# changelog

author: Peter Jones <pjones@redhat.com> - 5.0.22-1
changelog:
  - formatting cleanups
  - prefix partition number with "p" for partitions on dmraid
  - add support for disabling partitions which overlap with partitions on
    dm devices.
  - add multipath support
  - fix dm creation ordering and partition detection
  - add "network" command (katzj)
  - add nfsroot support (katzj)
  - put "showlabels" back into nash


author: Peter Jones <pjones@redhat.com> - 5.0.21-1
changelog:
  - add "mount -o bind" support and "mount --move" support (#109366, patch
    from Kasper Dupont)
  - add resolveDevice command, which cases down device labels.
  - remove "findlodev" from the documentation (#178587)
  - fix nash command name parsing bug (#178587)
  - fix "find" argument parsing (#178587)
  - add "find" handling for "-type d"


author: Peter Jones <pjones@redhat.com> - 5.0.19-1
changelog:
  - mkinitrd: get resolve_dm_name() and get_numeric_dev() from initscripts
    instead of a private copy
  - add block.[ch]:
    - move parse_sysfs_devnum(), sysfs_blkdev_probe(), and
      mkpathbyspec() from nash.c
    - add label/uuid/name lookups for block devices using libblkid
  - add lib.[ch]:
    - move makeFdCoe(), coeOpen(), coeFopen(), coeOpendir(), readFD(),
      nashLoggerV(), nashLogger(), qprintf(), eprintf(), smartmknod(),
      testing, quiet, reallyquiet from nash.c
    - move nashDefaultLogger(), from dm.c
    - move log enums and declarations from dm.h
  - dm.c: add dm_finish(), which does dm_task_destroy() and then library cleanup
    (solves an fd leak)
  - remove linux_fs.h, mount_by_label.[ch], name_to_dev_t.[ch]


author: Peter Jones <pjones@redhat.com> - 5.0.18-1
changelog:
  - make mkinitrd discover dm uuids
  - add uuid support to nash's "dm create" and "dm partadd"
  - add nash command "dm get_uuid $NAME"
  - add support for renamed dm raids


author: Peter Jones <pjones@redhat.com> - 5.0.14-1
changelog:
  - Remove vestigial loopback support.
  - Remove email addresses from man pages (which still need some work)


author: Peter Jones <pjones@redhat.com> - 5.0.11-1
changelog:
  - audit for open()s without appropriate closes()
  - make new functions coeOpen(), coeFopen(), and coeOpendir().  These behave
    like open(), fopen(), and opendir() except that they set any associated
    file descriptors to close on exec().
  - use them everywhere except where we open a console.


author: Peter Jones <pjones@redhat.com> - 5.0.5-1
changelog:
  - make PROBE, MODULES, and PREMODS load defaults from a config file
  - get rid of support for not using a dynamic /dev
  - add options to force device probes (for when PROBE is "no")
  - consolidate some duplicate code paths
  - make nash's otherCommand check PATH first and use what it finds there for
    any commands it needs to run, unless the command starts with "nash-",
    in which case the internal version is used unconditionally
  - remove the symlink hack for setuproot/preswitchroot/switchroot
  - wrap all the nash commands in mkinitrd with shell functions and use the
    "nash-" varient.
  - rework root fs creation so Jeremy can use the otherCommand feature


author: Peter Jones <pjones@redhat.com> - 5.0.4-1
changelog:
  - split switchroot into setuproot and switchroot, with presetuproot in
    between
  - make preswitchroot and setuproot execute through symlinks, so they may
    be replaced by a second initramfs image
  - add logic to mount filesystems specified in /etc/fstab.sys during setuproot
  - general code cleanups


author: Peter Jones <pjones@redhat.com> - 5.0.2-1
changelog:
  - add error and quiet printf functions
  - use them instead of testing quiet and typing stderr everywhere
  - actually make _all_ errors use eprintf (and thus stderr)
  - print strerror in errors instead of raw errno
  - make "getKernelCmdLine use readFD
  - make "getKernelArg" picky about if you've got the right command vs
    just one that starts with the same string
  - make "getKernelArg" handle "=" for you, so it either gives you the value
    when there is one, '\0' when there's not and it's EOL, or whitespace.
  - reformat some two-space-indent spots
  - check for short reads in catCommand
  - kill pivotroot
  - cleaned up resume messages
  - make mkrootdev use readFD
  - combine mkdevies and makedevs into mkblkdevs, no longer
    using /proc/partitions
  - don't use callocs+memcpy/strcpy+strcat when we can use asprintf
  - make setQuietCommand use getKenrelArg
  - make runStartup use readFD
  - patch from Alexandre Oliva to fix LVM-on-RAID1 /root and swap-on-LVM
    (bz #169059)
  - reorder device creation for easier maintenance create /dev/rtc
  - change fixme comment about lvm vgs
  - use cemit at some places we used a lot of emits before
  - reorder device node creation for clarity
  - use mkblkdevs instead of makedevs and mkdevices
  - decouple loopback root and lvm


author: Peter Jones <pjones@redhat.com> - 5.0.1-1
changelog:
  - create /dev/rtc
  - create /dev/tty, /dev/tty{0..11}, and /dev/ttyS{0..4}
  - tweak the messages output in loud mode during device node creation


author: Peter Jones <pjones@redhat.com> - 5.0.0-1
changelog:
  - remove support for pivotroot
  - remove support for non-initramfs initrds
  - remove support for 2.4 kernels
  - don't force scsi_mod before scsi modules; deps should bring it in.
    same for "unknown"; it's not needed any more.
  - lots of whitespace adjustment
  - minor messaging changes
  - no manual redirection to stderr or RCFILE, nor manual verbose checking
  - in light of these changes and other planned changes, this is 5.0.0


author: Peter Jones <pjones@redhat.com> - 4.2.23-2
changelog:
  - Fix module discovery to not always use the modules /dev/hda1 requires
    when using root-on-label.
  - Put the lvm check after the raid check, so the raid check atually gets run.


author: Peter Jones <pjones@redhat.com> - 4.2.22-1
changelog:
  - Only scan appended kernel command line args for duplicates once.
  - handle short reads correctly in nash's readFD
  - use calloc for things instead of malloc, since we usually need zeroed memory
    and we never memset
  - use canonicalize_file_name instead of malloc+realpath
  - honor quiet flag on suspend/resume
  - autodetect storage drivers in mkinitrd


author: Peter Jones <pjones@redhat.com> - 4.2.17-1
changelog:
  - Don't use udev or udevstart in the initrd; it's trivial to do
    all that work by looking for directories with "dev" nodes in sysfs
    and making the device from the dirname using major/minor from "dev"


author: Peter Jones <pjones@redhat.com> - 4.2.16-1
changelog:
  - Add a patch from Jeff Layton to remove files from the initramfs
    before executing the new init.  (slightly modified, #153069)


author: Peter Jones <pjones@redhat.com> - 4.2.11-1
changelog:
  - don't copy "rw" option into the initrd; use "ro" instead if it's
    the only option.
  - Don't print "unmounting old ..." messages in nash if we're set to quiet


author: Peter Jones <pjones@redhat.com> - 4.2.9-1
changelog:
  - invoke bash with "--norc" (#155986)
  - use binary udevstart.static, not a symlink
  - print exit status in nash when programs return an error


author: Peter Jones <pjones@redhat.com> - 4.2.6-1
changelog:
  - work correctly with "set -o noclobber"
  - wait longer after modprobe of usb-storage
  - fix a wrong error output file


author: Peter Jones <pjones@redhat.com> - 4.2.3-1
changelog:
  - use --ignorelockingfailure with lvm commands in the initrd, and only
    activate the volume / is on.  (#151172)


author: Peter Jones <pjones@redhat.com> - 4.2.0.3-1
changelog:
  - Make nash expand environment variables on command lines (#144474)
  - Make nash check pids returned from wait*() (#145660)


author: Jeremy Katz <katzj@redhat.com> - 4.1.17-1
changelog:
  - run udevstart again instead of sleeping, this will ensure all 
    devices are created in all cases after modules have been 
    loaded (thanks to notting)


author: Jeremy Katz <katzj@redhat.com> - 4.1.15-1
changelog:
  - new-kernel-pkg: set new kernels as default (#135161) when
    a) /etc/sysconfig/kernel contains UPDATEDEFAULT=yes
    b) --package foo is passed in and foo matches DEFAULTKERNEL 
       in /etc/sysconfig/kernel


author: Jeremy Katz <katzj@redhat.com> - 4.1.12-1
changelog:
  - update to work with udev 032, conflict with old udev
  - if udev is present, use it.  trying to avoid the use of udev if it's 
    installed is the road to things not working


author: Jeremy Katz <katzj@redhat.com> - 4.1.0-1
changelog:
  - mkinitrd: if using udev for the initrd, set things up appropriately 
    (based on patches from Harald Hoyer and Thomas Woerner)
  - nash: support for echo -n
  - nash: better error message on exec failures
  - nash: exec udev if we're called as a hotplug handler


author: Jeremy Katz <katzj@redhat.com> - 4.0.6-1
changelog:
  - various fixes from a code review by Steve Grubb which should fix 
    some of the lingering problems (#129673)
  - nash: warning fix from Michal Jaegermann (#129673)
  - grubby: removal with (hd0,0)


author: Jeremy Katz <katzj@redhat.com> - 4.0.4-1
changelog:
  - nash: fix mounting by label in some cases (tracked down by 
    Erik Jacobson, #129581, #129673, #129667, #129635)


author: Jeremy Katz <katzj@redhat.com> 4.0.3-1
changelog:
  - grubby: more (hd0,0) support (#125156)
  - mkinitrd.8: update manpage (#129585)
  - nash: fix some warnings


author: Jeremy Katz <katzj@redhat.com> 4.0.2-1
changelog:
  - nash: support bind mounting
  - grubby: support the (hd0,0)/path syntax for kernels and initrds in
    grub.conf (#114758, #125156, #120906)


author: Jeremy Katz <katzj@redhat.com> - 4.0.0-1
changelog:
  - create an initramfs on 2.6 kernels instead of an initrd
  - use new mount magic instead of pivot_root 
    on 2.6 kernels
  - try to handle the case of modules going away on kernel upgrades a 
    little bit more nicely (#123994)
  - avoid over-zealous creation of /dev/mapper/control (#127115)
  - improve nash(8) manpage (#127413)


author: Jeremy Katz <katzj@redhat.com> - 3.5.21-1
changelog:
  - new-kernel-package: add patch from Ryan Tilder to allow setting new 
    kernel as default (#117605)
  - mkinitrd: i2o_pci isn't in 2.6 (#120827)
  - new-kernel-pkg: conditionalize kernel binary name for 2.6 vs 2.4 
    on ppc/ppc64 (as it's vmlinuz in 2.6 instead of the 
    vmlinux from 2.4) (#120868)


author: Jeremy Katz <katzj@redhat.com> - 3.5.19-1
changelog:
  - nash/mkinitrd: quiet mode for nash and necessary mkinitrd changes 
    to work with it
  - mkinitrd: add lxo's patch for copying lvm.conf (#112099)
  - new-kernel-pkg: allow specifying the banner used in the boot loader config
    on the command line (#114809)


author: Jeremy Katz <katzj@redhat.com> 3.5.17-1
changelog:
  - mkinitrd: handle multiple spaces in modules.conf (from Lubomir Bulej)
  - nash: rebuild against new dietlibc fixing problems with root=LABEL= (#112623)
  - mkinitrd: determine kernel version and adjust modulefile appropriately 
    so that we look at /etc/modprobe.conf for 2.6 kernels
  - mkinitrd: first pass at getting lvm working on 2.4 -> 2.6 upgrade


author: Jeremy Katz <katzj@redhat.com> 3.5.16-1
changelog:
  - fixing handling of non-lvm case when /dev/mapper/control isn't present
  - add patch from Al Viro to get root dev in numeric form by grokking sysfs


author: Jeremy Katz <katzj@redhat.com> 3.5.15-1
changelog:
  - mkinitrd: add support for lvm2 (note: will not currently handle being
    on a running 2.4 kernel and installing 2.6 with lvm rootfs)


author: Jeremy Katz <katzj@redhat.com> 3.5.10-1
changelog:
  - clean up bogus warning in installkernel
  - only try to do grub configs on arches which support grub (#103261)


author: Matt Wilson <msw@redhat.com> 3.5.9-1
changelog:
  - add \n to error messages in grubby
  - NUL terminate buffer returned from readlink properly
  - symlinks are most likely relative, chdir to / before trying to
    follow them
  - yaboot needs boot prefix
  - silo needs boot prefix too


author: Jeremy Katz <katzj@redhat.com> 3.5.7-1
changelog:
  - pick modules from /lib/modules/$(uname -r)/updates first
  - be less confused by more than one module of a name


author: Jeremy Katz <katzj@redhat.com> 3.5.3-1
changelog:
  - mkinitrd: fix copying of pvs (#97314, #97289)
  - mkinitrd: use pvscan instead of lvmdiskscan to find PVs to work 
    better on other arches
  - mkinitrd: better check for dasd existence
  - mkinitrd: make certain lvm-mod is included if root on lvm


author: Jeremy Katz <katzj@redhat.com> 3.5.2-1
changelog:
  - mkinitrd: revert use of modprobe -c.  it breaks in the installer when we 
    don't have a modules.dep for the BOOT kernel
  - nash: return pivot_root call correctly (#97753)


author: Jeremy Katz <katzj@redhat.com> 3.5.0-1
changelog:
  - mkinitrd: add patch from gc@mandrakesoft.com to determine module 
    deps from modules.dep (#87873)
  - tweak patch to not break weird cases where module deps aren't all 
    you need :/
  - grubby: don't remove the last kernel (#60041)
  - mkinitrd: use modprobe -c to find module options (#89794)


author: Jeremy Katz <katzj@redhat.com> 3.4.51-1
changelog:
  - grubby: error out gracefully if we run out of space (#85424)
  - mkinitrd: copy parent dirs for pvs (#88962)
  - mkinitrd: exit with an exit status if tar fails (#90123)
  - new-kernel-pkg: only use the first entry for / (#90155)
  - grubby: fix a buffer overflow  (#90444)


author: Jeremy Katz <katzj@redhat.com> 3.4.49-1
changelog:
  - new-kernel-pkg: on iSeries, we don't have a boot loader, just make the 
    kernel + initrd combo file (/boot/vmlinux-version.img)


author: Jeremy Katz <katzj@redhat.com> 3.4.47-1
changelog:
  - mkinitrd: fix using options for loading modules
  - mkinitrd: don't use kernel parameters for dasd at mkinitrd time, 
    use what's in modules.conf


author: Jeremy Katz <katzj@redhat.com> 3.4.46-1
changelog:
  - new-kernel-pkg: add necessary bits for s390, some logic cleanups
  - grubby: fix root detection for s390{,x}


author: Jeremy Katz <katzj@redhat.com> 3.4.45-1
changelog:
  - grubby: add silo support (sparc)
  - grubby: add zipl support (s390{,x})
  - add grubby test cases for zipl support


author: Jeremy Katz <katzj@redhat.com> 3.4.43-1
changelog:
  - apply ppc patches for new-kernel-pkg and installkernel from Dan 
    Burcaw <dburcaw@terrasoftsolutions.com>
  - man page tweak (#85471)


author: Jeremy Katz <katzj@redhat.com> 3.4.40-1
changelog:
  - fix i2o module ordering (#83447)
  - ifarch'd build requires of dietlibc now that the build system has a way to
    handle these


