk/Nic of inactive domain
  - Resolves: rhbz#251640
  - fix a hash table bug
  - Resolves: rhbz#448533


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-5.el5
changelog:
  - fix network Paravirt drivers on HVM
  - clarify documentation for virsh setcpus and setmem commands
  - Resolves: rhbz#429301
  - Resolves: rhbz#429186


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-3.el5
changelog:
  - add patch to fix NUMA compatibility problem with backport to xen-3.0.3
  - re-add a RHEL specific patch for PVFB on 3.0.3
  - renamed the second disk ID patch
  - Resolves: rhbz#426324


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-2.el5
changelog:
  - add 3 patches fixing NUMA disk detach for tap devices, setting cpu
    parameter on inactive domains and an escaping bug
  - Resolves: rhbz#251641
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.3.3-1.el5
changelog:
  - Update to 0.3.3
  - Avahi support
  - NUMA support
  - APIs for collecting statistics on disks and interfaces
  - API for domains migration
  - localtime clock support
  - PS/2 and USB input devices
  - Secure remote access support
  - unification of daemons
  - lots of assorted improvements, bugfixes and cleanups
  - documentation and localization improvements
  - Resolves: rhbz#223833
  - Resolves: rhbz#235851
  - Resolves: rhbz#251641
  - Resolves: rhbz#251706
  - Resolves: rhbz#253494
  - Resolves: rhbz#254051
  - Resolves: rhbz#273421
  - Resolves: rhbz#306931
  - Resolves: rhbz#328841
  - Resolves: rhbz#346281


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-9.el5
changelog:
  - patch to fix the pvfb vncdisplay port in XML dumps
  - Resolves: rhbz #254188
  - Related: rhbz #250789


author: Daniel Veillard <veillard@redhat.com> - 0.2.3-6.el5
changelog:
  - Fix handling of PVFB configurations
  - Resolves: rhbg#250789
  - Fix config file when using virtual network
  - Resolves: rhbg#251594


author: Daniel Veillard <veillard@redhat.com> 0.2.3-1.el5
changelog:
  - Upgrade to version 0.2.3 for RHEL-5.1
  - Resolves: rhbz#243463
  - Resolves: rhbz#222704
  - Resolves: rhbz#224415
  - Resolves: rhbz#225566
  - Resolves: rhbz#225567
  - Resolves: rhbz#229176
  - Note: 0.2.3 is really supposed to work with dnsmask which is not 
    available at the moment in RHEL-5


author: Daniel Berrange <berrange@redhat.com> 0.1.8-15.el5
changelog:
  - re-do the localization patch, so that we don't have to run
    'make update-po', and thus avoid multilib conflicts
  - Resolves: rhbz#224446


author: Daniel Berrange <berrange@redhat.com> 0.1.8-14.el5
changelog:
  - further fix for parallel installation problem of -devel on i386 and x86_64
  - Resolves: rhbz#222730


author: Daniel Veillard <veillard@redhat.com> 0.1.8-8.el5
changelog:
  - fix a structure error when asking the hypervisor for vcpu info, rhbz#217743
    and rhbz#217370
  - Resolves: rhbz#217370 rhbz#217743


author: Daniel Veillard <veillard@redhat.com> 0.1.8-7.el5
changelog:
  - release python global interpreter lock when calling libvirt, rhbz#210140
  - return correct os type version for HVM guests when running as non-root, 
    rhbz#214264
  - Resolves: rhbz#210140 rhbz#214264


author: Daniel Veillard <veillard@redhat.com> 0.1.8-6.el5
changelog:
  - save the amount of current memory used when dumping XML if different from
    maximum amount, and use that when restarting the domain from the XML,
    rhbz#214354
  - when using a pygrub bootloader, strip the os informations because xend
    assumes they take precedence over bootloader, rhbz#214741
  - Resolves: rhbz#214354 rhbz#214741


author: Daniel Veillard <veillard@redhat.com> 0.1.8-5.el5
changelog:
  - patch adding a domain core dump entry point to the library, it requires
    xen >= 3_0_3-13_el5 to get the xend server side support
  - Resolves: rhbz#214913


author: Daniel Veillard <veillard@redhat.com> 0.1.8-1.el5
changelog:
  - another ia64 page size fix
  - vcpu number initialization
  - don't label crashed domains as shut off
  - fix virsh man page
  - compile fix


author: Daniel Veillard <veillard@redhat.com> 0.1.7-2
changelog:
  - fix missing page size detection code for ia64
  - fix mlock size when getting domain info list from hypervisor


author: Daniel Veillard <veillard@redhat.com> 0.1.7-1
changelog:
  - Fix bug when running against xen-3.0.3 hypercalls
  - Fix memory bug when getting vcpus info from xend


author: Daniel Veillard <veillard@redhat.com> 0.1.6-1
changelog:
  - Support for localization
  - Support for new Xen-3.0.3 cdrom and disk configuration
  - Support for setting VNC port
  - Fix bug when running against xen-3.0.2 hypercalls
  - Fix reconnection problem when talking directly to http xend


author: Daniel Veillard <veillard@redhat.com> 0.1.5-1
changelog:
  - new release
  - bug fixes
  - support for new hypervisor calls
  - early code for config files and defined domains


author: Daniel Veillard <veillard@redhat.com> 0.1.4-1
changelog:
  - vCPUs and affinity support
  - more complete XML, console and boot options
  - specific features support
  - enforced read-only connections
  - various improvements, bug fixes


author: Daniel Veillard <veillard@redhat.com> 0.1.1-1
changelog:
  - extend and cleanup the driver infrastructure and code
  - python examples
  - extend uuid support
  - bug fixes, buffer handling cleanups
  - support for new Xen hypervisor API
  - test driver for unit testing
  - virsh --conect argument


author: Daniel Veillard <veillard@redhat.com> 0.1.0-1
changelog:
  - various fixes
  - new APIs: for Node information and Reboot
  - virsh improvements and extensions
  - documentation updates and man page
  - enhancement and fixes of the XML description format


author: Daniel Veillard <veillard@redhat.com> 0.0.6-1
changelog:
  - added error handling APIs
  - small bug fixes
  - improve python bindings
  - augment documentation and regression tests


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12.1
changelog:
  - fix CVE-2009-2409 - drop MD2 algorithm from EVP tables (#510197)
  - fix CVE-2009-4355 - do not leak memory when CRYPTO_cleanup_all_ex_data()
    is called prematurely by application (#546707)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-12
changelog:
  - abort if selftests failed and random number generator is polled
  - mention EVP_aes and EVP_sha2xx routines in the manpages
  - add README.FIPS


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-8
changelog:
  - support multiple CRLs with same subject in a store (#457134)
  - fix CVE-2009-0590 - reject incorrectly encoded ASN.1 strings (#492304)
  - seed FIPS rng directly from kernel random device
  - do not require fipscheck to build the package (#475798)
  - call pairwise key tests in FIPS mode only (#479817)
  - do not crash when parsing bad mime data (#472440)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-5
changelog:
  - implement the integrity checking inside libcrypto so OpenSSL
    can be used in FIPS mode by the fipscheck library


author: Tomas Mraz <tmraz@redhat.com> 0.9.8e-2
changelog:
  - more changes for FIPS validation (#444800)
  - correctly initialize default CA paths (#450987)
  - allow disabling zlib support through environment (#442624)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-10
changelog:
  - compile with -march=z900 on s390 for performance improvements (#250818)
  - make ssl session ID matching strict (#233599)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-9
changelog:
  - fix CVE-2007-3108 - side channel attack on private keys (#250581)
  - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309881)
  - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321221)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8b-7
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737)
  - add patches for BN threadsafety, AES cache collision attack hazard fix and
    pkcs7 code memleak fix from upstream CVS


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8b-1
changelog:
  - upgrade to new version, stays ABI compatible
  - there is no more linux/config.h (it was empty anyway)


author: Tomas Mraz <tmraz@redhat.com> - 0.9.8a-6
changelog:
  - fix stale open handles in libica (#177155)
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - initialize VIA Padlock engine (#186857)


author: Tomas Mraz <tmraz@redhat.com> 0.9.8a-4
changelog:
  - fix build (-lcrypto was erroneusly dropped) of the updated libica
  - updated ICA engine to 1.3.6-rc3


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-10
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-9
changelog:
  - add *.so.soversion as symlinks in /lib (#165264)
  - remove unpackaged symlinks (#159595)
  - fixes from upstream (constant time fixes for DSA,
    bn assembler div on ppc arch, initialize memory on realloc)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-7
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)
  - a few more fixes from upstream 0.9.7g


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-6
changelog:
  - use poll instead of select in rand (#128285)
  - fix Makefile.certificate to point to /etc/pki/tls
  - change the default string mask in ASN1 to PrintableString+UTF8String


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-4
changelog:
  - move certificates to _sysconfdir/pki/tls (#143392)
  - move CA directories to _sysconfdir/pki/CA
  - patch the CA script and the default config so it points to the
    CA directories


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-3
changelog:
  - uninitialized variable mustn't be used as input in inline
    assembly
  - reenable the x86_64 assembly again


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-2
changelog:
  - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken
  - disable broken bignum assembly on x86_64


author: Tomas Mraz <tmraz@redhat.com> 0.9.7f-1
changelog:
  - reenable optimizations on ppc64 and assembly code on ia64
  - upgrade to new upstream version (no soname bump needed)
  - disable thread test - it was testing the backport of the
    RSA blinding - no longer needed
  - added support for changing serial number to 
    Makefile.certificate (#151188)
  - make ca-bundle.crt a config file (#118903)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7e-1
changelog:
  - new upstream source, updated patches
  - added patch so we are hopefully ABI compatible with upcoming
    0.9.7f


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Tom Lane <tgl@redhat.com> 5.0.77-4.2
changelog:
  - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030
  Resolves: #556505
  - Use non-expired certificates for SSL testing (upstream bug 50702)
  - Emit explicit error message if user tries to build RPM as root
  - Add comment suggesting disabling symbolic links in /etc/my.cnf


author: Tom Lane <tgl@redhat.com> 5.0.77-3
changelog:
  - Add fix for CVE-2009-2446 (format string vulnerability in COM_CREATE_DB and
    COM_DROP_DB processing)
  Resolves: #512200


author: Tom Lane <tgl@redhat.com> 5.0.77-1
changelog:
  - Update to MySQL 5.0.77, for numerous fixes described at
    http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-77.html
    including low-priority security issues CVE-2008-2079, CVE-2008-3963
  Resolves: #448487, #448534, #452824, #453156, #455619, #456875
  Resolves: #457218, #462534, #470036, #476896, #479615
  - Improve mysql.init to pass configured datadir to mysql_install_db,
    and to force user=mysql for both mysql_install_db and mysqld_safe.
  Resolves: #450178
  - Fix mysql.init to wait correctly when socket is not in default place
  Resolves: #435494


author: Tom Lane <tgl@redhat.com> 5.0.45-7
changelog:
  - Adjust thread stack requests to allow for platform-specific guard page size;
    necessary to prevent stack overrun on PPC with RHEL5's 64K page size.
  Resolves: #435391
  - Remove calendar-dependent queries from "view" test; necessary to get
    regression tests to pass after 2007.


author: Tom Lane <tgl@redhat.com> 5.0.45-1
changelog:
  - Update to MySQL 5.0.45
  Resolves: #256501, #240813, #246309, #254012
  Resolves: #280811, #316451, #349121, #367131
  - Synchronize with current Fedora package, which is pretty well tested by now;
    see past bzs 245770, 241912, 233771, 221085, 223713, 203910, 193559, 199368


author: Tom Lane <tgl@redhat.com> 5.0.22-2
changelog:
  - Work around brew's tendency not to clean up failed builds completely,
    by adding code in mysql-testing.patch to kill leftover mysql daemons.


author: Tom Lane <tgl@redhat.com> 5.0.22-1
changelog:
  - Update to MySQL 5.0.22 (fixes CVE-2006-2753)
  - Install temporary workaround for gcc bug on s390x (bz #193912)


author: Tom Lane <tgl@redhat.com> 5.0.18-4
changelog:
  - Modify multilib header hack to not break non-RH arches, per bug #181335
  - Remove logrotate script, per bug #180639.
  - Add a new mysql-test RPM to carry the regression test files;
    hack up test scripts as needed to make them run in /usr/share/mysql-test.


author: Tom Lane <tgl@redhat.com> 5.0.16-1
changelog:
  - Update to MySQL 5.0.16
  - Add EXCEPTIONS-CLIENT license info to the shipped documentation
  - Make my_config.h architecture-independent for multilib installs;
    put the original my_config.h into my_config_$ARCH.h
  - Add -fwrapv to CFLAGS so that gcc 4.1 doesn't break it


author: Tom Lane <tgl@redhat.com> 4.1.12-2
changelog:
  - Fix buffer overflow newly exposed in isam code; it's the same issue
    previously found in myisam, and not very exciting, but I'm tired of
    seeing build warnings.


author: Tom Lane <tgl@redhat.com> 4.1.12-1
changelog:
  - Update to MySQL 4.1.12 (includes a fix for bz#158688, bz#158689)
  - Extend mysql-test-ssl.patch to solve rpl_openssl test failure (bz#155850)
  - Update mysql-lock-ssl.patch to match the upstream committed version
  - Add --with-isam to re-enable the old ISAM table type, per bz#159262
  - Add dependency on openssl-devel per bz#159569
  - Remove manual.txt, as upstream decided not to ship it anymore;
    it was redundant with the mysql.info file anyway.


author: Tom Lane <tgl@redhat.com> 4.1.11-3
changelog:
  - Enable openssl tests during build, per bz#155850
  - Might as well turn on --disable-dependency-tracking


author: Tom Lane <tgl@redhat.com> 4.1.11-2
changelog:
  - Avoid dependency on <asm/atomic.h>, cause it won't build anymore on ia64.
    This is probably a cleaner solution for bz#143537, too.


author: Tom Lane <tgl@redhat.com> 4.1.11-1
changelog:
  - Update to MySQL 4.1.11 to fix bz#152911 as well as other issues
  - Move perl-DBI, perl-DBD-MySQL dependencies to server package (bz#154123)
  - Override configure thread library test to suppress HAVE_LINUXTHREADS check
  - Fix BDB failure on s390x (bz#143537)
  - At last we can enable "make test" on all arches


author: Tom Lane <tgl@redhat.com> 4.1.10a-1
changelog:
  - Update to MySQL 4.1.10a to fix security vulnerabilities (bz#150868,
    for CAN-2005-0711, and bz#150871 for CAN-2005-0709, CAN-2005-0710).


author: Tom Lane <tgl@redhat.com> 4.1.10-2
changelog:
  - Need -fno-strict-aliasing in at least one place, probably more.
  - Work around some C spec violations in mysql.


author: Tom Lane <tgl@redhat.com> 4.1.7-6
changelog:
  - Fix init script to not need a valid username for startup check (bz#142328)
  - Fix init script to honor settings appearing in /etc/my.cnf (bz#76051)
  - Enable SSL (bz#142032)


author: Tom Lane <tgl@redhat.com> 4.1.7-4
changelog:
  - Turn off old_passwords in default /etc/my.cnf file, for better compatibility
    with mysql 3.x clients (per suggestion from Joe Orton).


author: Tom Lane <tgl@redhat.com> 3.23.58-13
changelog:
  - fix security issues CAN-2004-0835, CAN-2004-0836, CAN-2004-0837
    (bugs #135372, 135375, 135387)
  - fix privilege escalation on GRANT ALL ON `Foo\_Bar` (CAN-2004-0957)


author: Tom Lane <tgl@redhat.com> 3.23.58-12
changelog:
  - fix multilib problem with mysqlbug and mysql_config
  - adjust chkconfig priority per bug #128852
  - remove bogus quoting per bug #129409 (MySQL 4.0 has done likewise)
  - add sleep to mysql.init restart(); may or may not fix bug #133993


author: Tom Lane <tgl@redhat.com> 3.23.58-11
changelog:
  - fix low-priority security issues CAN-2004-0388, CAN-2004-0381, CAN-2004-0457
    (bugs #119442, 125991, 130347, 130348)
  - fix bug with dropping databases under recent kernels (bug #124352)


author: Tom Lane <tgl@redhat.com> 3.23.58-8
changelog:
  - repair logfile attributes in %files, per bug #102190
  - repair quoting problem in mysqlhotcopy, per bug #112693
  - repair missing flush in mysql_setpermission, per bug #113960
  - repair broken error message printf, per bug #115165
  - delete mysql user during uninstall, per bug #117017
  - rebuilt


author: Patrick Macdonald <patrickm@redhat.com> 3.23.57-1
changelog:
  - revert to prior version of MySQL due to license incompatibilities 
    with packages that link against the client.  The MySQL folks are
    looking into the issue.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.52-2
changelog:
  - Add --enable-local-infile to configure - a new option
    which doesn't default to the old behaviour (#72885)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.49-3
changelog:
  - Add the various .cnf examples as doc files to mysql-server (#60349)
  - Don't include manual.ps, it's just 200 bytes with a URL inside (#60349)
  - Don't include random files in /usr/share/mysql (#60349)
  - langify (#60349)


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.47-4
changelog:
  - Use kill, not mysqladmin, to flush logs and shut down. Thus, 
    an admin password can be set with no problems.
  - Remove reload from init script


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.46-1
changelog:
  - 3.23.46
  - use -fno-rtti and -fno-exceptions, and set CXX to increase stability. 
    Recommended by mysql developers.


author: Trond Eivind Glomsrød <teg@redhat.com> 3.23.41-1
changelog:
  - 3.23.41 bugfix release
  - disable innodb, to avoid the broken updates
  - Use "mysqladmin flush_logs" instead of kill -HUP in logrotate 
    script (#51711)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Reenable test, but don't run them for s390, s390x or ia64
  - Make /etc/my.cnf config(noplace). Same for /etc/logrotate.d/mysqld


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - Make it obsolete our 6.2 PowerTools packages
  - 3.23.36 bugfix release - fixes some security issues
    which didn't apply to our standard configuration
  - Make "make test" part of the build process, except on IA64
    (it fails there)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - gettextize
  - move the items in Requires(post): to Requires: in preparation
    for an errata for 7.0 when 3.23.31 is released
  - 3.23.31


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - add the log file to the rpm database, and make it 0640
    (#24116)
  - as above in logrotate script
  - changes to the init sequence - put most of the data
    in /etc/my.cnf instead of hardcoding in the init script
  - use /var/run/mysqld/mysqld.pid instead of 
    /var/run/mysqld/pid
  - use standard safe_mysqld
  - shut down cleaner


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.30
  - do an explicit chmod on /var/lib/mysql in post, to avoid 
    any problems with broken permissons. There is a report
    of rm not changing this on its own (#22989)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - bzipped source
  - changed from 85 to 78 in startup, so it starts before
    apache (which can use modules requiring mysql)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - check for negative niceness values, and negate it
    if present (#17899)
  - redefine optflags on IA32 FTTB


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.26, which among other fixes now uses mkstemp()
    instead of tempnam().
  - revert changes made yesterday, the problem is now
    isolated


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - rename config file to /etc/my.cnf, which is what
    mysqld wants... doh. (#17432)
  - include a changed safe_mysqld, so the pid file option
    works. 
  - make mysql dir world readable to they can access the 
    mysql socket. (#17432)
  - 3.23.24


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't run ldconfig -n, it doesn't update ld.so.cache
    (#16034)
  - include some missing binaries
  - use safe_mysqld to start the server (request from
    mysql developers)


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - don't build the SQL daemon statically (glibc problems)
  - fix the logrotate script - only flush log if mysql
    is running
  - change the reloading procedure 
  - remove icon - glint is obsolete a long time ago


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - try the new compiler again
  - build the SQL daemon statically
  - add compile time support for complex charsets
  - enable assembler
  - more cleanups in initscript


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - 3.23.21
  - remove file from /etc/sysconfig
  - Fix initscript a bit - initialization of databases doesn't
    work yet
  - specify the correct licenses
  - include a /etc/my.conf (empty, FTTB)
  - add conditional restart to spec file


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - update to 3.23.20
  - use %configure, %makeinstall, %{_tmppath}, %{_mandir},
    %{_infodir}, /etc/init.d
  - remove the bench package
  - change some of the descriptions a little bit
  - fix the init script
  - some compile fixes
  - specify mysql user
  - use mysql uid 27 (postgresql is 26)
  - don't build on ia64


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.32 release XOS.1 for LinuX/OS 1.8.0
  - Upgrade from version 3.22.27 to 3.22.32.
  - Do "make install" instead of "make install-strip", because "install -s"
    now appears to fail on various scripts.  Afterwards, strip manually.
  - Reorganize subpackages, according to common Red Hat packages: the client
    program and shared library become the base package and the server and
    some accompanying files are now in a separate server package.  The
    server package implicitly requires the base package (shared library),
    but we have added a manual require tag anyway (because of the shared
    config file, and more).
  - Rename the mysql-benchmark subpackage to mysql-bench.


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.2 for LinuX/OS 1.7.1
  - Add post(un)install scripts for updating ld.so.conf (client subpackage).


author: Jos Vos <jos@xos.nl>
changelog:
  - Version 3.22.27 release XOS.1 for LinuX/OS 1.7.0
  - Initial version.
  - Some ideas borrowed from Red Hat Powertools 6.1, although this spec
    file is a full rewrite from scratch.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-11:.4
changelog:
  - Applied patch to fix CVE-2009-3553 (bug #530111, STR #3200).
  - Applied patch to fix CVE-2009-2820 (bug #529833, STR #3367, STR #3401).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-11:.3
changelog:
  - Include NULL pointer check in ObjectStream::getObject.  Part of the
    fix for CVE-2009-3608 (bug #526637).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-10
changelog:
  - Reverted php-cgi change due to incorrectly handling of CGI output
    that is not line-based (STR #3194, bug #460898).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-9
changelog:
  - Include printer-uri IPP attribute in IPP-Get-Jobs requests in order
    to be able to operate correctly with newer versions of CUPS
    (bug #497529, STR #2996, STR #3107, STR #3117).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied additional patches for batch3892.pdf, batch4781.pdf,
    batch5486.pdf, batch19856.pdf, batch19869.pdf testing files from
    CERT (bug #491864).
  - Applied patches to fix CVE-2009-0163 (bug #490596),
    CVE-2009-0146 (bug #490612), CVE-2009-0147 (bug #490614),
    and CVE-2009-0166 (bug #490625).
  - Fixed SendFF option in textonly filter (bug #491190).
  - Requires krb5 library that contains correct krb5_cc_new_unique()
    function (bug #489714).
  - MIME type detection fixes (bug #479635): always set document-name in
    client library (STR #3055) and fixed handle of "or" rules (STR #3059).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't verify MD5 sum, file size, or mtime for several config files:
    cupsd.conf, client.conf, classes.conf, printers.conf, pdftops.conf,
    snmp.conf (bug #487161).
  - Fixed cupsGetNamedDest() behaviour when lpoptions file specifies a
    non-existent default printer (bug #481481, STR #3082).
  - Fixed admin URLs in CUPS web interface (bug #479809, STR #3022).
  - Fixed mailto notifier (bug #474920, STR #3011).
  - Fixed option encoding for "compression" (bug #474814, STR #2997).
  - Marked templates and translated templates as configuration files
    (bug #474769).
  - Fixed a busy-loop in the scheduler that could occur when a
    connection is closed (bug #474323).
  - Use php-cgi instead of php when running PHP scripts (bug #460898).
  - Applied patch from upstream to fix handling of "Satisfy Any" in
    cupsd.conf (bug #481303).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-8
changelog:
  - Applied patch to fix STR #2974 (bug #473905, CVE-2008-5286,
    CVE-2008-1722).
  - Applied patch to fix STR #2774 (bug #473915, CVE-2008-5184).
  - Applied patch to fix RSS subscription limiting (bug #473901,
    CVE-2008-5183).
  - Run the serial backend as root (bug #216658).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-6
changelog:
  - Applied patch to fix CVE-2008-3639 (STR #2918, bug #464722).
  - Applied patch to fix CVE-2008-3640 (STR #2919, bug #464722).
  - Applied patch to fix CVE-2008-3641 (STR #2911, bug #464722).


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-2
changelog:
  - Preserve default BrowseAllow value as @LOCAL so as to avoid
    unexpected configuration file changes.


author: Tim Waugh <twaugh@redhat.com> 1:1.3.7-1
changelog:
  - Preserve _cupsAdminGetServerSettings and _cupsAdminSetServerSettings
    function declarations in adminutil.h, and ship i18n.h as in 1.2.x.
  - Preserve 'do not use' comment in http_t struct definition.
  - Applied upstream patch to fix https stalls when using Firefox 3
    (bug #453610, STR #2892).
  - Compile pdftops/GlobalParams.cxx with -fno-strict-aliasing (bug #447868).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Require exactly matching libs package (bug #447867).
  - Fixed cancel man page (bug #434967).
  - Fixed permissions of classes.conf in file manifest to match those
    set in cupsd (bug #245748).
  - Fixed log file permissions (bug #218761).
  - Backported cupsGetNamedDest() support for faster look-ups when the
    destination is known, such as in 'lp -d ...' (bug #428086).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Re-based to 1.3.7.  Fixes bug #241406 (STR #2400),
    bug #249570 (STR #2228), bug #250383 (STR #2084, STR #2198),
    bug #409121, bug #430067 (STR #1969, STR #2386), bug #430076
    (STR #1985), bug #430648 (STR #2319), bug #432001,
    bug #433087 (STR #2319), bug #441439 (STR #2699), bug #441811,
    bug #446023 (STR #1261), bug #447548 (STR #2179), bug #451101,
    bug #453396.
  - No longer need initscript, locale, relro, directed-broadcast,
    str2061, str2056, str2055, get_jobs, af_unix-auth, str2264,
    if-modified-since, str2266, str2023, str2117, str2351,
    CVE-2007-0720, CVE-2007-3387, CVE-2007-4351,
    CVE-2007-4352,5492,5393, CVE-2007-4045, docinfo-crash, str2656,
    CVE-2008-0047, CVE-2008-0053, CVE-2008-1373 or CVE-2008-1722
    patches.
  - Build now requires krb5-devel and avahi-compat-libdns_sd-devel.
  - The devel sub-package now requires krb5-devel.
  - Don't run autoconf; only lspp patch required it, and
    autoconf-generated changes have now been folded into that patch.
  - Don't aclocal even when we modify m4 files -- CUPS does not use
    automake (bug #250251).
  - Don't overwrite upstream snmp.conf file.
  - Move _http_s structure into public header file to prevent build
    failures in other packages.  Ship md5.h for this as well.
  - Revert STR #2537 so that non-UTF-8 clients continue to be accepted.
  - Don't strip foomatic recommended strings from make/model names.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.18
changelog:
  - Applied patch to fix CVE-2008-0053 (HP-GL/2 input processing, bug #438117).
  - Applied patch to fix CVE-2008-1373 (GIF overflow, bug #438303).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.17
changelog:
  - Applied patch to prevent heap-based buffer overflow in CUPS helper
    program (bug #436153, CVE-2008-0047, STR #2729).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.16
changelog:
  - Prevent double-free when a browsed class has the same name as a printer
    or vice versa (bug #433767, STR #2656).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.15
changelog:
  - Fixed LSPP patch so that strings allocated with cupsdSetString() are always
    clear correctly (bug #258221).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Applied patch to fix CVE-2007-4045 (bug #356581).
  - Applied patch to fix CVE-2007-4352, CVE-2007-5392 and
    CVE-2007-5393 (bug #356581).
  - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353991).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.9
changelog:
  - Fixed IPv6 address parsing (bug #241400, STR #2117).
  - Fixed a bug that caused cups-lpd not to set the correct value for
    job-originating-host-name (bug #240223, STR #2023).
  - Cleaned up initscript error handling (bug #237953).
  - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266).
  - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133).
  - Make the initscript use start priority 56 (bug #213828).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.8
changelog:
  - Applied fix for STR #2264 (bug #230118).
  - Added patch for UNIX domain sockets authentication (bug #230613).
  - LSPP: Updated patch for line-wrapped labels (bug #228107).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.7
changelog:
  - Don't reload CUPS after rotating the logs with logrotate, but make sure
    to use the new file in that case (bug #215024).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.6
changelog:
  - LSPP: added check_context() function for get_jobs(), get_job_attrs() and
    validate_user() (bug #229673).
  - Fixed a potential scheduler crash (bug #231522).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.2
changelog:
  - Run the serial backend as root (bug #216658).
  - Fixed LSPP SELinux check (bug #216856).
  - LSPP fix: process URI before logging it (bug #216673).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-11.1
changelog:
  - Reload, don't restart, when logrotating (bug #215024).
  - Fixed pdftops.conf (bug #214612).
  - LSPP patch fix (bug #213501).
  - Added filter and PPD for text-only printer (bug #213034).
  - Fixed parallel backend (bug #213023, STR #2056).
  - Added support for /dev/ttyUSB devices (bug #212580, STR #2061).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-9
changelog:
  - adminutil.c: when writing 'BrowseAllow @LOCAL', add a comment about what
    to change it to when using directed broadcasts from another subnet
    (bug #204373).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.4-8
changelog:
  - LSPP patch didn't get updated properly in 1:1.2.4-6.  Use the right
    patch this time (bug #208676).  LSPP re-enabled.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-10
changelog:
  - Remove 'Provides: LPRng = 3.8.15-3' (bug #148757).
  - Applied patch to fix STR #1893 (bug #201800).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.2-6
changelog:
  - Use replacement snmp.c from STR #1737 (bug #193093).
  - Re-enable LSPP; doesn't harm browsing after all.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.1-2
changelog:
  - 1.2.1.
  - Another STR #1705 fix (bug #192034).
  - Fixed devel package multilib conflict (bug #192664).


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-7
changelog:
  - Sync to svn5568.  No longer need rpath patch.
  - Added a 'conflicts:' for kdelibs to prevent bug #192548.


author: Tim Waugh <twaugh@redhat.com> 1:1.2.0-4
changelog:
  - Disable back-channel data in the usb backend (STR #1705, bug #192034).
  - Fix for 'browsing stops on reload', STR #1670 (bug #191217).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5538.
  - Added 'restartlog' to initscript, for clearing out error_log.  Useful
    for problem diagnosis.
  - Initscript no longer needs to check for printconf-backend.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Sync to svn5470.
  - No longer need link, CAN-2005-0064, or no-propagate-ipp-port patches.
  - Switch to upstream PIE implementation (every single binary is PIE).
  - Extend relro to all binaries.
  - Better rpath patch.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - No longer need backend, rcp, or ppdsdat patches.
  - Use configure switch for LogFilePerm default instead of patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.5.rc3.2
changelog:
  - Patch pdftops to understand 'includeifexists', and use that in the
    pdftops.conf file (bug #189809).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.8
changelog:
  - No longer need openssl-devel.
  - Build with LDAP_DEPRECATED=1, to pick up declarations of ldap_init() etc.
  - Only warn about ACLs once (STR #1532).
  - Fix imagetops filter (STR #1533).
  - Sync pstops.c with svn 5382.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.2.rc1.1
changelog:
  - Ship a printers.conf file, and a client.conf file.  That way, they get
    their SELinux file contexts set correctly.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.1.b2.6
changelog:
  - Add KDE compatibility symbols _ipp_add_attr/_ipp_free_attr to ipp.h, with
    a comment saying why they shouldn't be used.


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn5102.0
changelog:
  - New svn snapshot.
  - No longer need enabledisable patch.
  - Fixed double-free in scheduler/policy.c (STR #1428).


author: Tim Waugh <twaugh@redhat.com> 1:1.2-0.0.svn4964.0
changelog:
  - Use -fPIE not -fpie in PIE patch.
  - Fix link patch.
  - Patch in PIE instead of using --enable-pie, since that doesn't work.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - 1.2 svn snapshot.
  - No longer need doclink, str1023, pdftops, sanity, lpstat, str1068,
    sigchld, gcc34, gcc4, slow, CAN-2004-0888, CAN-2005-2097, finddest,
    str1249, str1284, str1290, str1301, CVE-2005-3625,6,7 patches.
  - Removed autodetect-tag patch.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.23-18
changelog:
  - Raise IPP_MAX_VALUES to 100 (bug #164232).  STR #1284.
  - Made FindDest better behaved in some instances (bug #164232).  STR #1283.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-2
changelog:
  - Fixed cups-lpd file mode (bug #137325).
  - Convert all man pages to UTF-8 (bug #107118).  Patch from Miloslav Trmac.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc2.1
changelog:
  - Make cancel-cups(1) man page point to lp-cups(1) not lp(1) (bug #136973).
  - Use upstream patch for STR #953.
  - 1.1.22rc2.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.22-0.rc1.7
changelog:
  - Prevent filters generating incorrect PS in locales where "," is the
    decimal separator (bug #136102).  Patch from STR #970.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.21-1.rc2.1
changelog:
  - 1.1.21rc2.
  - No longer need state, reload-timeout or str743 patches.
  - httpnBase64 patch no longer applies; alternate method implemented
    upstream.
  - Fix single byte overread in usersys.c (spotted by Colin Walters).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-9
changelog:
  - Apply patches from CVS (authtype) to fix STR #434, STR #611, and as a
    result STR #719.  This fixes several problems including those noted in
    bug #114999.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-8
changelog:
  - If cupsd fails to start, make it exit with an appropriate code so that
    initlog notifies the user (bug #110135).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Fix cups/util.c:get_num_sdests() to use encryption when it is necessary
    or requested (bug #118982).
  - Use upstream patch for the HTTP/1.1 Continue bug (from STR716).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-7
changelog:
  - Fix non-conformance with HTTP/1.1, which caused failures when printing
    to a Xerox Phaser 8200 via IPP (bug #122352).
  - Make lppasswd(1) PIE.
  - Rotate logs within cupsd (instead of relying on logrotate) if we start
    to approach the filesystem file size limit (bug #123003).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-4
changelog:
  - Tracked D-BUS API changes.
  - Updated D-BUS configuration file.
  - Symlinks to avoid conflicting with bash builtins (bug #102490).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-2
changelog:
  - Try harder to find a translated page for the web interface (bug #107619).
  - Added build_as_pie conditional to spec file to facilitate debugging.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.20-1
changelog:
  - 1.1.20.
  - No longer need idefense, str226 patches.
  - Updated sanity patch.
  - The devel sub-package requires openssl-devel (bug #110772).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Don't ignore the file descriptor when ShutdownClient is called: it
    might get closed before we next try to read it (bug #107787).


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-10
changelog:
  - Pass correct attributes-natural-language through even in the absence
    of translations for that language (bug #100984).
  - Show compilation command lines.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-7
changelog:
  - Add some %if %use_dbus / %endif's to make it compile without dbus
    (bug #97397).  Patch from Jos Vos.


author: Tim Waugh <twaugh@redhat.com> 1:1.1.19-0.rc4.1
changelog:
  - 1.1.19rc4.  Ported initscript, idefense, ppdsdat, dbus patches.
  - No longer need error, sigchld patches.
  - Ship cupstestppd.


author: Havoc Pennington <hp@redhat.com> 1:1.1.18-4
changelog:
  - adjust dbus patch - dbus_bus_get() sends the hello for you, 
    and there were a couple of memleaks
  - buildprereq dbus 0.9
  - rebuild for new dbus
  - hope it works, I'm ssh'd in with no way to test. ;-)


author: Tim Waugh <twaugh@redhat.com> 1.1.18-1
changelog:
  - 1.1.18.
  - No longer need uninit patch.
  - Some parts of the iDefense and pdftops patches seem to have been
    picked up, but not others.


author: Tim Waugh <twaugh@redhat.com> 1.1.17-6
changelog:
  - Add epoch to internal requirements.
  - Make 'condrestart' return success exit code when daemon isn't running.


author: Nalin Dahyabhai <nalin@redhat.com> 1.1.15-14
changelog:
  - Buildrequire pam-devel.
  - Patch default PAM config file to remove directory names from module paths,
    allowing the configuration files to work equally well on multilib systems.
  - Patch default PAM config file to use system-auth, require the file at build-
    time because that's what data/Makefile checks for.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-13
changelog:
  - Use logrotate for log rotation (bug #76791).
  - No longer need cups.desktop, since redhat-config-printer handles it.


author: Tim Waugh <twaugh@redhat.com> 1.1.15-11
changelog:
  - Use %configure for multilib correctness.
  - Use libexec instead of lib for CUPS_SERVERBIN.
  - Ship translated man pages.
  - Remove unshipped files.
  - Fix file list permissions (bug #59021, bug #74738).
  - Fix messy initscript output (bug #65857).
  - Add 'reload' to initscript (bug #76114).


author: Tim Waugh <twaugh@redhat.com> 1.1.15-7
changelog:
  - Really add cups-lpd xinetd file (bug #63919).
  - Ship pstoraster (bug #69573).
  - Prevent fread from trying to read from beyond EOF (fixes a segfault
    with new glibc).


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-3
changelog:
  - Add a symlink /usr/share/cups/doc -> /usr/share/doc/cups-devel-1.1.15
    because some applications expect to find the cups docs in
    /usr/share/cups/doc


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.15-1
changelog:
  - 1.1.15-1
  - Fix up smb printing trigger (samba-client, not samba-clients)
  - Start cupsd earlier, apparently it needs to be running before samba
    starts up for smb printing to work.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.14-12
changelog:
  - Support SMB printing (#62407)
  - Add HTML redirections to doc files to work around users mistaking
    /usr/share/doc/cups-1.1.14 for the web frontend (#62405)


author: Bill Nottingham <notting@redhat.com> 1.1.14-7
changelog:
  - lpc man page is alternative too
  - run ldconfig in -libs %post/%postun, not main
  - remove alternatives in %preun


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-5
changelog:
  - Move cups-config to cups-devel subpackage
  - Make alternatives usage a %define to simplify builds for earlier
    releases
  - Explicitly provide things we're supplying through alternatives
    to shut up kdeutils dependencies


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.1.13-1
changelog:
  - 1.1.13
  - Add patch for koi8-{r,u} and iso8859-8 encodings (#59018)
  - Rename init scripts so we can safely "killall cupsd" from there


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.1.1 (this has some major bugfixes)
  - Fix a typo in initscript (it's $?, not ?$)
  - Fix /usr/etc vs. /etc trouble, don't insist on /usr/var (YUCK!)
  - Create the spool dir


author: Than Ngo <than@redhat.de>
changelog:
  - update to 1.1 release
  - move back to /etc/rc.d/init.d
  - fix cupsd.init to work with /etc/init.d and /etc/rc.d/init.d
  - split cups


author: Tim Powers <timp@redhat.com>
changelog:
  - started changelog 
  - fixed init.d script location
  - changed script in init.d quite a bit and made more like the rest of our
    startup scripts


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.1.b09
changelog:
  - Moved policytool to devel package.
  - Updated release to 1.1, so there is considered newer than the outdated 
  EPEL package.
  - Resolves: rhbz#499079


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.26.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch.
  - Added java-1.6.0-openjdk-lcms.patch.
  - Updated release.
  - Removed fedora sources. We can now build with system-installed openjdk.
  - Resolves: rhbz#490182


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.25.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch. Removed all tests, and added patch for
  Makefile.in.
  - Updated release.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.24.b09
changelog:
  - Added java-1.6.0-openjdk-securitypatches.patch. Applies all current
  OpenJDK patches.
  - Updated release.
  - Resolves: rhbz#473317


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.22.b09
changelog:
  - Added execshield calls to 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/lib/i386/client/libjvm.so, 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0/jre/lib/i386/server/libjvm.so and 
  /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/amd64/server/libjvm.so.
  - Added prelink to build requirements.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.15.b09
changelog:
  - Adapted for RHEL.
  - Hard-code i386 architecture.
  - Point --with-openjdk-home at Fedora OpenJDK bootstrap JDK.
  - Add Fedora OpenJDK bootstrap tarballs.
  - Patch freetype requirement down to 2.2.1.
  - Replace lesstif-devel build requirement with openmotif-devel.
  - Remove mercurial build requirement.
  - Comment out java-1.6.0-openjdk-devel build requirement.
  - Decrease freetype-devel build requirement to 2.2.1.
  - Set ExclusiveArch to x86_64 and i386.
  - Remove tzdata-java runtime requirement.
  - Decrease jpackage-utils runtime requirement to 1.7.3-1jpp.2.
  - Hard-code vendor prefix in files list.
  - Prevent brp-repack-jars from being run.
  - Remove IcedTea Obsoletes and Provides.
  - Remove NetX and gcjwebplugin.
  - Renamed generate-fedora-zip.sh to generate-rhel-zip.sh.
  - Renamed fedorazip to rhelzip.
  - Added SOURCE comments.
  - Added --disable-gcjwebplugin option to icedteaopt.
  - Removed mauve and jtreg sources.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.6.0.0-0.15.b09
changelog:
  - Require ca-certificates.
  - Symlink to ca-certificates cacerts.
  - Remove cacerts from files list.
  - Resolves: rhbz#444260


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.11.b09
changelog:
  - Updated icedteasnapshot.
  - Removed java-1.6.0-openjdk-jconsole.desktop and
    java-1.6.0-openjdk-policytool.desktop files.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.10.b09
changelog:
  - Updated release.
  - Updated icedteasnapshot.
  - Added jconsole and policy menu entries.
  - Removed all jhat references.
  - Resolves: rhbz#435235
  - Resolves: rhbz#417501
  - Resolves: rhbz#437418
  - Resolves: rhbz#443360
  - Resolves: rhbz#304031


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.9.b09
changelog:
  - Updated icedteaver.
  - Updated icedteasnapshot.
  - Updated openjdkver.
  - Updated openjdkdate.
  - Updated release.
  - Resolves: rhbz#442602
  - Resolves: rhbz#442514
  - Resolves: rhbz#441437
  - Resolves: rhbz#375541


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.7.b08
changelog:
  - Updated icedteasnapshot. Includes sources needed to build xmlgraphics-commons.
  - Updated release.
  - Resolves: rhbz#439676


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.6.b08
changelog:
  - Updated icedteasnapshot.
  - Updated openjdkver and openjdkdate.
  - Removed java-1.6.0-openjdk-trademark.patch.
  - Updated generate-fedora-zip.sh.
  - Resolves: rhbz#438421


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.5.b06
changelog:
  - Updated icedteasnapshot.
  - Updated Release.
  - Added new patch: java-1.6.0-openjdk-optflags.patch.
  - Resolves: rhbz#437331


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.4.b06
changelog:
  - Fixed Provides and Obsoletes for all sub-packages. Should have specified
    java-1.7.0-icedtea < 1.7.0.0-0.999 instead of 1.7.0-0.999.
  - Resolves: rhbz#437492


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.3.b06
changelog:
  - Updated release.
  - Updated mauvedate to 2008-03-11.
  - Updated accessmajorver to 1.22.
  - Updated accessminorver to 0.


