# changelog

author: Peter Jones <pjones@redhat.com> - 5.1.19.6-28
changelog:
  - Fix bad regexp in devicemapper dependency resolution code
    Resolves: rhbz#439371
  - Re-do workaround for gfs2/lock_nolock dep brokenness
    Resolves: rhbz#438743


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-27
changelog:
  - Fix initialization of "withusb" on s390/s390x
    Resolves: rhbz#432776
  - Fix application of patch 15
    Resolves: rhbz#428723
  - Fix netdev naming with drivers specified on the command line
    Resolves: rhbz#436509


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-21
changelog:
  - Fix firmware loader completion logic
    Resolves: rhbz#235277
  - Support spaces in the kernel command line
    Resolves: rhbz#240779
  - Clarify module option documentation
    Resolves: rhbz#241763


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-20
changelog:
  - Add iSCSI Boot Firmware Table support
    Resolves: rhbz#307771
  - Handle empty dm rules better
    Resolves: rhbz#244202
  - Load usb modules in correct order
    Resolves: rhbz#234847
  - Fix multipath on iscsi
    Resolves: rhbz#428723


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-16
changelog:
  - Invoke kpartx the same was as rc.sysinit to maintain naming consistency
    Related: rhbz#185852
  - Remove unused code
    Related: rhbz#185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-14
changelog:
  - Add support for disabling dmraid from a config file so we don't regress
    Related: #185852
  - Clean up new mpath code.
    Related: #185852


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-13
changelog:
  - Fix "--without-usb"
    Resolves: #230852
  - Make /lib/firmware before trying to put things there
    Related: #218452


author: Peter Jones <pjones@redhat.com> - 5.1.19.6-12
changelog:
  - Don't try to guess a module path if modprobe can find it
    Resolves: #218452
  - Load sd_mod explicitly during iscsi boot.
    Resolves: #222685


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-11
changelog:
  - Remove unnecessary text
    Resolves: rhbz#238019
  - Handle EMC storage arrays when gathering WWIDs for multipath devices
    Related: rhbz#185852


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-9
changelog:
  - Quote tr arguments to avoid errors from certain input
    Related: rhbz#185852
  - In the inst() function, make the destination directory if it doesn't exist
    Related: rhbz#185852


author: David Cantrell <dcantrell@redhat.com> - 5.1.19.6-4
changelog:
  - Make sure to copy in /var/lib/multipath/bindings to the initrd
  - Bring up multipath devices by WWID on initrd boot
  - Resolves: rhbz#185852
  - Resolves: rhbz#216240


author: Jon Masters <jcm@redhat.com> - 5.1.19.6-3
changelog:
  - Backport firmware fixes from Fedora 7 into RHEL5
    (use modinfo to discover firmware files required).
    Related: rhbz#184773


author: Jon Masters <jcm@redhat.com> - 5.1.19.6-2
changelog:
  - Add support for modinfo to locate modules.
  - Add elilo fixes for IA64 to new-kernel-pkg.
    Resolves: #239392
    Related: #224076


author: Jeremy Katz <katzj@redhat.com> - 5.1.19.3-1
changelog:
  - don't create /dev/tty* on s390 (#209204)
  - handle multi-line options (#209447)
  - ensure that scsi devices have stabilized to ensure the rootdev 
    is available (#213039)
  - iscsi tools changed their syntax somewhat (#221088)


author: Peter Jones <pjones@redhat.com> - 5.1.19-1
changelog:
  - Fix booting on non-LVM devices where sysfs uses a '!' in the device path,
    such as cciss.  (#201875, #196360)


author: Peter Jones <pjones@redhat.com> - 5.1.16-1
changelog:
  - Don't require non-tmpfs tmpdir unless we're using loopback
  - Fix symlink chasing for yaboot.conf in grubby (#207302)


author: Peter Jones <pjones@redhat.com> - 5.1.11-1
changelog:
  - Pull in bdevid properly (not two sources any more)
  - Lots of minor bugfixes, leak fixups, etc.
  - Updates for new iScsi userland (katzj)
  - ata and usb device id probes in bdevid
  - preliminary work for boot-time device identification.
  - Fixes for network driver selection (katzj)


author: Peter Jones <pjones@redhat.com> - 5.1.10-1
changelog:
  - Fix %setup args
  - Work around lvm locking problems when clvm is installed (#203904)
  - Work around lvm segfault by always using lvm.static
  - Fix label scanning on dm devices (based on a patch from Hans de Goede)
    (#204763)
  - handle the /proc/bus/usb mounting with a state machine in the module
    loading emission, not with a sentinal value
  - do forced finding of devices *after* auto-detection of the root fs, so
    we're not blindsided by bogus scsi_hostadapter aliases and the like.
  - move nashDm* functions to libnash so stuff in block.c can call them.


author: Peter Jones <pjones@redhat.com> - 5.1.7-1
changelog:
  - Make "stabilized" work better (patch from Alexandre Oliva)
  - Rewrite usb handling (notting and pjones)
  - Fix libbdevid provides/obsoletes.
  - Include usb hcd drivers by default


author: Bill Nottingham <notting@redhat.com> - 5.1.3-1
changelog:
  - replace various sed/grep/cut/head calls with bash & awk equivalents
  - fix a typo
  - nfs loop fixes
  - silence xen errors when sysfs layout is different


author: Peter Jones <pjones@redhat.com> - 5.1.2-1
changelog:
  - pull in new libbdevid for scsi probing fix
  - restructure package so things can include libbdevid (and its modules)
    without depending on python


author: Jeremy Katz <katzj@redhat.com> - 5.1.0-1
changelog:
  - allow rootdev/rootfs/rootopts parsing on the mkinitrd command line (notting)
  - fix case where we'd spin forever resolving a device (#199046)


author: Peter Jones <pjones@redhat.com> - 5.0.47-1
changelog:
  - add libbdevid
  - fix mode handling on open syscall wrapper (patch from Mark McLoughlin)
  - save dhcp lease file after network initialization (patch from markmc)


author: Peter Jones <pjones@redhat.com>
changelog:
  - make libnash.a and the nash-devel package
  - use libdhcp instead of pump (patch from Mark McLoughlin)


author: Jeremy Katz <katzj@redhat.com> - 5.0.46-1
changelog:
  - if we don't get a modalias for a net driver, try via 
    ethtool (notting, #196104)
  - add patches from Aron Griffis (aron AT hp DOT com) for multiboot 
    support on ia64


author: Jeremy Katz <katzj@redhat.com> - 5.0.44-1
changelog:
  - fix so we only use iscsistart if we're doing root on iscsi 
  - fix spurious shell error (noticed by karsten)


author: Jeremy Katz <katzj@redhat.com> - 5.0.43-1
changelog:
  - Add back patches from pjones which had just been in the package for 
    * fix bad shell code to detect DMs in use
    * fix "stabilized" to stat where appropriate
    * use stabilized for sbp2


author: Jeremy Katz <katzj@redhat.com> - 5.0.42-1
changelog:
  - add a hack to handle xennet devices not having a modalias (#196104)
  - initial pass at support for root on iscsi (patch from Patrick 
    Mansfield <patmans@us.ibm.com>)


author: Peter Jones <pjones@redhat.com> - 5.0.38-1
changelog:
  - handle bringing up multiple network devices (katzj)
  - make "withusb=yes" default
  - add --without-usb
  - make usb load [euo]hci_hcd correctly


author: Peter Jones <pjones@redhat.com> - 5.0.33-1
changelog:
  - fix unbalanced pushd in mkinitrd (patch from Pete Zaitcev, bz# 185822)
  - add "cond" command for simple conditionals (bz# 182938)
  - add "status" command to see/set the exit status for testing
  - add "--remove-args" and "--update" args for new-kernel-pkg (patch from
    Don Zickus, bz# 183917)


author: Peter Jones <pjones@redhat.com> - 5.0.32-1
changelog:
  - handle sd_mod on scsi_mod in findmodule, not in the scsi setup.  This
    fixes the "no scsi_hostadapter" alias problem better (#182008).


author: Peter Jones <pjones@redhat.com> - 5.0.30-1
changelog:
  - move blkid.tab* references to /etc/blkid/blkid.tab*
  - don't do the selinux context stuff on blkid.tab*, as it now inherits from
    the directory.


author: Peter Jones <pjones@redhat.com> - 5.0.29-1
changelog:
  - Fix pump-devel buildrequires
  - Fix grubby's getpathbyspec() usage (#183010)
  - Fix grubby's makefile
  - Make readlink command work with super scary huge sysfs paths (#183091)
  - Make readlink handle directories better (#166666)
  - Don't create ramdisk blockdevs, mkblkdevs does it (#181873)
  - Don't use showlabels to resolve labels, use resolveDevice so we don't
    need messy awk (#180372)


author: Peter Jones <pjones@redhat.com> - 5.0.28-1
changelog:
  - Make /dev/efirtc on ia64 boxes (#182598)
  - Handle selinux contexts on /etc/blkid.tab* since we can't do it in
    libblkid.
  - Make building from the "nash" subdir work again
  - Make getpathbyspec() allocate on the caller's stack, eliminating
    several memory leaks in callers.
  - Don't strip nash


author: Peter Jones <pjones@redhat.com> - 5.0.27-1
changelog:
  - Fix multiboot argument quoting in new-kernel-package (#182243)
  - Fix "netlink" fd error in hotplug initialization.
  - Fix directory creation in smartmknod()
  - Fix find command when it's not run alone (#181874, patch from Mark
    McLoughlin)
  - Don't use 0-length uuids
  - Update /dev/mapper nodes more often
  - Allow dm partadd not to include the /dev/mapper path
  - Use /etc/fstab, not /fstab, so if you've got /sbin/mount it'll work
  - Bring in sd_mod if libata or scsi_mod is selected (#181983)
  - use -Wl,--wrap,open and __wrap_open() instead of coeOpen()


author: Peter Jones <pjones@redhat.com> - 5.0.26-1
changelog:
  - fix detection of floppy devices, don't probe them for labels
  - fix grubby to use the same label scanning code as nash
  - senseless rewriting of makefiles so that grubby can use nash's .o's, uh,
    "more easily".


author: Peter Jones <pjones@redhat.com> - 5.0.24-1
changelog:
  - use the right nash-dm command to get the device list
  - check if a subdevice has the same partition table, not if it starts
    at the right place (fixes partition comparison on !mirror devices)


author: Peter Jones <pjones@redhat.com> - 5.0.22-1
changelog:
  - formatting cleanups
  - prefix partition number with "p" for partitions on dmraid
  - add support for disabling partitions which overlap with partitions on
    dm devices.
  - add multipath support
  - fix dm creation ordering and partition detection
  - add "network" command (katzj)
  - add nfsroot support (katzj)
  - put "showlabels" back into nash


author: Peter Jones <pjones@redhat.com> - 5.0.21-1
changelog:
  - add "mount -o bind" support and "mount --move" support (#109366, patch
    from Kasper Dupont)
  - add resolveDevice command, which cases down device labels.
  - remove "findlodev" from the documentation (#178587)
  - fix nash command name parsing bug (#178587)
  - fix "find" argument parsing (#178587)
  - add "find" handling for "-type d"


author: Peter Jones <pjones@redhat.com> - 5.0.19-1
changelog:
  - mkinitrd: get resolve_dm_name() and get_numeric_dev() from initscripts
    instead of a private copy
  - add block.[ch]:
    - move parse_sysfs_devnum(), sysfs_blkdev_probe(), and
      mkpathbyspec() from nash.c
    - add label/uuid/name lookups for block devices using libblkid
  - add lib.[ch]:
    - move makeFdCoe(), coeOpen(), coeFopen(), coeOpendir(), readFD(),
      nashLoggerV(), nashLogger(), qprintf(), eprintf(), smartmknod(),
      testing, quiet, reallyquiet from nash.c
    - move nashDefaultLogger(), from dm.c
    - move log enums and declarations from dm.h
  - dm.c: add dm_finish(), which does dm_task_destroy() and then library cleanup
    (solves an fd leak)
  - remove linux_fs.h, mount_by_label.[ch], name_to_dev_t.[ch]


author: Peter Jones <pjones@redhat.com> - 5.0.18-1
changelog:
  - make mkinitrd discover dm uuids
  - add uuid support to nash's "dm create" and "dm partadd"
  - add nash command "dm get_uuid $NAME"
  - add support for renamed dm raids


author: Peter Jones <pjones@redhat.com> - 5.0.14-1
changelog:
  - Remove vestigial loopback support.
  - Remove email addresses from man pages (which still need some work)


author: Peter Jones <pjones@redhat.com> - 5.0.11-1
changelog:
  - audit for open()s without appropriate closes()
  - make new functions coeOpen(), coeFopen(), and coeOpendir().  These behave
    like open(), fopen(), and opendir() except that they set any associated
    file descriptors to close on exec().
  - use them everywhere except where we open a console.


author: Peter Jones <pjones@redhat.com> - 5.0.5-1
changelog:
  - make PROBE, MODULES, and PREMODS load defaults from a config file
  - get rid of support for not using a dynamic /dev
  - add options to force device probes (for when PROBE is "no")
  - consolidate some duplicate code paths
  - make nash's otherCommand check PATH first and use what it finds there for
    any commands it needs to run, unless the command starts with "nash-",
    in which case the internal version is used unconditionally
  - remove the symlink hack for setuproot/preswitchroot/switchroot
  - wrap all the nash commands in mkinitrd with shell functions and use the
    "nash-" varient.
  - rework root fs creation so Jeremy can use the otherCommand feature


author: Peter Jones <pjones@redhat.com> - 5.0.4-1
changelog:
  - split switchroot into setuproot and switchroot, with presetuproot in
    between
  - make preswitchroot and setuproot execute through symlinks, so they may
    be replaced by a second initramfs image
  - add logic to mount filesystems specified in /etc/fstab.sys during setuproot
  - general code cleanups


author: Peter Jones <pjones@redhat.com> - 5.0.2-1
changelog:
  - add error and quiet printf functions
  - use them instead of testing quiet and typing stderr everywhere
  - actually make _all_ errors use eprintf (and thus stderr)
  - print strerror in errors instead of raw errno
  - make "getKernelCmdLine use readFD
  - make "getKernelArg" picky about if you've got the right command vs
    just one that starts with the same string
  - make "getKernelArg" handle "=" for you, so it either gives you the value
    when there is one, '\0' when there's not and it's EOL, or whitespace.
  - reformat some two-space-indent spots
  - check for short reads in catCommand
  - kill pivotroot
  - cleaned up resume messages
  - make mkrootdev use readFD
  - combine mkdevies and makedevs into mkblkdevs, no longer
    using /proc/partitions
  - don't use callocs+memcpy/strcpy+strcat when we can use asprintf
  - make setQuietCommand use getKenrelArg
  - make runStartup use readFD
  - patch from Alexandre Oliva to fix LVM-on-RAID1 /root and swap-on-LVM
    (bz #169059)
  - reorder device creation for easier maintenance create /dev/rtc
  - change fixme comment about lvm vgs
  - use cemit at some places we used a lot of emits before
  - reorder device node creation for clarity
  - use mkblkdevs instead of makedevs and mkdevices
  - decouple loopback root and lvm


author: Peter Jones <pjones@redhat.com> - 5.0.1-1
changelog:
  - create /dev/rtc
  - create /dev/tty, /dev/tty{0..11}, and /dev/ttyS{0..4}
  - tweak the messages output in loud mode during device node creation


author: Peter Jones <pjones@redhat.com> - 5.0.0-1
changelog:
  - remove support for pivotroot
  - remove support for non-initramfs initrds
  - remove support for 2.4 kernels
  - don't force scsi_mod before scsi modules; deps should bring it in.
    same for "unknown"; it's not needed any more.
  - lots of whitespace adjustment
  - minor messaging changes
  - no manual redirection to stderr or RCFILE, nor manual verbose checking
  - in light of these changes and other planned changes, this is 5.0.0


author: Peter Jones <pjones@redhat.com> - 4.2.23-2
changelog:
  - Fix module discovery to not always use the modules /dev/hda1 requires
    when using root-on-label.
  - Put the lvm check after the raid check, so the raid check atually gets run.


author: Peter Jones <pjones@redhat.com> - 4.2.22-1
changelog:
  - Only scan appended kernel command line args for duplicates once.
  - handle short reads correctly in nash's readFD
  - use calloc for things instead of malloc, since we usually need zeroed memory
    and we never memset
  - use canonicalize_file_name instead of malloc+realpath
  - honor quiet flag on suspend/resume
  - autodetect storage drivers in mkinitrd


author: Peter Jones <pjones@redhat.com> - 4.2.17-1
changelog:
  - Don't use udev or udevstart in the initrd; it's trivial to do
    all that work by looking for directories with "dev" nodes in sysfs
    and making the device from the dirname using major/minor from "dev"


author: Peter Jones <pjones@redhat.com> - 4.2.16-1
changelog:
  - Add a patch from Jeff Layton to remove files from the initramfs
    before executing the new init.  (slightly modified, #153069)


author: Peter Jones <pjones@redhat.com> - 4.2.11-1
changelog:
  - don't copy "rw" option into the initrd; use "ro" instead if it's
    the only option.
  - Don't print "unmounting old ..." messages in nash if we're set to quiet


author: Peter Jones <pjones@redhat.com> - 4.2.9-1
changelog:
  - invoke bash with "--norc" (#155986)
  - use binary udevstart.static, not a symlink
  - print exit status in nash when programs return an error


author: Peter Jones <pjones@redhat.com> - 4.2.6-1
changelog:
  - work correctly with "set -o noclobber"
  - wait longer after modprobe of usb-storage
  - fix a wrong error output file


author: Peter Jones <pjones@redhat.com> - 4.2.3-1
changelog:
  - use --ignorelockingfailure with lvm commands in the initrd, and only
    activate the volume / is on.  (#151172)


author: Peter Jones <pjones@redhat.com> - 4.2.0.3-1
changelog:
  - Make nash expand environment variables on command lines (#144474)
  - Make nash check pids returned from wait*() (#145660)


author: Jeremy Katz <katzj@redhat.com> - 4.1.17-1
changelog:
  - run udevstart again instead of sleeping, this will ensure all 
    devices are created in all cases after modules have been 
    loaded (thanks to notting)


author: Jeremy Katz <katzj@redhat.com> - 4.1.15-1
changelog:
  - new-kernel-pkg: set new kernels as default (#135161) when
    a) /etc/sysconfig/kernel contains UPDATEDEFAULT=yes
    b) --package foo is passed in and foo matches DEFAULTKERNEL 
       in /etc/sysconfig/kernel


author: Jeremy Katz <katzj@redhat.com> - 4.1.12-1
changelog:
  - update to work with udev 032, conflict with old udev
  - if udev is present, use it.  trying to avoid the use of udev if it's 
    installed is the road to things not working


author: Jeremy Katz <katzj@redhat.com> - 4.1.0-1
changelog:
  - mkinitrd: if using udev for the initrd, set things up appropriately 
    (based on patches from Harald Hoyer and Thomas Woerner)
  - nash: support for echo -n
  - nash: better error message on exec failures
  - nash: exec udev if we're called as a hotplug handler


author: Jeremy Katz <katzj@redhat.com> - 4.0.6-1
changelog:
  - various fixes from a code review by Steve Grubb which should fix 
    some of the lingering problems (#129673)
  - nash: warning fix from Michal Jaegermann (#129673)
  - grubby: removal with (hd0,0)


author: Jeremy Katz <katzj@redhat.com> - 4.0.4-1
changelog:
  - nash: fix mounting by label in some cases (tracked down by 
    Erik Jacobson, #129581, #129673, #129667, #129635)


author: Jeremy Katz <katzj@redhat.com> 4.0.3-1
changelog:
  - grubby: more (hd0,0) support (#125156)
  - mkinitrd.8: update manpage (#129585)
  - nash: fix some warnings


author: Jeremy Katz <katzj@redhat.com> 4.0.2-1
changelog:
  - nash: support bind mounting
  - grubby: support the (hd0,0)/path syntax for kernels and initrds in
    grub.conf (#114758, #125156, #120906)


author: Jeremy Katz <katzj@redhat.com> - 4.0.0-1
changelog:
  - create an initramfs on 2.6 kernels instead of an initrd
  - use new mount magic instead of pivot_root 
    on 2.6 kernels
  - try to handle the case of modules going away on kernel upgrades a 
    little bit more nicely (#123994)
  - avoid over-zealous creation of /dev/mapper/control (#127115)
  - improve nash(8) manpage (#127413)


author: Jeremy Katz <katzj@redhat.com> - 3.5.21-1
changelog:
  - new-kernel-package: add patch from Ryan Tilder to allow setting new 
    kernel as default (#117605)
  - mkinitrd: i2o_pci isn't in 2.6 (#120827)
  - new-kernel-pkg: conditionalize kernel binary name for 2.6 vs 2.4 
    on ppc/ppc64 (as it's vmlinuz in 2.6 instead of the 
    vmlinux from 2.4) (#120868)


author: Jeremy Katz <katzj@redhat.com> - 3.5.19-1
changelog:
  - nash/mkinitrd: quiet mode for nash and necessary mkinitrd changes 
    to work with it
  - mkinitrd: add lxo's patch for copying lvm.conf (#112099)
  - new-kernel-pkg: allow specifying the banner used in the boot loader config
    on the command line (#114809)


author: Jeremy Katz <katzj@redhat.com> 3.5.17-1
changelog:
  - mkinitrd: handle multiple spaces in modules.conf (from Lubomir Bulej)
  - nash: rebuild against new dietlibc fixing problems with root=LABEL= (#112623)
  - mkinitrd: determine kernel version and adjust modulefile appropriately 
    so that we look at /etc/modprobe.conf for 2.6 kernels
  - mkinitrd: first pass at getting lvm working on 2.4 -> 2.6 upgrade


author: Jeremy Katz <katzj@redhat.com> 3.5.16-1
changelog:
  - fixing handling of non-lvm case when /dev/mapper/control isn't present
  - add patch from Al Viro to get root dev in numeric form by grokking sysfs


author: Jeremy Katz <katzj@redhat.com> 3.5.15-1
changelog:
  - mkinitrd: add support for lvm2 (note: will not currently handle being
    on a running 2.4 kernel and installing 2.6 with lvm rootfs)


author: Jeremy Katz <katzj@redhat.com> 3.5.10-1
changelog:
  - clean up bogus warning in installkernel
  - only try to do grub configs on arches which support grub (#103261)


author: Matt Wilson <msw@redhat.com> 3.5.9-1
changelog:
  - add \n to error messages in grubby
  - NUL terminate buffer returned from readlink properly
  - symlinks are most likely relative, chdir to / before trying to
    follow them
  - yaboot needs boot prefix
  - silo needs boot prefix too


author: Jeremy Katz <katzj@redhat.com> 3.5.7-1
changelog:
  - pick modules from /lib/modules/$(uname -r)/updates first
  - be less confused by more than one module of a name


author: Jeremy Katz <katzj@redhat.com> 3.5.3-1
changelog:
  - mkinitrd: fix copying of pvs (#97314, #97289)
  - mkinitrd: use pvscan instead of lvmdiskscan to find PVs to work 
    better on other arches
  - mkinitrd: better check for dasd existence
  - mkinitrd: make certain lvm-mod is included if root on lvm


author: Jeremy Katz <katzj@redhat.com> 3.5.2-1
changelog:
  - mkinitrd: revert use of modprobe -c.  it breaks in the installer when we 
    don't have a modules.dep for the BOOT kernel
  - nash: return pivot_root call correctly (#97753)


author: Jeremy Katz <katzj@redhat.com> 3.5.0-1
changelog:
  - mkinitrd: add patch from gc@mandrakesoft.com to determine module 
    deps from modules.dep (#87873)
  - tweak patch to not break weird cases where module deps aren't all 
    you need :/
  - grubby: don't remove the last kernel (#60041)
  - mkinitrd: use modprobe -c to find module options (#89794)


author: Jeremy Katz <katzj@redhat.com> 3.4.51-1
changelog:
  - grubby: error out gracefully if we run out of space (#85424)
  - mkinitrd: copy parent dirs for pvs (#88962)
  - mkinitrd: exit with an exit status if tar fails (#90123)
  - new-kernel-pkg: only use the first entry for / (#90155)
  - grubby: fix a buffer overflow  (#90444)


author: Jeremy Katz <katzj@redhat.com> 3.4.49-1
changelog:
  - new-kernel-pkg: on iSeries, we don't have a boot loader, just make the 
    kernel + initrd combo file (/boot/vmlinux-version.img)


author: Jeremy Katz <katzj@redhat.com> 3.4.47-1
changelog:
  - mkinitrd: fix using options for loading modules
  - mkinitrd: don't use kernel parameters for dasd at mkinitrd time, 
    use what's in modules.conf


author: Jeremy Katz <katzj@redhat.com> 3.4.46-1
changelog:
  - new-kernel-pkg: add necessary bits for s390, some logic cleanups
  - grubby: fix root detection for s390{,x}


author: Jeremy Katz <katzj@redhat.com> 3.4.45-1
changelog:
  - grubby: add silo support (sparc)
  - grubby: add zipl support (s390{,x})
  - add grubby test cases for zipl support


author: Jeremy Katz <katzj@redhat.com> 3.4.43-1
changelog:
  - apply ppc patches for new-kernel-pkg and installkernel from Dan 
    Burcaw <dburcaw@terrasoftsolutions.com>
  - man page tweak (#85471)


author: Jeremy Katz <katzj@redhat.com> 3.4.40-1
changelog:
  - fix i2o module ordering (#83447)
  - ifarch'd build requires of dietlibc now that the build system has a way to
    handle these


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - change one test from a number to a string test that could otherwise
    fail in not properly setup chroot environments


author: <ewt@redhat.com>
changelog:
  - added support for yaboot
  - test script runs tests for all platforms
  - separated elilo configuration from lilo mode, allowing elilo specific
    tests to be run on any platform


author: <ewt@redhat.com>
changelog:
  - grubby now shortens lilo titles to ensure they are less then 16 characters
    long (76236)
  - mkinitrd would only turn on /dev/md0 if raid was needed; now it enables
    all raid devices listed in /proc/mdstat (82209)
  - use product name from /etc/redhat-release to generate label in grub.conf
    (82352)


author: <ewt@redhat.com>
changelog:
  - all mkdev() actions will create directories as needed (some code in
    mkdevices is now obsolete; I'll remove it later) (#73317)
  - added mkdev command to test the above
  - support diratime/nodiratime mount options (#78738)
  - grubby will follow symlinks when writing new config file (#78713)
  - don't depend on raidtab, use /proc/mdstat instead (#80424) this covers
    both mkinitrd and grubby


author: Jeremy Katz <katzj@redhat.com> 3.4.34-1
changelog:
  - grubby: fix segfault finding default if default doesn't have a root= (#66000)
  - don't include usb modules by default.  pass --with-usb to get usb modules
  - make sure kudzu exists before trying to exec it
  - handle multiple scsi hosts being present (#77422)
  - add /usr/sbin to default path (#79581)
  - fix using --builtin= (#80448)
  - grubby: preserve the mode on config files (#80776)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - mkinitrd: add support for finding gzipped modules
  - mkinitrd: don't be noisy if we don't have lvm-mod loaded


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby: don't bail when looking for root in appends of lilo-style configs
  - include grubby on x86_64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix some syntax errors
  - use grep's -q flag to save a redirect in places where we're not redirecting
    stderr


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - grubby could segfault by going into its lilo checking if it couldn't find 
    a default to copy (default had no root= and --bad-image-okay wasn't 
    being used)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - nash: create directories if needed in mkdevices command (#73090)
  - grubby: handle lilo case of non-linux default (#72202)


author: Erik Troan <ewt@redhat.com>
changelog:
  - --ifneeded is obsolete; we always need initrds
  - grubby lets you specify multiple indexes for --info
  - grubby lets you select kernels by title
  - added showlabels to nash
  - new-kernel-pkg sets the root device from /etc/fstab rather then inheriting it
  - new-kernel-pkg removes all entries w/ a duplicate label (67459)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added loadinitrd (used by mkbootdisk) on ia32 and sparc
  - modules "off" and "null" should be ignored (67086)
  - mkrootdev looks for root=LABEL=/ in /proc/cmdline, so root by label
    works again (fully determined by root= kernel parameter)
  - added --update-kernel and --remove-args arguments to grubby
  - kernel specification of ALL supported by grubby
  - DEFAULT accepted much more consistently
  - grubby --info displays info on all kernels specified, not just the first
  - ext3 need mbcache now (67354)
  - grubby allows config file entry numbers to be used as kernel paths
  - support /etc/sysconfig/grub.conf
  - display lba info from lilo.conf file in --info


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - don't run lilo twice on kernel removal in new-kernel-pkg
  - don't run grubby to add/remove kernels from new-kernel-pkg if 
    bootloader config doesn't


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --bootloader-probe to grubby
  - wrote a man page for grubby
  - include grubby on ia64
  - updated new-kernel-pkg to work with lilo/elilo
  - added --info=DEFAULT option