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change one test from a number to a string test that could otherwise
    fail in not properly setup chroot environments


author: <ewt@redhat.com>
changelog:
  - added support for yaboot
  - test script runs tests for all platforms
  - separated elilo configuration from lilo mode, allowing elilo specific
    tests to be run on any platform


author: <ewt@redhat.com>
changelog:
  - grubby now shortens lilo titles to ensure they are less then 16 characters
    long (76236)
  - mkinitrd would only turn on /dev/md0 if raid was needed; now it enables
    all raid devices listed in /proc/mdstat (82209)
  - use product name from /etc/redhat-release to generate label in grub.conf
    (82352)


author: <ewt@redhat.com>
changelog:
  - all mkdev() actions will create directories as needed (some code in
    mkdevices is now obsolete; I'll remove it later) (#73317)
  - added mkdev command to test the above
  - support diratime/nodiratime mount options (#78738)
  - grubby will follow symlinks when writing new config file (#78713)
  - don't depend on raidtab, use /proc/mdstat instead (#80424) this covers
    both mkinitrd and grubby


author: Jeremy Katz <katzj@redhat.com> 3.4.34-1
changelog:
  - grubby: fix segfault finding default if default doesn't have a root= (#66000)
  - don't include usb modules by default.  pass --with-usb to get usb modules
  - make sure kudzu exists before trying to exec it
  - handle multiple scsi hosts being present (#77422)
  - add /usr/sbin to default path (#79581)
  - fix using --builtin= (#80448)
  - grubby: preserve the mode on config files (#80776)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - mkinitrd: add support for finding gzipped modules
  - mkinitrd: don't be noisy if we don't have lvm-mod loaded


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby: don't bail when looking for root in appends of lilo-style configs
  - include grubby on x86_64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix some syntax errors
  - use grep's -q flag to save a redirect in places where we're not redirecting
    stderr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby could segfault by going into its lilo checking if it couldn't find 
    a default to copy (default had no root= and --bad-image-okay wasn't 
    being used)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - nash: create directories if needed in mkdevices command (#73090)
  - grubby: handle lilo case of non-linux default (#72202)


author: Erik Troan <ewt@redhat.com>
changelog:
  - --ifneeded is obsolete; we always need initrds
  - grubby lets you specify multiple indexes for --info
  - grubby lets you select kernels by title
  - added showlabels to nash
  - new-kernel-pkg sets the root device from /etc/fstab rather then inheriting it
  - new-kernel-pkg removes all entries w/ a duplicate label (67459)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added loadinitrd (used by mkbootdisk) on ia32 and sparc
  - modules "off" and "null" should be ignored (67086)
  - mkrootdev looks for root=LABEL=/ in /proc/cmdline, so root by label
    works again (fully determined by root= kernel parameter)
  - added --update-kernel and --remove-args arguments to grubby
  - kernel specification of ALL supported by grubby
  - DEFAULT accepted much more consistently
  - grubby --info displays info on all kernels specified, not just the first
  - ext3 need mbcache now (67354)
  - grubby allows config file entry numbers to be used as kernel paths
  - support /etc/sysconfig/grub.conf
  - display lba info from lilo.conf file in --info


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - don't run lilo twice on kernel removal in new-kernel-pkg
  - don't run grubby to add/remove kernels from new-kernel-pkg if 
    bootloader config doesn't


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --bootloader-probe to grubby
  - wrote a man page for grubby
  - include grubby on ia64
  - updated new-kernel-pkg to work with lilo/elilo
  - added --info=DEFAULT option


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --grub option so grub tests could run on ia64
  - added some basic tests of lilo default directive handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --nopivot (53679)
  - honor INSTALL_PATH in installkernel (32833)
  - installkernel versions old kernels as well (52756)
  - lilo support added to grubby


author: Erik Troan <ewt@redhat.com>
changelog:
  - cleaned up usage message
  - added --omit-lvm-modules to man page
  - added --builtin option (65250)
  - skip comments in fstab (65249)
  - added findlodev to nash, use that to pick block device (63421)
  - support -o option in nash's mount (59185)
  - look for xfs_dmapi (60066)
  - added > support for executed commands (61180)
  - grubby copies permissions from old config file (59227)
  - use options from fstab for root filesystem (56071)
  - try and be better about returning nonzero on error (60203)
  - make modprobe symlink properly to avoid kernel message (62145)
  - support linear raid (12775)
  - support fallback option in grub config (54794)
  - comments in template entries not handled quite right (65198)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix probing for LVM usage to require a volume group to exist before adding
    the module
  - --omit-lvm-modules will omit LVM modules
  - add support for root device being LVM


author: Erik Troan <ewt@redhat.com>
changelog:
  - look for a non /tmpfs directory
  - added support for xfs
  - use with raid md.o if it exists
  - fixed bug in echo
  - use find form nash rather then /usr (mkinitrd shouldn't need /usr
    mounted)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added support for mounting root filesystem by label
  - switched to dietlibc from minilibc
  - fix so --preload= works [33675,57560,44377]
  - added info on --image-version and --nocompress to man page [57560]
  - set fileystem check interval to 0 in case the system clock
    is borked [51454]
  - give a proper error when run by a user other then root [27218,53159]
  - grubby statically linked against popt [55305]
  - cleaned up verbose output a bit [21791]


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed bug handling invalid default (MF #52889)
  - in some cases we would set the default to point at a removed image


author: Matt Wilson <msw@redhat.com>
changelog:
  - make consoles with the correct minor numbers
  - applied patch from hjl to fix fstab parsing (#50819)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - skip errors finding jbd as a module if we're skipping them trying to find
    ext3 so that you can build a kernel with ext3 built-in and still use an
    initrd


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't print errors if /etc/raidtab doesn't exist
  - or /etc/{modules.conf,conf.modules}, for that matter


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't dig through /etc/fstab to find out if we have a filesystem on
    a RAID device, it's usually mounted by label so /dev/mdN isn't there
    at all (#46525)


author: Erik Troan <ewt@redhat.com>
changelog:
  - let nash be invoked as modprobe to avoid a modprobe failure to exec
  - nash will try to run arbitrary commands now (removing insmod as a special 
    case)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch from twaugh to avoid blindly adding scsi_mod
    and sd_mod to initrd if they are not needed (#24114)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Enlarge initrds, needed for systems with both IDE and SCSI
    (Bug #23846)
  - Version 2.[6789] probably shouldn't identify itself as 2.6
    with --version. ;)
  - bzip2 source


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - now works when /usr is not mounted (do not rely on /usr/bin/install)
  - slight cleanups, better usage message


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Now automatically includes necessary raid modules
  - --omit-raid-modules now omits raid modules
  - tiny doc updates


author: Matt Wilson <msw@redhat.com>
changelog:
  - --omit-scsi-modules now omits all scsi modules
  - updated documentation
  - mkinitrd now grabs scsi_hostadapter modules from anywhere -
    some RAID controller modules live in block/


author: Matt Wilson <msw@redhat.com>
changelog:
  - Ignore the absence of scsi modules, include them if they are there, but
    don't complain if they are not.
  - changed --no-scsi-modules to --omit-scsi-modules (as it should have been)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - fix for combined sparc/sparc64 insmod, also pluto module is really
    fc4:soc:pluto and we don't look at deps, so special case it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - added 'make archive' rule to Makefile
  - rewrote install procedure for more robust version handling
  - be smarter about grabbing options from /etc/conf.modules


author: Erik Troan <ewt@redhat.com>
changelog:
  - Only use '-s' to install binaries if /usr/bin/strip is present.
  - Use an image size of 2500 if binaries can't be stripped (1500 otherwise)
  - Don't use "mount -o loop" anymore -- losetup the proper devices manually
  - Requires losetup, e2fsprogs


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Fixed a bug in parsing options.
  - Changed to use a build tree, then copy the finished tree into the
    image after it is built.
  - Added patches derived from ones written by Christian Hechelmann which
    add an option to put the kernel version number at the end of the module
    name and use install -s to strip binaries on the fly.


author: Kamil Dudka <kdudka@redhat.com> - 7.15.5-8
changelog:
  - mention lack of IPv6, FTPS and LDAP support while using a socks proxy
    (#473128)
  - avoid tight loop if an upload connection is broken (#479967)
  - add options --ftp-account and --ftp-alternative-to-user to program help
    (#517084)
  - fix crash when reusing connection after negotiate-auth (#517199)
  - support for CRL loading from a PEM file (#532069)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Tim Waugh <twaugh@redhat.com> 8.70-6:.4
changelog:
  - Applied patch to avoid reading initialization files from CWD
    (CVE-2010-2055, bug #599564).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.23.1.9.10
changelog:
  - Resolves: rhbz#744786
  - Bumped to IcedTea6 1.9.8
   Security fixes
    - S7000600, CVE-2011-3547: InputStream skip() information leak
    - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor
    - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow
    - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager
    - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine
    - S7055902, CVE-2011-3521: IIOP deserialization code execution
    - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks
    - S7064341, CVE-2011-3389: JSSE
    - S7070134, CVE-2011-3558: Hotspot unspecified issue
    - S7077466, CVE-2011-3556: RMI DGC server remote code execution
    - S7083012, CVE-2011-3557: RMI registry privileged code execution
    - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection
   NetX
    - PR794: javaws does not work if a Web Start app jar has a Class-Path element in the manifest


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.8
changelog:
  - Resolves: rhbz#668488
  - Bumped to IcedTea6 1.9.8
  - RH706250, S6213702, CVE-2011-0872: (so) non-blocking sockets with TCP urgent
    disabled get still selected for read ops (win)
  - RH706106, S6618658, CVE-2011-0865: Vulnerability in deserialization
  - RH706111, S7012520, CVE-2011-0815: Heap overflow vulnerability in 
    FileDialog.show()
  - RH706139, S7013519, CVE-2011-0822, CVE-2011-0862: Integer overflows in 2D 
    code
  - RH706153, S7013969, CVE-2011-0867: NetworkInterface.toString can reveal 
    bindings
  - RH706234, S7013971, CVE-2011-0869: Vulnerability in SAAJ
  - RH706239, S7016340, CVE-2011-0870: Vulnerability in SAAJ
  - RH706241, S7016495, CVE-2011-0868: Crash in Java 2D transforming an image 
    with scale close to zero
  - RH706248, S7020198, CVE-2011-0871: ImageIcon creates Component with null acc
  - RH706245, S7020373, CVE-2011-0864: JSR rewriting can overflow memory address
    size variables


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.7
changelog:
  - Resolves bz690289
  - Import from RHEL-5_6-Z
  - Updated to IcedTea6 1.9.7
  - Removed all plugin/webstart related commented lines
  - Modified bz entry format in previous logs to get around cvs ack checking bug


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Martin Matejovic <mmatejov@redhat.com> - 1:1.6.0-1.10.b16
changelog:
  - Update to openjdk build b16
  - Update to icedtea6-1.6
  - Added tzdata-java requirement
  - Added autoconf and automake build requirement
  - Added tzdata-java requirement
  - Added java-1.6.0-openjdk-gcc-stack-markings.patch
  - Added java-1.6.0-openjdk-memory-barriers.patch
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch
  - Added java-1.6.0-openjdk-securitypatches-20100323.patch
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Resolves: rhbz#576124


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.1.b09
changelog:
  - Moved policytool to devel package.
  - Updated release to 1.1, so there is considered newer than the outdated 
  EPEL package.
  - Resolves: rhbz#499079


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.26.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch.
  - Added java-1.6.0-openjdk-lcms.patch.
  - Updated release.
  - Removed fedora sources. We can now build with system-installed openjdk.
  - Resolves: rhbz#490182


author: Daniel Veillard <veillard@redhat.com> - 2.6.26-2.1.12.el5_7.2
changelog:
  - Fix the semantic of XPath axis for namespace/attribute nodes CVE-2010-4008
  - Fix an off by one error in encoding CVE-2011-0216
  - Fix some potential problems on reallocation failures CVE-2011-1944
  - Fix missing error status in XPath evaluation CVE-2011-2834
  - Make sure the parser returns when getting a Stop order CVE-2011-3905
  - Fix an allocation error when copying entities CVE-2011-3919.patch
  - Resolves: rhbz#771906


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-38
changelog:
  - set better buffer length in latency patch (#508914)
  - close error file descriptor before running external subsystem (#530358)
  - prevent initscript from hanging when generates the keys (#531738)


author: Jan F. Chadima <jchadima@redhat.com> - 4.3p2-33
changelog:
  - fix scp hangup on exit (#454812)
  - call integrity checks only on binaries which are part of the OpenSSH FIPS
    modules


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-32
changelog:
  - log if FIPS mode is initialized (#492363)
  - check the integrity of the binaries in the FIPS mode (#467268)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-28
changelog:
  - use OpenSSL RNG directly (needed for FIPS-140-2 compliance)
  - when in FIPS mode do not try to use algorithms which are not allowed (#447936)
  - improve transfer speed on high latency connections (#227722)
  - more correct 'service sshd status' reporting (#430877)
  - add logging support to the sftp server (#452619)
  - small scp manual page improvement (#433381)


author: Dennis Gregorovic <dgregor@redhat.com> - 4.3p2-26.el5_2.1
changelog:
  - CVE-2007-4752 - Prevent ssh(1) from using a trusted X11 cookie if creation of an
    untrusted cookie fails (#280361)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-21
changelog:
  - fix an information leak in Kerberos password authentication (CVE-2006-5052)
    (#234638)
  - correctly setup context when empty level requested (#234951)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-13
changelog:
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0 (#167488)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10.1
changelog:
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214642)
  - kill all ssh sessions when stop is called in halt or reboot runlevel (#213008)
  - remove -TERM option from killproc so we don't race on sshd restart (#213490)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-10
changelog:
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-9
changelog:
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-8
changelog:
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-7
changelog:
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-6
changelog:
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings


author: Tomas Mraz <tmraz@redhat.com> - 4.3p2-3
changelog:
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails


author: Tomas Mraz <tmraz@redhat.com> - 4.3p1-2
changelog:
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)


author: Tomas Mraz <tmraz@redhat.com> - 4.2p1-9
changelog:
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem


author: Nalin Dahyabhai <nalin@redhat.com> - 4.2p1-8
changelog:
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"


author: Warren Togami <wtogami@redhat.com> - 4.2p1-7
changelog:
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1


author: Tomas Mraz <tmraz@redhat.com> 4.2p1-2
changelog:
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-5
changelog:
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-4
changelog:
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)


author: Tomas Mraz <tmraz@redhat.com> 4.1p1-3
changelog:
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)


author: Tomas Mraz <tmraz@redhat.com> 4.0p1-2
changelog:
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-11
changelog:
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-10
changelog:
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)


author: Nalin Dahyabhai <nalin@redhat.com> 3.9p1-8
changelog:
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages


author: Nalin Dahyabhai <nalin@redhat.com> 3.8.1p1-1
changelog:
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default


author: Daniel Walsh <dwalsh@redhat.com> 3.6.1p2-34
changelog:
  * Wed Mar 03 2004 Phil Knirsch <pknirsch@redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-11
changelog:
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)


author: Nalin Dahyabhai <nalin@redhat.com> 3.6.1p2-6
changelog:
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-6
changelog:
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)


author: Nalin Dahyabhai <nalin@redhat.com> 3.5p1-2
changelog:
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-2
changelog:
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional


author: Nalin Dahyabhai <nalin@redhat.com> 3.3p1-1
changelog:
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-4
changelog:
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-3
changelog:
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-2gss
changelog:
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Nalin Dahyabhai <nalin@redhat.com> SNAP-20020220
changelog:
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)


author: Nalin Dahyabhai <nalin@redhat.com> 3.0.2p1-3
changelog:
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support


author: Nalin Dahyabhai <nalin@redhat.com> 3.0p1-1
changelog:
  - merge some of Damien Miller <djm@mindrot.org> changes from the upstream
    3.0p1 spec file and init script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli


author: Nalin Dahyabhai <nalin@redhat.com> 2.9p2-7
changelog:
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.