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.2.b06
changelog:
  - Added Provides and Obsoletes for all subpackages. All sub-packages
    replaces java-1.7.0-icedtea.
  - Updated Release.
  - Changed BuildRequires from java-1.7.0-icedtea to java-1.6.0-openjdk.
  - Added TRADEMARK file to docs.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.24.b24
changelog:
  - Remove cgibindir macro.
  - Remove icedtearelease.
  - Remove binfmt_misc support.
  - Remove .snapshot from changelog lines wider than 80 columns.


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.23.b24.snapshot
changelog:
  - Updated Mauve's build requirements.
  - Excluding Mauve tests that try to access the network.
  - Added Xvfb functionality to mauve tests to avoid display-related failures.
  - Resolves rhbz#427614


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.23.b24.snapshot
changelog:
  - Removed BuildRequirement firefox-devel.
  - Added BuildRequirement gecko-devel.
  - Resolves rhbz#427350


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.23.b24.snapshot
changelog:
  - Updated icedteaver.
  - Updated Release.
  - Updated buildoutputdir.
  - Removed openjdkdate.
  - Updated openjdkver.
  - Updated openjdkzip and fedorazip.
  - Added Requires: jpackage-utils.
  - Removed java-1.7.0-makefile.patch.
  - Updated patch list.
  - Resolves rhbz#411941
  - Resolves rhbz#399221
  - Resolves rhbz#318621


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.21.b23
changelog:
  - Update icedteasnapshot.
  - Remove ExclusiveArch.
  - Assume i386.
  - Add support for ppc and ppc64.
  - Bootstrap on ppc and ppc64.


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.20.b23.snapshot
changelog:
  - Added gcjbootstrap.
  - Updated openjdkver and openjdkdate to new b23 release.
  - Updated Release.
  - Added gcjbootstrap checks in.
  - Resolves: rhbz#333721


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.17.b21.snapshot
changelog:
  - Update icedtearelease.
  - Update icedteasnapshot.
  - Update openjdkver.
  - Update openjdkdate.
  - Updated genurl.
  - Removed unneeded patches.
  - Removed gcjbootstrap.
  - Removed icedteaopt.
  - Removed all gcj related checks.
  - Resolves: rhbz#317041
  - Resolves: rhbz#314211
  - Resolves: rhbz#314141
  - Resolves: rhbz#301691


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.16.b19.snapshot
changelog:
  - Listed mauve_output as a doc file instead of a source.
  - Added mauve_tests to the src files as doc.


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.15.b19.snapshot
changelog:
  - Fixed running of Xvfb so it does not terminate after a successful
    test.
  - Fixed mauve and jtreg test runs to not break the build when an error
    is thrown


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.15.b19.snapshot
changelog:
  - Added JTreg zip as source.
  - Run JTreg tests after build for smoke testing.
  - Added Xvfb as build requirement.


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.15.b19.snapshot
changelog:
  - Added Mauve tarball as source.
  - Added mauve_tests as source.
  - Run Mauve after build for regression testing.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.15.b18
changelog:
  - Do not require openssl for build.
  - Require openssl.
  - Set gcjbootstrap to 0.
  - Remove generate-cacerts.pl.
  - Update icedtearelease.
  - Update icedteasnapshot.
  - Update openjdkver.
  - Update openjdkdate.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.14.b18
changelog:
  - Add documentation for plugin and src subpackages.
  - Fix plugin alternative on x86_64.
  - Add java-1.7.0-icedtea-win32.patch.
  - Rename modzip.sh generate-fedora-zip.sh.
  - Keep patches in main directory.
  - Namespace patches.
  - Add java-1.7.0-icedtea-win32.patch, README.plugin and README.src.
  - Bump release number.


author: Lillian Angel <langel@redhat.com> - 1.7.0.0-0.13.b18.snapshot
changelog:
  - Added line to run modzip.sh to remove specific files from the openjdk zip.
  - Defined new openjdk zip created by modzip.sh as newopenjdkzip.
  - Added line to patch the IcedTea Makefile. No need to download openjdk zip.
  - Updated genurl.
  - Updated icedteasnapshot.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.12.b18
changelog:
  - Fully qualify Java Access Bridge for GNOME and generate-cacerts
    source paths.
  - Fix plugin post alternatives invocation.
  - Include IcedTea documentation.
  - Update icedteasnapshot.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.11.b18
changelog:
  - Add missing development alternatives.
  - Bump accessver to 1.19.2.
  - Bump icedteaver.
  - Set icedteasnapshot.
  - Define icedtearelease.
  - Bump openjdkver.
  - Bump openjdkdate.
  - Bump release number.
  - Add plugin build requirements and subpackage.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.4.b14
changelog:
  - Add javadoc subpackage.
  - Add Java Access Bridge for GNOME.
  - Add support for executable JAR files.
  - Bump alternatives priority to 17000.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.4.b14
changelog:
  - Add support for executable jar files.
  - Bump icedteaver.
  - Bump openjdkver.
  - Bump openjdkdate.
  - Bump release number.


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1.7.0.0-0.3.b13
changelog:
  - Import IcedTea 1.1.
  - Bump icedteaver.
  - Bump openjdkver.
  - Bump openjdkdate.
  - Bump release number.
  - Use --with-openjdk-src-zip.


author: Jan F. Chadima <jchadima@redhat.com> - 2.1.22-5.3
changelog:
  - solve race condition, second version with rewriten spec file for ppc64
    and with repaired autoconf macros (#568084)


author: Tomas Mraz <tmraz@redhat.com> 2.1.22-5
changelog:
  - install the shared version of pluginviewer and other tools (#473197)
  - remove potentially patented srp plugin which was not built
    anyway (#368421)
  - include crypt.h for missing prototype (#433583)
  - implement reload as conditional restart in the init script (#448154)
  - set the LDAP_OPT_TIMEOUT in the ldap plugin (#475726)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-12
changelog:
  - add conditionalized build dependency on openldap-devel (#191855)
  - patch md5global.h to be the same on all architectures


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-11
changelog:
  - add unapplied patch which makes the DIGEST-MD5 plugin omit the realm
    argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
    non-zero value, for testing purposes
  - add missing buildrequires on zlib-devel (#190113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-9
changelog:
  - use --as-needed to avoid linking dbconverter-2 with SQL libraries, which
    it doesn't use because it manipulates files directly (#173321)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-8
changelog:
  - rebuild with new OpenLDAP, overriding the version checks to assume that
    2.3.11 is acceptable
  - remove a lingering patch for 1.x which we no longer use


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-4
changelog:
  - move the ldapdb auxprop support into a subpackage (#167300)
    (note: the ldap password check support in saslauthd doesn't use auxprop)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-2
changelog:
  - move the ANONYMOUS mech plugin to the -lib subpackage so that multilib
    systems can use it without installing the main package
  - build the static libraries without sql auxprop support


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.21-1
changelog:
  - update to 2.1.21
  - turn off compilation of libsasl v1 (finally)
  - explicitly disable sqlite to avoid the build warning
  - change the default mechanism which is set for saslauthd from "shadow" to
    "pam" (#159194)
  - split the shared library up from saslauthd so that multilib systems don't
    have to pull in every dependency of saslauthd for the compat arch (#166749)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
changelog:
  - rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
    revision between 2.1.18 and 2.1.19)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a saslauthd_version option to libsasl's saslauthd client and teach it to
    do the right thing
  - enable the saslauthd client code in libsasl version 1 (it's still going away!)
  - add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17, forcing the gssapi plugin to be shared now, as before
  - use a bundled libdb (#112215)
  - build static-with-all-plugins and normal-shared libsasl versions
  - add sasl2-{shared,static}-mechlist for very basic sanity checking
  - make inclusion of sasl1 stuffs conditional, because it's so going away


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
changelog:
  - use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
    safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
    use it to seed the libc RNG only (#103378)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
changelog:
  - install saslauthd's mdoc page instead of the pre-formatted man page, which
    would get formatted again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include testsaslauthd
  - note in the README that the saslauthd protocol is different for v1 and v2,
    so v1's clients can't talk to the v2 server


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
    searching for a DES implementation in libcrypto
  - pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
changelog:
  - rebuild, overriding sasldir when running make so that on multilib systems
    applications will be able to load modules for the right arch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
    1.x, so fork the package and rename it to cyrus-sasl2
  - add the sasldb auxprop plugin to the main package
  - add disabled-by-default saslauthd init script
  - move the .la files for plugins into their respective packages -- they're
    needed by the library


author: Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
changelog:
  - include sample programs in the -devel subpackage, prefixing their names
    with "sasl-" to reduce future potential naming conflicts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add gdbm-devel as a build dependency (#44990)
  - split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
    and dialogs with David L. Parsley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split out the PLAIN and LOGIN mechanisms into their own package (this allows
    an administrator to disable them by simply removing the package)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move .so files for modules to their respective packages -- they're not -devel
    links meant for use by ld anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - force use of gdbm for database files to avoid DB migration weirdness
  - enable login mechanism
  - disable gssapi until it can coexist peacefully with non-gssapi setups
  - actually do a make in the build section (#15410)


author: Mads Kiilerich <mads@kiilerich.com>
changelog:
  - updated to sasl 1.5.11
  - configure --disable-krb4 --without-rc4 --disable-cram 
    because of missing libraries and pine having cram as default...
  - handle changing libsasl.so versions


author: Than Ngo <than@redhat.com> - 3.5.4-22
changelog:
  - Resolves: #505621,
      CVE-2009-1687, integer overflow in KJS JavaScript garbage collector
      CVE-2009-1698, KHTML CSS parser - incorrect handling CSS "style" attribute content (DoS, ACE)


author: Than Ngo <than@redhat.com> 3.5.4-16
changelog:
  - Resolves: #223958, add missing documentation menu
  - Resolves: #422011, libutemper issue, konsole doesn't write to utmp


author: Than Ngo <than@redhat.com> - 6:3.5.4-14.el5
changelog:
  - Resolves: #293581, CVE-2007-0537
  - Resolves: #293921, CVE-2007-0242
  - Resolves: #293431, CVE-2007-4224, CVE-2007-4225, CVE-2007-3820
  - Resolves: #293581, CVE-2007-1564 FTP protocol PASV design flaw affects konqueror


author: Than Ngo <than@redhat.com> - 6:3.5.4-11.1.el5
changelog:
  - Resolves: #234633, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #225414, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> 6:3.5.4-10
changelog:
  - fix utf8 issue in kdeprint
  - fix #178320,#198828, follow menu-spec
  - upstream patches,
     fix #106748, Evaluate scripts in <iframe src=javascript:..> in the right context
     fix #133071, Crash when characterSet was accessed on newly-created document


author: Than Ngo <than@redhat.com> 6:3.5.4-9
changelog:
  - fix #178320,#198828, follow menu-spec
  - fix #119167, page rendered incorrectly at larger font sizes


author: <than@redhat.com> 6:3.5.4-8
changelog:
  - fix #115891/bz#208270, CUPS 1.2.x unix socket support
  - apply upstream patches
     fix #123915, Page format display is 'overlaid'
     fix #100188, Fix incorrect 'endl' usage


author: Than Ngo <than@redhat.com> 6:3.5.4-7
changelog:
  - apply upstream patches
     fix #132678, Google search encoding fix
     khtml rendering issue
     fix #134118, silent startup notification never going away
     fix #133401, crash when attempting to remove a standard shortcut that isn't actually in 
     the KStdAccel::ShortcutList
     fix #131979, unbreak "latest" and "most downloads" views


author: Than Ngo <than@redhat.com> 6:3.5.4-6
changelog:
  - fix #205767, konsole no longer register itself to utmp
  - fix #123941, qt xim plugin sometimes leads to crash


author: Than Ngo <than@redhat.com> 6:3.5.4-5
changelog:
  - apply upstream patches
     fix #123413, kded crash when KDED modules make DCOP calls in their destructors
     fix #133529, konqueror's performance issue
     fix kdebug crash
     more icon contexts (Tango icontheme)
     fix #133677, file sharing doesn't work with 2-character long home directories


author: Than Ngo <than@redhat.com> 6:3.5.4-3
changelog:
  - apply upstream patches
     fix kde#131366, Padding-bottom and padding-top not applied to inline elements
     fix kde#131933, crash when pressing enter inside a doxygen comment block
     fix kde#106812, text-align of tables should only be reset in quirk mode
     fix kde#90462, konqueror crash while rendering in khtml


author: Petr Rockai <prockai@redhat.com> - 6:3.5.4-0.pre1
changelog:
  - prerelease of 3.5.4 (from the first-cut tag)
  - disable --enable-final on s390x, seems to cause problems


author: Than Ngo <than@redhat.com> 6:3.5.3-11
changelog:
  - apply upstream patches,
     fix kde#130831, remember when the last replacement string was the empty string


author: Petr Rockai <prockai@redhat.com> - 6:3.5.3-10
changelog:
  - do not ship the dummy kdnssd implementation, depend on external one
    (there is one provided by kdnssd-avahi now)
  - change the use of anonymous namespace in kedittoolbar.h, so that
    the KEditToolbar classes are exported again


author: Petr Rockai <prockai@redhat.com>
changelog:
  - should have been 6:3.5.3-9 but accidentally built as 6:3.5.3-8.fc6
  - --disable-libfam and --enable-inotify to get inotify support
    and to disable gamin/fam usage
  - add .el5.centos to Release:


author: Than Ngo <than@redhat.com> 6:3.5.3-8
changelog:
  - upstream patches,
      kde#130605 - konqueror crash
      kde#129187 - konqueror crash when modifying address bar address


author: Than Ngo <than@redhat.com> 6:3.5.3-7
changelog:
  - apply upstream patches,
      kde#123307 - Find previous does nothing sometimes
      kde#106795 - konqueror crash


author: Than Ngo <than@redhat.com> 6:3.5.3-5
changelog:
  - fix #196013, mark kde.sh/kde.csh as config file
  - fix #178323 #196225, typo in kde.sh
  - apply upstream patches


author: Than Ngo <than@redhat.com> 6:3.5.3-4
changelog:
  - enable --enable-new-ldflags again since ld bug fixed
  - move only *.so symlinks to -devel subpackage


author: Than Ngo <than@redhat.com> 6:3.5.2-3
changelog:
  - fix #173235, disable kmail debug info #173235
  - use XDG_CONFIG_DIRS for kde menu #178320
  - don't use private API with newer CUPS >=1.2


author: Than Ngo <than@redhat.com> 6:3.5.1-2.3
changelog:
  - apply patch to fix missing icons in KDE main menu
  - requires redhat-artwork >= 0.239-2
  - don't own /usr/share/icons/hicolor #178319
  - remove broken links #154093


author: Than Ngo <than@redhat.com> 6:3.5.0-5
changelog:
  - apply patch to fix a printing problem
  - add subpackage kdelibs-docs
  - enable --enable-new-ldflags #161074


author: Than Ngo <than@redhat.com> 6:3.5.0-0.1.rc1
changelog:
  - update 3.5.0 rc1
  - remove unneeded lnusertemp workaround
  - remove references to optional libraries in .la files #170602


author: Than Ngo <than@redhat.com> 6:3.4.0-5
changelog:
  - more fixes from CVS stable branch
  - fix kbuildsycoca crashes with signal 11 on kde startup #154246


author: Than Ngo <than@redhat.com> 6:3.3.2-0.5
changelog:
  - use mkstemp instead of mktemp
  - fix knotify crash after applying sound system change
  - add steve cleanup patch


author: Than Ngo <than@redhat.com> 6:3.3.2-0.3
changelog:
  - apply the patch to fix Konqueror Window Injection Vulnerability #142510
    CAN-2004-1158,  Thanks to KDE security team
  - Security Advisory: plain text password exposure, #142487
    thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.2.3-4
changelog:
  - built with libpcre support, it's needed for using regular expressions in Javascript code bug #125264


author: Warren Togami <wtogami@redhat.com> 3.2.2-2
changelog:
  - #120265 #119642 -devel req alsa-lib-devel esound-devel fam-devel
                               glib2-devel libart_lgpl-devel
  - #88853 BR autoconf automake libpng-devel libvorbis-devel
              glib2-devel libtiff-devel
  - cups-libs explicit epoch, some cleanups


author: Than Ngo <than@redhat.com> 6:3.1.93-0.1
changelog:
  - 3.2 Beta 1
  - remove many patches, which are now in upstream
  - adjust many redhat specific patch files
  - cleanup rpm file list


author: Than Ngo <than@redhat.com> 6:3.1.1-2
changelog:
  - add patch file from CVS to fix: https authentication through proxy fails
  - add patch file from CVS to fix: KZip fails for some .zip archives


author: Than Ngo <than@redhat.com> 6:3.1-3
changelog:
  - add patch to set correct default encoding, bug #82539
  - don't overwrite defaultstyle, bug #74795, #80103


author: Than Ngo <than@redhat.com> 3.0.4-1
changelog:
  - 3.0.4
  - Added 2 patch files for built-in tests from AndreyPozdeev@rambler.ru (bug #75003)
  - Added KDE Url (bug #54592)


author: Than Ngo <than@redhat.com> 3.0.3-10
changelog:
  - Added fix to get correct Lib directory name on 64bit machine
  - New fix to handle desktop file renames (bug #74071)


author: Than Ngo <than@redhat.com> 3.0.2-4
changelog:
  - Added system tray dock patch from Harald Hoyer
  - Added Buildrequires audiofile-devel (bug #69983)
  - Added Buildrequires openssl-devel (bug #64858)
  - Rebuild against qt 3.0.5 (bug #70379)
  - Added patch to remove "about KDE" menu item from help menu (bug #67287)
  - Fixed dependencies bug by update (bug #69798)
  - Added some bugfixes from 3.0.2 stable branches


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-10
changelog:
  - Change sonames to something indicating the compiler version if a compiler
    < gcc 3.1 is used
  - Add compat symlinks for binary compatibility with other distributions


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-7
changelog:
  - Merge the following fixes from KDE_3_0_BRANCH:
    - RFC 2818 compliance for KSSL
    - Detect premature loss of connection in http ioslave (this may have
      been the cause of the bugzilla CGI.pl:1444 issue)
    - Don't send SIGHUP to kdesu child applications
    - Fix KHTML form rendering problems


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-2
changelog:
  - Add a khtml fix from KDE_3_0_BRANCH, prevents form content from
    being submitted twice, which probably caused the CGI.pl:1444 bug
    some people have noted with Bugzilla.


author: Than Ngo <than@redhat.com> 3.0.0-0.cvs20020326.2
changelog:
  - scale down icons for submenus pointing to legacy
    applications rather than keeping them at 32x32 (bug #61506)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020107.1
changelog:
  - arts-devel provides kdelibs-sound-devel for backwards compatibility
  - Update, rebuild with gcc 3.1-0.15


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020104.1
changelog:
  - Update
  - Make sure we aren't built with gcc 3.1 prior to -0.14
  - Remove -O0 hack, no longer needed with gcc 3.1-0.14
  - Adapt spec file to base changes (good-bye, libkfile, libkssl and libksycoca!)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20011214.1
changelog:
  - Update
  - Update Japanese patches
  - Temporarily exclude alpha (compiler bugs)
  - Add workaround for gcc bug #57502


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-5
changelog:
  - Merge fixes from current KDE_2_1_BRANCH - fixes 2 memory leaks and
    makes kio_http more tolerant to broken Auth requests sent by some
    servers
  - Add missing mcop{class,type} files in arts package
  - Handle PATH changes in kdesu, some KControl modules need /sbin in the
    PATH... (#34209)
  - Add KDE2PORTING.html file in /usr/share/docs/kdelibs-devel-3.5.4,
    it's quite useful...


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-3
changelog:
  - Fix up kded to watch directories we can't write to
  - Use mkstemp() rather than tmpfile() for xauth file generation
    in kdesu


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Fix up cookie escaping (this should finally fix bugzilla for good)
  - Security: cookies shouldn't be world readable, some websites store
    login information


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Don't crash in KProcess if getpwuid() returns NULL, happens with
    LDAP authentication
  - Require qt >= 2.3.0 (#31770)
  - Fix crash in KURLCompletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Add some more fixes and <layer> support from KDE_2_1_BRANCH
  - Patch KService to not add K menu entries if the desktop files
    aren't readable by the user we're running at (removes bogus
    timetool, control-panel etc. entries; I'd still prefer running
    those through consolehelper over hiding them from users...)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Revert to putting config files in /usr/share/config
  - Fix up cookie handling when combined with JavaScript (#30577)
  - Add some html rendering fixes from KDE_2_1_BRANCH


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add khtml+DOM fixes from KDE_2_1_BRANCH
  - BuildPrereq docbook stuff so we don't get broken kdb2html stuff


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix klauncher escape sequence handling (#25307, Patch from Tim Waugh)
  - Fix krun escape sequence handling (#25134, Patch from Tim Waugh)
  - Make /usr/share/doc/HTML/en/kspell/common symlink relative (#24793)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply patch from CVS to fix up Cookie handling in Konqueror.
    Finally Bugzilla works perfectly in Konqueror.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdelibs-sound-devel requires audiofile-devel, kdelibs-sound doesn't.
  - Update, fixes various HTML rendering bugs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - remove the Java hacks; KDE now requires a Java 2 compliant
    environment, so there's no chance to get any of it to run
    with current kaffe.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move libkmedia2_idl to arts; it's needed there
  - Fix up the Java stuff. The new stuff is ugly, but seems to work
  - Get rid of the compiler bug workaround: the ICE was triggered by
    unclean code
  - Change the description of the arts package for translation purposes


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around compiler bugs (sigh)
  - Fix specfile (added files)
  - Split arts into a separate package; it's required by SDL,
    and depending on kdelibs-sound (which requires kdelibs)
    is overkill


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS - security fix in Java/Javascript code.
    There seems to be some conspiracy going on - "commit important
    fixes right after Red Hat built new RPMs" or the likes. :>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - update to current KDE_2_0_BRANCH, now that most of the ".0 release"
    bugs are fixed
  - fix typo in specfile: it's mitshm, not libshm
  - Add ksendbugmail, required for the "Report Bug" feature to work


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move back to /usr
  - New CVS snapshot
  - Clean up specfile
  - Use %defines so we can build CVS snapshots and releases from the same
    specfile


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot, new Qt
  - various fixes to spec file
  - get rid of -O0, no longer required with gcc 2.96-41 (except on alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - split: move sound support to a separate package, suggestion from
    David Faure <david@linux-mandrake.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move programming docs to /usr/share/doc/kdelibs-devel-3.5.4-25.el5.centos.1
    and to kdelibs-devel package
  - new snapshot


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add qt version number in Requires, add kdoc HTML help
    (patch from David Faure <david@mandrakesoft.com>)
  - Actually use the %clean section


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - 2.0 snapshots
  - Change prefix to respect %{prefix} so we can coexist with KDE 1.x
  - kdelibs-devel requires kdelibs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove linking to qimgio from kdecore, moved to kpanel/kfm directly
  - renamed "lowcolor" directory to "locolor"


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added lowcolor icons directory and /usr/share/pixmaps to icon search path
  - hacking to recognize .desktop files as application/x-kdelnk


author: Preston Brown <pbrown@redhat.com>
changelog:
  - updated to KDE 1.1.2.
  - use /usr/lib/qt-1.44 as qt root.
  - separate devel subpackages; include documentation and kdoc.
  - added KDE icon.
  - relocated includes to /usr/include/kde


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-94.el5_4.1
changelog:
  - Fix race condition on domain reboot (rhbz 525143)
  - Avoid multiple restarts of a domain (rhbz 525141)
  - Add grub.conf password protection support to pygrub (rhbz 525142)
  - Ignore unimplemented PHYSDEVOP_map_pirq (rhbz 525149)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-92.el5
changelog:
  - Fix Python traceback when pygrub tries to log a message (rhbz 490754)
  - Relax PCI device assignment rules for PV guests (rhbz 508310)
  - Don't list assigned PCI devices as assignable (rhbz 510682)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-91.el5
changelog:
  - Prevent PVFB config loss after PV guest reboot -- reworked fix for PVFB
    xenstore leaks (rhbz 507765)
  - Fix AIO hang in ioemu (rhbz 507329)


author: Michal Novotny <minovotn@redhat.com> - 3.0.3-89.el5
changelog:
  - Fix guest reboot with VT-d device assigned (rhbz 507182)
  - Fix MSI-X NIC hotplug removal (rhbz 507198)
  - Fix PCIE NICs on Stoakley detach issue (rhbz 507179)
  - Add BDFs duplicate check in HVM configure file (rhbz 507195)
  - Fix `xm pci-list` BDF output on WeyBridge platform (rhbz 507257)
  - Set cpu_weight default value back to 256 (rhbz 508680)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-86.el5
changelog:
  - Add missing blktap poll-on-aio support (rhbz 486353)
  - Fix L1 table endianess of qcow images (rhbz 485471)
  - Fix network-bridge-bonding script for VLANs (rhbz 492258)
  - AIO backport for qemu (rhbz 465116)
  - Fix HVM time skew problems (rhbz 480689)
  - Fix device destroy (rhbz 484110)
  - Add 1GB page table support (rhbz 487342)
  - Fix credit scheduler parameters (rhbz 345321)
  - Fixed version of xen-vfb-default-keymap.patch (rhbz 345251)
  - Fix hotplug timeout under heavy I/O (rhbz 456926)
  - Check for devices being used by other domains (rhbz 345441)
  - Support for VT-d (rhbz 480520)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-85.el5
changelog:
  - New version of pci-migration patch to fix file descriptor leak (rhbz 334821)
  - Allow command-line editing in IA64 boot loader (rhbz 249791)
  - Fix PV migration hang on failure (rhbz 428691)
  - Fix disk reordering when xend is restarted (rhbz 474579)
  - Fix xenconsole after aborted save (rhbz 486291)
  - Fix 64-bit MMIO bar remapping (rhbz 494925)
  - Support relative mouse offset VNC extension (rhbz 487559)
  - Fix PVFB backend xenstore leak (rhbz 439182)
  - Fix HVM guest creation under tight memory conditions (rhbz 419771)
  - Add Ctrl+Alt+Del support for HVM bios (rhbz 338331)
  - Add global default keymap setting (rhbz 345251)
  - Fix guest resume after failed save (rhbz 486157)
  - Stop xend in runlevels 0, 1, and 6 (rhbz 490053)
  - Persist bootloader settings across xend restarts (rhbz 468971)
  - Fix cpu affinity reset after save/restore (rhbz 228890)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-84.el5
changelog:
  - Fix `default' and `timeout' parameters in elilo.conf (rhbz 491408)
  - Fix a typo which blocks local migrations (rhbz 484967)
  - Forbid migration with attached PCI devices (rhbz 334821)
  - Fix network-bridge when SRCADDR is used for default route (rhbz 475249)
  - Disallow bogus MAC addresses when creating new VIF devices (rhbz 476611)
  - Fix a typo in a doc string (rhzb 481354)
  - Add INT13 LBA48 extensions to HVM BIOS (rhbz 487907)
  - Fall back to a first entry in grub.conf if default is invalid (rhbz 490754)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-83.el5
changelog:
  - Support virtual SCSI disks larger than 2TB (rhbz #482780)
  - Add F11/F12 key support to hvm bios (rhbz #338321)
  - Fix return values in xend and xendomains init scripts (rhbz #430904)
  - Document Ctrl-] for xm console in xm(1) (rhbz #454611)
  - Fix checking for out-of-range IDE disk devices (rhbz #475433)
  - Fix memory leak in libxenstore (rhbz #490158)


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.3-81.el5
changelog:
  - Fix data corruption with virtual SCSI disks >1TB (rhbz #479339)
  - Fix SCSI problems on fullvirt guests with >4GB RAM (rhbz #480843)
  - Give back memory to dom0 after a failed auto-balloon (rhbz #345271)
  - Fix save/restore for 32-on-64 PV guests (rhbz #425411)
  - Fix xm dump-core for 32-on-64 PV guests (rhbz #480118)
  - Report errors when saving guests (rhbz #451675)
  - Truncate existing file when dumping guest core (rhbz #484346)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-78.el5
changelog:
  - Alternative network-bridge scripts without netloop for using with
    bonding (rhbz #453463, rhbz #429154)
  - Fix xm block-detach operation (rhbz #473882)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-75.el5
changelog:
  - Fix disk device ordering randomness which breaks reboots (rhbz #462727)
  - Remove qemu-dm.debug wrapper script (CVE-2008-4993, rhbz #470795)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-74.el5
changelog:
  - Avoid duplicate core dump race condition (rhbz #455879)
  - Xenstore unsafe data access (CVE-2008-4405, rhbz #464817)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-73.el5
changelog:
  - Fix xenstat corruption when a domain shuts down (rhbz #251743)
  - Fix selinux labelling if xenstored is on tmpfs (rhbz #462702)
  - Clear out stale NVRAM files on ia64 (rhbz #358321)
  - Allow use of tap:aio for HVM guests emulated devices + pv drivers (rhbz #362401)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-72.el5
changelog:
  - Fix network for ia64 HVM guests with > 3gb RAM (rhbz #453114)
  - Add e1000 emulation (rhbz #344861)
  - Fix network-bridge script VLAN handling (rhbz #337651)
  - Use largepages for HVM guests (rhbz #445663)
  - Fix xm network-attach docs (rhbz #440274)
  - Fix xm shutdown --wait, when using domid (rhbz #442755)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-71.el5
changelog:
  - Support for attaching more than 16 xvd devices to guest domains (rhbz #456392)
  - Don't clobber the wallclock during restore (rhbz #426861)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-68.el5
changelog:
  - Rotate all log files periodically (rhbz #422271)
  - Fix overflow in qemu-img (rhbz #437086)
  - Fix race in DMA thread (rhbz #250988)
  - Fix blktap data access alignment (rhbz #253884)
  - Don't unpause domain after taking core (rhbz #442698)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-67.el5
changelog:
  - Persist device model PID across restarts (rhbz #280611)
  - Pass internal libxc return value back to caller (rhbz #414391)
  - Fix passing of domid to libxc from python IOport & IRQ controllers (rhbz #432376)
  - Don't try to balloon more than physical RAM (rhbz #280881)
  - Add blktap sub-type checks (rhbz #444413)
  - Respect nographics request for HVM (rhbz #230841)
  - Put xenstored database on tmpfs (rhbz #446089)
  - Prefer grub.conf in pygrub (rhbz #234486)
  - Don't throw errors when listing domains (rhbz #238833)
  - Add mouse wheel support to PVFB (rhbz #250401)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-66.el5
changelog:
  - Correctly limit PVFB size CVE-2008-1952 (rhbz #447761)
  - Disable QEMU USB disk image format auto-detection CVE-2008-1945 (rhbz #445846)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-65.el5
changelog:
  - Remove blktap sharing patch which prevents guests with large
    numbers of disks booting (rhbz #445476)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-63.el5
changelog:
  - Fix PVFB to validate frame buffer description (rhbz #443376)
  - Fix PVFB to cope with bogus update requests (rhbz #443392)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-60.el5
changelog:
  - Pull in the userland side of upstream c/s 15161 to fix fully virt SMP
    boot on Intel machines (rhbz #435744)


author: Richard W.M. Jones <rjones@redhat.com> - 3.0.3-59.el5
changelog:
  - Clarify documentation for 'xm vcpu-set' and 'xm mem-set' on FV guests
    (earlier changelog entry for this bug is incorrect) (rhbz #370101)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-54.el5
changelog:
  - Fix pygrub unaligned access (rhbz #259541)
  - Add timestamp to console and hypervisor log files (rhbz #271181)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-51.el5
changelog:
  - Fix PCI device passthrough (rhbz #339421)
  - Fix device sharing checks for blktap disks (rhbz #223259)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-50.el5
changelog:
  - Allow type of None for VIF in HVM guests (rhbz #300531)
  - Fix release of NVRAM on domain reboot cleanup (rhbz #426079)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-48.el5
changelog:
  - Fix NVRAM cleanup for ia64 (rhbz #428653)
  - Fix destroy of large VMs (rhbz #428651)
  - Fix crash dump of PAE guests > 4 GB (rhbz #336041)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-47.el5
changelog:
  - Really fix qemu bug (rhbz #360381)
  - Fix blkif check to distinguish 0 and None for Solaris (rhbz #253222)


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Add NUMA info to physinfo sysctl (rhbz #426322)
  - Add NR cpus info to physinfo sysctl (rhbz #426323)
  - Add availheap sysctl (rhbz #426321)
  - Add 'xm trigger' command (rhbz #223900)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-43.el5
changelog:
  - Fixed xenbaked tmpfile flaw (CVE-2007-3919) (rhbz #350421)
  - Delete kernel/initrd after dryrun xm create (rhbz #251225)
  - Update 32-on-64 PVFB compat fix (rhbz #253221)
  - Delete xenstored TDB upon startup (rhbz #356461)
  - Cleanup kernel/initrd after pygrub errors (rhbz #231144)
  - Stop SDL backend choking on bogus screen updates (rhbz #368931)
  - Fix handling of lilo.conf for ia64 (rhbz #288371)
  - Backport USB tablet fixes (rhbz #245574)
  - Fix libvncserver unaligned access (rhbz #286021)


author: Chris Lalancette <clalance@redhat.com> - 3.0.3-41.el5
changelog:
  - QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #296281)
  - Pygrub guest escape - CVE-2007-4993 (rhbz #302831)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-38.el5
changelog:
  - Fixed memory ballooning for HVM restore (rhbz #253583)
  - Avoid bogus VNC password prompts after migrate/restore (rhbz #252359)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-37.el5
changelog:
  - Fix UUID normalization when no UUID is present (rhbz #253683)
  - Fix handling of 'keymap' param in config files (rhbz #252361)
  - Don't destroy guest after shutdown timeout (rhbz #236595)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-36.el5
changelog:
  - Ensure PVFB daemon terminates promptly on domain shutdown (rhbz #252232)
  - Fix rtl8139 checksums for VISTA (rhbz #251407)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-35.el5
changelog:
  - Fix more VNC threading problems (rhbz #245188)
  - Fix save/restore edge case (rhbz #245960)
  - Fix legacy PVFB for 32-on-64 (rhbz #248947)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-34.el5
changelog:
  - Fixed booting guests with legacy native ABI device protocol (rhbz#248192)
  - Fix more VNC keycode/keysym mappings issues (rhbz #248863)
  - Fix potential QEMU crash when VNC client disconnects (rhbz #230083)
  - Add NVRAM support for ia64 guests (rhbz #246006)
  - Normalize UUID to avoid loosing guest name upon restarts (rhbz #249564)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-31.el5
changelog:
  - Rate limit console messages from guest (rhbz 204504)
  - Use -r flag to losetup for readonly block devices (rhbz 225166)
  - Mark /etc/sysconfig/xend as a config file (rhbz 202636, rhbz 223911)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-30.el5
changelog:
  - Fix address test in network-bridge (rhbz 237667)
  - Permissions of xend-debug.log (rhbz 234227)
  - Hotplug scripts error reporting (rhbz 233433)
  - Disable network-bridge if running on Dom0 with nfs/iscsi root device (rhbz 238143)


author: Markus Armbruster <armbru@redhat.com> - 3.0.3-29.el5
changelog:
  - Fix a race in the pvfb startup (rhbz 243884)
  - Loadable pvfb keymap (rhbz 223799)
  - Fix pvfb save/restore broken in 3.0.3-27.el5


author: Daniel P. Berrange <berrange@redhat.com>
changelog:
  - Fixed 32-bit core dumps with HVM (rhbz 244300)
  - Add persistent logging of guest & hypervisor console (rhbz 202636, rhbz 223911)
  - Fix destroyDevice() args (rhbz 222094)
  - Check file exists in blktap hotplug scripts (rhbz 215342)
  - Make SXPR server in XenD multi-threaded (rhbz 210141)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-27.el5
changelog:
  - Update low level (non-XenD) userspace to work with 3.1.0 hypervisor (rhbz#243462,
    rhbz#234166, rhbz#230790)
  - Patch XenD to use 'domid' instead of 'dom' with libxc
  - Patch XenD to use new HVM domain creation process
  - Remove unused i18n stuff from Makefile
  - Fix pygrub, blktapctrl paths to return to original settings
  - Back-port 3.1.0  HVM save/restore changes to XenD (rhbz#214995)
  - Move HVM save/restore files from /tmp to /var/lib/xen (rhbz#214995)
  - Ensure pvfb backend terminates when frontend vanishes early (rhbz#230634)
  - Save vncpasswd in xenstore along with the other pvfb
    configuration (rhbz#220494)
  - Fix allocation of fixed VNC ports for pvfb (rhbz#211208)
  - Don't start a xen-vncfb process for HVM (rhbz#225413)


author: Rik van Riel <riel@redhat.com> - 3.0.3-26.el5
changelog:
  - disable qemu monitor mode, for security reasons (rhbz#230295)
  - fix IA64 shadow page table mode (rhbz#230459, rhbz#230331)


author: Rik van Riel <riel@redhat.com> - 3.0.3-21.el5
changelog:
  - make /var/log/xen only readable by root (rhbz#212082)
  - we no longer package /var/xen/dump, so don't mkdir it


author: Rik van Riel <riel@redhat.com> - 3.0.3-20.el5
changelog:
  - fix core dumps of 32 bit guests >2GB RAM (rhbz#215796)
  - write the /local/domain/vm node early in the startup process (rhbz#215269)


author: Rik van Riel <riel@redhat.com> - 3.0.3-19.el5
changelog:
  - fix memory boundary checking in qemu-dm (rhbz#221119)
  - fix VNC JP106 keyboard handling (rhbz#215778)


author: Rik van Riel <riel@redhat.com> - 3.0.3-18.el5
changelog:
  - add --force option to xenbus device detach code (rhbz#217853)
  - fix keeping track of HVM vnc password (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-17.el5
changelog:
  - enable DMA on HVM virtual cdrom drive (rhbz#218357)
  - new paravirt framebuffer, as merged upstream (rhbz#218050)


author: Rik van Riel <riel@redhat.com> - 3.0.3-14.el5
changelog:
  - do not auto-start a domain that was restored from a save (rhbz#217295)
  - use log level info for messages that are not errors (rhbz#218759)
  - Resolves: rhbz#217295 rhbz#218759


author: Rik van Riel <riel@redhat.com> - 3.0.3-12.el5
changelog:
  - catch it when an HVM guest tries to use hde (rhbz#217736)
  - make "xm list" display how much memory a domain really has (rhbz#217443)
  - move rtc timer for HVM guests into the hypervisor (rhbz#214780)
  - Resolves: rhbz#214780 rhbz#217736 rhbz#217443


author: Rik van Riel <riel@redhat.com> - 3.0.3-10.el5
changelog:
  - fix 2TB overflow/wraparound in blktap (rhbz#217580)
  - various fixes from Herbert Xu's security audit
  - allow HVM virtual floppy to be a device on dom0 (rhbz#216449)
  - make uppercase characters always work in HVM console (rhbz#217554)
  - Resolves: rhbz#217580 rhbz#216449 rhbz#217999 rhbz#218000 rhbz#218002 rhbz#218003 rhbz#218005 rhbz#217554


author: Rik van Riel <riel@redhat.com> - 3.0.3-9.el5
changelog:
  - reapply the for bugs 211600, 212193 and 211697
  - move the dump path to /var/lib/xen (bug 212558)
  - Resolves: rhbz#211600 rhbz#212193 rhbz#211697 rhbz#212558


author: Rik van Riel <riel@redhat.com> - 3.0.3-8.el5
changelog:
  - undo the fixes for bz 211600, 212193 and 211697, apply them after beta 2
  - fix vmxassist segment loading on real->protected mode transition (bz 214004)


author: Rik van Riel <riel@redhat.com> - 3.0.3-7.el5
changelog:
  - fix the uptime statistic for suspended/resumed guests (bz 211600)
  - improve the error message when domU uses the wrong device (bz 212193)
  - print the full path to the config file in error messages (bz 211697)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-5.el5
changelog:
  - Added /var/lib/xen/images as default dir for storing guest disk image files
    to ensure correct selinux context (bz 212995)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-3.el5
changelog:
  - Switch /etc/xen directory to be mode 0700 because the config files
    can contain plain text passwords (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.3-1.el5
changelog:
  - Pull in the official 3.0.3 tarball of xen (changeset 11774). No functional
    change, only release number toggled.
  - Add patches for VNC password authentication (bz 209335)


author: Daniel P. Berrange <berrange@redhat.com> - 3.0.2-42
changelog:
  - Added vnclisten patches to make VNC only listen on localhost
    out of the box, configurable by 'vnclisten' parameter (bz 203196)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-40
changelog:
  - Workaround blktap/xenstore startup race
  - Add udev rules for xen blktap devices (srostedt)
  - Add support for dynamic blktap device nodes (srostedt)
  - Fixes for infinite dom0 cpu usage with blktap
  - Fix xm not to die on malformed "tap:" blkif config string
  - Enable blktap on kernels without epoll-for-aio support.
  - Load the blktap module automatically at startup
  - Reenable blktapctrl


author: Daniel Berrange <berrange@redhat.com> - 3.0.2-39
changelog:
  - Disable paravirt framebuffer server side rendered cursor (bz 206313)
  - Ignore SIGPIPE in paravirt framebuffer daemon to avoid terminating
    on client disconnects while writing data (bz 208025)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-35
changelog:
  - Don't strip qemu-dm early, so that we get proper debuginfo (danpb)
  - Fix compile problem with latest glibc