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --grub option so grub tests could run on ia64
  - added some basic tests of lilo default directive handling


author: Erik Troan <ewt@redhat.com>
changelog:
  - added --nopivot (53679)
  - honor INSTALL_PATH in installkernel (32833)
  - installkernel versions old kernels as well (52756)
  - lilo support added to grubby


author: Erik Troan <ewt@redhat.com>
changelog:
  - cleaned up usage message
  - added --omit-lvm-modules to man page
  - added --builtin option (65250)
  - skip comments in fstab (65249)
  - added findlodev to nash, use that to pick block device (63421)
  - support -o option in nash's mount (59185)
  - look for xfs_dmapi (60066)
  - added > support for executed commands (61180)
  - grubby copies permissions from old config file (59227)
  - use options from fstab for root filesystem (56071)
  - try and be better about returning nonzero on error (60203)
  - make modprobe symlink properly to avoid kernel message (62145)
  - support linear raid (12775)
  - support fallback option in grub config (54794)
  - comments in template entries not handled quite right (65198)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - fix probing for LVM usage to require a volume group to exist before adding
    the module
  - --omit-lvm-modules will omit LVM modules
  - add support for root device being LVM


author: Erik Troan <ewt@redhat.com>
changelog:
  - look for a non /tmpfs directory
  - added support for xfs
  - use with raid md.o if it exists
  - fixed bug in echo
  - use find form nash rather then /usr (mkinitrd shouldn't need /usr
    mounted)


author: Erik Troan <ewt@redhat.com>
changelog:
  - added support for mounting root filesystem by label
  - switched to dietlibc from minilibc
  - fix so --preload= works [33675,57560,44377]
  - added info on --image-version and --nocompress to man page [57560]
  - set fileystem check interval to 0 in case the system clock
    is borked [51454]
  - give a proper error when run by a user other then root [27218,53159]
  - grubby statically linked against popt [55305]
  - cleaned up verbose output a bit [21791]


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed bug handling invalid default (MF #52889)
  - in some cases we would set the default to point at a removed image


author: Matt Wilson <msw@redhat.com>
changelog:
  - make consoles with the correct minor numbers
  - applied patch from hjl to fix fstab parsing (#50819)


author: Jeremy Katz <katzj@redhat.com>
changelog:
  - skip errors finding jbd as a module if we're skipping them trying to find
    ext3 so that you can build a kernel with ext3 built-in and still use an
    initrd


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't print errors if /etc/raidtab doesn't exist
  - or /etc/{modules.conf,conf.modules}, for that matter


author: Matt Wilson <msw@redhat.com>
changelog:
  - don't dig through /etc/fstab to find out if we have a filesystem on
    a RAID device, it's usually mounted by label so /dev/mdN isn't there
    at all (#46525)


author: Erik Troan <ewt@redhat.com>
changelog:
  - let nash be invoked as modprobe to avoid a modprobe failure to exec
  - nash will try to run arbitrary commands now (removing insmod as a special 
    case)


author: Matt Wilson <msw@redhat.com>
changelog:
  - added patch from twaugh to avoid blindly adding scsi_mod
    and sd_mod to initrd if they are not needed (#24114)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Enlarge initrds, needed for systems with both IDE and SCSI
    (Bug #23846)
  - Version 2.[6789] probably shouldn't identify itself as 2.6
    with --version. ;)
  - bzip2 source


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - now works when /usr is not mounted (do not rely on /usr/bin/install)
  - slight cleanups, better usage message


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Now automatically includes necessary raid modules
  - --omit-raid-modules now omits raid modules
  - tiny doc updates


author: Matt Wilson <msw@redhat.com>
changelog:
  - --omit-scsi-modules now omits all scsi modules
  - updated documentation
  - mkinitrd now grabs scsi_hostadapter modules from anywhere -
    some RAID controller modules live in block/


author: Matt Wilson <msw@redhat.com>
changelog:
  - Ignore the absence of scsi modules, include them if they are there, but
    don't complain if they are not.
  - changed --no-scsi-modules to --omit-scsi-modules (as it should have been)


author: Jakub Jelinek <jj@ultra.linux.cz>
changelog:
  - fix for combined sparc/sparc64 insmod, also pluto module is really
    fc4:soc:pluto and we don't look at deps, so special case it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - added 'make archive' rule to Makefile
  - rewrote install procedure for more robust version handling
  - be smarter about grabbing options from /etc/conf.modules


author: Erik Troan <ewt@redhat.com>
changelog:
  - Only use '-s' to install binaries if /usr/bin/strip is present.
  - Use an image size of 2500 if binaries can't be stripped (1500 otherwise)
  - Don't use "mount -o loop" anymore -- losetup the proper devices manually
  - Requires losetup, e2fsprogs


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Fixed a bug in parsing options.
  - Changed to use a build tree, then copy the finished tree into the
    image after it is built.
  - Added patches derived from ones written by Christian Hechelmann which
    add an option to put the kernel version number at the end of the module
    name and use install -s to strip binaries on the fly.


author: Tim Waugh <twaugh@redhat.com> 8.70-12
changelog:
  - Include extra upstream fixes c7474f22 and 13028e7b for PDF/A support
    (bug #710074, bug #755577).


author: Tim Waugh <twaugh@redhat.com> 8.70-10
changelog:
  - Applied patch to avoid reading initialization files from CWD
    (CVE-2010-2055, bug #599564).
  - Applied patch to prevent integer underflow in TrueType bytecode
    interpreter (CVE-2009-3743, bug #627902).


author: Tim Waugh <twaugh@redhat.com> 8.70-9
changelog:
  - Fixed hyperlink generation in ps2pdf (bug #675307).
  - Improved support for PDF/A from upstream (bug #710074).


author: Tim Waugh <twaugh@redhat.com> 8.70-7
changelog:
  - Fixed character spacing problems using backported patch (bug #688996).
  - Match landscape page sizes when writing PXL (bug #692165).


author: Tim Waugh <twaugh@redhat.com> 8.70-6
changelog:
  - Two more font substitution names needed adjusting for urw-fonts in
    RHEL-5: Helvetica-BoldOblique and Helvetica-Oblique (bug #662110).


author: Tim Waugh <twaugh@redhat.com> 8.70-5
changelog:
  - Restored Fontmap.local patch, incorrectly dropped after
    ghostscript-8.15.4-3 (bug #629943).
  - Applied upstream patch to fix iname.c segfault (bug #629563).


author: Tim Waugh <twaugh@redhat.com> 8.70-1
changelog:
  - Re-based to 8.70 (bug #560096).  Also fixes bug #545821,
    bug #566832, bug #599615, bug #605219, bug #501170, bug #501714,
    bug #514723 and bug #565776.


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.10
changelog:
  - Backported patch from upstream to initialize ColorSpace parameter to
    prevent PostScript error for some inputs (bug #504254).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.8
changelog:
  - Applied patch to fix gdevpdtb buffer overflow (bug #493445).
  - Applied patch to fix scfd buffer underrun (bug #493442).
  - Updated patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0196 (bug #493379).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.6
changelog:
  - Applied patch to fix overflow in cvrs operator (bug #488127).
  - Applied patch to fix CVE-2009-0792 (bug #491853).
  - Applied patch to fix CVE-2009-0583 (bug #487742) and
    CVE-2009-0584 (bug #487744).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.5
changelog:
  - Fixed A3 pagesize in pswrite device (bug #480978).
  - Build with -fno-strict-aliasing (bug #465960).
  - Avoid segfault when processing certain fonts (bug #450717).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9.2
changelog:
  - Configure with --with-drivers=ALL since the advertised default is not
    what gets used (bug #224129).


author: Tim Waugh <twaugh@redhat.com> 8.15.2-9
changelog:
  - Apply CJKV patch from svn164:165 plus the fix from svn173:174 (bug #194592,
    bug #203712, possibly bug #167596).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.5
changelog:
  - Split font configuration (bug #161187).
  - Reverted this change:
    - Build requires xorg-x11-devel, not XFree86-devel.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.4
changelog:
  - Add Japanese fonts to FAPIcidfmap (bug #161187).
  - Moved Resource directory.
  - Added use-external-freetype patch (bug #161187).


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.2
changelog:
  - Drop 'Provides: libijs.so' because it is incorrect.
  - Build igcref.c with -O0 to work around bug #150771.
  - Renumber patches.


author: Tim Waugh <twaugh@redhat.com> 8.15-0.rc3.1
changelog:
  - Switch to ESP Ghostscript.
  - 8.15rc3.
  - Lots of patches dropped.  Perhaps some will need to be re-added.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Run /sbin/ldconfig in %post/%postun.
  - Stricter requirements for the main package in the subpackages.


author: Tim Waugh <twaugh@redhat.com> 7.07-19
changelog:
  - Attempt to fix gdevcups crash (bug #114256).
  - Make gs dynamically link to libgs (bug #114276).
  - Fix gdevesmv.c's misuse of const (bug #114250).


author: Tim Waugh <twaugh@redhat.com> 7.07-17
changelog:
  - Removed stp driver.  Use the IJS version (ijsgimpprint) instead.
  - No longer conflicts with foomatic for hpijs versioning.


author: Tim Waugh <twaugh@redhat.com> 7.07-15
changelog:
  - Build for Fedora Core 1 printer drivers update.
  - Conflicts with foomatic before hpijs 1.5 data.
  - Make fontconfig optional.


author: Tim Waugh <twaugh@redhat.com> 7.07-1
changelog:
  - 7.07.
  - Parametrize build_libgs.
  - Remove Omni requirement (bug #88177).
  - Fix ghostscript-gtk obsoletes: line (bug #88175).


author: Tim Waugh <twaugh@redhat.com> 7.06-1
changelog:
  - 7.06.
  - Updated config, vflib.fixup patches.
  - No longer need dx6, jpeg patches.
  - No longer need to add in missed GNU drivers.
  - Turn off dj970 driver (hpijs drives that).


author: Tim Waugh <twaugh@redhat.com> 7.05-34
changelog:
  - Apply fix for CJK font search method when the fonts are not available
    (bug #83516).
  - The gb18030 patch no longer applies here.


author: Tim Waugh <twaugh@redhat.com> 7.05-33
changelog:
  - Add some missing font aliases (bug #73342).
  - Use the system jpeg library.
  - Update hpijs to 1.3.1.
  - Update gdevcups.c from cups-1.1.18.


author: Tim Waugh <twaugh@redhat.com> 7.05-26
changelog:
  - Don't ship the shared object yet (part of bug #79340).
  - Don't make the gtk package, since that needs the shared object.


author: Tim Waugh <twaugh@redhat.com> 7.05-25
changelog:
  - Fix level 1 PostScript output (bug #78450).
  - No need to carry gomni.c, since it comes from the patch.


author: Tim Waugh <twaugh@redhat.com> 7.05-8
changelog:
  - Requires recent version of patchutils (bug #65947).
  - Don't ship broken man page symlinks (bug #66238).


author: Tim Waugh <twaugh@redhat.com> 7.05-2
changelog:
  - Don't apply bogus parts of vflib patch (bug #65268).
  - Work around Omni -sPAPERSIZE=a4 problem (bug #65269).


author: Tim Waugh <twaugh@redhat.com> 7.05-1
changelog:
  - 7.05.
  - No longer need mkstemp, vflib.fixup, quoting, or PARANOIDSAFER
    patches.
  - Don't apply CJK patches any more (no longer needed).
  - Updated Source15, Patch0, Patch10, Patch5, Patch24, Patch14, Patch12.
  - Made gdevdmpr.c compile again.
  - Move gimp-print to a separate package.
  - Ship the shared object too (and a .so file that is dlopened).
  - Update Omni patch.  No longer need Omni_path, Omni_quiet, Omni_glib patches.
  - Require Omni >= 0.6.1.
  - Add patch to fix gtk+ initial window size.
  - Add devel package with header files.
  - Turn on IJS support.
  - Update hpijs to 1.1.
  - Don't ship the hpijs binary in the ghostscript package.
  - Use -fPIC when building ijs.


author: Tim Waugh <twaugh@redhat.com> 6.52-6
changelog:
  - Fix config patch so that gs --help displays the right thing.
  - Don't ship sysvlp.sh.
  - Fix some shell scripts.
  - Ship escputil man page (bug #58919).


author: Bernhard Rosenkraenzer <bero@redhat.com> 6.52-1
changelog:
  - Updates:
    - ghostscript 6.52
    - hpdj 2.6 -> pcl3 3.3
    - CJK Patchlevel 3, adobe-cmaps 200109
    - gimp-print 4.2.0
  - Adapt patches
  - Fix various URLs
  - Begin cleaning up spec file
  - Fix bugs #21879 and #50923


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-9
changelog:
  - applied IBM's glib patches for Omni, which now works.
  - BE AWARE: we now link against libstdc++ and glib for this, and use a c++
  - link stage to do the dirty.
  - added glib-devel buildreq and glib req, I don't think we require everything
  - yet, I could pull in sasl.


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-4
changelog:
  - applied drepper@redhat.com's patch for #50300
  - fixed build deps on zlib-devel and libpng-devel, #49853
  - made gs_init.ps a config file; #25096
  - O\^/nZ the daTa directorieZ now; #50693


author: Crutcher Dunnavant <crutcher@redhat.com> 6.51-2
changelog:
  - luckily, I had a spare chicken. Thanks to some work by Nakai, and one last
  - desperate search through google, everything /seems/ to be working. I know
  - that there are going to be problems in the japanese code, and I need to turn
  - on the cjk font map from adobe, but it /works/ at the moment.


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - upgraded to 6.51, a major version upgrade
  - rewrote spec file, threw out some patches
  - turned on IBM's Omni print drivers interface
  - turned on HP's hpijs print drivers interface
  - turned on every driver that looked usable from linux
  - sacrificed a chicken to integrate the old Japanese drivers
  - - This didn't work. The japanese patches are turned off, pending review.
  - - I can do loops with C, but the bugs are in Postscript init files


author: Crutcher Dunnavant <crutcher@redhat.com>
changelog:
  - merged in some patches that got away:
  -	* Fri Sep  1 2000 Mitsuo Hamada <mhamada@redhat.com>
  	- add support JIS B size
  	- fix the problem of reconverting GNUPLOT output


author: Michael Stefaniuc <mstefani@redhat.com>
changelog:
  - added the stp driver from the gimp-print project.
    It supports high quality printing especialy with Epson Stylus Photo.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 5.50 at last...
  - hpdj 2.6
  - Added 3rd party drivers:
    - Lexmark 5700 (lxm5700m)
    - Alps MD-* (md2k, md5k)
    - Lexmark 2050, 3200, 5700 and 7000 (lex2050, lex3200, lex5700, lex7000)


author: Petr Machata <pmachata@redhat.com> - 1.33.1-11
changelog:
  - Add a fix for thread safety bug in boost::regex
  - Build with -fno-strict-aliasing due to the sheer amount of warnings
    that we get.
  - Resolves: #472384


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-10
changelog:
  - (#182414: boost: put tests in %check section) via Rex Dieter
  - Fix EVR with .el5_9 tag via Gianluca Sforna


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-7
changelog:
  - (#205866: boost::spirit generates warnings with -Wshadow)
  - (#205863: serialization lib generates warnings)
  - (#204326: boost RPM missing dependencies)
  - (#193465: [SIGNAL/BIND] Regressions with GCC 4.1)
  - BUILD_FLAGS, add, to see actual compile line.
  - REGEX_FLAGS, add, to compile regex with ICU support.


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.1-3
changelog:
  - Update to boost-1.33.1.
  - (#176485: Missing BuildRequires)
  - (#169271: /usr/lib/libboost*.so.? links missing in package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.33.0-1
changelog:
  - Update to boost-1.33.0, update SONAME to 2 due to ABI changes.
  - Simplified PYTHON_VERSION by Philipp Thomas <pth@suse.de>


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-6
changelog:
  - (#153093: boost warns that gcc 4.0.0 is an unknown compiler)
  - (#152205: development .so symlinks should be in -devel subpackage)
  - (#154783: linker .so symlinks missing from boost-devel package)


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-4
changelog:
  - (#142612: Compiling Boost 1.32.0 Failed in RHEL 3.0 on Itanium2) 
  - (#150069: libboost_python.so is missing)
  - (#141617: bad patch boost-base.patch)
  - (#122817: libboost_*.so symlinks missing)
  - Re-add boost-thread.patch.
  - Change boost-base.patch to show thread tags.
  - Change boost-gcc-tools.patch to use SOTAG, compile with dllversion.
  - Add symbolic links to files.
  - Sanity check can compile with gcc-3.3.x, gcc-3.4.2, gcc-4.0.x., gcc-4.1.x.


author: Benjamin Kosnik <bkoz@redhat.com> 1.32.0-3
changelog:
  - (#122817: libboost_*.so symlinks missing)
  - (#141574: half of the package is missing)
  - (#141617: bad patch boost-base.patch)


author: Benjamin Kosnik <bkoz@redhat.com>
changelog:
  - Remove bjam dependency. (via Graydon).
  - Fix installed library names.
  - Fix SONAMEs in shared libraries.
  - Fix installed header location.
  - Fix installed permissions.


author: Benjamin Kosnik <bkoz@redhat.com> 1.31.0-1
changelog:
  - Update to boost-1.31.0.rc2
  - (#109307:  Compile Failure with boost libraries)
  - (#104831:  Compile errors in apps using Boost.Python...)
  - Unify into boost, boost-devel rpms.
  - Simplify installation using bjam and prefix install.


author: Nalin Dahyabhai <nalin@redhat.com> 1.30.2-2
changelog:
  - require boost-devel instead of devel in subpackages which require boost-devel
  - remove stray Prefix: tag


author: Benjamin Kosnik <bkoz@redhat.com> 1.30.2-1
changelog:
  - change license to Freely distributable
  - verify installation of libboost_thread
  - more boost-devel removals
  - deal with lack of _REENTRANT on ia64/s390
  - (#99458) rpm -e fixed via explict dir additions
  - (#103293) update to 1.30.2


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-109.1
changelog:
  - cman|fenced: Fix node killing in case of a 2node cluster that suffers
    brief network outage
    Resolves: rhbz#923861


author: Marek Grac <mgrac@redhat.com> - 2.0.115-108
changelog:
  - fence_vmware_soap: Speed up fencing process and do not crash on VM without valid UUID
    Resolves: rhbz#836654


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-103
changelog:
  - fenced: increase MAX_DEVICES to 8
    Resolves: rhbz#821857
  - fenced: fix double free when second method has no devices
    Resolves: rhbz#809390
  - cman init: allow dlm hash table sizes to be tunable at startup
    Resolves: rhbz#836963


author: Marek Grac <mgrac@redhat.com> - 2.0.115-101
changelog:
  - new fence agent for IBM iPDU (SNMP)
    Resolves: rhbz#741985
  - fence agent can fail to login if eol is not set properly
    Resolves: rhbz#810949


author: Ryan O'Hara <rohara@redhat.com> - Version: 2.0.115-100
changelog:
  - fence_scsi: fix typos in debug messages
    Resolves: rhbz#674497
  - fence_scsi: remove limitations section from man page
    Resolves: rhbz#753839


author: Ryan O'Hara <rohara@redhat.com> - 2.0.115-98
changelog:
  - fence_scsi_test: add option for strict verification
    Resolves: rhbz#782919
  - fence_scsi_test: increment error count when reservation fails
    Resolves: rhbz#809481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-97
changelog:
  - fence_rhevm: Incorrect power status detected when VM status is not up/down
    Resolves: rhbz#786485


author: Marek Grac <mgrac@redhat.com> - 2.0.115-95
changelog:
  - fence_vmware_soap -o list doesn't expose proper virtual machine path for fencing
    Resolves: rhbz#715107


author: Marek Grac <mgrac@redhat.com> - 2.0.115-94
changelog:
  - fence_ipmilan will not parse args with passwd_script option in cluster.conf
    Resolves: rhbz#732773


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-93
changelog:
  - cman: Clean shutdown_con if the controlling process is killed.
    Resolves: rhbz#590101
  - qdisk: Fix man page example
    Resolves: rhbz#745536
  - cman: fix building of debuginfo package (enable -g)
    Resolves: rhbz#746599


author: Marek Grac <mgrac@redhat.com> - 2.0.115-90
changelog:
  - fence_rhevm needs to change "UP" status to "up" state as the REST-API has changed
    Resolves: rhbz#731167
  - fence_ipmilan should honor ipmilan's -L option
    Resolves: rhbz#726731


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-89
changelog:
  - cman: fix multicast address in cman.5 man page
    Resolves: rhbz#727492
  - cman: improve cman/qdisk interactions
    * cman: do better logging/error reports/checking of the quorum API usage
    * qdiskd: allow qdiskd to update device name in cman
    * qdiskd: perform better error checking at startup
    Resolves: rhbz#704243


author: Marek Grac <mgrac@redhat.com> - 2.0.115-88
changelog:
  - fence_bladecenter: Reboot operation did not work correctly with --missing-as-off
    Resolves: rhbz#689851
  - fence_drac5: Fix list support for Dell DRAC CMC
    Resolves: rhbz#718194
  - fence_drac5: drac5 firmware does not close ssh session correctly
    Resolves: rhbz#730634


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-86
changelog:
  - cman: do not free shutdown connection untill the very end to prevent
    spurious messages to be written to syslog
    Resolves: rhbz#727215


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-85
changelog:
  - fence_vmware_soap: Fix RHEL5-specific path issue
    (fence_vmware_soap_fix_rhel5_specific_path_issue.patch)
    Resolves: rhbz#717372


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-82
changelog:
  - fence_ipmilan: Correct return code for diag operation
    (fence_ipmilan_correct_return_code_for_diag_operation.patch)
    Ancillary fix for 678061
    Resolves: rhbz#678061


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-81
changelog:
  - cman: Don't increment on LEAVING->MEMBER transition
    (don_t_increment_on_leaving_>member_transition.patch)
    Resolves: rhbz#649533
  - cman: Clarify 'expected' option
    (clarify_expected_option.patch)
    Resolves: rhbz#688701


author: Marek Grac <mgrac@redhat.com> - 2.0.115-80
changelog:
  - fence agents: Fix problems with SSL support 
    (fence_cisco_ucs-fence_rhevm-Problems-with-SSL-support.patch)
    Resolves: rhbz#693395

  - fence_ipmilan: Operation monitor should return correct exit code
    (fence_ipmilan-returns-incorrect-status-on-monitor-op.patch)
    Resolves: rhbz#693427

  - fence_vmware_soap: New fence agent for VMWare using SOAP API
    (Add-support-for-UUID.patch)
    (fence_vmware_soap-New-fence-agent-for-VMWare-using-SOAP.patch)
    Resolves: rhbz#634567


author: Marek Grac <mgrac@redhat.com> - 2.0.115-79
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Fix-for-support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Marek Grac <mgrac@redhat.com> - 2.0.115-77
changelog:
  - fence_agents: Add support for sub-org to Cisco UCS fence agent
    (fence_cisco_ucs-Support-for-sub-organization.patch)
    Resolves: rhbz#678902


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-76
changelog:
  - fence-agents: Fence_rhevm needs to change "RUNNING" status to "UP" status as the REST-API has changed.
    (fence_rhevm_needs_to_change_running_status_to_up_status_as_the_rest_api_has_changed.patch)
    Resolves: rhbz#681670
  - fence_rhevm: Update URL to RHEV-M REST API
    (fence_rhevm_update_url_to_rhev_m_rest_api.patch)
    Resolves: rhbz#681676


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-75
changelog:
  - fence_ipmilan: Fix manual page to describe usage with HP iLO 3
    (fence_ipmilan_fix_manual_page_to_describe_usage_with_hp_ilo_3.patch)
    Resolves: rhbz#671089
  - qdiskd: Fix bad timer check - RHEL5
    (qdiskd_fix_bad_timer_check_rhel5.patch)
    Resolves: rhbz#679274


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 2.0.115-74
changelog:
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into_part2.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-73
changelog:
  - Add "diag" option to fence_ipmilan
    (fence_ipmilan-Add-diag-option-to-support-ipmitool.patch)
    Resolves: rhbz#678061
  - fence_wti: Unable to parse output when splitted into several screens
    (fence_wti-Unable-to-parse-output-when-splitted-into.patch)
    Resolves: rhbz#679160


author: Marek Grac <mgrac@redhat.com> - 2.0.115-72
changelog:
  - Improve error handling in RSA fence agent
    (fence_rsa-Better-error-handling.patch)
    Resolves: rhbz#678018
  - Automatic generation of manual pages
    (fence-agents-Automatic-generation-of-manual-pages.patch)
    (fence-agents-add-XSLT-template.patch)
    (library-Metadata-are-not-correct-if-agent-does-not-s.patch)
    Resolves: rhbz#488959


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-71
changelog:
  - Display the node's votes in cman_tool status
    (display_the_node_s_votes_in_cman_tool_status.patch)
    Resolves: rhbz#653508
  - cman: Fix cman_tool reporting with quorum disk
    (cman_fix_cman_tool_reporting_with_quorum_disk.patch)
    Resolves: rhbz#654894


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-70
changelog:
  - ccs: Allow ccs_tool to use alternate base ports
    (ccs_allow_ccs_tool_to_use_alternate_base_ports.patch)
    ccs: Update manual page for ccs_tool
    (ccs_update_manual_page_for_ccs_tool.patch)
    Resolves: rhbz#656427


author: Lon Hohberger <lhh@redhat.com> 2.0.115-69
changelog:
  - fence-agents: Add man pages for ucs, ifmib, rhevm
    (fence_agents_add_man_pages_for_ucs,_ifmib,_rhevm.patch)
    Resolves: rhbz#663808


author: Lon Hohberger <lhh@redhat.com> 2.0.115-67
changelog:
  - fence_scsi_test: add 'clear' action
    (fence_scsi_test_add_clear_action.patch)
    fence_scsi_test: document 'clear' action in man page.
    (fence_scsi_test_document_clear_action_in_man_page.patch)
    Resolves: rhbz#603838


author: Marek Grac <mgrac@redhat.com> 2.0.115-66
changelog:
  - cman: ownership of /var/log/cluster clobbers log files
    (fence_egenera_revert.patch)
    Resolves: rhbz#659090


author: Lon Hohberger <lhh@redhat.com> 2.0.115-64
changelog:
  - cman: Fix fail_recv_const length calculation
    (fix_fail_recv_const_length_calculation.patch)
    Resolves: rhbz#587080
  - Replace incorrect patch for "ccsd: Add error when bind fails" 
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996


author: Lon Hohberger <lhh@redhat.com> 2.0.115-63
changelog:
  - Updated patch for mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246


author: Lon Hohberger <lhh@redhat.com> 2.0.115-62
changelog:
  - fence_scsi_test: Add man page to Makefile.
    (fence_scsi_test_add_man_page_to_makefile.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-59
changelog:
  - fence_scsi_test: rewrite to more accurately test
    (fence_scsi_test_rewrite_to_more_accurately_test.patch)
    Resolves: rhbz#603838


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-58
changelog:
  - Disable fence_cisco_ucs & fence_rhevm since they depend
    on a package which is not available at this point.
    Related: rhbz#595385 rhbz#579859


author: Marek Grac <mgrac@redhat.com> - 2.0.115-56
changelog:
  - fence agents: fix build system for fence_rhevm
    (fence_rhevm-fix_build_system.patch)
    Resolves: rhbz#595385
  - fence agents: fix path to library
    (fence_cisco_ucs-library_path.patch)
    Resolves: rhbz#579859
  - fence agents: new fence agent for IF-MIB
    (fence_ifmib.patch)
    Resolves: rhbz#572863


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-55
changelog:
  - GFS2 mount fails incorrectly after correctly failed second-mount attempt
    (gfs2_mount_fails_incorrectly_after_correctly_failed_second_mount_attempt.patch)
    Resolves: rhbz#559735
  - cman: Make qdiskd heuristics time out
    (make_qdiskd_heuristics_time_out.patch)
    Resolves: rhbz#589266


author: Marek Grac <mgrac@redhat.com> - 2.0.115-54
changelog:
  - fence agents: New fence agent for RHEV-M REST API
    (fence_rhevm.patch)
    Resolves: rhbz#595385
  - fence agents: New fence agent for Cisco UCS
    (fence_cisco_ucs.patch)
    Resolves: rhbz#579859
  - New dependency added: python-pycurl


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-53
changelog:
  - Fence agents: Rename power-wait to power_wait and add
    help information, replacing previous patch.
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-52
changelog:
  - Fence agents: add power-wait to fence_ipmilan for iLO3 devices
    (fence_agents_add_power_wait_to_fence_ipmilan.patch)
    Resolves: rhbz#548575


author: David Teigland <teigland@redhat.com> - 2.0.115-51
changelog:
  - fenced: use post_join_delay after cluster join
    (fenced-use-post_join_delay-after-cluster-join.patch)
    Resolves: rhbz#575952
  - gfs_controld: fix plock owner syncing
    (gfs_controld-fix-plock-owner-syncing.patch)
    Resolves: rhbz#624156
  - gfs_controld: fix plock owner in unmount
    (gfs_controld-fix-plock-owner-in-unmount.patch)
    Resolves: rhbz#624554


author: David Teigland <teigland@redhat.com> - 2.0.115-50
changelog:
  - group_tool: list more than 64 groups
    (group_tool-list-more-than-64-groups.patch)
    Resolves: rhbz#561509


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-49
changelog:
  - cman: Change flags to be values instead of bitmasks
    (cman_change_flags_to_be_values_instead_of_bitmasks.patch)
    Resolves: rhbz#595394


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-48
changelog:
  - gfs_controld: set last_plock_time for ownership operations
    (gfs_controld_set_last_plock_time_for_ownership_operations.patch)
    Resolves: rhbz#578632


author: Marek Grac <mgrac@redhat.com> - 2.0.115-47
changelog:
  - Method to cause one node to delay fencing in a cluster
    (fencing-delay_1.patch)
    (fencing-delay_2.patch)
    (fencing-delay_3.patch)
    (fencing-delay_4.patch)
    Resolves: rhbz#613064


author: Marek Grac <mgrac@redhat.com> - 2.0.115-46
changelog:
  - Not all parameters appear in metadata
    (fencing_Not_all_parameters_in_metadata.patch)
    Resolves: rhbz#619034
  - make "port" a synonym of "module_name" for drac5 
    (fence_drac5-synonym-for_modulename.patch)
    Resolves: rhbz#619776
  - Return codes of fencing agent 
    (fence_correct_return_codes.patch)
    (fence_correct_return_codes-ipmilan.patch)
    Resolves: rhbz#583034