author: Ray Strode <rstrode@redhat.com> - 2.16.0-14.el5
changelog:
  - prefer smart card drivers found in system secmod db over the
    hardcoded /usr/lib/pkcs11/libcoolkeypk11.so


author: Ray Strode <rstrode@redhat.com> - 2.16.0-12.el5
changelog:
  - have security token monitor helper process kill itself when 
    the communication pipe to the main process goes away (bug
    210677).


author: Ray Strode <rstrode@redhat.com> - 2.16.0-11.el5
changelog:
  - report token events from helper process using token name instead
    of slot id and slot series number, since slot id and slot series
    number are relative to each process (bug 208018)


author: Ray Strode <rstrode@redhat.com> - 2.16.0-9.el5
changelog:
  - handle PAM messages in a separate thread so that when a pam
    module blocks, the cancel button still works (bug 206322)
  - set cursor to busy while waiting on pam module (bug 202276)
  - hide prompt label/entry/unlock button until pam asks the
    user for input (bug 202276)
  - dont assume first pam message will be "Password:" 
    (bug 201858, 202278)


author: Ray Strode <rstrode@redhat.com> - 2.15.4-6
changelog:
  - don't listen for smart card events unless session was
    initiated after smart card authentication.
  - update lock dialog UI in between individual pam messages


author: Ray Strode <rstrode@redhat.com> - 2.15.4-3
changelog:
  - only lock screen if screen locking is enabled and the token
    pulled out is a login token (requires uncommited changes to 
    pam_pkcs11).


author: Ray Strode <rstrode@redhat.com> - 2.13.5-4
changelog:
  - throttle cpu usage in floaters screensaver to allow things
    like background compiles to be faster (bug 178496).


author: Ray Strode <rstrode@redhat.com> - 0.0.23-1
changelog:
  - Update to 0.0.23
  - remove floaters screensaver engine patch (it's upstreamed)
  - keep fedora branded parts


author: Simon Matter <simon.matter@invoca.ch>
changelog:
  - added more fixes to the autocreate patch
  - don't use /usr/lib for /usr/lib/cyrus-imapd, it's a mess on x86_64
  - don't use /usr/lib for symlinks
  - remove /usr/lib pachtes
  - change pam configs to work on x86_64
  - changed default build option for IDLED to on
  - changed rpm_set_permissions to honor partitions in /etc/imapd.conf


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-26
changelog:
  - Fix bz679866 (Add the ability to configure the "self_fence" attribute for the LVM resource)
  - Fix bz690936 (RFE: fence_cisco_ucs needs to support sub-organizations)
  - Fix bz643996 (luci_admin doesn't operate correctly if external zope3 packages are installed)
  - Fix bz640329 (fields in Luci are too short)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-24
changelog:
  - Fix bz493662 (RFE: Separate the Oracle 10g Failover Instance in Conga to two resources called "Oracle Instance" and "Oracle Listener")


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-19
changelog:
  - Fix bz602362 (ricci and luci_admin do not have man pages)
  - Fix bz636554 (Support ext4 and xfs file systems in conga for file system agents)
  - Fix bz637216 (Add luci support for fence_ifmib fencing agent)
  - Fix bz579859 (Add luci support for Cisco UCS fencing agent)
  - Fix bz637259 (RFE: Critical/Non-Critical services & resources luci support)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-18
changelog:
  - Fix bz626817 (Add luci support for Cisco MDS fencing agent)
  - Fix bz628102 (Add luci support for iLO MP fencing agent)
  - Fix bz525802 (Add support for configuring broadcast)
  - Modify fix for bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Modify fix for bz501780 (Luci invalidates some "system hostnames" that are valid)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-16
changelog:
  - Fix bz513004 (Conga does not remember SAP database type in IE6/8 from shared resource)
  - Fix bz533246 (Conga does not write "auth" or "password" when creating IPMI LAN fence device)
  - Fix bz555862 (Luci does not have an option to delete failover domain)
  - Fix bz577913 (Fence_drac5 will not popluate the luci interface correctly when adding fence device to node)
  - Fix bz582348 (Remove the "interface" field from the multicast configuration dialog)
  - Fix bz584633 (Add support for power_wait)
  - Fix bz587399 (Clarification on "type" when configuring oracledb resources)
  - Fix bz590143 (chkconfig on cman and rgmanager by default when adding a cluster node via conga)
  - Fix bz590311 (luci vmware fencing gui and fence_vmware script parameter conflict)
  - Fix bz603114 (Can't create KVM guest resources without a path to the XML file)
  - Fix bz606509 (luci requires wrongly requires users to fill interval / minimum score / votes fields for qdisk configuration)
  - Fix bz612300 (conga will fail to start a new node that is added via luci)


author: Chris Feist <cfeist@redhat.com> 0.12.2-14
changelog:
  - An issue with calling 'virsh nodelist' would cause ricci to hang for
    30 seconds during most requests resulting in timeouts to the web interface.
  - Resolves: rhbz#564490


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-7
changelog:
  - Fix bz501780 (Luci invalidates some "system hostnames" that are valid)
  - Fix bz514051 (fs resource will remount itself if any config changes are made to cluster.conf)
  - Fix bz517114 (Conga should not tag clusternodes with multicast tags)
  - Fix bz519050 (Luci does not validate passwords and incorrect characters can be used)
  - Fix bz521884 (Fix instances of #!/usr/bin/env python in luci)
  - Fix bz530129 (conga does not properly handle HA LVM types)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6.1
changelog:
  - Fix bz519252: run the 'virsh' command with --readonly to cope with new
    virsh/xen behavior introduced in RHEL 5.4.


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-6
changelog:
  - Fix bz469965 (Adding existing fence device fails)
  - Fix bz499741 (updating qdisk partition global settings wipes out heuristics)
  - Fix bz495109 (Need xen/kvm flag for conga UI)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-5
changelog:
  - Fix bz492392 (Conga Interface for Fence Agents Requires Password even when Password Script is Specified)
  - Fix bz491903 ([RFE] add option 'nfslock' to conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-4
changelog:
  - Rework fix for bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.2-1
changelog:
  - Fix bz452704 (Unable to add existing RHEL4 clusters with RHEL5.2 Luci)
  - Fix bz467464 (adding qdisk to existing cluster fails to update cman entry in cluster.conf)
  - Fix bz460038 (Conga fs resource error when editing service)
  - Fix bz483067 (adding resource in conga doesn't work in IE)
  - Fix bz483775 (Failover Domains can't be set for VMs as services of cluster suite using Conga)
  - Fix bz450007 (cannot remove shared fence device through luci)
  - Fix bz466013 (Add luci GUI support for LPAR and vmware fencing)
  - Fix bz459160 (fenced config option to skip nodes with undefined fencing)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-4
changelog:
  - Fix bz459562 (charset configuration fix for luci)
  - Fix bz459469 (An unknown device type was given: "gnbd.")
  - Fix bz454933 (Add Support in Conga for Xen migration mapping)
  - Fix bz459623 (Conga error adding new node to existing cluster)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.1-1
changelog:
  - Fix bz444938 (conga fails to create proper cluster.conf entries for gfs2 filesystem type)
  - Fix bz444210 (Adding multiple fence devices at the same time causes duplicate entries)
  - Fix bz444381 (conga writes 'exportpath' instead of 'export' attribute for netfs)
  - Fix bz446907 (rpm -V luci fails)
  - Fix bz450854 (luci doesn't start because of a missing dep /usr/bin/dc)
  - Fix bz206570 (RFE: vm list from ricci)
  - Fix bz430737 (Conga should install the 'cmirror' package when clustered storage is requested)
  - Fix bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fix bz433089 (when adding multiple nodes the order is reversed.)
  - Fix bz441581 (Don't allow both label and device for qdisk config if only one can be specified)
  - Fix bz223785 (Storage 'Display Devices by' option does not work)
  - Fix bz250439 (conga is unable to delete snapshot volumes)
  - Fix bz414551 (Sector size list is improperly sorted)
  - Fix bz429350 (RFE: GUI support for failing over a service to another node after X number of restarts)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-8
changelog:
  - Fix bz441580 (conga should install 'sg3_utils' and start service 'scsi_reserve' when scsi fencing is used)
  - Fix bz441573 ("nodename" field for fence_scsi disabled when adding a new fence device/instance)
  - Fix bz442997 (Luci inserts "hostname" instead of "ipaddr" for rsa II fencing device)
  - Fix bz442806 (luci shows wrong state for 'Monitor link' checkbox in IP resource)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-6
changelog:
  - Fix bz434586 (Resource tree does not display multiple children of a parent correctly)
  - Fix bz304931 (Rich Sybase resource agent configuration support)
  - Fix bz437398 (When Luci session times out a re-login is thought to be a logout.)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-4
changelog:
  - Fix bz429151 ([RFE] Luci: increase min password length to 6 characters)
  - Fix bz429152 ([RFE] add inactivity timeout)


author: Ryan McCabe <rmccabe@redhat.com> 0.12.0-0
changelog:
  - Fixed bz230462 (RFE: Only reboot installation target machines when needed)
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz239387 (RFE: add timeouts for actions that can leave cluster unreachable)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz249619 (luci "Manage Systems and Clusters" display of clusters and storage systems is cascaded)
  - Fixed bz252348 (RFE: should only have to enter a system's password once)
  - Fixed bz253223 (When deleting a node from conga, the fence device isn't deleted)
  - Fixed bz253720 ("trust" box shouldn't be an option if it is required)
  - Fixed bz253727 (RFE: graphical view should be default in partiton tables view)
  - Fixed bz253842 (luci ignores File System Resource Configuration)
  - Fixed bz253879 (RFE: drop the link/details column in the resource section table)
  - Fixed bz264161 (RFE: support setting the "__independent_subtree" attribute on cluster resources)
  - Fixed bz277661 (RFE: Better instructions on the luci login page if luci_admin not run.)
  - Fixed bz277711 (RFE: luci_admin should check that luci is running before asking for the password)
  - Fixed bz295771 (RFE: add ability to set self_fence attribute for clusterfs resources)
  - Fixed bz301411 (conga shouldn't turn on init scripts if the user turned them off)
  - Fixed bz303661 (Browser support to encompass Internet Explorer on Windows Vista and XP)
  - Fixed bz304891 (Browser support to encompass Firefox on Windows Vista and XP.)
  - Fixed bz315631 (conga doesn't handle the cluster restart operation properly)
  - Fixed bz317261 (Check for dual power fencing fails when adding new fence instances)
  - Fixed bz320411 (conga should use the node name in cluster.conf and not FQDN for fencing)
  - Fixed bz337041 (Add option to not fail-back service)
  - Fixed bz340111 (Storage redirection after probe does not work on WinXP with FF2)
  - Fixed bz379461 (Conga doesn't have the option for modulename for drac fencing)
  - Fixed bz383071 (Virtual machine configuration - add field for "migration type" xml attr = "migrate")


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-6
changelog:
  - Fixed bz253783
  - Fixed bz253914 (conga doesn't allow you to reuse nfs export and nfs client resources)
  - Fixed bz254038 (Impossible to set many valid quorum disk configurations via conga)
  - Fixed bz253994 (Cannot specify multicast address for a cluster)
  - Resolves: bz253783, bz253914, bz254038, bz253994


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-5
changelog:
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz253341 (failure to start cluster service which had been modifed for correction)
  - Related: bz253341
  - Resolves: bz249291


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-4
changelog:
  - Fixed bz230451 (fence_xvm.key file is not automatically created. Should have a least a default)
  - Fixed bz249097 (allow a space as a valid password char)
  - Fixed bz250834 (ZeroDivisionError when attempting to click an empty lvm volume group)
  - Fixed bz250443 (storage name warning utility produces a storm of warnings which can lock your browser)
  - Resolves: bz249097, bz250443, bz250834
  - Related: bz230451


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-3
changelog:
  - Fixed bz245947 (luci/Conga cluster configuration tool not initializing cluster node members)
  - Fixed bz249641 (conga is unable to do storage operations if there is an lvm snapshot present)
  - Fixed bz249342 (unknown ricci error when adding new node to cluster)
  - Fixed bz249291 (delete node task fails to do all items listed in the help document)
  - Fixed bz249091 (RFE: tell user they are about to kill all their nodes)
  - Fixed bz249066 (AttributeError when attempting to configure a fence device)
  - Fixed bz249086 (Unable to add a new fence device to cluster)
  - Fixed bz249868 (Use of failover domain not correctly shown)
  - Resolves bz245947, bz249641, bz249342, bz249291, bz249091,
  - Resolves bz249066, bz249086, bz249868
  - Related: bz249351


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-2
changelog:
  - Fixed bz245202 (Conga needs to support Internet Explorer 6.0 and later)
  - Fixed bz248317 (luci sets incorrect permissions on /usr/lib64/luci and /var/lib/luci) 
  - Resolves: bz245202 bz248317


author: Ryan McCabe <rmccabe@redhat.com> 0.10.0-1
changelog:
  - Fixed bz238655 (conga does not set the "nodename" attribute for manual fencing)
  - Fixed bz221899 (Node log displayed in partially random order)
  - Fixed bz225782 (Need more luci service information on startup - no info written to log about failed start cause)
  - Fixed bz227743 (Intermittent/recurring problem - when cluster is deleted, sometimes a node is not affected)
  - Fixed bz227682 (saslauthd[2274]: Deprecated pam_stack module called from service "ricci")
  - Fixed bz238726 (Conga provides no way to remove a dead node from a cluster)
  - Fixed bz239389 (conga cluster: make 'enable shared storage' the default)
  - Fixed bz239596
  - Fixed bz240034 (rpm verify fails on luci)
  - Fixed bz240361 (Conga storage UI front-end is too slow rendering storage)
  - Fixed bz241415 (Installation using Conga shows "error" in message during reboot cycle.)
  - Fixed bz241418 (Conga tries to configurage cluster snaps, though they are not available.)
  - Fixed bz241706 (Eliminate confusion in add fence flow)
  - Fixed bz241727 (can't set user permissions in luci)
  - Fixed bz242668 (luci init script can return non-LSB-compliant return codes)
  - Fixed bz243701 (ricci init script can exit with non-LSB-compliant return codes)
  - Fixed bz244146 (Add port number to message when ricci is not started/firewalled on cluster nodes.)
  - Fixed bz244878 (Successful login results in an infinite redirection loop with MSIE)
  - Fixed bz239388 (conga storage: default VG creation should be clustered if a cluster node)
  - Fixed bz239327 (Online User Manual needs modification)
  - Fixed bz227852 (Lack of debugging information in logs - support issue)
  - Fixed bz245025 (Conga does not accept '&amp;' character in password field for Fence configuration)
  - Fixed bz225588 (luci web app does not enforce selection of fence port)
  - Fixed bz212022 (cannot create cluster using ip addresses)
  - Fixed bz223162 (Error trying to create a new fence device for a cluster node)
  - Upgraded to the latest Plone (2.5.3)
  - Added a "reprobe storage" button that invalidates cached storage reports
    and forces a new probe.
  - Resolves: bz238655, bz221899, bz225782, bz227682, bz227743, bz239389,
  - Resolves: bz239596, bz240034, bz240361, bz241415, bz241418, bz241706,
  - Resolves: bz241727, bz242668, bz243701, bz244146, bz244878, bz238726,
  - Resolves: bz239388, bz239327, bz227852, bz245025, bz225588, bz212022


author: Ryan McCabe <rmccabe@redhat.com> 0.9.2-5
changelog:
  - Fixed bz225206 (Cluster cannot be deleted (from 'Manage Systems') - but no error results)
  - Fixed bz225164 (Conga allows creation/rename of clusters with name greater than 15 characters)
  - Fixed bz227758 (Entering bad password when creating a new cluster = UnboundLocalError: local variable 'e' referenced before assignment)
  - Resolves: bz225206, bz225164, bz227758


author: Stanko Kupcevic <kupcevic@redhat.com> 0.9.2-4
changelog:
  - Do not fail on i18n machines
  - Fixed bz225747 (Create/delete cluster - then access disk on node = Generic error on host: cluster tools: cman_tool errored)
  - Fixed bz233326 (CVE-2007-0240 Conga includes version of Zope that is vulnerable to a XSS attack)
  - Fixed bz228637 (CVE-2007-1462 security alert - passwords sent back from server as input value)
  - Fixed bz229027 (luci failover domain forms are missing/empty)
  - Fixed bz230447 (fence_xvm is incorrectly listed as "xmv" in virtual cluster)
  - Fixed bz230452 (Advanced options parameters settings don't do anything)
  - Fixed bz230454 (Unable to configure a virtual service)
  - Fixed bz230457 (kmod-gfs-xen not installed with Conga install)
  - Fixed bz230461 ('enable shared storage' option cleared whenever there is a configuration error)
  - Fixed bz230469 (Must manually edit cluster.conf on the dom0 cluster to add "<fence_xvmd/>")
  - Resolves: bz229027, bz230447, bz230452, bz230454, bz230457,
  - Resolves: bz230461, bz230469, bz228637, bz233326, bz225747