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-26
changelog:
  - update to xen-unstable cs 11251
  - clean up patches some
  - disable ia64 as it doesn't currently build


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-24
changelog:
  - remove copy of xenguest-install from this package, require 
    python-xeninst (the new home of xenguest-install)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-23
changelog:
  - add patch to fix rtl8139 in FV, switch it back to the default nic
  - add necessary ia64 patches (#201040)
  - build on ia64


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-20
changelog:
  - don't start blktapctrl for now
  - fix HVM guest creation in xenguest-install
  - make sure log files have the right SELinux label


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-19
changelog:
  - fix libblktap symlinks (#199820)
  - make libxenstore executable (#197316)
  - version libxenstore (markmc)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-18
changelog:
  - include /var/xen/dump in file list
  - load blkbk, netbk and netloop when xend starts
  - update to cs 10712
  - avoid file conflicts with qemu (#199759)


author: Stephen C. Tweedie <sct@redhat.com> - 3.0.2-13
changelog:
  - Update to xen-unstable cset 10675
  - Remove internal libvncserver build, new qemu device model has its own one
    now.
  - Change default FV NIC model from rtl8139 to ne2k_pci until the former works
    better


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-11
changelog:
  - split into main packages + -libs and -devel subpackages for #198260
  - add patch from jfautley to allow specifying other bridge for 
    xenguest-install (#198097)


author: Jeremy Katz <katzj@redhat.com> - 3.0.2-1
changelog:
  - update to post 3.0.2 snapshot (changeset:   9744:1ad06bd6832d)
  - stop applying patches that are upstreamed
  - add patches for bootloader to run on all domain creations
  - make xenguest-install create a persistent uuid
  - use libvirt for domain creation in xenguest-install, slightly improve 
    error handling


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-4
changelog:
  - add udev rule so that /dev/xen/evtchn gets created properly
  - make pygrub not use /tmp for SELinux
  - make xenguest-install actually unmount its nfs share.  also, don't use /tmp


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-3
changelog:
  - set /proc/xen/privcmd and /var/log/xend-debug.log as close on exec to avoid
    SELinux problems
  - give better feedback on invalid urls (#184176)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-1
changelog:
  - fix xenguest-install so that it uses phy: for block devices instead of 
    forcing them over loopback.  
  - change package versioning to be a little more accurate


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5.3
changelog:
  - add patch to ensure we get a unique fifo for boot loader (#182328)
  - don't try to read the whole disk if we can't find a partition table 
    with pygrub 
  - fix restarting of domains (#179677)


author: Jeremy Katz <katzj@redhat.com> - 3.0.1-0.20060208.fc5
changelog:
  - update to current hg snapshot for HVM support
  - update xenguest-install for hvm changes.  allow hvm on svm hardware
  - fix a few little xenguest-install bugs


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060130.fc5.4
changelog:
  - patch from David Lutterkort to pass macaddr (-m) to xenguest-install
  - rework xenguest-install a bit so that it can be used for creating 
    fully-virtualized guests as well as paravirt.  Run with --help for 
    more details (or follow the prompts)
  - add more docs (noticed by Andrew Puch)


author: Bill Nottingham <notting@redhat.com> 3.0-0.20060130.fc5.3
changelog:
  - disable iptables/ip6tables/arptables on bridging when bringing up a
    Xen bridge. If complicated filtering is needed that uses this, custom
    firewalls will be needed. (#177794)


author: Jeremy Katz <katzj@redhat.com> - 3.0-0.20060110.fc5.5
changelog:
  - buildrequire dev86 so that vmx firmware gets built
  - include a copy of libvncserver and build vmx device models against it


author: Daniel Veillard <veillard@redhat.com> - 3.0-0.20051109.fc5.4
changelog:
  - adding missing headers for libxenctrl and libxenstore
  - use libX11-devel build require instead of xorg-x11-devel


author: Rik van Riel <riel@redhat.com> 3.0-0.20050912.fc5
changelog:
  - add /var/{lib,run}/xenstored to the %files section (#167496, #167121)
  - upgrade to today's Xen snapshot
  - some small build fixes for x86_64
  - enable x86_64 builds


author: Rik van Riel <riel@redhat.com> 3.0-0.20050908
changelog:
  - explicitly call /usr/sbin/xend from initscript (#167407)
  - add xenstored directories to spec file (#167496, #167121)
  - misc gcc4 fixes 
  - spec file cleanups (#161191)
  - upgrade to today's Xen snapshot
  - change the version to 3.0-0.<date> (real 3.0 release will be 3.0-1)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - patch manpath instead of moving in specfile.  patch sent upstream
  - install to native python path instead of /usr/lib/python
  - other misc specfile duplication cleanup


author: Rik van Riel <riel@redhat.com> 2-20050402
changelog:
  - move initscripts to /etc/rc.d/init.d (Florian La Roche) (#153188)
  - ship only PDF documentation, not the PS or tex duplicates


author: Rik van Riel <riel@redhat.com> 2-20050328
changelog:
  - do not yet upgrade to new hypervisor ;)
  - add barrier to fix SMP boot bug
  - add tags target
  - add zlib-devel build requires (#150952)


author: Rik van Riel <riel@redhat.com> 2-20050305
changelog:
  - the gcc4 compile patches are now upstream
  - upgrade to last night's snapshot, drop patches locally


author: Rik van Riel <riel@redhat.com> 2-20050218
changelog:
  - upgrade to last night's Xen snapshot
  - a kernel upgrade is needed to run this Xen, the hypervisor
    interface changed slightly
  - comment out unused debugging function in plan9 domain builder
    that was giving compile errors with -Werror


author: Jeremy Katz <katzj@redhat.com> - 2-20050114
changelog:
  - update to new snap
  - python-twisted is its own package now
  - files are in /usr/lib/python now as well, ugh.


author: Rik van Riel <riel@redhat.com>
changelog:
  - grab new Xen tarball (with wednesday's patch already included)
  - transfig is a buildrequire, add it to the spec file


author: James Antill <james.antill@redhat.com> - 1.1.16-13
changelog:
  - Fix the yum-changelog exit, when you pass it dates and ther is no datetime
  - Resolves: rhbz#472389


author: James Antill <james.antill@redhat.com> - 1.1.16-10
changelog:
  - Add the timestamp_check option, so we can have repoids to random stuff
  - Resolves: rhbz#466176
  - Resolves: rhbz#454883


author: James Antill <james.antill@redhat.com> - 1.1.16-9
changelog:
  - Have repoquery set metadata_expire to 0 for manual repos.
  - Resolves: rhbz#466176
  - Fix list-groups help output
  - Resolves: rhbz#467191
  - Fix yum-groups-manager i18n bugs
  - Resolves: rhbz#466176
  - Resolves: rhbz#454883


author: James Antill <james.antill@redhat.com> - 1.1.16-8
changelog:
  - Fix repodiff when comparing against older repos. than ones you'd compared
  - against before.
  - Resolves: rhbz#444948
  - Resolves: rhbz#454883


author: James Antill <james.antill@redhat.com> - 1.1.16-6
changelog:
  - Add repoid to keys info output.
  - Do dynamic columns in keys output.
  - Fix --bz option in yum-security
  - Resolves: rhbz#462374
  - Resolves: rhbz#454883


author: James Antill <james.antill@redhat.com> - 1.1.16-4
changelog:
  - Import upstream 1.1.16.
  - Add group management application, networkmanger script. Bug fixes.
  - Remove skip-broken/basearchonly plugins, as we never shipped them and
  - core yum does their jobs now.
  - Remove hard dep. on dateutil, as it's only in EPEL.
  - Fix typo in filter-data plugin.
  - Fix typo in reposync.
  - Resolves: rhbz#454883
  - Resolves: rhbz#449989
  - Resolves: rhbz#450873


author: James Antill <james.antill@redhat.com> - 1.1.14-0_beta_15_2
changelog:
  - Import next upstream 1.1.15 beta.
  - gpgcheck/repo_gpgcheck change.
  - include fastestmirror
  - Resolves: rhbz#454883
  - Related: rhbz#458131


author: James Antill <james.antill@redhat.com> - 1.1.10-6
changelog:
  - Rename yum groups <=> rpm groups
  - Add yum groups, what was actually wanted.
  - Fixup minor doc problems
  - Resolves: rhbz#319491


author: James Antill <jantill@redhat.com> - 1.0.4-3
changelog:
  - Re-integrate older security info printing.
  - kabi patch for ClusterStorage, as it uses the new kABI
  - Upload new tarball.
  - Resolves: rhbz#251542


author: James Antill <jantill@redhat.com> - 1.1.5-2
changelog:
  - Add resquires for updatesd to refresh-updatesd
  - Remove a few of the plugins.
  - Rename fedorakmod to kmod
  - Resolves: rhbz#234646


author: Tim Lauridsen <tla@rasmil.dk>
changelog:
  - Added versionlock.list installation.
  - fixed skip-broken description (--ignore-broken -> --skip-broken)


author: Tim Lauridsen <tla@rasmil.dk>
changelog:
  - added yum-fedorakmod plugin subpackage
  - added yum-protectbase plugin subpackage.
  - added yum-versionlock plugin subpackage.
  - added yum-tsflags plugin subpackage.
  - added yum-kernel-module plugin subpackage
  - changed .py to .* in files sections for plugin subpackages to build rpms without error.


author: Panu Matilainen <pmatilai@laiskiainen.org>
changelog:
  - version 0.3.1
  - various enhancements and fixes to repoquery
  - avoid tracebacks in yumex and pup when changelog plugin is enabled


author: Panu Matilainen <pmatilai@laiskiainen.org>
changelog:
  - bump version to 0.3
  - add yum-changelog subpackage
  - add plugins as documentation to the main package
  - require yum >= 2.3.4 (for getCacheDir)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.7
changelog:
  - implement safe renegotiation - CVE-2009-3555 (#533125)
  - do not allow MD2 in certificate signatures by default - CVE-2009-2409
    (#510197)


author: Tomas Mraz <tmraz@redhat.com> 1.4.1-3.5
changelog:
  - fix NUL characters in DN and SAN cert fields issue,
    make sure gnutls_x509_crt_check_hostname() fails when certificate
    has no CN or SAN CVE-2009-2730 (#516231)


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-5.2
changelog:
  - reverting init script return codes because of bahaviour change, only fixing
    the ipchains test
    Related: rhbz#242457


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-5
changelog:
  - fixed init script return codes for LSB conformance
    Resolves: rhbz#242457
  - fixed ICMP6 reject types
    Resolves: rhbz#253014
  - fixed missing headers in iptables-devel package
    Resolves: rhbz#402281, rhbz#487649
  - fixed dist tag in release
    Resolves: rhbz#440622
  - added all options to the man page of iptables-restore
    Resolves: rhbz#474847
  - added DSCP match target for IPv6
    Resolves: rhbz#480371
  - removed unsuppported ipt_ROUTE from documentation
    Resolves: rhbz#485834


author: Thomas Woerner <twoerner@redhat.com> 1.3.5-4.el5_4
changelog:
  - fixed man page for dscp extension max value
    Resolves: rhbz#239383
  - fixed missing extension modules, because of build problems
    Resolves: rhbz#244047


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Jiri Moskovcak <jmoskovc@redhat.com> - 2.0.33-9.4.1
changelog:
  - security fixes
  - CVE-2006-4484 CVE-2007-0455 CVE-2007-2756 CVE-2007-3472 
  - CVE-2007-3473 CVE-2007-3475 CVE-2007-3476
  - Resolves: #432786


author: Than Ngo <than@redhat.com> 2.0.33-1
changelog:
  - 2.0.33 #150717
  - apply the patch from Jose Pedro Oliveira
    - Added the release macro to the subpackages requirements versioning
    - Handled the gdlib-config movement to gd-devel in a differment manner
    - Added fontconfig-devel to the build requirements
    - Added xorg-x11-devel to the build requirements (Xpm)
    - Removed explicit /sbin/ldconfig requirement (gd rpm)
    - Removed explicit perl requirement (gd-progs rpm)
    - Added several missing documentation files (including the license file)
    - Replaced %makeinstall by make install DESTDIR=...


author: Phil Knirsch <pknirsch@redhat.com> 2.0.27-1
changelog:
  - Updated to 2.0.27 due to:
    o Potential memory overruns in gdImageFilledPolygon. Thanks to John Ellson.
    o The sign of Y-axis values returned in the bounding box by gdImageStringFT
      was incorrect. Thanks to John Ellson and Riccardo Cohen.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.8.4-3
changelog:
  - There's really no reason to link against both freetype 1.x and 2.x,
    especially when gd is configured to use just freetype 2.x. ;)


author: Philipp Knirsch <Philipp.Knirsch@redhat.de>
changelog:
  - Fixed bug #22001 where during installation the .so.1 and the so.1.8 links
    didn't get installed and therefore updates had problems.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - define HAVE_LIBTTF to actually enable ttf support (oops, #18299)
  - remove explicit dependencies on libpng, libjpeg, et. al.
  - add BuildPrereq: freetype-devel


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.5
changelog:
  - Security: Fix Tunnel-Password zero-length attributes flaw (bug #521912)
    Resolves: RH BZ#522062
  - rebase a couple of old patches (freeradius-0.9.0-com_err.patch,
    freeradius-1.0.0-samba3.patch) so they apply with fuzz=0


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.4
changelog:
  - Resolves: bug #287381 rlm_ldap could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow
    for some reason the freeradius-1.1.3-ldap.patch incorrectly changed
    ldap_int_tls_config() to ldap_set_option(), this reverts the incorrect patch


author: John Dennis <jdennis@redhat.com> - 1.1.3-1.3
changelog:
  - Resolves: bug #447669 freeradius cannot be queried using net-snmp
  - force all files in /etc/raddb to be 640 root:radiusd, otherwise after dropping
    privileges the radiusd daemon cannot re-read it's config files on SIGHUP.
  - add group creation for radiusd
  - Resolves: bug #249308 freeradius (prior to 1.1.4) won't work with vista clients
  - Resolves: bug #440626 bad dist macro


author: Thomas Woerner <twoerner@redhat.com> 1.1.3-1.1
changelog:
  - fixed ldap code to not use internals, added LDAP_DEPRECATED compile time flag
    Resolves: rhbz#217688


author: Thomas Woerner <twoerner@redhat.com> 1.1.1-1
changelog:
  - new version 1.1.1
  - fixed incorrect rlm_sql globbing (#189095)
    Thanks to Yanko Kaneti for the fix.
  - fixed chown syntax in post script (#182777)
  - dropped gcc34, libdir and realloc-return patch
  - spec file cleanup with additional libtool build fixes


author: Thomas Woerner <twoerner@redhat.com> 1.0.4-2
changelog:
  - added missing build requires for libtool-ltdl-devel (#160877)
  - modified file list to get a report for missing plugins


author: Thomas Woerner <twoerner@redhat.com> 1.0.0-0.pre3.2
changelog:
  - added buildrequires for zlib-devel (#127162)
  - fixed libdir patch to prefer own libeap instead of installed one (#127168)
  - fixed samba account maps in LDAP for samba v3 (#127173)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.0-2.2
changelog:
  - modify default PAM configuration to remove the directory part of the module
    name, so that 32- and 64-bit libpam (called from 32- or 64-bit radiusd) on
    multilib systems will always load the right module for the architecture
  - modify default PAM configuration to use pam_stack


author: Thomas Woerner <twoerner@redhat.com>
changelog:
  - removed la files, removed devel package
  - split into 4 packages: freeradius, freeradius-mysql, freeradius-postgresql,
      freeradius-unixODBC
  - fixed requires and buildrequires
  - create logging dir in post if it does not exist
  - fixed module load without la files


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Petr Machata <pmachata@redhat.com> - 2010c-1.el5
changelog:
  - Upstream 2010a
    - Source code cleanups
  - Upstream 2010b
    - Northern Mexico's border cities share the DST schedule with the
      United States
  - Upstream 2010c
    - Paraguay DST now in effect from 2nd Sunday of April to 1st Sunday
      of October
  - Resolves: #568667


author: Petr Machata <pmachata@redhat.com> - 2009u-1.el5
changelog:
  - Upstream 2009p
    - Argentina does not enter DST on October 18
    - San Luis switched from UTC-4 to UTC-3 on October 11th
  - Upstream 2009q
    - Change DST end in Syria from November 1 to last Friday in October
    - Changes to past Hong Kong transitions
    - Kemerovo oblast' in Russia will change current time zone on March 28, 2010.
      Asia/Novokuznetsk is the new time zone name
  - Upstream 2009r
    - Changes to local times of three Australian research stations in Antarctica
  - Upstream 2009s
    - Fiji plans to re-introduce DST from November 29th 2009 to April 25th 2010
  - Upstream 2009u
    - Bangladesh changed their clock back to Standard Time on December 31, 2009
    - Resolves: #550570
  - Dropped tzdata-2009o-argentinas.patch


author: Petr Machata <pmachata@redhat.com> - 2009o-2.el5
changelog:
  - San Luis (Argentina) entered DST on October 11 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009o-1.el5
changelog:
  - Upstream 2009o
    - Bangladesh won't go back to Standard Time from October 1, 2009
    - Pakistan leaves DST on October 1, 2009
  - Dropped tzdata-2009m-karachi.patch
  - Argentina does not enter DST on October 18 (tzdata-2009o-argentinas.patch)
  - Resolves: #529427


author: Petr Machata <pmachata@redhat.com> - 2009m-1.el5
changelog:
  - Upstream 2009m
    - Palestine will will revert back to winter time on Friday, 2009-09-04
    - Samoa passed the DST Bill that fixes DST dates for 2009 and 2010
  - Drop Egypt patch
  - Add markers for autoupdate of spec file
  - Pakistan leaves the period of DST on October 1
  - Resolves: #524198


author: Petr Machata <pmachata@redhat.com> - 2009k-1.el5
changelog:
  - Upstream 2009j
    - DST switch for Bangladesh will occur an hour earlier than was
      thought (we can drop Bangladesh patch).
  - Upstream 2009k
    - Mauritius will not continue to observe DST the coming summer
    - Arbitrarily end DST at the end of 2009 so that a POSIX-style time
      zone string can appear in the Dhaka binary file
  - Egypt starts winter time on August 21.
  - Resolves: #517009


author: Petr Machata <pmachata@redhat.com> - 2009i-2.el5
changelog:
  - Official announcement is for the Bangladesh change to occur at 23:00
    of local time, not 24:00.  Add upstream patch implementing the same.
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009i-1.el5
changelog:
  - Upstream 2009i
    - Bangladesh introduces DST 2009-06-20
  - Upstream 2009h
    - Convert use of 00:00 stamps to 24:00 of the previous day
    - Clarify that the data is Public Domain
  - Drop Cairo patch
  - Resolves: #503832


author: Petr Machata <pmachata@redhat.com> - 2009f-1.el5
changelog:
  - Upstream 2009a
    - Fix Asia/Kathmandu spelling
    - Historical timestamps for Switzerland and Cuba
    - DST update for America/Resolute
  - Upstream 2009d
    - Morocco will observe DST from 2009-06-01 00:00 to 2009-08-21 00:00
    - Tunisia will not observe DST this year.
    - Syria will start DST on 2009-03-27 00:00 this year
    - Cuba will start DST on midnight between 2009-03-07 and 2009-03-08
    - Province of San Luis, Argentina, went to UTC-04:00 on 2009-03-15
  - Upstream 2009e
    - Historical changes for Jordan
    - Palestine will start DST on 2009-03-26 and end 2009-09-27
  - Upstream 2009f
    - Pakistan will observe DST between 2009-04-15 and (probably) 2009-11-01
  - Resolves: #495470
  - Egypt ends DST on 2009-09-24
  - Resolves: #492263


author: Petr Machata <pmachata@redhat.com> - 2008i-1.el5
changelog:
  - Upstream 2008g
    - Fixed future DST transitions for Brazil
  - Upstream 2008h
    - Fix exact DST transition hour for Mauritius
    - Syria will leave the period of DST on Nov 1
    - Fix coordinates of Pacific/Niue
  - Upstream 2008i
    - Updates for Argentina: Drop DST in zones America/Argentina/Jujuy,
      La_Rioja, San_Juan, Catamarca, Mendoza, Rio_Gallegos, Ushuaia; new
      zone America/Argentina/Salta (for provinces SA, LP, NQ, RN).
  - Resolves: #467188


author: Petr Machata <pmachata@redhat.com> - 2008f-1
changelog:
  - Upstream 2008f
    - Gaza strip runs on different clocks during Ramadan
    - Argentina and Brazil will start DST on Sunday October 19, 2008
  - Drop Pakistan & Morocco patches
  - Resolves: #462707


author: Petr Machata <pmachata@redhat.com> - 2008e-1
changelog:
  - Upstream 2008c
    - Mongolia changes zone
    - Pakistan DST is scheduled until Sep/1, instead of Aug/31
  - Upstream 2008d
    - Changes for Brazil and Mauritius
  - Upstream 2008e
    - Changes for Mauritius
    - Leap second coverage for 31/Dec 2008
    - Corrections of historical dates
  - Drop Morocco and Pakistan patches that are superseded by upstream
  - Pakistan DST is scheduled until Oct/31
  - Morocco DST is scheduled until Aug/31
  - Resolves: #460059 #460365 #452679


author: Petr Machata <pmachata@redhat.com> - 2008b-2
changelog:
  - Upstream 2008b
    - DST changes for Syria, Cuba; Iraq abandons DST
    - Saigon zone renamed Ho_Chi_Minh; backward link provided
    - Add America/Argentina/San_Luis information
  - Pakistan introduces DST
  - Resolves: #447270


author: Petr Machata <pmachata@redhat.com> - 2007j-1
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS
  - Resolves: #410101


author: Petr Machata <pmachata@redhat.com> - 2007h-1
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007g-1
changelog:
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, and New South Wales are
      changing their DST rules effective next year
    - Several Antarctic station's rules weren't properly updated to account
      for this year's change to the New Zealand daylight saving rules
  - Venezuela timezone changes from -4:00 to -4:30 at 24 September
  - Resolves: #296801
  - Resolves: #266861


author: Petr Machata <pmachata@redhat.com> - 2007f-1
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.
  - Resolves: #240786


author: Petr Machata <pmachata@redhat.com> - 2007d-1
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007c-1
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".
  - Resolves: #230089


author: Petr Machata <pmachata@redhat.com> - 2007a-1
changelog:
  - Upstream 2007a:
    - Cuba has ended its three years of permanent DST.
    - Western Australia DST trial changes
    - Updates to Bahamas, they will be in sync with 2007 US DST change
  - Resolves: #228732


author: Petr Machata <pmachata@redhat.com> - 2006m-2
changelog:
  - Proposed upstream patch (#210058)
    - Jordan will switch to winter time on October 27, not September 29
    - Brazil's DST this year is the first Sunday in November to the last
      Sunday in February.  (Thanks to Frederico A. C. Neves.)
    - ISO 3166 codes for Serbia and Montenegro, zone Europe/Podgorica
    - Commentary and past timestamps changes


author: Petr Machata <pmachata@redhat.com> - 2006m-1
changelog:
  - Upstream 2006m:
    - Adjustments for Egypt, Palestine, Uruguay
    - Better description of `until' field in zic (8) manpage


author: Petr Machata <pmachata@redhat.com> - 2006l-1
changelog:
  - Upstream 2006k, 2006l:
    - Adjustments for Egypt, Palestine, Cuba, Honduras
    - Documentation changes


author: Petr Machata <pmachata@redhat.com> - 2006j-1
changelog:
  - Upstream 2006j
    - Honduras stopped observing DST on Monday at 00:00
    - America/Bermuda will follow the US's lead next year
    - America/Moncton will use US-style rules next year
    - New Zone America/Blanc-Sablon, for Canadians who observe AST all
      year
    - New zone: America/Atikokan instead of America/Coral_Harbour
    - New zones: Europe/Jersey, Europe/Guernsey, Europe/Isle_of_Man
    - Historical changes
    - Commentary updates
  - Upstream 2006i
    - localtime.c fixes
  - Upstream 2006h
    - zic leapsecond fix


author: Petr Machata <pmachata@redhat.com> - 2006f-1
changelog:
  - Upstream 2006f
    - America/Guatemala observes DST between Apr/30 and Oct/1
    - Historical changes for Nicaragua
    - Update of America/Indiana/Vincennes in zone table


author: Petr Machata <pmachata@redhat.com> - 2006d-1
changelog:
  - Upstream 2006d
    - Haiti observes DST
    - Sri Lanka change actually took effect Apr/15
    - All Canada is now scheduled for 2007 US DST rules
    - Some historical fixes


author: Petr Machata <pmachata@redhat.com> - 2006c-1
changelog:
  - Upstream 2006c
    - Time-related changes:
      - dozens of historical and commentary changes
      - Iran stopped observing DST
      - Sri Lanka switches from UTC+6 to UTC+5:30
      - America/Thule and America/Edmonton will adopt new US rules,
        starting 2007
      - Tunisia is adopting regular DST
    - Code:
      - asctime.c: Chages in format strings to silent gcc warnings
      - removing K&R notation from function signatures
      - few fixes across the code


author: Petr Machata <pmachata@redhat.com> 2006b-1
changelog:
  - Upstream 2006b:
    - using tz64code version, as 32 is legacy according to tzdata ML
    - new manual pages for ctime, strftime, tzset
    - some source code reorganizations
    - no timezone/dst rule updates


author: Petr Machata <pmachata@redhat.com> 2006a-1
changelog:
  - Upstream 2006a:
    - private.h(scheck): changing char* to char const*
    - Rule changes for Palestine, zone changes for Indiana/US, both
      changes for Canada.
    - Many related doc changes.
  - Naming scheme in spec file doesn't use %{name}, but tzdata.


author: Petr Machata <pmachata@redhat.com> 2005r-3
changelog:
  - 2005r-3
    - Meta changes.  Renaming tzdata.tar.bz2 file to tzdata$ver-base,
      so that it won't clash across updates.


author: Petr Machata <pmachata@redhat.com> 2005r-2
changelog:
  - 2005r
    - Zones EST, MST, HST, EST5EDT, CST6CDT, MST7MDT, PST8PDT moved to
      northamerica to guard against old files with obsolete information
      being left in the time zone binary directory.
    - Changes for countries that are supposed to join 2007 US DST
      change.  This includes most of Canada, however entries already in
      the database (Alberta, British Columbia, Newfoundland, Northwest
      Territories, and Yukon) were left alone for the time being.
    - Fixes in zdump.c (abbrok): conditions are chained, and the string
      is checked for emptiness.


author: Jakub Jelinek <jakub@redhat.com> 2005q-2
changelog:
  - 2005q
    - changes for Georgia, Azerbaijan, Jordan, Palestine, Cuba, Nicaragua
    - SystemV timezone changes


author: Jakub Jelinek <jakub@redhat.com> 2005n-2
changelog:
  - 2005n
    - changes for Kyrgyzstan and Uruguay
  - fix a typo in the Makefile (used TZDATA env var instead of TZDIR during
    make check), update tst-timezone.c from glibc CVS (#172102)


author: Jakub Jelinek <jakub@redhat.com> 2005m-2
changelog:
  - 2005m
    - changes for USA (extending DST by 4 weeks since 2007), Tunisia,
      Australia, Kazakhstan
    - historical timezone data changes for Japan, Poland, Northern Ireland and
      Mali
    - timezone name change for East Timor


author: Jakub Jelinek <jakub@redhat.com> 2005g-2
changelog:
  - 2005g
    - fixes for Uruguay
  - include README and Theory from tzcode tarball in /usr/share/doc;
    Theory includes a good summary of how the timezone data files
    are supposed to be named


author: Kai Engert <kengert@redhat.com> - 3.12.2.0-3
changelog:
  - Update to NSS_3_12_2_WITH_CKBI_1_73_RTM
  - Add dependency to pkgconfig to devel package (bug456849)


author: Kai Engert <kengert@redhat.com> - 3.12.0.3-1
changelog:
  - Update to NSS_3_12_RC4
  - Enable loading of external ECC modules
  - Include upstream fix for a deadlock in the certutil tool, bug 447431


author: Kai Engert <kengert@redhat.com> - 3.11.7-1.1
changelog:
  - Fix rhbz#212077, use a workaround to avoid Mozilla.org bug 51429
  - Remove link time dependency on libsoftokn3
  - Update to 3.11.7, but freebl/softokn remain at 3.11.5


author: Kai Engert <kengert@redhat.com> - 3.11.5-4
changelog:
  - Apply upstream patch for mozilla.org bug 51429 in order to
    fix an issue with smartcard login (rhbz#212077).


author: Kai Engert <kengert@redhat.com> - 3.11.5-3
changelog:
  - Prevent .chk files from being modified by prelink and rpm building
    by generating chk files at install time and setting immutable
    filesystem attribute (230546, 231367).


author: Bob Relyea <rrelyea@redhat.com> - 3.11.4-5
changelog:
  - handle the case where a smartcard is reset between the time the nss
    prompts for the password and the user enters it.


author: Kai Engert <kengert@redhat.com> - 3.11.3-2
changelog:
  - Revert the attempt to require latest NSPR, as it is not yet available
    in the build infrastructure.


author: Christopher Aillon <caillon@redhat.com> 3.11-0.cvs
changelog:
  - Initial import into Fedora Core, based on a CVS snapshot of
    the NSS_3_11_RTM tag
  - Fix up the pkcs11-devel subpackage to contain the proper headers
  - Build with RPM_OPT_FLAGS
  - No need to have rpath of /usr/lib in the pc file


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-7.1
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#516183)
  - fix memory leak in ipNetToPhysicalTable (#517041)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-7
changelog:
  - fixed sha1 on 2gb boundary (patch from upstream) (#189492)
  - enable compilation of updated assembler code on IA64 (#180091)
  - correct verification of CA certs in SSL (#201005)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-6
changelog:
  - fix a few rpmlint warnings
  - fix build if 'rand' or 'passwd' in buildroot path (#178782)
  - make libica build in brew


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm
  - updated ICA engine patch


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-3
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.8.1.el5]
changelog:
  - [xen] iommu-amd: extend loop ctr for polling completion wait (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: add passthrough and no-intremap parameters (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: enable amd iommu debug at run-time (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] support interrupt remapping on M-C (Bhavna Sarathy ) [539687 518474 526766]
  - [xen] iommu: move iommu_setup() to setup ioapic correctly (Bhavna Sarathy ) [539687 518474 526766]
  - [net] bnx2x: add support for bcm8727 phy (Stanislaw Gruszka ) [540381 515716]
  - [x86] cpu: upstream cache fixes needed for amd m-c (Bhavna Sarathy ) [540469 526315]
  - [x86_64] set proc id and core id before calling fixup_dcm (Bhavna Sarathy) [540469 526315]
  - [x86] mce_amd: fix up threshold_bank4 creation (Bhavna Sarathy ) [540469 526315]
  - Revert: [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]


author: Anton Arapov <aarapov@redhat.com> [2.6.18-164.7.1.el5]
changelog:
  - [xen] fix numa on magny-cours systems (Bhavna Sarathy ) [539684 526051]
  - [xen] fix crash with memory imbalance (Bhavna Sarathy ) [539690 526785]
  - [net] sched: fix panic in bnx2_poll_work (John Feeney ) [539686 526481]
  - [acpi] prevent duplicate dirs in /proc/acpi/processor (Matthew Garrett ) [539692 537395]
  - [x86] fix boot crash with < 8-core AMD Magny-cours system (Bhavna Sarathy) [539682 522215]
  - [x86] support amd magny-cours power-aware scheduler fix (Bhavna Sarathy ) [539680 513685]
  - [x86] disable NMI watchdog on CPU remove (Prarit Bhargava ) [539691 532514]
  - [acpi] bm_check and bm_control update (Luming Yu ) [539677 509422]
  - [x86_64] amd: iommu system management erratum 63 fix (Bhavna Sarathy ) [539689 531469]
  - [net] bnx2i/cnic: update driver version for RHEL5.5 (Mike Christie ) [537014 516233]
  - [x86] fix L1 cache by adding missing break (Bhavna Sarathy ) [539688 526770]
  - [x86] amd: fix hot plug cpu issue on 32-bit magny-cours (Bhavna Sarathy ) [539688 526770]
  - [acpi] disable ARB_DISABLE on platforms where not needed (Luming Yu ) [539677 509422]
  - [fs] private dentry list to avoid dcache_lock contention (Lachlan McIlroy ) [537019 526612]
  - [scsi] qla2xxx: enable msi-x correctly on qlogic 2xxx series (Marcus Barrow ) [537020 531593]
  - [apic] fix server c1e spurious lapic timer events (Bhavna Sarathy ) [539681 519422]
  - [net] netlink: fix typo in initialization (Jiri Pirko ) [528872 527906]
  - [x86] set cpu_llc_id on AMD CPUs (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up threshold_bank4 support on AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] fix up L3 cache information for AMD Magny-cours (Bhavna Sarathy ) [539678 513684]
  - [x86] amd: fix CPU llc_shared_map information (Bhavna Sarathy ) [539678 513684]
  - [nfs] v4: fix setting lock on open file with no state (Jeff Layton ) [533114 533115] {CVE-2009-3726}
  - [misc] futex priority based wakeup (Jon Thomas ) [533858 531552]
  - [dlm] use GFP_NOFS on all lockspaces (David Teigland ) [533859 530537]
  - [drm] r128: check for init on all ioctls that require it (Danny Feng ) [529602 529603] {CVE-2009-3620}
  - [scsi] mpt: errata 28 fix on LSI53C1030 (Tomas Henzl ) [529308 518689]
  - [x86] add ability to access Nehalem uncore config space (John Villalovos ) [539675 504330]
  - [net] AF_UNIX: deadlock on connecting to shutdown socket (Jiri Pirko ) [529630 529631] {CVE-2009-3621}
  - [fs] inotify: remove debug code (Danny Feng ) [533822 499019]
  - [fs] inotify: fix race (Danny Feng ) [533822 499019]
  - [audit] dereferencing krule as if it were an audit_watch (Alexander Viro ) [533861 526819]
  - [mm] fix spinlock performance issue on large systems (John Villalovos ) [539685 526078]
  - [x86] finish sysdata conversion (Danny Feng ) [537346 519633]
  - [pci] pciehp: fix PCIe hotplug slot detection (Michal Schmidt ) [530383 521731]
  - [x86] oprofile: support arch perfmon (John Villalovos ) [539683 523479]
  - [x86] oprofile: fix K8/core2 on multiple cpus (John Villalovos ) [539683 523479]
  - [x86] oprofile: utilize perf counter reservation (John Villalovos ) [539683 523479]
  - [pci] avoid disabling acpi to use non-core PCI devices (Mauro Carvalho Chehab ) [539675 504330]
  - [misc] support Intel multi-APIC-cluster systems (Prarit Bhargava ) [539676 507333]
  - [x86] suspend-resume: work on large logical CPU systems (John Villalovos ) [539674 499271]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.6.1.el5]
changelog:
  - [fs] fix pipe null pointer dereference (Jeff Moyer) [530938 530939] {CVE-2009-3547}
  - [security] require root for mmap_min_addr (Eric Paris ) [518142 518143] {CVE-2009-2695}
  - [net] lvs: adjust sync protocol handling for ipvsadm -2 (Neil Horman ) [528645 524129]
  - [xen] allow booting with broken serial hardware (Chris Lalancette ) [524153 518338]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.5.1.el5]
changelog:
  - [fs] eCryptfs: prevent lower dentry from going negative (Eric Sandeen ) [527834 527835] {CVE-2009-2908}
  - [nfs] v4: reclaimer thread stuck in an infinite loop (Sachin S. Prabhu ) [529162 526888]
  - [net] r8169: avoid losing MSI interrupts (Ivan Vecera ) [529366 514589]
  - [scsi] st.c: memory use after free after MTSETBLK ioctl (David Jeffery ) [528133 520192]
  - [net] r8169: balance pci_map/unmap pair, use hw padding (Ivan Vecera ) [529143 515857] {CVE-2009-3613}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.4.1.el5]
changelog:
  - [net] bonding: set primary param via sysfs (Jiri Pirko ) [517971 499884]
  - [scsi] fusion: re-enable mpt_msi_enable option (Tomas Henzl ) [526963 520820]
  - [net] ipt_recent: sanity check hit count (Amerigo Wang ) [527434 523982]
  - [net] ipv4: ip_append_data handle NULL routing table (Jiri Pirko ) [527436 520297]
  - [nfs] fix cache invalidation problems in nfs_readdir (Jeff Layton ) [526960 511170]
  - [net] tc: fix unitialized kernel memory leak (Jiri Pirko ) [520994 520863]