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-45
changelog:
  - qdisk: mkqdisk argument positioning
    (mkqdisk_argument_positioning.patch)
    Resolves: rhbz#555246
  - ccsd: Add error when bind fails
    (ccsd_add_error_when_bind_fails.patch)
    Resolves: rhbz#573996
  - fence-agents: Update fence_ack_manual man page
    (update_fence_ack_manual_man_page.patch)
    Resolves: rhbz#578604


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-44
changelog:
  - reorder patches
  - gfs_controld: Add extended information to 'group_tool dump plocks' (gfs)
    (add_extended_information_to_group_tool_dump_plocks_gfs.patch)
    Resolves: rhbz#514264
  - cman: make libcman /dev/zero fd close-on-exec
    (cman_make_libcman_dev_zero_fd_close_on_exec.patch)
    Resolves: rhbz#585218
  - cman: set fail_recv_const to 2500
    (cman_set_fail_recv_const_to_2500.patch)
    Resolves: rhbz#587080
  - cman: fix consensus calculation
    (cman_fix_consensus_calculation.patch)
    Resolves: rhbz#611391


author: Marek Grac <mgrac@redhat.com> 2.0.115-42
changelog:
  - fence_egenera: possible symlink vulnerability
  - fencing: Some fencing agents do not support login using keys
  - Resolves: rhbz#519682 rhbz#582334


author: Marek Grac <mgrac@redhat.com> 2.0.115-41
changelog:
  - fence_ilo: will throw exception if user does not 
    have power priviledges
  - Resolves: rhbz#576176


author: Marek Grac <mgrac@redhat.com> 2.0.115-40
changelog:
  - fence_rsb: force stdout close for fence_rsb
  - fence_rackswitch: fix warnings in build process
  - fence_rackswitch: should accept unknown parameters
  - fence_wti: add direct support for WTI VMR
  - fence_apc: fails for some port numbers 
  - Resolves: rhbz#583045 rhbz#578615 rhbz#606315 rhbz#607265


author: Marek Grac <mgrac@redhat.com> 2.0.115-39
changelog:
  - fence_vmware: fix building for fence_vmware_helper.pl
  - fence_wti: support non-default TCP ports for telnet/ssh
  - Resolves: rhbz#590304 rhbz#572996


author: Marek Grac <mgrac@redhat.com>
changelog:
  - fence_ipmilan: correct return codes + manual page info
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Lon Hohberger <lhh@redhat.com> - 2.0.115-37
changelog:
  - fencing: work around bad nss/nspr headers which contain
    non-ANSI prototypes
  - Resolves: rhbz#575157


author: Marek Grac <mgrac@redhat.com> - 2.0.115-36
changelog:
  - fencing: correct return codes (perl + python based agents)
  - fence_ilo: remove import of openSSL into fence agent
  - fencing: preliminary support for generating manual pages
  - Resolves: rhbz#583049 rhbz#583053
  - Resolves: rhbz#583034 rhbz#488959 (both need additional patches)


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-34
changelog:
  - fencing: Fix fence_snmp so it returns an error code if the passphrase
    is too short
  - Resolves: rhbz#573834


author: Marek Grac <mgrac@redhat.com> - 2.0.115-30
changelog:
  - fence_scsi does not accept unknown options on STDIN
  - fence_scsi man page contains invalid option
  - Resolves: rhbz#515731 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-26
changelog:
  - New fence agent for VMWare (TechPreview)
  - Fence agent for HP iLO2 MP
  - Fence agent for RSB ends with traceback
  - Resolves: rhbz#508722 rhbz#545054 rhbz#548577


author: Marek Grac <mgrac@redhat.com> - 2.0.115-25
changelog:
  - fence_egenera symlink attack vulnerability
  - Security feature for SNMP based agent: apc_snmp & ibmblade
  - Change default timeout values for various fence agents
  - Version is not shown in several fence agents
  - Resolves: rhbz#519682 rhbz#532922 rhbz#546340 rhbz#549124
  - Resolves: rhbz#549113


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-24
changelog:
  - cman: automatically configure consensus based on token timeout
  - Add readconfig & dumpconfig to fence_tool
  - Make groupd handle partition merges
  - Resolves: rhbz#544482 rhbz#546082 rhbz#514662


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-22
changelog:
  - scsi_reserve should always echo after failure
  - scsi_reserve should handle multipath with partitions
  - fence_scsi_test: add debug information
  - fence_scsi_test should not allow -c and -s options together
  - Resolves: rhbz#514260 rhbz#516625 rhbz#516763 rhbz#528832


author: Marek Grac <mgrac@redhat.com> - 2.0.115-19
changelog:
  - fence: Fencing fails when used without telnet or ssh
  - fence: APC changed product name (MasterSwitch -> Switched Rack PDU)
  - fence: fix invalid initalization introduced by retry-on option
  - Resolves: rhbz#512343 rhbz#447481


author: Marek Grac <mgrac@redhat.com> - 2.0.115-18
changelog:
  - fence: Broken device detection for DRAC3 ERA/O
  - fence: Fix case sensitivities in action parameter
  - Resolves: rhbz#489809 rhbz#528938


author: Marek Grac <mgrac@redhat.com> - 2.0.115-17
changelog:
  - fence: fencing_snmp fails on all operations & traceback fix
  - fence: accept unknown options from standard input
  - fence: fence_apc unable to obtain plug status
  - Resolves: rhbz#528916 rhbz#532916 rhbz#532920


author: Marek Grac <mgrac@redhat.com> - 2.0.115-16
changelog:
  - fence: timeout options added 
  - fence: better XML generation for metadata (needed for default values)
  - fence: better default timeout for bladecenter
  - fence: retry-on option used in iLO fence agent
  - fence: add missing-as-off option (missing blade/device is always OFF)
  - Resolves: rhbz#507514 rhbz#526806 rhbz#248006


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-15
changelog:
  - make qdiskd "master-wins" node work
  - make qdisk self-fence system if write errors take longer than interval*tko
  - Resolves: rhbz#511113 rhbz#372901


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-14
changelog:
  - Make service_cman.lcrso executable, so that RPM adds it to the debuginfo pkg
  - Resolves: rhbz#511346


author: Christine Caulfield <ccaulfie@redhat.com> - 2.0.115-11
changelog:
  - Fix fence_scsi, multipath and persistent reservations
  - scsi_reserve now handles failures
  - cman_tool leave remove reduces quorum when no services are connected
  - Resolves: rhbz#514260 rhbz#516625 rhbz#515446


author: Marek Grac <mgrac@redhat.com> - 2.0.115-4
changelog:
  - Add option 'list devices' for fencing agents
  - Add support for switching IPv4/IPv6
  - Fence agent ends with traceback if option is missing
  - Add option to set port for SSH/telnet
  - Resolves: rhbz#519697 rhbz#520458 rhbz#506928 rhbz#506928


author: Marek Grac <mgrac@redhat.com> - 2.0.115-3
changelog:
  - Force stdout close for fencing agents
  - Support for long options 
  - Resolves: rhbz#518622 rhbz#519670


author: Chris Feist <cfeist@redhat.com> - 2.0.114-1
changelog:
  - local variable 'verbose_filename' referenced before assignment has been fixed
  - RSA II fencing agent has been fixed.
  - Resolves: rhbz#493802 rhbz#514758


author: Chris Feist <cfeist@redhat.com> - 2.0.113-1
changelog:
  - Limitations with 2-node fence_scsi are now properly documented in the man
    page.
  - Resolves: rhbz#512998


author: Chris Feist <cfeist@redhat.cmo> - 2.0.106-1
changelog:
  - The lssyscfg command can take longer than the shell timeout which will
    cause fencing to fail, we now wait longer for the lssyscfg command to
    complete.
  - Resolves: rhbz#504705


author: Chris Feist <cfeist@redhat.com> - 2.0.104-1
changelog:
  - Broadcast communcations are now possible with cman
  - fence_lpar can now login to IVM systems
  - Resolves: rhbz#502674 rhbz#492808


author: Chris Feist <cfeist@redhat.com> - 2.0.103-1
changelog:
  - fence_apc no longer fails with a pexpect exception
  - symlink vulnerabilities in fance_apc_snmp were fixed
  - The virsh fencing agent was added.
  - Resolves: rhbz#496629 rhbz#498952 rhbz#501586


author: Chris Feist <cfeist@redhat.com> - 2.0.101-1
changelog:
  - The SCSI fence agent now verifies that sg_persist is installed properly.
  - The DRAC5 fencing agent now properly handles a modulename.
  - QDisk now logs warning messages if it appears it's I/O to shared storage
    is hung.
  - Resolves: rhbz#496724 rhbz#500450 rhbz#500567


author: Chris Feist <cfeist@redhat.com> - 2.0.100-1
changelog:
  - Support has been added for ePowerSwitch 8+ devices
  - cluster.conf files can now have more than 52 entries inside a block inside
    the <cman> block
  - The output of the group_tool dump sub commands are no longer NULL padded.
  - Using device="" instead of label="" no longer causes qdiskd to incorrectly
    exit
  - The IPMI fencing agent has been modified to timeout after 10 seconds.  It is
    also now possible to specify a different timeout with the '-t' option.
  - The IPMI fencing agent now allows punctuation in the password
  - Quickly starting and stopping the cman service no longer causes the cluster
    membership to become inconsistent across the cluster
  - An issue with lock syncing causing 'receive_own from ...' errors in syslog
    has been fixed
  - An issue which caused gfs_controld to segfault when mounting hundreds of
    filesystems has been fixed
  - The LPAR fencing agent now properly reports status when an LPAR is in
    Open Firmware
  - The APC SNMP fencing agent now properly recognizes outletStatusOn and
    outletStatusOff returns codes from the SNMP agent
  - WTI Fencing agent can now connect to fencing devices with no password
  - The rps-10 fencing agent now properly performs a reboot when run with no
    options.
  - The IPMI fencing agent now supports different cipher types with the '-C'
    option
  - Qdisk now properly scans devices and partitions
  - Added support for LPAR/HMC v3
  - cman now checks to see if a new node has state to prevent killing the first
    node during cluster setup
  - service qdiskd start now works properly
  - The McData fence agent now works properly with the Sphereon 4500 model
  - The Egenera fence agent can now specify an ssh login name
  - APC Fence agent works with non-admin accounts with firmware 3.5.x
  - fence_xvmd now tries two methods to reboot a virtual machine
  - Connections to openais are now allowed from unprivileged CPG clients with
    user and group of 'ais'
  - Support has been added for Cisco 9124/9134 SAN switches
  - groupd no longer allows the default fence domain to be '0' which would cause
    rgmanager to hang
  - The RSA fence agent now supports ssh enabled RSA II devices
  - DRAC fence agent now works with iDRAC on the Dell M600 Blade Chassis
  - fence_drac5 now shows proper usage instructions
  - cman no longer uses the wrong node name when getnameinfo() fails
  - The SCSI fence agent now verifies that sg_persist is installed properly
  - Resolves: rhbz#467112 rhbz#468966 rhbz#470318 rhbz#276541 rhbz#447964 rhbz#472786 rhbz#474163 rhbz#480401 rhbz#481566 rhbz#484095 rhbz#481664 rhbz#322291 rhbz#447497 rhbz#484956 rhbz#485700 rhbz#485026 rhbz#485199 rhbz#470983 rhbz#488958 rhbz#487501 rhbz#491640 rhbz#480178 rhbz#485469 rhbz#480836 rhbz#493207 rhbz#493802 rhbz#462390 rhbz#498329 rhbz#488565 rhbz#499871


author: Chris Feist <cfeist@redhat.com> - 2.0.96-1
changelog:
  - WTI fencing agent no longer powers off/on power if it is unable to get
    status.
  - Resolves: rhbz#468904


author: Chris Feist <cfeist@redhat.com> - 2.0.89-1
changelog:
  - Fixed issue with fence_apc failing with a pexpect exception.
  - Added fence agent for VMware ESX.
  - Additional logging information has been added by fence_scsi.
  - groupd now detects dead daemons and removes their nodes from the cluster.
  - A network interface selection option has been added for fence_xvmd.
  - Resolves: rhbz#460054 rhbz#251048 rhbz#460909 rhbz#318571 rhbz#457104


author: Chris Feist <cfeist@redhat.com> - 2.0.88-1
changelog:
  - Fix cman_tool nodes -a.
  - nolock gfs filesystems are ignored in the groupd startup.
  - skip_undefined option added for fenced.
  - groupd improved to better handle upgrades.
  - man pages for fence agents have been updated.
  - LPAR/HMC fence agent updated to fix state detection.
  - New option added to fence_tool to delay before join.
  - fence_tool -m option has been added for 2 node clusters.
  - group_tool ls is now scriptable.
  - Fixed qdiskd file descriptor leak.
  - qdiskd can no longer updated cman if the disk is unavailable.
  - qdisk no longer freezes cluster when FC cable is unplugged
  - Resolves: rhbz#454401 rhbz#315741 rhbz#459127 rhbz#457104 rhbz#448043 rhbz#460190 rhbz#460190 rhbz#459754 rhbz#459678 rhbz#460645 rhbz#460937 rhbz#442541


author: Chris Feist <cfeist@redhat.com> - 2.0.87-3
changelog:
  - An option to the init script has been added to prevent joining to the fence
    domain.
  - stop_cman="1" now works if heuristics fail during initialization.
  - qdiskd now works with block devices which are not in /proc/partitions
  - Quorum device info can now be displayed with 'cman_tool status'.
  - A dirty node is now prevented from joining the cman cluster.
  - A bug which caused "Node X is undead" error messages to be printed is fixed.
  - When groupd starts up it now ignores nolock file systems.
  - cman is now only notified that a fence has occured when all devices have completed
    successfully.
  - plocks are now read from dlm or lock_dlm.
  - Support for a 24-port APC fencing device has been added.
  - gfs_controld now ignores the write(2) return value on plock devices.
  - Several infinite loops were fixed.
  - gfs_controld now retries recovery for a withdrawn journal.
  - apc_snmp fence agent has been added.
  - Resolves: rhbz#455598 rhbz#455865 rhbz#362031 rhbz#443358 rhbz#442541 rhbz#315741 rhbz#456403 rhbz#450169 rhbz#444615 rhbz#446128 rhbz#444529 rhbz#442451 rhbz#438905


author: Chris Feist <cfeist@redhat.com> - 2.0.81-1
changelog:
  - cman now starts correctly when additional params are given to network-bridge 
  - fencde admin override now updates cman
  - qdisk master abdication now works properly
  - groupd no longer processes messages from dead nodes
  - dlm no longer complains about closing a connection to node 0 when shutting
    down qdisk
  - Resolves: rhbz#434790 rhbz#435189 rhbz#430264 rhbz#436984 rhbz#437496 rhbz#315711


author: Chris Feist <cfeist@redhat.com> - 2.0.80-1
changelog:
  - gfs_tool now recognizes GFS files sytems on ppc
  - Fixed alignment problem with ppc64
  - Prevent "reservation conflict" messages when scsi_reserve starts.
  - Leave the fence domain if scsi_reserve fails to register with any device.
  - Improve logging in scsi_reserve script.
  - Use "locking_type = 0" for all lvm commands (ie. vgs).
  - Fix SCSI reservations scripts to handle LVM mirrors and stripes.
  - Not an error if fence_scsi attempts to remove a non-existent key from a
    device.
  - Resolves: rhbz#429633 rhbz#429546 rhbz#373491 rhbz#373511 rhbz#373541 rhbz#373571 rhbz#429033


author: Chris Feist <cfeist@redhat.com> - 2.0.79-1
changelog:
  - Dumping of debug logs from daemons has been improved
  - Plock performance has been improved
  - ccs_tool now returns the proper exit status
  - ccs lookup functions now recognize alternative hostnames better
  - ccs_connect now fails properly when a non-root user calls it
  - Endian issues which caused problems on multi-arch clusters were fixed
  - Possible NULL pointer dereferences in cman were fixed
  - Quorum is now properly reduced when a node leaves using
    "cman_tool leave remove"
  - Resolves: rhbz#317181 rhbz#359271 rhbz#404451 rhbz#249781 rhbz#323711 rhbz#289501 rhbz#418741 rhbz#267441 rhbz#271701


author: Chris Feist <cfeist@redhat.com> - 2.0.75-1
changelog:
  - Potential NULL pointer dereferences were removed.
  - Correctly reduce quorum when a node leaves using "cman_tool leave remove"
  - Quorum is now recalculated when cman has the new nodes expected_votes.
  - Updated cman_tool man page
  - Resolves: rhbz#323931 rhbz#317561 rhbz#327721


author: Chris Feist <cfeist@redhat.com> - 2.0.71-1
changelog:
  - A memory leak was fixed in fence_xvmd.
  - fence_egenera script no longer will fence a node during a crash dump.
  - Resolves: rhbz#251358 rhbz#250152


author: Chris Feist <cfeist@redhat.com> - 2.0.44-1
changelog:
  - New upstream sources.
  - Resolves: rhbz#213878 rhbz#216902 rhbz#213763 rhbz#217436
  - Resolves: rhbz#217460 rhbz#211836 rhbz#211918


author: Ian Kent <ikent@redhat.com> 5:6.1.5-5
changelog:
  - bz964133 - amd command ignores -noacl mount option in RHEL 5
    - fix amd ignores noacl mount option.
  - quiet the BuildPrereq and Prereq depricated warnings.
  - Resolves: rhbz#964133


author: Karel Zak <kzak@redhat.com> 5:6.1.5-4.1
changelog:
  - fix #219437 - amd: stopping service will pop up an error dialog in 
                  system-config-services app.
  - fix build (m4 stuff) of the package (UTS_RELEASE macro has been removed 
                  from the latest kernel-headers)


author: Peter Vrabec <pvrabec@redhat.com> 5:6.1.5-2
changelog:
  - force to use HAVE_LINUX_NFS_MOUNT_H macro, because linux/nfs_mount.h 
    check in configure fails on s390x


author: Peter Vrabec <pvrabec@redhat.com> 6.1.2.1-1
changelog:
  - upgrade
  - fix amd shutdown(#158268,#54246) 	
  - enhancement, /host/localhost and /host/<localmachinename> 
    are symlinks to / (#11843)


author: Peter Vrabec <pvrabec@redhat.com> 6.0.9-12
changelog:
  - fix the am-utils part of #143118 by implementing the util-linux
    mtab locking scheme into am-utils automounter, patch and testing
    by Daniel Berrange <berrange@redhat.com>, improved locking
    algorithm by <prockai@redhat.com> (which allows for several 
    hundred or even thousand of parallel makes to finish 
    successfully and keep /etc/mtab in sync with /proc/mounts  as well)


author: Nalin Dahyabhai <nalin@redhat.com> 6.0.9-1
changelog:
  - update to 6.0.9
  - disable RPM's internal dependency calculation so that we can filter out
    dependencies which are expected to be filled in by the site administrator


author: Nalin Dahyabhai <nalin@redhat.com> 6.0.7-1
changelog:
  - update to 6.0.7, fixing EIO on access bugs (#53251)
  - back out nfs3 patch; no longer needed for current kernels
  - don't explicitly strip binaries; let the buildroot policies handle it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add BuildPrereq: db1-devel (#44987)
  - use FHS macros
  - return error codes correctly from init script (#44597)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add ldconfig to %postun
  - chuck the hesiod patch -- new bind-utils doesn't have the support for it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - only create /var/lock/subsys/amd if startup succeeds
  - revamp shutdown procedure to minimize time spent just spinning
  - change initscripts dependency to /etc/init.d


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 6.0.3
  - enhance init script to be more wait4amd2die-like
  - make default map type to be file (#9185)
  - get rid of the kludges


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - remove the noldap patch
  - add amd.net file as the default config map file
  - change the config file to teh new config file format instead of a
    simple map file name.
  - try to avoid some damage with a new %pre script
  - prereq grep now
  - modify the init file so it calls amd -F /etc/amd.conf now


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el5_9.2
changelog:
  - e1000: discard packets that are too long if !SBP and !LPE (rhbz 910843)
  - e1000: discard oversized packets based on SBP|LPE (rhbz 910843)


author: Petr Lautrbach <plautrba@redhat.com> 8.45.39-1
changelog:
  - suppress remove error message during boot (#679998)
  - fix logic error with removing arp_ip_target (#745681)


author: Harald Hoyer <harald@redhat.com> 8.45.36-1
changelog:
  - add net_log
  Resolves: rhbz#507515
  - do not umount mount points with nfs in the path
  Resolves: rhbz#703203
  - remove /var/run/subsys/rhsm on startup
  Resolves: rhbz#705236


author: Harald Hoyer <harald@redhat.com> 8.45.35-1
changelog:
  - fix VLAN configs with non-numeric interface names
  Resolves: rhbz#462095
  - do not ignore IPv6 aliases
  Resolves: rhbz#612877
  - support vlan tag 0
  Resolves: rhbz#624704
  - clarify comment of checkpid()
  Resolves: rhbz#637176
  - specify DEVICETYPE for InfiniBand
  Resolves: rhbz#648524
  - fix grep in lang.csh
  Resolves: rhbz#649995
  - support "#" in interface names
  Resolves: rhbz#664091
  - fixed sysctl calls fail with VLANs
  Resolves: rhbz#665601
  - fixed loop for switched MACs
  Resolves: rhbz#669728
  - fixed dmraid output parsing
  Resolves: rhbz#671386
  - fixed MASTER in double quotes
  Resolves: rhbz#674221
  - don't do force/lazy umount for the first nfs umount
  Resolves: rhbz#676851 rhbz#687890
  - fixed DHCPv6 if no IPv4 address configured
  Resolves: rhbz#684909
  - disable link checking when PERSISTENT_DHCLIENT is set
  Resolves: rhbz#685038
  - no more noisy output for iscsid check during shutdown or reboot
  Resolves: rhbz#687849
  - clarified mount option in netfs
  Resolves: rhbz#689898


author: Harald Hoyer <harald@redhat.com> 8.45.34-1
changelog:
  - if $LANG is set, don't override it
  Resolves: rhbz#692893
  - fix arp_ip_target for ifup/ifdown
  Resolves: rhbz#604669
  - add udev rules for OSX Devices (1731/2)
  Resolves: rhbz#653621


author: Harald Hoyer <harald@redhat.com> 8.45.31-1
changelog:
  - do not killall racoon with the full path
  Resolves: rhbz#567295
  - fixed the interactive startup keys in translation
  Resolves: rhbz#566579
  - do not clear the environment for daemon()
  Resolves: rhbz#564093
  - call unicode_start with $UNIMAP instead of $SYSFONTACM
  Resolves: rhbz#557089
  - fixed the network interface name grep in checks
  Resolves: rhbz#538863
  - make /var/lib/xend a bind mount for read-only root systems
  Resolves: rhbz#526046
  - do not try to activate individual dmraid subsets
  Resolves: rhbz#524356
  - create /var/run/utmp* /var/log/wtmp* with the correct selinux context
  Resolves: rhbz#519748
  - load the bonding driver, if bonding options are present in the ifcfg file
  Resolves: rhbz#516569
  - run quotacheck after the local filesystems have been mounted
  Resolves: rhbz#499207
  - add DHCP_HOSTNAME documentation to sysconfig.txt
  Resolves: rhbz#498052
  - remove /var/run/dovecot/* also (not only /var/run/dovecot/*/*)
  Resolves: rhbz#492994


author: Harald Hoyer <harald@redhat.com> 8.45.30-2
changelog:
  - fix raw path in initscript (#472891)
  - remove deprecation comments (#472891)
  - applied missing ipcalc patch for IPv6 address validation (#464268)
  - Resolves: rhbz#472891 rhbz#464268


author: Phil Knirsch <pknirsch@redhat.com> 8.45.29-3
changelog:
  - Final fixes for IP address validation (#464268)
  - Added required 54-cu3088-fix.rules udev rules file (#475721)
  - Resolves: #464268,#475721


author: Harald Hoyer <harald@redhat.com> 8.45.28-1
changelog:
  - fixed "Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Resolves: rhbz#475006


author: Harald Hoyer <harald@redhat.com> 8.45.26-1
changelog:
  - add md activation before lvm/device-mapper in netfs (#480627)
  - fixed SUBCHANNEL grep for s390
  - Move the bridge member handling later in the ifdown sequence (#463325, Sean E. Millichamp <sean@bruenor.org>)
  - Allow changing of VLAN type even if the module is already loaded. (#495053, <pietro@bertera.it>)
  - add gfs2 to rc.sysinit mount (#494963)
  - support ETHTOOL_OPTS on bridge devices (#493255, <bbaetz@acm.org>)
  - Add vlan support for s390 HSI interfaces. (#490584)
  - Don't re-init an existing device, it causes errors. (#484411, <jpayne@redhat.com>)
  - Remove arp_ip_target on ifdown for bonding devices. (#483711)
  - Don't unmount the nfsd filesystem when unmounting nfs client mounts. (#481794, <sprabhu@redhat.com>)
  - Bring up ipsec interfaces last. (#481733)
  - Break deadlock by explicitly handling alias for CTC and IUCV (#475721)
  - Determine reboot/halt via existing INIT_HALT environment variable. (#475006)
  - Add some docs on BONDING_OPTS. (#472480)
  - Don't say that we're shutting off crypto if we aren't actually doing it. (#471944)
  - remove empty bridges (#463325)
  - Add a address check capability for IPv4 and IPv6 addresses. (#464268)
  - fail if HWADDR specified in ifcfg is not present in the system (#487718)
  - fix ifdown of vlan iface which is a bridge member (#481557)
  - add proper return codes for /etc/init.d/network (#481002)
  - fixed brigde setup (bug #463014)
  - Add an option for consoletype to always return 0. (#453798, <notting@redhat.com>)
  - Use the pidfile before running pidof in status(). (#440658)
  - Allow passing of arguments to dhcp6c (#437949, <pekkas@netcore.fi>)
  - Remove /.suspended as well on boot (#270861)
  - Allow use of either ESP only or AH only (#251494, <stijn.tintel@x-tend.be>)
  - Resolves: rhbz#251494,rhbz#270861,rhbz#437949,rhbz#440658,rhbz#453798,
              rhbz#463014,rhbz#463325,rhbz#464268,rhbz#471944,rhbz#472480,
              rhbz#475006,rhbz#475721,rhbz#475770,rhbz#480627,rhbz#481002,
              rhbz#481557,rhbz#481733,rhbz#481794,rhbz#483711,rhbz#484411,
              rhbz#487718,rhbz#490584,rhbz#493255,rhbz#494963,rhbz#495053


author: Harald Hoyer <harald@redhat.com> 8.45.22-1
changelog:
  - refined SUBCHANNEL grep statement (bug #459044)
  - blkid has a -l option to pick a single device. Use it. (#470027)
  - don't mkswap on halt (#469823)
  - fixed bonding arp_ip_target handling (#467954) (Darcy Sherwood)
  - Resolves: rhbz#459044, rhbz#470027, rhbz#469823, rhbz#467954


author: Harald Hoyer <harald@redhat.com> 8.45.20-1
changelog:
  - changes to init scripts to better support stateless (#433702, <ahecox@redhat.com>)
  - call logger with full path (#447928, Mihai Vintila)
  - add a udevsettle before mounting _netdev devices (#452866, <bmr@redhat.com>)
  - reduce device initialization overhead for ccw devices (#437110, Glen Johnson)
  - Resolves: rhbz#433702 rhbz#452866 rhbz#447928 rhbz#437110


author: Bill Nottingham <notting@redhat.com> 8.45.19.EL-1
changelog:
  - also skip network shutdown if there is a '_rnetdev' root device (part of #435358, <pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com>, Harald Hoyer <harald@redhat.com> 8.45.18.EL-1
changelog:
  - IKE_DHGROUP is now an option for IPsec configuration files, which allows
  to set the dh group used during PHASE 1 of IPsec SA (#251506)
  - arp_ip_target can now be used with a comma seperated IP list in BONDING_OPTS (#288151)
  - genhostid now generates only 32 bit hostids on 64 bit systems (#306811)
  - the check for the need of remounting the root file system read-writable
  is now refined (#334171)
  - quoted SUBCHANNELS and HWADDR options in network configuration files are
  now handled properly (#351291)
  - support for resuming from an encrypted swap has been added (#360071)
  - rc.sysinit now executes the proper configuration tools, if /.unconfigured
  is present (#426372)
  - Resolves: rhbz#251506 rhbz#288151 rhbz#306811 rhbz#334171 rhbz#351291 rhbz#360071 rhbz#426372


author: Bill Nottingham <notting@redhat.com> 8.45.16.EL-1
changelog:
  - init.d/network: add support for VLAN_PLUS_VID_NO_PAD vlans (#229285)
  - network-functions: fix logic error in install_bonding_driver (#229643)
  - add init script for netconsole (#223742)
  - ifup-eth: set 'primary' later for bonding devices (#236897, <agospoda@redhat.com>)
  - init.d/halt: don't shut down the network in kexec (#223932, <mchristi@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45.10.EL-1
changelog:
  - add a step to rename any temporarily renamed devices (#208740, #204803, #214817)
  - rc.sysinit: fix reversed dmraid test (#216490)
  - translation updates (#216097)
  - don't automatically reload modules on module reomvals (#211474)
  - don't unmount network file systems (#217625)


author: Bill Nottingham <notting@redhat.com> 8.45.7.EL-1
changelog:
  - fix gdm in CJKI (#209579, #213196)
  - rename_device: correctly ignore backup interface files
  - mount tmpfs with -n (#213132)