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-27
changelog:
  - Fixed bz214989 (Package download not working for Conga during cluster creation)
  - Fixed bz219522 (Restarting a cluster via luci web gui = UnboundLocalError - local variable 'e' referenced before assignment)
  - Fixed bz201394 (luci doesn't verify ricci's SSL cert against trusted list)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212448 (release blocker: turn off debug mode of server)
  - Fixed bz212445 (release blocker: prevent management page access)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-26
changelog:
  - luci storage: fix bytes->TB conversion
  - Improved bz201394: luci doesn't verify ricci's SSL cert against trusted list (step 1 - backend)
  - Fixed bz217387 (luci - HTML error shows up in display (minor))
  - Fixed bz215031 (Cannot add a resource to a service via luci web app)
  - Fixed bz218040 (luci reports "unknown" as cluster name if cluster creation fails)
  - Fixed bz218941 (Conga/luci - cannot add node to cluster via luci web app)
  - Fixed bz219156 (Errors in performing node-specific tasks due to ricci outage not reflected in luci display)
  - Fixed bz217703 (clustered vg creation fails)
  - Resolves: bz217387, bz215031, bz218040, bz218941, bz219156, bz217703
  - Related: bz201394


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-24
changelog:
  - Fixed bz215039 (Cannot create a new resource via luci web app)
  - Fixed bz215034 (Cannot change daemon properties via luci web app)
  - Fixed bz214790 (Stop/restart cluster not working via luci web app)
  - Fixed bz213690 (luci - Reversed links in colophon (gui - minor))
  - Fixed bz213266 (Conga - modifying a cluster node's cluster membership in a subnet with other clusters results in the wrong cluster.conf)
  - Fixed bz213083 (luci - should display usernames in some logical/sorted order (usability))
  - Fixed bz212601 (luci - selecting cluster name or cluster node name indicates error in install and displays empty form)
  - Fixed bz212021 (various luci buttons do nothing)
  - Fixed bz212006 (create cluster does not show status as cluster is being created)
  - Fixed bz212584 (luci does not retrieve failed ricci queue elements)
  - Fixed bz212440 (luci persists possibly incorrect name for a system)
  - Improved bz213306 (ricci - log probing can take minutes to complete)
  - Fixed starting/stopping services
  - Fixed deleting cluster
  - Fixed deleting node
  - Fixed redirection for all async->busy wait calls
  - Storage module: properly probe cluster quorum if LVM locking
    is marked as clustered
  - Resolves: bz215039, bz215034, bz214790, bz213690, bz213266
  - Resolves: bz213083, bz212601, bz212021, bz212006, bz212584
  - Resolves: bz212440
  - Related: bz213306


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-21
changelog:
  - 211564: ricci allocates huge memory chunk, causing long swapping
  - 211345: cluster_adapters is missing import of Xenvm module
  - 211191: SELinux issues tracking bug
  - 211370: retrieving log from node fails
  - 211942: Xenvm moniker must be eradicated from UI
  - 211375: unable to reliably create a cluster
  - 211373: reboot node fails from storage tab


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-16
changelog:
  - Enable zope/plone inclusion on RHELs
  - Remove luci's dependency on ricci
  - Many improvements of cluster management interface
  - Add full GFS1/2 support; detect many other filesystems
  - Suppress msgs from init script (bz204235)
  - Upgrade zope to 2.9.4 (track Fedora Core)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-12
changelog:
  - Don't auto-start ricci after installation, do it manually
  - Under certain circumstances, default luci password would not get reset
  - Many Luci improvements


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11.7
changelog:
  - Move ricci-modrpm, ricci-modlog, ricci-modstorage, ricci-modservice
    from /usr/sbin to /usr/libexec


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8-11
changelog:
  - Spin off clustermon.srpm (modcluster, cluster-snmp and
    cluster-cim) from conga.srpm
  - Luci: tighten down security


author: Johnny Hughes <johnny@centos.org> 0.9.8e-20.1.el5_7.1.0.1.centos
changelog:
  - ENVR bump due to a multiarch man page issues where the i686 and x86_64 man page
    different md5sums for the i686 and x86_64 man pages caused an install conflict.
    Other than the version number, the package is unchanged.


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-44.el5
changelog:
  - Updated to latest sourse, t0_4_7_rhel5_30
  - Resolves: bz #639429, #627911, #670836, #674366, #675369


author: Benjamin Marzinksi <bmarzins@redhat.com> 0.4.7-38.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_24
  - Resolves: bz #484419, #559852, #560892, #566685, #568127, #570513, #574813, #576600, #585225, #599686


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-34.el5
changelog:
  - Added 545822_fix_part2.patch
  - Added 554830_fix.patch
  - Fixed Invista default config, and typo in multipath.conf man page.
  - Resolves: bz #545822, #554830


author: Benjamin Marzinski <bmarzins@redaht.com> 0.4.7-33.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_19
  - Added new multipath.conf option "checker_timeout". If this is not set the
    checker functions with explicit timeouts use /sys/block/sd<x>/device/timeout
  - Resolves: bz #553042


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-31.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_17
  - Resolves: bz #526550, #518575, #512243, #531744, #540882, #537977, #437585, #472171, #473039, #481239, #502128, #510331, #517896, #501019, #524009, #537281, #475967, #499080, #504619, #515171, #524178, #527754, #532424


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-27.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_16
  - Resolves: bz #437588, #474451, #462776, #477023, #485296, #489030, #481227, #484711


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-25.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_14
  - Resolves: bz #452897, #480048, #457776, #459629, #470896, #493402


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-19.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_13
  - Resolves: bz #238421, #419581, #449097, #455692, #456126, #456228, #457226


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-18.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_12
  - Resolves: bz #431843, #434588, #434988, #439366, #440123, #442000, #444421, #446223, #448655, #454928


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-15.el5
changelog:
  - All non-static path_prio callouts are now just symlinks to the static
    ones
  - Resolves: bz #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-14.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_10
  - Resolves: bz #226791, #247443, #249088, #251346, #335021, #354661, #355961


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-10.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_5
  - Resolves: #214838, #223146, #223150, #223762, #231545, #241189, #242723, #243483


author: Benjamin Marzinski <bmarzins@redhat.com> 0.4.7-8.el5
changelog:
  - Update to latest source, t0_4_7_rhel5_2
  - Resolves bz #219804
  - filesystems made on dasd devices may need to be rebuild after upgrading
    to this version.


author: Peter Jones <pjones@redhat.com> - 0.4.7-4.1
changelog:
  - Split kpartx out into its own package so dmraid can use it without
    installing multipathd
  - Fix a segfault in kpartx


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.el5.el5_7.4
changelog:
  - bz750463 - autofs-5.0.1-0.rc2.156.el5_7.3 breaks indirect NIS maps
    - fix fix map source check in file lookup.
  - Resolves: rhbz#750463


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5.el5_7.3
changelog:
  - bump version so we can replace the build with the incorrect changelog verion
    entry.
  - Related: rhbz#744698


author: Ian Kent <ikent@redhat.com> - 5.0.1-0.rc2.156.el5.el5_7.2
changelog:
  - bz744698 - autofs mount access hangs after reload
    - fix prune cache valid check.
    - fix map source check in file lookup.
  - Resolves: rhbz#744698


author: Neil Horman <nhorman@redhat.com> - 1.102pre-72
changelog:
  - Picked up some more fixes for HP systems (bz 277531)
  - Initialized machdep info for dump-dmesg (bz 475414)


author: Neil Horman <nhorman@redhat.com> -1.102pre-63
changelog:
  - Update kdump initscript to offer condrestart (bz 494483)
  - Update mkdumprd to use hostnames for ssh (bz 493690)


author: Neil Horman <nhorman@redhat.com> -1.102pre-59
changelog:
  - Fixed some bad status msgs on ssh target (bz 466450)
  - Fixed ability to detect md arrays (bz 479211)


author: Neil Horman <nhorman@redhat.com> -1.102pre-58
changelog:
  - Add --noio for HP rx series boxes in spec file (bz 277531)
  - Add fix for newer EFI firmware on ia64 (bz 473730)
  - Add fix to mkdumprd for newline in ifcfg files (bz 476063)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-52
changelog:
  - Abort mkdumprd if devices in fstab can't be found (bz 472575)
  - Fix IDE CD-ROM hang fix further, add hdX=noprobe for the
    non-cdrom hdX's (bz 254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-45
changelog:
  - Fixed ability to drop to shell (bz 465453)
  - Fixed typo in changelog (bz 465445)
  - Fixed ability to handle raid5 partitions (bz 465361)


author: Neil Horman <nhorman@redhat.com> -1.102pre-41
changelog:
  - Fix kdump.conf man page to correct default directive (bz 463404)
  - Fix makedumpfile to not build wrong filter bitmap (bz 462864)


author: Jarod Wilson <jarod@redhat.com> -1.102pre-39
changelog:
  - Fix failure to capture vmcore when a panic triggers while
    an IDE CD-ROM drive is busy (bz254163)


author: Neil Horman <nhorman@redhat.com> -1.102pre-33
changelog:
  - Fix mkdumprd to support options directive (bz 459686)
  - Update kdump.conf man page to clarify msh use (bz 459622)


author: Neil Horman <nhorman@redhat.com> -1.102pre-23
changelog:
  - Fixed ppc64 kexec to make a page_size section for rtas (bz 438056)
  - Added udev rules to restart kdump on mem/cpu hotplug (bz 446423)


author: Neil Horman <nhorman@redhat.com> -1.102pre-22
changelog:
  - Start here for 5.3 errata
  - Fixed mkdumprd to wait for critical bdevs (bz 446279)
  - Fixed mkdumprd to not spew ld.conf warnings (bz 438459)
  - Fixed mkdumprd to not do extra efirtc create (bz 438755)
  - Enhanced mkdumprd to display progress (bz 223892)
  - Fixed mkdumprd to handle non-default lvm names (bz 360111)
  - Fixed howto to reflect correct scp use (bz 440983)
  - Fixed mkdumprd man page (bz 444824)


author: Neil Horman <nhorman@redhat.com> -1.102pre-1
changelog:
  - Update makedumpfile to use vmcoreinfo information (bz 253852)
  - Update kexec-tools to latest testing tree from horms (bz 253852)
  - Add vmcoreinfo retrieval patch (bz 253852)
  - Update makedumpfile to 1.2.0 to use vmcoreinfo (bz 253852)
  - modify mkdumprd to call makedumpfile properly w/ vmcoreinfo (bz 253852)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.4
changelog:
  - Use PAE kernel for i686 xen kdump if mem > 4GB (bz 284821)
  - Warn users in firstboot if they need kernel-PAE (bz 284841)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194.1
changelog:
  - Add support for dumping to partitions on drives attached to cciss
    and cpqarray controllers (bz 228685)
  - Minor updates to kdump initscript for xen kdump support (bz 244301)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-194
changelog:
  - Update kdump init script to look for crash kernel reservation in
    /proc/iomem so we can start up on xen kernels too (bz 250803)


author: Neil Horman <nhorman@redhat.com> - 1.101-192
changelog:
  - Update makedumpfile to version 1.1.1 (bz 248235)
  - reconcile mkdumprd options w/ man page (bz 247493)
  - Fix some doc formatting (bz 247552)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-188
changelog:
  - Fix regression in network dump setup introduced by changes to
    support adding arbitrary kernel modules (bz 223929)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-187
changelog:
  - Fix up firstboot memory reservation detection for ppc64 (bz 245980)
  - Minor formatting fix for post-script feature
  - Don't allow user to try to set up kdump on ia64 xen (not supported)
  - Nudge minimum allowed firstboot spinner values down a bit, but
    present same defaults as we always have


author: Jarod Wilson <jwilson@redhat.com> - 1.101-185
changelog:
  - Add translations for firstboot kdump module (bz 215318)
  - Update kexec-kdump-howto.txt with new options


author: Jarod Wilson <jwilson@redhat.com> - 1.101-184
changelog:
  - Add ability to specify arbitrary kernel modules that should be
    included in kdump initrd (bz 223929)
  - Add support for running a kdump post-capture script (bz 224101)
  - Fix regression with default/empty kdump.conf introduced by adding
    support for halt option


author: Jarod Wilson <jwilson@redhat.com> - 1.101-183
changelog:
  - Add halt option to default actions in kdump initrd (bz 224098)
  - Fix panic kernel load segfault regression on ppc64 (bz 245392)
  - A few minor spec consistency clean-ups


author: Neil Horman <nhorman@redhat.com> - 1.101-166
changelog:
  - Include mkdumprd man page (bz 223729)
  - Fix kdump.conf perms 
  - Fix documentation to reference other sources (bz 228861)
  - Fix mkdumprd typo (bz 224623)
  - Fix mkdumprd to use getent (bz 223247)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-164
changelog:
  - Touch kdump.conf when kernel-kdump is installed to trigger
    proper kdump initrd creation on ppc64 (bz 217908)


author: Neil Horman <nhorman@redhat.com> - 1.101-156
changelog:
  - Fixing ppc64 memory range sizing (bz 220626)
  - Adding doc content to prevent use of vfat/msdos fs as dump targets


author: Jarod Wilson <jwilson@redhat.com> - 1.101-155
changelog:
  - Fix ia64/elilo boot param updating in firstboot module (bz 220351)
  - Set min/max mem in firstboot module to zero if running on xen kernel


author: Neil Horman <nhorman@redhat.com> - 1.101-151
changelog:
  - Removing kcp directory creation from build
  - Updating ia64 phdr patch to upstream version (bz 218503)


author: Neil Horman <nhorman@redhat.com> - 1.101-147
changelog:
  - Fixed some typos in kdump.conf
  - Fixed propogate command when target .ssh dir doesn't exist (bz 219526)


author: Neil Horman <nhorman@redhat.com> - 1.101-144
changelog:
  - Update to makedumpfile-1.0.7 to fix ELF32/64 issue (bz 218325)
  - Update spec file to build makedumpfile for ppc64
  - remove strip command from specfile to get debuginfo for makedumpfile