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.2.1.el5]
changelog:
  - [x86_64] kvm: bound last_kvm to prevent backwards time (Glauber Costa ) [524527 524076]
  - [x86] kvm: fix vsyscall going backwards (Glauber Costa ) [524527 524076]
  - [misc] fix RNG to not use first generated random block (Neil Horman ) [523289 522860]
  - [x86] kvm: mark kvmclock_init as cpuinit (Glauber Costa ) [524151 523450]
  - [x86_64] kvm: allow kvmclock to be overwritten (Glauber Costa ) [524150 523447]
  - [x86] kvmclock: fix bogus wallclock value (Glauber Costa ) [524152 519771]
  - [scsi] scsi_dh_rdace: add more sun hardware (mchristi@redhat.com ) [523237 518496]
  - [misc] cprng: fix cont test to be fips compliant (Neil Horman ) [523290 523259]
  - [net] bridge: fix LRO crash with tun (Andy Gospodarek ) [522636 483646]
  - Revert: [x86_64] fix gettimeoday TSC overflow issue - 1 (Don Zickus ) [489847 467942]
  - Revert: [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}


author: Jiri Pirko <jpirko@redhat.com> [2.6.18-164.1.1.el5]
changelog:
  - [net] sky2: revert some phy power refactoring changes (Neil Horman ) [517976 509891]
  - [net] atalk/irda: memory leak to user in getname (Danny Feng ) [519309 519310] {CVE-2009-3001 CVE-2009-3002}
  - [x86_64] fix gettimeoday TSC overflow issue - 1 (Prarit Bhargava ) [489847 467942]
  - [md] prevent crash when accessing suspend_* sysfs attr (Danny Feng ) [518135 518136] {CVE-2009-2849}
  - [nfs] nlm_lookup_host: don't return invalidated nlm_host (Sachin S. Prabhu ) [517967 507549]
  - [net] bonding: tlb/alb: set active slave when enslaving (Jiri Pirko ) [517971 499884]
  - [nfs] r/w I/O perf degraded by FLUSH_STABLE page flush (Peter Staubach ) [521244 498433]
  - [SELinux] allow preemption b/w transition perm checks (Eric Paris ) [520919 516216]
  - [scsi] scsi_transport_fc: fc_user_scan correction (David Milburn ) [521239 515176]
  - [net] tg3: refrain from touching MPS (John Feeney ) [521241 516123]
  - [net] qlge: fix hangs and read performance (Marcus Barrow ) [519783 517893]
  - [scsi] qla2xxx: allow use of MSI when MSI-X disabled (Marcus Barrow ) [519782 517922]
  - [net] mlx4_en fix for vlan traffic (Doug Ledford ) [520906 514141]
  - [net] mlx4_core: fails to load on large systems (Doug Ledford ) [520908 514147]
  - [x86] disable kvmclock by default (Glauber Costa ) [520685 476075]
  - [x86] disable kvmclock when shuting the machine down (Glauber Costa ) [520685 476075]
  - [x86] re-register clock area in prepare_boot_cpu (Glauber Costa ) [520685 476075]
  - [x86] kvmclock smp support (Glauber Costa ) [520685 476075]
  - [x86] use kvm wallclock (Glauber Costa ) [520685 476075]
  - [x86_64] kvm clocksource's implementation (Glauber Costa ) [520685 476075]
  - [x86] kvm: import kvmclock.c (Glauber Costa ) [520685 476075]
  - [x86] kvm: import pvclock.c and headers (Glauber Costa ) [520685 476075]
  - [x86] export additional cpu flags in /proc/cpuinfo (Prarit Bhargava ) [520686 517928]
  - [x86] detect APIC clock calibration problems (Prarit Bhargava ) [521238 503957]
  - [x86] pnpacpi: fix serial ports on IBM Point-of-Sale HW (Kevin Monroe ) [520905 506799]


author: Don Zickus <dzickus@redhat.com> [2.6.18-164.el5]
changelog:
  - [misc] information leak in sigaltstack (Vitaly Mayatskikh ) [515396]
  - [misc] execve: must clear current->clear_child_tid (Oleg Nesterov ) [515429]
  - [net] igb: set lan id prior to configuring phy (Stefan Assmann ) [508870]
  - [net] udp: socket NULL ptr dereference (Vitaly Mayatskikh ) [518043] {CVE-2009-2698}


author: Don Zickus <dzickus@redhat.com> [2.6.18-161.el5]
changelog:
  - [dlm] free socket in error exit path (David Teigland ) [508829]
  - [net] tg3: fix concurrent migration of VM clients (John Feeney ) [511918]
  - [scsi] mptfusion: revert to pci_map (Tomas Henzl ) [514049]
  - [scsi] bnx2i: fix conn disconnection bugs (mchristi@redhat.com ) [513802]
  - [scsi] qla2xxx: unable to destroy npiv HBA ports (Marcus Barrow ) [514352]
  - [scsi] ALUA: send STPG if explicit and implicit (mchristi@redhat.com ) [482737]
  - [scsi] megaraid: fix the tape drive issue (Tomas Henzl ) [510665]
  - [scsi] cxgb3i: fix skb allocation (mchristi@redhat.com ) [514073]
  - [fs] __bio_clone: don't calculate hw/phys segment counts (Milan Broz ) [512387]
  - [fs] ecryptfs: check tag 11 packet data buffer size (Eric Sandeen ) [512863] {CVE-2009-2406}
  - [fs] ecryptfs: check tag 3 packet encrypted key size (Eric Sandeen ) [512887] {CVE-2009-2407}
  - [xen] amd iommu: crash with pass-through on large memory (Bhavna Sarathy ) [514910]


author: Don Zickus <dzickus@redhat.com> [2.6.18-160.el5]
changelog:
  - [scsi] mptsas: fix max_id initialization (mchristi@redhat.com ) [455678]
  - [ata] ahci: add IDs for Ibex Peak ahci controllers (David Milburn ) [513067]
  - [scsi] lpfc: update to 8.2.0.48.2p, fix multiple panics (Rob Evers ) [512266]
  - [gfs2] remove dcache entries for remote deleted inodes (Benjamin Marzinski ) [505548]
  - [alsa] add native support for IbexPeak audio (Jaroslav Kysela ) [509526]
  - [alsa] IbexPeak related patches for codec auto-config (Jaroslav Kysela ) [509526]
  - [scsi] cciss: call bus_unregister in cciss_remove_one (Rob Evers ) [513070]
  - [scsi] cciss: add driver sysfs entries (Rob Evers ) [513070]
  - [net] e1000e/igb: make sure wol can be configured (Andy Gospodarek ) [513032]
  - [fs] xfs: only compile for x86_64 (Eric Sandeen ) [512827]
  - [ahci] add SATA GEN3 related messages (David Milburn ) [512086]
  - [net] tun/tap: open /dev/net/tun and then poll() it fix (Danny Feng ) [512286] {CVE-2009-1897}
  - [net] mlx4_en: problem with LRO that segfaults KVM host (Doug Ledford ) [510789]
  - [openib] mthca: fix over sized kmalloc usage (Doug Ledford ) [508902]
  - [s390] zcrypt: request gets timed out under high load (Hans-Joachim Picht ) [511289]


author: Don Zickus <dzickus@redhat.com> [2.6.18-159.el5]
changelog:
  - [scsi] cciss: fix sysfs broken symlink regression (Rob Evers ) [510178]
  - [kabi] add consume_skb (Jon Masters ) [479200]
  - [net] ipv6: fix incorrect disable_ipv6 behavior (jolsa@redhat.com ) [512258]
  - [net] ipv6: fix BUG when disabled module is unloaded (jolsa@redhat.com ) [512258]
  - [net] ipv6: add 'disable' module parameter support (jolsa@redhat.com ) [512258]
  - Revert: [mm] fix swap race in fork-gup patch group (Larry Woodman ) [508919]
  - [scsi] mptfusion: fix OOPS in failover path (Rob Evers ) [504835]
  - [scsi] stex: minimize DMA coherent allocation (David Milburn ) [486466]
  - [misc] personality handling: fix PER_CLEAR_ON_SETID (Vitaly Mayatskikh ) [508842]
  - [misc] build with -fno-delete-null-pointer-checks (Eugene Teo ) [511181]
  - [scsi] qla2xxx: provide reset capability for EEH (Marcus Barrow ) [511141]
  - [scsi] bnx2i: fix host setup and libiscsi abort locking (mchristi@redhat.com ) [511096]
  - [xen] ia64: fix rmmod of PCI devices (Chris Lalancette ) [507520]
  - [pci] kvm: PCI FLR support for device assignment (Don Dutile ) [510805]
  - [gfs2] don't put unlikely reclaim glocks on reclaim list (Benjamin Marzinski ) [504335]


author: Don Zickus <dzickus@redhat.com> [2.6.18-158.el5]
changelog:
  - [s390] add missing kernel option CONFIG_SHARED_KERNEL (Hans-Joachim Picht ) [506947]
  - [gfs2] fix incorrent statfs_slow consistency check (Benjamin Marzinski ) [505171]
  - [net] be2net: fix msix performance regression (Andy Gospodarek ) [510008]
  - [gfs2] umount.gfs2 hangs eating CPU (Abhijith Das ) [508876]
  - [block] protect the per-gendisk partition array with rcu (Jeff Moyer ) [495866]
  - [net] igb: fix panic when assigning device to guest (Andy Gospodarek ) [507173]
  - [ia64] xen: dom0 get/set_address_size (Chris Lalancette ) [510069]
  - [x86] fix suspend/resume issue on SB800 chipset (Bhavna Sarathy ) [498135]
  - [scsi] cciss: fix spinlock (Tomas Henzl ) [509818]
  - [scsi] qla2xxx: NPIV broken for PPC, endian fix (Marcus Barrow ) [510268]
  - [scsi] qla2xxx: prevent hangs in extended error handling (Marcus Barrow ) [470510]
  - [mm] prevent softlockups in copy_hugetlb_page_range (Larry Woodman ) [508919]
  - [scsi] cxgb3i: fix vlan support (mchristi@redhat.com ) [508409]
  - [net] bnx2i: RHEL-5.4 code cleanups (mchristi@redhat.com ) [504181]
  - [x86_64] import asm/svm.h and asm/vmx.h (Eduardo Habkost ) [507483]
  - [x86_64] import asm/virtext.h (Eduardo Habkost ) [507483]
  - [x86_64] add MSR_VM_* defines (Eduardo Habkost ) [507483]
  - [x86_64] disable VMX and SVM on machine_crash_shutdown (Eduardo Habkost ) [507483]
  - [x86_64] add EFER_SVME define (Eduardo Habkost ) [507483]
  - [x86_64] define X86_CR4_VMXE (Eduardo Habkost ) [507483]
  - [net] qlge: rhel-5.4 cleanups (Marcus Barrow ) [509647]
  - [scsi] lpfc: fix ctx_idx increase and update version (Rob Evers ) [509010]
  - [scsi] lpfc: move pointer ref. inside alloc check in (Rob Evers ) [509010]
  - [scsi] lpfc: update to version 8.2.0.48 (Rob Evers ) [509010]
  - [mm] fix re-read performance regression (Josef Bacik ) [506511]
  - [net] ipsec: add missing braces to fix policy querying (Herbert Xu ) [462731]
  - [net] tg3: 5785F and 50160M support (Andy Gospodarek ) [506205]
  - [pci] intel-iommu: fix iommu address space allocation (Chris Wright ) [509207]
  - [xen] virtio: do not statically allocate root device (Mark McLoughlin ) [501468]
  - [xen] virtio: add PCI device release function (Mark McLoughlin ) [501468]
  - [misc] driver core: add root_device_register (Mark McLoughlin ) [501468]
  - [block] blktrace: fix recursive block remap tracepoint (Jason Baron ) [502573]
  - [scsi] qla2xxx: rhel-5.4 fixes and cleanups (Marcus Barrow ) [507246]
  - [xen] HV: remove high latency spin_lock (Chris Lalancette ) [459410]
  - [xen] ia64: add get/set_address_size support (Chris Lalancette ) [510069]


author: Don Zickus <dzickus@redhat.com> [2.6.18-157.el5]
changelog:
  - [mm] readv: sometimes returns less than it should (Amerigo Wang ) [500693]
  - [net] be2net: fix races in napi and interrupt handling (Andy Gospodarek ) [508839]
  - [net] be2net: fix deadlock with bonding (Andy Gospodarek ) [508871]
  - [xen] quiet printk on FV guest shutdown (Don Dutile ) [501474]
  - [fs] fuse: enable building the subsystem (Josef Bacik ) [457975]
  - [gfs2] fix panic in glock memory shrinker (Benjamin Marzinski ) [508806]
  - [net] rt2x00: use mac80211-provided workqueue (John W. Linville ) [506845]
  - [pci] quirk: disable MSI on VIA VT3364 chipsets (Dean Nelson ) [501374]
  - [net] undo vlan promiscuity count when unregistered (Neil Horman ) [481283]
  - [net] be2net: crash on PPC with LRO and jumbo frames (Andy Gospodarek ) [508404]
  - [net] RTNL: assertion failed due to bonding notify (Stanislaw Gruszka ) [508297]
  - [scsi] ibmvfc: process async events before cmd responses (AMEET M. PARANJAPE ) [508127]
  - [scsi] ibmvfc: fix endless PRLI loop in discovery (AMEET M. PARANJAPE ) [508127]
  - [scsi] ibmvfc: improve LOGO/PRLO ELS handling (AMEET M. PARANJAPE ) [508127]
  - [net] iucv: provide second per-cpu cmd parameter block (Hans-Joachim Picht ) [503240]
  - [net] sky2: /proc/net/dev statistics are broken (Flavio Leitner ) [507932]
  - [scsi] qla2xxx: prevent I/O stoppage (Marcus Barrow ) [507620]
  - [scsi] qla2xxx: updates 24xx firmware to 4.04.09 (Marcus Barrow ) [507398]
  - [scsi] qla2xxx: updates 25xx firmware to 4.04.09 (Marcus Barrow ) [507398]
  - [scsi] qla4xxx: extended sense data errors, cleanups (Marcus Barrow ) [506981]
  - [char] tty: prevent an O_NDELAY writer from blocking (Mauro Carvalho Chehab ) [506806]
  - [xen] allow msi reconfigure for pt_bind_irq (ddugger@redhat.com ) [507970]


author: Don Zickus <dzickus@redhat.com> [2.6.18-156.el5]
changelog:
  - [misc] kdump: make mcp55 chips work (Neil Horman ) [462519]
  - [ide] enable VX800 to use UDMA mode (John Feeney ) [504121]
  - [misc] wacom: reset state when tool is not in proximity (Aristeu Rozanski ) [499870]
  - [scsi] lpfc: update to version 8.2.0.46 (Rob Evers ) [506792]
  - [mm] prevent panic in copy_hugetlb_page_range (Larry Woodman ) [507860]
  - [gfs2] keep statfs info in sync on grows (Benjamin Marzinski ) [494885]
  - [gfs2] always queue work after after setting GLF_LOCK (Benjamin Marzinski ) [506140]
  - [scsi] cxgb3i: use kref to track ddp, support page sizes (mchristi@redhat.com ) [506151]
  - [security] drop mmap_min_addr to 4096 (Eric Paris ) [507017]
  - [misc] hrtimer: fix a soft lockup (Amerigo Wang ) [418071] {CVE-2007-5966}
  - [net] backport net_rx_action tracepoint (Neil Horman ) [506138]
  - [gfs2] fix truncate buffered/direct I/O issue (Steven Whitehouse ) [504676]
  - [xen] x86: fix IRQ problem on legacy hardware (ddugger@redhat.com ) [505491]
  - [xen] disable 2MB support on PAE kernels (Bhavna Sarathy ) [503737]


author: Don Zickus <dzickus@redhat.com> [2.6.18-155.el5]
changelog:
  - [mm] fix swap race condition in fork-gup-race patch (Andrea Arcangeli ) [506684]
  - [net] e1000e: stop unnecessary polling when using msi-x (Andy Gospodarek ) [506841]


author: Don Zickus <dzickus@redhat.com> [2.6.18-154.el5]
changelog:
  - [kABI] add smp_send_reschedule and get_user_pages_fast (Jon Masters ) [504038]
  - [scsi] lpfc: update to version 8.2.0.45 (Rob Evers ) [505445]
  - [fs] ext4: fix prealloc vs truncate corruption (Eric Sandeen ) [505601]
  - [net] r8169: fix crash when large packets are received (Ivan Vecera ) [504732] {CVE-2009-1389}
  - [pci] fix pcie save restore patch (Don Dutile ) [505541]
  - [scsi] ibmvscsi: add 16 byte CDB support (AMEET M. PARANJAPE ) [502944]
  - [infiniband] iw_cxgb3: add final fixups for 1.4.1 (Doug Ledford ) [504906]
  - [infiniband] mlx4_en: hand remove XRC support (Doug Ledford ) [506097]
  - [infiniband] cxgb3: update firmware from 7.1 to 7.4 (Doug Ledford ) [504955]
  - [infiniband] ofed: backports from ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] RDS: Update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] mthca: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [net] cxgb3: support two new phys and page mapping fix (Doug Ledford ) [504955]
  - [infiniband] ipoib/sdp: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] OFED: back out XRC patch, not ready yet (Doug Ledford ) [506097]
  - [infiniband] mlx4_en: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] iw_nes: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] OFED: fix broken switch statement (Doug Ledford ) [506097]
  - [infiniband] OFED: removes this backport and all callers (Doug Ledford ) [506097]
  - [infiniband] iw_cxgb3: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] mlx4_ib: update to ofed 1.4.1 final bits (Doug Ledford ) [506097]
  - [infiniband] remove duplicate definition (Doug Ledford ) [500368]
  - [net] be2net: add intial support (Andy Gospodarek ) [490074]
  - [net] ixgbe: backport fixups and bugfixes for 82599 (Andy Gospodarek ) [505653]
  - [md] increase pg_init_in_progress only if work is queued (Jesse Larrew ) [489582]
  - [x86_64] AMD IOMMU: fix GLX issue in bare metal (Bhavna Sarathy ) [504010]
  - [scsi] libsas: use the supplied address for SATA devices (David Milburn ) [494658]
  - [x86_64] amd iommu: fix kdump unknown partition table (Bhavna Sarathy ) [504751]
  - [char] TPM: get_event_name stack corruption (Dean Nelson ) [503905]
  - [net] e1000e: update to upstream version 1.0.2-k2 (Andy Gospodarek ) [480241]
  - [crypto] add continuous test to hw rng in FIPS mode (Neil Horman ) [504218]
  - [net] ehea: fix invalid pointer access (AMEET M. PARANJAPE ) [504679]
  - [x86_64] amd iommu: fix spinlock imbalance (Bhavna Sarathy ) [501571]
  - [x86_64] iommu: protect against broken IVRS ACPI table (Bhavna Sarathy ) [501571]
  - [x86_64] amd iommu: fix flag masks (Bhavna Sarathy ) [501571]
  - [x86_64] iommu: fix the handling of device aliases (Bhavna Sarathy ) [501571]
  - [x86_64] amd iommu: fix an off-by-one error (Bhavna Sarathy ) [501571]
  - [xen] x86: give dom0 access to machine e820 map (ddugger@redhat.com ) [503818]
  - [pci] fix sr-iov regression with PCI device class (ddugger@redhat.com ) [503826]
  - [scsi] qla4xxx: extended sense data errors (Marcus Barrow ) [489389]
  - [scsi] qla4xxx: remove some dead code (Marcus Barrow ) [459449]
  - [net] qla2xxx, ql8xxx : support for 10 GigE (Marcus Barrow ) [479288]


author: Don Zickus <dzickus@redhat.com> [2.6.18-153.el5]
changelog:
  - [s390x] zfcpdump: move zfcpdump kernel removal to %post (Don Zickus ) [499629]
  - [x86_64] kvm: fix libvirt based device assignment issue (Bhavna Sarathy ) [504165]
  - [gfs2] get gfs2meta superblock correctly (Benjamin Marzinski ) [504086]
  - [ptrace] fix do_coredump vs ptrace_start() deadlock (Oleg Nesterov ) [504157] {CVE-2009-1388}
  - [scsi] ipr: fix PCI permanent error handler (AMEET M. PARANJAPE ) [503960]
  - [scsi] IPR: adapter taken offline after first EEH error (AMEET M. PARANJAPE ) [504675]
  - [scsi] lpfc: update to version 8.2.0.44 (Rob Evers ) [503248]
  - [net] skb_seq_read: wrong offset/len for page frag data (mchristi@redhat.com ) [501308]
  - [xen] netback: change back to a flipping interface (Chris Lalancette ) [479754]
  - [fs] autofs4: remove hashed check in validate_wait (Ian Kent ) [490078]
  - [ppc64] resolves issues with pcie-save-restore-state (AMEET M. PARANJAPE ) [504198]
  - [net] gso: stop fraglists from escaping (Herbert Xu ) [499347]
  - [tun] use non-linear packets where possible (Herbert Xu ) [503309]
  - [net] skb_copy_datagram_from_iovec (Herbert Xu ) [503309]
  - [net] tun: only wake up writers (Herbert Xu ) [503191]
  - Re-apply: [net] tun: add packet accounting (Don Zickus ) [495863]
  - [sched] fix cond_resched_softirq() offset (Jesse Larrew ) [496935]
  - [ata] sata_sx4: fixup interrupt and exception handling (David Milburn ) [503827]
  - Revert: [net] avoid extra wakeups in wait_for_packet (Don Zickus ) [497897]
  - [net] e1000: fix skb_over_panic (Neil Horman ) [503441] {CVE-2009-1385}


author: Don Zickus <dzickus@redhat.com> [2.6.18-152.el5]
changelog:
  - [x86_64] kvm: export symbols to allow building (john cooper ) [504038]
  - [misc] s390 zfcpdump: check for another image on removal (Hans-Joachim Picht ) [499629]
  - [net] ixgbe: fix MSI-X allocation on 8+ core systems (Andy Gospodarek ) [500857]
  - [s390] dasd: add EMC ioctl to the driver (Christoph Hellwig ) [461288]
  - [net] ixgbe: fix polling saturates CPU (Andy Gospodarek ) [503559]
  - [misc] core dump: wrong thread info in core dump file (Amerigo Wang ) [503553]
  - [crypto] testmgr: check all test vector lengths (Jarod Wilson ) [503091]
  - [net] igb and igbvf: return from napi poll correctly (Andy Gospodarek ) [503215]
  - [crypto] testmgr: dynamically allocate xbuf and axbuf (Jarod Wilson ) [503091]
  - [fs] vfs: skip I_CLEAR state inodes in drop_pagecache_sb (Eric Sandeen ) [500164]
  - Revert: [net] tun: add packet accounting (Herbert Xu ) [495863]
  - [net] netxen: add GRO Support (Herbert Xu ) [499347]
  - [nfs] v4: 'r'/'w' perms for user do not work on client (Peter Staubach ) [502244]
  - [x86] nmi: add Intel cpu 0x6f4 to perfctr1 workaround (Prarit Bhargava ) [500892]
  - [dm] raid45 target: kernel oops in constructor (Heinz Mauelshagen ) [503070]
  - [net] sky2: fix sky2 stats (Neil Horman ) [503080]
  - [acpi] check _PSS frequency to prevent cpufreq crash (Prarit Bhargava ) [500311]
  - [scsi] mvsas: sync w/ appropriate upstream changes (Rob Evers ) [485126]
  - [scsi] mvsas: comment cleanup (Rob Evers ) [485126]
  - [scsi] mvsas: correct bit-map implementation (Rob Evers ) [485126]
  - [scsi] mvsas: initial patch submission (Rob Evers ) [485126]
  - [net] add broadcom cnic driver (mchristi@redhat.com ) [441979]
  - [scsi] add bnx2i iscsi driver (mchristi@redhat.com ) [441979]
  - [scsi] add netlink msg to iscsi IF to support offload (mchristi@redhat.com ) [441979]
  - [misc] add UIO framework from upstream (mchristi@redhat.com ) [441979]
  - [net] add cnic support to bnx2 (mchristi@redhat.com ) [441979]
  - [powerpc] pass the PDN to check_msix_entries (AMEET M. PARANJAPE ) [502906]
  - [fs] proc: avoid info leaks to non-privileged processes (Amerigo Wang ) [499541]
  - [net] ixgbe: add GRO suppport (Herbert Xu ) [499347]
  - [net] igb: add GRO suppport (Herbert Xu ) [499347]
  - [net] cxgb3: add GRO suppport (Herbert Xu ) [499347]
  - [net] vlan: add GRO interfaces (Herbert Xu ) [499347]
  - [net] tcp6: add GRO support (Herbert Xu ) [499347]
  - [net] ipv6: add GRO support (Herbert Xu ) [499347]
  - [net] ethtool: add GGRO and SGRO ops (Herbert Xu ) [499347]
  - [net] tcp: add GRO support (Herbert Xu ) [499347]
  - [net] add skb_gro_receive (Herbert Xu ) [499347]
  - [net] ipv4: add GRO infrastructure (Herbert Xu ) [499347]
  - [net] add Generic Receive Offload infrastructure (Herbert Xu ) [499347]
  - [net] add frag_list support to GSO (Herbert Xu ) [499347]
  - [net] add frag_list support to skb_segment (Herbert Xu ) [499347]
  - [net] skbuff: add skb_release_head_state (Herbert Xu ) [499347]
  - [net] skbuff: merge code copy_skb_header and skb_clone (Herbert Xu ) [499347]
  - [netfilter] nf_conntrack: add __nf_copy to copy members (Herbert Xu ) [499347]
  - [net] skbuff: add skb_cow_head (Herbert Xu ) [499347]
  - [net] netpoll: backport netpoll_rx_on (Herbert Xu ) [499347]
  - [net] gro: Optimise Ethernet header comparison (Herbert Xu ) [499347]
  - [net] backport csum_replace4/csum_replace2 (Herbert Xu ) [499347]
  - [net] backport csum_unfold without sparse annotations (Herbert Xu ) [499347]
  - [net] sky2: fix eeprom reads (Neil Horman ) [501050]
  - [nfs] v4: client handling of MAY_EXEC in nfs_permission (Peter Staubach ) [500302] {CVE-2009-1630}
  - [net] forcedeth: restore power up snippet (Ivan Vecera ) [479740]
  - [md] dm: I/O failures when running dm-over-md with xen (Mikulas Patocka ) [223947]
  - [selinux] warn on nfs mounts with same SB but diff opts (Eric Paris ) [466701]


author: Don Zickus <dzickus@redhat.com> [2.6.18-151.el5]
changelog:
  - [alsa] hda: improve init for ALC262_HP_BPC model (Jaroslav Kysela ) [473949]
  - [ppc] LPAR hang on multipath device with FCS v2 (AMEET M. PARANJAPE ) [498927]
  - [fs] nfsd: fix setting the nfsv4 acls (Steve Dickson ) [403021]
  - [scsi] fnic: compile on x86 too (mchristi@redhat.com ) [501112]
  - [net] avoid extra wakeups in wait_for_packet (Neil Horman ) [497897]
  - [x86] xen: fix local denial of service (Chris Lalancette ) [500951]
  - [scsi] ibmvfc: wait on adapter init before starting scan (AMEET M. PARANJAPE ) [501560]
  - [net] bnx2x: update to 1.48.105 (Stanislaw Gruszka ) [475481]
  - [xen] add Credit Scheduler Fairness and hard virt (Justin M. Forbes ) [432700]
  - [xen] deadlock between libvirt and xentop (Miroslav Rezanina ) [499013]
  - [xen] sched: remove printk introduced with hard virt (Justin M. Forbes ) [501475]


author: Don Zickus <dzickus@redhat.com> [2.6.18-150.el5]
changelog:
  - [kabi] add cmirror symbols to kABI (Jon Masters ) [500745]
  - Revert: [sched] accurate task runtime accounting (Linda Wang ) [297731] {CVE-2007-3719}
  - [alsa] hda: add missing comma in ad1884_slave_vols (Jeff Burke ) [500626]
  - [x86] remove xtime_lock from time_cpufreq_notifier (Prarit Bhargava ) [501178]
  - [fs] cifs: fix pointer and checks in cifs_follow_symlink (Jeff Layton ) [496577] {CVE-2009-1633}
  - [fs] ext4: corruption fixes (Eric Sandeen ) [501082]
  - [lockdep] don't omit lock_set_subclass (Aristeu Rozanski ) [462248]
  - [ppc] cell: make ptcal more reliable (AMEET M. PARANJAPE ) [501356]
  - [x86] include asm-x86_64 in i686-devel package (Don Zickus ) [491775]
  - [misc] compile: add -fwrapv to gcc CFLAGS (Don Zickus ) [491266]
  - [trace] mm: eliminate extra mm tracepoint overhead (Larry Woodman ) [501013]
  - [dlm] use more NOFS allocation (Abhijith Das ) [460218]
  - [dlm] connect to nodes earlier (Abhijith Das ) [460218]
  - [wireless] mac80211: freeze when ath5k IF brought down (Michal Schmidt ) [499999]
  - [audit] watch: fix removal of AUDIT_DIR rule on rmdir (Alexander Viro ) [501321]
  - [trace] sunrpc: adding trace points to status routines v2 (Steve Dickson ) [499008]
  - [misc] random: make get_random_int more random (Amerigo Wang ) [499776]
  - [md] retry immediate in 2 seconds (Jesse Larrew ) [489582]
  - [scsi] retry for NOT_READY condition (Jesse Larrew ) [489582]
  - [md] handle multiple paths in pg_init (Jesse Larrew ) [489582]
  - [scsi] fix compilation error (Jesse Larrew ) [489582]
  - [scsi] add LSI storage IDs (Jesse Larrew ) [489582]
  - [scsi] handle quiescence in progress (Jesse Larrew ) [489582]
  - [scsi] retry IO on unit attention (Jesse Larrew ) [489582]
  - [scsi] handle unit attention in mode select (Jesse Larrew ) [489582]
  - [scsi] make the path state active by default (Jesse Larrew ) [471426]
  - [scsi] Retry mode select in rdac device handler (Jesse Larrew ) [489582]


author: Don Zickus <dzickus@redhat.com> [2.6.18-149.el5]
changelog:
  - [acpi] updated dock driver for RHEL-5.4 (Matthew Garrett ) [485181]
  - [infiniband] ib_core: use weak ordering for user memory (AMEET M. PARANJAPE ) [501004]
  - [mm] fork-o_direct-race v3 (aarcange@redhat.com ) [471613]
  - [nfs] make nfsv4recoverydir proc file readable (Evan McNabb ) [499840]
  - [pci] remove pci-stub driver from -xen kernels (Don Dutile ) [500568]
  - [pci] IOMMU phys_addr cleanup (Don Dutile ) [500901]
  - [pci] missed fix to pci_find_upstream_pcie_bridge (Don Dutile ) [500901]
  - [misc] IOMMU MSI header cleanup (Don Dutile ) [500901]
  - [scsi] megaraid: update megasas to 4.08-RH1 (Tomas Henzl ) [475574]
  - [fs] nfs: fix an f_mode/f_flags confusion in write.c (Jeff Layton ) [490181]
  - [fs] cifs: renaming don't try to unlink negative dentry (Jeff Layton ) [500839]
  - [fs] cifs: fix error handling in parse_DFS_referrals (Jeff Layton ) [496577] {CVE-2009-1633}
  - [scsi] aacraid: update to 1.1.5-2461 (Rob Evers ) [475559]
  - [md] dm raid45: don't clear the suspend flag on recovery (Heinz Mauelshagen ) [499406]
  - [net] cxgb3: update driver for RHEL-5.4 (mchristi@redhat.com ) [439518]
  - [scsi] add cxgb3i iscsi driver (mchristi@redhat.com ) [439518]
  - [scsi] port upstream offload code to RHEL-5.4 (mchristi@redhat.com ) [439518]
  - [scsi] force retry of IO when port/session is changing (mchristi@redhat.com ) [498281]
  - [net] igbvf: new driver, support 82576 virtual functions (Andy Gospodarek ) [480524]
  - [net] ehea: fix circular locking problem (AMEET M. PARANJAPE ) [493359]
  - [s390] appldata: vtimer bug with cpu hotplug (Hans-Joachim Picht ) [497207]


author: Don Zickus <dzickus@redhat.com> [2.6.18-147.el5]
changelog:
  - Revert: [scsi] marvell sas: initial patch submission (Rob Evers ) [485126]
  - Revert: [scsi] marvell sas: correct bit-map implementation (Rob Evers ) [485126]
  - Revert: [scsi] marvell sas: comment cleanup (Rob Evers ) [485126]
  - [misc] FIPS: create checksum for verification at bootup (Don Zickus ) [444632]
  - [md] dm: raid45 target oops on mapping table reload (Heinz Mauelshagen ) [500387]
  - [md] dm: raid45 target doesn't create parity as expected (Heinz Mauelshagen ) [499406]
  - [net] igb: correctly free multiqueue netdevs (Andy Gospodarek ) [500446]
  - [misc] lockdep: fix large lock subgraph traversal (Aristeu Rozanski ) [462248]
  - [crypto] make tcrypt stay loaded on success (Jarod Wilson ) [499646]
  - [crypto] block use of non-fips algs in fips mode (Jarod Wilson ) [499646]
  - [crypto] mark algs allowed in fips mode (Jarod Wilson ) [499646]
  - [x86_64] 32-bit ptrace emulation mishandles 6th arg (Jiri Olsa ) [495125]
  - [fs] cifs: buffer overruns when converting strings (Jeff Layton ) [496577]
  - [scsi] lpfc: update from version 8.2.0.41 to 8.2.0.43 (Rob Evers ) [498524]
  - [cpufreq] xen: powernow identifies wrong number of procs (Miroslav Rezanina ) [456437]
  - [scsi] MPT fusion: remove annoying debug message v2 (Tomas Henzl ) [475455]
  - [scsi] MPT fusion: make driver legacy I/O port free v2 (Tomas Henzl ) [475451]
  - [scsi] MPT fusion: update version 3.04.07rh v2 (Tomas Henzl ) [475455]
  - [ia64] fix regression in nanosleep syscall (Prarit Bhargava ) [499289]
  - [md] s390: I/O stall when performing random CHPID off/on (Mikulas Patocka ) [500729]
  - [crypto] add hmac and hmac(sha512) test vectors (Jarod Wilson ) [499463]
  - [sched] accurate task runtime accounting (Peter Zijlstra ) [297731] {CVE-2007-3719}
  - [sched] rq clock (Peter Zijlstra ) [297731] {CVE-2007-3719}
  - [x86] scale cyc_2_nsec according to CPU frequency (Peter Zijlstra ) [297731] {CVE-2007-3719}
  - [i386] untangle xtime_lock vs update_process_times (Peter Zijlstra ) [297731] {CVE-2007-3719}
  - [x86_64] clean up time.c (Peter Zijlstra ) [297731] {CVE-2007-3719}
  - [net] tun: add packet accounting (Herbert Xu ) [495863]
  - [kabi] add pcie_set_readrq (Jon Masters ) [479200]
  - [kabi] add Kernel Virtual Machine kABI symbols (Jon Masters ) [466961]
  - [crypto] add ctr test vectors (Jarod Wilson ) [497888]
  - [crypto] print self-test success notices in fips mode (Jarod Wilson ) [497885]
  - [mm] fork vs fast gup race fix (Andrea Arcangeli ) [471613]
  - [mm] support for lockless get_user_pages (aarcange@redhat.com ) [474913]
  - Revert: [mm] fork vs gup race fix (aarcange@redhat.com ) [471613]
  - [net] r8169: reset IntrStatus after chip reset (Ivan Vecera ) [500740]
  - Revert: [net] forcedeth: power down phy when IF is down (Ivan Vecera ) [479740]
  - [misc] add AMD IOMMU support to KVM (Bhavna Sarathy ) [481026]
  - [misc] VT-d: backport of Intel VT-d support to RHEL5 (Don Dutile ) [480411]
  - [misc] VT-d: add clflush_cache_range function (Don Dutile ) [480411]
  - [misc] VT-d: add DMAR-related timeout definition (Don Dutile ) [480411]
  - [misc] VT-d: add DMAR ACPI table support (Don Dutile ) [480411]
  - [misc] VT-d: add pci_find_upstream_pcie_bridge (Don Dutile ) [480411]
  - [misc] VT-d: move common MSI defines to msi.h (Don Dutile ) [480411]
  - [trace] blk tracepoints (Arnaldo Carvalho de Melo ) [493454]
  - [pci] enable CONFIG_PCI_IOV (ddugger@redhat.com ) [493152]
  - [pci] save and restore PCIe 2.0 registers (ddugger@redhat.com ) [493152]
  - [pci] restore PCI-E capability registers after PM event (ddugger@redhat.com ) [493152]
  - [pci] add SR-IOV API for Physical Function driver (ddugger@redhat.com ) [493152]
  - [pci] centralize device setup code (ddugger@redhat.com ) [493152]
  - [pci] reserve bus range for SR-IOV device (ddugger@redhat.com ) [493152]
  - [pci] restore saved SR-IOV state (ddugger@redhat.com ) [493152]
  - [pci] initialize and release SR-IOV capability (ddugger@redhat.com ) [493152]
  - [pci] add a new function to map BAR offsets (ddugger@redhat.com ) [493152]
  - [pci] allow pci_alloc_child_bus to handle a NULL bridge (ddugger@redhat.com ) [493152]
  - [pci] enhance pci_ari_enabled (ddugger@redhat.com ) [493152]
  - [pci] fix ARI code to be compatible with mixed systems (ddugger@redhat.com ) [493152]
  - [pci] support PCIe ARI capability (ddugger@redhat.com ) [493152]
  - [pci] export __pci_read_base (ddugger@redhat.com ) [493152]
  - [pci] fix 64-vbit prefetchable memory resource BARs (ddugger@redhat.com ) [493152]
  - [pci] handle 64-bit resources better on 32-bit machines (ddugger@redhat.com ) [493152]
  - [pci] rewrite PCI BAR reading code (ddugger@redhat.com ) [493152]
  - [xen] add Credit Scheduler Fairness and hard virt (Justin M. Forbes ) [432700]
  - [xen] x86_64: add 1GB page table support (Bhavna Sarathy ) [251982]


author: Don Zickus <dzickus@redhat.com> [2.6.18-146.el5]
changelog:
  - [fs] vfs freeze: use vma->v_file to get to superblock (Eric Sandeen ) [476148]
  - [net] tg3: allow 5785 to work when running at 10Mbps (Andy Gospodarek ) [469772]
  - [net] af_iucv: race when queuing incoming iucv messages (Hans-Joachim Picht ) [499626]
  - [trace] sunrpc: adding trace points to status routines (Steve Dickson ) [499008]
  - [gfs2] fix glock ref count issue (Steven Whitehouse ) [485098]
  - [kabi] add acpi_bus_register_driver (Jon Masters ) [462911]
  - [kabi] add nobh_truncate_page and kernel_read (Jon Masters ) [497276]
  - [usb] support Huawei's mode switch in kernel (Pete Zaitcev ) [485182]
  - [scsi] ibmvscsi: LPAR hang on a multipath device (AMEET M. PARANJAPE ) [498927]
  - [wireless] mac80211: scanning related fixes (John W. Linville ) [498719]
  - [fs] ecryptfs: remove ecryptfs_unlink_sigs warnings (Eric Sandeen ) [499171]
  - [fs] ext4: re-fix warning on x86 build (Eric Sandeen ) [499202]
  - [ppc64] adjust oprofile_cpu_type detail (AMEET M. PARANJAPE ) [496709]
  - [nfs] SELinux can copy off the top of the stack (Eric Paris ) [493144]
  - [xen] x86: explicitly zero CR[1] in getvcpucontext (Miroslav Rezanina ) [494876]
  - [xen] x86: fix overflow in the hpet code (Rik van Riel ) [449346]
  - [xen] x86: fixes to the 'no missed-tick accounting' code (Rik van Riel ) [449346]
  - [xen] introduce 'no missed-tick accounting' (Rik van Riel ) [449346]
  - [xen] x86: misc fixes to the timer code (Rik van Riel ) [449346]
  - [xen] x86: initialize vlapic->timer_last_update (Rik van Riel ) [449346]


author: Don Zickus <dzickus@redhat.com> [2.6.18-145.el5]
changelog:
  - [ia64] xen: switch from flipping to copying interface (Chris Lalancette ) [479754]
  - [scsi] fnic: init retry counter (Mike Christie ) [484438]
  - [misc] add some long-missing capabilities to CAP_FS_MASK (Eric Paris ) [499076 497272] {CVE-2009-1072}
  - [crypto] add ansi_cprng test vectors (Jarod Wilson ) [497891]
  - [crypto] add rng self-test infra (Jarod Wilson ) [497891]
  - [md] bitmap merge feature (Doug Ledford ) [481226]
  - [md] fix lockup on read error (Doug Ledford ) [465781]
  - [md] dm-raid45: corrupt data and premature end of synch (Heinz Mauelshagen ) [480733 479383]
  - [fs] generic freeze ioctl interface (Eric Sandeen ) [476148]
  - [scsi] add mpt2sas driver (Tomas Henzl ) [475665]
  - [misc] kprobes: fix deadlock issue (John Villalovos ) [210555]
  - [block] disable iostat collection in gendisk (Jerome Marchand ) [484158]
  - [block] fix request flags (Jerome Marchand ) [484158]
  - [misc] fix blktrace api breakage (Hans-Joachim Picht ) [475334]
  - [fs] fuse: update for RHEL-5.4 (Josef Bacik ) [457975]


author: Don Zickus <dzickus@redhat.com> [2.6.18-144.el5]
changelog:
  - Revert: [scsi] MPT Fusion: update to version 3.04.07rh (Tomas Henzl ) [475455]
  - Revert: [scsi] make fusion MPT driver legacy I/O port free (Tomas Henzl ) [475451]
  - Revert: [scsi] MPT fusion: remove annoying debug message (Tomas Henzl ) [475455]
  - [openib] ehca: fix performance during creation of QPs (AMEET M. PARANJAPE ) [498527]
  - [scsi] qla4xxx: fix driver fault recovery (Marcus Barrow ) [497478]
  - [misc] make bus_find_device more robust, match upstream (Don Dutile ) [492488]
  - [md] dm snapshot: refactor __find_pending_exception (Mikulas Patocka ) [496100]
  - [md] race conditions in snapshots (Mikulas Patocka ) [496100]
  - [md] dm-raid1: switch read_record from kmalloc to slab (Mikulas Patocka ) [496101]
  - [md] dm-raid1/mpath: partially completed request crash (Mikulas Patocka ) [496101]
  - [md] snapshot: store damage (Mikulas Patocka ) [496102]
  - [scsi] cciss: change in discovering memory bar (Tomas Henzl ) [474392]
  - [scsi] cciss: version change for RHEL-5.4 (Tomas Henzl ) [474392]
  - [scsi] cciss: thread to detect config changes on MSA2012 (Tomas Henzl ) [474392]
  - [scsi] cciss: changes in config functions (Tomas Henzl ) [474392]
  - [openib] update all the backports for the code refresh (Doug Ledford ) [476301]
  - [openib] add support for XRC queues (Doug Ledford ) [476301]
  - [openib] RDS: add the RDS protocol (Doug Ledford ) [477065]
  - [openib] IPoIB: update to OFED 1.4.1-rc3 (Doug Ledford ) [434779 466086]
  - [openib] SRP: update to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] SDP: update to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] qlgc_vnic: update to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] cxgb3: update driver to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] iw_nes: update NES iWARP to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] mthca: update driver to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] ipath: update driver to OFED 1.4.1-rc3 (Doug Ledford ) [230035 480696]
  - [openib] ehca: update driver for RHEL-5.4 (Doug Ledford ) [466086]
  - [openib] core: disable lock dep annotation (Don Zickus ) [476301]
  - [openib] core: update core code to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] rmda: update rdma headers to OFED 1.4.1-rc3 (Doug Ledford ) [476301]
  - [openib] mlx4: Update mlx4_ib and mlx4_core, add mlx4_en (Doug Ledford ) [456525 477065]
  - [openib] enable mlx4_en and rds, disable iw_c2 (Doug Ledford ) [476301]
  - [mm] add tracepoints (Larry Woodman ) [493444]