author: Bill Nottingham <notting@redhat.com> 8.45.5.EL-1
changelog:
  - fix handling of undisplayable locales on the console some more (#209579, #212438)
  - use SUBCHANNEL as the primary identifier for s390 networking (#204803)


author: Bill Nottingham <notting@redhat.com> 8.45.4.EL-1
changelog:
  - don't set CJKI as the language on virtual consoles (#209579)
  - use dmraid.static in rc.sysinit (#211297)
  - use sysfs interface for bonding, so multiple bonds work again (#202443, <agospoda@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.45.3.EL-1
changelog:
  - remove early-login code
  - Handle "nodmraid" and "nompath" command line options (#209377, <pjones@redhat.com>)
  - translation updates: da, fi, zh_CN, ja, ml, ms
  - restorecon on moved dhclient lease file (#209853)
  - set different limits for shmmax, etc. based on arch (#184820)


author: Bill Nottingham <notting@redhat.com> 8.45-1
changelog:
  - lang.csh/lang.sh - do *not* stty iutf8; too much chaos with SIGTTOU
    (reverts: #186961; fixes #209469)
  - translation updates: ms


author: Bill Nottingham <notting@redhat.com> 8.44-1
changelog:
  - separate tmpfs-usage for state from readonly-root
  - set keymap correctly in non-utf8 locale (#167363)
  - setsysfont: run unicode_stop if in non-unicode locale
  - lang.csh/lang.sh: set iutf8 if appropriate (#186961)
  - lang.csh/lang.sh: handle non-utf8 locales correctly (#200100)
  - rc.sysinit: redirect stderr from setsysfont (#209204, indirectly)
  - rwtab: fix iscsi file location (#208864)
  - translation updates: el, da, as, or
  - fix stateless updates (#206331, <law@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.43-1
changelog:
  - move ccwgroup initialization to a udev rule (should fix #199139,
    - init.d/functions: don't write to gdmfifo
  - remove unused-since-RHL-7 consolechars code, update docs (#206106)
  - stateless updates (#206331, <law@redhat.com>)
  - translation updates (el, ms, hr, sl)


author: Bill Nottingham <notting@redhat.com> 8.42-1
changelog:
  - run rc.sysinit, /etc/rc in monitor mode (part of #184340)
  - use a better check for 'native' services (#190989, #110761, adapted
    from <matthias@rpmforge.net>)


author: Bill Nottingham <notting@redhat.com> 8.41-1
changelog:
  - fix network ipv6 hang (#207137, others)
  - rc.sysinit: change blkid.tab path to /etc/blkid/blkid.tab
  - rename_device: reset DEVPATH also when renaming (#206884, <phil@fifi.org>)
  - sysconfig.txt: clarify onboot/onparent usage


author: Bill Nottingham <notting@redhat.com> 8.40-1
changelog:
  - translation updates
  - rename_device: use '__tmpXXXX' instead of 'devXXXX' as a temporary device
    name to avoid any realistic namespace clashes
  - rc.sysinit: set default affinity if specified on commandline (#203359)
  - always pass path to '.' (#206035)
  - run setsysfont, loadkeys always when /dev/tty{0,1} exist (#150769)
  - allow going to a shell when system is shut down cleanly (from <dwalsh@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.39-1
changelog:
  - translation updates
  - Handle partitions on multipath/dmraid better (<pjones@redhat.com>)
  - make /dev/mapper/control ourselves (<pjones@redhat.com>)
  - init.d/network: simplify 'status' call
  - fix actual 169.254 networks (#203591)
  - rc.sysinit: don't run vgscan (#191879)
  - init.d/halt: don't umount /dev/root<foo> (<oblin@mandriva.com>)
  - rc.sysinit: catch more dmraid errors (#200683)
  - support 'tmp' option in /etc/crypttab (#201382, <mitr@redhat.com>,
    <lv@lekv.de>)
  - IPv6 updates (<pb@bieringer.de>, includes a fix for #143452)


author: Bill Nottingham <notting@redhat.com> 8.38-1
changelog:
  - translation updates
  - bring down bonding slaves on ifdown (#199706)
  - support LINKDELAY for dhcp (#191137)
  - netfs: run multipath on netdev devices (#180977)
  - halt: use /proc/mounts instead of /etc/mtab (#198426, <mitr@redhat.com>)
  - rc.sysinit: fix getkey race (#191453, <mitr@redhat.com>)
  - spec cleanups (#188614, <kloczek@rudy.mif.pg.gda.pl>)
  - support aliases on vlan (#193133, <mitr@redhat.com>)
  - clean up ifcfg file handling (<mitr@redhat.com>, <michal@harddata.com>)
  - GRE and IPIP tunnel support (#168990, <mitr@redhat.com>,
    <razvan.vilt@linux360.ro>, <aaron.hope@unh.edu>, <sean@enertronllc.com>)
  - rc.sysinit: don't format encrypted swap always (#127378)
  - don't try to add routes to alias devices (#199825, #195656)


author: Bill Nottingham <notting@redhat.com> 8.36-1
changelog:
  - rework automatic swapon - only run if AUTOSWAP=yes, and fix errors
    (#198695, #196179, #196208)
  - redo single so it starts last in runlevel 1, and doesn't kill/start
    services itself
  - add configurable delay for killproc() (#198429, <jorton@redhat.com>)
  - fix loop in rename_device (#199242, <markmc@redhat.com>)
  - rc.sysinit: stateless updates (#197972, <law@redhat.com>)
  - support for copying dhcp leases from initramfs (#198601, <markmc@redhat.com>)
  - readonly-root: SELinux works now in the kernel, allow it
  - init.d/network: don't bring down network if root is on a network device
  - init.d/halt: don't use -i to halt; causes problems with iscsi
  - add support for routing rule-$device (#132252, <mitr@redhat.com>)
  - fix rhgb output (#192604, <tonynelson@georgeanelson.com>)
  - fix crypttab options for LUKS (#197656, <mitr@redhat.com>)
  - ipsec: various fixes & new features (#150682, #168972, <mitr@redhat.com>, <alex@milivojevic.org>)
  - ipsec: add check for IKE_METHOD (#197576, <john_smyth@mail.ru>)
  - rename_device: ignore alias devices, fix race (#186355)
  - ifup/ifdown: don't mark as %config
  - rwtab: some additions/cleanup


author: Bill Nottingham <notting@redhat.com> 8.35-1
changelog:
  - readonly root enhancments (modified from <law@redhat.com>, #193164)
  - encrypted swap, non-root filesystem support (#127378, <mitr@redhat.com, <redhat@flyn.org>)
  - clarify killproc usage (#193711, <mitr@redhat.com>)
  - document BRIDGE= (#192576, <mitr@redhat.com>)
  - rc.sysinit: allow for sulogin instead of automatic relabeling (<dwalsh@rehdat.com>)


author: Bill Nottingham <notting@redhat.com> 8.34-1
changelog:
  - link glib2 dynamically now that it's in /lib, conflict with older
    versions
  - handle cups specially when cleaning /var (#189168)
  - remove ifdown-aliases (<mitr@redhat.com>)
  - ifup-ipsec: fix key handling when only one of AH or ESP is used
    (#166257, <mituc@iasi.rdsnet.ro>)
  - IPv6 updates, including RFC 3041 support (<pb@bieringer.de>)
  - routing fixes, add METRIC support for default routes (#124045, <mitr@redhat.com>)
  - fix handling of mount points with white space (#186713, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.33-1
changelog:
  - support for readonly root
  - rc.sysinit: remove call to zfcpconf.sh - that should be udev rules
  - ifup*: add NETWORKDELAY and LINKDELAY (#176851, <mitr@redhat.com>)
  - rc.sysinit: remove obsolete initrd code (<pjones@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.32-1
changelog:
  - netfs: fix redirect (#187505)
  - rc.sysinit add forcequotacheck (#168118, <mitr@redhat.com>)
  - functions/pidof: various fixes (#182623, others <mitr@redhat.com>)
  - add support for DHCP on bridges (#125259, <mitr@redhat.com>,
    anders@kaseorg.com>)
  - rc.sysinit: use pidof, not killall (#185429, <pjones@redhat.com>)
  - ppp fixes (#129195, #163950, #92023, <mitr@redhat.com>, <avi@argo.co.il>)
  - ifup/ifdown: unset $WINDOW (#174336, <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.30-1
changelog:
  - hotplug: don't cause modules to be reloaded on ifdown/rmmod (#179809)
  - fix endless loops in ifup/ifdown (#177792, #182466)
  - fix enabling of enforcing SELinux mode after relabel (#181893)
  - remove debugging code from ifup-bnep
  - add /proc, /sys mounting back to rc.sysinit
    Note: booting without an initrd is deprecated
  - translation updates


author: Bill Nottingham <notting@redhat.com> 8.28-1
changelog:
  - kill nash-hotplug before starting udev (<pjones@redhat.com>)
  - silence warnings on /dev/pts remount (<pjones@redhat.com>)
  - more translation updates


author: Bill Nottingham <notting@redhat.com> 8.27-1
changelog:
  - translation updates
  - lang.sh: revert fix for #176832, it's broken
  - ifup-aliases fixes (<pjones@redhat.com>,<mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.26-1
changelog:
  - revert "rc.sysinit: don't mount usbfs, libusb no longer uses it" change
  - add some ugly hacks to make sure net hotplug doesn't run after unclean
    shutdown (#177795)
  - don't mount /sys and /proc in rc.sysinit - the initrd already does
    (<pjones@redhat.com>)
  - halt: try to unmount tmpfs filesystems before swapoff (#174000,
    <mitr@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.22-1
changelog:
  - remove references to /usr/X11R6/bin (#177938)
  - rc.sysinit: fix SELinux message formatting (#178532)
  - rc.sysinit: clean cvs as well (#178539, <ville.skytta@iki.fi>)
  - init.d/halt: move halt.local so that it runs before /  is remounted r/o (#179314)
  - rc.sysinit: don't activate already active dmraids (<pjones@redhat.com>)
  - rc.sysinit: don't mount usbfs, libusb no longer uses it
  - init.d/functions: Add -p to status() (#134363, <mitr@redhat.com>)
  - init.d/functions: Separate /var/run/*.pid handling and pidof calls
    to private functions (#63440, <mitr@redhat.com>)
  - init.d/functions: update for current LSB, including -p pidfile
    (#99325, #134363, <mitr@redhat.com>, <tobias.burnus@physik.fu-berlin.de>)
  - getkey: various cleanups, add man page (#54481, <mitr@redhat.com>)
  - lang.sh: don't always call consoletype (<laroche@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 8.21-1
changelog:
  - move handling of network hotplug events here, add appropriate udev
    rules, obsolete hotplug
  - get rid of some path lookups (#178321, <mclasen@redhat.com>)
  - get hwaddrs from sysfs as opposed to ip | sed
  - translation updates
  - lang.sh: don't run unicode_start for subshells (#176832)
  - halt: ignore sysfs but not /sys<otherstuff> (#177612, <bnocera@redhat.com>)
  - add service(8) man page (#44857) <mitr@redhat.com>


author: Bill Nottingham <notting@redhat.com> 8.19-1
changelog:
  - Require syslog, for alternate implementations thereof (#172885)
  - Fix fsck invocation for weeding out netdev devices (#175803)


author: Bill Nottingham <notting@redhat.com> 8.17-1
changelog:
  - make sure corefile limiting works for user processes as well
    (#166511, <ville.skytta@iki.fi>)
  - ifup-routes: handle no EOF in the route file (#156972)
  - rc.sysinit: tweak mesage (#156972)
  - ifdown-eth: clean up error message (#135167)
  - rc.sysinit: call kpartx on multipath devices (#160227)
  - ifup-eth: move wireless options before bridge options (#122801)
  - ifup-wireless: silence error (#90601)
  - init.d/functions: change translated string (#54682)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - kmodule: don't probe for uninteresting devices. speeds things up
  - network-functions: deal with broken networks better (#168947)
  - rc.sysinit: automatically reboot if labels are really out of date
    (<dwalsh@redhat.com>)
  - network-functions: throw out nameif error messages
  - rc.sysinit: use multipath.static (#168321)
  - rc.sysinit: use ignorelocking (#168195)


author: Bill Nottingham <notting@redhat.com> 8.12-1
changelog:
  - ifup-eth: fix interface renaming (#158774)
  - rc.sysinit: use modprobe, not insmod (#159120, <tmus@tmus.dk>)
  - remove workaround for the fonts-not-initialized-on-secondary-consoles
    problem (fixed in 2.6.12-rc4 and later)
  - setsysfont: correctly bracket systfontacm (#159706)
  - rc.sysinit: always use udevsend, even if no modules (#160987)
  - ifdown-aliases: add 'cd' to the proper dir (#161170)
  - add diskdump restore support (<tuchida@redhat.com>),
    conflict with appropriate diskdumputils
  - rc.sysinit: dmraid/multipath support
    - remove LVM1 support
  - init.d/functions: handle odd quoting in args (#161316, <stransky@redhat.com>)
  - ifup-wireless: set rate in quotes (#163123)
  - handle lvm & fsck for network block devices (#148764,
    <alewis@redhat.com>)
  - initlog: fix invalid free calls,  (#165033), (#163973,<dwalsh@redhat.com>)
  - sysconfig.txt: remove hdparm docs, since the code isn't there (#162962)
  - updated translations: ms, ja, ko, et, zh_CN, zh_TW, sr, ar


author: Bill Nottingham <notting@redhat.com> 8.11-1
changelog:
  - fix mis-bringup of interfaces due to accidentally matched HWADDR
    (a.k.a. ONBOOT=no not working) (#153669, #157252)
  - support automatic relabeling later if rebooted w/o SELinux
    (<dwalsh@redhat.com>)
  - rc.sysinit: fix fixfiles invocation (#157182)
  - btmp should be 0600 (#156900)
  - translation updates: fr, bg, ru, mk, pa, es


author: Bill Nottingham <notting@redhat.com> 8.09-1
changelog:
  - rc.sysinit: clean up screen sockets (#155969)
  - functions: use pidof -c in various functions
  - ifup-ppp: fix static routes with ppp demand dialing (#20142,
    <ohrn+redhat@chalmers.se>)
  - add btmp support (#155537)
  - don't send dhcp hostname (revert of fix for #149667)
  - more early-login modifications (<mclasen@redhat.com>)
  - functions: fix echo (#155270)


author: Bill Nottingham <notting@redhat.com> 8.08-1
changelog:
  - update translation base
  - automatically send hostname for DHCP if it's available and not
    overridden (#149667)
  - load user-defined module scripts from /etc/sysconfig/modules at
    boot (#123927)
  - halt: reverse sort the mount list, avoiding errors
    (#147254, <jamesodhunt@hotmail.com>)
  - ifup-wireless: add SECURITYMODE (#145407)
  - network-functions: don't error out if hotplug doesn't exist (#140008)
  - ifup: always return errors on trying to bring up nonexistent devices (#131461)
  - ifup: fix error message (#143674)
  - rc.sysinit: add a autorelabel boot target (#154496)
  - prefdm: if something else is specified as $DISPLAYMANAGER, try that (#147304)
  - remove support for the old firewall type
  - network: optimize some (#138557, <drepper@redhat.com>)
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - gdm early-login support (adapted from <rstrode@redhat.com>)
  - ifup-routes: make sure commented lines are handled correctly (#154353,
    - some sysconfig.txt updates (<link@pobox.com>, <jvdias@redhat.com>)
  - rc.sysinit: fix restorecon invocation (#153100)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - remove some conflicts, %post scripts, etc. that were only relelvant
    for upgrades from pre-7.0
  - other minor fixes, see ChangeLog


author: Bill Nottingham <notting@redhat.com> 8.06-1
changelog:
  - handle alternate VLAN naming schemes (#115001, <kas@informatics.muni.cz>)
  - ifup-ipsec: handle non-ascii keys (#150552)
  - add proper ipsec route (#146169, #140654)
  - add a restorecon for /tmp to rc.sysinit
  - document ONHOTPLUG in sysconfig.txt
  - fix mistranslation (#151120)
  - don't return 1 for stopping a process if it isn't running at all
  - don't explicitly set fwd polices for ipsec traffic. Let setkey
    handle it.


author: Bill Nottingham <notting@redhat.com> 8.05-1
changelog:
  - ipv6 cleanups (<pb@bieringer.de>)
  - rc.sysinit: fix rngd check (#130350)
    ... then turn it off entirely
  - rc.sysinit: get rid of duplicate date printout (#149795)
  - ifdown: handle being called on down devices better
  - handle saved resolv.conf on all device types
  - fix network-functions cleanup
  - netfs: fix _netdev unmounting (#147610, <alewis@redhat.com>)
  - dhcp release cleanups (<jvdias@redhat.com>)
  - ifup-bnep: bluetooth update <dwmw2@infradead.org>
  - more ipsec stuff (#147001, <ckjohnson@gwi.net>)


author: Bill Nottingham <notting@redhat.com> 8.04-1
changelog:
  - split out ifup/ifdown general case to ifup/ifdown-eth;
    add ifup/ifdown-bnep (<dwmw2@redhat.com>)
  - ifup-ipsec: add fwd policies (#145507)
  - fix multiple scsi_hostadapter loads (#145432)
  - enable syncookies in sysctl.conf (#145201)


author: Bill Nottingham <notting@redhat.com> 8.03-1
changelog:
  - use udevsend to handle hotplug events (requires recent udev)
  - remove pump, dhcpcd support
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - replace the use of route/ifconfig with ip in IPv6 code, remove support
    for ipv6calc (<pb@bierenger.de>, <pekkas@netcore.fi>)
  - fix quoting in daemon() (#144634)
  - make sysctl be silent (#144483)


author: Bill Nottingham <notting@redhat.com> 8.02-1
changelog:
  - remove initlog, minilogd
  - add a flag to kmodule for use with kudzu's socket mode, use it
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)
  - netfs: don't unmount NFS root FS (#142169)


author: Bill Nottingham <notting@redhat.com> 7.98-1
changelog:
  - various kmodule speedups
  - rc.d/init.d/netfs: don't mount GFS (#140281)
  - fix various minilogd bogosities (#106338)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix check_link_down to still check negotiation if link is
    listed as "up" on entering (#110164, <dbaron@dbaron.org>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - take an axe to rc.sysinit:
    - remove delay on unclean startup
    - remove hdparm code
    - remove LVM1 code
    - remove old raidtab code in favor of mdadm
    - remove support for old isapnp tools
    - move all block device mangling before fsck. run fsck *once*, not twice
    - some more LC_ALL=C stuff


author: Florian La Roche <laroche@redhat.com>
changelog:
  - /etc/rc.d/rc: use "LC_ALL=C grep" for small speedup
  - /etc/rc.d/rc.sysinit:
  	- do not read udev.conf, this seems to be all in the start_udev script
  	- fix detection of "nomodules" kernel command line option
  	- read /proc/cmdline earlier and convert rhgb to use that, too
  	- load_module(): change redirection to /dev/null
  	- some checks for RHGB_STARTED="" looked strange
  - /etc/sysconfig/network-scripts/ifup-ppp:
  	- remove a call to basename with shell builtins
  - /etc/sysconfig/network-scripts/network-functions:
  	- remove some calls to basename/sed with shell builtins


author: Bill Nottingham <notting@redhat.com> 7.93.2-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temporary path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup 
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
  	- no need to set NETWORKING=no, it is not used/exported
  	- do not export BOOTUP
  	- delete two "sleep 1" calls that wants to add time to go
  	  into confirmation mode. There is enough time to press a
  	  key anyway or use "confirm" in /proc/cmdline.
  	- read /proc/cmdline into a variable
  	- use strstr() to search in /proc/cmdline
  	- add "forcefsck" as possible option in /proc/cmdline
  	- while removing lock files, no need to call `basename`
  	- add unamer=`uname -r` and reduce number of forks
  	- do not fork new bash to create /var/log/ksyms.0


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't 
    initialize them. This gave error messages during startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
  	daemon(): avoid starting another bash
  	killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying 
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com> 
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc 
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root 
    filesystem -- it now happens when other filesystems are corrupt as well


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code 
  - Added doexec and man page


author: Tom Lane <tgl@redhat.com> 3.8.2-17
changelog:
  - Fix incomplete patch for CVE-2012-3401
  - Add libtiff-tiffinfo-exif.patch so that our test case for CVE-2012-5581 works
    with pre-4.0.2 libtiff
  Resolves: #885308


author: Tom Lane <tgl@redhat.com> 3.8.2-13
changelog:
  - Fix incorrect fix for CVE-2011-0192
  Resolves: #688828
  - Add fix for CVE-2011-1167
  Resolves: #688745


author: Tom Lane <tgl@redhat.com> 3.8.2-9
changelog:
  - Fix some more LZW decoding vulnerabilities (CVE-2009-2285)
  Resolves: #507726
  - Update upstream URL


author: Tom Lane <tgl@redhat.com>
changelog:
  - Fix LZW decoding vulnerabilities (CVE-2008-2327)
  Resolves: #458813
  - Remove sgi2tiff.1 and tiffsv.1, since they are for programs we don't ship
  Resolves: #460034


author: Jindrich Novy <jnovy@redhat.com> - 3.8.2-6
changelog:
  - fix CVE-2006-2193, tiff2pdf buffer overflow (#194362)
  - fix typo in man page for tiffset (#186297)
  - use %{?dist}


author: Matthias Clasen <mclasen@redhat.com>
changelog:
  - Fix several vulnerabilities (CVE-2006-3460 CVE-2006-3461
    CVE-2006-3462 CVE-2006-3463 CVE-2006-3464 CVE-2006-3465)


author: Matthias Saou <http://freshrpms.net/> 3.7.4-2
changelog:
  - Remove useless explicit dependencies.
  - Minor spec file cleanups.
  - Move make check to %check.
  - Add _smp_mflags.


author: Matthias Clasen <mclasen@redhat.com> - 3.7.1-3
changelog:
  - Drop the largefile patch again
  - Fix a problem with the handling of alpha channels
  - Fix an integer overflow in tiffdump (#143576)


author: Phil Knirsch <phil@redhat.de>
changelog:
  - Fixed ia64 problem with tiffinfo. Was general 64 bit arch problem where s390x
    and ia64 were missing (#52129).


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move man pages from devel package to the regular one
  - integrate Frank Warmerdam's fixed .fax handling code (keep until next release
    of libtiff)
  - fix fax2ps breakage (bug #8345)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - enable zip and jpeg codecs
  - change defattr in normal package to 0755
  - add defattr to -devel package


author: Joe Orton <jorton@redhat.com> - 1.6.11-8
changelog:
  - add security fixes for CVE-2011-1752, CVE-2011-1783 (#709219)
  - add fix for svnadmin hotcopy (#669535)
  - add security fix for CVE-2011-0715 (#681172)
  - add security fixes for CVE-2010-4644, CVE-2010-4539 (#672677)


author: Joe Orton <jorton@redhat.com> 1.3.2-2
changelog:
  - update to 1.3.2
  - fix Ruby sitelibdir (Garrick Staples, #191611)
  - own /etc/subversion (#189071)
  - update to psvn.el r19857


author: Joe Orton <jorton@redhat.com> 1.2.3-3
changelog:
  - update to 1.2.3
  - update to psvn.el r16070 from Stefan Reichoer
  - merge subversion.conf changes from RHEL4
  - merge filter-requires.sh changes from FC4 updates


author: Joe Orton <jorton@redhat.com> 1.2.0-3
changelog:
  - update to 1.2.1
  - fix BuildRequires for ruby and apr-util (#163126)
  - drop static library archives


author: Joe Orton <jorton@redhat.com> 1.1.3-8
changelog:
  - further swig bindings fix (upstream via Max Bowsher, #151798)
  - fix perl File::Path dependency in filter-requires.sh


author: Joe Orton <jorton@redhat.com> 1.1.3-7
changelog:
  - restore swig bindings support (from upstream via Max Bowsher, #141343)
  - tweak SELinux commentary in default subversion.conf


author: Joe Orton <jorton@redhat.com> 1.0.2-2
changelog:
  - add perl MODULE_COMPAT requirement for -perl subpackage
  - move perl man pages into -perl subpackage
  - clean up -perl installation and dependencies (Ville Skyttä, #123045)


author: Joe Orton <jorton@redhat.com> 1.0.0-2
changelog:
  - add fix for lack of apr_dir_read ordering guarantee (Philip Martin)
  - enable compression in ra_dav by default (Tobias Ringström)


author: Jeff Johnson <jbj@redhat.com> 0.22.2-2
changelog:
  - use external neon-0.23.9-2 (i.e. with neon-config), drop internal neon.
  - use db-4.1.25, not db-4.0.14.
  - do "make check" (but ignore failure for now).
  - s390x knows not of httpd >= 2.0.45.


author: Joe Orton <jorton@redhat.com> 0.22.2-1
changelog:
  - update to 0.22.2; add mod_dav_svn subpackage
  - include Python bindings
  - neon: force use of expat, enable SSL
  - drop check for specific apr version added in -3


author: Jeff Johnson <jbj@redhat.com> 0.15-3687.0
changelog:
  - first build from adapted spec file, only client and libraries for now.
  - internal apr/apr-utils/neon until incompatibilities sort themselves out.
  - avoid libdir issues on x86_64 for the moment.


author: Jeff Law <law@redhat.com> - 2.5-106
changelog:
  - Fix errno for various overflow situations in vfprintf.  Add
      missing overflow checks. (#857387)


author: Jeff Law <law@redhat.com> - 2.5-105
changelog:
  - Handle failure of _nl_explode_name in all cases (#848481)
    - Define the default fuzz factor to 2 to make it easier to manipulate
      RHEL 5 RPMs on RHEL 6 and newer systems.