author: Neil Horman <nhorman@redhat.com> - 1.101-141
changelog:
  - Fixed firstboot to properly disable service (bz 216430)
  - Fixed initscript to properly set elf header size (bz 217780)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-137
changelog:
  - Fix up firstboot module spinner limits (bz 217744)
  - Added check to make sure net interfaces are up
  - Added feature to allow for post link up sleep (bz 216736)


author: Neil Horman <nhorman@redhat.com> - 1.101-127
changelog:
  - Fix mkdumprd to determine net driver name in absence of modalias (bz 215060)
  - Fix mkdumprd to check exit code of dd on raw target (bz 215061)


author: Jarod Wilson <jwilson@redhat.com> - 1.101-123
changelog:
  - Update documentation to detail setting up raw partition, dedicated
    file system, nfs and ssh dumps (bz 198841)
  - Use dedicated key for ssh dumps
  - Enable ssh dumps using non-root user on destination system
  - Rewrap kdump.conf to under 80 chars per line


author: Neil Horman <nhorman@redhat.com> - 1.101-120
changelog:
  - supress kexec messages from stderr (bz 212410)
  - fix mkdumprd to present proper name when run with --version (bz 213695)


author: Neil Horman <nhorman@redhat.com> - 1.101-116
changelog:
  - further cleanups on firstboot_kdump.py (bz 213494)
  - modify status function in kdump.init to report no support (bz 212744)


author: Neil Horman <nhorman@redhat.com> - 1.101-113
changelog:
  - Fixing failed execs to grubby + chkconfig in firstboot (bz 212734)
  - Fix startup on xen kernel to properly indicate lack of support (bz 212744)


author: Neil Horman <nhorman@redhat.com> - 1.101-107
changelog:
  - Removing old hack patch for relocatable kernels
  - Rediffing other patches to work with previous patch removed


author: Neil Horman <nhorman@redhat.com> - 1.101-100
changelog:
  - Update kdump initscript to do FAILED/OK printing to console (bz 211303)
  - remove initial rpm install initramfs build clause in initscript (bz 211350)


author: Neil Horman <nhorman@redhat.com> - 1.101-97
changelog:
  - Fix up initscript to add ability to propagate ssh keys
  - Fix up mkdumprd to indicate need to run service kdump propagate on err
  - Add proper OK/FAIL output to start/stop routines


author: Neil Horman <nhorman@redhat.com> - 1.101-94
changelog:
  - Fixing EFI bug on ia64 (bz 210472)
  - Fixed minor bug in rename_interface script to reset MASTER
  - Fixed vlan device renaming in map_interface
  - Adjusted interfaces file for ifup sensitivity to static spec


author: Neil Horman <nhorman@redhat.com> - 1.101-81
changelog:
  - update mkdumprd to detect missing debuginfo pkg (bz 209342)
  - update mkdumprd to use new mkdumpfile systam (bz 209342)
  - strip makedumpfile to make smaller initramfs
  - fix check with makedumpfile to use supported dump targets
  - write to vmcore-incomplete and move to vmcore (bz 209465)
  - remove ifc cruft from mkdumprd


author: Neil Horman <nhorman@redhat.com> - 1.101-80
changelog:
  - Update makedumpfile to version 1.0.1 with several fixes/updates
  - remove now obsolete kcp utilty from build


author: Neil Horman <nhorman@redhat.com> - 1.101-78
changelog:
  - Removed setquiet from init script (bz 209198)
  - Fixed up docs in kdump.conf (bz 209190)
  - Corrected block device creation logic (bz 209162)
  - Fixed date format (bz 209189)


author: Neil Horman <nhorman@redhat.com> - 1.101-75
changelog:
  - Update mkdumprd to support bonding from initramfs
  - Update mkdumprd to support finding root filesystems by uuid/label


author: Neil Horman <nhorman@redhat.com> - 1.101-66
changelog:
  - remove args-linux from kdump.init standard args (bz 206355)
  - fixup some kdump initscript exit codes (bz 206342)


author: Neil Horman <nhorman@redhat.com> - 1.101-63
changelog:
  - Update mkdumprd to include an /etc/passwd file
  - Update mkdumprd to unmount /mnt before trying to do rootfs mount


author: Neil Horman <nhorman@redhat.com> - 1.101-62
changelog:
  - Update kdump.init to check kdump.status on startup op
  - Update kdump.init to include maxcpus=1 on KDUMP_COMMANDLINE
  - Update kdump.init to rebuild initrd if none found 
  - Update mkdumprd to universally include /bin/cp


author: Neil Horman <nhorman@redhat.com> - 1.101-55
changelog:
  - update mkdumprd to properly handle scp and nfs dumping
  - fix typo in kcp.c
  - update docs in kdump.conf to reflect new ifc parameter


author: Jarod Wilson <jwilson@redhat.com> - 1.101-46
changelog:
  - ppc64 fixups:
    - actually build ppc64 binaries (bug 203407)
    - correct usage output
    - avoid segfault in command-line parsing
  - install kexec man page
  - use regulation Fedora BuildRoot


author: Neil Horman <nhorman@redhat.com> - 1.101-45
changelog:
  - fixed typo in mkdumprd for bz 202983
  - fixed typo in mkdumprd for bz 203053
  - clarified docs in kdump.conf with examples per bz 203015


author: Thomas Graf <tgraf@redhat.com> - 1.101-15
changelog:
  - Don't add kdump service by default, let the user manually add it to
    avoid everyone seeing a warning.


author: Thomas Graf <tgraf@redhat.com> - 1.101-10
changelog:
  - kdump7.patch
     o Remove elf32 core headers support for x86_64
     o Fix x86 prepare elf core header routine
     o Fix ppc64 kexec -p failure for gcc 4.10
     o Fix few warnings for gcc 4.10
     o Add the missing --initrd option for ppc64
     o Fix ppc64 persistent root device bug
  - Remove --elf32-core-headers from default configuration, users
    may re-add it via KEXEC_ARGS.
  - Remove obsolete KEXEC_HEADERS


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-8
changelog:
  - Fix the service stop case.  It was previously unloading the wrong kernel.
  - Implement the "restart" function.
  - Add the "irqpoll" option as a default kdump kernel commandline parameter.
  - Create a default kernel command line in the sysconfig file upon rpm install.


author: Jeff Moyer <jmoyer@redhat.com> - 1.101-4
changelog:
  - Build for x86_64 as well.  Kdump support doesn't work there, but users
    should be able to use kexec.


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-14
changelog:
  - fixed hrSWRunPath of kernel threads (regression caused by bugfix for
    - fixed bind filesystem support in hrStorageTable broken by fix
    for bug #654384


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-13
changelog:
  - fixed xfs filesystem support in hrStorageTable broken by fix
    for bug #654384
  - fixed BER parsing of incoming packets - silently discard the invalid ones
    according to RFC (#704443)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-12
changelog:
  - fixed UCD-SNMP::memory showing zero memory statistics, caused by reworked
    memory indexing in hrFSTable patch (#702626)


author: Jan Safranek <jsafrane@redhat.com> - 5.3.2.2-10
changelog:
  - fixed SNMP GET returning noCreation error instead of unknown OID
    error in ifTable (#587785)
  - fixed rare race condition when reading RPM database (#557758)
  - fixed output of snmptranslate tool when displaying ranges of UNSIGNED
    type (#645303)
  - fixed value of IP-MIB::ipv6InterfaceForwarding (#645317)
  - fixed exit code of SNMP utilities when parsing of command line arguments
    fails (#574035)
  - reworked hrFSTable and hrStorageTable, now the devices keep stable indexes
    across device remounts (#595322)
  - fixed documentation of '-D[token]' option (#613584)
  - fixed value of IP-MIB::ReasmReqds counter (#584807)
  - the logrotate configuration file does not restart full snmpd service now
    (#584769)
  - UCD-SNMP-MIB::dskTable was enhanced with 64 bit statistics of disk usage,
    available and free space (#664523)
  - fixed man page of 'snmpnetstat' - '-Cp' must be used instead of '-CP'
    (#556842)
  - fixed linkUp/DownTraps to contain ifIndex, ifAdminStatus,
    and ifOperStatus as described in the man page (#583807)
  - fixed IF-MIB::ifSpeed of interfaces, that are down (#561882)
  - fixed responding to requests on a multihost machine (#600319)
  - fixed the automated test suite running with udp6 and tcp6 transports
    (#587617)
  - fixed hrStorageTable on big-endian systems (#659354)
  - fixed errors reported by configure script during package recompilation
    (#591416)
  - fixed UDP-MIB::udpTable indexes on big-endian systems (#556824)
  - fixed rare race condintion when populating UCD-SNMP-MIB::prTable,
    which could result in some entries missing in the table (#630905)
  - fixed snmpd spamming log 'error on subcontainer '' insert (-1)' (#554956)
  - fixed snmpd spamming log 'looks like a 64bit wrap, but prev!=new' (#653780)
  - fixed snmptrapd leaking memory when processing traps in embedded perl
    (#676955)
  - fixed ipv6IfTable - new interfaces were not added there (#680347)
  - fixed rare race condition in hrSWRunTable (#683142)
  - fixed proxying of out-of-tree GETNEXT requests (#663863)
  - added 'realStorageUnits' config file option to support large (>16 TB) storage
    devices in hrStorageTable (#654384)
  - fix file descriptor leak in RMON-MIB (#561875)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-8
changelog:
  - fix possible crash when 64-bit counters in ipSystemStatsTable get
    bigger than 2^32 (#514703)
  - fix memory leak in ipNetToPhysicalTable (#515650)
  - fix periodical memory leaks in various MIBs (#518633)
  - create MIB indexes in /var/lib/net-snmp to fix SELinux alerts in applications
    (#523249)
  - fix multilib issues in net-snmp and net-snmp-devel packages (#521820)
  - allow snmpusm to create views with OIDs larger than 255 (#527364)
  - plug memory leak in processing of GETNEXT request on last item in
    mteEventSetTable (#515650)
  - suppress showing of "truncating unsigned value to 32 bits" message in Net-SNMP
    utilities (#528164)
  - fix endless loop in ipDefaultRouterTable when there are more default routes
    with the same destination (#504742)
  - suppress logging of "truncating integer value > 32 bits" in IP-MIB and TCP-MIB
    when the counters overflow 32 bits (#507528)
  - fix responding to broadcast requests (#521175)
  - fix ipNetToPhysicalTable and ipNetToMediaTable with network interfaces with
    long HW address (like InfiniBand) (#543499)
  - fix IP address size in ipCidrRouteTable on 64 bit platforms (#547698)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-6
changelog:
  - fix command line options related to logging (#477768)
  - don't spam log with 'diskio.c: don't know how to handle X request'
    (#474093)
  - add ipAddressSpinLock OID (#479609)
  - fix reloading of trapsink and trap2sink entries on SIGHUP (#468147)
  - fix reporting of IF-MIB::ifSpeed of 10GB/s interfaces (#464061)
  - backport skipNFSInHostResources option (#461631)
  - implement ipNetToPhysicalLastUpdated OID (#477092)
  - implement RMON-MIB::etherStatsJabbers (#468832)
  - fix memory leak in SCTP-MIB (#497280)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.2.2-1
changelog:
  - rebase to net-snmp-5.3.2.2 (#454977)
  - introduce new "dontLogTCPWrappersConnects" config file option
    to reduce logging of incomming connections (#448664)
  - introduce new "v1trapaddress" config file option
    which allows setting agent address inside SNMPv1 traps (#426355)
  - correctly recover when admin starts snmpd or snmptrapd with
    wrong port specifier (#449351)
  - update snmpd.conf man page to emphasize necessity of explicit port
    specification in 'trapsess' option (#436452)
  - net-snmp.rpm requires now the same version and release of net-snmp-libs
    (#434746)
  - 32-bit ifTable counters are now updated (#438151)
  - fix hrProcessorLoad OID (#431439)
  - fix documentation of 'exec' statement - it does not cache results
    (#431519)
  - fix inetNetToMediaTable processing, some entries could be missing
    when ipv6 kernel module is removed (#450076)
  - fix memory leak on UDP transport creation (#454294)
  - add SCTP-MIB implementation (#435110)
  - fix a filedescriptor leak in hrSWRunTable (#458009)
  - allow 16bit ifIndex (#458937)
  - move /etc/snmp/snmpd.options to /etc/sysconfig and add snmptrapd.options
    file (#459054)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-25
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449898)
  - fix SNMPv3 authentication checks (unknown CVE) (#449898)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-23
changelog:
  - add ipIfStatsTable to build
  - make ipv6ScopeZoneIndexTable loading quiet (#433446)
  - make ipAddressPrefixTable loading quiet (#253399 related)
  - fix inetToMediaTable to recover from error when ipv6 kernel module is 
    not present (#431977)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-20
changelog:
  - fix snmpwalk / bulkwalk on TCP scalars (#248342)
  - fix bulkwalk security flaw (#366631)
  - interface names can be longer than 8 characters (#357121)
  - aliased interfaces have correct netmask and broadcast addresses
    (#357121)
  - fix icmpStatsTable (#256041)
  - fix race condition when reading /proc/*/cmdline (#311261)
  - fix hostname logging of snmptrapd (#270941)
  - fix race condition when reading process status (#252216)
  - fix TCP support (#251332)
  - fix reading of agentsecname and iquerysecname from config file
    (#338981, #311761)
  - fix disk statistics of mount points with spaces (#348681)
  - store temporary files to /var/run/snmpd to prevent
    users to modify them and to make selinux happy (#401211)
  - print more meaningful message when interface changes its ifIndex
    (#396141)
  - fix hrDeviceStatus and hrDeviceErrors missing during walk
    (#419511)
  - correctly cut values to 32bits in UCD-DISKIO-MIB, preventing
    "truncating integer value > 32 bits" to appear (#386821)


author: Jan Safranek <jsafranek@redhat.com> - 5.3.1-15
changelog:
  - fix sending SNMPv1 traps on v2 connections (#236933)
  - fix ugly error messages when more interfaces share one IP addr.
    (#223236)
  - build with rpm-devel to support HOST-RESOURCES-MIB::hrSWInstalled
    (#232870)
  - store pid in /var/run/snmpd.pid (240470)
  - fix wrong sprintf in path generation (#240609)
  - fix too verbose snmpassert (#239083)
  - fix perl bulkwalk (#238145)
  - extend ipv6 support of some MIBs (#242483)


author: Radek Vokal <rvokal@redhat.com> 5.3.1.0-5
changelog:
  - SMUX support is still needed .. will disappear later!
  - static libs should be in devel not libs (#203571)
  - fix lm_sensors issues


author: Radek Vokal <rvokal@redhat.com> 5.3.1.pre2-1
changelog:
  - update to 5.3.1.pre2
  - fix multilib issues (#192736)
    On system with /usr/lib64 use net-snmp-config64 and net-snmp-config64.h


author: Radek Vokál <rvokal@redhat.com> 5.3-7
changelog:
  - fix parsing of /proc/diskstats
  - fix disman monitor crash
  - fix perl vendor name
  - fix OID lookup fail


author: Radek Vokal <rvokal@redhat.com> 5.3-2
changelog:
  -  Security fix. Bug granting write access to read-only users 
     or communities which were configured  using the "rocommunity" 
     or "rouser" snmpd.conf tokens fixed


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-4
changelog:
  - check for header files in configure
  - patch for SNMPv3 traps / session user creation (net-snmp bz#1374087)


author: Radek Vokal <rvokal@redhat.com> - 5.2.2-0.rc6.1
changelog:
  - update to rc6, snmpnetstat changes due to license problems
  - persistent files in directory defined by snmp.conf persistentDir are 
    loaded at startup