author: Don Zickus <dzickus@redhat.com> [2.6.18-143.el5]
changelog:
  - [net] bonding: ignore updelay param when no active slave (Jiri Pirko ) [495318]
  - [net] ipv6: fix incoming packet length check (Jiri Pirko ) [492972]
  - [misc] drivers fix dma_get_required_mask (Tomas Henzl ) [475455]
  - [gfs2] NFSv2 support (Steven Whitehouse ) [497954]
  - [ppc64] set error_state to pci_channel_io_normal (AMEET M. PARANJAPE ) [496872]
  - [mm] allow tuning of MAX_WRITEBACK_PAGES (Larry Woodman ) [479079]
  - [trace] add 'success' to sched_wakeup/sched_wakeup_new (Jason Baron ) [497414]
  - [scsi] update iscsi layer and drivers for RHEL-5.4 (mchristi@redhat.com ) [436791 484455]
  - [crypto] fips: panic box when module validation fails (Neil Horman ) [497228]
  - [scsi] st: option to use SILI in variable block reads (Tom Coughlan ) [457970]
  - [net] bonding: support for bonding of IPoIB interfaces (Andy Gospodarek ) [430758]
  - [net] bonding: update to upstream version 3.4.0 (Andy Gospodarek ) [462632]
  - [scsi] add md3000 and md3000i entries to rdac_dev_list (John Feeney ) [487293]
  - [trace] tracepoints for page cache (KII Keiichi ) [475719]
  - [trace] tracepoints for network socket (KII Keiichi ) [475719]
  - [scsi] stex: support promise 6Gb sas raid controller (David Milburn ) [492022]
  - [scsi] add ALUA scsi device handler (mchristi@redhat.com ) [482737]
  - [scsi] update fnic fcoe driver for RHEL-5.4 (mchristi@redhat.com ) [484438]
  - [scsi] update libfc/fcoe for RHEL-5.4 (mchristi@redhat.com ) [484438]
  - [video] efifb: driver update (Brian Maly ) [488820]
  - [fs] fix softlockup in posix_locks_deadlock (Josef Bacik ) [476659]
  - [fs] cifs: unicode alignment and buffer sizing problems (Jeff Layton ) [494280] {CVE-2009-1439}
  - [mm] vmscan: bail out of direct reclaim after max pages (Rik van Riel ) [495442]
  - [crypto] add self-tests for rfc4309 (Jarod Wilson ) [472386]
  - [crypto] handle ccm dec test vectors expected to fail (Jarod Wilson ) [472386]
  - [crypto] fix rfc4309 deadlocks (Jarod Wilson ) [472386]
  - [scsi] marvell sas: comment cleanup (Rob Evers ) [485126]
  - [scsi] marvell sas: correct bit-map implementation (Rob Evers ) [485126]
  - [scsi] marvell sas: initial patch submission (Rob Evers ) [485126]
  - [acpi] CPU P-state limits ignored by OS (Stanislaw Gruszka ) [494288]
  - [net] provide a generic SIOETHTOOL ETHTOOL_GPERMADDR (Flavio Leitner ) [462352]
  - [scsi] lpfc: update to version 8.2.0.41 (Rob Evers ) [476738]
  - [scsi] lpfc: update to version 8.2.0.40 (Rob Evers ) [476738]
  - [scsi] lpfc: update to version 8.2.0.39 (Rob Evers ) [476738]
  - [scsi] lpfc: update to version 8.2.0.38 (Rob Evers ) [476738]


author: Don Zickus <dzickus@redhat.com> [2.6.18-142.el5]
changelog:
  - [net] ipv4: remove uneeded bh_lock/unlock from udp_rcv (Neil Horman ) [484590]
  - [net] ixgbe: update to upstream version 2.0.8-k2 (Andy Gospodarek ) [472547]
  - [net] igb: update to upstream version 1.3.16-k2 (Andy Gospodarek ) [484102 474881]
  - [mm] vmalloc: don't pass __GFP_ZERO to slab (Jiri Olsa ) [491685]
  - [agp] zero pages before sending to userspace (Jiri Olsa ) [497026] {CVE-2009-1192}
  - [net] e1000: enable TSO6 via ethtool with correct hw (Andy Gospodarek ) [449175]
  - [net] tg3: update to version 3.96 (Andy Gospodarek ) [481715 469772]
  - [x86] apic: rollover in calibrate_APIC_clock (Brian Maly ) [456938]
  - [alsa] handle subdevice_mask in snd_pci_quirk_lookup (Jaroslav Kysela ) [473949 483594]
  - [ia64] altix: performance degradation in PCI mode (George Beshers ) [497136]
  - [misc] I/O AT: config file changes (John Feeney ) [436048]
  - [misc] I/O AT: new ioat*.c (John Feeney ) [436048]
  - [misc] I/O AT: new dmaengine_v3.c (John Feeney ) [436048]
  - [misc] I/O AT: new include files (John Feeney ) [436048]
  - [misc] I/O AT: add drivers/dca (John Feeney ) [436048]
  - [misc] I/O AT: update network changes (John Feeney ) [436048]
  - [misc] I/O AT: update existing files (John Feeney ) [436048]
  - [misc] I/O AT: update include files (John Feeney ) [436048]
  - [mm] tweak vm diry_ratio to prevent stalls on some DBs (Larry Woodman ) [295291]
  - [nfs] setacl not working over NFS (Peter Staubach ) [496903]
  - [fs] ext4: update config options (Eric Sandeen ) [485315]
  - [fs] ext4: post-2.6.29 fixes (Eric Sandeen ) [485315]
  - [fs] backport patch for 2.6.29 ext4 (Eric Sandeen ) [485315]
  - [fs] rebase ext4 and jbd2 to 2.6.29 codebase (Eric Sandeen ) [485315 487933 487940 487944 487947] {CVE-2009-0745  CVE-2009-0746  CVE-2009-0747  CVE-2009-0748}
  - [fs] update write_cache_pages (Eric Sandeen ) [485315]
  - [fs] export set_task_ioprio (Eric Sandeen ) [485315]
  - [scsi] qla2xxx : updates and fixes from upstream, part 4 (Marcus Barrow ) [496126]
  - [scsi] MPT fusion: remove annoying debug message (Tomas Henzl ) [475455]
  - [scsi] make fusion MPT driver legacy I/O port free (Tomas Henzl ) [475451]
  - [scsi] MPT Fusion: update to version 3.04.07rh (Tomas Henzl ) [475455]
  - [x86] add MAP_STACK mmap flag (Larry Woodman ) [459321]
  - [scsi] sym53c8xx_2: fix up hotplug support (mchristi@redhat.com ) [461006]
  - [scsi] qla2xxx : updates and fixes from upstream, part 3 (Marcus Barrow ) [495094]
  - [scsi] qla2xxx : updates and fixes from upstream, part 2 (Marcus Barrow ) [495092]
  - [scsi] qla2xxx : updates and fixes from upstream, part 1 (Marcus Barrow ) [480204]
  - [nfs] memory leak when reading files wth option 'noac' (Peter Staubach ) [493045]
  - [x86] powernow-k8: export module parameters via sysfs (Prarit Bhargava ) [492010]
  - [misc] IO accounting: tgid accounting (Jerome Marchand ) [461636]
  - [misc] IO accounting: read accounting nfs fix (Jerome Marchand ) [461636]
  - [misc] IO accounting: read accounting (Jerome Marchand ) [461636]
  - [misc] IO accounting: write cancel accounting (Jerome Marchand ) [461636]
  - [misc] IO accounting: report in procfs (Jerome Marchand ) [461636]
  - [misc] IO accounting: account for direct-io (Jerome Marchand ) [461636]
  - [misc] IO accounting: set CONFIG_TASK_IO_ACCOUNTING (Jerome Marchand ) [461636]
  - [misc] IO accounting: write accounting (Jerome Marchand ) [461636]
  - [misc] IO accounting: core statistics (Jerome Marchand ) [461636]
  - [misc] IO accounting: read accounting cifs fix (Jerome Marchand ) [461636]
  - [misc] auxiliary signal structure: signal_struct_aux (Jerome Marchand ) [461636]
  - [misc] auxiliary signal structure: preparation (Jerome Marchand ) [461636]
  - [xen] x86: fix MSI eoi handling for HVM passthru (Gerd Hoffmann ) [477261]


author: Don Zickus <dzickus@redhat.com> [2.6.18-141.el5]
changelog:
  - [x86_64] more cpu_khz to tsc_khz conversions (Prarit Bhargava ) [483300]
  - [gfs2] unaligned access in gfs2_bitfit (Abhijith Das ) [485226]
  - [gfs2] remove scand & glockd kernel processes (Benjamin Marzinski ) [273001]
  - [x86] fix tick divider with clocksource=pit (Chris Lalancette ) [427588]
  - [fs] autofs4: fix incorect return in autofs4_mount_busy (Ian Kent ) [496766]
  - [x86] fix cpuid.4 instrumentation (Brian Maly ) [454981]
  - [md] dm-mpath: propagate ioctl error codes (Benjamin Marzinski ) [461469]
  - [fs] aio: race in aio_complete leads to process hang (Jeff Moyer ) [475814]
  - [s390] enable raw devices (Jeff Moyer ) [452534]
  - [net] bnx2: update to latest upstream - 1.9.3 (Ivan Vecera ) [475567 476897 489519]
  - [net] forcedeth: update to upstream version 0.62 (Ivan Vecera ) [479740]
  - [net] r8169: don't update stats counters when IF is down (Ivan Vecera ) [490162]
  - [net] r8169: fix RxMissed register access (Ivan Vecera ) [474334]
  - [x86] prevent boosting kprobes on exception address (Masami Hiramatsu ) [493088]
  - [gfs2] add fiemap support (Steven Whitehouse ) [476626]
  - [net] e1000e: fix false link detection (Michal Schmidt ) [492270]
  - [ppc] pseries: set error_state to pci_channel_io_normal (AMEET M. PARANJAPE ) [496872]
  - [nfs] large writes rejected when sec=krb5i/p specified (Peter Staubach ) [486756]
  - [wireless] iwlwifi: problems switching b/w WPA and WEP (John W. Linville ) [474699]
  - [net] ipv6: assume loopback address in link-local scope (Jiri Pirko ) [487233]
  - [fs] keep eventpoll from locking up the box (Josef Bacik ) [487585]
  - [ppc64] adjust oprofile_cpu_type (AMEET M. PARANJAPE ) [496709]
  - [fs] jbd: properly dispose of unmapped data buffers (Josef Bacik ) [479296]
  - [fs] ext3: dir_index: error out on corrupt dx dirs (Josef Bacik ) [454942]
  - [fs] ext3: don't resize if no reserved gdt blocks left (Josef Bacik ) [443541]
  - [agp] add pci ids for new video cards (John Villalovos ) [474513]
  - [ata] sata_mv: fix chip type for RocketRaid 1740/1742 (David Milburn ) [496338]
  - [misc] exit_notify: kill the wrong capable check (Oleg Nesterov ) [494271] {CVE-2009-1337}
  - [ipmi] fix platform crash on suspend/resume (peterm@redhat.com ) [475536]
  - [ipmi] fix some signedness issues (peterm@redhat.com ) [475536]
  - [ipmi] hold ATTN until upper layer is ready (peterm@redhat.com ) [475536]
  - [ipmi] allow shared interrupts (peterm@redhat.com ) [475536]
  - [scsi] add missing SDEV_DEL state if slave_alloc fails (Tomas Henzl ) [430170]
  - [net] eHEA: mutex_unlock missing in eHEA error path (AMEET M. PARANJAPE ) [482796]
  - [misc] xen: change PVFB not to select abs. pointer (Markus Armbruster ) [492866]
  - [pci] pci-stub module to reserve pci device (Mark McLoughlin ) [491842]
  - [pci] add remove_id sysfs entry (Mark McLoughlin ) [491842]
  - [pci] use proper call to driver_create_file (Mark McLoughlin ) [491842]
  - [pci] fix __pci_register_driver error handling (Mark McLoughlin ) [491842]
  - [misc] add /sys/bus/*/driver_probe (Mark McLoughlin ) [491842]
  - [misc] backport new ramdisk driver (Don Howard ) [480663]
  - [x86] general pci_scan_bus fix for baremetal and xen (Prarit Bhargava ) [494114]
  - [misc] add HP xw460c to bf sort pci list (Prarit Bhargava ) [490068]
  - [mm] enable dumping of hugepages into core dumps (Dave Anderson ) [470411]
  - [misc] hrtimer: check relative timeouts for overflow (AMEET M. PARANJAPE ) [492230]
  - [acpi] add T-state notification support (Luming Yu ) [487567]
  - [x86_64] copy_user_c can zero more data than needed (Vitaly Mayatskikh ) [490938]
  - [misc] hpilo: backport bugfixes and updates for RHEL-5.4 (tcamuso@redhat.com ) [488964]
  - [pci] do not clear PREFETCH register (Prarit Bhargava ) [486185]
  - [misc] waitpid reports stopped process more than once (Vitaly Mayatskikh ) [481199]
  - [scsi] ipr: enhance driver to support MSI-X interrupt (AMEET M. PARANJAPE ) [475717]
  - [specfile] add ability to build only debug kernel (Jeff Layton ) [469707]
  - [xen] clear X86_FEATURE_APIC in cpuid when apic disabled (ddugger@redhat.com ) [496873]
  - [xen] enable systems without APIC (ddugger@redhat.com ) [496873]
  - [xen] vt-d: workaround for Mobile Series 4 Chipset (ddugger@redhat.com ) [496873]
  - [xen] pci: fix definition of PCI_PM_CTRL_NO_SOFT_RESET (ddugger@redhat.com ) [496873]
  - [xen] utilise the GUEST_PAT and HOST_PAT vmcs area (ddugger@redhat.com ) [496873]
  - [xen] VT-d: enhance MTRR/PAT virtualization (ddugger@redhat.com ) [496873]
  - [xen] fix interrupt remapping on AMD systems (Bhavna Sarathy ) [477261]
  - [xen] enable AMD IOMMU Xen driver (Bhavna Sarathy ) [477261]
  - [xen] add AMD IOMMU Xen driver (Bhavna Sarathy ) [477261]
  - [xen] live migration failure due to fragmented memory (Jiri Denemark ) [469130]


author: Don Zickus <dzickus@redhat.com> [2.6.18-140.el5]
changelog:
  - [fs] xfs: add fiemap support (Josef Bacik ) [296951]
  - [net] add DSCP netfilter target (Thomas Graf ) [481652]
  - [gfs2] blocked after recovery (Abhijith Das ) [483541]
  - [net] remove misleading skb_truesize_check (Thomas Graf ) [474883]
  - [mm] 100% time spent under NUMA when zone_reclaim_mode=1 (Larry Woodman ) [457264]
  - [mm] msync does not sync data for a long time (Larry Woodman ) [479079]
  - [md] dm: fix OOps in mempool_free when device removed (Milan Broz ) [495230]
  - [net] bonding: clean up resources upon removing a bond (Masahiro Matsuya ) [463244]
  - [fs] nfs: convert to new aops (Jeff Layton ) [476224]
  - [fs] cifs: update CIFS for RHEL5.4 (Jeff Layton ) [465143]
  - [misc] types: add fmode_t typedef (Jeff Layton ) [465143]
  - [misc] keys: key facility changes for AF_RXRPC (Jeff Layton ) [465143]
  - [misc] xen: bump max_phys_cpus to 256 (Chris Lalancette ) [477206]
  - [misc] fork: CLONE_PARENT && parent_exec_id interaction (Don Howard ) [479964]
  - [wireless] iwlagn: make swcrypto/swcrypto50=1 default (John W. Linville ) [474699]
  - [wireless] mac80211: avoid null deref (John W. Linville ) [482990]
  - [net] fix out of bound access to hook_entries (Thomas Graf ) [484036]
  - [net] sctp: allow sctp_getladdrs to work for IPv6 (Neil Horman ) [492633]
  - [x86] xen: fix interaction between dom0 and NTP (Rik van Riel ) [494879]
  - [ata] sata_mv: fix 8-port timeouts on 508x/6081 chips (David Milburn ) [493451]
  - [net] fixed tcp_ack to properly clear ->icsk_probes_out (Jiri Olsa ) [494427]
  - [x86] xen: crash when specifying mem= (Chris Lalancette ) [240429]
  - [scsi] qla2xxx: reduce DID_BUS_BUSY failover errors (Marcus Barrow ) [244967]
  - [ata] libata: ahci enclosure management bios workaround (David Milburn ) [488471]
  - [scsi] aic7xxx: increase max IO size (mchristi@redhat.com ) [493448]
  - [nfs] v4: client crash on file lookup with long names (Sachin S. Prabhu ) [493942]
  - [mm] fix prepare_hugepage_range to check offset (Larry Woodman ) [488260]
  - [misc] make sure fiemap.h is installed in headers pkg (Josef Bacik ) [296951]
  - [fs] generic block based fiemap (Josef Bacik ) [296951]
  - [fs] add fiemap interface (Josef Bacik ) [296951]
  - [trace] use unregister return value (Jason Baron ) [465543]
  - [trace] change rcu_read_sched -> rcu_read (Jason Baron ) [465543]
  - [trace] introduce noupdate apis (Jason Baron ) [465543]
  - [trace] simplify rcu usage (Jason Baron ) [465543]
  - [trace] fix null pointer dereference (Jason Baron ) [465543]
  - [trace] tracepoints fix reentrancy (Jason Baron ) [465543]
  - [trace] make tracepoints use rcu sched (Jason Baron ) [465543]
  - [trace] use TABLE_SIZE macro (Jason Baron ) [465543]
  - [trace] remove kernel-trace.c (Jason Baron ) [465543]
  - [trace] remove prototype from tracepoint name (Jason Baron ) [465543]
  - [x86] use CPU feature bits to skip tsc_unstable checks (Chris Lalancette ) [463573]
  - [x86] vmware: disable softlock processing on tsc systems (Chris Lalancette ) [463573]
  - [x86] vmware lazy timer emulation (Chris Lalancette ) [463573]
  - [x86] xen: improve KVM timekeeping (Chris Lalancette ) [463573]
  - [x86_64] xen: implement a minimal TSC based clocksource (Chris Lalancette ) [463573]
  - [x86] use cpu_khz for loops_per_jiffy calculation (Chris Lalancette ) [463573]
  - [x86] vmware: look for DMI string in product serial key (Chris Lalancette ) [463573]
  - [x86] VMware: Fix vmware_get_tsc code (Chris Lalancette ) [463573]
  - [x86] xen: add X86_FEATURE_HYPERVISOR feature bit (Chris Lalancette ) [463573]
  - [x86] xen: changes timebase calibration on Vmware (Chris Lalancette ) [463573]
  - [x86] add a synthetic TSC_RELIABLE feature bit (Chris Lalancette ) [463573]
  - [x86] hypervisor: detection and get tsc_freq (Chris Lalancette ) [463573]
  - [x86] fdiv bug detection fix (Chris Lalancette ) [463573]
  - [misc] printk: add KERN_CONT (Chris Lalancette ) [463573]
  - [s390] add additional card IDs to CEX2C and CEX2A (Hans-Joachim Picht ) [488496]
  - [gfs2] merge upstream uevent patches into RHEL 5.4 (Steven Whitehouse ) [476707]
  - [xen] x86: GDT: replace single page with one page/CPU (Chris Lalancette ) [477206]
  - [xen] x86: VPID: free resources (ddugger@redhat.com ) [464821]
  - [xen] x86: VPID: implement feature (ddugger@redhat.com ) [464821]
  - [xen] fix 32-on-64 PV oops in xen_set_pud (Chris Lalancette ) [467698]


author: Don Zickus <dzickus@redhat.com> [2.6.18-139.el5]
changelog:
  - [pci] xen dom0: hook PCI probe and remove callbacks (ddugger@redhat.com ) [484227]
  - [misc] xen dom0: add hypercall for add/remove PCI device (ddugger@redhat.com ) [484227]
  - [pci] xen: dom0/domU MSI support using PHSYDEV_map_irq (ddugger@redhat.com ) [484227]
  - [mm] mmu_notifier: kabi workaround support (john cooper ) [485718]
  - [mm] mmu_notifier: set CONFIG_MMU_NOTIFIER to y (john cooper ) [485718]
  - [mm] mmu-notifier: optimized ability to admin host pages (john cooper ) [485718]
  - [mm] mmu-notifiers: add mm_take_all_locks operation (john cooper ) [485718]
  - [misc] introduce list_del_init_rcu (john cooper ) [485718]
  - [ppc] spufs: fix incorrect buffer offset in regs write (AMEET M. PARANJAPE ) [493426]
  - [ppc] spufs: check offset before calculating write size (AMEET M. PARANJAPE ) [493426]
  - [net] add dropmonitor protocol (Neil Horman ) [470539]
  - [ppc] reject discontiguous MSI-X requests (AMEET M. PARANJAPE ) [492580]
  - [ppc] implement a quota system for MSIs (AMEET M. PARANJAPE ) [492580]
  - [ppc] return req#msi(-x) if request is larger (AMEET M. PARANJAPE ) [492580]
  - [ppc] msi: return the number of MSIs we could allocate (AMEET M. PARANJAPE ) [492580]
  - [ppc] check for MSI-X also in rtas_msi_pci_irq_fixup() (AMEET M. PARANJAPE ) [492580]
  - [ppc] add support for ibm,req#msi-x (AMEET M. PARANJAPE ) [492580]
  - [ppc] fix MSI-X interrupt querying (AMEET M. PARANJAPE ) [492580]
  - [ppc] msi: return the number of MSI-X available (AMEET M. PARANJAPE ) [492580]
  - [trace] add include/trace dir to -devel (Jason Baron ) [489096]
  - [mm] xen: 'ptwr_emulate' messages when booting PV guest (Chris Lalancette ) [490567]
  - [fs] lockd: reference count leaks in async locking case (Jeff Layton ) [471254]
  - [s390] kernel: cpcmd with vmalloc addresses (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: error handling in iucv_callback_txdone (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: broken send_skb_q result in endless loop (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: free iucv path/socket in path_pending cb (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: avoid left over IUCV connections (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: new error return codes for connect (Hans-Joachim Picht ) [487697]
  - [s390] af_iucv: hang if recvmsg is used with MSG_PEEK (Hans-Joachim Picht ) [487703]
  - [net] ixgbe: stop double counting frames and bytes (Andy Gospodarek ) [487213]
  - [net] netfilter: x_tables: add connlimit match (Jiri Pirko ) [483588]
  - [nfs] only set file_lock.fl_lmops if stateowner is found (Jeff Layton ) [479323]
  - [dlm] init file_lock before copying conflicting lock (Jeff Layton ) [479323]
  - [nfs] nfsd: ensure nfsv4 calls the fs on LOCKT (Jeff Layton ) [479323]
  - [net] allow for on demand emergency route cache flushing (Neil Horman ) [461655]
  - [xen] x86: update the earlier APERF/MPERF patch (Chris Lalancette ) [493557]
  - [xen] fix evtchn exhaustion with 32-bit HVM guest (Chris Lalancette ) [489274]
  - [xen] ia64: fix HVM guest kexec (Chris Lalancette ) [418591]
  - [xen] ia64: fix whitespace error in vmx.h (Chris Lalancette ) [477098]
  - [xen] add hypercall for adding and removing PCI devices (ddugger@redhat.com ) [484227]
  - [xen] HVM MSI passthrough support (ddugger@redhat.com ) [484227]
  - [xen] VT-d2: enable interrupt remapping for MSI/MSI-x (ddugger@redhat.com ) [484227]
  - [xen] MSI support interface (ddugger@redhat.com ) [484227]
  - [xen] MSI supprt internal functions (ddugger@redhat.com ) [484227]
  - [xen] convert pirq to per-domain (ddugger@redhat.com ) [484227]
  - [xen] rename evtchn_lock to event_lock (ddugger@redhat.com ) [484227]
  - [xen] sync VT-d2 code with xen-unstable (ddugger@redhat.com ) [484227]
  - [xen] VT-d2: support interrupt remapping (ddugger@redhat.com ) [484227]
  - [xen] VT-d2: support queue invalidation (ddugger@redhat.com ) [484227]
  - [xen] x86: emulate accesses to PCI window regs cf8/cfc (ddugger@redhat.com ) [484227]
  - [xen] vtd: avoid redundant context mapping (ddugger@redhat.com ) [484227]
  - [xen] x86: fix EPT for VT-d (ddugger@redhat.com ) [484227]
  - [xen] x86: add domctl interfaces for VT-d (ddugger@redhat.com ) [484227]
  - [xen] x86: memory changes for VT-d (ddugger@redhat.com ) [484227]
  - [xen] x86: intercept I/O for assigned device (ddugger@redhat.com ) [484227]
  - [xen] x86: IRQ injection changes for VT-d (ddugger@redhat.com ) [484227]
  - [xen] add VT-d specific files (ddugger@redhat.com ) [484227]
  - [xen] some system changes for VT-d (ddugger@redhat.com ) [484227]
  - [xen] add VT-d public header files (ddugger@redhat.com ) [484227]
  - [xen] ia64: add pci definitions and access functions (ddugger@redhat.com ) [484227]


author: Don Zickus <dzickus@redhat.com> [2.6.18-138.el5]
changelog:
  - [nfs] remove bogus lock-if-signalled case (Bryn M. Reeves ) [456288]
  - [gfs2] fix uninterruptible quotad sleeping (Steven Whitehouse ) [492943]
  - [net] iptables NAT port randomisation (Thomas Graf ) [459943]
  - [gfs2] tar off gfs2 broken - truncated symbolic links (Steven Whitehouse ) [492911]
  - [net] skip redirect msg if target addr is not link-local (Thomas Graf ) [481209]
  - [scsi] lpfc: remove duplicate pci* functions from driver (Prarit Bhargava ) [442007]
  - [net] igb: make driver ioport free (Prarit Bhargava ) [442007]
  - [net] e1000: make driver ioport free (Prarit Bhargava ) [442007]
  - [net] e1000e: make driver ioport free (Prarit Bhargava ) [442007]
  - [pci] add pci*_selected_region/pci_enable_device_io|mem (Prarit Bhargava ) [442007]
  - [x86] NONSTOP_TSC in tsc clocksource (Luming Yu ) [474091]
  - [ppc] keyboard not recognized on bare metal (Justin Payne ) [455232]
  - [fs] writeback: fix persistent inode->dirtied_when val (Jeff Layton ) [489359]
  - [fs] xfs: misc upstream fixes (Eric Sandeen ) [470845]
  - [fs] xfs: fix compat ioctls (Eric Sandeen ) [470845]
  - [fs] xfs: new aops interface (Eric Sandeen ) [470845]
  - [fs] xfs: backport to rhel5.4 kernel (Eric Sandeen ) [470845]
  - [fs] xfs:  update to 2.6.28.6 codebase (Eric Sandeen ) [470845]
  - [fs] d_obtain_alias helper (Eric Sandeen ) [470845]
  - [fs] d_add_ci helper (Eric Sandeen ) [470845]
  - [misc] completion helpers (Eric Sandeen ) [470845]
  - [fs] block_page_mkwrite helper (Eric Sandeen ) [470845]
  - [mm] generic_segment_checks helper (Eric Sandeen ) [470845]
  - [i2c] add support for SB800 SMBus (Bhavna Sarathy ) [488746]
  - [i2c] i2c-piix4: support for the Broadcom HT1100 chipset (Flavio Leitner ) [474240]
  - [s390] hvc_iucv: z/VM IUCV hypervisor console support (Hans-Joachim Picht ) [475551]
  - [s390] hvc_console: upgrade version of hvc_console (Hans-Joachim Picht ) [475551]
  - [s390] iucv: locking free version of iucv_message_ (Hans-Joachim Picht ) [475551]
  - [s390] set default preferred console device 'ttyS' (Hans-Joachim Picht ) [475551]
  - [s390] kernel: shutdown action 'dump_reipl' (Hans-Joachim Picht ) [474688]
  - [s390] splice: handle try_to_release_page failure (Hans-Joachim Picht ) [475334]
  - [s390] blktrace: add ioctls to SCSI generic devices (Hans-Joachim Picht ) [475334]
  - [s390] add FCP performance data collection (Hans-Joachim Picht ) [475334]
  - [s390] extra kernel parameters via VMPARM (Hans-Joachim Picht ) [475530]
  - [s390] kernel: extra kernel parameters via VMPARM (Hans-Joachim Picht ) [475530]
  - [s390] z90crypt: add ap adapter interrupt support (Hans-Joachim Picht ) [474700]
  - [s390] add Call Home data (Hans-Joachim Picht ) [475820]
  - [s390] kernel: processor degredation support (Hans-Joachim Picht ) [475820]
  - [s390] kernel: Shutdown Actions Interface (Hans-Joachim Picht ) [475563]
  - [s390] provide service levels of HW & Hypervisor (Hans-Joachim Picht ) [475570]
  - [s390] qeth: ipv6 support for hiper socket layer 3 (Hans-Joachim Picht ) [475572]
  - [s390] kernel: NSS Support (Hans-Joachim Picht ) [474646]
  - [acpi] donot evaluate _PPC until _PSS has been evaluated (Matthew Garrett ) [469105]
  - [net] iwlwifi: enable LEDS Kconfig options (John W. Linville ) [486030]
  - [spec] devel pkg: own the directories they write too (Don Zickus ) [481808]
  - [crypto] bugfixes to ansi_cprng for fips compliance (Neil Horman ) [481175 469437]
  - [scsi] qla2xxx: production FCoE firmware (Marcus Barrow ) [471900]
  - [scsi] qla2xxx: production FCoE support (Marcus Barrow ) [471900]
  - [fs] add compat_sys_ustat (Eric Sandeen ) [472426]
  - [x86_64] panic if AMD cpu_khz is wrong (Prarit Bhargava ) [472523]
  - [x86] fix calls to pci_scan_bus (Prarit Bhargava ) [470202]


author: Don Zickus <dzickus@redhat.com> [2.6.18-137.el5]
changelog:
  - [fs] HFS: mount memory leak (Dave Anderson ) [488048]
  - [docs] document netdev_budget (Stanislaw Gruszka ) [463249]
  - [net] netfilter: nfmark IPV6 routing in OUTPUT (Anton Arapov ) [470059]
  - [gfs2] use ->page_mkwrite for mmap() (Benjamin Marzinski ) [315191]
  - [fs] ecryptfs: fix memory leak into crypto headers (Eric Sandeen ) [491256]
  - [x86] add nonstop_tsc flag in /proc/cpuinfo (Luming Yu ) [474091]
  - [alsa] HDA: update for RHEL-5.4 (Jaroslav Kysela ) [483594]
  - [fs] autofs4: fix lookup deadlock (Ian Kent ) [490078]
  - [fs] autofs4: make autofs type usage explicit (Ian Kent ) [452120]
  - [fs] autofs4: add miscelaneous device for ioctls (Ian Kent ) [452120]
  - [fs] autofs4: devicer node ioctl docoumentation (Ian Kent ) [452120]
  - [fs] autofs4: track uid and gid of last mount requester (Ian Kent ) [452120]
  - [nfs] memory corruption in nfs3_xdr_setaclargs (Sachin S. Prabhu ) [479432]
  - [misc] cpuset: attach_task fixes (KII Keiichi ) [471634]
  - [s390] dasd: fix race in dasd timer handling (Hans-Joachim Picht ) [490128]
  - [x86] use [ml]fence to synchronize rdtsc (Chris Lalancette ) [448588]
  - [xen] silence MMCONFIG warnings (Chris Lalancette ) [462572]
  - [xen] fix occasional deadlocks in Xen netfront (Chris Lalancette ) [480939]
  - [xen] fix crash when modprobe xen-vnif in a KVM guest (Chris Lalancette ) [487691]
  - [xen] xen reports bogus LowTotal (Chris Lalancette ) [428892]
  - [xen] wait 5 minutes for device connection (Chris Lalancette ) [396621]
  - [xen] only recover connected devices on resume (Chris Lalancette ) [396621]
  - [xen] ia64: fix bad mpa messages (Chris Lalancette ) [288511]
  - [net] handle non-linear packets in skb_checksum_setup (Herbert Xu ) [477012]
  - [fs] fix __page_symlink to be kabi friendly (Josef Bacik ) [445433]
  - [fs] ext3: convert to new aops (Josef Bacik ) [445433]
  - [mm] make new aops kABI friendly (Josef Bacik ) [445433]
  - [fs] fix symlink allocation context (Josef Bacik ) [445433]
  - [mm] iov_iter_advance fix, don't go off the end (Josef Bacik ) [445433]
  - [mm] fix infinite loop with iov_iter_advance (Josef Bacik ) [445433]
  - [mm] restore the KERNEL_DS optimisations (Josef Bacik ) [445433]
  - [gfs2] remove generic aops stuff (Josef Bacik ) [445433]
  - [fs] new cont helpers (Josef Bacik ) [445433]
  - [mm] introduce new aops, write_begin and write_end (Josef Bacik ) [445433]
  - [fs] splice: dont do readpage (Josef Bacik ) [445433]
  - [fs] splice: don't steal pages (Josef Bacik ) [445433]
  - [gfs2] remove static iov iter stuff (Josef Bacik ) [445433]
  - [mm] iov_iter helper functions (Josef Bacik ) [445433]
  - [mm] fix pagecache write deadlocks (Josef Bacik ) [445433]
  - [mm] write iovec cleanup (Josef Bacik ) [445433]
  - [mm] fix other users of __grab_cache_page (Josef Bacik ) [445433]
  - [mm] cleanup page caching stuff (Josef Bacik ) [445433]
  - [mm] cleanup error handling (Josef Bacik ) [445433]
  - [mm] clean up buffered write code (Josef Bacik ) [445433]
  - [mm] revert deadlock on vectored write fix (Josef Bacik ) [445433]
  - [mm] kill the zero-length iovec segments handling (Josef Bacik ) [445433]
  - [mm] revert KERNEL_DS buffered write optimisation (Josef Bacik ) [445433]
  - [mm] clean up pagecache allocation (Josef Bacik ) [445433]
  - [x86] move pci_video_fixup to later in boot (Prarit Bhargava ) [467785]
  - [usb] net: dm9601: upstream fixes for 5.4 (Ivan Vecera ) [471800]
  - [xen] ia64: fix FP emulation in a PV domain (Chris Lalancette ) [477098]
  - [xen] ia64: make sure guest pages don't change (Chris Lalancette ) [477098]
  - [xen] improve handle_fpu_swa (Chris Lalancette ) [477098]
  - [xen] ia64: fix windows 2003 BSOD (Chris Lalancette ) [479923]
  - [xen] x86: fix dom0 panic when using dom0_max_vcpus (Chris Lalancette ) [485119]
  - [xen] x86: silence WRMSR warnings (Chris Lalancette ) [470035]


author: Don Zickus <dzickus@redhat.com> [2.6.18-136.el5]
changelog:
  - Revert: [x86_64] fix gettimeoday TSC overflow issue (Prarit Bhargava ) [467942]
  - [ptrace] audit_syscall_entry to use right syscall number (Jiri Pirko ) [488002] {CVE-2009-0834}
  - [md] dm: check log bitmap will fit within the log device (Milan Broz ) [471565]
  - [nfs] add 'lookupcache' mount option for nfs shares (Sachin S. Prabhu ) [489285]
  - [nfs] add fine grain control for lookup cache in nfs (Sachin S. Prabhu ) [489285]
  - [net] tulip: MTU problems with 802.1q tagged frames (Ivan Vecera ) [484796]
  - [net] rtnetlink: fix sending message when replace route (Jiri Pirko ) [462725]
  - [s390] sclp: handle zero-length event buffers (Hans-Joachim Picht ) [487695]
  - [s390] dasd: DASDFMT not operating like CPFMTXA (Hans-Joachim Picht ) [484836]
  - [xen] fix blkfront bug with overflowing ring (Chris Lalancette ) [460693]
  - [net] ipv6: disallow IPPROTO_IPV6-level IPV6_CHECKSUM (Jiri Pirko ) [486204]
  - [ide] fix interrupt flood at startup w/ESB2 (James Paradis ) [438979]
  - [s390] cio: Properly disable not operational subchannel (Hans-Joachim Picht ) [487701]
  - [misc] kernel-headers: add serial_reg.h (Don Zickus ) [463538]


author: Don Zickus <dzickus@redhat.com> [2.6.18-135.el5]
changelog:
  - [s390] iucv: failing cpu hot remove for inactive iucv (Hans-Joachim Picht ) [485412]
  - [s390] dasd: fix waitqueue for sleep_on_immediatly (Hans-Joachim Picht ) [480161]
  - [ide] increase timeouts in wait_drive_not_busy (Stanislaw Gruszka ) [464039]
  - [x86_64] mce: do not clear an unrecoverable error status (Aristeu Rozanski ) [489692]
  - [wireless] iwlwifi: booting with RF-kill switch enabled (John W. Linville ) [482990]
  - [net] put_cmsg: may cause application memory overflow (Jiri Pirko ) [488367]
  - [x86_64] fix gettimeoday TSC overflow issue (Prarit Bhargava ) [467942]
  - [net] ipv6: check hop limit setting in ancillary data (Jiri Pirko ) [487406]
  - [net] ipv6: check outgoing interface in all cases (Jiri Pirko ) [486215]
  - [acpi] disable GPEs at the start of resume (Matthew Garrett ) [456302]
  - [crypto] include crypto headers in kernel-devel (Neil Horman ) [470929]
  - [net] netxen: rebase for RHEL-5.4 (tcamuso@redhat.com ) [485381]
  - [misc] signal: modify locking to handle large loads (AMEET M. PARANJAPE ) [487376]
  - [kexec] add ability to dump log from vmcore file (Neil Horman ) [485308]
  - [fs] ext3: handle collisions in htree dirs (Eric Sandeen ) [465626]
  - [acpi] use vmalloc in acpi_system_read_dsdt (Prarit Bhargava ) [480142]
  - [misc] make ioctl.h compatible with userland (Jiri Pirko ) [473947]
  - [nfs] sunrpc: add sv_maxconn field to svc_serv (Jeff Layton ) [468092]
  - [nfs] lockd: set svc_serv->sv_maxconn to a better value (Jeff Layton ) [468092]
  - [mm] decrement reclaim_in_progress after an OOM kill (Larry Woodman ) [488955]
  - [misc] sysrq-t: display backtrace for runnable processes (Anton Arapov ) [456588]


author: Don Zickus <dzickus@redhat.com> [2.6.18-134.el5]
changelog:
  - [dlm] fix length calculation in compat code (David Teigland ) [487672]
  - [net] ehea: remove adapter from list in error path (AMEET M. PARANJAPE ) [488254]
  - [x86] reserve low 64k of memory to avoid BIOS corruption (Matthew Garrett ) [471851]
  - [nfs] fix hung clients from deadlock in flush_workqueue (David Jeffery ) [483627]
  - [net] fix a few udp counters (Neil Horman ) [483266]
  - [ia64] use current_kernel_time/xtime in hrtimer_start() (Prarit Bhargava ) [485323]
  - [sata] libata: ahci withdraw IGN_SERR_INTERNAL for SB800 (David Milburn ) [474301]
  - [ata] libata: iterate padded atapi scatterlist (David Milburn ) [446086]
  - [x86] TSC keeps running in C3+ (Luming Yu ) [474091]
  - [acpi] fix C-states less efficient on certain machines (Luming Yu ) [484174]
  - [net] ipv6: fix getsockopt for sticky options (Jiri Pirko ) [484105 483790]
  - [ppc64] cell spufs: update to the upstream for RHEL-5.4 (AMEET M. PARANJAPE ) [475620]
  - [ppc64] cell: fix npc setting for NOSCHED contexts (AMEET M. PARANJAPE ) [467344]
  - [ppc64] handle null iommu dma-window property correctly (AMEET M. PARANJAPE ) [393241]
  - [net] e1000, bnx2: enable entropy generation (Ivan Vecera ) [439898]
  - Revert: [xen] console: make LUKS passphrase readable (Bill Burns ) [475986]
  - [gfs2] add UUID to gfs2 super block (Steven Whitehouse ) [242696]
  - [x86] consistent time options for x86_64 and i386 (Prarit Bhargava ) [475374]
  - [xen] allow > 4GB EPT guests on i386 (Chris Lalancette ) [478522]
  - [xen] clear screen to make LUKS passphrase visible (Bill Burns ) [475986]