author: Jeff Law <law@redhat.com> - 2.5-102
changelog:
  - Really fix POWER4 strncmp crash (#766832).
  - Fix integer overflow leading to buffer overflow in strto* (#847930)


author: Patsy Franklin <patsy@redhat.com> - 2.5-97
changelog:
  - Fix iconv() segfault if the invalid multibyte character 0xffff is input when
    converting from IBM930.    (#823905)


author: Jeff Law <law@redhat.com> - 2.5-92
changelog:
  - Fix return code when stopping already stopped nscd daemon (#678227)
  - Remove MAP_32BIT for pthread stack mappings,
    use MAP_STACK instead (#641094)
  - Fix setuid vs sighandler_setxid race (#769852)
  - Fix access after end of search string in regex matcher (#757887)
  - Fix POWER4 strncmp crash (#766832)
  - Fix SC_*CACHE detection for X5670 cpus (#692182)
  - Fix parsing IPV6 entries in /etc/resolv.conf (#703239)
  - Fix double-free in nss_nis code (#500767)


author: Jeff Law <law@redhat.com> - 2.5-89
changelog:
  - Do not override TTL of CNAME with TTL of its alias (#808014)
  - Fix short month names in fi_FI locale #(657266).
  - Fix nscd crash for group with large number of members (#788989)


author: Jeff Law <law@redhat.com> - 2.5-88
changelog:
  - Fix Slovakia currency (#799853)
  - Fix getent malloc failure check (#806403)
  - Fix short month names in zh_CN locale (#657588)
  - Fix decimal point symbol for Portuguese currency (#710216)
  - Avoid integer overflow in sbrk (#767358)
  - Avoid race between {,__de}allocate_stack and __reclaim_stacks during
    fork (#738665)
  - Fix race between IO_flush_all_lockp & pthread_cancel (#751748)


author: Jeff Law <law@redhat.com> - 2.5-79
changelog:
  - Complete the numeric settings fix (#675259)
  - Complete the change for error codes from pthread_create (#707998)


author: Andreas Schwab <schwab@redhat.com> - 2.5-67
changelog:
  - ldd: never run file directly (#531160)
  - Implement greedy matching of weekday and month names (#657570)
  - Fix incorrect numeric settings (#675259)
  - Implement new mode for NIS passwd.adjunct.byname table (#678318)
  - Query NIS domain only when needed (#703345)
  - Count total processors using sysfs (#706894)
  - Translate clone error if necessary (#707998)
  - Workaround kernel clobbering robust list (#711531)


author: Andreas Schwab <schwab@redhat.com> - 2.5-66
changelog:
  - Use correct type when casting d_tag (#599056, CVE-2010-0830)
  - Report write error in addmnt even for cached streams (#688980,
    CVE-2011-1089)


author: Andreas Schwab <schwab@redhat.com> - 2.5-64
changelog:
  - Don't allocate executable stack when it cannot be allocated in the
    first 4G (#448011)
  - Initialize resolver state in nscd (#676039)
  - No cancel signal in unsafe places (#684808)


author: Andreas Schwab <schwab@redhat.com> - 2.5-62
changelog:
  - Avoid too much stack use in fnmatch (#681054, CVE-2011-1071)
  - Properly quote output of locale (#625893, CVE-2011-1095)
  - Don't leave empty element in rpath when skipping the first element,
    ignore rpath elements containing non-isolated use of $ORIGIN when
    privileged (#667974, CVE-2011-0536)
  - Fix handling of newline in addmntent (#559579, CVE-2010-0296)


author: Andreas Schwab <schwab@redhat.com> - 2.5-54
changelog:
  - Add timestamps to nscd logs (#527558)
  - Fix index wraparound handling in memusage (#531576)
  - Handle running out of buffer space with IPv6 mapping enabled (#533367)
  - Don't deadlock in __dl_iterate_phdr while (un)loading objects (#549813)
  - Avoid alloca in setenv for long strings (#559974)
  - Recognize POWER7 and ISA 2.06 (#563563)
  - Add support for AT_BASE_PLATFORM (#563599)
  - Restore locking in free_check (#585674)
  - Fix lookup of collation sequence value during regexp matching (#587360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-40
changelog:
  - add a barrier to ATOMIC_FASTBINS _int_free code needed
    on ppc/ppc64 (#508395)
  - don't stop parsing fopen mode string after seing 'c'
    letter (#509853)


author: Jakub Jelinek <jakub@redhat.com> 2.5-39
changelog:
  - force malloc hook pointers into register to avoid rereading them
    from memory non-atomically (#502901, BZ#9957)
  - avoid extraneous comma at the end of enum in dlfcn.h (#504704)


author: Jakub Jelinek <jakub@redhat.com> 2.5-38
changelog:
  - add optional experimental malloc (enable with MALLOC_PER_THREAD=1
    in environment, #494758)
  - nscd backport (#483636)


author: Jakub Jelinek <jakub@redhat.com> 2.5-37
changelog:
  - remove const attribute from sysconf (#490821, BZ#3493)
  - add RUSAGE_THREAD definition (#484214)
  - update i?86/x86_64 cache info for sysconf on newer CPUs


author: Jakub Jelinek <jakub@redhat.com> 2.5-36
changelog:
  - nscd GC fixes (#483636, BZ#5382, BZ#5381, BZ#9741, BZ#9750)
  - change mtrim to trim all arenas, not just main_arena (#403231)
  - fix a corner case in realloc (#478499)
  - fix a setlocale race (#455580, BZ#6712)
  - fix getifaddrs for Infiniband interfaces (#463252, BZ#6589)
  - use private futexes for process private PI mutexes (#495955, BZ#6955)
  - optimize pthread_mutex_{,un}lock for the most common mutex types (#467316)
  - fix getgrouplist with [!NOTFOUND=return] (#470768)
  - don't open /var/run/utmp in setutent_file read-write unnecessarily
    to avoid audit messages (#475332)
  - fix dlopen memory leak (#476725, BZ#6763)
  - fix crashes when fork is running in one thread concurrently with
    pthread stack cache updates in another thread (#477705)
  - fix getent to not print comma in between network aliases (#484082)
  - attempt to preserve nscd process name in paranoia mode restarts
    (#490010)
  - fix inet6_opt_init (#488748, BZ#5760)
  - fix getnameinfo with both nodename and servname NULL
    and NI_NAMEREQD in flags (#489419, BZ#7080)
  - fix inet6_rth_add (#494850, BZ#9881)
  - fix inet6_rth_reverse (#494849, BZ#9880)
  - fix _dl_runtime_profile on s390x (#470300)


author: Jakub Jelinek <jakub@redhat.com> 2.5-35
changelog:
  - increase default buffer size in opendir, if malloc fails,
    retry malloc with smaller size (#484440)


author: Jakub Jelinek <jakub@redhat.com> 2.5-25
changelog:
  - fix yp_order (#435519, BZ#5854)
  - new x86_64 optimized memset (#437394)
  - fix ppc64 dynamic linker synchronization (#441702, BZ#5741)
  - malloc speedup (#451184, #460154, BZ#4349)
  - document that setenv and putenv aren't thread-safe (#316791)
  - speed up qsort (#435182)
  - provide unwind info for x86_64 signal return pad (#445259)
  - use DNS provided TTL for nscd hosts cache (#454299)
  - robustify nscd.conf reading (#438456, BZ#5818)
  - power4/power6 math backports (#440103)
  - fix expf (BZ#3406)
  - fix ISO 646-IRV iconv error handling (BZ#6461)
  - fix setvbuf (BZ#6719)
  - fix unbuffered vfprintf (#455360)


author: Jakub Jelinek <jakub@redhat.com> 2.5-23
changelog:
  - fix gettext race conditions (#439486, BZ#5058, BZ#5443)
  - fix x86_64 pthread_mutex_timedlock (#434601)
  - only service sshd condrestart if /etc/rc.d/init.d/sshd exists
    (#428859)


author: Jakub Jelinek <jakub@redhat.com> 2.5-20
changelog:
  - allow debugging of threaded statically linked binaries (#239653)
  - fix sscanf/swscanf if errno is set to EINTR on entry (BZ#4745)
  - fix forkpty error handling (BZ#4813)
  - fix popen if some active previous popen's stream has fd 0 or 1
    (#248281)
  - fix dlinfo RTLD_DI_SERINFO* with empty entry in DT_R*PATH or
    LD_LIBRARY_PATH (BZ#4776)
  - further gettext out of memory handling fixes (#247788)
  - fix i?86 pthread_rwlock_timed{rd,wr}lock
  - add SHA-256 and SHA-512 hashing to crypt(3) (#249477, #380751)
  - power6 updates (#253116)
  - support optimistic addresses in getaddrinfo (#259681)
  - si_LK fixes (#282201)
  - fix sporadic hangs in clntudp_call (#339821)
  - getaddrinfo sorting changes (not turned on by default, to enable
    them /etc/gai.conf needs to be present and with scopev4
    rules, #352021)
  - fix nscd paranoia restarting when one of the caches is
    disabled (#352321)
  - add sfence to x86_64 memset after movnti instructions (#371561)
  - fix iso-2022-jp//translit iconv bugs (#397021)
  - fix calloc with mlocked memory (#405781)
  - optimized x86_64 memcpy (#196882)
  - misc fixes (BZ#4858, BZ#4963, BZ#5028, BZ#5071, BZ#5225, BZ#5277,
    BZ#5375, BZ#5378, BZ#5424, BZ#5435, BZ#5451, BZ#5454, BZ#5541)


author: Jakub Jelinek <jakub@redhat.com> 2.5-19
changelog:
  - fix an ABBA deadlock in ld.so (#295891)
  - workaround for bugs in ia64 /emul/ia32-linux hack (#253961)
  - nis_list fix (#254115)


author: Jakub Jelinek <jakub@redhat.com> 2.5-17
changelog:
  - fix copying of power4 ppc{,64} ld.so during %install
  - disable workaround for #210748 and #211133, instead backport
    ld.so locking fixes from the trunk (#235026)
  - Korean charsets additions (BZ#3954, BZ#3955)
  - fix handling of 2001::/32 IPv6 addresses in getaddrinfo (BZ#4102)
  - add inline optimization for fgetc_unlocked
  - fix handling of 172.{1[7-9],2[0-9],3[01]}/16 IPv4 addresses in
    getaddrinfo
  - make sure NULL checks in routines with nonnull attribute aren't
    optimized away
  - don't write uninitialized padding bytes to nscd socket
  - avoid misaligned reads/writes in gethostbyname_r (#243967, BZ#4381)
  - fix dl{,v}sym, dl_iterate_phdr and dlopen if some library is
    mapped into ld.so's inter-segment hole on x86_64 (#244545)
  - fix LD_AUDIT=a:b program (#180432)


author: Jakub Jelinek <jakub@redhat.com> 2.5-16
changelog:
  - only build 31-bit shared libraries with -march=z900, *.a and *.o
    in glibc-devel should still work with g5 and g6 CPUs (#228127)
  - build ppc and ppc64 base shared libraries with -mcpu=power4,
    i.e. only support power4 and newer CPUs, *.a and *.o in
    glibc-devel should still work on any powerpc CPU (#241003)
  - don't crash on pseudo-zero long double values passed to
    *printf on i?86/x86_64/ia64 (BZ#4586)
  - fix *printf %La and strtold with some hexadecimal floating point
    constants on ppc/ppc64
  - fix nextafterl on ppc/ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.5-15
changelog:
  - robust mutex fixes (BZ#4512)
  - *printf fixes (BZ#4514)
  - as_IN updates (#218035)
  - use MADV_DONTNEED in malloc (#237711)
  - fix sem_timedwait on i?86 and x86_64
  - fix dladdr if some shared library is mapped into ld.so intersegment
    VM hole (#232224, BZ#4131)
  - fdatasync is a cancellation point (BZ#4465)
  - add a temporary hack to avoid reruning DSO initializers if dlopen
    is called from _dl_fini destructors (#234946)
  - build s390 31-bit libs with -march=z900, i.e. only support
    64-bit s390x CPUs (#228127)


author: Jakub Jelinek <jakub@redhat.com> 2.5-14
changelog:
  - add transliteration for <U2044> (BZ#3213)
  - fix *scanf with %f on hexadecimal floats without exponent (BZ#4342)
  - fix *printf with very large precisions for %s (#238406, BZ#4438)
  - fix inet_ntop size checking for AF_INET (BZ#4439)
  - for *printf %e avoid 1.000e-00, for exponent 0 always use + sign (#238431)
  - fix application crashes when doing NSS lookups through nscd
    mmapped databases and nscd decides to start garbage collection
    during the lookups (#219145, #225315)
  - fix NIS+ __nisfind_server (#235229)
  - assorted NIS+ speedups (#233460)
  - fix power6 libm compat symbols on ppc32 (#232633)
  - fix child refcntr in NPTL fork (#230198)
  - fix ifaddrs with many net devices on > 4KB page size arches (#230151)
  - fix pthread_mutex_timedlock on x86_64 (#228103)
  - fix HAVE_LIBCAP configure detection (#178934)
  - fix double free in fts_close (#222089)
  - fix vfork+execvp memory leak (#221187)
  - further localedef robustification (#203728)
  - fix printf with %g and values tiny bit smaller than 1.e-4 (#235864,
    BZ#4362, BZ#4070)
  - fix _XOPEN_VERSION (BZ#4364)
  - nexttoward*/nextafter* fixes (BZ#3306)
  - various fixes (BZ#3919, BZ#4101, BZ#4130, BZ#4181, BZ#4069, BZ#3458,
    BZ#3348, BZ#4344, BZ#4368, BZ#4305, BZ#4306)
  - fix nftw with FTW_CHDIR on / (BZ#4076)
  - nscd fixes (BZ#4074)
  - fix euidaccess (BZ#3842)
  - assorted locale data fixes (BZ#3322, BZ#3995, BZ#3884, BZ#3851, BZ#4411)
  - fix strptime (BZ#3944)
  - fix regcomp with REG_NEWLINE (BZ#3957)
  - fix %0lld printing of 0LL on 32-bit architectures (BZ#3902)
  - soft-fp fixes (BZ#2749)
  - further strtod fixes (BZ#3855)
  - update ru and sv translations
  - fix fesetround return value on ia64
  - fix nscd SIGHUP database invalidation


author: Jakub Jelinek <jakub@redhat.com> 2.5-9
changelog:
  - make sure pthread_kill doesn't return EINVAL even if
    the target thread exits in between pthread_kill ESRCH check
    and the actual tgkill syscall (#220420)


author: Jakub Jelinek <jakub@redhat.com> 2.5-8
changelog:
  - fix setcontext on ppc32 (#219107)
  - fix wide stdio after setvbuf (#217064, BZ#2337)
  - fix {j,m}rand48{,_r} on 64-bit arches (BZ#3747)
  - handle power6x AT_PLATFORM (#216970)
  - fix a race condition in getXXbyYY_r (#219145)
  - fix tst-pselect testcase


author: Jakub Jelinek <jakub@redhat.com> 2.5-7
changelog:
  - fix hasmntopt (#218802)
  - fix setusershell and getusershell (#218782)
  - strtod fixes (BZ#3664, BZ#3673, BZ#3674)
  - fix ttyname and ttyname_r with invalid file descriptor (#218276)
  - fix nis_getnames if the default domain doesn't contain at least
    two dots (#206483)
  - fix memusage with realloc (x, 0)


author: Jakub Jelinek <jakub@redhat.com> 2.5-6
changelog:
  - fix svc_run (#216834, BZ#3559)
  - make sure there is consistent timestamp for /etc/ld.so.conf,
    /etc/localtime and /etc/rpc between multilib glibc rpms
  - fix :include: /etc/alias handling (#215572)
  - update powerpc-cpu add-on to version 0.4 (#196319)
  - add power6x subdir to /lib/ and /lib/rtkaio/,
    link all libs from ../power6/* into them
  - update nl, sv, pl and tr translations
  - add mai_IN locale (#213415)
  - fix es_ES LC_TIME (BZ#3320)


author: Jakub Jelinek <jakub@redhat.com> 2.5-5
changelog:
  - remove bogus /usr/lib/librt.so.1 symlink (#213555)
  - fix memusage (#213656)
  - fix sysconf (_SC_LEVEL{2,3}_CACHE_SIZE) on Intel Core Duo
    CPUs
  - fix ld.so locking on dlopen failures (#213037, BZ#3429)
  - fix libthread_db.so on TLS_DTV_AT_TP architectures (#215513)
  - fix --inhibit-rpath (#214569)
  - fix _r_debug content when prelinked ld.so executes
    a program as its argument
  - handle new tzdata format to cope with year > 2037 transitions
    on 64-bit architectures
  - fix strxfrm
  - fix i?86 floor and ceil inlines (BZ#3451)


author: Jakub Jelinek <jakub@redhat.com> 2.5-4
changelog:
  - fix i?86 6 argument syscalls (e.g. splice)
  - fix rtld minimal realloc (BZ#3352)
  - fix RFC3484 getaddrinfo sorting according to rules 4 and 7 (BZ#3369)
  - fix xdrmem_setpos (#211452)


author: Jakub Jelinek <jakub@redhat.com> 2.5-3
changelog:
  - bump __GLIBC_MINOR__
  - increase PTHREAD_STACK_MIN on ppc{,64} to 128K to allow
    64K pagesize kernels (#209877)
  - speed up initgroups on NIS+ (#208203)


author: Jakub Jelinek <jakub@redhat.com> 2.5-2
changelog:
  - fix nscd database growing (#207928)
  - bypass prelinking when LD_DYNAMIC_WEAK=1 is in the environment


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-35
changelog:
  - fix glob with large number of matches (BZ#3253)
  - fix fchownat on kernels that don't support that syscall (BZ#3252)
  - fix lrintl on s390{,64}


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-34
changelog:
  - fix ppc{32,64} longjmp (BZ#3225)
  - fix user visible spelling errors (BZ#3137)
  - fix l{,l}rint{,f,l} around zero (BZ#2592)
  - avoid stack trampoline in s390{,x} makecontext


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-33
changelog:
  - fix dlclose (#206639)
  - don't load platform optimized libraries if kernel doesn't set
    AT_PLATFORM
  - fix ppc{32,64} libSegFault.so
  - use -mtune=generic even for glibc-devel.i386 (#206437)
  - fix /lib/librt.so.1 symlink


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-32
changelog:
  - on ppc* use just AT_PLATFORM and altivec AT_HWCAP bit for library selection
  - fix lrintl and lroundl on ppc{,64}
  - use hidden visibility on fstatat{,64} and mknodat in libc_nonshared.a


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-31
changelog:
  - fix pthread_cond_{,timed}wait cancellation (BZ#3123)
  - fix lrint on ppc32 (BZ#3155)
  - fix malloc allocating more than half of address space (BZ#2775)
  - fix mktime on 32-bit arches a few years after 2038 (BZ#2821)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-30
changelog:
  - add librtkaio, to use it add /%{lib}/rtkaio to your
    LD_LIBRARY_PATH or /etc/ld.so.conf
  - fix or_IN February name (#204730)
  - fix pthread_create called from cancellation handlers (BZ#3124)
  - fix regex case insensitive searches with characters where upper
    and lower case multibyte representations have different length
    (e.g. I and dotless i, #202991)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-29
changelog:
  - randomize resolver query ids before use instead after use (#205113)
  - fix resolver symver checking with DT_GNU_HASH (#204909)
  - put .hash section in glibc libraries at the end of RO segment
    when .gnu.hash is present


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-27
changelog:
  - allow $LIB and $PLATFORM in dlopen parameters even in suid/sgid (#204399)
  - handle $LIB/$PLATFORM in LD_LIBRARY_PATH
  - fix splice prototype (#204530)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-26
changelog:
  - real fix for the doubly linked list corruption problem
  - try harder in realloc to allocate memory (BZ#2684)
  - fix getnameinfo error reporting (#204122)
  - make localedef more robust on invalid input (#203728)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-25
changelog:
  - temporarily back out code to limit number of unsorted block
    sort iterations (#203735, #204027)
  - handle PLT symbols in dladdr properly (BZ#2683)
  - avoid malloc infinite looping for allocations larger than
    the system can allocate (#203915)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-23
changelog:
  - malloc fixes, especially for 32-bit arches (#202309)
  - further *_IN locale fixes (#200230)
  - fix get{serv,rpc}ent{,_r} if NIS map is empty (#203237)
  - fix /usr/bin/iconv (#203400)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-21
changelog:
  - if some test gets stuck, kill the tee process after make check
    finishes
  - build with -mtune=generic on i686 and x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-19
changelog:
  - adaptive malloc brk/mmap threshold
  - fix fchownat to use kernel syscall (if available) on many arches (#201870)
  - only define O_DIRECT with -D_GNU_SOURCE on ia64 to match all
    other arches (#201748)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-18
changelog:
  - NIS+ fixes
  - fix memusage and xtrace scripts (#200736)
  - redirect /sbin/service sshd condrestart std{out,err} to /dev/null
    when executed from glibc_post_upgrade


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-16
changelog:
  - fix dladdr on binaries/libraries with only DT_GNU_HASH and no
    DT_HASH (#200635)
  - fix early timeout of initgroups data in nscd (#173019)
  - add am/pm display to es_PE and es_NI locales (#167101)
  - fix nss_compat failures when nis/nis+ unavailable (#192072)


author: Roland McGrath <roland@redhat.com> 2.4.90-15
changelog:
  - fix missing destructor calls in dlclose (#197932)
  - enable transliteration support in all locales (#196713)
  - disallow RTLD_GLOBAL flag for dlmopen in secondary namespaces (#197462)
  - PI mutex support


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-12
changelog:
  - buildrequire gettext
  - enable fstatat64/newfstatat syscalls even on ppc*/s390*/ia64 (#196494)
  - fix out of memory behavior in gettext (#194321)
  - fix regex on multi-byte non-UTF-8 charsets (#193873)
  - minor NIS+ fixes (#190803)
  - don't use cancellable calls in posix_spawn* and only set{u,g}id
    current thread if requested (#193631)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-11
changelog:
  - don't exit from nscd -i <database> before the database is
    actually invalidated, add locking to prune_cache (#191464)
  - build glibc-devel.i386 static libraries with
    -mno-tls-direct-seg-refs -DNO_TLS_DIRECT_SEG_REFS
  - RFC3542 support (advanced API for IPv6; #191001, BZ##2693)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-8
changelog:
  - update from CVS
    - fix nss_compat when SETENT_BATCH_READ=TRUE is in /etc/default/nss
    - fix RFC3484 precedence table for site-local and ULA addresses (#188364)
    - fix a sunrpc memory leak


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-5
changelog:
  - update from CVS
    - some NIS+ fixes
    - allow overriding rfc3484 address sorting tables for getaddrinfo
      through /etc/gai.conf (sample config file included in %doc directory)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-4
changelog:
  - update from CVS
    - SETENT_BATCH_READ /etc/default/nss option for speeding up
      some usages of NIS+ (#188246)
    - move debug state change notification (#179208)
    - fix ldd script if one of the dynamic linkers is not installed (#190259)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-3
changelog:
  - update from CVS
    - fix a typo in nscd.conf (#190085)
    - fix handling of SIGHUP in nscd when some caches are disabled (#189978)
    - make nscd paranoia mode working with non-root server-user (#189779)


author: Jakub Jelinek <jakub@redhat.com> 2.4.90-2
changelog:
  - update from CVS
    - fix getaddrinfo (#190002)
    - add auto-propagate nscd.conf options (#177154)
    - fix nscd auditing (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.4-6
changelog:
  - update from CVS
    - NIS+ fixes
    - don't segfault on too large argp key values (#189545)
    - getaddrinfo fixes for RFC3484 (#188364)


author: Jakub Jelinek <jakub@redhat.com> 2.4-5
changelog:
  - update from CVS
    - pshared robust mutex support
    - fix btowc and bwtoc in C++ (#186410)
    - fix NIS+ (#186592)
    - don't declare __wcsto*l_internal for non-GCC or if not -O1+ (#185667)
  - don't mention nscd failures on 2.0 kernels (#185335)


author: Jakub Jelinek <jakub@redhat.com> 2.4-2
changelog:
  - accurate unwind info for lowlevellock.h stubs on %{ix86}
  - fix ppc/ppc64 ceill, floorl, rintl, roundl and truncl (BZ#2423)


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-2
changelog:
  - update from CVS
    - fix sYSMALLOc for MALLOC_ALIGNMENT > 2 * SIZE_SZ (#183895)
    - revert ppc32 malloc alignment patch, it breaks malloc_set_state
      and needs some further thoughts and time (#183894)
  - provide accurate unwind info for lowlevellock.h stubs on x86_64


author: Jakub Jelinek <jakub@redhat.com> 2.3.91-1
changelog:
  - update from CVS
    - fixes for various arches
  - ensure malloc returns pointers aligned to at least
    MIN (2 * sizeof (size_t), __alignof__ (long double))
    (only on ppc32 this has not been the case lately with addition
     of 128-bit long double, #182742)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-36
changelog:
  - update from CVS
    - fix frequency setting for ITIMER_PROF (#179938, BZ#2268)
    - fix powerpc inline fegetround ()
    - fix nptl_db (#179946)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-35
changelog:
  - update from CVS
    - handle futimesat (fd, NULL, tvp) as futimes (fd, tvp)
  - fix <stdlib.h> q{e,f,g}cvt{,_r} for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-34
changelog:
  - fix <math.h> with C++ and -mlong-double-64 (#179742)
  - add nexttowardl redirect for -mlong-double-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-32
changelog:
  - update from CVS
    - 128-bit long double fixes for ppc{,64}, s390{,x} and sparc{,v9},
      alpha 128-bit long double support
  - add inotify syscall numbers to the override <asm/unistd.h> headers
    (#179366)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-31
changelog:
  - update from CVS
    - 128-bit long double on ppc, ppc64, s390, s390x and sparc{,v9}
  - add some new syscall numbers to the override <asm/unistd.h>
    headers


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-30
changelog:
  - update from CVS
    - <pthread.h> initializer fixes for -std=c{8,9}9 on 32-bit
      arches
  - avoid writable .rodata (#177121)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-29
changelog:
  - update from CVS
    - make pthread_mutex_t an unnamed union again, as it affects
      libstdc++ ABI mangling


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-26
changelog:
  - update from CVS
    - for newly linked lio_listio* callers, send per request
      notifications (#170116)
    - fixup nscd -S option removal changes (#176860)
    - remove nonnull attribute from ctermid (#176753)
    - fix PTHREAD_*_INITIALIZER{,_NP} on 64-bit arches
    - SPARC NPTL support for pre-v9 CPUs
  - drop support for 2.4.xx and < 2.6.9 kernels


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-25
changelog:
  - update from CVS
    - s390{,x} and sparc{,64} pointer mangling fixes
  - install a sanitized LinuxThreads <bits/libc-lock.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-23
changelog:
  - update from CVS
    - robust mutexes
  - fix transliteration segfaults (#176573, #176583)
  - ignore prelink temporaries in ldconfig (#176570)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-22
changelog:
  - update from CVS
    - minor fts fixes
  - revert broken _Pragma () workaround
  - fix ldconfig on bi-arch architectures (#176316)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-20
changelog:
  - update from CVS
    - time ((void *) 1) should segfault, not return -EFAULT (#174856, BZ#1952)
    - fix errlist generation
  - update ulps for GCC 4.1 on IA-64


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-19
changelog:
  - update from CVS
    - sysdeps/generic reorg
    - setjmp/longjmp jump pointer mangling
  - rebuilt with GCC 4.1-RH prerelease, worked around broken _Pragma ()
    handling in it
  - remove glibc-profile subpackage
  - use non-PLT calls for malloc/free/realloc/memalign invocations in
    mtrace and mcheck hooks (#175261)
  - setjmp/longjmp jump pointer mangling on ppc{,64}/ia64/s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-18
changelog:
  - update from CVS
    - change <sys/stat.h> for broken apps that #define const /**/,
      handle non-GCC compilers
    - fix ppc{32,64} strncmp (BZ#1877, #173643, IT#83510)
    - provide shmatt_t typedef in ia64 <sys/shm.h (#173680)
    - support 2nd arg to futimesat being NULL (#173581)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-17
changelog:
  - update from CVS
    - fix <sys/stat.h> in C++
    - {fstat,fchown,rename,unlink}at fixes
    - epoll_wait is now a cancellation point


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-15
changelog:
  - update from CVS
    - be permissive in %n check because of kernel bug #165351 (#171240)
    - don't misalign stack in pthread_once on x86_64 (#170786, IT#81521)
    - many locale fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-14
changelog:
  - update from CVS
    - fix malloc bug after fork introduced in the last update
    - fix getent hosts IP for IPv4 IPs (#169831)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-13
changelog:
  - update from CVS
    - fix setuid etc. hangs if some thread exits during the call (#167766)
    - fix innetgr memory leak (#169051)
    - support > 2GB nscd log files (#168851)
    - too many other changes to list here
  - include errno in nscd message if audit_open failed (#169148)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-12
changelog:
  - update from CVS
    - netgrp handling fixes (#167728)
    - fix memory leak in setlocale (BZ#1318)
    - fix hwcaps computation
    - several regex portability improvements (#167019)
    - hypotf fix
    - fix *printf return code if underlying write fails (BZ#1146)
    - PPC64 dl{,v}sym fixes for new ABI .opd symbols
  - fix calloc with MALLOC_PERTURB_ in environment on 64-bit architectures
    (#166719)
  - source /etc/sysconfig/nscd (if it exists) in /etc/rc.d/init.d/nscd
    (#167083)
  - add %triggerin for tzdata to glibc-common, so that tzdata updates
    update /etc/localtime and /var/spool/postfix/etc/localtime if they
    exist (#167787)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-10
changelog:
  - update from CVS
    - fix growing of nscd persistent database (BZ#1204)
    - fix _FORTIFY_SOURCE mbstowcs and wcstombs if destination size
      is known at compile time, but length argument is not


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-9
changelog:
  - update from CVS
    - fix resolving over TCP (#161181, #165802)
    - on ia64 don't abort on unhandled math function exception codes
      (#165693)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-8
changelog:
  - update from CVS
    - nscd persistent database verifier (#164001)
    - cleanup _FORTIFY_SOURCE bits/*.h headers (#165000)
    - handle EINTR in sigwait properly
  - make sure poor man's stack guard randomization keeps first
    byte 0 even on big-endian 32-bit arches
  - fix {elf,nptl}/tst-stackguard1
  - obsolete linuxthreads-devel in glibc-devel


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-7
changelog:
  - update from CVS
  - do some poor man's stack guard randomization even without
    the costly --enable-stackguard-randomization
  - rebuilt with new GCC to make it use -msecure-plt on PPC32


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-6
changelog:
  - update from CVS
    - fix execvp if PATH is not in environment and the call is going
      to fail (BZ#1125)
    - another bits/wchar2.h fix (#163990)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-4
changelog:
  - update from CVS
    - make sure bits/wchar2.h header is installed
    - fix __getgroups_chk return type


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-3
changelog:
  - update from CVS
    - make sure nscd cmsg buffers aren't misaligned, handle EINTR from
      poll when contacting nscd more gracefully
    - remove malloc attribute from posix_memalign
    - correctly size nscd buffer for grpcache key (#163538)
    - fix atan2f
    - fix error memory leaks
    - some more _FORTIFY_SOURCE protection


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-2
changelog:
  - update from CVS
    - ia64 stack protector support
    - handle DNS referral results as server errors (#162625)
    - ctan{,h}{,f,l} fixes (#160759)
    - pass argc, argv and envp also to executable's *ni_array
      functions (BZ#974)
    - add ellipsis to clone prototype (#161593)
    - fix glibc-profile (#162601)
    - nss_compat fixes
  - use sysdeps/generic version of <bits/stdio-lock.h> in installed
    headers instead of NPTL version (#162634)


author: Jakub Jelinek <jakub@redhat.com> 2.3.90-1
changelog:
  - update from CVS
    - stack protector support
    - fix xdr_{,u_}{longlong_t,hyper} on 64-bit arches (#161583)
  - enable @GLIBC_2.4 symbols
  - remove linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-11
changelog:
  - update from CVS
    - PPC32 -msecure-plt support
    - support classes keyword in /etc/hesiod.conf (#150350)
    - add RLIMIT_NICE and RLIMIT_RTPRIO to <sys/resources.h> (#157049)
    - decrease number of .plt relocations in libc.so
    - use -laudit in nscd (#159217)
    - handle big amounts of networking interfaces in getifaddrs/if_nameindex
      (#159399)
    - fix pa_IN locale's am_pm (#158715, BZ#622)
    - fix debugging of PIEs


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-10
changelog:
  - fix LD_ASSUME_KERNEL (since 2.3.5-8 GLRO(dl_osversion)
    has been always overwritten with the version of currently
    running kernel)
  - remove linuxthreads man pages other than those covered in
    3p section, as 3p man pages are far better quality and describe
    POSIX behaviour that NPTL implements (#159084)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-9
changelog:
  - update from CVS
    - increase bindresvport's LOWPORT to 512, apparently some
      broken daemons don't think 0 .. 511 ports are reserved


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-8
changelog:
  - update from CVS
    - fix kernel version check in ld.so
  - fix sendfile{,64} prototypes (BZ#961)
  - try more ports in bindresvport if all 600..1023 are
    used, don't use priviledged ports when talking to portmap
    (#141773)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-7
changelog:
  - update from CVS
    - make regexec thread safe (BZ#934)
  - fix statically linked programs on i?86, x86_64, s390* and
    sparc* (#158027)
  - fix IBM939 iconv module (BZ#955)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-5
changelog:
  - update from CVS
    - add some more UTF-8 locales (#156115)
  - clean up /lib64/tls instead of /lib/tls on x86-64, s390x and
    ppc64 in glibc_post_upgrade (#156656)
  - fix posix_fallocate{,64} (#156289)