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-12
changelog:
  - session free fixed, agentx modules build fine (#157851)
  - fixed dependency for net-snmp libs (#156932)


author: Radek Vokal <rvokal@redhat.com> - 5.2.1-5
changelog:
  - 64bit needed some changes, was causing timeouts on 64bit archs!? 
  - affects bugs #125432 and #132058


author: Radek Vokal <rvokal@redhat.com> - 5.1.2-3
changelog:
  - patch from CVS - kill extra carriage return (#144917)
  - removed patch for interface indexing - doesn't show virtual interfaces


author: Radek Vokal <rvokal@redhat.com> 5.1.2-12
changelog:
  - snmpd crash with 'interfaces' directives in snmpd.conf fixed #139010
  - rather dirty patch fixing conf directory for net-snmp-config


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Nalin Dahyabhai <nalin@redhat.com> 0.42-1.2
changelog:
  - incorporate patch from Rob Crittenden to start supplying Referer:
    headers when we submit XML-RPC requests (#767573)


author: Alexander Larsson <alexl@redhat.com> - 0.8-7
changelog:
  - Update macbook patch to be closer to what got in upstream
  - (kp enter is ralt, not the option key)


author: Matthias Clasen <mclasen@redhat.com> 0.8-4
changelog:
  - Fix geometry description for Thinkpads
  - Add a Kinesis model
  - Add Dell Precision M65 geometry and model


author: Mike A. Harris <mharris@redhat.com> 0.8-1
changelog:
  - Renamed package from 'xorg-x11-xkbdata' to 'xkeyboard-config' to match the
    upstream project name and tarball.  I kept the rpm changelog intact however
    to preserve history, so all entries older than today, are from the
    prior 'xorg-x11-xkbdata' package.  (#196229,197939)
  - Added "Obsoletes: xorg-x11-xkbdata"
  - Removed 'pre' script from spec file, as that was a temporary hack to help
    transition from modular X.Org xkbdata to modular xkeyboard-config during
    FC5 development.  The issue it resolved is not present in any officially
    released distribution release or updates, so the hack is no longer needed.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-8.xkbc0.8.0
changelog:
  - Embed xkeyboard-config version in Release field so we can tell from the
    filename what is really in this package without having to look in the
    spec file.  We should rename the package to xkeyboard-config and restart
    the versioning.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-5
changelog:
  - Fixed rpm pre script upgrade/install testing
  - Rebuild package as 1.0.1-5 in rawhide, completing the transition to
    xkeyboard-config.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-4.0.7.xkbcfg.5
changelog:
  - Added rpm pre script, to pre-remove the symbols/pc during package upgrades,
    to avoid an rpm cpio error if the X11R7.0 modular xkbdata package is already
    installed, because rpm can not replace a directory with a file.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-4.0.7.xkbcfg.1
changelog:
  - Package renamed to xorg-x11-xkbdata and version/release tweaked since it
    is too late to add new package names to Fedora Core 5 development.
  - Added "Provides: xkeyboard-config" virtual provide.


author: Mike A. Harris <mharris@redhat.com> 1.0.1-3
changelog:
  - Added xkbdata-1.0.1-greek-fix-bug181313.patch to fix (#181313,181313)
  - Added xkbdata-1.0.1-cz-fix-bug177362.patch to fix (#177362,178892)


author: Mike A. Harris <mharris@redhat.com> 0.99.1-2
changelog:
  - Add a few missing rpm 'dir' directives to file manifest.
  - Bump release, and build as a 'noarch' package.


author: Jakub Hrozek <jhrozek@redhat.com> - 253-42.2
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#743193)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-42.1
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#743193)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-38
changelog:
  - add a build-time requirement on a sufficiently-new openssl-devel to ensure
    that we get SHA-2 hashes when we're using TLS, because we still static-link
    the nss_ldap module (#683349)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-34
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #511238)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
  - fix an uninitialized variable error (Mark Goodwin, part of #511238)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-32
changelog:
  - add revised testing patch to postpone the connection drop in a newly-forked
    child until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-31
changelog:
  - add testing patch to postpone the connection drop in a newly-forked child
    until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-30
changelog:
  - report the remaining life of soon-to-be-expired passwords with granularity
    in hours, if possible (Masahiro Matsuya, #537358)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-27
changelog:
  - pull in backported fix for upstream #378, which returns NETDB_INTERNAL in
    h_errno in cases when nss_ldap's run out of space in the supplied buffer and
    libc provided us with an h_errno variable to set for it to also check
    (Jason Luo, #468807)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-26
changelog:
  - pull in fix for upstream #313, which returns a clean error when we've
    failed to parse our configuration correctly, in this case due either to a
    larger-than-handled nss_initgroups_ignoreusers setting (#584157) or the
    lack of any servers being configured (#538498)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
    we assume means that it's in /lib)


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Vojtech Vitek <vvitek@redhat.com> - 3.0.6-3
changelog:
  - Add upstream patch to fix CVE-2011-1097 - Incremental file-list
    corruption due to temporary file_extra_cnt increments
    Resolves: #688923


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-2
changelog:
  - Remove BuildRequires dependency on popt-devel, until the package
    is being shipped with RHEL-5 (resolve build issues)


author: Vojtech Vitek (V-Teq) <vvitek@redhat.com> - 3.0.6-1
changelog:
  - Rebase to upstream version 3.0.6
    Resolves: #339971, #471182, #575022, #616093
  - Make "-d, --dirs options" behaviour backward-compatible with 2.6.8
    Resolves: #339971 (comment #5)
  - Truncate a copied sparse file at the end of transaction (-S, --sparse option)
    Resolves: #530866
  - Add -fno-strict-aliasing to CFLAGS
  - Remove obsolete rsync-2.6.8-xattr_bug.patch
  - Switch license to GPLv3+ (upstream change beginning with 3.0.0)


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-3
changelog:
  - Add my xattrs_bug patch to fix a bug where xattrs don't get sent correctly.
  - Add BuildRequires to make sure libattr-devel and libacl-devel are avaliable
  - replace --with... with --enable... so they actually work
  - Add make, autoconf and gcc to BuildRequires


author: Jay Fenlason <fenlason@redhat.com> 2.6.8-2
changelog:
  - New upstream release
  - Use the upstream xattr patch instead of mine.  This closes
    bz#190208 CVE-2006-2083 rsync buffer overflow issue


author: Jay Fenlason <fenlason@redhat.com> 2.6.4-3
changelog:
  - Include the -address patch from upstream, to close
    bz#154752 Unable to use --address in client mode


author: Jay Fenlason <fenlason@redhat.com> 2.6.3-0.pre1
changelog:
  - New upstream version with security fix for CAN-2004-0792
  - This obsoletes the -lastdir-corruption patch.


author: Jay Fenlason <fenlason@redhat.com> 2.6.2-0
changelog:
  - New upstream version to correct the problems with 2.6.1.
    This obsoletes all the patches to 2.6.1


author: Jay Fenlason <fenlason@redhat.com> 2.6.1-1
changelog:
  - Rsync 2.6.1 final.
  - Add a patch from Wayne Davison <wayned@samba.org> that fixes a
    use of uninitilized memory in the map_uid and map_gid functions.
  - Add another patch from Wayne Davidson that fixes the -R option.
  - Add a patch (extracted from a patch by Sami Farin
    <safari-rsync@safari.iki.fi>) to not ignore the return value
    of close().


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-15
changelog:
  - add rsync-2.5.6-signal.patch to fix kernel warnings that
    appear because socket.c sets SIGCHLD to SIG_IGN and then
    calls wait.  This is in response to bug#98740.  This patch
    *has* been committed to CVS upstream and will be in
    upstream rsync-2.5.7.


author: Hardy Merrill <hmerrill@redhat.com> 2.5.6-6
changelog:
  - removed patch rsync-2.5.4-maxdel.patch
  - removed patch rsync-2.4.6-segv.patch
     - current 2.5.6 properly handles (no segfault) the situation
       (rsync '[a]') that caused a need for this patch.
  - added patch rsync-2.5.6-sign.patch, which is a working
    subset of patches (that still apply) included in the original
    rsync-2.5.4-moresignage.patch


author: Bill Nottingham <notting@redhat.com> 2.5.4-2
changelog:
  - upstream patches: fix accidental use of --whole-file, fix
    minor memory leak, and bad worst-case child kill behavior
  - make passing -e to rsync:// URLs not cause an error exit (#62489)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some signed/unsigned issues (<krahmer@suse.de>)
  - tweak ipv6 patch (#55337, <john.l.villalovos@intel.com>)
  - make xinetd file %config(noreplace)


author: John A. Martin <jam@jamux.com>
changelog:
  - Built 1.6.3-2 after finding no rsync-1.6.3-1.src.rpm although there
    was an ftp://ftp.redhat.com/pub/contrib/alpha/rsync-1.6.3-1.alpha.rpm
    showing no packager nor signature but giving 
    "Source RPM: rsync-1.6.3-1.src.rpm".
  - Changes from 1.6.2-1 packaging: added '$RPM_OPT_FLAGS' to make, strip
    to '%build
  LANG=C
  export LANG
  unset DISPLAY
  ', removed '%prefix'.


author: Denys Vlasenko <dvlasenk@redhat.com> - 1:1.2.0-8
changelog:
  - Resolves: #678701
    kdump fails with "out of string space" error then panics
    (a shell memory leak problem)


author: Ivana Varekova <varekova@redhat.com> - 1:1.2.0-5
changelog:
  - Resolves: #440623
    there should be .el5.centos instead of .el5.centos
  - Resolves: #385661
    'diff -q' command returns wrong status
  - Resolves: #466896
    fix rpm applet
  - Resolves: #480105
    fix uname applet


author: Ivana Varekova <varekova@redhat.com> - 1:1.1.1-1
changelog:
  - update to 1.1.1
  - fix CVE-2006-1058 - BusyBox passwd command 
    fails to generate password with salt (#187386)
  - add -minimal-toc option
  - add RPM_OPT_FLAGS
  - remove asm/page.h used sysconf command to get PAGE_SIZE
  - add overfl patch to aviod Buffer warning


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - update to 0.60.2
  - include more pieces for the anaconda version so that collage can go away
  - make the mount in busybox.anaconda default to -onolock


author: Joe Orton <jorton@redhat.com> 5.0-0.rc4.3
changelog:
  - support mutual authentication (Nalin Dahyabhai)
  - once authentication returns COMPLETE, cache name for the duration
    of the connection


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn.12
changelog:
  - Add clone support patch that was ported by Martin Osvald
  - Rebase upstream patchset for tracing multi-threaded processes
  - Rebase upstream attach/detach fixes
  - Fix syscall detection
  - Rebase upstream patches for tracing across vfork
  - Add RHEL-6 patch for SIGTRAP masked as SIGILL
  - Resolves: #733216


author: Petr Machata <pmachata@redhat.com> - 0.5-13.45svn
changelog:
  - fix tracing of fork of 64-bit binaries with 64-bit ltrace on ppc
  - improve earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-12.45svn
changelog:
  - support tracing of 31-bit binaries with 64-bit ltrace on s390
  - remove bogus "wrong pid" message from earlychild patch
  - Resolves: #265941


author: Petr Machata <pmachata@redhat.com> - 0.5-11.45svn
changelog:
  - patch from Supriya Kannery implements fetching 5th and further
    function arguments on s390
  - fix testsuite for interaction of -c and -o
  - added fork/exec patches, mostly IBM's work
  - added trace-exec tests into suite
  - fix handling of the case where forked child is reported before
    parent's fork event
  - Resolves: #265941
  - Resolves: #426352
  - Resolves: #485779


author: Petr Machata <pmachata@redhat.com> - 0.5-5.45svn
changelog:
  - fix plt handling on ppc32 (symval patch)
  - fix attaching to process (attach patch)
  - add fork & exec patches from IBM
  - adjust weak symbol handling (ppc32fc5 patch)


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn.5
changelog:
  - adding .gnu.hash patch to support new ELF hash table section
  - adding testsuite patch to silent some bogus failures


author: Petr Machata <pmachata@redhat.com> - 0.5-1.0.45svn
changelog:
  - adding upstream (svn) version.  It contains most of patches that we
    already use, and has support for secure PLTs.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.6
changelog:
  - e_entry patch: use elf's e_entry field instead of looking up _start
    symbol, which failed on stripped binaries.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.4
changelog:
  - turn off opd translation on ia64, GElf already gives us function
    address.
  - turn on main-internal test, it should pass now.


author: Petr Machata <pmachata@redhat.com> - 0.4-1.2
changelog:
  - svn fix for opt_x patch
  - patches for testsuite for s390{,x}
  - turning off main-internal test. Fails on ia64, needs investigation.


author: Petr Machata <pmachata@redhat.com> - 0.4-1
changelog:
  - Upstream 0.4
  - opt_x patch: New structure for opt_x list elements, now with
    'found'.  Using it in options.c, elf.c.
  - testsuite patch: Automated testsuite for ltrace.


author: Jakub Jelinek <jakub@redhat.com> 0.3.36-2
changelog:
  - make x86_64 ltrace trace both 32-bit and 64-bit binaries (#141955,
    IT#55600)
  - fix tracing across execve
  - fix printf-style format handling on 64-bit arches


author: Jakub Jelinek <jakub@redhat.com> 0.3.32-1
changelog:
  - update to 0.3.32
    - fix dict.c assertion (#114359)
    - x86_64 support
  - rewrite elf.[ch] using libelf
  - don't rely on st_value of SHN_UNDEF symbols in binaries,
    instead walk .rel{,a}.plt and compute the addresses (#115299)
  - fix x86-64 support
  - some ltrace.conf additions
  - some format string printing fixes


author: Matt Wilson <msw@redhat.com>
changelog:
  - rebuilt for next release
  - patched Makefile.in to take a hint on mandir (patch2)
  - use %{_mandir} and %makeinstall


author: Michal Hlavinka <mhlavink@redhat.com> - 1.4.8-5.11
changelog:
  - fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in 
    Mail Fetch plugin
  - fix: CVE-2010-2813 : DoS (disk space consumption) by random IMAP login 
    attempts with 8-bit characters in the password
  - fix: CVE-2010-4554 : Prone to clickjacking attacks
  - fix: CVE-2010-4555 : Multiple XSS flaws
  - fix: CVE-2011-2023 : XSS in <style> tag handling
  - fix: CVE-2011-2752 : CRLF injection vulnerability
  - fix: CVE-2011-2753 : CSRF in the empty trash feature and in Index Order page


author: Michal Hlavinka <mhlavink@redhat.com> - 1.4.8-5.4
changelog:
  - fix: CVE-2009-1581 : CSS positioning vulnerability
  - fix: CVE-2009-1579 : Server-side code injection in map_yp_alias username map
  - fix: CVE-2009-1578 : Multiple cross site scripting issues


author: Michal Hlavinka <mhlavink@redhat.com> - 1.4.8-5.1
changelog:
  - don't transmit cookies under non-SSL connections if the session
    is started under an SSL (https) connection
  - Resolves: CVE-2008-3663, #468398
  - fix release number with respect to Z-stream nvr policy


author: Warren Togami <wtogami@redhat.com> 1.4.7-1
changelog:
  - 1.4.7 with CVE-2006-3174
  - Reduce patch for body text (#194457)
  - Better JP translation for "Check mail" (#196117)


author: Warren Togami <wtogami@redhat.com> 1.4.6-8
changelog:
  - Japanese zenkaku subject conversion      (#196017)
  - Japanese MSIE garbled download ugly hack (#195639)
  - Japanese multibyte attachment view text  (#195452)
  - Japanese multibyte attachment body text  (#194457)
  - Do not convert Japanese Help to UTF-8    (#194599)


author: David Woodhouse <dwmw2@redhat.com> 1.4.6-1
changelog:
  - Upgrade to 1.4.6 proper for CVE-2006-0377 CVE-2006-0195 CVE-2006-0188
  - Script the charset changes instead of using a patch
  - Convert the ko_KR files to UTF-8, dropping invalid characters from
    what's theoretically supposed to be EUC-KR in the original.