author: Don Zickus <dzickus@redhat.com> [2.6.18-133.el5]
changelog:
  - [net] fix oops when using openswan (Neil Horman ) [484590]
  - [net] bonding: fix arp_validate=3 slaves behaviour (Jiri Pirko ) [484304]
  - [serial] 8250: fix boot hang when using with SOL port (Mauro Carvalho Chehab ) [467124]
  - [usb] sb600/sb700: workaround for hang (Pete Zaitcev ) [471972]
  - [gfs2] make quota mount option consistent with gfs (Bob Peterson ) [486168]
  - [xen] pv-block: remove anaconda workaround (Don Dutile ) [477005]
  - [ppc64] power7: fix /proc/cpuinfo cpus info (AMEET M. PARANJAPE ) [486649]
  - [net] skfp_ioctl inverted logic flaw (Eugene Teo ) [486540] {CVE-2009-0675}
  - [net] memory disclosure in SO_BSDCOMPAT gsopt (Eugene Teo ) [486518] {CVE-2009-0676}
  - [net] enic: upstream update to version 1.0.0.933 (Andy Gospodarek ) [484824]
  - [mm] cow vs gup race fix (Andrea Arcangeli ) [471613]
  - [mm] fork vs gup race fix (Andrea Arcangeli ) [471613]
  - [gfs2] parsing of remount arguments incorrect (Bob Peterson ) [479401]
  - [ppc64] eeh: disable/enable LSI interrupts (AMEET M. PARANJAPE ) [475696]
  - [x86] limit max_cstate to use TSC on some platforms (Tony Camuso ) [470572]
  - [ptrace] correctly handle ptrace_update return value (Jerome Marchand ) [483814]
  - [dlm] fix plock notify callback to lockd (David Teigland ) [470074]
  - [input] wacom: 12x12 problem while using lens cursor (Aristeu Rozanski ) [484959]
  - [wireless] ath5k: update to F10 version (Michal Schmidt ) [479049]
  - [xen] disable suspend in kernel (Justin M. Forbes ) [430928]
  - [net] ipv6: update setsockopt to support RFC 3493 (Jiri Pirko ) [484971]
  - [net] ipv6: check length of users's optval in setsockopt (Jiri Pirko ) [484977]
  - [scsi] handle work queue and shost_data setup failures (mchristi@redhat.com ) [450862]
  - [net] skbuff: fix oops in skb_seq_read (mchristi@redhat.com ) [483285]
  - [net] sky2: update driver for RHEL-5.4 (Neil Horman ) [484712]
  - [net] ipv6: Hop-by-Hop options header returned bad value (Jiri Pirko ) [483793]
  - [pci] fix MSI descriptor leak during hot-unplug (James Paradis ) [484943]
  - [net] improve udp port randomization (Vitaly Mayatskikh ) [480951]
  - [misc] ia64, s390: add kernel version to panic output (Prarit Bhargava ) [484403]
  - [x86-64] fix int $0x80 -ENOSYS return (Vitaly Mayatskikh ) [481682]
  - [net] don't add NAT extension for confirmed conntracks (Herbert Xu ) [481076]
  - [xen] fbfront dirty race (Markus Armbruster ) [456893]
  - [net] ehea: improve behaviour in low mem conditions (AMEET M. PARANJAPE ) [483148]
  - [net] fix icmp_send and icmpv6_send host re-lookup code (Jiri Pirko ) [439670]
  - [scsi] ibmvscsi: N-Port-ID support on ppc64 (AMEET M. PARANJAPE ) [474701]
  - [xen] guest crash when host has >= 64G RAM (Rik van Riel ) [448115]
  - [ppc] cell: add support for power button on blades (AMEET M. PARANJAPE ) [475658]
  - [ppc64] serial_core: define FIXED_PORT flag (AMEET M. PARANJAPE ) [475621]
  - [s390] cio: I/O error after cable pulls 2 (Hans-Joachim Picht ) [479878]
  - [misc] ptrace, utrace: fix blocked signal injection (Jerome Marchand ) [451849]
  - [xen] irq: remove superfluous printk (Rik van Riel ) [456095]
  - [s390] qeth: print HiperSocket version on z9 and later (Hans-Joachim Picht ) [479881]
  - [s390] qeth: crash in case of layer mismatch for VSWITCH (Hans-Joachim Picht ) [476205]
  - [s390] qdio: only 1 buffer in INPUT_PROCESSING state (Hans-Joachim Picht ) [479867]
  - [s390] disable cpu topology support by default (Hans-Joachim Picht ) [475797]
  - [s390] qeth: unnecessary support ckeck in sysfs route6 (Hans-Joachim Picht ) [474469]
  - [s390] cio: ccwgroup online vs. ungroup race condition (Hans-Joachim Picht ) [479879]
  - [s390] dasd: dasd_device_from_cdev called from interrupt (Hans-Joachim Picht ) [474806]
  - [misc] minor signal handling vulnerability (Oleg Nesterov ) [479964] {CVE-2009-0028}


author: Don Zickus <dzickus@redhat.com> [2.6.18-132.el5]
changelog:
  - [firmware] dell_rbu: prevent oops (Don Howard ) [482942]
  - [fs] lockd: improve locking when exiting from a process (Peter Staubach ) [448929]
  - [misc] backport RUSAGE_THREAD support (Jerome Marchand ) [451063]
  - [gfs2] panic in debugfs_remove when unmounting (Abhijith Das ) [483617]
  - [nfs] memory corruption in nfs3_xdr_setaclargs (Sachin S. Prabhu ) [479432]
  - [nfs] fix hangs during heavy write workloads (Peter Staubach ) [469848]
  - [pci] msi: set 'En' bit for devices on HT-based platform (Andy Gospodarek ) [290701]
  - [net] ipt_REJECT: properly handle IP options (Ivan Vecera ) [473504]
  - [ppc] cell: fix GDB watchpoints (AMEET M. PARANJAPE ) [480239]
  - [edac] add i5400 driver (Mauro Carvalho Chehab ) [462895]
  - [xen] fix disappearing PCI devices from PV guests (Bill Burns ) [233801]
  - [net] s2io: flush statistics when changing the MTU (AMEET M. PARANJAPE ) [459514]
  - [scsi] no-sense msgs, data corruption, but no i/o errors (Rob Evers ) [468088]
  - [powerpc] wait for a panic_timeout > 0 before reboot (AMEET M. PARANJAPE ) [446120]
  - [ppc64] cell: axon-msi: Retry on missing interrupt (AMEET M. PARANJAPE ) [472405]
  - [ppc] MSI interrupts are unreliable on IBM QS21 and QS22 (AMEET M. PARANJAPE ) [472405]
  - [crypto] des3_ede: permit weak keys unless REQ_WEAK_KEY (Jarod Wilson ) [474394]
  - [ata] JMB361 only has one port (Prarit Bhargava ) [476206]
  - [net] r8169: disable the ability to change MAC address (Ivan Vecera ) [475867]
  - [misc] futex.h: remove kernel bits for userspace header (Anton Arapov ) [475790]
  - [fs] inotify: send IN_ATTRIB event on link count changes (Eric Paris ) [471893]
  - [misc] ppc64: large sends fail with unix domain sockets (Larry Woodman ) [461312]
  - [audit] misc kernel fixups (Alexander Viro ) [475330]
  - [audit] records for descr created by pipe and socketpair (Alexander Viro ) [475278]
  - [audit] control character detection is off-by-one (Alexander Viro ) [475150]
  - [audit] fix kstrdup error check (Alexander Viro ) [475149]
  - [audit] assorted audit_filter_task panics on ctx == NULL (Alexander Viro ) [475147]
  - [audit] increase AUDIT_MAX_KEY_LEN (Alexander Viro ) [475145]
  - [nfs] race with nfs_access_cache_shrinker() and umount (Peter Staubach ) [469225]
  - [nfs] lockd: handle long grace periods correctly (Peter Staubach ) [474590]
  - [crypto] ansi_cprng: fix inverted DT increment routine (Jarod Wilson ) [471281]
  - [crypto] ansi_cprng: extra call to _get_more_prng_bytes (Jarod Wilson ) [471281]
  - [fs] proc: Proportional Set Size calculation and display (Larry Woodman ) [471969]
  - [video] avoid writing outside shadow.bytes array (Mauro Carvalho Chehab ) [471844]
  - [fs] need locking when reading /proc/<pid>/oom_score (Larry Woodman ) [470459]
  - [x86] memmap=X$Y does not yield new map (Prarit Bhargava ) [464500]
  - [s390] qeth: avoid problems after failing recovery (Hans-Joachim Picht ) [468019]
  - [s390] qeth: avoid skb_under_panic for bad inbound data (Hans-Joachim Picht ) [468075]
  - [s390] sclp: incorrect softirq disable/enable (Hans-Joachim Picht ) [468021]
  - [crypto] export DSA_verify as a gpl symbol (Jarod Wilson ) [470111]
  - [s390] lcs: output request completion with zero cpa val (Hans-Joachim Picht ) [463165]
  - [s390] dasd: oops when Hyper PAV alias is set online (Hans-Joachim Picht ) [458155]
  - [s390] ipl: file boot then boot from alt dev won't work (Hans-Joachim Picht ) [458115]
  - [s390] zfcp: remove messages flooding the kernel log (Hans-Joachim Picht ) [455260]
  - [snd] fix snd-sb16.ko compile (Prarit Bhargava ) [456698]


author: Don Zickus <dzickus@redhat.com> [2.6.18-131.el5]
changelog:
  - [scsi] libata: sas_ata fixup sas_sata_ops (David Milburn ) [483171]
  - [fs] ecryptfs: readlink flaw (Eric Sandeen ) [481607] {CVE-2009-0269}
  - [crypto] ccm: fix handling of null assoc data (Jarod Wilson ) [481031]
  - [misc] fix leap second hang (Prarit Bhargava ) [479765]
  - [qla2xxx] correct endianness during flash manipulation (Marcus Barrow ) [481691]
  - [net] gso: ensure that the packet is long enough (Jiri Pirko ) [479927]
  - [audit] remove bogus newlines in EXECVE audit records (Jiri Pirko ) [479412]
  - [ppc] don't reset affinity for secondary MPIC on boot (AMEET M. PARANJAPE ) [480801]
  - [nfs] knfsd: alloc readahead cache in individual chunks (Jeff Layton ) [459397]
  - [nfs] knfsd: read-ahead cache, export table corruption (Jeff Layton ) [459397]
  - [nfs] knfsd: replace kmalloc/memset with kcalloc (Jeff Layton ) [459397]
  - [nfs] knfsd: make readahead params cache SMP-friendly (Jeff Layton ) [459397]
  - [crypto] fix sha384 blocksize definition (Neil Horman ) [469167]


author: Don Zickus <dzickus@redhat.com> [2.6.18-130.el5]
changelog:
  - [security] keys: introduce missing kfree (Jiri Pirko ) [480598] {CVE-2009-0031}
  - [net] ixgbe: frame reception and ring parameter issues (Andy Gospodarek ) [475625]
  - [net] tcp-lp: prevent chance for oops (Ivan Vecera ) [478638]
  - [misc] fix memory leak during pipe failure (Benjamin Marzinski ) [478643]
  - [block] enforce a minimum SG_IO timeout (Eugene Teo ) [475406] {CVE-2008-5700}
  - [x86] pci domain: re-enable support on blacklisted boxes (Prarit Bhargava ) [474891]
  - [fs] link_path_walk sanity, stack usage optimization (Anton Arapov ) [470139]
  - [x86_64] incorrect cpu_khz calculation for AMD processor (Prarit Bhargava ) [467782]
  - [crypto] fips: panic kernel if we fail crypto self tests (Neil Horman ) [462909]
  - [genkey] increase signing key length to 1024 bits (Neil Horman ) [413241]
  - [x86] kdump: lockup when crashing with console_sem held (Neil Horman ) [456934]
  -  [fs] ext[234]: directory corruption DoS (Eugene Teo ) [459604] {CVE-2008-3528}


author: Don Zickus <dzickus@redhat.com> [2.6.18-129.el5]
changelog:
  - [gfs2] mount attempt hangs if no more journals available (Bob Peterson ) [475312]
  - [sched] fix clock_gettime monotonicity (Peter Zijlstra ) [477763]
  - [nfs] create rpc clients with proper auth flavor (Jeff Layton ) [465456]
  - [nfs] handle attribute timeout and u32 jiffies wrap (Jeff Layton ) [460133]
  - [net] deadlock in Hierarchical token bucket scheduler (Neil Horman ) [474797]
  - [net] sctp: overflow with bad stream ID in FWD-TSN chunk (Eugene Teo ) [478805] {CVE-2009-0065}
  - [md] fix oops with device-mapper mirror target (Heinz Mauelshagen ) [472558]
  - [openib] restore traffic in connected mode on HCA (AMEET M. PARANJAPE ) [477000]
  - [net] add preemption point in qdisc_run (Jiri Pirko ) [471398] {CVE-2008-5713}
  - [wireless] iwl: fix BUG_ON in driver (Neil Horman ) [477671]
  - [x86_64] copy_user_c assembler can leave garbage in rsi (Larry Woodman ) [456682]
  - [misc] setpgid returns ESRCH in some situations (Oleg Nesterov ) [472433]
  - [s390] zfcp: fix hexdump data in s390dbf traces (Hans-Joachim Picht ) [470618]
  - [fs] hfsplus: fix buffer overflow with a corrupted image (Anton Arapov ) [469638] {CVE-2008-4933}
  - [fs] hfsplus: check read_mapping_page return value (Anton Arapov ) [469645] {CVE-2008-4934}
  - [fs] hfs: fix namelength memory corruption (Anton Arapov ) [470773] {CVE-2008-5025}
  - [net] netlink: fix overrun in attribute iteration (Eugene Teo ) [462283]


author: Don Zickus <dzickus@redhat.com> [2.6.18-127.el5]
changelog:
  - Revert: [i386]: check for dmi_data in powernow_k8 driver (Prarit Bhargava ) [476184]
  - [xen] re-enable using xenpv in boot path for FV guests (Don Dutile ) [473899]
  - [xen] pv_hvm: guest hang on FV save/restore (Don Dutile ) [475778]
  - [openib] fix ipoib oops in unicast_arp_send (Doug Ledford ) [476005]
  - [scsi] fnic: remove link down count processing (mchristi@redhat.com ) [474935]
  - Revert: [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [475652]
  - [scsi] ibmvscsi: EH fails due to insufficient resources (AMEET M. PARANJAPE ) [475618]
  - [x86_64] proc: export GART region through /proc/iomem (Neil Horman ) [475507]
  - [acpi] add xw8600 and xw6600 to GPE0 block blacklist (Prarit Bhargava ) [475418]
  - [net] cxgb3: fixup embedded firmware problems take 2 (Andy Gospodarek ) [469774]


author: Don Zickus <dzickus@redhat.com> [2.6.18-126.el5]
changelog:
  - [scsi] mpt fusion: disable msi by default (Tomas Henzl ) [474465]
  - [scsi] fcoe: update drivers (mchristi@redhat.com ) [474089]
  - [scsi] fix error handler to call scsi_decide_disposition (Tom Coughlan ) [474345]
  - [scsi] lpfc: fix cancel_retry_delay (Tom Coughlan ) [470610]
  - [x86] disable hpet on machine_crash_shutdown (Neil Horman ) [473038]
  - Revert [mm] keep pagefault from happening under pagelock (Don Zickus ) [473150]
  - [net] enic: update to version 1.0.0.648 (Andy Gospodarek ) [473871]
  - [scsi] qla4xxx: increase iscsi session check to 3-tuple (Marcus Barrow ) [474736]
  - [agp] update the names of some graphics drivers (John Villalovos ) [472438]
  - [net] atm: prevent local denial of service (Eugene Teo ) [473701] {CVE-2008-5079}
  - [scsi] remove scsi_dh_alua (mchristi@redhat.com ) [471920]
  - [scsi] qla2xx/qla84xx: occasional panic on loading (Marcus Barrow ) [472382]
  - [net] cxgb3: eeh and eeprom fixups (Andy Gospodarek ) [441959]
  - [net] cxgb3: fixup embedded firmware problems (Andy Gospodarek ) [469774]
  - [wireless] iwlwifi/mac80211: various small fixes (John W. Linville ) [468967]
  - [x86_64] fix AMD IOMMU boot issue (Joachim Deguara ) [473464]
  - [x86_64] limit num of mce sysfs files removed on suspend (Prarit Bhargava ) [467725]
  - [xen] console: make LUKS passphrase readable (Bill Burns ) [466240]
  - [x86_64] Calgary IOMMU sysdata fixes (Prarit Bhargava ) [474047]
  - [alsa] select 3stack-dig model for SC CELSIUS R670 (Jaroslav Kysela ) [470449]
  - [ata] libata: lba_28_ok sector off by one (David Milburn ) [464868]
  - [ppc64] fix system calls on Cell entered with XER.SO=1 (Jesse Larrew ) [474196]
  - [block] fix max_segment_size, seg_boundary mask setting (Milan Broz ) [471639]
  - [fs] jbd: alter EIO test to avoid spurious jbd aborts (Eric Sandeen ) [472276]
  - [acpi] acpi_cpufreq: fix panic when removing module (Prarit Bhargava ) [472844]
  - [openib] ehca: fix generating flush work completions (AMEET M. PARANJAPE ) [472812]
  - [ata] libata: sata_nv hard reset mcp55 (David Milburn ) [473152]
  - [misc] fix add return signal to ptrace_report_exec (AMEET M. PARANJAPE ) [471112]
  - [misc] utrace: prevent ptrace_induce_signal() crash (Oleg Nesterov ) [469754]
  - [misc] utrace: make ptrace_state refcountable (Oleg Nesterov ) [469754]
  - [net] virtio_net: mergeable receive buffers (Mark McLoughlin ) [473120]
  - [net] virtio_net: jumbo frame support (Mark McLoughlin ) [473114]
  - [net] tun: jumbo frame support (Mark McLoughlin ) [473110]
  - [net] fix unix sockets kernel panic (Neil Horman ) [470436] {CVE-2008-5029}
  - [xen] x86: emulate movzwl with negative segment offsets (Chris Lalancette ) [471801]


author: Don Zickus <dzickus@redhat.com> [2.6.18-125.el5]
changelog:
  - [net] cxgb3: embed firmware in driver (Andy Gospodarek ) [469774]
  - [net] cxgb3: eeh, lro, and multiqueue fixes (Andy Gospodarek ) [441959]
  - [misc] support for Intel's Ibex Peak (peterm@redhat.com ) [472961]
  - [audit] race between inotify watch removal and unmount (Josef Bacik ) [472329] {CVE-2008-5182}
  - [net] mlx4: panic when inducing pci bus error (AMEET M. PARANJAPE ) [472769]
  - [s390] cio: DASD device driver times out (Hans-Joachim Picht ) [459803]
  - [misc] hugepages: ia64 stack overflow and corrupt memory (Larry Woodman ) [472802]
  - [net] niu: fix obscure 64-bit read issue (Andy Gospodarek ) [472849]
  - [x86] nmi_watchdog: call do_nmi_callback from traps-xen (Aristeu Rozanski ) [471111]
  - [GFS2] recovery stuck (Abhijith Das ) [465856]
  - [misc] fix check_dead_utrace vs do_wait() race (Oleg Nesterov ) [466774]
  - [scsi] cciss: add two new PCI IDs (Tom Coughlan ) [471679]
  - [x86] fix memory-less NUMA node booting (Prarit Bhargava ) [471424]
  - [pci] generic fix for EEH restore all registers (Jesse Larrew ) [470580]
  - [net] e1000e: remove fix for EEH restore all registers (Jesse Larrew ) [470580]
  - [agp] use contiguous memory to support xen (Rik van Riel ) [412691]
  - [edac] i5000_edac: fix misc/thermal error messages (Aristeu Rozanski ) [471933]
  - [alsa] fix PCM write blocking (Jaroslav Kysela ) [468202]
  - [xen] build xen-platform-pci as a module (Don Dutile ) [472504]
  - [scsi] qla2xx/qla84xx: failure to establish link (Marcus Barrow ) [472382]
  - [acpi] add systems to GPE register blacklist (Prarit Bhargava ) [471341]
  - [ia64] replace printk with mprintk in MCA/INIT context (Kei Tokunaga ) [471970]
  - [usb] add support for dell keyboard 431c:2003 (Mauro Carvalho Chehab ) [471469]
  - [net] e1000e: enable ECC correction on 82571 silicon (Andy Gospodarek ) [472095]
  - [dlm] fix up memory allocation flags (David Teigland ) [471871]
  - [xen] x86: fix highmem-xen.c BUG() (Chris Lalancette ) [452175]
  - [xen] guest crashes if RTL8139 NIC is only one specified (Don Dutile ) [471110]
  - [net] bnx2: fix oops on call to poll_controller (Neil Horman ) [470625]
  - [scsi] update fcoe drivers (mchristi@redhat.com ) [436051]
  - [net] bnx2: add support for 5716s (Andy Gospodarek ) [471903]
  - [openib] IPoIB: fix oops on fabric events (Doug Ledford ) [471890]
  - [libata] force sb600/700 ide mode into ahci on resume (David Milburn ) [466422]
  - [xen] increase maximum DMA buffer size (Rik van Riel ) [412691]
  - [xen] fix physical memory address overflow (Rik van Riel ) [412691]


author: Don Zickus <dzickus@redhat.com> [2.6.18-124.el5]
changelog:
  - [s390] qeth: EDDP for large TSO skb fragment list (Hans-Joachim Picht ) [468068]
  - [s390] missing bits for audit-fork (Alexander Viro ) [461831]
  - [net] ixgbe: add support for 82598AT (Andy Gospodarek ) [454910]
  - [libata] avoid overflow in ata_tf_read_block (David Milburn ) [471576]
  - [md] dm-mpath: NULL ptr access in path activation code (Milan Broz ) [471393]
  - [scsi] qla2xxx: no NPIV for loop connections (Marcus Barrow ) [471269]
  - [ppc64] spufs: clean up page fault error checking (AMEET M. PARANJAPE ) [470301]
  - [fs] cifs: corrupt data due to interleaved write calls (Jeff Layton ) [470267]
  - [misc] lots of interrupts with /proc/.../hz_timer=0 (Hans-Joachim Picht ) [470289]
  - [selinux] recognize addrlabel netlink messages (Thomas Graf ) [446063]
  - [acpi] thinkpad: fix autoloading (Matthew Garrett ) [466816]
  - [net] bnx2x: eeh, unload, probe, and endian fixes (Andy Gospodarek ) [468922]
  - [firewire] various bug and module unload hang fixes (Jay Fenlason ) [469710 469711]


author: Don Zickus <dzickus@redhat.com> [2.6.18-123.el5]
changelog:
  - [s390] cio: reduce cpu utilization during device scan (Hans-Joachim Picht ) [459793]
  - [s390] cio: fix double unregistering of subchannels (Hans-Joachim Picht ) [456087]
  - [video] uvc: buf overflow in format descriptor parsing (Jay Fenlason ) [470427] {CVE-2008-3496}
  - [usb] add HID_QUIRK_RESET_LEDS to some keyboards (mchehab@infradead.org ) [434538]
  - [acpi] always use 32 bit value for GPE0 on HP xw boxes (Prarit Bhargava ) [456638]
  - [wireless] iwlagn/mac80211 IBSS fixes (John W. Linville ) [438388]
  - [ppc64] cell: fix page fault error checking in spufs (AMEET M. PARANJAPE ) [470301]
  - [input] atkbd: cancel delayed work before freeing struct (Jiri Pirko ) [461233]
  - [openib] ehca: deadlock race when creating small queues (Jesse Larrew ) [470137]
  - [openib] mthca: fix dma mapping leak (AMEET M. PARANJAPE ) [469902]
  - [openib] ib_core: use weak ordering for user memory (AMEET M. PARANJAPE ) [469902]
  - [ppc64] dma-mapping: provide attributes on cell platform (AMEET M. PARANJAPE ) [469902]
  - [net] bnx2: prevent ethtool -r EEH event (AMEET M. PARANJAPE ) [469962]
  - [net] bonding: update docs for arp_ip_target behavior (Andy Gospodarek ) [468870]
  - [xen] uninitialized watch structure can lead to crashes (Don Dutile ) [465849]
  - [openib] ehca: remove ref to QP if port activation fails (AMEET M. PARANJAPE ) [469941]
  - [usb] fix locking for input devices (James Paradis ) [468915]
  - [nfs] oops in direct I/O error handling (Steve Dickson ) [466164]
  - [md] crash in device mapper if the user removes snapshot (Mikulas Patocka ) [468473]
  - [openib] config update: enable some debugging (Doug Ledford ) [469410]
  - [sata] libata is broken with large disks (David Milburn ) [469715]
  - [md] dm-raid1: support extended status output (Jonathan Brassow ) [437177]
  - [s390] qdio: repair timeout handling for qdio_shutdown (Hans-Joachim Picht ) [463164]
  - [openib] race in ipoib_cm_post_receive_nonsrq (AMEET M. PARANJAPE ) [463485]
  - [xen] remove contiguous_bitmap (Chris Lalancette ) [463500]
  - [xen] ia64: backport check_pages_physically_contiguous (Chris Lalancette ) [463500]
  - [ppc64] cell: corrupt SPU coredump notes (AMEET M. PARANJAPE ) [431881]
  - [ppc64] spufs: missing context switch notification log-2 (AMEET M. PARANJAPE ) [462622]
  - [ppc64] spufs: missing context switch notification log-1 (AMEET M. PARANJAPE ) [462622]
  - [misc] spec: add generic Obsoletes for 3rd party drivers (Jon Masters ) [460047]
  - [x86] vDSO: use install_special_mapping (Peter Zijlstra ) [460276] {CVE-2008-3527}
  - [xen] limit node poking to available nodes (Joachim Deguara ) [449803]
  - [xen] live migration of PV guest fails (Don Dutile ) [469230]


author: Don Zickus <dzickus@redhat.com> [2.6.18-122.el5]
changelog:
  - [acpi] check common dmi tables on systems with acpi (Andy Gospodarek ) [469444]
  - [scsi] qla3xxx, qla4xxx: update/use new version format (Marcus Barrow ) [469414]
  - [md] dm-stripe.c: RAID0 event handling (Heinz Mauelshagen ) [437173]
  - [md] dm-raid45.c: add target to makefile (Heinz Mauelshagen ) [437180]
  - [md] dm-raid45.c: revert to RHEL5 dm-io kabi (Heinz Mauelshagen ) [437180]
  - [wireless] iwlwifi: avoid sleep in softirq context (John W. Linville ) [467831]
  - [net] bonding: allow downed interface before mod remove (Andy Gospodarek ) [467244]
  - [acpi] fix boot hang on old systems without _CST methods (Matthew Garrett ) [467927]
  - [scsi] qla2xxx: fix entries in class_device_attributes (Marcus Barrow ) [468873]
  - [ppc64] clock_gettime is not incrementing nanoseconds (AMEET M. PARANJAPE ) [469073]
  - [scsi] add fnic driver (mchristi@redhat.com ) [462385]
  - [scsi] add libfc and software fcoe driver (mchristi@redhat.com ) [436051]
  - [openib] ppc64: fix using SDP on 64K page systems (AMEET M. PARANJAPE ) [468872]
  - [fs] ext4: delay capable checks to avoid avc denials (Eric Sandeen ) [467216]
  - [fs] ext3: fix accessing freed memory in ext3_abort (Eric Sandeen ) [468547]
  - [fs] autofs4: correct offset mount expire check (Ian Kent ) [468187]
  - [fs] autofs4: cleanup autofs mount type usage (Ian Kent ) [468187]
  - [openib] ehca: queue and completion pair setup problem (AMEET M. PARANJAPE ) [468237]
  - [xen] PV: dom0 hang when device re-attached to in guest (Don Dutile ) [467773]
  - [scsi] qla2xxx: correct Atmel flash-part handling (Marcus Barrow ) [468573]
  - [scsi] qla2xxx: 84xx show FW VER and netlink code fixes (Marcus Barrow ) [464681]
  - [scsi] qla2xxx: restore disable by default of MSI, MSI-X (Marcus Barrow ) [468555]
  - [scsi] lpfc: Emulex RHEL-5.3 bugfixes (Tom Coughlan ) [461795]
  - [s390] qdio: speedup multicast on full HiperSocket queue (Hans-Joachim Picht ) [463162]
  - [ppc64] kexec/kdump: disable ptcal on QS21 (AMEET M. PARANJAPE ) [462744]
  - [ppc64] ptcal has to be disabled to use kexec on QS21 (AMEET M. PARANJAPE ) [462744]
  - [net] ixgbe: bring up device without crashing fix (AMEET M. PARANJAPE ) [467777]
  - [fs] ecryptfs: storing crypto info in xattr corrupts mem (Eric Sandeen ) [468192]
  - [misc] rtc: disable SIGIO notification on close (Vitaly Mayatskikh ) [465747]
  - [net] allow rcv on inactive slaves if listener exists (Andy Gospodarek ) [448144]
  - [net] e1000e: update driver to support recovery (AMEET M. PARANJAPE ) [445299]
  - [xen] virtio_net: some relatively minor fixes (Mark McLoughlin ) [468034]
  - [kabi] add dlm_posix_set_fsid (Jon Masters ) [468538]
  - [wireless] iwlwifi: fix busted tkip encryption _again_ (John W. Linville ) [467831]
  - [x86] make halt -f command work correctly (Ivan Vecera ) [413921]
  - [ppc64] EEH PCI-E: recovery fails E1000; support MSI (AMEET M. PARANJAPE ) [445299]
  - [x86_64] create a fallback for IBM Calgary (Pete Zaitcev ) [453680]
  - [drm] i915 driver arbitrary ioremap (Eugene Teo ) [464509] {CVE-2008-3831}
  - [xen] x86: allow the kernel to boot on pre-64 bit hw (Chris Lalancette ) [468083]


author: Don Zickus <dzickus@redhat.com> [2.6.18-121.el5]
changelog:
  - [net] tun: fix printk warning (Mark McLoughlin ) [468536]
  - [xen] FV: fix lockdep warnings when running debug kernel (Don Dutile ) [459876]
  - [xen] fix crash on IRQ exhaustion (Bill Burns ) [442736]
  - [net] ipv4: fix byte value boundary check (Jiri Pirko ) [468148]
  - [ia64] fix ptrace hangs when following threads (Denys Vlasenko ) [461456]
  - [net] tcp: let skbs grow over a page on fast peers (Mark McLoughlin ) [467845]
  - [md] random memory corruption in snapshots (Mikulas Patocka ) [465825]
  - [misc] ptrace: fix exec report (Jerome Marchand ) [455060]
  - [gfs2] set gfp for data mappings to GFP_NOFS (Steven Whitehouse ) [467689]
  - [nfs] remove recoverable BUG_ON (Steve Dickson ) [458774]
  - [openib] ehca: attempt to free srq when none exists (AMEET M. PARANJAPE ) [463487]
  - [fs] don't allow splice to files opened with O_APPEND (Eugene Teo ) [466710] {CVE-2008-4554}
  - [fs] ext4: add missing aops (Eric Sandeen ) [466246]
  - [ppc64] add missing symbols to vmcoreinfo (Neil Horman ) [465396]
  - [net] sctp: INIT-ACK indicates no AUTH peer support oops (Eugene Teo ) [466082] {CVE-2008-4576}
  - [ppc64] fix race for a free SPU (AMEET M. PARANJAPE ) [465581]
  - [ppc64] SPUs hang when run with affinity-2 (AMEET M. PARANJAPE ) [464686]
  - [ppc64] SPUs hang when run with affinity-1 (AMEET M. PARANJAPE ) [464686]
  - [openib] ehca: add flush CQE generation (AMEET M. PARANJAPE ) [462619]
  - [x86] PAE: limit RAM to 64GB/PAE36 (Larry Woodman ) [465373]
  - [nfs] portmap client race (Steve Dickson ) [462332]
  - [input] atkbd: delay executing of LED switching request (Jiri Pirko ) [461233]
  - [x86] powernow_k8: depend on newer version of cpuspeed (Brian Maly ) [468764]
  - [fs] ext4: fix warning on x86_64 build (Eric Sandeen ) [463277]
  - [crypto] fix ipsec crash with MAC longer than 16 bytes (Neil Horman ) [459812]
  - [fs] ecryptfs: depend on newer version of ecryptfs-utils (Eric Sandeen ) [468772]
  - [ppc64] support O_NONBLOCK in /proc/ppc64/rtas/error_log (Vitaly Mayatskikh ) [376831]
  - [xen] ia64: make viosapic SMP-safe by adding lock/unlock (Tetsu Yamamoto ) [466552]
  - [xen] ia64: VT-i2 performance restoration (Bill Burns ) [467487]


author: Don Zickus <dzickus@redhat.com> [2.6.18-120.el5]
changelog:
  - [misc] futex: fixup futex compat for private futexes (Peter Zijlstra ) [467459]
  - [pci] set domain/node to 0 in PCI BIOS enum code path (Prarit Bhargava ) [463418]
  - [scsi] qla2xxx: prevent NPIV conf for older hbas (Marcus Barrow ) [467153]
  - [scsi] fix oops after trying to removing rport twice (Marcus Barrow ) [465945]
  - [agp] re-introduce 82G965 graphics support (Prarit Bhargava ) [466307]
  - [agp] correct bug in stolen size calculations (Dave Airlie ) [463853]
  - [scsi] qla2xxx: merge errors caused initialize failures (Marcus Barrow ) [442946]
  - [dm] mpath: moving path activation to workqueue panics (Milan Broz ) [465570]
  - [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl ) [453472]
  - Revert: [ppc64] compile and include the addnote binary (Don Zickus ) [462663]
  - [scsi] cciss: the output of LUN size and type wrong (Tomas Henzl ) [466030]
  - [misc] posix-timers: event vs dequeue_signal() race (Mark McLoughlin ) [466167]
  - [ata] libata: ahci enclosure management support (David Milburn ) [437190]
  - [gfs2] fix jdata page invalidation (Steven Whitehouse ) [437803]
  - [net] sky2: fix hang resulting from link flap (Neil Horman ) [461681]
  - [ata] libata: ata_piix sata/ide combined mode fix (David Milburn ) [463716]
  - [gfs2] fix for noatime support (Steven Whitehouse ) [462579]
  - [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464452]
  - [fs] open() allows setgid bit when user is not in group (Eugene Teo ) [463687] {CVE-2008-4210}
  - [dlm] add old plock interface (David Teigland ) [462354]
  - [audit] fix NUL handling in TTY input auditing (Miloslav Trmač ) [462441]
  - [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [464445]


author: Don Zickus <dzickus@redhat.com> [2.6.18-119.el5]
changelog:
  - [ppc64] compile and include the addnote binary (Don Zickus ) [462663]
  - [scsi] qla2xxx: new version string defintion (Marcus Barrow ) [465023]
  - [acpi] configs update for acpi-cpufreq driver (Matthew Garrett ) [449787]


author: Don Zickus <dzickus@redhat.com> [2.6.18-118.el5]
changelog:
  - [scsi] fix QUEUE_FULL retry handling (mchristi@redhat.com ) [463709]
  - [drm] support for Intel Cantiga and Eaglelake (Dave Airlie ) [438400]
  - [agp] add support for Intel Cantiga and Eaglelake (Dave Airlie ) [463853]
  - Revert: [mm] fix support for fast get user pages (Dave Airlie ) [447649]
  - [ppc64] netboot image too large (Ameet Paranjape ) [462663]
  - [scsi] scsi_error: retry cmd handling of transport error (mchristi@redhat.com ) [463206]
  - [net] correct mode setting for extended sysctl interface (Neil Horman ) [463659]
  - [net] e1000e: protect ICHx NVM from malicious write/erase (Andy Gospodarek ) [463503]
  - [s390] qdio: fix module ref counting in qdio_free (Hans-Joachim Picht ) [458074]
  - [scsi] qla2xxx: use the NPIV table to instantiate port (Marcus Barrow ) [459015]
  - [scsi] qla2xxx: use the Flash Layout Table (Marcus Barrow ) [459015]
  - [scsi] qla2xxx: use the Flash Descriptor Table (Marcus Barrow ) [459015]
  - [net] enic: add new 10GbE device (Andy Gospodarek ) [462386]
  - [net] ipt_CLUSTERIP: fix imbalanced ref count (Neil Horman ) [382491]
  - [scsi] qla2xxx: update 24xx,25xx firmware for RHEL-5.3 (Marcus Barrow ) [442946]
  - [net] bnx2: fix problems with multiqueue receive (Andy Gospodarek ) [441964]
  - [net] e1000: add module param to set tx descriptor power (Andy Gospodarek ) [436966]
  - [misc] preempt-notifier fixes (Eduardo Habkost ) [459838]
  - [tty] termiox support missing mutex lock (aris ) [445211]
  - [fs] ecryptfs: off-by-one writing null to end of string (Eric Sandeen ) [463478]
  - [misc] add tracepoints to activate/deactivate_task (Jason Baron ) [461966]
  - [scsi] qla2xxx: use rport dev loss timeout consistently (Marcus Barrow ) [462109]
  - [ata] libata: rmmod pata_sil680 hangs (David Milburn ) [462743]
  - [scsi] qla2xxx: support PCI Enhanced Error Recovery (Marcus Barrow ) [462416]
  - [ppc64] subpage protection for pAVE (Brad Peters ) [439489]
  - [ppc64] edac: enable for cell platform (Brad Peters ) [439507]


author: Don Zickus <dzickus@redhat.com> [2.6.18-117.el5]
changelog:
  - [mm] filemap: fix iov_base data corruption (Josef Bacik ) [463134]
  - Revert: [misc] create a kernel checksum file per FIPS140-2 (Don Zickus ) [444632]
  - [x86_64] NMI wd: clear perf counter registers on P4 (Aristeu Rozanski ) [461671]
  - [scsi] failfast bit setting in dm-multipath/multipath (mchristi@redhat.com ) [463470]
  - [scsi] fix hang introduced by failfast changes (Mark McLoughlin ) [463416]
  - [x86_64] revert time syscall changes (Prarit Bhargava ) [461184]


author: Don Zickus <dzickus@redhat.com> [2.6.18-116.el5]
changelog:
  - [x86] mm: fix endless page faults in mount_block_root (Larry Woodman ) [455491]
  - [mm] check physical address range in ioremap (Larry Woodman ) [455478]
  - [scsi] modify failfast so it does not always fail fast (mchristi@redhat.com ) [447586]
  - Revert: [mm] NUMA: system is slow when over-committing memory (Larry Woodman ) [457264]
  - [docs] update kernel-parameters with tick-divider (Chris Lalancette ) [454792]
  - [openib] add an enum for future RDS support (Doug Ledford ) [462551]
  - [pci] allow multiple calls to pcim_enable_device (John Feeney ) [462500]
  - [xen] virtio: include headers in kernel-headers package (Eduardo Pereira Habkost ) [446214]
  - [scsi] libiscsi: data corruption when resending packets (mchristi@redhat.com ) [460158]
  - [gfs2] glock deadlock in page fault path (Bob Peterson ) [458684]
  - [gfs2] panic if you misspell any mount options (Abhijith Das ) [231369]
  - [xen] allow guests to hide the TSC from applications (Chris Lalancette ) [378481] {CVE-2007-5907}


author: Don Zickus <dzickus@redhat.com> [2.6.18-115.el5]
changelog:
  - [scsi] qla2xxx: additional residual-count correction (Marcus Barrow ) [462117]
  - [audit] audit-fork patch (Alexander Viro ) [461831]
  - [net] ipv6: extra sysctls for additional TAHI tests (Neil Horman ) [458270]
  - [nfs] disable the fsc mount option (Steve Dickson ) [447474]
  - [acpi] correctly allow WoL from S4 state (Neil Horman ) [445890]
  - [ia64] procfs: show the size of page table cache (Takao Indoh ) [458410]
  - [ia64] procfs: reduce the size of page table cache (Takao Indoh ) [458410]
  - [fs] ecryptfs: disallow mounts on nfs, cifs, ecryptfs (Eric Sandeen ) [435115]
  - [md] add device-mapper message parser interface (heinzm@redhat.com ) [437180]
  - [md] add device-mapper RAID4/5 stripe locking interface (heinzm@redhat.com ) [437180]
  - [md] add device-mapper dirty region hash file (heinzm@redhat.com ) [437180]
  - [md] add device-mapper object memory cache interface (heinzm@redhat.com ) [437180]
  - [md] add device-mapper object memory cache (heinzm@redhat.com ) [437180]
  - [md] export dm_disk and dm_put (heinzm@redhat.com ) [437180]
  - [md] add device-mapper RAID4/5 target (heinzm@redhat.com ) [437180]
  - [md] add device-mapper message parser (heinzm@redhat.com ) [437180]
  - [md] add device mapper dirty region hash (heinzm@redhat.com ) [437180]
  - [md] add config option for dm RAID4/5 target (heinzm@redhat.com ) [437180]
  - [scsi] qla2xxx: update 8.02.00-k5 to 8.02.00-k6 (Marcus Barrow ) [459722]
  - [kabi] add vscnprintf, down_write_trylock to whitelist (Jon Masters ) [425341]
  - [kabi] add dlm_posix_get/lock/unlock to whitelist (Jon Masters ) [456169]
  - [kabi] add mtrr_add and mtrr_del to whitelist (Jon Masters ) [437129]
  - [kabi] add iounmap to whitelist (Jon Masters ) [435144]
  - [x86] make powernow_k8 a module (Brian Maly ) [438835]
  - [fs] ecryptfs: delay lower file opens until needed (Eric Sandeen ) [429142]
  - [fs] ecryptfs: unaligned access helpers (Eric Sandeen ) [457143]
  - [fs] ecryptfs: string copy cleanup (Eric Sandeen ) [457143]
  - [fs] ecryptfs: discard ecryptfsd registration messages (Eric Sandeen ) [457143]
  - [fs] ecryptfs: privileged kthread for lower file opens (Eric Sandeen ) [457143]
  - [fs] ecryptfs: propagate key errors up at mount time (Eric Sandeen ) [440413]
  - [fs] ecryptfs: update to 2.6.26 codebase (Eric Sandeen ) [449668]
  - Revert [misc] fix wrong test in wait_task_stopped (Anton Arapov ) [382211]