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-3
changelog:
  - update from CVS
    - fix linuxthreads clocks
  - put xen libs into the glibc-2*.i686 package instead of a separate one
  - fix librt.so symlink in linuxthreads-devel
  - do not include linuxthreads-devel on i586 i686 athlon sparcv9 alphaev6,
    just on the base architectures


author: Jakub Jelinek <jakub@redhat.com> 2.3.5-2
changelog:
  - update from CVS
    - with MALLOC_CHECK_=N N>0 (#153003)
    - fix recursive dlclose (#154641)
    - handle %z in strptime (#154804)
    - automatically append /lib/obsolete/linuxthreads/
      to standard library search path if LD_ASSUME_KERNEL=N N <= 2.4.19
      or for glibc 2.0 binaries (or broken ones that don't use errno/h_errno
      properly).  Warning: all those will stop working when LinuxThreads
      is finally nuked, which is not very far away
    - remove nonnull attribute from acct prototype (BZ#877)
    - kernel CPU clocks support
    - fix *scanf in locales with multi-byte decimal point


author: Roland McGrath <roland@redhat.com> 2.3.5-1
changelog:
  - update from CVS
    - fix execvp regression (BZ#851)
    - ia64 libm updates
    - sparc updates
    - fix initstate{,_r}/strfry (#154504)
    - grok PT_NOTE in vDSO for kernel version and extra hwcap dirs,
      support "hwcap" keyword in ld.so.conf files


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-21
changelog:
  - update from CVS
    - fix xdr_rmtcall_args on 64-bit arches (#151686)
  - fix <pthread.h> and <bits/libc-lock.h> with -std=c89 -fexceptions (#153774)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-20
changelog:
  - move LinuxThreads libraries to /lib/obsolete/linuxthreads/
    and NPTL libraries to /lib.  To run a program against LinuxThreads,
    LD_ASSUME_KERNEL=2.4.xx LD_LIBRARY_PATH=/lib/obsolete/linuxthreads/
    is now needed
  - bzip2 ChangeLog* files instead of gzipping them


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-19
changelog:
  - update from CVS
    - fix nextafterl and several other libm routines on ia64
    - fix initgroups (BZ#661)
  - kill nptl-devel subpackage, add linuxthreads-devel,
    compile and link by default against NPTL and only with
    -I/usr/include/linuxthreads -L/usr/lib/linuxthreads
    against LinuxThreads
  - package /usr/lib/debug/lib/tls/i{5,6}86 symlinks in
    i386 glibc-debuginfo
  - limit number of ChangeLog* files in glibc-common %doc
    to last 2.5 years of changes only to save space


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-17
changelog:
  - update from CVS
    - fix LD_AUDIT in LinuxThreads ld.so
    - fix calloc with M_PERTURB
    - fix error handling in pthread_create with PTHREAD_EXPLICIT_SCHED
      on ppc*/ia64/alpha/mips (BZ#801)
    - fix a typo in WINDOWS-31J charmap (#151739)
    - fix NIS ypprot_err (#151469)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-15
changelog:
  - update from CVS
    - better fix for the dlclose bug (#145810, #150414)
    - fix regex crash on case insensitive search in zh_CN locale
      (#151215)
    - fix malloc_trim (BZ#779)
    - with -D_FORTIFY_SOURCE=*, avoid defining read and a bunch of others
      as function-like macros, there are too many broken programs
      out there
  - add %dir /usr/lib/gconv to glibc's file list (#151372)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-12
changelog:
  - fix tst-chk{2,3}
  - fix up AS_NEEDED directive in /usr/lib/libc.so
  - BuildReq binutils >= 2.15.94.0.2-1 for AS_NEEDED, in
    glibc-devel Conflict with binutils < 2.15.94.0.2-1


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-11
changelog:
  - update from CVS
    - fix execvp (#149290)
    - fix dlclose (#145810)
    - clear padding in gconv-modules.cache (#146614, BZ#776)
  - rebuilt with GCC4
  - changed __GLIBC_MINOR__ for now back to 3
  - back out the newly added GLIBC_2.4 *_chk routines, instead
    do the checking in macros


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-8
changelog:
  - update from CVS
    - bi-arch <gnu/lib-names.h> (BZ#632)
    - fix libdl on s390 and maybe other platforms
    - fix initstate{,_r} (BZ#710)
    - fix <gnu/stubs.h> generation (BZ#157)
  - define CMSPAR in bits/termios.h (#147533)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-6
changelog:
  - update from CVS
    - ld.so auditing
    - fix segfault if chrooted app attempts to dlopen a library
      and no standard library directory exists at all (#147067, #144303)
    - fix initgroups when nscd is running, but has group caching disabled
      (#146588)
    - fix pthread_key_{create,destroy} in LinuxThreads when pthread_create
      has not been called yet (#146710)
    - fix ppc64 swapcontext and setcontext (#146736, BZ#700)
    - service nscd cosmetic fixes (#146776)
    - fix IA-32 and x86-64 stack alignment in DSO constructors (#145689)
    - fix zdump -v segfaults on x86-64 (#146210)
    - avoid calling sigaction (SIGPIPE, ...) inside syslog (#146021, IT#56686)
    - fix errno values for futimes (BZ#633)
    - unconditionally include <features.h> in malloc.h (BZ#650)
    - change regex \B handling to match old GNU regex as well as perl/grep's dfa
      (from empty string inside of word to empty string not at a word boundary,
       BZ#693)
    - slightly optimize i686 TLS accesses, use direct TLS %gs access in sem_*
      and allow building -mno-tls-direct-seg-refs glibc that is free of direct TLS
      %gs access with negative offsets
    - fix addseverity
    - fix fmemopen
    - fix rewinddir
    - increase svc{tcp,unix}_create listen backlog


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-5
changelog:
  - update from CVS
    - add some warn_unused_result marking
    - make ftruncate available even for just -D_POSIX_C_SOURCE=200112L
      (BZ#640)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-4
changelog:
  - update from CVS
    - fix IA-32 stack alignment for LinuxThreads thread functions
      and functions passed to clone(2) directly
    - fix ecvt{,_r} on denormals (#143279)
    - fix __tls_get_addr typo
    - fix rounding in IA-64 alarm (#143710)
    - don't reinitialize __environ in __libc_start_main, so that
      effects of setenv/putenv done in DSO initializers are preserved
      (#144037, IT#57403)
    - fix fmemopen
    - fix vDSO l_map_end and l_text_end values
    - IA64 libm update (#142494)
  - fix ppc rint/ceil etc. (BZ#602)


author: Jakub Jelinek <jakub@redhat.com> 2.3.4-1
changelog:
  - update from CVS
    - glibc 2.3.4 release
    - add -o and --nostdlib options to iconvconfig
  - if /sbin/ldconfig doesn't exist when running
    glibc_post_upgrade.%{_target_cpu}, just don't attempt to run it.
    This can happen during first install of bi-arch glibc and the
    other arch glibc's %post wil run /sbin/ldconfig (#143326)
  - use -o and --nostdlib options to create all needed
    gconv-modules.cache files on bi-arch setups


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-98
changelog:
  - add .%{_target_cpu} to glibc_post_upgrade, only run telinit u
    if /sbin/init is the same ELF class and machine as
    glibc_post_upgrade.%{_target_cpu} and similarly with
    condrestarting sshd (#143046)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-96
changelog:
  - update from CVS
    - fix i686 __USE_STRING_INLINES strncat
    - make sure ppc/ppc64 maintain correct stack alignment
      across clone


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-93
changelog:
  - update from CVS
    - ppc/ppc64 clone without CLONE_THREAD getpid () adjustement
    - fix MALLOC_CHECK_={1,2,3} for non-contiguous main arena
      (BZ#457)
    - fix sysconf (_POSIX_V6_*) for other ABI environments in
      bi-arch setups
  - s390/s390x clone without CLONE_THREAD getpid () adjustement


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-91
changelog:
  - update from CVS
    - double buffer size in getXXbyYY or getXXent on ERANGE
      instead of adding BUFLEN (#142617)
    - avoid busy loop in malloc if another thread is doing fork
      (#142214)
    - some more realloc corruption checks
    - fix getconf _POSIX_V6_WIDTH_RESTRICTED_ENVS output,
      tweak /usr/libexec/getconf/ filenames


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-90
changelog:
  - update from CVS
    - regex speedups
    - use | cat in ldd if running under bash3+ to allow running
      it on binaries that are not through SELinux allowed to access
      console or tty
  - add __NR_waitid defines for alpha and ia64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-89
changelog:
  - update from CVS
    - fix clone2 on ia64
    - avoid tst-timer5 failing with linuxthreads implementation
  - if __libc_enable_secure, disallow mode != normal
  - change ldd script to imply -r when -u is used, properly
    propagate return value and handle suid binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-88
changelog:
  - update from CVS
    - disregard LD_SHOW_AUXV and LD_DYNAMIC_WEAK if __libc_enable_secure
    - disregard LD_DEBUG if __libc_enable_secure in normal mode
      if /suid-debug doesn't exist
    - fix fseekpos after ungetc
    - avoid reading bytes before start of buffers in regex's
      check_dst_limits_calc_pos_1 (#142060)
    - make getpid () working with clone/clone2 without CLONE_THREAD
      (so far on i386/x86_64/ia64 only)
  - move /usr/libexec/getconf/* to glibc from glibc-common
  - make /usr/libexec/getconf directory owned by glibc package


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-87
changelog:
  - update from CVS
    - build libpthread_nonshared.a objects with -fPIC on s390/s390x
    - fix mktime with < 0 or > 59 tm_sec on entry
    - remove nonnull attribute for realpath
    - add $(make-target-directory) for errlist-compat.c rule
      (hopefully fix #141404)
  - add testcase for ungetc bug
  - define _POSIX_{,THREAD_}CPUTIME to 0 on all Linux arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-86
changelog:
  - update from CVS
    - some posix_opt.h fixes
  - fix strtold use of unitialized memory (#141000)
  - some more bugfixes for bugs detected by valgrind
  - rebuilt with GCC >= 3.4.3-5 to avoid packed stack layout
    on s390{,x} (#139678)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-85
changelog:
  - update from CVS
    - support -v specification in getconf
    - fix sysconf (_SC_LFS64_CFLAGS) etc.
    - avoid thread stack aliasing issues on EM64T (#140803)
  - move /usr/include/nptl headers from nptl-devel
    to glibc-headers, so that even NPTL specific programs
    can be built bi-arch without problems


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-84
changelog:
  - update from CVS
    - fix memory leak in getaddrinfo if using nscd (#139559)
    - handle large lines in /etc/hosts and /etc/networks
      (#140378)
    - add nonnull attributes to selected dirent.h and dlfcn.h
      functions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-83
changelog:
  - update from CVS
    - add deprecated and/or nonnull attribute to some signal.h
      functions
    - speed up tzset () by only using stat instead of open/fstat
      when calling tzset for the second and following time if
      /etc/localtime has not changed
  - fix tgamma (BZ #552)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-82
changelog:
  - update from CVS
    - some malloc () checking
    - libpthread.a object dependency cleanups (#115157)
    - <bits/socket.h> fix for -std=c89 -pedantic-errors (#140132)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-80
changelog:
  - update from CVS
    - with -D_FORTIFY_SOURCE=2, prevent missing %N$ formats
    - for -D_FORTIFY_SOURCE=2 and %n in writable format string,
      issue special error message instead of using the buffer overflow
      detected one
    - speedup regex searching with REG_NOSUB, add RE_NO_SUB,
      speedup searching with nested subexps (BZ #544)
    - block SIGCANCEL in NPTL timer_* helper thread
  - further free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-79
changelog:
  - update from CVS
  - fix free () checking
  - move /etc/default/nss into glibc-common (hopefully fix #132392)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-78
changelog:
  - update from CVS
    - fix LD_DEBUG=statistics
    - issue error message before aborting in __chk_fail ()
  - some more free () checking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-77
changelog:
  - update from CVS
    - speedup regex on palindromes (BZ #429)
    - fix NPTL set{,e,re,res}[ug]id, so that even if making process
      less priviledged all threads change their credentials successfully


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-76
changelog:
  - update from CVS
    - fix regcomp crash (#138439)
    - fix ftell{,o,o64} (#137885)
    - robustification of nscd to cope with corrupt databases (#137140)
    - fix NPTL with pthread_exit immediately after pthread_create (BZ #530)
    - some regex optimizations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-75
changelog:
  - update from CVS
    - mktime cleanups (BZ #487, #473)
    - unique comments in free(3) check error messages
  - adjust some x86_64 headers for -m32 (#129712)
  - object size checking support even with GCC-3.4.2-RH >= 3.4.2-8


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-74
changelog:
  - fix <netinet/udp.h> header
  - fix globfree (#137176)
  - fix exiting if there are dlmopened libraries in namespaces
    other than main one not closed yet
  - export again _res_opcodes and __p_{class,type}_syms from
    libresolv.so that were lost in -69


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-72
changelog:
  - back out setaltroot and key{_add,_request,ctl} addition
  - fix severe x86-64 symbol versioning regressions that breaks
    e.g. java binaries


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-71
changelog:
  - update from CVS
    - fix minor catchsegv temp file handling vulnerability
      (CAN-2004-0968, #136319)
    - add 4 new errno codes
    - setaltroot, key{_add,_request,ctl} syscalls on some arches
    - export _dl_debug_state@GLIBC_PRIVATE from ld.so again for
      gdb purpose
    - use inet_pton to decide what is address and what is hostname
      in getent (#135422)
    - change dladdr/dladdr1, so that dli_saddr is the same kind
      of value as dlsym/dlvsym return (makes difference on ia64/hppa only)
    - fix catchsegv script so that it works with both 32-bit and 64-bit
      programs on multi-arch platforms


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-70
changelog:
  - update from CVS
  - require newer selinux-policy (#135978)
  - add %dir for /var/run/nscd and /var/db/nscd and %ghost
    files in it
  - conflict with gcc4 4.0.0-0.6 and earlier (needs __builtin_object_size)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-68
changelog:
  - update from CVS
    - support for namespaces in the dynamic linker
    - fix dlclose (BZ #77)
    - libSegFault.so uses now backtrace() to work on IA-64, x86-64
      and s390 (#130254)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-67
changelog:
  - update from CVS
    - use non-blocking sockets in resolver (#135234)
    - reset pd->res options on thread exit, so that threads
      reusing cached stacks get resolver state properly initialized
      (BZ #434)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-66
changelog:
  - update from CVS
  - avoid using perl in the spec file, buildrequire sed >= 3.95
    (#127671)
  - export TIMEOUTFACTOR=16
  - fix _JMPBUF_CFA_UNWINDS_ADJ on s390{,x}


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-65
changelog:
  - update from CVS
    - define _POSIX_THREAD_PROCESS_SHARED and _POSIX_CLOCK_SELECTION
      to -1 in LinuxThreads
    - define _POSIX_CPUTIME and _POSIX_THREAD_CPUTIME to 0
      on i?86/ia64 and make sure sysconf (_SC_{,THREAD_}CPUTIME)
      returns correct value
  - if _POSIX_CLOCK_SELECTION == -1 in nscd, still try
    sysconf (_SC_CLOCK_SELECTION) and if it returns true,
    dlopen libpthread.so and dlsym pthread_condattr_setclock
  - build nscd with -z relro and -z now


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-64
changelog:
  - update from CVS
    - stop using __builtin_expect in assert and assert_perror
      (#127606)
    - try to avoid too much VA fragmentation with malloc
      on flexmap layout (#118574)
    - nscd robustification
    - change valloc to use debugging hooks (#134385)
  - make glibc_post_upgrade more verbose on errors (Fergal Daly,


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-61
changelog:
  - update from CVS
    - some nscd fixes (#134193)
    - cache initgroups in nscd (#132850)
    - reread /etc/localtime in tzset () even if just mtime changed
      (#133481)
    - fix glob (#126460)
    - another get_myaddress fix


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-60
changelog:
  - update from CVS
    - fix get_myaddress (#133982)
    - remove nonnull attribute from second utime argument (#133866)
    - handle SIGSETXID the same way as SIGCANCEL in
      sigaction/pthread_kill/sigwait/sigwaitinfo etc.
    - add __extension__ to long long types in NPTL <bits/pthreadtypes.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-58
changelog:
  - update from CVS
    - vasprintf fix (BZ #346)
    - gettext locking (BZ #322)
  - change linuxthreads useldt.h inclusion login again, the last
    one failed all linuxthreads FLOATING_STACKS tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-57
changelog:
  - update from CVS
    - fix setuid in LD_ASSUME_KERNEL=2.2.5 libc (#133558)
    - fix nis locking (#132204)
    - RTLD_DEEPBIND support
    - fix pthread_create bugs (BZ #401, #405)


author: Roland McGrath <roland@redhat.com> 2.3.3-56
changelog:
  - migrated CVS to fedora-branch in sources.redhat.com glibc repository
    - source tarballs renamed
    - redhat/ moved to fedora/, some old cruft removed
  - update from trunk
    - some __nonnull annotations


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-55
changelog:
  - update from CVS
    - set{re,e,res}[ug]id now affect the whole process in NPTL
    - return EAGAIN instead of ENOMEM when not enough memory
      in pthread_create


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-52
changelog:
  - update from CVS
    - nscd bi-arch fix
    - remove all uses of __P()/__PMT() from glibc headers
  - update and reenable nscd SELinux patch
  - remove libnss1* and libnss*.so.1 compatibility NSS modules
    on IA-32, SPARC and Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-51
changelog:
  - update from CVS
    - disable one of the malloc double free checks for non-contiguous
      arenas where it doesn't have to be true even for non-broken
      apps


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-50
changelog:
  - update from CVS
    - pwd/grp/host loops with nscd speed up by sharing the
      nscd cache r/o with applications
    - inexpensive double free check in free(3)
    - make NPTL pthread.h initializers usable even from C++
      (BZ #375)
  - use atomic instructions even in i386 nscd on i486+ CPUs
    (conditionally)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-48
changelog:
  - update from CVS
    - fix pthread_cond_destroy (BZ #342)
    - fix fnmatch without FNM_NOESCAPE (BZ #361)
    - fix ppc32 setcontext (BZ #357)
  - add NPTL support for i386 glibc (only if run on i486 or higher CPU)
  - add __NR_waitid defines for i386, x86_64 and sparc*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-47
changelog:
  - update from CVS
    - persistent nscd caching
    - ppc64 32-bit atomicity fix
    - fix x86-64 nptl-devel headers for -m32 compilation
  - %ghost /etc/ld.so.cache (#130597)
  - edit /etc/ld.so.conf in glibc_post_upgrade if
    include ld.so.conf.d/*.conf line is missing (#120588)
  - ugly hacks for the IA-64 /emul braindamage (#124996, #128267)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-45
changelog:
  - update from CVS
    - fix nss_compat's initgroups handling (#130363)
    - fix getaddrinfo ai_canonname setting


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-44
changelog:
  - update from CVS
    - add ip6-dotint resolv.conf option, make
      no-ip6-dotint the default
  - BuildPrereq libselinux-devel (#129946)
  - on ppc64, build without dot symbols


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-43
changelog:
  - update from CVS
    - remove debugging printout (#129747)
    - make <sys/shm.h> usable in C++ (IT#45148)
  - update RLIMIT_* constants in <bits/resource.h>, make
    <sys/resource.h> POSIX compliant (#129740)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-42
changelog:
  - fix last tzset () fixes, disable rereading of /etc/localtime
    every time for now
  - really enable SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-41
changelog:
  - update from CVS
    - fread_unlocked/fwrite_unlocked macro fixes (BZ #309, #316)
    - tzset () fixes (BZ #154)
  - speed up pthread_rwlock_unlock on arches other than i386 and
    x86_64 (#129455)
  - fix compilation with -ansi (resp. -std=c89 or -std=c99) and
    -D_XOPEN_SOURCE=[56]00 but no -D_POSIX_SOURCE* or -D_POSIX_C_SOURCE*
    (BZ #284)
  - add SELinux support for NSCD


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-40
changelog:
  - update from CVS
    - change res_init to force all threads to re-initialize
      resolver before they use it next time (#125712)
    - various getaddrinfo and related fixes (BZ #295, #296)
    - fix IBM{932,943} iconv modules (#128674)
    - some nscd fixes (e.g. BZ #292)
    - RFC 3678 support (Multicast Source Filters)
  - handle /lib/i686/librtkaio-* in i386 glibc_post_upgrade
    the same as /lib/i686/librt-*


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-39
changelog:
  - update from CVS
    - conformance related changes in headers
  - remove -finline-limit=2000 for GCC 3.4.x+


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-38
changelog:
  - update from CVS
    - fix res_init leaks
    - fix newlocale races
    - fix ppc64 setjmp
  - fix strtold (BZ #274)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-37
changelog:
  - update from CVS
    - allow pthread_cancel in DSO destructors run at exit time
  - fix pow{f,,l} on IA-32 and powl on x86-64
  - allow PIEs on IA-32 to have main in a shared library they depend on


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-34
changelog:
  - update from CVS
    - if_nameindex using preferably netlink
    - printf_parsemb initialization fix
    - NPTL version is now the same as glibc version


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-33
changelog:
  - update from CVS
    - reread resolv.conf for nscd --invalidate=hosts
    - fix F_GETLK/F_SETLK/F_SETLKW constants on x86_64 for
      -m32 -D_FILE_OFFSET_BITS=64 compilations
    - avoid calling non-existing fcntl64 syscall on ppc64


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-32
changelog:
  - update from CVS
    - FUTEX_CMP_REQUEUE support (fix pthread_cond_* deadlocks)
    - fix backtrace in statically linked programs
  - rebuilt with GCC 3.4, adjusted ulps and i386 <bits/string.h>


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-31
changelog:
  - update from CVS
  - <bits/string2.h> and <bits/mathinline.h> changes for GCC 3.{2,4,5}+
  - make c_stubs buildable even with GCC 3.2.x (#123042)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-28
changelog:
  - update from CVS
    - FUTEX_REQUEUE fixes (#115349)
    - SPARC GCC 3.4 build fix
    - fix handling of undefined TLS symbols on IA32 (RELA only),
      SPARC and SH
    - regex translate fix
    - speed up sprintf
    - x86_64 makecontext alignment fix
    - make POSIX sigpause the default sigpause, unless BSD sigpause
      requested


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-27
changelog:
  - remove /lib64/tls/librtkaio-2.3.[23].so in glibc_post_upgrade
    on x86-64, s390x and ppc64 instead of /lib/tls/librtkaio-2.3.[23].so
  - build mq_{send,receive} with -fexceptions


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-26
changelog:
  - update from CVS
    - fix <tgmath.h>
    - fix memory leaks in nis, getifaddrs, etc. caused by incorrect
      use of realloc
  - remove /lib/{tls,i686}/librtkaio-2.3.[23].so in glibc_post_upgrade
    and rerun ldconfig if needed, otherwise after glibc upgrade librt.so.1
    might be a stale symlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-24
changelog:
  - update from CVS
    - define S_ISSOCK in -D_XOPEN_SOURCE=600 and S_I[FS]SOCK
      plus F_[SG]ETOWN also in -D_XOPEN_SOURCE=500 (both
      included already in XNS5)
    - reorder dlopen checks, so that dlopening ET_REL objects
      complains about != ET_DYN != ET_EXEC, not about phentsize
      (#121606)
    - fix strpbrk macro for GCC 3.4+ (BZ #130)
    - fix <sys/sysctl.h> (BZ #140)
    - sched_[gs]etaffinity documentation fix (BZ #131)
    - fix sparc64 build (BZ #139)
    - change linuxthreads back to use non-cancellable writes
      to manager pipes etc.
    - fix sem_timedwait return value in linuxthreads (BZ #133)
    - ia64 unnecessary PLT relocs removal


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-23
changelog:
  - update from CVS
    - fix *scanf
    - fix shm_unlink, sem_unlink and mq_unlink errno values
    - avoid memory leaks in error
    - execstack fixes on s390


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-22
changelog:
  - update from CVS
    - mq and timer fixes
  - rebuilt with binutils >= 2.15.90.0.3-2 to fix IA-64 statically
    linked binaries
  - fix linuxthreads librt.so on s390{,x}, so it is no longer DT_TEXTREL


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-21
changelog:
  - disable rtkaio
  - update from CVS
    - POSIX message passing support
    - fixed SIGEV_THREAD support for POSIX timers
    - fix free on non-malloced memory in syslog
    - fix ffsl on some 64-bit arches
    - fix sched_setaffinity on x86-64, ia64
    - fix ppc64 umount
    - NETID_AUTHORITATIVE, SERVICES_AUTHORITATIVE support
    - various NIS speedups
    - fix fwrite with > 2GB sizes on 64-bit arches
    - fix pthread_getattr_np guardsize reporting in NPTL
  - report PLT relocations in ld.so and libc.so during the build


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-20
changelog:
  - update from CVS
    - change NPTL PTHREAD_MUTEX_ADAPTIVE_NP mutexes to spin on SMP
    - strtol speed optimization
    - don't try to use certainly unimplemented syscalls on ppc64
  - kill -debug subpackage, move the libs to glibc-debuginfo{,-common}
    into /usr/lib/debug/usr/lib/ directory
  - fix c_stubs with gcc 3.4
  - move all the up to 3 builds into %build scriptlet and
    leave only installation in the %install scriptlet


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-18
changelog:
  - update from CVS
    - fix ia64 iopl (#118591)
    - add support for /etc/ld.so.conf.d/*.conf
    - fix x86-64 LD_DEBUG=statistics
  - fix hwcap handling when using ld.so.cache (#118518)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-15
changelog:
  - update from CVS
    - special section for compatibility code
    - make getpid () work even in vfork () child
  - configure with --enable-bind-now to avoid lazy binding in ld.so
    and libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-14
changelog:
  - update from CVS
    - fix iconv -c (#117021)
    - fix PIEs on sparc/sparc64
    - fix posix_fadvise on 64-bit architectures
  - add locale-archive as %ghost file (#117014)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-7
changelog:
  - update from CVS
    - dl_iterate_phdr extension to signal number of added/removed
      libraries
  - fix PT_GNU_RELRO support on ppc* with prelinking


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-4
changelog:
  - update from CVS
    - some further regex speedups
    - fix re.translate handling in regex (#112869)
    - change regfree to match old regex behaviour (what is freed
      and clearing of freed pointers)
    - fix accesses to unitialized memory in regex (#113507, #113425,
        - PT_GNU_RELRO support


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-3
changelog:
  - update from CVS
    - fix pmap_set fd and memory leak (#112726)
  - fix backreference handling in regex
  - rebuilt under glibc without the above bug to fix
    libc.so linker script (#112738)


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-2
changelog:
  - update from CVS
    - faster getpid () in NPTL builds
    - fix to make pthread_setcancelstate (PTHREAD_CANCEL_DISABLE, )
      really disable cancellation (#112512)
    - more regex fixes and speedups
    - fix nextafter*/nexttoward*
    - handle 6th syscall(3) argument on AMD64
    - handle memalign/posix_memalign in mtrace
    - fix linuxthreads memory leak (#112208)
    - remove throw () from cancellation points in linuxthreads (#112602)
    - fix NPTL unregister_atfork
    - fix unwinding through alternate signal stacks


author: Jakub Jelinek <jakub@redhat.com> 2.3.3-1
changelog:
  - update from CVS
    - 2.3.3 release
    - lots of regex fixes and speedups (#110401)
    - fix atan2
    - fix pshared condvars in NPTL
    - fix pthread_attr_destroy for attributes created with
      pthread_attr_init@GLIBC_2.0
  - for the time being, include both nb_NO* and no_NO* as locales
    so that the distribution can catch up with the no_NO->nb_NO
    transition
  - add BuildPrereq texinfo (#110252)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-102
changelog:
  - update from CVS
    - fix getifaddrs (CAN-2003-0859)
    - fix ftw fd leak
    - fix linuxthreads sigaction (#108634)
    - fix glibc 2.0 stdio compatibility
    - fix uselocale (LC_GLOBAL_LOCALE)
    - speed up stdio locking in non-threaded programs on IA-32
    - try to maintain correct order of cleanups between those
      registered with __attribute__((cleanup))
      and with LinuxThreads style pthread_cleanup_push/pop (#108631)
    - fix segfault in regex (#109606)
    - fix RE_ICASE multi-byte handling in regex
    - fix pthread_exit in libpthread.a (#109790)
    - FTW_ACTIONRETVAL support
    - lots of regex fixes and speedups
    - fix ceill/floorl on AMD64


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-100
changelog:
  - update from CVS
    - fix sprof (#103727)
    - avoid infinite loops in {,f}statvfs{,64} with hosed mounts file
    - prevent dlopening of executables
    - fix glob with GLOB_BRACE and without GLOB_NOESCAPE
    - fix locale printing of word values on 64-bit big-endian arches
      (#107846)
    - fix getnameinfo and getaddrinfo with reverse IPv6 lookups
      (#101261)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-99
changelog:
  - update from CVS
    - dl_iterate_phdr in libc.a on arches other than IA-64
    - LD_DEBUG=statistics prints number of relative relocations
    - fix hwcap computation
  - NPTL is now part of upstream glibc CVS
  - include {st,xh,zu}_ZA{,.UTF-8} locales