author: David Woodhouse <dwmw2@redhat.com> 1.4.6-0.cvs20050812.2
changelog:
  - Convert all locales to UTF-8 instead of legacy character sets to
    work around bug #162852. Except for ko_KR, because iconv doesn't
    believe its help files are actually in EUC-KR as claimed.


author: Warren Togami <wtogami@redhat.com> 1.4.6-0.cvs20050812.1
changelog:
  - snapshot of 1.4.6 because 1.4.5 upstream was a bad release
    this hopefully will also work on PHP5 too...


author: Warren Togami <wtogami@redhat.com> 1.4.4-2
changelog:
  - 1.4.4
  - re-include translations and Provide squirrelmail-i18n
    better compatible with upstream, but we cannot split sub-package
    due to support of existing distributions
  - remove unnecessary .po files


author: Warren Togami <wtogami@redhat.com> 1.4.3a-5
changelog:
  - default_folder_prefix dovecot compatible by default
    /etc/squirrelmail/config_local.php if you must change it


author: Warren Togami <wtogami@redhat.com> 1.4.3a-4
changelog:
  - HIGASHIYAMA Masato's patch to improve Japanese support
    (coordinated by Scott A. Hughes).
  - real 1.4.3a tarball


author: Warren Togami <wtogami@redhat.com> 1.4.3-2
changelog:
  - #125638 config_local.php and default_pref in /etc/squirrelmail/
    to match upstream RPM.  This should allow smoother drop-in
    replacements and upgrades.
  - other spec cleanup.


author: Gary Benson <gbenson@redhat.com> 1.2.10-4
changelog:
  - fix syntax error in download.php (#82600).
  - resized splash screen to be the same size as the one it replaces
    (#82790)
  - remove piece of squirrelmail-1.2.10-xss.patch that changed the
    version from '1.2.10' to '1.2.11 [cvs]'


author: Gary Benson <gbenson@redhat.com> 1.2.7-3
changelog:
  - get rid of long lines in the specfile.
  - remove symlink in docroot and use an alias in conf.d instead.
  - work with register_globals off (#68669)


author: Gary Benson <gbenson@redhat.com> 1.2.7-1
changelog:
  - hardwire the locations into the config file and cron file.
  - install squirrelmail-cleanup.cron as squirrelmail.cron.
  - make symlinks relative.
  - upgrade to 1.2.7.
  - more dependency fixes.


author: Gary Benson <gbenson@redhat.com>
changelog:
  - summarize the summary, fix deps, and remove some redundant stuff.
  - tidy up the prep section.
  - replace directory definitions with standard RHL ones.


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-4
changelog:
  - Added support for using PSK with NSS (rhbz 507844)
  - Fixed several warnings and undid unnecessary comments
  - Updated README.nss with an example configuration
  - Fixed Openswan ASN.1 parser vulnerability (CVE-2009-2185)
  Resolves: CVE-2009-2185
  Resolves: #507844


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-3
changelog:
  - Revised patch to support fips integrity check functionality
  Resolves: #469763 FIPS-140: Add integrity checking


author: Avesh Agarwal <avagarwa@redhat.com> - 2.6.21-1
changelog:
  - Upstream release
  - Major patches for support of NSS and fipscheck libraries
  Resolves: #444801 FIPS-140-2: Meet certification requirements for pluto
  Resolves: #469763 FIPS-140: Add integrity checking
  Resolves: #438998 Openswan's 'cannot route...' problem
  Resolves: #449725 Openswan seg fault using manual keying.
  Resolves: #463931 /etc/ipsec.conf includes /etc/ipsec.d/*.conf which is missing
  Resolves: #466861 avc: denied { write } for pid=2193 comm="ip" path="/var/run/pluto/ipsec_setup.out"
  Resolves: #487708 Misleading package description


author: Steve Grubb <sgrubb@redhat.com> - 2.6.14rc7-1
changelog:
  - new upstream release
  Resolves: #439771 openswan and strongswan fail to interoperate with IKEv2
  Resolves: #441383 openswan should negotiate CCM algorithm
  Resolves: #442955 openswan doesn't accept null esp auth alg
  Resolves: #442956 openswan logging segfault when phase2alg=null
  Resolves: #444166 openswan IKEv2 crashes when interoperating with racoon2


author: Steve Grubb <sgrubb@redhat.com> - 2.6.12-1
changelog:
  - new upstream release
  Resolves: #432821 left/rightsourceip tags not working
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024
  Resolves: #441588 openswan IKEv2 crashes when interoperating with racoon2
  Resolves: #442333 AVC denials on start of openswan host-to-host tunnel


author: Steve Grubb <sgrubb@redhat.com> - 2.6.11-1
changelog:
  - new upstream release
  Resolves: #438826 openswan IKEv2 hangs between intel and ppc64 machines
  Resolves: #439985 opeswan IKEv2 responder fails when encr=aes and dh=modp1024


author: Steve Conklin <sconklin@redhat.com> - 2.6.09-1
changelog:
  Resolves: rhbz#432315
  Resolves: rhbz#432805
  Resolves: rhbz#432821
  - Moved to latest upstream
  - removed init script patch and will use upstream
  - Added protostack=netkey to ipsec.conf
  - New patch to include definition of HOST_NAME_MAX


author: Steve Conklin <sconklin@redhat.com> - 2.6.05-1
changelog:
  - Latest upstream
  - remove selinux test and message from verify script
  - forgot the following bz earlier
  Resolves: rhbz#253052 Request for IPSec IKEv2


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-9
changelog:
  - cleanup some init problems
  Resolves: rhbz#430149 openswan init script errors
  Resolves: rhbz#430150 openswan emits spurious warnings


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-8
changelog:
  Related: rhbz#235224
  - rpmdiff spotted these:
  - Cleaned out unused man page
  - patch error in barf script


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-6
changelog:
  - Moved everything else out of /usr/lib
  - Added tmraz's patch to remove extra slashes in makefile
  - Removed macros from changelog entries


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-4
changelog:
  - Removed use of xmlto and the BuildRequires
  - moved scripts from /usr/lib to /usr/libexec
  - removed man3 pages for libopenswan functions (we don't deliver)


author: Steve Conklin <sconklin@redhat.com> - 2.6.03-3
changelog:
  - Removed _smp_mflags macro from from the spec file build section
  - Added BuildRequires for xmlto
  - Changed License from GPL to GPL+
  - removed klips ifdefs from spec file
  - Added patch to move example configs to doc dir
  - Added a patch to make the link to init script relative, 
    for chroot environments


author: Harald Hoyer <harald@redhat.com> - 2.4.4-1.1
changelog:
  - version 2.4.4
  - fixes NISCC Vulnerability Advisory 273756/NISCC/ISAKMP
  - fixes NISCC Advisory 3756/NISCC/ISAKMP


author: Harald Hoyer <harald@redhat.com> - 2.3.1-3
changelog:
  - added openswan-2.3.1-nat_t_aggr.patch
  - added openswan-2.3.1-iproute2.patch
  - added openswan-2.3.1-cisco.patch
  - NAT-T/XAUTH/AGGR-MODE is now possible with a Cisco VPN 3000


author: Harald Hoyer <harald@redhat.com> - 2.3.0-1
changelog:
  - version 2.3.0
  - reimported specfile
  - PIEd openswan
  - cleaned up initial config files and added include directives
    for easy config drop in


author: Harald Hoyer <harald@redhat.com> - 2.1.5-1
changelog:
  - added selinux patch from Daniel Walsh
  - initscript now uses translated strings
  - version 2.1.5 with minor fixes


author: Bill Nottingham <notting@redhat.com> - 2.1.4-6
changelog:
  - don't run by default
  - don't create/chmod directories in %post, just include them with the
    right perms
  - fix debuginfo
  - fix docs


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib64/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib64 (which
    we assume means that it's in /lib64)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-7
changelog:
  - permissions of deliver and dovecot.conf from 1.0.7-5 reverted
  - password can be stored in different file readable only for root now
  - Resolves: #436287, CVE-2008-4870


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.7-5
changelog:
  - change permissions of deliver and dovecot.conf to prevent possible password exposure
  - Resolves: #436287


author: Dan Horak <dhorak@redhat.com> - 1.0.7-3
changelog:
  - fix package ownership for /etc/pki/dovecot/private (#448089)
  - update init script (#238016)
  - ask for SSL cert password during start-up (#436287)
  - fix for illegal characters in passwd (#439369)
  - Resolves: #448089, #238016, #436287, #439369


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-2
changelog:
  - LDAP+auth cache user login mixup (CVE-2007-6598, #427575)
  - insecure mail_extra_groups option (CVE-2008-1199, #436927)


author: Tomas Janousek <tjanouse@redhat.com> - 1.0.7-1
changelog:
  - update to latest upstream, fixes a few bugs (#331441, #245249), plus two
    security vulnerabilities (CVE-2007-2231, CVE-2007-4211)
  - increased default login_process_size to 64 (#253363)


author: Petr Rockai <prockai@redhat.com> - 1.0-1.rc15
changelog:
  - update to latest upstream, fixes a few bugs, plus a security
    vulnerability (#216510, CVE-2006-5973)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc7
changelog:
  - update to latest upstream release candidate, should fix occasional
    hangs and mbox issues... INBOX. namespace is still broken though
  - do not run over symlinked certificates in new locations on upgrade


author: Petr Rockai <prockai@redhat.com> - 1.0-0.rc2
changelog:
  - update to latest upstream release candidate
  - disable inotify for now, doesn't build -- this needs fixing though


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta8.2
changelog:
  - put back pop3_uidl_format default that got lost
    in the beta2->beta7 upgrade (would cause pop3 to not work
    at all in many situations)


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.5
changelog:
  - fix #182240 by looking in lib64 for libs first and then lib
  - fix comment #1 in #182240 by copying over the example config files
    to documentation directory


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2.3
changelog:
  - change the compiled-in defaults and adjust the default's configfile
    commented-out example settings to match compiled-in defaults,
    instead of changing the defaults only in the configfile, as per #179432
  - fix #179574 by providing a default uidl_format for pop3
  - half-fix #179620 by having plaintext auth enabled by default... this
    needs more thinking (which one we really want) and documentation
    either way


author: Petr Rockai <prockai@redhat.com> - 1.0-0.beta2
changelog:
  - new upstream version, hopefully fixes #173928, #163550
  - fix #168866, use install -p to install documentation


author: John Dennis <jdennis@redhat.com> - 0.99.14-1.fc4
changelog:
  - fix bug #147874, update to 0.99.14 release
    v0.99.14 2005-02-11  Timo Sirainen <tss at iki.fi>
    - Message address fields are now parsed differently, fixing some
      issues with spaces. Affects only clients which use FETCH ENVELOPE
      command.
    - Message MIME parser was somewhat broken with missing MIME boundaries
    - mbox: Don't allow X-UID headers in mails to override the UIDs we
      would otherwise set. Too large values can break some clients and
      cause other trouble.
    - passwd-file userdb wasn't working
    - PAM crashed with 64bit systems
    - non-SSL inetd startup wasn't working
    - If UID FETCH notices and skips an expunged message, don't return
      a NO reply. It's not needed and only makes clients give error
      messages.


author: John Dennis <jdennis@redhat.com> 0.99.13-3.devel
changelog:
  - fix bug #145214, force mbox_locks to fcntl only
  - fix bug #145241, remove prereq on postgres and mysql, allow rpm auto
    dependency generator to pick up client lib dependency if needed.


author: John Dennis <jdennis@redhat.com> 0.99.13-2.devel
changelog:
  - make postgres & mysql conditional build
  - remove execute bit on migration example scripts so rpm does not pull
    in additional dependences on perl and perl modules that are not present
    in dovecot proper.
  - add REDHAT-FAQ.txt to doc directory


author: John Dennis <jdennis@redhat.com> 0.99.13-1.devel
changelog:
  - bring up to date with latest upstream, 0.99.13, bug #143707
    also fix bug #14462, bad dovecot-uid macro name


author: John Dennis <jdennis@redhat.com> 0.99.11-8.devel
changelog:
  - fix bug #129539, dovecot starts too early,
    set chkconfig to 65 35 to match cyrus-imapd
  - also delete some old commented out code from SSL certificate creation


author: John Dennis <jdennis@redhat.com> 0.99.11-7.devel
changelog:
  - add UW to Dovecot migration documentation and scripts, bug #139954
    fix SSL documentation and scripts, add missing documentation, bug #139276


author: John Dennis <jdennis@redhat.com> 0.99.11-1.FC3.1
changelog:
  - bring up to latest upstream,
    comments from Timo Sirainen <tss at iki.fi> on release v0.99.11 2004-09-04  
    + 127.* and ::1 IP addresses are treated as secured with
      disable_plaintext_auth = yes
    + auth_debug setting for extra authentication debugging
    + Some documentation and error message updates
    + Create PID file in /var/run/dovecot/master.pid
    + home setting is now optional in static userdb
    + Added mail setting to static userdb
    - After APPENDing to selected mailbox Dovecot didn't always notice the
      new mail immediately which broke some clients
    - THREAD and SORT commands crashed with some mails
    - If APPENDed mail ended with CR character, Dovecot aborted the saving
    - Output streams sometimes sent data duplicated and lost part of it.
      This could have caused various strange problems, but looks like in
      practise it rarely caused real problems.


author: John Dennis <jdennis@redhat.com> 0.99.10.9-1,FC3,1
changelog:
  - bring up to date with latest upstream, fixes include:
  - LDAP support compiles now with Solaris LDAP library
  - IMAP BODY and BODYSTRUCTURE replies were wrong for MIME parts which
    didn't contain Content-Type header.
  - MySQL and PostgreSQL auth didn't reconnect if connection was lost
    to SQL server
  - Linking fixes for dovecot-auth with some systems
  - Last fix for disconnecting client when downloading mail longer than
    30 seconds actually made it never disconnect client. Now it works
    properly: disconnect when client hasn't read _any_ data for 30
    seconds.
  - MySQL compiling got broken in last release
  - More PostgreSQL reconnection fixing


author: John Dennis <jdennis@redhat.com> 0.99.10.7-1,FC3,1
changelog:
  - enable postgres and mySQL in build
  - fix configure to look for mysql in alternate locations
  - nuke configure script in tar file, recreate from configure.in using autoconf

  - bring up to latest upstream, which included:
  - Added outlook-pop3-no-nuls workaround to fix Outlook hang in mails with NULs.
  - Config file lines can now contain quoted strings ("value ")
  - If client didn't finish downloading a single mail in 30 seconds,
    Dovecot closed the connection. This was supposed to work so that
    if client hasn't read data at all in 30 seconds, it's disconnected.
  - Maildir: LIST now doesn't skip symlinks


author: John Dennis <jdennis@redhat.com> - 0.99.10.6-1
changelog:
  - bring up to date with upstream,
    recent change log comments from Timo Sirainen were:
    SHA1 password support using OpenSSL crypto library
    mail_extra_groups setting
    maildir_stat_dirs setting
    Added NAMESPACE capability and command
    Autocreate missing maildirs (instead of crashing)
    Fixed occational crash in maildir synchronization
    Fixed occational assertion crash in ioloop.c
    Fixed FreeBSD compiling issue
    Fixed issues with 64bit Solaris binary


author: Warren Togami <wtogami@redhat.com> 0.99.10.4-4
changelog:
  - default auth config that is actually usable
  - Timo Sirainen (author) suggested functionality fixes
    maildir, imap-fetch-body-section, customflags-fix


author: Jeremy Katz <katzj@redhat.com> 0.99.10-7
changelog:
  - another patch from upstream to fix returning invalid data on partial 
    BODY[part] fetches
  - patch to avoid confusion of draft/deleted in indexes