author: Don Zickus <dzickus@redhat.com> [2.6.18-114.el5]
changelog:
  - [xen] cpufreq: fix Nehalem/Supermicro systems (Rik van Riel ) [458894]
  - [net] enable TSO if supported by at least one device (Herbert Xu ) [461866]
  - [crypto] fix panic in hmac self test (Neil Horman ) [461537]
  - [scsi] qla2xxx/qla84xx: update to upstream for RHEL-5.3 (Marcus Barrow ) [461414]
  - [misc] hpilo: cleanup device_create for RHEL-5.3 (tcamuso@redhat.com ) [437212]
  - [misc] hpilo: update driver to 0.5 (tcamuso@redhat.com ) [437212]
  - [misc] hpilo: update to upstream 2.6.27 (tcamuso@redhat.com ) [437212]
  - [misc] futex: private futexes (Peter Zijlstra ) [460593]
  - [misc] preempt-notifiers implementation (Eduardo Habkost ) [459838]
  - [scsi] fusion: update to version 3.04.07 (Tomas Henzl ) [442025]
  - [fs] ext4/vfs/mm: core delalloc support (Eric Sandeen ) [455452]
  - [net] r8169: add support and fixes (Ivan Vecera ) [251252 441626 442635 443623 452761 453563 457892]
  - [md] LVM raid-1 performance fixes (Mikulas Patocka ) [438153]
  - [md] LVM raid-1 performance fixes (Mikulas Patocka ) [438153]
  - [xen] kdump: ability to use makedumpfile with vmcoreinfo (Neil Horman ) [454498]
  - [scsi] aic79xx: reset HBA on kdump kernel boot (Neil Horman ) [458620]
  - [fs] implement fallocate syscall (Eric Sandeen ) [450566]
  - [misc] better clarify package descriptions (Don Zickus ) [249726]
  - [audit] audit TTY input (Miloslav Trmač ) [244135]
  - [scsi] qla2xxx - mgmt. API for FCoE, NetLink (Marcus Barrow ) [456900]
  - [scsi] qla2xxx - mgmt. API, CT pass thru (Marcus Barrow ) [455900]
  -  [misc] hrtimer optimize softirq (George Beshers ) [442148]
  - [misc] holdoffs in hrtimer_run_queues (George Beshers ) [442148]
  - [xen] netfront xenbus race (Markus Armbruster ) [453574]
  - [gfs2] NFSv4 delegations fix for cluster systems (Brad Peters ) [433256]
  - [scsi] qla2xxx: update 8.02.00-k1 to 8.02.00.k4 (Marcus Barrow ) [455264]
  - [scsi] qla2xxx: upstream changes from 8.01.07-k7 (Marcus Barrow ) [453685]
  - [scsi] qla2xxx: add more statistics (Marcus Barrow ) [453441]
  - [scsi] qla2xxx: add ISP84XX support (Marcus Barrow ) [442083]
  - [ia64] set default max_purges=1 regardless of PAL return (Luming Yu ) [451593]
  - [ia64] param for max num of concurrent global TLB purges (Luming Yu ) [451593]
  - [ia64] multiple outstanding ptc.g instruction support (Luming Yu ) [451593]
  - [scsi] ST: buffer size doesn't match block size panics (Ivan Vecera ) [443645]
  - [scsi] fix medium error handling with bad devices (Mike Christie ) [431365]
  - [xen] ia64: VT-i2 performance addendum (Bill Burns ) [437096]
  - [xen] HV: ability to use makedumpfile with vmcoreinfo (Neil Horman ) [454498]
  - [xen] ia64: vps save restore patch (Bill Burns ) [437096]


author: Don Zickus <dzickus@redhat.com> [2.6.18-112.el5]
changelog:
  - [fs] jbd: test BH_write_EIO to detect errors on metadata (Hideo AOKI ) [439581]
  - [wireless] rt2x00: avoid NULL-ptr deref when probe fails (John W. Linville ) [448763]
  - [x86_64] suspend to disk fails with >4GB of RAM (Matthew Garrett ) [459980]
  - [char] add range_is_allowed check to mmap_mem (Eugene Teo ) [460857]
  - [acpi] add 3.0 _TSD _TPC _TSS _PTC throttling support (Brian Maly ) [440099]
  - [scsi] add scsi device handlers config options (Mike Christie ) [438761]
  - [scsi] scsi_dh: add ALUA handler (mchristi@redhat.com ) [438761]
  - [scsi] scsi_dh: add rdac handler (mchristi@redhat.com ) [438761]
  - [md] dm-mpath: use SCSI device handler (mchristi@redhat.com ) [438761]
  - [scsi] add infrastructure for SCSI Device Handlers (mchristi@redhat.com ) [438761]
  - [misc] driver core: port bus notifiers (mchristi@redhat.com ) [438761]
  - [fs] binfmt_misc: avoid potential kernel stack overflow (Vitaly Mayatskikh ) [459463]
  - [CRYPTO] tcrypt: Change the XTEA test vectors (Herbert Xu ) [446522]
  - [CRYPTO] skcipher: Use RNG instead of get_random_bytes (Herbert Xu ) [446526]
  - [CRYPTO] rng: RNG interface and implementation (Herbert Xu ) [446526]
  - [CRYPTO] api: Add fips_enable flag (Herbert Xu ) [444634]
  - [CRYPTO] cryptomgr - Test ciphers using ECB (Herbert Xu ) [446522]
  - [CRYPTO] api - Use test infrastructure (Herbert Xu ) [446522]
  - [CRYPTO] cryptomgr - Add test infrastructure (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt - Add alg_test interface (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: self test for des3_ebe cipher (Herbert Xu ) [446522]
  - [CRYPTO] api: missing accessors for new crypto_alg field (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Abort and only log if there is an error (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Avoid using contiguous pages (Herbert Xu ) [446522]
  - [CRYPTO] tcrpyt: Remove unnecessary kmap/kunmap calls (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Catch cipher destination mem corruption (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Shrink the tcrypt module (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: AES CBC test vector from NIST SP800-38A (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Change the usage of the test vectors (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Shrink speed templates (Herbert Xu ) [446522]
  - [CRYPTO] tcrypt: Group common speed templates (Herbert Xu ) [446522]
  - [fs] jdb: fix error handling for checkpoint I/O (Hideo AOKI ) [439581]
  - [fs] ext3: add checks for errors from jbd (Hideo AOKI ) [439581]
  - [fs] jbd: fix commit code to properly abort journal (Hideo AOKI ) [439581]
  - [fs] jbd: don't dirty original metadata buffer on abort (Hideo AOKI ) [439581]
  - [fs] jdb: abort when failed to log metadata buffers (Hideo AOKI ) [439581]
  - [fs] ext3: don't read inode block if buf has write error (Hideo AOKI ) [439581]
  - [fs] jdb: add missing error checks for file data writes (Hideo AOKI ) [439581]
  - [net] tun: add IFF_VNET_HDR, TUNGETFEATURES, TUNGETIFF (Herbert Xu ) [459719]
  - [acpi] increase deep idle state residency on platforms-2 (Matthew Garrett ) [455449]
  - [acpi] increase deep idle state residency on platforms (Matthew Garrett ) [455447]
  - [acpi] cpufreq: update to upstream for RHEL-5.3 (Matthew Garrett ) [449787]
  - [acpi] thinkpad_acpi: update to upstream for RHEL-5.3 (Matthew Garrett ) [457101]
  - [xen] fix crash on IRQ exhaustion and increase NR_IRQS (Bill Burns ) [442736]
  - [ide] enable DRAC4 (John Feeney ) [459197]
  - [md] move include files to include/linux for exposure (Jonathan Brassow ) [429337]
  - [md] expose dm.h macros (Jonathan Brassow ) [429337]
  - [md] remove internal mod refs fields from interface (Jonathan Brassow ) [429337]
  - [md] dm-log: move register functions (Jonathan Brassow ) [429337]
  - [md] dm-log: clean interface (Jonathan Brassow ) [429337]
  - [md] clean up the dm-io interface (Jonathan Brassow ) [429337]
  - [md] dm-log: move dirty log into separate module (Jonathan Brassow ) [429337]
  - [md] device-mapper interface exposure (Jonathan Brassow ) [429337]
  - [cifs] enable SPNEGO and DFS upcalls in config-generic (Jeff Layton ) [453462]
  - [fs] cifs: latest upstream for RHEL-5.3 (Jeff Layton ) [453462 431868 443395 445522 446142 447400]
  - [fs] introduce a function to register iget failure (Jeff Layton ) [453462]
  - [fs] proc: fix ->open'less usage due to ->proc_fops flip (Jeff Layton ) [453462]
  - [security] key: fix lockdep warning when revoking auth (Jeff Layton ) [453462]
  - [security] key: increase payload size when instantiating (Jeff Layton ) [453462]
  - [fs] call flush_disk after detecting an online resize (Jeff Moyer ) [444964]
  - [fs] add flush_disk to flush out common buffer cache (Jeff Moyer ) [444964]
  - [fs] check for device resize when rescanning partitions (Jeff Moyer ) [444964]
  - [fs] adjust block device size after an online resize (Jeff Moyer ) [444964]
  - [fs] wrapper for lower-level revalidate_disk routines (Jeff Moyer ) [444964]
  - [scsi] sd: revalidate_disk wrapper (Jeff Moyer ) [444964]
  - [xen] virtio: add PV network and block drivers for KVM (Mark McLoughlin ) [446214]
  - [misc] remove MAX_ARG_PAGES limit: var length argument (Jerome Marchand ) [443659]
  - [misc] remove MAX_ARG_PAGES limit: rework execve audit (Jerome Marchand ) [443659]
  - [misc] remove MAX_ARG_PAGES limit: independent stack top (Jerome Marchand ) [443659]
  - [ia64] kprobes: support kprobe-booster (Masami Hiramatsu ) [438733]
  - [audit] fix compile when CONFIG_AUDITSYSCALL is disabled (Prarit Bhargava ) [452577]
  - [nfs] v4: handle old format exports gracefully (Brad Peters ) [427424]
  - [xen] x86: fix building with max_phys_cpus=128 (Bill Burns ) [447958]
  - [xen] Intel EPT 2MB patch (Bill Burns ) [426679]
  - [xen] Intel EPT Migration patch (Bill Burns ) [426679]
  - [xen] Intel EPT Patch (Bill Burns ) [426679]
  - [xen] Intel pre EPT Patch (Bill Burns ) [426679]
  - [xen] AMD 2MB backing pages support (Bhavna Sarathy ) [251980]


author: Don Zickus <dzickus@redhat.com> [2.6.18-111.el5]
changelog:
  - [ia64] kabi: remove sn symbols from whitelist (Jon Masters ) [455308]
  - [net] bnx2x: update to upstream version 1.45.21 (Andy Gospodarek ) [442026]
  - [net] cxgb3: updates and lro fixes (Andy Gospodarek ) [441959]
  - [net] niu: enable support for Sun Neptune cards (Andy Gospodarek ) [441416]
  - [scsi] scsi_host_lookup: error returns and NULL pointers (Tom Coughlan ) [460195]
  - [scsi] scsi_netlink: transport/LLD receive/event support (Tom Coughlan ) [460195]
  - [misc] install correct kernel chksum file for FIPS140-2 (Chris Lalancette ) [444632]
  - [net] ixgbe: update to version 1.3.18-k4 (Andy Gospodarek ) [436044]
  - [dlm] fix address compare (David Teigland ) [459585]
  - [net] bonding: fix locking in 802.3ad mode (Andy Gospodarek ) [457300]
  - [openib] OFED-1.3.2-pre update (Doug Ledford ) [439565 443476 453110 458886 459052 458375 459052 230035 460623]
  - [md] dm snapshot: use per device mempools (Mikulas Patocka ) [460846]
  - [md] dm kcopyd: private mempool (Mikulas Patocka ) [460845]
  - [md] deadlock with nested LVMs (Mikulas Patocka ) [460845]
  - [net] skge: don't clear MC state on link down (Andy Gospodarek ) [406051]
  - [net] sky2: re-enable 88E8056 for most motherboards (Andy Gospodarek ) [420961]
  - [net] update myri10ge 10Gbs ethernet driver (Flavio Leitner ) [357191]
  - [net] bnx2: update to upstream version 1.7.9 (Andy Gospodarek ) [441964]
  - [net] e1000e: update to upstream version 0.3.3.3-k2 (Andy Gospodarek ) [436045]
  - [net] tg3: update to upstream version 3.93 (Andy Gospodarek ) [441975 440958 436686]
  - [net] igb: update to upstream version 1.2.45-k2 (Andy Gospodarek ) [436040]
  - [misc] intel: new SATA, USB, HD Audio and I2C(SMBUS) ids (John Villalovos ) [433538]
  - [net] bnx2x: update to upstream version 1.45.20 (Andy Gospodarek ) [442026]
  - [net] ixgb: hardware support and other upstream fixes (Andy Gospodarek ) [441609]
  - [x86] amd oprofile: support instruction based sampling (Bhavna Sarathy ) [438385]
  - [scsi] cciss: support for sg_ioctl (Tomas Henzl ) [250483]
  - [scsi] cciss: support for new controllers (Tomas Henzl ) [437497 447427]
  - [net] pppoe: check packet length on all receive paths (Jiri Pirko ) [457013]
  - [scsi] iscsi: fix nop timeout detection (mchristi@redhat.com ) [453969]
  - [scsi] lpfc: update to version 8.2.0.30 (Tom Coughlan ) [441746]
  - [md] fix handling of sense buffer in eh commands (Doug Ledford ) [441640]
  - [md] fix error propogation in raid arrays (Doug Ledford ) [430984]
  - [md] dm: reject barrier requests (Milan Broz ) [458936]
  - [scsi] 3w-9xxx: update to version 2.26.08.003 (Tomas Henzl ) [451946]
  - [scsi] 3w-xxxx: update to version 1.26.03.000 (Tomas Henzl ) [451945]
  - [scsi] megaraid_sas: update to version 4.01-rh1 (Tomas Henzl ) [442913]
  - [md] dm snapshot: fix race during exception creation (Mikulas Patocka ) [459337]
  - [md] dm-snapshots: race condition and data corruption (Mikulas Patocka ) [459337]
  - [md] dm crypt: use cond_resched (Milan Broz ) [459095]
  - [md] dm mpath: fix bugs in error paths (Milan Broz ) [459092]
  - [mm] fix support for fast get user pages (Ed Pollard ) [447649]
  - [xen] ia64 PV: config file changes to add support (Don Dutile ) [442991]
  - [xen] ia64 PV: Kconfig additions (Don Dutile ) [442991]
  - [xen] ia64 PV: Makefile changes (Don Dutile ) [442991]
  - [xen] ia64 PV: shared used header file changes (Don Dutile ) [442991]
  - [IA64] Correct pernodesize calculation (George Beshers ) [455308]
  - [IA64] Fix large MCA bootmem allocation (George Beshers ) [455308]
  - [IA64] Disable/re-enable CPE interrupts on Altix (George Beshers ) [455308]
  - [IA64] Don't set psr.ic and psr.i simultaneously (George Beshers ) [455308]
  - [IA64] Support multiple CPUs going through OS_MCA (George Beshers ) [455308]
  - [IA64] Remove needless delay in MCA rendezvous (George Beshers ) [455308]
  - [IA64] Clean up CPE handler registration (George Beshers ) [455308]
  - [IA64] CMC/CPE: Reverse fetching log and checking poll (George Beshers ) [455308]
  - [IA64] Force error to surface in nofault code (George Beshers ) [455308]
  - [IA64] Fix Altix BTE error return status (George Beshers ) [455308]
  - [IA64] BTE error timer fix (George Beshers ) [455308]
  - [IA64] Update processor_info features (George Beshers ) [455308]
  - [IA64] More Itanium PAL spec updates (George Beshers ) [455308]
  - [IA64] Add se bit to Processor State Parameter structure (George Beshers ) [455308]
  - [IA64] Add dp bit to cache and bus check structs (George Beshers ) [455308]
  - [IA64] PAL calls need physical mode, stacked (George Beshers ) [455308]
  - [IA64] Cache error recovery (George Beshers ) [455308]
  - [IA64] handle TLB errors from duplicate itr.d dropins (George Beshers ) [455308]
  - [IA64] MCA recovery: Montecito support (George Beshers ) [455308]


author: Don Zickus <dzickus@redhat.com> [2.6.18-110.el5]
changelog:
  - [x86_64] use strncmp for memmap=exactmap boot argument (Prarit Bhargava ) [450244]
  - [wireless] compiler warning fixes for mac80211 update (John W. Linville ) [438391]
  - [serial] 8250: support for DTR/DSR hardware flow control (Aristeu Rozanski ) [445215]
  - [tty] add termiox support (Aristeu Rozanski ) [445211]
  - [vt] add shutdown method (Aristeu Rozanski ) [239604]
  - [tty] add shutdown method (Aristeu Rozanski ) [239604]
  - [tty] cleanup release_mem (Aristeu Rozanski ) [239604]
  - [mm] keep pagefault from happening under page lock (Josef Bacik ) [445433]
  - [wireless] iwlwifi: post-2.6.27-rc3 to support iwl5x00 (John W. Linville ) [438388]
  - [net] random32: seeding improvement (Jiri Pirko ) [458019]
  - [usb] work around ISO transfers in SB700 (Pete Zaitcev ) [457723]
  - [x86_64] AMD 8-socket APICID patches (Prarit Bhargava ) [459813]
  - [misc] make printk more robust against kexec shutdowns (Neil Horman ) [458368]
  - [fs] ext4: backport to rhel5.3 interfaces (Eric Sandeen ) [458718]
  - [fs] ext4: Kconfig/Makefile/config glue (Eric Sandeen ) [458718]
  - [fs] ext4: fixes from upstream pending patch queue (Eric Sandeen ) [458718]
  - [fs] ext4: revert delalloc upstream mods (Eric Sandeen ) [458718]
  - [fs] ext4: 2.6.27-rc3 upstream codebase (Eric Sandeen ) [458718]
  - [fs] ext4: new s390 bitops (Eric Sandeen ) [459436]
  - [usb] wacom: add support for Cintiq 20WSX (Aristeu Rozanski ) [248903]
  - [usb] wacom: add support for Intuos3 4x6 (Aristeu Rozanski ) [370471]
  - [usb] wacom: fix maximum distance values (Aristeu Rozanski ) [248903]
  - [x86] hpet: consolidate assignment of hpet_period (Brian Maly ) [435726]
  - [openib] lost interrupt after LPAR to LPAR communication (Brad Peters ) [457838]
  - [firmware] fix ibft offset calculation (mchristi@redhat.com ) [444776]
  - [block] performance fix for too many physical devices (Mikulas Patocka ) [459527]
  - [ide] Fix issue when appending data on an existing DVD (Mauro Carvalho Chehab ) [457025]
  - [misc] fix kernel builds on modern userland (Matthew Garrett ) [461540]
  - [x86_64] AMD IOMMU driver support (Bhavna Sarathy ) [251970]
  - [x86_64] GART iommu alignment fixes (Prarit Bhargava ) [455813]
  - [firewire] latest upstream snapshot for RHEL-5.3 (Jay Fenlason ) [449520 430300 429950 429951]
  - [net] ipv6: configurable address selection policy table (Neil Horman ) [446063]
  - [fs] relayfs: support larger on-memory buffer (Masami Hiramatsu ) [439269]
  - [xen] ia64: speed up hypercall for guest domain creation (Tetsu Yamamoto ) [456171]
  - [xen] make last processed event channel a per-cpu var (Tetsu Yamamoto ) [456171]
  - [xen] process event channel notifications in round-robin (Tetsu Yamamoto ) [456171]
  - [xen] use unlocked_ioctl in evtchn, gntdev and privcmd (Tetsu Yamamoto ) [456171]
  - [xen] disallow nested event delivery (Tetsu Yamamoto ) [456171]
  - [ppc64] spu: add cpufreq governor (Ed Pollard ) [442410]
  - [misc] cleanup header warnings and enable header check (Don Zickus ) [458360]
  - [mm] NUMA: over-committing memory compiler warnings (Larry Woodman ) [457264]
  - [misc] mmtimer: fixes for high resolution timers (George Beshers ) [442186]
  - [x86_64] xen: local DOS due to NT bit leakage (Eugene Teo ) [457722] {CVE-2006-5755}
  - [xen] ia64: mark resource list functions __devinit (Tetsu Yamamoto ) [430219]
  - [xen] ia64: issue ioremap HC in pci_acpi_scan_root (Tetsu Yamamoto ) [430219]
  - [xen] ia64: revert paravirt to ioremap /proc/pci (Tetsu Yamamoto ) [430219]
  - [xen] ia64: disable paravirt to remap /dev/mem (Tetsu Yamamoto ) [430219]
  - [x86_64] kprobe: kprobe-booster and return probe-booster (Masami Hiramatsu ) [438725]
  - [xen] NUMA: extend physinfo sysctl to export topo info (Tetsu Yamamoto ) [454711]
  - [xen] ia64: kludge for XEN_GUEST_HANDLE_64 (Tetsu Yamamoto ) [454711]
  - [xen] ia64: NUMA support (Tetsu Yamamoto ) [454711]
  - [misc] pipe support to /proc/sys/net/core_pattern (Neil Horman ) [410871]
  - [xen] ia64: fix and cleanup move to psr (Tetsu Yamamoto ) [447453]
  - [xen] ia64: turn off psr.i after PAL_HALT_LIGHT (Tetsu Yamamoto ) [447453]
  - [xen] ia64: fix ia64_leave_kernel (Tetsu Yamamoto ) [447453]
  - [xen] page scrub: serialise softirq with a new lock (Tetsu Yamamoto ) [456171]
  - [xen] serialize scrubbing pages (Tetsu Yamamoto ) [456171]
  - [xen] ia64: don't warn for EOI-ing edge triggered intr (Tetsu Yamamoto ) [430219]
  - [xen] ia64: remove regNaT fault message (Tetsu Yamamoto ) [430219]
  - [xen] ia64: suppress warning of __assign_domain_page (Tetsu Yamamoto ) [430219]
  - [xen] ia64: remove annoying log message (Tetsu Yamamoto ) [430219]
  - [xen] ia64: quieter Xen boot (Tetsu Yamamoto ) [430219]
  - [xen] ia64: quiet lookup_domain_mpa when domain is dying (Tetsu Yamamoto ) [430219]
  - [xen] ia64: fix XEN_SYSCTL_physinfo to handle NUMA info (Tetsu Yamamoto ) [454711]
  - [xen] ia64: fixup physinfo (Tetsu Yamamoto ) [454711]


author: Don Zickus <dzickus@redhat.com> [2.6.18-109.el5]
changelog:
  - [misc] cpufreq: fix format string bug (Vitaly Mayatskikh ) [459460]
  - [x86_64] perfctr: dont use CCCR_OVF_PMI1 on Pentium 4 Ds (Aristeu Rozanski ) [447618]
  - [wireless] iwlwifi: fix busted tkip encryption (John W. Linville ) [438388]
  - [wireless] ath5k: fixup Kconfig mess from update (John W. Linville ) [445578]
  - [fs] cifs: fix O_APPEND on directio mounts (Jeff Layton ) [460063]
  - [ia64] oprofile: recognize Montvale cpu as Itanium2 (Dave Anderson ) [452588]
  - [block] aoe: use use bio->bi_idx to avoid panic (Tom Coughlan ) [440506]
  - [x86] make bare-metal oprofile recognize other platforms (Markus Armbruster ) [458441]
  - [scsi] areca: update for RHEL-5.3 (Tomas Henzl ) [436068]
  - [sata] prep work for rhel5.3 (David Milburn ) [439247 445727 450962 451586 455445]
  - [sata] update driver to 2.6.26-rc5 (David Milburn ) [439247 442906 445727 450962 451586 455445 459197]
  - [openib] race between QP async handler and destroy_qp (Brad Peters ) [446109]
  - [mm] don't use large pages to map the first 2/4MB of mem (Larry Woodman ) [455504]
  - [mm] holdoffs in refresh_cpu_vm_stats using latency test (George Beshers ) [447654]
  - [ppc64] cell spufs: fix HugeTLB (Brad Peters ) [439483]
  - [ppc64] cell spufs: update with post 2.6.25 patches (Brad Peters ) [439483]
  - [xen] ia64 oprofile: recognize Montvale cpu as Itanium2 (Dave Anderson ) [452588]
  - [xen] x86: make xenoprof recognize other platforms (Markus Armbruster ) [458441]


author: Don Zickus <dzickus@redhat.com> [2.6.18-108.el5]
changelog:
  - [net] NetXen: remove performance optimization fix (Tony Camuso ) [457958]
  - [net] NetXen: update to upstream 2.6.27 (tcamuso@redhat.com ) [457958]
  - [net] NetXen: fixes from upstream 2.6.27 (tcamuso@redhat.com ) [457958]
  - [net] NetXen: cleanups from upstream 2.6.27 (tcamuso@redhat.com ) [457958]
  - [fs] anon_inodes implementation (Eduardo Habkost ) [459835]
  - [x86] PCI domain support (Jeff Garzik ) [228290]
  - [net] udp: possible recursive locking (Hideo AOKI ) [458909]
  - [gfs2] multiple writer performance issue (Abhijith Das ) [459738]
  - [alsa] asoc: double free and mem leak in i2c codec (Jaroslav Kysela ) [460103]
  - [net] ibmveth: cluster membership problems (Brad Peters ) [460379]
  - [net] ipv6: drop outside of box loopback address packets (Neil Horman ) [459556]
  - [net] dccp_setsockopt_change integer overflow (Vitaly Mayatskikh ) [459235] {CVE-2008-3276}
  - [x86] execute stack overflow warning on interrupt stack (Michal Schmidt ) [459810]
  - [ppc] export LPAR CPU utilization stats for use by hv (Brad Peters ) [439516]
  - [acpi] error attaching device data (peterm@redhat.com ) [459670]
  - [md] fix crashes in iterate_rdev (Doug Ledford ) [455471]
  - [utrace] signal interception breaks systemtap uprobes (Roland McGrath ) [459786]
  - [misc] markers and tracepoints: config patch (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: kabi fix-up patch (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: probes (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: sched patch (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: irq patch (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: create Module.markers (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: markers docs (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: markers samples (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: markers (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: tracepoint samples (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: tracepoints (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: samples patch (jbaron@redhat.com ) [329821]
  - [misc] markers and tracepoints: rcu-read patch (jbaron@redhat.com ) [329821]
  - [x86] nmi: fix disable and enable _timer_nmi_watchdog (Aristeu Rozanski ) [447618]
  - [x86] nmi: disable LAPIC/IO APIC on unknown_nmi_panic (Aristeu Rozanski ) [447618]
  - [x86] nmi: use lapic_adjust_nmi_hz (Aristeu Rozanski ) [447618]
  - [x86] nmi: update check_nmi_watchdog (Aristeu Rozanski ) [447618]
  - [x86] nmi: update reserve_lapic_nmi (Aristeu Rozanski ) [447618]
  - [x86] nmi: use setup/stop routines in suspend/resume (Aristeu Rozanski ) [447618]
  - [x86] nmi: change nmi_active usage (Aristeu Rozanski ) [447618]
  - [x86] nmi: update nmi_watchdog_tick (Aristeu Rozanski ) [447618]
  - [x86] nmi: introduce do_nmi_callback (Aristeu Rozanski ) [447618]
  - [x86] nmi: introduce per-cpu wd_enabled (Aristeu Rozanski ) [447618]
  - [x86] nmi: add perfctr infrastructure (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: add missing prototypes in xen headers (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: kill disable_irq calls (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: disable LAPIC/IO APIC on unknown_nmi_panic (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: use perfctr functions for probing (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: update check_nmi_watchdog (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: update reserve_lapic_nmi (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: use new setup/stop routines in suspend/resume (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: change nmi_active usage (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: update nmi_watchdog_tick (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: setup apic to handle both IO APIC and LAPIC (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: introduce do_nmi_callback (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: introduce per-cpu wd_enabled (Aristeu Rozanski ) [447618]
  - [x86_64] nmi: add perfctr infrastructure (Aristeu Rozanski ) [447618]
  - [mm] drain_node_page: drain pages in batch units (George Beshers ) [442179]
  - [mm] optimize ZERO_PAGE in 'get_user_pages' and fix XIP (Anton Arapov ) [452668] {CVE-2008-2372}
  - [x86_64] UEFI code support (Brian Maly ) [253295]


author: Don Zickus <dzickus@redhat.com> [2.6.18-107.el5]
changelog:
  -  [scsi] mptscsi: check for null device in error handler (Doug Ledford ) [441832]
  - [openib] ehca: local CA ACK delay has an invalid value (Brad Peters ) [458378]
  - [gfs2] fix metafs (Abhijith Das ) [457798]
  - [sound] HDMI Audio: new PCI device ID (Bhavna Sarathy ) [459221]
  - [s390] cio: memory leak when ccw devices are discarded (Hans-Joachim Picht ) [459495]
  - [openib] ehca: handle two completions for one work req (Brad Peters ) [459142]
  - [scsi] cciss: possible race condition during init (Ivan Vecera ) [455663]
  - [wireless] rtl818x: add driver from 2.6.26 (John W. Linville ) [448764]
  - [wireless] rt2x00: add driver from 2.6.26 (John W. Linville ) [448763]
  - [wireless] ath5k: add driver from 2.6.26 (John W. Linville ) [445578]
  - [wireless] iwlwifi update to version from 2.6.26 (John W. Linville ) [438395]
  - [wireless] mac80211 update to version from 2.6.26 (John W. Linville ) [438391 438464 446076]
  - [wireless] infrastructure changes for mac80211 update (John W. Linville ) [438391]
  - [xen] xennet: coordinate ARP with backend network status (Herbert Xu ) [458934]
  - [x86] oprofile: enable additional perf counters (Markus Armbruster ) [426096]
  - [wireless] update zd1211rw to last non-mac80211 version (John W. Linville ) [448762]
  - [wireless] update bcm43xx driver to 2.6.25 (John W. Linville ) [448762]
  - [wireless] update ipw2x00 driver to 2.6.25 (John W. Linville ) [448762]
  - [wireless] update ieee80211 to 2.6.25 (John W. Linville ) [448762]
  - [xen] hv: support up to 128 cpus (Bill Burns ) [447958]
  - [gfs2] rm on multiple nodes causes panic (Bob Peterson ) [458289]
  - [gfs2] d_rwdirectempty fails with short read (Benjamin Marzinski ) [456453]
  - [sound] snd_seq_oss_synth_make_info info leak (Eugene Teo ) [458001] {CVE-2008-3272}
  - Revert: [mm] add support for fast get user pages (Ed Pollard ) [447649]
  - [xen] fix GDT allocation for 128 CPUs (Bill Burns ) [447958]
  - [xen] fix building with max_phys_cpus=128 (Bill Burns ) [447958]
  - [xen] limit dom0 to 32GB by default (Rik van Riel ) [453467]
  - [xen] automatically make heap larger on large mem system (Rik van Riel ) [453467]


author: Don Zickus <dzickus@redhat.com> [2.6.18-106.el5]
changelog:
  - [x86_64] resume from s3 in text mode with >4GB of mem (Matthew Garrett ) [452961]
  - [x86] kdump: calgary iommu: use boot kernel's TCE tables (Tom Coughlan ) [239272]
  - [net] neigh_destroy: call destructor before unloading (Brad Peters ) [449161]
  - [usb] removing bus with an open file causes an oops (Pete Zaitcev ) [450786]
  - [nfs] missing nfs_fattr_init in nfsv3 acl functions (Jeff Layton ) [453711]
  - [xen] x86: fix endless loop when GPF (Chris Lalancette ) [457093]
  - [dlm] user.c input validation fixes (David Teigland ) [458760]
  - [serial] support for Digi PCI-E 4-8port Async IO adapter (Brad Peters ) [439443]
  - [cpufreq] acpi: boot crash due to _PSD return-by-ref (John Villalovos ) [428909]
  - [x86] io_apic: check timer with irq off (Brian Maly ) [432407]
  - [nfs] v4: don't reuse expired nfs4_state_owner structs (Jeff Layton ) [441884]
  - [nfs] v4: credential ref leak in nfs4_get_state_owner (Jeff Layton ) [441884]
  - [xen] PVFB probe & suspend fixes fix (Markus Armbruster ) [459107]
  - [x86] acpi: prevent resources from corrupting memory (Prarit Bhargava ) [458988]
  - [mm] add support for fast get user pages (Ed Pollard ) [447649]
  - [ipmi] control BMC device ordering (peterm@redhat.com ) [430157]
  - [net] pppoe: fix skb_unshare_check call position (Jiri Pirko ) [459062]
  -  [net] ipv6: use timer pending to fix bridge ref count (Jiri Pirko ) [457006]
  - [nfs] v4: Poll aggressively when handling NFS4ERR_DELAY (Jeff Layton ) [441884]
  - [net] ixgbe: fix EEH recovery time (Brad Peters ) [457466]
  - [net] pppoe: unshare skb before anything else (Jiri Pirko ) [457018]
  - [ppc64] EEH: facilitate vendor driver recovery (Brad Peters ) [457253]
  - [ia64] fix to check module_free parameter (Masami Hiramatsu ) [457961]
  - [video] make V4L2 less verbose (Mauro Carvalho Chehab ) [455230]
  - [autofs4] remove unused ioctls (Ian Kent ) [452139]
  - [autofs4] reorganize expire pending wait function calls (Ian Kent ) [452139]
  - [autofs4] fix direct mount pending expire race (Ian Kent ) [452139]
  - [autofs4] fix indirect mount pending expire race (Ian Kent ) [452139]
  - [autofs4] fix pending checks (Ian Kent ) [452139]
  - [autofs4] cleanup redundant readdir code (Ian Kent ) [452139]
  - [autofs4] keep most direct and indirect dentrys positive (Ian Kent ) [452139]
  - [autofs4] fix waitq memory leak (Ian Kent ) [452139]
  - [autofs4] check communication pipe is valid for write (Ian Kent ) [452139]
  - [autofs4] fix waitq locking (Ian Kent ) [452139]
  - [autofs4] fix pending mount race (Ian Kent ) [452139]
  - [autofs4] use struct qstr in waitq.c (Ian Kent ) [452139]
  - [autofs4] use lookup intent flags to trigger mounts (Ian Kent ) [448869]
  - [autofs4] hold directory mutex if called in oz_mode (Ian Kent ) [458749]
  - [autofs4] use rehash list for lookups (Ian Kent ) [458749]
  - [autofs4] don't make expiring dentry negative (Ian Kent ) [458749]
  - [autofs4] fix mntput, dput order bug (Ian Kent ) [452139]
  - [autofs4] bad return from root.c:try_to_fill_dentry (Ian Kent ) [452139]
  - [autofs4] sparse warn in waitq.c:autofs4_expire_indirect (Ian Kent ) [452139]
  - [autofs4] check for invalid dentry in getpath (Ian Kent ) [452139]
  - [misc] create a kernel checksum file per FIPS140-2 (Don Zickus ) [444632]
  - [net] h323: Fix panic in conntrack module (Thomas Graf ) [433661]
  -  [misc] NULL pointer dereference in kobject_get_path (Jiri Pirko ) [455460]
  - [audit] new filter type, AUDIT_FILETYPE (Alexander Viro ) [446707]
  -  [ppc64] missed hw breakpoints across multiple threads (Brad Peters ) [444076]
  - [net] race between neigh_timer_handler and neigh_update (Brad Peters ) [440555]
  - [security] NULL ptr dereference in __vm_enough_memory (Jerome Marchand ) [443659]
  - [ppc64] cell: spufs update for RHEL-5.3 (Brad Peters ) [439483]
  - [misc] null pointer dereference in register_kretprobe (Jerome Marchand ) [452308]
  - [alsa] HDA: update to 2008-07-22 (Jaroslav Kysela ) [456215]
  - [ia64] xen: handle ipi case IA64_TIMER_VECTOR (Luming Yu ) [451745]
  - [misc] batch kprobe register/unregister (Jiri Pirko ) [437579]
  - [ia64] add gate.lds to Documentation/dontdiff (Prarit Bhargava ) [449948]
  - [xen] fix netloop restriction (Bill Burns ) [358281]
  - [nfs] revert to sync writes when background write errors (Jeff Layton ) [438423]
  - [ia64] kdump: implement greater than 4G mem restriction (Doug Chapman ) [446188]
  - [nfs] clean up short packet handling for NFSv4 readdir (Jeff Layton ) [428720]
  - [nfs] clean up short packet handling for NFSv2 readdir (Jeff Layton ) [428720]
  - [nfs] clean up short packet handling for NFSv3 readdir (Jeff Layton ) [428720]


author: Don Zickus <dzickus@redhat.com> [2.6.18-105.el5]
changelog:
  - [misc] pnp: increase number of devices (Prarit Bhargava ) [445590]
  - [ppc] PERR/SERR disabled after EEH error recovery (Brad Peters ) [457468]
  - [ppc] eHEA: update from version 0076-05 to 0091-00 (Brad Peters ) [442409]
  - [net] modifies inet_lro for RHEL (Brad Peters ) [442409]
  - [net] adds inet_lro module (Brad Peters ) [442409]
  - [ppc] adds crashdump shutdown hooks (Brad Peters ) [442409]
  - [ppc] xmon: setjmp/longjmp code generically available (Brad Peters ) [442409]
  - [xen] PV:  config file changes (Don Dutile ) [442991]
  - [xen] PV: Makefile and Kconfig additions (Don Dutile ) [442991]
  - [xen] PV: add subsystem (Don Dutile ) [442991]
  - [xen] PV: shared used header file changes (Don Dutile ) [442991]
  - [xen] PV: shared use of xenbus, netfront, blkfront (Don Dutile ) [442991]
  - [fs] backport zero_user_segments and friends (Eric Sandeen ) [449668]
  - [fs] backport list_first_entry helper (Eric Sandeen ) [449668]
  - [ia64] fix boot failure on ia64/sn2 (Luming Yu ) [451745]
  - [ia64] move SAL_CACHE_FLUSH check later in boot (Luming Yu ) [451745]
  - [ia64] use platform_send_ipi in check_sal_cache_flush (Luming Yu ) [451745]
  - [xen] avoid dom0 hang when tearing down domains (Chris Lalancette ) [347161]
  - [xen] ia64: SMP-unsafe with XENMEM_add_to_physmap on HVM (Tetsu Yamamoto ) [457137]


author: Don Zickus <dzickus@redhat.com> [2.6.18-104.el5]
changelog:
  - [crypto] IPsec memory leak (Vitaly Mayatskikh ) [455238]
  - [ppc] edac: add support for Cell processor (Brad Peters ) [439507]
  - [ppc] edac: add pre-req support for Cell processor (Brad Peters ) [439507]
  - [scsi] DLPAR remove operation fails on LSI SCSI adapter (Brad Peters ) [457852]
  - [net] bridge: eliminate delay on carrier up (Herbert Xu ) [453526]
  -  [mm] tmpfs: restore missing clear_highpage (Eugene Teo ) [426083]{CVE-2007-6417}
  - [scsi] aic94xx: update to 2.6.25 (Ed Pollard ) [439573]
  - [fs] dio: lock refcount operations (Jeff Moyer ) [455750]
  - [fs] vfs: fix lookup on deleted directory (Eugene Teo ) [457866]{CVE-2008-3275}
  - [fs] jbd: fix races that lead to EIO for O_DIRECT (Brad Peters ) [446599]
  - [fs] add percpu_counter_add & _sub (Eric Sandeen ) [443896]
  - [xen] event channel lock and barrier (Markus Armbruster ) [457086]
  - [ppc] adds DSCR support in sysfs (Brad Peters ) [439567]
  - [ppc] oprofile: wrong cpu_type returned (Brad Peters ) [441539]
  - [s390] utrace: PTRACE_POKEUSR_AREA corrupts ACR0 (Anton Arapov ) [431183]
  - [pci] fix problems with msi interrupt management (Michal Schmidt ) [428696]
  - [misc] fix wrong test in wait_task_stopped (Jerome Marchand ) [382211]
  - [fs] ecryptfs: use page_alloc to get a page of memory (Eric Sandeen ) [457058]
  - [misc]  serial: fix break handling for i82571 over LAN (Aristeu Rozanski ) [440018]
  - [xen] blktap: expand for longer busids (Chris Lalancette ) [442723]
  - [xen] fix blkfront to accept > 16 devices (Chris Lalancette ) [442723]
  - [xen] expand SCSI majors in blkfront (Chris Lalancette ) [442077]
  - [misc] core dump: remain dumpable (Jerome Marchand ) [437958]
  - [fs] inotify: previous event should be last in list (Jeff Burke ) [453990]
  - [block] Enhanced Partition Statistics: documentation (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: retain old stats (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: procfs (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: sysfs (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: cpqarray fix (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: cciss fix (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: aoe fix (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: update statistics (Jerome Marchand ) [224322]
  - [block] Enhanced Partition Statistics: core statistics (Jerome Marchand ) [224322]
  - [fs] add clear_nlink, drop_nlink (Eric Sandeen ) [443896]
  - [fs] add buffer_submit_read and bh_uptodate_or_lock (Eric Sandeen ) [443896]
  - [fs] noinline_for_stack attribute (Eric Sandeen ) [443896]
  - [fs] i_version updates (Eric Sandeen ) [443896]
  - [fs] add an ERR_CAST function (Eric Sandeen ) [443896]
  - [fs] introduce is_owner_or_cap (Eric Sandeen ) [443896]
  - [fs] add generic_find_next_le_bit (Eric Sandeen ) [443896]
  - [fs] add le32_add_cpu and friends (Eric Sandeen ) [443896]
  - [net] sctp: export needed data to implement RFC 3873 (Neil Horman ) [277111]
  - [xen] x86: xenoprof enable additional perf counters (Markus Armbruster ) [426096]