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-98
changelog:
  - update from CVS
    - fix close, pause and fsync (#105348)
    - fix pthread_once on IA-32
  - implement backtrace () on IA-64, handle -fomit-frame-pointer
    in AMD64 backtrace () (#90402)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-97
changelog:
  - update from CVS
    - fix <sys/sysmacros.h> with C++ or -ansi or -pedantic C
    - fix mknod/ustat return value when given bogus device number (#105768)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-94
changelog:
  - update from CVS
  - fix syslog with non-C non-en_* locales (#61296, #104979)
  - filter GLIBC_PRIVATE symbols from glibc provides
  - fix NIS+


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-93
changelog:
  - update from CVS
  - assume 2.4.21 kernel features on RHEL/ppc*, so that
    {make,set,get,swap}context works
  - backout execstack support for RHEL
  - build rtkaio on amd64 too


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-92
changelog:
  - update from CVS
    - execstack/noexecstack support
    - build nscd as PIE
  - move __libc_stack_end back to @GLIBC_2.1
  - build against elfutils >= 0.86 to fix stripping on s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-88
changelog:
  - update from CVS
    - retrieve affinity in pthread_getattr_np
    - fix pthread_attr_[gs]etaffinity_np
    - handle hex and octal in wordexp


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-87
changelog:
  - update from CVS
    - truncate instead of round in utimes when utimes syscall is not available
    - don't align stack in every glibc function unnecessarily on IA-32
    - make sure threads have their stack 16 byte aligned on IA-32
    - move sched_[sg]etaffinity to GLIBC_2.3.3 symbol version (#103231)
    - fix pthread_getattr_np for the initial thread (#102683)
    - avoid linuxthreads signal race (#104368)
  - ensure all gzip invocations are done with -n option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-86
changelog:
  - update from CVS
  - avoid linking in libgcc_eh.a unnecessarily
  - change ssize_t back to long int on s390 -m31, unless
    gcc 2.95.x is used


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-83
changelog:
  - update from CVS
  - change *nlink_t, *ssize_t and *intptr_t types on s390 -m31 to
    {unsigned,} int
  - change *u_quad_t, *quad_t, *qaddr_t, *dev_t, *ino64_t, *loff_t,
    *off64_t, *rlim64_t, *blkcnt64_t, *fsblkcnt64_t, *fsfilcnt64_t
    on 64-bit arches from {unsigned,} long long int {,*} to
    {unsigned,} long int {,*} to restore binary compatibility
    for C++ functions using these types as arguments


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-80
changelog:
  - update from CVS
    - fix IA-64 cancellation when mixing __attribute__((cleanup ()))
      and old-style pthread_cleanup_push cleanups


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-79
changelog:
  - updated from CVS
    - lots of cancellation fixes
    - fix posix_fadvise* on ppc32
    - TLS layout fix
    - optimize stdio cleanups (#103354)
    - sparcv9 NPTL
    - include sigset, sighold, sigrelse, sigpause and sigignore prototypes
      in signal.h even if -D_XOPEN_SOURCE_EXTENDED (#103269)
    - fix svc_getreqset on 64-bit big-endian arches
    - return ENOSYS in linuxthreads pthread_barrierattr_setpshared for
      PTHREAD_PROCESS_SHARED
    - add pthread_cond_timedwait stubs to libc.so (#102709)
  - split glibc-devel into glibc-devel and glibc-headers to ensure
    amd64 /usr/include always wins on amd64/i386 bi-arch installs
  - increase PTHREAD_STACK_MIN on alpha, ia64 and sparc*
  - get rid of __syscall_* prototypes and stubs in sysdeps/unix/sysv/linux
  - run make check also with linuxthreads (on IA-32 non-FLOATING_STACKS)
    ld.so and NPTL (on IA-32 also FLOATING_STACKS linuxthreads) libraries
    and tests


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-77
changelog:
  - update from CVS
    - fix glibc 2.0 libio compatibility (#101385)
    - fix ldconfig with /usr/lib/lib*.so symlinks (#102853)
    - fix assert.h (#102916, #103017)
    - make ld.so.cache identical between IA-32 and AMD64 (#102887)
    - fix static linking of large IA-64 binaries (#102586)
  - avoid using floating point regs in lazy binding code on ppc64 (#102763)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-72
changelog:
  - update from CVS
    - fix rtkaio aio_fsync{,64}
    - update rtkaio for !BROKEN_THREAD_SIGNALS
    - fix assert macro when used on pointers


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-70
changelog:
  - update from CVS
  - disable CLONE_STOPPED for now until it is resolved
  - strip crt files
  - fix libio on arches with no < GLIBC_2.2 support (#102102, #102105)
  - fix glibc-debuginfo to include all nptl and nptl_db sources


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-69
changelog:
  - update from CVS
    - fix pthread_create@GLIBC_2.0 (#101767)
  - __ASSUME_CLONE_STOPPED on all arches but s390* in RHEL


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-68
changelog:
  - update from CVS
    - only use CLONE_STOPPED if kernel supports it, fix setting of thread
      explicit scheduling (#101457)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-67
changelog:
  - update from CVS
    - fix utimes and futimes if kernel doesn't support utimes syscall
    - fix s390 ssize_t type
    - fix dlerror when called before any dlopen/dlsym
    - update IA-64 bits/sigcontext.h (#101344)
    - various warning fixes
    - fix pthread.h comment typos (#101363)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-65
changelog:
  - update from CVS
    - fix timer_create
    - use __extension__ before long long typedefs in <bits/types.h> (#100718)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-64
changelog:
  - update from CVS
    - fix wcpncpy (#99462)
    - export _res@GLIBC_2.0 even from NPTL libc.so (__res_state ()
      unlike __errno_location () or __h_errno_location () was introduced
      in glibc 2.2)
    - fix zic bug on 64-bit platforms
    - some TLS handling fixes
    - make ldconfig look into alternate ABI dirs by default (#99402)
  - move /usr/share/zoneinfo to tzdata package, so that it can be
    errataed separately from glibc
  - new add-on - rtkaio
  - prereq libgcc, as glibc now relies on libgcc_s.so.1 for pthread_cancel


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-61
changelog:
  - update from CVS
    - build libc_nonshared.a with -fPIC instead of -fpic
  - fix ppc64 PIE support
  - add cfi directives to NPTL sysdep-cancel.h on ppc/ppc64/s390/s390x


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-59
changelog:
  - update from CVS
  - on IA-64 use different symbols for cancellation portion of syscall
    handlers to make gdb happier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-56
changelog:
  - fix condvars and semaphores in ppc* NPTL
  - fix test-skeleton.c reporting of timed-out tests (#91269)
  - increase timeouts for tests during make check


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-55
changelog:
  - make ldconfig default to both /lib+/usr/lib and /lib64+/usr/lib64
    on bi-ABI architectures (#97557)
  - disable FUTEX_REQUEUE on ppc* temporarily


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-49
changelog:
  - update from CVS
    - fix pthread_cond_signal on IA-32 (#92080, #92253)
    - fix setegid (#91567)
  - don't prelink -R libc.so on any architecture, it prohibits
    address randomization


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-47
changelog:
  - update from CVS
  - PT_GNU_STACK segment in binaries/executables and .note.GNU-stack
    section in *.[oa]


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-44
changelog:
  - update from CVS
  - enable NPTL on s390 and s390x
  - make __init_array_start etc. symbols in elf-init.oS hidden undefined


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-41
changelog:
  - update from CVS
  - use NPTL libs if uname -r contains nptl substring or is >= 2.5.69
    or set_tid_address syscall is available instead of checking
    AT_SYSINFO dynamic tag


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-31
changelog:
  - update from CVS
    - nscd fixes
    - fix Bahrain spelling (#56298)
    - fix Ukrainian collation (#83973)
    - accept trailing spaces in /etc/ld.so.conf (#86032)
    - perror fix (#85994)
    - fix localedef (#88978)
    - fix getifaddrs (#89026)
    - fix strxfrm (#88409)
  - fix ppc TLS
  - fix getaddrinfo (#89448)
  - don't print warning about errno, h_errno or _res if
    LD_ASSUME_KERNEL=2.4.1 or earlier


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-30
changelog:
  - update from CVS
  - fix prelink on ppc32
  - add TLS support on ppc32 and ppc64
  - make sure on -m64 arches all helper binaries are built with this
    option


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-29
changelog:
  - update from CVS
    - fix strxfrm (#88409)
  - use -m64 -mno-minimal-toc on ppc64
  - conflict with kernels < 2.4.20 on ppc64 and < 2.4.0 on x86_64
  - link glibc_post_upgrade against newly built libc.a


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-28
changelog:
  - update from CVS
    - fix NPTL pthread_detach and already terminated, but not yet
      joined thread (#88219)
    - fix bug-regex4 testcase (#88118)
    - reenable prelink support broken in 2.3.2-13
    - fix register_printf_function (#88052)
    - fix double free with fopen using ccs= (#88056)
    - fix potential access below $esp in {set,swap}context (#88093)
    - fix buffer underrun in gencat -H (#88099)
    - avoid using unitialized variable in tst-tgmath (#88101)
    - fix gammal (#88104)
    - fix iconv -c
    - fix xdr_string (PR libc/4999)
    - fix /usr/lib/nptl/librt.so symlink
    - avoid running NPTL cleanups twice in some cases
    - unblock __pthread_signal_cancel in linuxthreads, so that
      linuxthreads threaded programs work correctly if spawned
      from NPTL threaded programs
    - fix sysconf _SC_{NPROCESSORS_{CONF,ONLN},{,AV}PHYS_PAGES}
  - remove /lib/i686 directory before running ldconfig in glibc post
    during i686 -> i386 glibc "upgrades" (#88456)


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-20
changelog:
  - update from CVS
  - if kernel >= 2.4.1 doesn't support NPTL, fall back to
    /lib/i686 libs on i686, not stright to /lib


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-18
changelog:
  - update from CVS
  - fix NPTL pthread_cond_timedwait
  - fix sysconf (_SC_MONOTONIC_CLOCK)
  - use /%{_lib}/tls instead of /lib/tls on x86-64
  - add /lib/tls/librt*so* and /lib/i686/librt*so*
  - display content of .out files for all make check failures


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-16
changelog:
  - update from CVS
    - export __fork from glibc again
  - fix glibc-compat build in NPTL
  - fix c_stubs
  - fix some more atomic.h problems
  - don't check abi in glibc-compat libs


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-15
changelog:
  - update from CVS
  - build glibc-compat (for glibc 2.0 compatibility) and c_stubs add-ons
  - condrestart sshd in glibc_post_upgrade so that the user can
    log in remotely and handle the rest (#86339)
  - fix a typo in glibc_post_upgrade on sparc


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-9
changelog:
  - update from CVS
  - fix glibc-debug description (#85111)
  - make librt.so a symlink again, not linker script


author: Jakub Jelinek <jakub@redhat.com> 2.3.2-3
changelog:
  - update from CVS
  - only warn about errno, h_errno or _res for binaries, never
    libraries
  - rebuilt with gcc-3.2.2-4 to use direct %gs TLS access insn sequences


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-45
changelog:
  - update from CVS
  - include also linuxthreads FLOATING_STACKS libs on i686 and athlon:
    LD_ASSUME_KERNEL=2.2.5 to LD_ASSUME_KERNEL=2.4.0 is non-FLOATING_STACKS lt,
    LD_ASSUME_KERNEL=2.4.1 to LD_ASSUME_KERNEL=2.4.19 is FLOATING_STACKS lt,
    later is NPTL
  - enable TLS on alpha/alphaev6
  - add BuildPreReq: /usr/bin/readlink


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-43
changelog:
  - update from CVS
  - vfork fix on s390
  - rebuilt with binutils 2.13.90.0.18-5 so that accesses to errno
    don't bind locally (#83325)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-38
changelog:
  - update from CVS
  - initialize __environ in glibc_post_upgrade to empty array,
    so that it is not NULL
  - compat symlink for s390x /lib/ld64.so.1
  - enable glibc-profile on x86-64
  - only include libNoVersion.so on IA-32, Alpha and Sparc 32-bit


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-37
changelog:
  - update from CVS
    - nscd fixes, *scanf fix
  - fix %nptlarches noarch build (#81909)
  - IA-64 TLS fixes


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-36
changelog:
  - update from CVS
  - rework -debuginfo subpackage, add -debuginfo-common
    subpackage on IA-32, Alpha and Sparc (ie. auxiliary arches)
  - fix vfork in libc.a on PPC32, Alpha, Sparc
  - fix libio locks in linuxthreads libc.so if libpthread.so
    is dlopened later (#81374)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-35
changelog:
  - update from CVS
    - dlclose bugfixes
  - fix NPTL libpthread.a
  - fix glibc_post_upgrade on several arches


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-32
changelog:
  - update from CVS
  - don't use TLS libs if kernel doesn't set AT_SYSINFO
    (#80921, #81212)
  - add ntp_adjtime on alpha (#79996)
  - fix nptl_db (#81116)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-30
changelog:
  - fix condvar compatibility wrappers
  - add ugly hack to use non-TLS libs if a binary is seen
    to have errno, h_errno or _res symbols in .dynsym


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-27
changelog:
  - update from CVS
  - fix #include <sys/stat.h> with -D_BSD_SOURCE or without
    feature set macros
  - make *sigaction, sigwait and raise the same between
    -lpthread -lc and -lc -lpthread in linuxthreads builds


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-21
changelog:
  - system(3) fix for linuxthreads
  - don't segfault in pthread_attr_init from libc.so
  - add cancellation tests from nptl to linuxthreads


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-18
changelog:
  - update from CVS
    - fix NPTL hanging mozilla
    - initialize malloc in mALLOPt (fixes problems with squid, #79957)
    - make linuxthreads work with dl_dynamic_weak 0
    - clear dl_dynamic_weak everywhere


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-17
changelog:
  - update from CVS
    - NPTL socket fixes, flockfile/ftrylockfile/funlockfile fix
    - kill -debug sub-package, rename -debug-static to -debug
    - clear dl_dynamic_weak for NPTL


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-16
changelog:
  - fix <bits/mathinline.h> and <bits/nan.h> for C++
  - automatically generate NPTL libpthread wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-15
changelog:
  - update from CVS
    - all functions which need cancellation should now be cancellable
      both in libpthread.so and libc.so
    - removed @@GLIBC_2.3.2 cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-14
changelog:
  - update from CVS
    - replace __libc_lock_needed@GOTOFF(%ebx) with
      %gs:offsetof(tcbhead_t, multiple_threads)
    - start of new NPTL cancellation wrappers


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-10
changelog:
  - update from CVS
  - non-nptl --with-tls --without-__thread FLOATING_STACKS libpthread
    should work now
  - faster libc locking when using nptl
  - add OUTPUT_FORMAT to linker scripts
  - fix x86_64 sendfile (#79111)


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-9
changelog:
  - update from CVS
    - RUSCII support (#78906)
  - for nptl builds add BuildRequires
  - fix byteswap.h for non-gcc (#77689)
  - add nptl-devel package


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-8
changelog:
  - update from CVS
    - make --enable-kernel=2.2.5 --with-tls --without-__thread
      ld.so load nptl and other --with-__thread libs
  - disable nptl by default for now


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-7
changelog:
  - update from CVS
  - restructured redhat/Makefile and spec, so that src.rpm contains
    glibc-<date>.tar.bz2, glibc-redhat-<date>.tar.bz2 and glibc-redhat.patch
  - added nptl


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-3
changelog:
  - update from CVS
    - some more regex fixes
  - fix libpthread.a (#76484)
  - fix locale-archive enlarging


author: Jakub Jelinek <jakub@redhat.com> 2.3.1-2
changelog:
  - update from CVS
    - don't need to use 128K of stacks for DNS lookups
    - regex fixes
    - updated timezone data e.g. for this year's Brasil DST
      changes
    - expand ${LIB} in RPATH/RUNPATH/dlopen filenames


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-3
changelog:
  - don't prelink -r libc.so on ppc/x86-64/sparc*, it doesn't
    speed things up, because they are neither REL arches, nor
    ELF_MACHINE_REL_RELATIVE
  - fix sparc64 build


author: Jakub Jelinek <jakub@redhat.com> 2.2.94-1
changelog:
  - update from CVS
  - prelink on ppc and x86-64 too
  - don't remove ppc memset
  - instead of listing on which arches to remove glibc-compat
    list where it should stay


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-5
changelog:
  - fix wcsmbs functions with invalid character sets (or malloc
    failures)
  - make sure __ctype_b etc. compat vars are updated even if
    they are copy relocs in the main program


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-4
changelog:
  - fix /lib/libnss1_dns.so.1 (missing __set_h_errno definition
    leading to unresolved __set_h_errno symbol)


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-3
changelog:
  - security fix - increase dns-network.c MAXPACKET to at least
    65536 to avoid buffer overrun. Likewise glibc-compat
    dns-{host,network}.c.


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-2
changelog:
  - temporarily add back __ctype_b, __ctype_tolower and __ctype_toupper to
    libc.a and export them as @@GLIBC_2.0 symbols, not @GLIBC_2.0
    from libc.so - we have still lots of .a libraries referencing
    __ctype_{b,tolower,toupper} out there...


author: Jakub Jelinek <jakub@redhat.com> 2.2.93-1
changelog:
  - update from CVS
    - 2.2.93 release
    - use double instead of single indirection in isXXX macros
    - per-locale wcsmbs conversion state


author: Jakub Jelinek <jakub@redhat.com> 2.2.92-1
changelog:
  - update from CVS
    - 2.2.92 release
    - fix gettext after uselocale
    - fix locales in statically linked threaded programs
    - fix NSS


author: Jakub Jelinek <jakub@redhat.com> 2.2.91-1
changelog:
  - update from CVS
    - 2.2.91 release
    - fix fd leaks in locale-archive reader (#72043)
  - handle EROFS in build-locale-archive gracefully (#71665)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-25
changelog:
  - update from CVS
    - fix locale-archive loading hang on some (non-primary) locales
      (#72122, #71878)
    - fix umount problems with locale-archives when /usr is a separate
      partition (#72043)
  - add LICENSES file


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-24
changelog:
  - update from CVS
    - only mmap up to 2MB of locale-archive on 32-bit machines
      initially
    - fix fseek past end + fread segfault with mmaped stdio
  - include <sys/debugreg.h> which is mistakenly not included
    in glibc-devel on IA-32


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-21
changelog:
  - fix path to locale-archive in libc reader
  - build locale archive at glibc-common %post time
  - export __strtold_internal and __wcstold_internal on Alpha again
  - workaround some localedata problems


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-19
changelog:
  - update from CVS
  - GB18030 patch from Yu Shao
  - applied Debian patch for getaddrinfo IPv4 vs. IPv6
  - fix regcomp (#71039)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-16
changelog:
  - update from CVS
    - ungetc fix (#69586)
    - fseek errno fix (#69589)
    - change *etrlimit prototypes for C++ (#68588)
  - use --without-tls instead of --disable-tls


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-15
changelog:
  - set nscd user's shell to /sbin/nologin (#68369)
  - fix glibc-compat buffer overflows (security)
  - buildrequire prelink, don't build glibc's own copy of it (#67567)
  - update from CVS
    - regex fix (#67734)
    - fix unused warnings (#67706)
    - fix freopen with mmap stdio (#67552)
    - fix realloc (#68499)


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-12
changelog:
  - update from CVS
    - don't use __thread in headers
  - fix system(3) in threaded apps
  - update prelink, so that it is possible to prelink -u libc.so.6.1
    on Alpha


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-11
changelog:
  - update from CVS
    - fix __moddi3 (#65612, #65695)
    - fix ether_line (#64427)
  - fix setvbuf with mmap stdio (#65864)
  - --disable-tls for now, waiting for kernel
  - avoid duplication of __divtf3 etc. on IA-64
  - make sure get*ent_r and _IO_wfile_jumps are exported (#62278)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-34
changelog:
  - add relocation dependencies even for weak symbols (#63422)
  - stricter check_fds check for suid/sgid binaries
  - run make check at %install time


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-33
changelog:
  - handle Dec 31 1969 in mktime for timezones west of GMT (#63369)
  - back out do-lookup.h change (#63261, #63305)
  - use "memory" clobber instead all the fancy stuff in i386/i686/bits/string.h
    since lots of compilers break on it
  - fix sparc build with gcc 3.1
  - fix spec file for athlon


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-32
changelog:
  - fix debugging of threaded apps (#62804)
  - fix DST for Estonia (#61494)
  - document that pthread_mutexattr_?etkind_np are deprecated
    and pthread_mutexattr_?ettype should be used instead in man
    pages (#61485)
  - fix libSegFault.so undefined externals


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-31
changelog:
  - temporarily disable prelinking ld.so, as some statically linked
    binaries linked against debugging versions of old glibcs die on it
    (#62352)
  - fix <semaphore.h> for -std=c99 (#62516)
  - fix ether_ntohost segfault (#62397)
  - remove in glibc_post_upgrade on i386 all /lib/i686/libc-*.so,
    /lib/i686/libm-*.so and /lib/i686/libpthread-*.so, not just current
    version (#61633)
  - prelink -r on alpha too


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-28
changelog:
  - update from CVS
    - fix nscd with huge groups
    - fix nis to not close fds it shouldn't
  - rebuilt against newer glibc-kernheaders to use the correct
    PATH_MAX
  - handle .athlon.rpm glibc the same way as .i686.rpm
  - add a couple of .ISO-8859-15 locales (#61922)
  - readd temporarily currencies which were superceeded by Euro
    into the list of accepted currencies by localedef to make
    standard conformance testsuites happy
  - temporarily moved __libc_waitpid back to make Sun JDK happy
  - use old malloc code
  - prelink i686/athlon ld.so and prelink -r i686/athlon libc.so


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-27
changelog:
  - update from CVS
    - fix DST handling for southern hemisphere (#60747)
    - fix daylight setting for tzset (#59951)
    - fix ftime (#60350)
    - fix nice return value
    - fix a malloc segfault
  - temporarily moved __libc_wait, __libc_fork and __libc_stack_end
    back to what they used to be exported at
  - censorship (#60758)


author: Jakub Jelinek <jakub@redhat.com> 2.2.5-26
changelog:
  - update from CVS
  - use __attribute__((visibility(...))) if supported, use _rtld_local
    for ld.so only objects
  - provide libc's own __{,u}{div,mod}di3


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-6
changelog:
  - fix mmap stdio bug (seen on ld as File truncated error, #60043)
  - apply Andreas Schwab's fix for pthread sigwait
  - remove /lib/i686/ libraries in glibc_post_upgrade when
    performing i386 glibc install


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-5
changelog:
  - update to CVS
  - added glibc-utils subpackage
  - disable autoreq in glibc-debug
  - readd %lang() to locale files


author: Jakub Jelinek <jakub@redhat.com> 2.2.90-1
changelog:
  - update from CVS
  - remove -D__USE_STRING_INLINES
  - add debug subpackage to trim glibc and glibc-devel size


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-18
changelog:
  - fix a ld.so bug with duplicate searchlists in l_scope
  - fix erfcl(-inf)
  - turn /usr/lib/librt.so into linker script


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-17
changelog:
  - fix a ld.so lookup bug after lots of dlopen calls
  - fix CMSG_DATA for non-gcc non-ISOC99 compilers (#53984)
  - prelinking support for Sparc64


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-15
changelog:
  - update from CVS
    - linuxthreads now retries if -1/EINTR is returned from
      reading or writing to thread manager pipe (#43742)
  - use DT_FILTER in librt.so (#53394)
    - update glibc prelink patch so that it handles filters
  - fix timer_* with SIGEV_NONE (#53494)
  - make glibc_post_upgrade work on PPC (patch from Franz Sirl)


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-8
changelog:
  - kill stale library symlinks in ldconfig (#52350)
  - fix inttypes.h for G++ < 3.0
  - use DT_REL*COUNT


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-4
changelog:
  - don't crash on catclose(-1)
  - fix wscanf %[] handling
  - fix return value from swprintf
  - handle year + %U/%W week + week day in strptime


author: Jakub Jelinek <jakub@redhat.com> 2.2.4-3
changelog:
  - update from CVS to
    - fix strcoll (#50548)
    - fix seekdir (#51132)
    - fix memusage (#50606)
  - don't make gconv-modules.cache %config file, just don't verify
    its content.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix iconv cache handling
  - glibc should not own /usr/share/info, /usr/share/man nor /usr/share/man/man3 (#50673)
  - add gconv-modules.cache as emtpy config file (#50699)
  - only run iconvconfig if /usr is mounted read-write (#50667)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - move iconvconfig from glibc-common into glibc subpackage,
    call it from glibc_post_upgrade instead of common's post.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - adjust prelinking DT_* and SHT_* values in elf.h
  - update from CVS
    - iconv cache
    - make iconv work in SUID/SGID programs (#34611)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - kill non-pic code in libm.so
    - fix getdate
    - fix some locales (#49402)
  - rebuilt with binutils-2.11.90.0.8-5 to place .interp section
    properly in libBrokenLocale.so, libNoVersion.so and libanl.so
  - add floating stacks on IA-64, Alpha, Sparc (#49308)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix a bunch of math bugs (#43210, #43345, #43346, #43347, #43348, #43355)
  - make rpc headers -ansi compilable (#42390)
  - remove alphaev6 optimized memcpy, since there are still far too many
    broken apps which call memcpy where they should call memmove
  - update from CVS to (among other things):
    - fix tanhl bug (#43352)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix #include <signal.h> with -D_XOPEN_SOURCE=500 on ia64 (#35968)
  - fix a dlclose reldeps handling bug
  - some more profiling fixes
  - fix tgmath.h


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix the hardlink program, so that it really catches all files with
    identical content
  - add a s390x clone fix


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix rpc for non-threaded apps using svc_fdset and similar variables (#40409)
  - fix nss compatibility DSO versions for alphaev6
  - add a hardlink program instead of the shell 3x for plus cmp -s/link
    which takes a lot of time during build
  - rework BuildPreReq and Conflicts with gcc, so that
    it applies only where it has to


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix locale name of ja_JP in UTF-8 (#39783)
  - fix re_search_2 (#40244)
  - fix memusage script (#39138, #39823)
  - fix dlsym(RTLD_NEXT, ) from main program (#39803)
  - fix xtrace script (#39609)
  - make glibc conflict with glibc-devel 2.2.2 and below (to make sure
    libc_nonshared.a has atexit)
  - fix getconf LFS_CFLAGS on 64bitters
  - recompile with gcc-2.96-84 or above to fix binary compatibility problem
    with __frame_state_for function (#37933)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - support even 2.4.0 kernels on ia64, sparc64 and s390x
  - include UTF-8 locales
  - make gconv-modules %config(noreplace)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - run atexit() registered functions at dlclose time if they are in shared
      libraries (#28625)
    - add pthread_getattr_np API to make JVM folks happy


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - require 2.4.1 instead of 2.4.0 on platforms where it required 2.4 kernel
  - fix ldd behaviour on unresolved symbols
  - remove nonsensical ldconfig warning, update osversion for the most
    recent library with the same soname in the same directory instead (#31703)
  - apply selected patches from CVS
  - s390x spec file changes from Florian La Roche


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
  - make pthread_attr_setstacksize consistent before and after pthread manager
    is started (#28194)
  - pass back struct sigcontext from pthread signal wrapper (on ia32 only so
    far, #28493)
  - on i686 ship both --enable-kernel 2.2.5 and 2.4.0 libc/libm/libpthread,
    make ld.so pick the right one


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update from CVS
    - fix ia64 build with gnupro
    - make regex 64bit clean
    - fix tgmath make check failures on alpha


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - build all auxiliary arches with --enablekernel 2.4.0, those wanting
    to run 2.2 kernels can downgrade to the base architecture glibc.