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.2
changelog:
  - 0.99.10-rc2 (includes ssl detection fix)
  - a few tweaks from fedora
    - noreplace the config file
    - configure --with-ldap to get LDAP enabled


author: Jeremy Katz <katzj@redhat.com> 0.99.10-0.1
changelog:
  - 0.99.10-rc1
  - add fix for ssl detection
  - add zlib-devel to BuildRequires
  - change pam service name to dovecot
  - include pam config


author: Jeremy Katz <katzj@redhat.com> 0.99.9.1-1
changelog:
  - update to 0.99.9.1
  - add patch from upstream to fix potential bug when fetching with 
    CR+LF linefeeds
  - tweak some things in the initscript and config file noticed by the 
    fedora folks


author: Jeremy Katz <katzj@redhat.com> 0.99.8-1
changelog:
  - 0.99.8
  - add some buildrequires
  - fixup to build with openssl 0.9.7
  - now includes a pop3 daemon (off by default)
  - clean up description and %preun
  - add dovecot user (uid/gid of 97)
  - add some buildrequires
  - move the ssl cert to /usr/share/ssl/certs
  - create a dummy ssl cert in %post
  - own /var/run/dovecot
  - make the config file a source so we get default mbox locks of fcntl


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-21
changelog:
  - rgmanager: Fix bad passing of SFL_FAILURE up
    (fix_bad_passing_of_sfl_failure_up.patch)
    Resolves: rhbz#711521


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-20
changelog:
  - resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
    Resolves: rhbz#710637


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-19
changelog:
  - Fix changelog format
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#692771


author: Marek Grac <mgrac@redhat.com> - 2.0.52-18
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Fix_pid_files.patch)
    Resolves: rhbz#663827


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-16
changelog:
  - rgmanager: Allow non-root clustat
    (allow_non_root_clustat.patch)
    Resolves: rhbz#510300
  - rgmanager: Initial commit of central proc + migration support
    (central_proc_+_migration_support.patch)
    Resolves: rhbz#525271
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#592613
  - resource-agents: Trim trailing slash for nfs clients
    (trim_trailing_slash_for_nfs_clients.patch)
    Resolves: rhbz#592624
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#610483
  - rgmanager: Pause during exit if we stopped services
    (pause_during_exit_if_we_stopped_services.patch)
    Resolves: rhbz#619468
  - rgmanager: Fix quotaoff handling
    (fix_quotaoff_handling.patch)
    Resolves: rhbz#637678
  - resource-agents: Try force-unmount before fuser for netfs.sh
    (try_force_unmount_before_fuser_for_netfs_sh.patch)
    Resolves: rhbz#678494
  - rgmanager: Improve rgmanager's exclusive prioritization handling
    (improve_rgmanager_s_exclusive_prioritization_handling.patch)
    Resolves: rhbz#680256


author: Marek Grac <mgrac@redhat.com> - 2.0.52-15
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Do-not-send-TERM-signal-when-killing-post.patch)
    (postgres-8-Improve-testing-if-postgres-started-succe.patch)
    Resolves: rhbz#663827


author: Marek Grac <mgrac@redhat.com> - 2.0.52-14
changelog:
  - resource-agents: Fix problems when generating XML configuration file
    (rgmanager-Fix-problems-in-generated-XML-config-file.patch)
    Resolves: rhbz#637802


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-13
changelog:
  - resource-agents: Use literal quotes for tr calls
    (resource_agents_use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#637154


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-12
changelog:
  - resource-agents: Use shutdown immediate in oracledb.sh
    (use_shutdown_immediate_in_oracledb_sh.patch)
    Resolves: rhbz#633992
  - rgmanager: Add path to rhev-check.sh
    (add_path_to_rhev_check_sh.patch)
    Resolves: rhbz#634225
  - rgmanager: Make clustat report correct version
    (make_clustat_report_correct_version.patch)
    Resolves: rhbz#654160


author: Marek Grac <mgrac@redhat.com> - 2.0.52-11
changelog:
  - resource-agents: Listen line in generated httpd.conf incorrect
    (resource-agents-Remove-netmask-from-IP-address-when.patch)
    Resolves: rhbz#675739
  - resource-agents: Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#620700


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-10.1
changelog:
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#669440


author: Marek Grac <mgrac@redhat.com> - 2.0.52-10
changelog:
  - resource-agents: Problem with whitespace in mysql resource name
    (resource_agents_fix_whitespace_in_names.patch)
    Resolves: rhbz#632704


author: Lon Hohberger <lhh@redhat.com> - Version: 2.0.52-9
changelog:
  - resource-agents: Fix migrateuriopt setting
    (resource_agents_fix_migrateuriopt_setting.patch)
    Resolves: rhbz#659477


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-8
changelog:
  - rgmanager: Do hard shut down if CMAN dies
    (do_hard_shut_down_if_cman_dies.patch)
    rgmanager: Work around lockspace release hang
    (work_around_lockspace_release_hang.patch)
    Resolves: rhbz#639961
  - rgmanager: Fix CIFS mount handling in netfs.sh
    (fix_cifs_mount_handling_in_netfs_sh.patch)
    Resolves: rhbz#640676


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-7
changelog:
  - rgmanager: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629208


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.18
changelog:
  - rgmanager: tomcat-5 can't start properly
    (tomcat_5_can_t_start_properly.patch)
    Resolves: rhbz#591003


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.17
changelog:
  - halvm: lvm agent incorrectly reports vg is in volume_list
    (lvm_agent_incorrectly_reports_vg_is_in_volume_list.patch)
    Resolves: rhbz#506587
  - rgmanager: Add non-critical flag to resources
    (rgmanager_add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (rgmanager_add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (rgmanager_header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (rgmanager_use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (rgmanager_present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (rgmanager_mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (rgmanager_add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (rgmanager_allow_restart,disable_recovery_policy.patch)
    rgmanager: Fix handling of independent subtrees
    (rgmanager_fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (rgmanager_do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Support convalesce w/ central_processing
    (rgmanager_support_convalesce_w_central_processing.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (rgmanager_add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (rgmanager_add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (rgmanager_clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (rgmanager_fix_corner_case_in_critical_non_critical_handling.patch)
    Resolves: rhbz#605733
  - resource-agents: Support ext4 in fs.sh
    (support_ext4_in_fs_sh.patch)
    Resolves: rhbz#636550


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.16
changelog:
  - rgmanager: Retry when config is out of sync
    (retry_when_config_is_out_of_sync.patch)
    Resolves: rhbz#568126


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.15
changelog:
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#592380
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#620730


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.13
changelog:
  - resource-agents: Fix samba netbios name
    (fix_samba_netbios_name.patch)
    Resolves: rhbz#531098
  - resource-agents: Fix vxfs support
    (fix_vxfs_support.patch)
    Resolves: rhbz#531843
  - rgmanager: Allow exit while waiting for cman
    (allow_exit_while_waiting_for_cman.patch)
    Resolves: rhbz#545229
  - rgmanager: Document failover domains
    (document_failover_domains.patch)
    Resolves: rhbz#557562
  - resource-agents: SAPDatabase: remove $TEMPFILE
    (sapdatabase_remove_tempfile.patch)
    Resolves: rhbz#565363
  - rgmanager: Kill processes correctly w/ force_unmount
    (kill_processes_correctly_w_force_unmount.patch)
    Resolves: rhbz#573705
  - HA LVM: Use CLVM with local machine kernel targets
    (use_clvm_with_local_machine_kernel_targets_bz_585229.patch)
    Resolves: rhbz#585229 rhbz#509368 rhbz#583769 rhbz#572311
  - resource-agents: Remove nfs service temp directories
    (remove_nfs_service_temp_directories.patch)
    Resolves: rhbz#595455
  - resource-agents: Fix migration mapping behavior w/ virsh
    (fix_migration_mapping_behavior_w_virsh.patch)
    Resolves: rhbz#596016


author: Marek Grac <mgrac@redhat.com> - 2.0.52-6.11
changelog:
  - postgres-8 will fail to stop gracefully if there are active
    clients connected
  - Resource agent for psql does not work correctly with netmask
  - Resolves: rhbz#587735 rhbz#614456


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.10
changelog:
  - Fix start timeout if status_program takes a long time
  - Use sysrq-b to reboot to work around a failed reboot() syscall
  - Resolves: rhbz#583788 rhbz#608397


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.2
changelog:
  - Add status_program attribute to vm.sh
  - Make status check tolerances user configurable and timing work
    correctly
  - Resolves: rhbz#583788


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-5
changelog:
  - Make relocate-to-offline host consistent with other relocation
    behaviors
  - Add isAlive error reporting for file system agents
  - Resolves: rhbz#562237 rhbz#536157


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.33
changelog:
  - Make VF timeouts scale with totem token timeout
  - Revert requires: line for installation in virtual machines.
  - Resolves: rhbz#548133 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.31
changelog:
  - Fix fs.sh bind mount handling
  - Add missing requires: line for libvirt 0.6.3
  - Resolves: rhbz#526286 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.27
changelog:
  - Add debugging information to dumps generated by rgmanager
  - Fix migration failure handling
  - Resolves: rhbz#512052 rhbz#499835


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.21
changelog:
  - Fix problem in ip.sh where it was not honoring monitor_link
    during startup
  - Resolves: rhbz#532756


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.15
changelog:
  - Fix problem causing rgmanager to stick after a node dies
    and rejoins, blocking configuration updates and other events
  - Resolves: rhbz#527777


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.14
changelog:
  - Fix problem causing service to get stuck in 'recovering' state
    when using central_processing
  - Resolves: rhbz#530409


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.1
changelog:
  - Fix issue causing unmounting of cluster file systems while in 
  use during a configuration change.
  - Resolves: rhbz#506094


author: Chris Feist <cfeist@redhat.com> - 2.0.52-1
changelog:
  - When vm.sh does a status check and gets 'no state' it is now treated as a
    running state.
  - Resolves: rhb#514044


author: Chris Feist <cfeist@redhat.com> - 2.0.51-1
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505340


author: Chris Feist <cfeist@redhat.com> - 2.0.50-1
changelog:
  - Extra checks from the oracle agents have been removed.
  - Several fixes to prevent DOS attacks through insecure use of /tmp/ files have
    been implemented.
  - vm.sh now uses libvirt
  - Users can now define an explicit service processing order when
    central_processing is enabled
  - Resolves: rhbz#470917 rhbz#412911 rhbz#468691 rhbz#492828


author: Chris Feist <cfeist@redhat.com> - 2.0.49-1
changelog:
  - Rgmanger now checks to see if it has been killed by the OOM killer and if
    so, reboots the node.
  - Resolves: rhbz#488072


author: Chris Feist <cfeist@redhat.com> - 2.0.48-1
changelog:
  - clulog now accepts '-' as the first character in messages.
  - If expire_time is 0 max_restarts is no longer ignored.
  - SAP scripts have been updated.
  - Empty PID files no longer cause resource start failures.
  - Recovery policy of type restart now works properly when using a resource
    based on ra-skelet.sh
  - startup_wait option has been added to the mysql resource agent.
  - samba.sh now kills the pid listed in the proper pid file.
  - Handling of '-F' has been improved to fix issues with rgmanager crashing if
    no members of a restricted failover domain are online and rgmanager failing
    to correctly restart service is they fail on the first node.
  - Enabled ability to prioritize services.
  - It is now possible to cap the number of simultaneious status checks to
    prevent load spikes.
  - Enabling a frozen service no longer fails and leaves the service in a failed
    state.
  - Forking and cloning during status checks has been optimized to reduce load
    spikes.
  - rg_test no longers hangs when running against a cluster due to the removal
    of an 8MB memory cap.
  - Resolves: rhbz#471431 rhbz#475826 rhbz#474444 rhbz#449394 rhbz#481058 rhbz#483093 rhbz#486711 rhbz#486717 rhbz#482858 rhbz#487598 rhbz#488714 rhbz#250718 rhbz#490455


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1
changelog:
  - postgres-8.sh now uses 'su' instead of 'sudo' allowing the resource agent to
    run in the background.
  - Resolves: rhbz#462910


author: Chris Feist <cfeist@redhat.com> - 2.0.42-1
changelog:
  - rgmanager can now resolve hostnames to IP addresses and back when checking
    NFS clients.
  - Caching has been added in services to increase performance with a large
    number of individual mounters.
  - Resolves: rhbz#455324


author: Chris Feist <cfeist@redhat.com> - 2.0.40-1
changelog:
  - Parameter added for mapping cluster node name to xen migration
    target hostname.
  - Add support for service freeze/unfreeze.
  - rgmanager now detects restricted failover domain crashes.
  - Fix bugs when using rgmanager with IPv6.
  - rgmanager now waits for fence domain join to complete on startup.
  - clusvcadm man page fixes.
  - Resolves: rhbz#453429 rhbz#448046 rhbz#435466 rhbz#459582 rhbz#460032 rhbz#459754


author: Chris Feist <cfeist@redhat.com> - 2.0.39-1
changelog:
  - rgmanager no longer erroneously removes the wrong address when the IP
    address matches the broadcast address of the interface.
  - rgmanager now properly checks pbond links (used with Xen).
  - Resources with names that include spaces are now properly handled.
  - HA LVM now works properly on ia64 architectures.
  - Symlinks in mount points no longer cause failures.
  - rgmanager now properly sets the close on exec bit for its sockets (fixes
    SELinux issues)
  - Non-ethernet bonding slaves now work properly.
  - The LVM script now provides sufficient parameter descriptions.
  - Machines can now fence themselves if they cannot deactivate their logical
    volumes.
  - The LVM script no longer removes tags from all VGs.
  - Resolves: rhbz#453000 rhbz#451654 rhbz#445662 rhbz#446260 rhbz#441582 rhbz#433313 rhbz#331661 rhbz#443660 rhbz#431713 rhbz#242798 rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.38-1
changelog:
  - Leaving out the VG name paramater to 'vgchange --deltag' no longer
    causes the tag to be removed from all VGs.
  - Resolves: rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.37-1
changelog:
  - A bug was fixed which caused incorrect return codes during service stop
    operations.
  - Resolves: rhbz#432998


author: Chris Feist <cfeist@redhat.com> - 2.0.34-1
changelog:
  - Extraneous errors in during HA lvm operations have been fixed
  - Oracle 10g Release 2 resource agent is now included
  - Resolves: rhbz#428346 rhbz#349571


author: Chris Feist <cfeist@redhat.com> - 2.0.33-1
changelog:
  - Samba shares may now be mounted from the netfs resource agent
  - clulog now honors rgmanager log levels
  - Fixed a crash on restart bug
  - Default migration policy is now live (from paused)
  - Restart counters have been implemented
  - Stopping a service using a shared GFS resource no longer umounts GFS if
    other services are using it
  - HA LVM now allows multiple LVs/VGs as long as they move together
  - Resolves: rhbz#289501 rhbz#303981 rhbz#345871 rhbz#247139 rhbz#254111 rhbz#427378 rhbz#428448


author: Chris Feist <cfeist@redhat.com> - 2.0.32-1
changelog:
  - Mounting samba shares are now supported.
  - clulog now honors cluster configuration specification of log levels in
    all cases.
  - clusvcadm man page has been updated
  - Default virtual machine migration is now live (-l)
  - It is now possible to fail over a service have a specified number of restarts
  - rgmanager no longer umounts shared gfs partitions when it is used by other
    services
  - Resolves: rhbz#250681 rhbz#289501 rhbz#303981 rhbz#324151 rhbz#345871 rhbz#400211 rhbz#254111


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