author: Don Zickus <dzickus@redhat.com> [2.6.18-103.el5]
changelog:
  - [fs] dio: use kzalloc to zero out struct dio (Jeff Moyer ) [439918]
  - [x86] hugetlb: inconsistent get_user_pages (x86 piece) (Brad Peters ) [456449]
  - [fs] fix softlockups when repeatedly dropping caches (Bryn M. Reeves ) [444961]
  - [char] add hp-ilo driver (Tony Camuso ) [437212]
  - [net] do liberal tracking for picked up connections (Anton Arapov ) [448328]
  - [scsi] BusLogic: typedef bool to boolean for compiler (Chip Coldwell ) [445095]
  - [misc] ioc4: fixes - pci_put_dev, printks, mem resource (Jonathan Lim ) [442424]


author: Don Zickus <dzickus@redhat.com> [2.6.18-102.el5]
changelog:
  - [net] slow_start_after_idle influences cwnd validation (Thomas Graf ) [448918]
  - [dlm] fix a couple of races (David Teigland ) [457569]
  - [net] NetXen driver update to 3.4.18 (Ed Pollard ) [443619]
  - [mm] NUMA: system is slow when over-committing memory (Larry Woodman ) [457264]
  - [net] ixgbe: remove device ID for unsupported device (Andy Gospodarek ) [454910]
  - [ppc] Event Queue overflow on eHCA adapters (Brad Peters ) [446713]
  - [ppc] IOMMU Performance Enhancements (Brad Peters ) [439469]
  - [ppc] RAS update for Cell (Brad Peters ) [313731]
  - [ppc] fast little endian implementation for System p AVE (Brad Peters ) [439505]
  - [net] proc: add unresolved discards stat to ndisc_cache (Neil Horman ) [456732]
  - [x86_64] ia32: increase stack size (Larry Woodman ) [442331]
  - [mm] fix PAE pmd_bad bootup warning (Larry Woodman ) [455434]
  - [video] add uvcvideo module (Jay Fenlason ) [439899]
  - [crypto] add tests for cipher types to self test module (Neil Horman ) [446514]
  - [mm] fix debug printks in page_remove_rmap() (Larry Woodman ) [457458]
  - [mm] fix /proc/sys/vm/lowmem_reserve_ratio (Larry Woodman ) [457471]
  - [xen] add VPS sync read/write according to spec (Bill Burns ) [437096]
  - [xen] use VPS service to take place of PAL call (Bill Burns ) [437096]
  - [xen] enable serial console for new ia64 chip (Bill Burns ) [437096]


author: Don Zickus <dzickus@redhat.com> [2.6.18-101.el5]
changelog:
  - [ipmi] restrict keyboard I/O port reservation (peterm@redhat.com ) [456300]
  - [mm] xpmem: inhibit page swapping under heavy mem use (George Beshers ) [456574]
  - [fs] vfs: wrong error code on interrupted close syscalls (Jeff Layton ) [455729]
  - [misc] don't randomize when no randomize personality set (Bryn M. Reeves ) [444611]
  - [ia64] holdoffs in sn_ack_irq when running latency tests (Jonathan Lim ) [447838]
  - [xen] x86: new vcpu_op call to get physical CPU identity (Bhavana Nagendra ) [434548]
  - [xen] HV: memory corruption with large number of cpus (Chris Lalancette ) [449945]
  - [xen] save phys addr for crash utility (Bill Burns ) [443618]
  - [xen] kexec: allocate correct memory reservation (Bill Burns ) [442661]


author: Don Zickus <dzickus@redhat.com> [2.6.18-100.el5]
changelog:
  - [gfs2] glock dumping missing out some glocks (Steven Whitehouse ) [456334]
  - [scsi] ibmvscsi: add tape device support (Brad Peters ) [439488]
  - [misc] irq: reset stats when installing new handler (Eugene Teo ) [456218]
  - [scsi] ibmvscsi: latest 5.3 fixes and enhancements (Brad Peters ) [439487]
  - [selinux] prevent illegal selinux options when mounting (Eugene Teo ) [456052]
  - [xen] remove blktap sysfs entries before shutdown (Chris Lalancette ) [250104]
  - [xen] don't collide symbols with blktap (Chris Lalancette ) [250104]
  - [xen] blktap: modify sysfs entries to match blkback (Chris Lalancette ) [250104]
  - [xen] don't try to recreate sysfs entries (Chris Lalancette ) [250104]
  - [xen] blktap: stats error cleanup (Chris Lalancette ) [250104]
  - [xen] blktap: add statistics (Chris Lalancette ) [250104]
  - [xen] rename blktap kernel threads to blktap.dom.blkname (Chris Lalancette ) [250104]
  - [ia64] xen: incompatibility with HV and userspace tools (Tetsu Yamamoto ) [444589]
  - [usb] add ids for WWAN cards (John Feeney ) [253137]
  - [ia64] handle invalid ACPI SLIT table (Luming Yu ) [451591]
  - [pci] mmconfig: use conf1 for access below 256 bytes (Tony Camuso ) [441615 251493]
  - [pci] mmconfig: rm pci_legacy_ops and nommconf blacklist (Tony Camuso ) [441615 251493]
  - [pci] mmconfig: remove pci_bios_fix_bus_scan_quirk (Tony Camuso ) [441615 251493]
  - [fs] nlm: tear down RPC clients in nlm_shutdown_hosts (Jeff Layton ) [254195]
  - [fs] nlm: don't reattempt GRANT_MSG with an inflight RPC (Jeff Layton ) [254195]
  - [fs] nlm: canceled inflight GRANT_MSG shouldn't requeue (Jeff Layton ) [254195]
  - [fs] potential race in mark_buffer_dirty (Mikulas Patocka ) [442577]


author: Don Zickus <dzickus@redhat.com> [2.6.18-99.el5]
changelog:
  - [fs] lockd: nlmsvc_lookup_host called with f_sema held (Jeff Layton ) [453094]
  - [x86] don't call MP_processor_info for disabled cpu (Prarit Bhargava ) [455425]
  - [x86_64] don't call MP_processor_info for disabled cpu (Prarit Bhargava ) [455427]
  - [x86] show apicid in /proc/cpuinfo (Prarit Bhargava ) [455424]
  - [acpi] disable lapic timer on C2 states (John Villalovos ) [438409]
  - [acpi] enable deep C states for idle efficiency (Matthew Garrett ) [443516]
  - [fs] missing check before setting mount propagation (Eugene Teo ) [454393]
  - [xen] pvfb: frontend mouse wheel support (Markus Armbruster ) [446235]
  - [ppc] use ibm,slb-size from device tree (Brad Peters ) [432127]
  - [mm] dio: fix cache invalidation after sync writes (Jeff Moyer ) [445674]
  - [misc] fix UP compile in skcipher.h (Prarit Bhargava ) [453038]
  - [ia64] softlock: prevent endless warnings in kdump (Neil Horman ) [453200]
  - [net] s2io: fix documentation about intr_type (Michal Schmidt ) [450921]
  - [net] make udp_encap_rcv use pskb_may_pull (Neil Horman ) [350281]
  - [misc] fix compile when selinux is disabled (Prarit Bhargava ) [452535]
  - [scsi] update aacraid to 1.1.5-2455 (Chip Coldwell ) [429862]
  - [x86_64] ptrace: sign-extend orig_rax to 64 bits (Jerome Marchand ) [437882]
  - [x86_64] ia32 syscall restart fix (Jerome Marchand ) [434998]
  - [misc] optimize byte-swapping, fix -pedantic compile (Jarod Wilson ) [235699]
  - [dm] snapshot: reduce default memory allocation (Milan Broz ) [436494]
  - [dm] snapshot: fix chunksize sector conversion (Milan Broz ) [443627]
  - [net] ip tunnel can't be bound to another device (Michal Schmidt ) [451196]
  - [net] bnx2x: chip reset and port type fixes (Andy Gospodarek ) [441259]
  - [audit] records sender of SIGUSR2 for userspace (Eric Paris ) [428277]
  - [audit] deadlock under load and auditd takes a signal (Eric Paris ) [429941]
  - [audit] send EOE audit record at end of syslog events (Eric Paris ) [428275]
  - [x86] brk: fix RLIMIT_DATA check (Vitaly Mayatskikh ) [315681]
  - [misc] fix ?!/!? inversions in spec file (Jarod Wilson ) [451008]
  - [scsi] fix high I/O wait using 3w-9xxx (Tomas Henzl ) [444759]
  - [net] ipv6: fix unbalanced ref count in ndisc_recv_ns (Neil Horman ) [450855]
  - [fs] cifs: wait on kthread_stop before thread exits (Jeff Layton ) [444865]
  - [net] fix the redirected packet if jiffies wraps (Ivan Vecera ) [445536]
  - [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [435291]
  - [net] sunrpc: memory corruption from dead rpc client (Jeff Layton ) [432867]
  - [fs] debugfs: fix dentry reference count bug (Josef Bacik ) [445787]
  - [acpi] remove processor module errors (John Feeney ) [228836]
  - [fs] ext3: make fdatasync not sync metadata (Josef Bacik ) [445649]
  - [pci] acpiphp_ibm: let ACPI determine _CID buffer size (Prarit Bhargava ) [428874]
  - [fs] need process map reporting for swapped pages (Anton Arapov ) [443749]
  - [misc] optional panic on softlockup warnings (Prarit Bhargava ) [445422]
  - [net] sctp: support remote address table oid (Neil Horman ) [435110]
  - [nfs] knfsd: revoke setuid/setgid when uid/gid changes (Jeff Layton ) [443043]
  - [nfs] remove error field from nfs_readdir_descriptor_t (Jeff Layton ) [437479]


author: Don Zickus <dzickus@redhat.com> [2.6.18-98.el5]
changelog:
  - [nfs] sunrpc: sleeping rpc_malloc might deadlock (Jeff Layton ) [451317]
  - [gfs2] initial write performance very slow (Benjamin Marzinski ) [432826]
  - [ia64] avoid unnecessary TLB flushes when allocating mem (Doug Chapman ) [435362]
  - [gfs2] lock_dlm: deliver callbacks in the right order (Bob Peterson ) [447748]
  - [sound] alsa: HDA driver update from upstream 2008-06-11 (Jaroslav Kysela ) [451007]
  - [x86_64] xen: fix syscall return when tracing (Chris Lalancette ) [453394]
  - [fs] ext3: lighten up resize transaction requirements (Eric Sandeen ) [425955]
  - [xen] PVFB probe & suspend fixes (Markus Armbruster ) [434800]
  - [nfs] ensure that options turn off attribute caching (Peter Staubach ) [450184]
  - [x86_64] memmap flag results in bogus RAM map output (Prarit Bhargava ) [450244]
  - [nfs] sunrpc: fix a race in rpciod_down (Jeff Layton ) [448754]
  - [nfs] sunrpc: fix hang due to eventd deadlock (Jeff Layton ) [448754]
  - [gfs2] d_doio stuck in readv waiting for pagelock (Bob Peterson ) [432057]
  - [fs] ext3: fix lock inversion in direct io (Josef Bacik ) [439194]
  - [fs] jbd: fix journal overflow issues (Josef Bacik ) [439193]
  - [fs] jbd: fix typo in recovery code (Josef Bacik ) [447742]
  - [openib] small ipoib packet can cause an oops (Doug Ledford ) [445731]
  - [sched] domain range turnable params for wakeup_idle (Kei Tokunaga ) [426971]
  - [edac] k8_edac: fix typo in user visible message (Aristeu Rozanski ) [446068]
  - [net] ipv6: don't handle default routes specially (Neil Horman ) [426895 243526]
  - [fs] ext3: unmount hang when quota-enabled goes error-RO (Eric Sandeen ) [429054]
  - [net] ipv6: no addrconf for bonding slaves (Andy Gospodarek ) [236750]
  - [misc] fix race in switch_uid and user signal accounting (Vince Worthington ) [441762 440830]
  - [misc] /proc/pid/limits : fix duplicate array entries (Neil Horman ) [443522]
  - [nfs] v4: fix ref count and signal for callback thread (Jeff Layton ) [423521]
  - [mm] do not limit locked memory when using RLIM_INFINITY (Larry Woodman ) [442426]
  - [xen] ia64: add srlz instruction to asm (Aron Griffis ) [440261]
  - [nfs] fix transposed deltas in nfs v3 (Jeff Layton ) [437544]
  - [x86_64] gettimeofday fixes for HPET, PMTimer, TSC (Prarit Bhargava ) [250708]
  - [ia64] remove assembler warnings on head.S (Luming Yu ) [438230]
  - [misc] allow hugepage allocation to use most of memory (Larry Woodman ) [438889]
  - [edac] k8_edac: add option to report GART errors (Aristeu Rozanski ) [390601]
  - [ia64] add TIF_RESTORE_SIGMASK and pselect/ppoll syscall (Luming Yu ) [206806]


author: Don Zickus <dzickus@redhat.com> [2.6.18-97.el5]
changelog:
  -  [misc] signaling msgrvc() should not pass back error (Jiri Pirko ) [452533]
  - [ia64] properly unregister legacy interrupts (Prarit Bhargava ) [445886]
  - [s390] zfcp: status read locking race (Hans-Joachim Picht ) [451278]
  - [s390] fix race with stack local wait_queue_head_t. (Hans-Joachim Picht ) [451279]
  - [s390] cio: fix system hang with reserved DASD (Hans-Joachim Picht ) [451222]
  - [s390] cio: fix unusable zfcp device after vary off/on (Hans-Joachim Picht ) [451223]
  - [s390] cio: I/O error after cable pulls (Hans-Joachim Picht ) [451281]
  - [s390] tape: race condition in tape block device driver (Hans-Joachim Picht ) [451277]
  - [gfs2] cannot use fifo nodes (Steven Whitehouse ) [450276]
  - [gfs2] bad subtraction in while-loop can cause panic (Bob Peterson ) [452004]
  - [tux] crashes kernel under high load (Anton Arapov ) [448973]
  - [dlm] move plock code from gfs2 (David Teigland ) [450138]
  - [dlm] fix basts for granted CW waiting PR/CW (David Teigland ) [450137]
  - [dlm] check for null in device_write (David Teigland ) [450136]
  - [dlm] save master info after failed no-queue request (David Teigland ) [450135]
  - [dlm] keep cached master rsbs during recovery (David Teigland ) [450133]
  - [dlm] change error message to debug (David Teigland ) [450132]
  - [dlm] fix possible use-after-free (David Teigland ) [450132]
  - [dlm] limit dir lookup loop (David Teigland ) [450132]
  - [dlm] reject normal unlock when lock waits on lookup (David Teigland ) [450132]
  - [dlm] validate messages before processing (David Teigland ) [450132]
  - [dlm] reject messages from non-members (David Teigland ) [450132]
  - [dlm] call to confirm_master in receive_request_reply (David Teigland ) [450132]
  - [dlm] recover locks waiting for overlap replies (David Teigland ) [450132]
  - [dlm] clear ast_type when removing from astqueue (David Teigland ) [450132]
  - [dlm] use fixed errno values in messages (David Teigland ) [450130]
  - [dlm] swap bytes for rcom lock reply (David Teigland ) [450130]
  - [dlm] align midcomms message buffer (David Teigland ) [450130]
  - [dlm] use dlm prefix on alloc and free functions (David Teigland ) [450130]
  - [s390] zfcp: memory handling for GID_PN (Hans-Joachim Picht ) [447727]
  - [s390] zfcp: out-of-memory handling for status_read req (Hans-Joachim Picht ) [447726]
  - [s390] zfcp: deadlock in slave_destroy handler (Hans-Joachim Picht ) [447329]
  - [s390] dasd: fix timeout handling in interrupt handler (Hans-Joachim Picht ) [447316]
  - [s390] zfcp: fix check for handles in abort handler (Hans-Joachim Picht ) [447331]
  - [s390] aes_s390 decrypt may produce wrong results in CBC (Hans-Joachim Picht ) [446191]
  - [s390x] CPU Node Affinity (Hans-Joachim Picht ) [447379]
  - [gfs2] inode indirect buffer corruption (Bob Peterson ) [345401]
  - [s390] cio: avoid machine check vs. not operational race (Hans-Joachim Picht ) [444082]
  - [s390] qeth: avoid inconsistent lock state for inet6_dev (Hans-Joachim Picht ) [444077]
  - [s390] qdio: missed inb. traffic with online FCP devices (Hans-Joachim Picht ) [444146]
  - [s390] qeth: eddp skb buff problem running EDDP guestlan (Hans-Joachim Picht ) [444014]
  - [s390] cio: kernel panic in cm_enable processing (Hans-Joachim Picht ) [442032]
  - [fs] fix bad unlock_page in pip_to_file() error path (Larry Woodman ) [439917]
  - [s390] zfcp: Enhanced Trace Facility (Hans-Joachim Picht ) [439482]
  - [s390] dasd: add support for system information messages (Hans-Joachim Picht ) [439441]
  - [s390] zcrypt: add support for large random numbers (Hans-Joachim Picht ) [439440]
  - [s390] qeth: recovery problems with failing STARTLAN (Hans-Joachim Picht ) [440420]
  - [s390] qdio: change in timeout handling during establish (Hans-Joachim Picht ) [440421]
  - [s390] lcs: ccl-seq. numbers required for prot. 802.2 (Hans-Joachim Picht ) [440416]
  - [s390] dasd: diff z/VM minidisks need a unique UID (Hans-Joachim Picht ) [440402]
  - [s390] qeth: ccl-seq. numbers req for protocol 802.2 (Hans-Joachim Picht ) [440227]
  - [s390] sclp: prevent console lockup during SE warmstart (Hans-Joachim Picht ) [436967]
  - [s390] zcrypt: disable ap polling thread per default (Hans-Joachim Picht ) [435161]
  - [s390] zfcp: hold lock on port/unit handle for task cmd (Hans-Joachim Picht ) [434959]
  - [s390] zfcp: hold lock on port handle for ELS command (Hans-Joachim Picht ) [434955]
  - [s390] zfcp: hold lock on port/unit handle for FCP cmd (Hans-Joachim Picht ) [433537]
  - [s390] zfcp: hold lock when checking port/unit handle (Hans-Joachim Picht ) [434953]
  - [s390] zfcp: handling of boxed port after physical close (Hans-Joachim Picht ) [434801]
  - [s390] dasd: fix ifcc handling (Hans-Joachim Picht ) [431592]
  - [s390] cio: introduce timed recovery procedure (Hans-Joachim Picht ) [430593]
  - [s390] cio: sense id works with partial hw response (Hans-Joachim Picht ) [430787]
  - [s390] zfcp: fix use after free bug (Hans-Joachim Picht ) [412881]
  - [s390] cio: add missing reprobe loop end statement (Hans-Joachim Picht ) [412891]
  - [s390] zfcp: imbalance in erp_ready_sem usage (Hans-Joachim Picht ) [412831]
  - [s390] zfcp: zfcp_erp_action_dismiss will ignore actions (Hans-Joachim Picht ) [409091]
  - [s390] zfcp: Units are reported as BOXED (Hans-Joachim Picht ) [412851]
  - [s390] zfcp: Reduce flood on hba trace (Hans-Joachim Picht ) [415951]
  - [s390] zfcp: Deadlock when adding invalid LUN (Hans-Joachim Picht ) [412841]
  - [s390] pav alias disks not detected on lpar (Hans-Joachim Picht ) [416081]


author: Don Zickus <dzickus@redhat.com> [2.6.18-96.el5]
changelog:
  - [net] randomize udp port allocation (Eugene Teo ) [454572]
  - [tty] add NULL pointer checks (Aristeu Rozanski ) [453154]
  - [misc] ttyS1 lost interrupt, stops transmitting v2 (Brian Maly ) [451157]
  - [net] sctp: make sure sctp_addr does not overflow (David S. Miller ) [452483]
  - [sys] sys_setrlimit: prevent setting RLIMIT_CPU to 0 (Neil Horman ) [437122]
  - [net] sit: exploitable remote memory leak (Jiri Pirko ) [446039]
  - [x86_64] zero the output of string inst on exception (Jiri Pirko ) [451276] {CVE-2008-2729}
  - [net] dccp: sanity check feature length (Anton Arapov ) [447396] {CVE-2008-2358}
  - [misc] buffer overflow in ASN.1 parsing routines (Anton Arapov ) [444465] {CVE-2008-1673}
  - [x86_64] write system call vulnerability (Anton Arapov ) [433945] {CVE-2008-0598}


author: Aristeu Rozanski <arozansk@redhat.com> [2.6.18-95.el5]
changelog:
  - [net] Fixing bonding rtnl_lock screwups (Fabio Olive Leite ) [450219]
  - [x86_64]: extend MCE banks support for Dunnington, Nehalem (Prarit Bhargava ) [446673]
  - [nfs] address nfs rewrite performance regression in RHEL5 (Eric Sandeen ) [436004]
  - [mm] Make mmap() with PROT_WRITE on RHEL5 (Larry Woodman ) [448978]
  - [i386]: Add check for supported_cpus in powernow_k8 driver (Prarit Bhargava ) [443853]
  - [i386]: Add check for dmi_data in powernow_k8 driver (Prarit Bhargava ) [443853]
  - [sata] update sata_svw (John Feeney ) [441799]
  - [net] fix recv return zero (Thomas Graf ) [435657]
  - [misc] kernel crashes on futex (Anton Arapov ) [435178]


author: Don Zickus <dzickus@redhat.com> [2.6.18-93.el5]
changelog:
  - [x86] sanity checking for read_tsc on i386 (Brian Maly ) [443435]
  - [xen] netfront: send fake arp when link gets carrier (Herbert Xu ) [441716]
  - [net] fix xfrm reverse flow lookup for icmp6 (Neil Horman ) [446250]
  - [net] negotiate all algorithms when id bit mask zero (Neil Horman ) [442820]
  - [net] 32/64 bit compat MCAST_ sock options support (Neil Horman ) [444582]
  - [misc] add CPU hotplug support for relay functions (Kei Tokunaga ) [441523]


author: Don Zickus <dzickus@redhat.com> [2.6.18-91.el5]
changelog:
  - [scsi] cciss: allow kexec to work (Chip Coldwell ) [230717]
  - [xen] ia64: set memory attribute in inline asm (Tetsu Yamamoto ) [426015]
  - [xen] fix VT-x2 FlexPriority (Bill Burns ) [252236]


author: Don Zickus <dzickus@redhat.com> [2.6.18-90.el5]
changelog:
  - [x86_64] page faults from user mode are user faults (Dave Anderson ) [442101]
  - [ia64] kdump: add save_vmcore_info to INIT path (Neil Horman ) [442368]
  - [misc] infinite loop in highres timers (Michal Schmidt ) [440002]
  - [net] add aes-ctr algorithm to xfrm_nalgo (Neil Horman ) [441425]
  - [x86_64] 32-bit address space randomization (Peter Zijlstra ) [213483]
  - Revert: [scsi] qla2xxx: pci ee error handling support (Marcus Barrow ) [441779]
  - [pci] revert 'PCI: remove transparent bridge sizing' (Ed Pollard ) [252260]
  - [ppc64] eHEA: fixes receive packet handling (Brad Peters ) [441364]


author: Don Zickus <dzickus@redhat.com> [2.6.18-89.el5]
changelog:
  - [xen] memory corruption due to VNIF increase (Tetsu Yamamoto ) [441390]
  - [crytpo] use scatterwalk_sg_next for xcbc (Thomas Graf ) [439874]
  - [video] PWC driver DoS (Pete Zaitcev ) [308531]
  - [s390] cio: fix vary off of paths (Hans-Joachim Picht ) [436106]
  - [pci] fix MSI interrupts on HT1000 based machines (Doug Ledford ) [438776]
  - [s390] cio: CHPID configuration event is ignored (Hans-Joachim Picht ) [431858]
  - [x86_64] add phys_base to vmcoreinfo (Muuhh IKEDA ) [439304]
  - [wd] disable hpwdt due to nmi problems (Prarit Bhargava ) [438741]
  - [nfs] fix the fsid revalidation in nfs_update_inode (Steve Dickson ) [431166]
  - [ppc64] SLB shadow buffer error cause random reboots (Brad Peters ) [440085]
  - [xen] check num of segments in block backend driver (Bill Burns ) [378291]
  - [sata] SB600: add 255-sector limit (Bhavana Nagendra ) [434741]
  - [x86_64] fix unprivileged crash on %cs corruption (Jarod Wilson ) [439788]
  - [scsi] qla4xxx: update driver version number (Marcus Barrow ) [439316]
  - [acpi] only ibm_acpi.c should report bay events (Prarit Bhargava ) [439380]
  - [x86] xen: fix SWIOTLB overflows (Stephen C. Tweedie ) [433554]
  - [x86] fix mprotect on PROT_NONE regions (Stephen C. Tweedie ) [437412]
  - [net] ESP: ensure IV is in linear part of the skb (Thomas Graf ) [427248]
  - [x86] fix 4 bit apicid assumption (Geoff Gustafson ) [437820]
  - [sata] SB700/SB800 64bit DMA support (Bhavana Nagendra ) [434741]


author: Don Zickus <dzickus@redhat.com> [2.6.18-88.el5]
changelog:
  - [pci] hotplug: PCI Express problems with bad DLLPs (Kei Tokunaga ) [433355]
  - [net] bnx2x: update 5.2 to support latest firmware (Andy Gospodarek ) [435261]
  - [ipsec] use hmac instead of digest_null (Herbert Xu ) [436267]
  - [utrace] race crash fixes (Roland McGrath ) [428693 245429 245735 312961]
  - [x86_64] EXPORT smp_call_function_single (George Beshers ) [438720]
  - [s390] FCP/SCSI write IO stagnates (Jan Glauber ) [437099]
  - [net] ipv6: check ptr in ip6_flush_pending_frames (Neil Horman ) [439059]
  - [nfs] stop sillyrenames and unmounts from racing (Steve Dickson ) [437302]
  - [ppc64] oprofile: add support for Power5+ and later (Brad Peters ) [244719]
  - [agp] add cantiga ids (Geoff Gustafson ) [438919]
  - [x86] oprofile: support for Penryn-class processors (Geoff Gustafson ) [253056]
  - [net] ipv6: fix default address selection rule 3 (Neil Horman ) [438429]
  - [audit] fix panic, regression, netlink socket usage (Eric Paris ) [434158]
  - [net] eHEA: checksum error fix (Brad Peters ) [438212]
  - [s390] fix qeth scatter-gather (Jan Glauber ) [438180]
  - [ata] fix SATA IDE mode bug upon resume (Bhavana Nagendra ) [432652]
  - [openib] update ipath driver (Doug Ledford ) [253023]
  - [openib] update the nes driver from 0.4 to 1.0 (Doug Ledford ) [253023]
  - [openib] IPoIB updates (Doug Ledford ) [253023]
  - [openib] cleanup of the xrc patch removal (Doug Ledford ) [253023]
  - [openib] remove srpt and empty vnic driver files (Doug Ledford ) [253023]
  - [openib] enable IPoIB connect mode support (Doug Ledford ) [253023]
  - [openib] SDP accounting fixes (Doug Ledford ) [253023]
  - [openib] add improved error handling in srp driver (Doug Ledford ) [253023]
  - [openib] minor core updates between rc1 and final (Doug Ledford ) [253023]
  - [openib] update ehca driver to version 0.25 (Doug Ledford ) [253023]
  - [openib] remove xrc support (Doug Ledford ) [253023]
  - [ppc64] hardware watchpoints: add DABRX init (Brad Peters ) [438259]
  - [ppc64] hardware watchpoints: add DABRX definitions (Brad Peters ) [438259]
  - [x86_64] address space randomization (Peter Zijlstra ) [222473]
  - [ppc64] fixes removal of virtual cpu from dlpar (Brad Peters ) [432846]
  - [mm] inconsistent get_user_pages and memory mapped (Brad Peters ) [408781]
  - [s390] add missing TLB flush to hugetlb_cow (Hans-Joachim Picht ) [433799]
  - [xen] HV ignoring extended cpu model field (Geoff Gustafson ) [439254]
  - [xen] oprofile: support for Penryn-class processors (Geoff Gustafson ) [253056]
  - [xen] ia64: HV messages are not shown on VGA console (Tetsu Yamamoto ) [438789]
  - [xen] ia64: ftp stress test fixes between HVM/Dom0 (Tetsu Yamamoto ) [426015]
  - [xen] ia64: fix kernel panic on systems w/<=4GB RAM (Jarod Wilson ) [431001]


author: Don Zickus <dzickus@redhat.com> [2.6.18-87.el5]
changelog:
  - [scsi] qla4xxx: negotiation issues with new switches (Marcus Barrow ) [438032]
  - [net] qla3xxx: have link SM use work threads (Marcus Barrow ) [409171]
  - [scsi] qla4xxx: fix completion, lun reset code (Marcus Barrow ) [438214]
  - [scsi] lpfc: update driver to 8.2.0.22 (Chip Coldwell ) [437050]
  - [scsi] lpfc: update driver to 8.2.0.21 (Chip Coldwell ) [437050]
  - [block] sg: cap reserved_size values at max_sectors (David Milburn ) [433481]
  - Revert: [xen] idle=poll instead of hypercall block (Bill Burns ) [437252]
  - [scsi] lpfc: update driver to 8.2.0.20 (Chip Coldwell ) [430600]
  - [xen] add warning to 'time went backwards' message (Prarit Bhargava ) [436775]
  - [x86] clear df flag for signal handlers (Jason Baron ) [436131]
  - [usb] fix iaa watchdog notifications (Bhavana Nagendra ) [435670]
  - [usb] new iaa watchdog timer (Bhavana Nagendra ) [435670]


author: Don Zickus <dzickus@redhat.com> [2.6.18-86.el5]
changelog:
  - [sound] HDMI device IDs for AMD ATI chipsets (Bhavana Nagendra ) [435658]
  - [scsi] fusion: 1078 corrupts data in 36GB mem region (Chip Coldwell ) [436210]
  - [GFS2] gfs2_adjust_quota has broken unstuffing code (Abhijith Das ) [434736]
  - [docs] add oom_adj and oom_score use to proc.txt (Larry Woodman ) [277151]
  - [GFS2] optimise loop in gfs2_bitfit (Bob Peterson ) [435456]
  - [crypto] fix SA creation with ESP encryption-only (Thomas Graf ) [436267]
  - [crypto] fix SA creation with AH (Thomas Graf ) [435243]
  - [ppc64] spufs: invalidate SLB then add a new entry (Brad Peters ) [436336]
  - [ppc64] SLB: serialize invalidation against loading (Brad Peters ) [436336]
  - [ppc64] cell: remove SPU_CONTEXT_SWITCH_ACTIVE flag (Brad Peters ) [434155]
  - Revert: [net] sunrpc: fix hang due to eventd deadlock (Jeff Layton ) [438044]
  - [ppc64] broken MSI on cell blades when IOMMU is on (Brad Peters ) [430949]
  - [cpufreq] powernow: blacklist bad acpi tables (Chris Lalancette ) [430947]
  - [firmware] ibft_iscsi: prevent misconfigured iBFTs (Konrad Rzeszutek ) [430297]
  - [xen] HV inside a FV guest, crashes the host (Bill Burns ) [436351]


author: Don Zickus <dzickus@redhat.com> [2.6.18-85.el5]
changelog:
  - [xen] ia64: fix kprobes slowdown on single step (Tetsu Yamamoto ) [434558]
  - [xen] mprotect performance improvements (Rik van Riel ) [412731]
  - [GFS2] remove assertion 'al->al_alloced' failed (Abhijith Das ) [432824]
  - [misc] remove unneeded EXPORT_SYMBOLS (Don Zickus ) [295491]
  - [net] e1000e: wake on lan fixes (Andy Gospodarek ) [432343]
  - [sound] add support for HP-RP5700 model (Jaroslav Kysela ) [433593]
  - [scsi] hptiop: fixes buffer overflow, adds pci-ids (Chip Coldwell ) [430662]
  - [crypto] xcbc: fix IPsec crash with aes-xcbc-mac (Herbert Xu ) [435377]
  - [misc] fix memory leak in alloc_disk_node (Jerome Marchand ) [395871]
  - [net] cxgb3: rdma arp and loopback fixes (Andy Gospodarek ) [253449]
  - [misc] fix range check in fault handlers with mremap (Vitaly Mayatskikh ) [428971]
  - [ia64] fix userspace compile error in gcc_intrin.h (Doug Chapman ) [429074]
  - [ppc64] fix xics set_affinity code (Brad Peters ) [435126]
  - [scsi] sym53c8xx: use proper struct (Brad Peters ) [434857]
  - [ppc64] permit pci error state recovery (Brad Peters ) [434857]
  - [misc] fix ALIGN macro (Thomas Graf ) [434940]
  - [x86] fix relocate_kernel to not overwrite pgd (Neil Horman ) [346431]
  - [net] qla2xxx: wait for flash to complete write (Marcus Barrow ) [434992]
  - [ppc64] iommu DMA alignment fix (Brad Peters ) [426875]
  - [x86] add HP DL580 G5 to bfsort whitelist (Tony Camuso ) [434792]
  - [video] neofb: avoid overwriting fb_info fields (Anton Arapov ) [430254]
  - [x86] blacklist systems that need nommconf (Prarit Bhargava ) [433671]
  - [sound] add support for AD1882 codec (Jaroslav Kysela ) [429073]
  - [scsi] ibmvscsi: set command timeout to 60 seconds (Brad Peters ) [354611]
  - [x86] mprotect performance improvements (Rik van Riel ) [412731]
  - [fs] nlm: fix refcount leak in nlmsvc_grant_blocked (Jeff Layton ) [432626]
  - [net] igb: more 5.2 fixes and backports (Andy Gospodarek ) [252004]
  - [net] remove IP_TOS setting privilege checks (Thomas Graf ) [431074]
  - [net] ixgbe: obtain correct protocol info on xmit (Andy Gospodarek ) [428230]
  - [nfs] fslocations/referrals broken (Brad Peters ) [432690]
  - [net] sctp: socket initialization race (Neil Horman ) [426234]
  - [net] ipv6: fix IPsec datagram fragmentation (Herbert Xu ) [432314]
  - [audit] fix bogus reporting of async signals (Alexander Viro ) [432400]
  - [cpufreq] xen: properly register notifier (Bhavana Nagendra ) [430940]
  - [x86] fix TSC feature flag check on AMD (Bhavana Nagendra ) [428479]


author: Don Zickus <dzickus@redhat.com> [2.6.18-83.el5]
changelog:
  - [xen] x86: fix change frequency hypercall (Bhavana Nagendra ) [430938]
  - [xen] resync TSC extrapolated frequency (Bhavana Nagendra ) [430938]
  - [xen] new vcpu lock/unlock helper functions (Bhavana Nagendra ) [430938]


author: Don Zickus <dzickus@redhat.com> [2.6.18-81.el5]
changelog:
  - [gfs2] fix calling of drop_bh (Steven Whitehouse ) [432370]
  - [nfs] potential file corruption issue when writing (Jeff Layton ) [429755]
  - [nfs] interoperability problem with AIX clients (Steve Dickson ) [426804]
  - [libata] sata_nv: un-blacklist hitachi drives (David Milburn ) [426044]
  - [libata] sata_nv: may send cmds with duplicate tags (David Milburn ) [426044]


author: Don Zickus <dzickus@redhat.com> [2.6.18-79.el5]
changelog:
  - [net] sctp: add bind hash locking to migrate code (Aristeu Rozanski ) [426234]
  - [net] ipsec: allow CTR mode use with AES (Aristeu Rozanski ) [430164]
  - [net] ipv6: fixes to meet DoD requirements (Thomas Graf ) [431718]
  - [module] fix module loader race (Jan Glauber ) [429909]
  - [misc] ICH10 device IDs (Geoff Gustafson ) [251083]
  - [sound] enable S/PDIF in Fila/Converse - fixlet (John Feeney ) [240783]
  - [ide] ide-io: fail request when device is dead (Aristeu Rozanski ) [354461]
  - [mm] add sysctl to not flush mmapped pages (Larry Woodman ) [431180]
  - [net] bonding: locking fixes and version 3.2.4 (Andy Gospodarek ) [268001]
  - [gfs2] reduce memory footprint (Bob Peterson ) [349271]
  - [net] e1000e: tweak irq allocation messages (Andy Gospodarek ) [431004]
  - [sched] implement a weak interactivity mode (Peter Zijlstra ) [250589]
  - [sched] change the interactive interface (Peter Zijlstra ) [250589]
  - [ppc] chrp: fix possible strncmp NULL pointer usage (Vitaly Mayatskikh ) [396831]
  - [s390] dasd: fix loop in request expiration handling (Hans-Joachim Picht ) [430592]
  - [s390] dasd: set online fails if initial probe fails (Hans-Joachim Picht ) [429583]
  - [scsi] cciss: update procfs (Tomas Henzl ) [423871]
  - [Xen] ia64: stop all CPUs on HV panic part3 (Tetsu Yamamoto ) [426129]


author: Don Zickus <dzickus@redhat.com> [2.6.18-78.el5]
changelog:
  - [misc] enable i2c-piix4 (Bhavana Nagendra ) [424531]
  - [ide] missing SB600/SB700 40-pin cable support (Bhavana Nagendra ) [431437]
  - [isdn] i4l: fix memory overruns (Vitaly Mayatskikh ) [425181]
  - [net] icmp: restore pskb_pull calls in receive func (Herbert Xu ) [431293]
  - [nfs] reduce number of wire RPC ops, increase perf (Peter Staubach ) [321111]
  - [xen] 32-bit pv guest migration can fail under load (Don Dutile ) [425471]
  - [ppc] fix mmap of PCI resource with hack for X (Scott Moser ) [229594]
  - [md] fix raid1 consistency check (Doug Ledford ) [429747]


author: Don Zickus <dzickus@redhat.com> [2.6.18-77.el5]
changelog:
  - [xen] ia64: domHVM with pagesize 4k hangs part2 (Tetsu Yamamoto ) [428124]
  - [scsi] qla2xxx: update RH version number (Marcus Barrow ) [431052]
  - [ia64] fix unaligned handler for FP instructions (Luming Yu ) [428920]
  - [fs] fix locking for fcntl (Ed Pollard ) [430596]
  - [isdn] fix possible isdn_net buffer overflows (Aristeu Rozanski ) [392161] {CVE-2007-6063}
  - [audit] fix potential SKB invalid truesize bug (Hideo AOKI ) [429417]
  - [net] e1000e: disable hw crc stripping (Andy Gospodarek ) [430722]
  - [firewire] more upstream fixes regarding rom (Jay Fenlason ) [370421]
  - [scsi] qla25xx: incorrect firmware loaded (Marcus Barrow ) [430725]
  - [scsi] qla2xxx: updated firmware for 25xxx (Marcus Barrow ) [430729]
  - [gfs2] speed up read/write performance (Bob Peterson ) [253990]


author: Don Zickus <dzickus@redhat.com> [2.6.18-76.el5]
changelog:
  - [Xen] gnttab: allow more than 3 VNIFs (Tetsu Yamamoto ) [297331]
  - [xen] fix /sbin/init to use cpu_possible (Chris Lalancette ) [430310]
  - [GFS2] install to root volume should work (Abhijith Das ) [220052]
  - [scsi] iscsi: set host template (Mike Christie ) [430130]
  - [selinux] harden against null ptr dereference bugs (Eric Paris ) [233021]


author: Don Zickus <dzickus@redhat.com> [2.6.18-75.el5]
changelog:
  - [xen] ia64: stop all cpus on hv panic part2 (Tetsu Yamamoto ) [426129]
  - [sata] combined mode fix for 5.2 (Peter Martuccelli ) [428945 428708]
  - [net] bridge br_if: fix oops in port_carrier_check (Herbert Xu ) [408791]
  - [misc] agp: add E7221 pci ids (Dave Airlie ) [216722]
  - [ia64] kdump: slave CPUs drop to POD (Jonathan Lim ) [429956]