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to 2.2.1 final
    - fix a pthread_kill_other_threads_np breakage (#23966)
    - make static binaries using dlopen work on ia64 again
  - fix a typo in glibc-common group


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - some more security fixes:
    - don't look up LD_PRELOAD libs in cache for SUID apps
      (because that bypasses SUID bit checking on the library)
    - place output files for profiling SUID apps into /var/profile,
      use O_NOFOLLOW for them
    - add checks for $MEMUSAGE_OUTPUT and $SEGFAULT_OUTPUT_NAME
  - hardlink identical locale files together
  - add %lang() tags to locale stuff
  - remove ko_KR.utf8 for now, it is provided by locale-utf8 package


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - add glibc-common subpackage
  - fix alphaev6 memcpy (#22494)
  - fix sys/cdefs.h (#22908)
  - don't define stdin/stdout/stderr as macros for -traditional (#22913)
  - work around a bug in IBM JDK (#22932, #23012)
  - fix pmap_unset when network is down (#23176)
  - move nscd in rc.d before netfs on shutdown
  - fix $RESOLV_HOST_CONF in SUID apps (#23562)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS to:
    - fix getnameinfo (#21934)
    - don't stomp on memory in rpath handling (#21544)
    - fix setlocale (#21507)
  - fix libNoVersion.so.1 loading code (#21579)
  - use auxarches define in spec file for auxiliary
    architectures (#21219)
  - remove /usr/share directory from filelist (#21218)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - update to CVS, including:
    - fix WORD_BIT/LONG_BIT definition in limits.h (#19088)
    - fix hesiod (#19375)
    - set LC_MESSAGES in zic/zdump for proper error message output (#19495)
    - fix LFS fcntl when used with non-LFS aware kernels (#19730)


author: Jakub Jelinek <jakub@redhat.com>
changelog:
  - fix alpha semctl (#19199)
  - update to CVS, including:
    - fix glibc headers for Compaq non-gcc compilers
    - fix locale alias handling code (#18832)
    - fix rexec on little endian machines (#18886)
  - started writing changelog again


author: Permaine Cheung <pcheung@redhat.com> - 0:1.2.1-2jpp.7
changelog:
  - Add missing connection hostname check against X.509 certificate name
  - Resolves: CVE-2012-5784
  - Add patches to build with java 1.6


author: Archit Shah <ashah@redhat.com> 0:1.2.1-2jpp_1fc
changelog:
  - remove unnecessary build dependencies on jacorb and jonathan-rmi
  - include fix to Axis bug 2142
  - merge from upstream 2jpp


author: Gary Benson <gbenson@redhat.com>
changelog:
  - Add DOM3 stubs to classes that need them (#152255).
  - Avoid some API holes in libgcj's ImageIO implementation.
  - Pick up CORBA and javax.rmi classes from jacorb and jonathan-rmi.


author: Nicolas Mailhot <Nicolas.Mailhot at laPoste.net> 0:1.1-1jpp
changelog:
  - Initial packaging
  - no xml security for now since xml-security is not packaged yet
  - functional tests not executed yet - seems they need some setup and do not
    run out of the box
  - no webapp right now - file layout is too messy if hidden into a war file
    since jpp installs webapps expanded, this matters


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.34.1.11.8
changelog:
  - Updated to icedtea6 1.11.8
  - Removed patch9   7201064.patch
  - Removed patch10   8005615.patch
  - Removed  not-applied patch 6664509.patch
  - Removed mauve as deadly outdated and run on QA
    -  jtreg kept, useless, but valid
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#911522


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.33.1.11.6
changelog:
  - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch
  - added patch9:   7201064.patch to be reverted
  - added patch10:   8005615.patch to fix the 6664509.patch
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.32.1.11.6
changelog:
  - added patch9 revertTwoWrongSecurityPatches2013-02-06.patch
    to remove   6664509 and 7201064 from 1.11.6 tarball
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.31.1.11.6
changelog:
  - Updated to icedtea6 1.11.6
  - Rewritten java-1.6.0-openjdk-java-access-bridge-security.patch 
  - Resolves: rhbz#906705


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.27.1.10.8
changelog:
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added also to package.definition
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.26.1.10.8
changelog:
  - Updated to IcedTea6 1.10.8
  - Modified patch3, java-1.6.0-openjdk-java-access-bridge-security.patch:
    - com.sun.org.apache.xerces.internal.utils.,com.sun.org.apache.xalan.internal.utils.
    - packages added to patch
  - Resolves: rhbz#828750


author: Jiri Vanek <jvanek@redhat.com> - 1:1.6.0.0-1.25.1.10.6
changelog:
  - Updated to IcedTea6 1.10.6
  - Resolves: rhbz#787142
  - Security fixes
    - S7082299: Fix in AtomicReferenceArray
    - S7088367: Fix issues in java sound
    - S7110683: Issues with some KeyboardFocusManager method
    - S7110687: Issues with TimeZone class
    - S7110700: Enhance exception throwing mechanism in ObjectStreamClass
    - S7110704: Issues with some method in corba
    - S7112642: Incorrect checking for graphics rendering object
    - S7118283: Better input parameter checking in zip file processing
    - S7126960: Add property to limit number of request headers to the HTTP Server
  - Bug fixes
    - RH580478: Desktop files should not use hardcoded path
  - Removed and deleted upstreamed  patch7 - name-rmi-fix.patch
  - Removed and deleted upstreamed Hugepages patches:
    - Source100: 7034464-hugepage.patch
    - Source101: 7037939-hugepage.patch
    - Source102: 7043564-hugepage.patch


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.22.1.9.7
changelog:
  - Resolves bz690289
  - Import from RHEL-5_6-Z
  - Updated to IcedTea6 1.9.7
  - Removed all plugin/webstart related commented lines
  - Modified bz entry format in previous logs to get around cvs ack checking bug


author: Deepak Bhole <dbhole@redhat.com> - 1:1.6.0.0-1.14.b17.el5
changelog:
  - Synched with el6 branch
  - Updated to IcedTea 1.7.5
  - Resolves: bz639951
  - Also resolves 619800 and 621303


author: Martin Matejovic <mmatejov@redhat.com> - 1:1.6.0-1.10.b16
changelog:
  - Update to openjdk build b16
  - Update to icedtea6-1.6
  - Added tzdata-java requirement
  - Added autoconf and automake build requirement
  - Added tzdata-java requirement
  - Added java-1.6.0-openjdk-gcc-stack-markings.patch
  - Added java-1.6.0-openjdk-memory-barriers.patch
  - Added java-1.6.0-openjdk-jar-misc.patch
  - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch
  - Added java-1.6.0-openjdk-securitypatches-20100323.patch
  - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402
  - Resolves: rhbz#576124


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-1.1.b09
changelog:
  - Moved policytool to devel package.
  - Updated release to 1.1, so there is considered newer than the outdated 
  EPEL package.
  - Resolves: rhbz#499079


author: Lillian Angel <langel@redhat.com> - 1:1.6.0.0-0.26.b09
changelog:
  - Updated java-1.6.0-openjdk-securitypatches.patch.
  - Added java-1.6.0-openjdk-lcms.patch.
  - Updated release.
  - Removed fedora sources. We can now build with system-installed openjdk.
  - Resolves: rhbz#490182


author: Martin Stransky <stransky@redhat.com> - 17.0.8-4
changelog:
  - Added fix for mozbz#601442 - Support the extensions.getAddons.showPane 
    pref again in the Add-ons Manager UI, a part of rhbz#818636 fix.


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-40
changelog:
  - Fix CVE-2012-5195 heap buffer overrun at repeatcpy (Resolves: rhbz#915690)
  - Fix CVE-2012-5526 newline injection due to improper CRLF escaping in
    Set-Cookie and P3P headers (Resolves: rhbz#915690)
  - Fix CVE-2012-6329 possible arbitrary code execution via Locale::Maketext
    (Resolves: rhbz#915690)
  - Fix CVE-2013-1667 DoS in rehashing code (Resolves: rhbz#915690)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-37.el5
changelog:
  - 527275 remove h2ph patch, which didn't work
  - 702389 change rebase of CGI into upstream patch
  - 593752 NDBM_File needs change in Configure to be able find ndbm.h
  - Related: rhbz#702389, rhbz#593752


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-35.el5
changelog:
  - Define number of tests in ext/threads/t/libc.t (Related: rhbz#676050)
  - Redirect CGI::Cookie->bake test output to error output not to pollute TAP
    protocol (Related: rhbz#702389)
  - Reenable tests for s390x and ia64 (Related: rhbz#675863)


author: Petr Pisar <ppisar@redhat.com> - 4:5.8.8-34.el5
changelog:
  - Avoid double free of nested loop variable (RT#70660). Back-ported from
    perl-5.10.1. Reverts code of perl-5.8.8-bug24254.patch as it provides better
    solution. (Resolves: rhbz#625746)


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - enlarge length of string in PAD_MAX from 999999999 to U32_MAX
    RT#83364
  - 675863 was accidentaly fixed by update of threads
  - Resolves: rhbz#676547, rhbz#675863


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - re-add NDBM_File support. It was removed in specfile for historical reason.
  - CVE-2010-2761 CVE-2010-4410 fixed by update of CGI to 3.54
  - h2ph produces invalide code
  - Resolves: rhbz#593752, rhbz#702389, rhbz#590644, rhbz#527275


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - newCONTSUB() wasn't thread-safe ([perl #45053]) which lead to crashes of
    string evaluation.
    Patch based on blead 401667e9af6ec282136e4e49614eb18614c5654b
  - update of module threads to 1.71 was also needed
  - Resolves: rhbz#676050


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-33.el5
changelog:
  - update to Unicode 5.1.0 (latest in maint-5.8 branch) lib/unicore/*
    c498a6a0f6c30ec6fd57d25f6fb84f7bdd793e77
  - update Unicode::UCD to 0.25, feature general_categories from Unicode 5.1.0
    was implemented in this release
    e7fbb7a80efd27bfde1ba3c6465ddb9f9357feb3
  - added tests related to strings into: op/pat.t, t/uni/class.t
  - Resolves: rhbz#621542


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-32.el5
changelog:
  - change release number according to Zstream, apply in Ystream missing
    security patches below. They were already shipped in Zstream.
  - CVE-2008-5302 perl: File::Path rmtree race condition (CVE-2005-0448) 
    reintroduced after upstream rebase to 5.8.8-1
  - CVE-2010-1168 perl Safe: Intended restriction bypass via object references
  - CVE-2010-1447 Safe 2.26 and earlier: Intended restriction bypass via Perl 
    object references in code executed outside safe compartment
  - Related: rhbz#548249


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-29.el5
changelog:
  - 548249 Perl threads leak memory when detached
  - 523827 CGI.pm popup_menu if optgroup, $selected is not properly escaped
  - Resolves: rhbz#548249, rhbz#523827


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-28.el5
changelog:
  - 537777 'Attempt to free unreferenced scalar' when running a perl 
   program with threads
  - Resolves: rhbz#537777


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-25.el5
changelog:
  - 458851 remove update of module - the cleanup function was already in
    the previous version
  - 507378 update Scalar-List-Utils to latest CPAN version, 1.21, to prevent
    bug #375621
  - Resolves: rhbz#507378, rhbz#507378
  - patch lib/Net/t/hostname.t, so that it does not fail in mock


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-24.el5
changelog:
  - Fix -Darchname on the Configure line.
  - Do not pack compatibility directories: remove all the mkdirs from %install.
  - Replace perl-5.8.8-incpush.patch by perl-5.8.8-oldarch.patch.
  - Adapt the perl-5.8.8-R-switch.patch; keep it though it probably is not
    useful anymore.
  - Resolves: rhbz#489909


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-23.el5
changelog:
  - libnet.cfg was installed on x86_64 into wron directory because all libnet
    files are stored in /usr/lib/ on both architectures.
  - Resolves: rhbz#490107


author: Marcela Mašláňová <mmaslano@redhat.com> - 4:5.8.8-21.el5
changelog:
  - Time::HiRes version is incompatible with glibc2.5. This is fixed
    with rebase to v1.9715.
  - Resolves: rhbz#453327


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-20.el5
changelog:
  - suidperl binaries shall be owned by the root, reinsert the %defattr
    declaration mistakenly removed at the time of bug 191416


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-19.el5
changelog:
  - fix the # of tests in backport of upstream change 32018
  - fix perl-5.8.8-perlvar-pod.patch again, update expected test results
  - fix a typo causing "make test" to be skipped
  - Related: rhbz#379791 #431041


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-17.el5
changelog:
  - some patches were forgotten, clean and actual patches move on the end
   of list
  - Resolves: rhbz#375621


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-15.el5
changelog:
  - add upstream fix for bless/overload problem (changes 31996,32018,32019,
  	32025) and perl-5.8.8-bug24254.patch. Without this patch had bless
  	poor performance.
  - Resolves: rhbz#379791


author: Stepan Kasal <skasal@redhat.com> - 4:5.8.8-14.el5
changelog:
  - add two patches, which...
  - Resolves: #435505, #431041
  - remove %define threading, the non-threading variant is not supported,
    Related: 435376


author: Marcela Maslanova <mmaslano@redhat.com> - 4:5.8.8-13.el5
changelog:
  - comments are before patches patch22-28
  - turn off tests for s390x. They were succesfully run in scratch, but
  	there's some issue with network, which breaks the brew build.
  - Resolves: #375621, #429491, #438114, #379791, #454602, #217833, #449324


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-8
changelog:
  - Fix upstream perl bug #34297:
    'utf8 overload stringify bug (utf8 caching maybe)'
    upstream patch #28006 applied


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix upstream perl bug #38454:
    'rindex corrects for $[ on bytes rather than UTF-8'
    apply upstream patch #27116
  - Fix upstream perl bug 24816:
    'Magic vars seem unsure if they are purely numeric' 
    ( perl -wle 'print $? = $? ^ "3"' -> 'Argument "^C" isn't numeric' )
    apply upstream patch #27391
  - Avoid writing over the input string in the case 'F' in moreswitches.
    apply upstream patch #27426
  - Fix upstream perl bug 34925 - 'overload and rebless' -
    apply upstream patches #27509, #27512
  - Fix upstream perl bug 3038 - '$qr = qr/^a$/m; $x =~ $qr; fails'
    apply upstream patch #27604
  - apply upstream patch #27605 - 'Fix off-by-one in $0 set magic.'
  - Fix upstream perl bug 23141 - '($_) = () fails to set $_ to undef'
    apply upstream patch #27914
  - Fix upstream perl bug #38619 - 
    'Bug in lc and uc (interaction between UTF-8, substr, and lc/uc)'
    apply upstream patch #27329
  - Give users the '-R' option to disable the Red Hat
    module compatibility default search path extension (incpush.patch).


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-6
changelog:
  - Fix bug 191416: make h2ph generate correct code for cpp statements
    like: '#if defined A || defined B'
  - Fix 172396.patch for non-threaded builds


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-4
changelog:
  - Fix bug 183553 / upstream bug 38657: fix -d:Foo=bar processing
  - rebuild with new gcc-4.1.0-1, released today


author: Jason Vas Dias <jvdias@redhat.com> - 4:5.8.8-2
changelog:
  - Rebuild again
  - Debian released 5.8.8 patches today; apply only relevant difference:
    03_fix_net_nntp : fix precedence in Net::NNTP::article 
                      from Brendan O'Dea<bod@debian.org>


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.8-0.1_RC1
changelog:
  - fix bug 178343: h2ph must include cpp "predefined macros" in _h2ph_pre.ph
  - Add perl(:MODULE_COMPAT_5.8.8) to Provides
  - Fix perlbug patch


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-8
changelog:
  - Apply upstream patches 26283 and 26284 : complete, revised fixes
    for CVE-2005-3962 and CVE-2005-3912 and 
    "Sys::Syslog security vulnerabilities" issues.
  - Fix bug 136009 / MakeMaker LD_RUN_PATH issue: 
    restore previous default Red Hat behavior of removing the MakeMaker
    generated LD_RUN_PATH setting from the link command .
    Document this removal, as it contravenes upstream default behavior, and 
    provide a USE_MM_LD_RUN_PATH MakeMaker member to enable use of the 
    MakeMaker generated LD_RUN_PATH .


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.8
changelog:
  - fix bug 174684 / CVE-2005-3962: sprintf integer overflow vulnerability
    backport upstream patch #26240


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.7
changelog:
  - fix bug 172739: upstream bug 36521 : deep recursion and segfault
    in CGI::Carp::warn with 'use diagnostics' : applied patch 25160.
  - fix CAN-2004-0976: insecure use of temp files (ala Debian)


author: Jason Vas Dias <jvdias@redhat.com> - 3:5.8.7-0.6
changelog:
  - fix bug 171111 : define ioctl length macro IOCPARM_LEN(x)
    macro to be _IOC_SIZE(x), not 256 - upstream bug #37535 raised.
  - provide 'perl_debugging' .spec file option to enable -DDEBUGGING
    and disable stripping / debuginfo generation - default: 0


author: Warren Togami <wtogami@redhat.com> - 3:5.8.7-0.1
changelog:
  - patch12 from Marius Feraru (#165907)
    TODO: patch11, patch26 and patch27 clash and need verification
  - Build without -DDEBUGGING (#156113)


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-17
changelog:
  - Don't remove the core modules:
      Filter::Util::Call, Filter::Simple, and Time::HiRes.
  - Obsoletes perl-{Filter,Filter-Simple,Time-HiRes}.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-16
changelog:
  - Reformatted the specfile.
  - Added the Source0 URL.
  - Dropped the MANIFEST.all file for the perl package.
  - Dropped the MANIFEST.suidperl file for the suidperl subpackage.


author: Jose Pedro Oliveira <jpo at di.uminho.pt> - 3:5.8.6-12
changelog:
  - New findbin-selinux patch: it now passes the FindBin.t tests
    (patch28 replaces patch23). #118877 #127023
  - Remove 5.8.2 ABI compat (#154295 comments 6 and 7).


author: Chip Turner <cturner@redhat.com> - 3:5.8.6-4
changelog:
  - add patch to put site_perl and vendor_perl before core perl dirs, to
    allow for overriding modules


author: Jose Pedro Oliveira <jpo@di.uminho.pt>
changelog:
  - Corrected the license information (missing GPL).
  - Added the URL tag.
  - Removed empty .bs files.
  - Eliminated several strip generated messages (bug 127025).
  - Corrected problems mentioned in bug 120772
    (updated Ville Skytta)


author: Colin Walters <walters@redhat.com> 3:5.8.3-17
changelog:
  - Apply patch to fix FindBin module when access to cwd is disallowed,
    should solve the MRTG/SELinux cron spam issue


author: Chip Turner <cturner@redhat.com> 3:5.8.3-6
changelog:
  - fix very broken @INC calculations with slightly less broken @INC
    calculations (not perfectly handled but the result is correct)
  - fix broken -Dsitearch declaration


author: Chip Turner <cturner@redhat.com> 3:5.8.1-90.rc2.1
changelog:
  - RC4
  - remove perl-5.8.0-fhs.patch since it is integrated now
  - remove perl-5.8.0-Safe2.09.patch, unnecessary now


author: Chip Turner <cturner@redhat.com> 3:5.8.0-89.pre%{PRELEVEL}.0
changelog:
  - bump epoch since we went from perl 5.8.1-pre to 5.8.0-pre (ie,
    changed what version perl thought of itself as)


author: Chip Turner <cturner@redhat.com>
changelog:
  - fix MANIFEST.DB_File handling for #83410; problem was unsubstituted
    /usr/lib64 that crept in with multilib


author: Elliot Lee <sopwith@redhat.com> 5.8.0-86
changelog:
  - Fix up multilib handling to use multilib_64_archs macro, add ppc64.
  - Patch100 probably makes sense on all archs, and ifarch'd patches are Bad(tm).


author: Chip Turner <cturner@redhat.com>
changelog:
  - version the Obsoleted on perl-NDBM_File so users can install newer
  - change the Obsoletes on NDBM_File to a Conflicts
    ones than what shipped with 7.3, yet still keep anaconda happy


author: Chip Turner <cturner@redhat.com>
changelog:
  - add rpath fix to prevent building perl from using installed system perl
  - massive re-integration of upstream patches to come to common basis (head of perl-maint branch)


author: Chip Turner <cturner@redhat.com>
changelog:
  - add numerous upstream patches to fix utf8/perlio issues
  - upgrade Storable, Safe, and Encoding to latest CPAN versions


author: Chip Turner <cturner@redhat.com>
changelog:
  - update CPAN, CGI, and DB_File versions; obsolete perl-libnet
  - libnet.cfg supplied, default to passive ftp in all cases


author: Chip Turner <cturner@redhat.com>
changelog:
  - make rpmlint happy, split out NDBM_File, clean up other spots
  - stopped doing grep -v etc in favor of custom script


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - replace the deprecated MD5 with Digest::MD5 (has to be here for cleanfeed)
  - obsolete: perl-Digest-MD5
  - use syslog instead of mail to report possible attempts to break into suidperl
  - force syslog on at build-time


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add Owen's fix for #14779/#14863
  - specify cc=gcc; continue to let cpp sort itself out
  - switch shadow support on (#8646)
  - release 7


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable 64-bit file support
  - change name of package that Perl expects gcc to be in from "egcs" to "gcc"
  - move man pages to /usr/share via hints/linux.sh and MM_Unix.pm
  - fix problems prefixifying with empty prefixes
  - disable long doubles on sparc (they're the same as doubles anyway)
  - add an Epoch to make sure we can upgrade from perl-5.00503
  - release 2


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - do not link anymore against the system db library (and make each module
    link against it separately, so that we can have Berkeley db1 and db2 mixed
    up)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - version 5.00503
  - make the default man3 install dir be release independent
  - try to link against db1 to preserve compatibility with older databases;
    abandoned idea because perl is too broken to allow such an easy change
    (hardcoded names *everywhere* !!!)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to fix a security race
  - do not use setres[ug]id - those are not implemented on 2.0.3x kernels


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - upgraded to 5.004_04 - 5.004_01 had some nasty memory leaks.
  - fixed the spec file to be version-independent


author: Erik Troan <ewt@redhat.com>
changelog:
  - Use -Darchname=i386-linux 
  - Require csh (for glob)
  - Use RPM_ARCH during configuration and installation for arch independence


author: Warren Togami <wtogami@redhat.com> - 2.6.6-2
changelog:
  - Upstream backports:
      0e3079d15adeb12c1e57ceaf5bf037f9b71c8abd Fix AIM SSL clientLogin
      b14ee507e932a395a0e1f29298af162c8614ca0f Fix AIM clientLogin with proxy


author: Warren Togami <wtogami@redhat.com> - 2.6.6-1
changelog:
  - 2.6.6 with security and numerous minor bug fixes
    CVE-2010-0277 CVE-2010-0420 CVE-2010-0423
  - Bug #528796: Get rid of #!/usr/bin/env python


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Carlos O'Donell <carlos@redhat.com> - 2.5-107.5
changelog:
  - Fix _nl_find_msg malloc failure case, and callers (#963813).
    - Test on init_fct, not result->__init_fct, after demangling (#963812).
    - Don't handle ttl == 0 specially (#962903).


author: Carlos O'Donell <carlos@redhat.com> - 2.5-107.3
changelog:
  - Fix multibyte character processing crash in regexp (CVE-2013-0242, #951130)
    - Fix getaddrinfo stack overflow resulting in application crash (CVE-2013-1914, #951130)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-30
changelog:
  - Document -D and -E options in man page (#814602)
  - Require matching arch for freshen on colored transactions (#813282)


author: Florian Festi <ffesti@redhat.com> - 4.4.2.3-29
changelog:
  - Add DWARF 3 and 4 support to debugedit (#808547)
  - No longer add \n to group tag in Python bindings (#783451)
  - Fix typos in Japanese rpm man page (#760552)
  - Bump Geode compatibility up to i686 (#620570)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-28
changelog:
  - Proper region tag validation on package/header read (CVE-2012-0060)
  - Double-check region size against header size (CVE-2012-0061)
  - Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-26
changelog:
  - Add support for XZ-compressed sources and patches to rpmbuild (#620674)
  - Avoid unnecessary assert-death when closing NULL fd (#573043)
  - Add scriptlet error notification callbacks (#533831)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-25
changelog:
  - Honor --noscripts for pre- and posttrans scriptlets too (#740345)
  - Avoid bogus error on printing empty ds from python (#628883)
  - File conflicts correctness & consistency fixes (#740291)
  - Create the directory used for transaction lock if necessary (#510469)
  - Only enforce default umask during transaction (#673821)


author: Jindrich Novy <jnovy@redhat.com> - 4.4.2.3-19
changelog:
  - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade (#626708)
  - fix SELinux memory leak (#566746), patch from Florian Festi


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-12
changelog:
  - fix pgp fingerprint calculation (#493777)
  - performance tweaks (#435475)
    - better hash algorithm to speed up initial install
    - avoid crazy memory fragmentation on file fingerprinting
    - eliminate unnecessary allocations from rpmdsCompare() hotpath


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-10
changelog:
  - Filter out timestamp differences of shared files on verify (#472151)
  - Perform verification in real chroot if --root specified (#434150)
  - Check for arch compatibility on colored transactions too (#472065)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-7
changelog:
  - Fix exit code on file not found errors (#463944, #446202)
  - Always honor epoch (no)promote behavior in dependency sets (#466503)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-5
changelog:
  - Disallow creation of packages larger than we can cleanly handle (#448488)
  - Fix retrieval of multiple packages through proxy (#450205)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-4
changelog:
  - Temporarily permit conflicts in /usr/share/doc/ (#460808)
  - Fix --dump usage description in Japanese manual too (#250207)


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-2
changelog:
  - Close all file descriptors before running scriptlets (#453645)
  - Tighten up dependencies between sub-packages


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2.3-1
changelog:
  - Rebase to RPM 4.4.2.3 from F9 (#454887)
  - Much cleaned up spec
  - NSS used instead of beecrypt for lowlevel crypto (#444805)
  - Provides no longer treated as implicit obsoletes (#233713, #348971)
  - Use root:root for file ownerships everywhere (#439417)
  - Improved .rpmsave/.rpmnew behavior (#426258)
  - Exit code corrections (#244236, #440595)
  - Improved multilib build support (#257921)
  - Improved debuginfo extraction (#251333)
  - Dozens of other issues resolved


author: Panu Matilainen <pmatilai@redhat.com> - 4.4.2-48
changelog:
  - Don't show errors twice on non-existent files (#215712)
  - Update scriptlet names to match what's available (#248128)


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-22
changelog:
  - put in simple workaround for per-file deps with autoreq off (#190488) 
    while pnasrat works on a real fix


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-21
changelog:
  - run ldconfig in -libs subpackage %post, not main package
  - add patch to generate shared lib deps by following symlinks so that 
    -devel packages sanely depend on main libs


author: Jeremy Katz <katzj@redhat.com> - 4.4.2-17
changelog:
  - remove redundant elfutils-libelf buildrequires
  - rpm-python doesn't require elfutils (related to #188495)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-16
changelog:
  - Skipdirs on erase again (#187308)
  - Make fcntl lock sensitive to --root (#151255)
  - Fix netshared path comparison (#52725)
  - Fix rpm vercmp (#178798)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.2-8
changelog:
  - Add elfutils Build Requires to rpmbuild (#155129)
  - Don't do conflicts if both files %ghost(#155256)
  - Fix popt charset for various languages (#172155)
  - Don't include .la file (#174261)


author: Paul Nasrat <pnasrat@redhat.com> - 4.4.1-19
changelog:
  - Check for symlinks in check-files (#108778)
  - Move zh_CN (#154623)
  - Test fix for signing old rpms (#127113)


author: Miloslav Trmac <mitr@redhat.com> - 4.4.1-12
changelog:
  - Remove $RPM_BUILD_ROOT and $RPM_BUILD_DIR from distribued .la files (#116891)
  - Don't ship static version of _rpmdb.so
  - BuildRequires: readline-devel


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.24
changelog:
  - zlib: uniqify certain symbols to prevent name space pollution.
  - macosx: include <sys/types.h> so that python sees the u_char typedef.
  - macosx: change to --prefix=/usr rather than /opt/local.
  - use waitpid rather than SIGCHLD reaper.
  - rip out DB_PRIVATE revert if not NPTL, it's not the right thing to do.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.16
changelog:
  - fix: length of gpg V4 hash seed was incorrect (#146896).
  - add support for V4 rfc-2440 signatures.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.14
changelog:
  - add sqlite internal (build still expects external sqlite3-3.0.8).
  - sqlite: revert to original narrow scoping of cOpen/cClose.


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.10
changelog:
  - more macosx fiddles.
  - move global /var/lock/rpm/transaction to dbpath.
  - permit fcntl path to be configured through rpmlock_path macro.
  - add missing #if defined(ENABLE_NLS) (#146184).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.8
changelog:
  - changes to build on Mac OS X using darwinports neon/beecrypt.
  - add https://svn.uhulinux.hu/packages/dev/zlib/patches/02-rsync.patch


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.6
changelog:
  - mac os x patches (#131943,#131944,#132924,#132926).
  - mac os x patches (#133611, #133612, #134637).


author: Jeff Johnson <jbj@jbj.org> 4.4.1-0.5
changelog:
  - upgrade to db-4.3.27.
  - revert MAGIC_COMPRESS, real fix is in libmagic (#143782).
  - upgrade to file-4.12 internal.


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-4
changelog:
  - Resolves: rhbz#831654 - Pick up fixes from the rhel-5.8 branch
  - Regenerated nspr-config-pc.patch passes the the rpmdiff tests


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-3
changelog:
  - Resolves: rhbz#831654 - restore top section of nspr-config-pc.patch
  - Needed to prevent multilib regressions


author: Elio Maldonado <emaldona@redhat.com> - 4.9.1-2
changelog:
  - Resolves: rhbz#831654 - revert unwanted changes to nspr.pc
  - Change -L@libdir@/nspr4 to -L@libdir@ in the patch


author: Elio Maldonado Batiz <emaldona@redhat.com> - 4.8.9-1
changelog:
  - Resolves: Bug 772945 - [RFE] Async update nspr to make firefox 10 LTS rebase possible
  - Update to 4.8.9


author: Kai Engert <kengert@redhat.com> 4.6.1-2
changelog:
  - Do not use -ansi when compiling, because of a compilation
    problem with latest glibc and anonymous unions.
    See also bugzilla.mozilla.org # 322427.


author: Christopher Aillon <caillon@redhat.com>
changelog:
  - Stop shipping static libraries; NSS and dependencies no longer
    require static libraries to build.


author: Christopher Aillon <caillon@redhat.com> 4.6-4
changelog:
  - Use the NSPR version numbering scheme reported by NSPR,
    which unfortunately is not exactly the same as the real
    version (4.6 != 4.6.0 according to RPM and pkgconfig).


author: Kai Engert <kengert@redhat.com> - 0.12-13
changelog:
  - Reverting previous changes, which failed to build,
    no rebuild necessary at this time because of fixes in gecko.


author: Christopher Aillon <caillon@redhat.com> 0.9.1-4
changelog:
  - Rebuilt to pick up new mozilla changes
  - Drop ppc from the build since mozilla doesn't build there anymore.


author: Colin Walters <walters@redhat.com> 0.9-2
changelog:
  - Apply patch from George Karabin <gkarabin@pobox.com> to
    export LD_LIBRARY_PATH (closes bug 120220).


author: Mark McLoughlin <markmc@redhat.com> 0.9-1
changelog:
  - Update to 0.9
  - Install the schemas correctly
  - Package /usr/bin/devhelp-bin
  - Update requires/buildrequires
  - Only build on platforms where mozilla is available


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-37.4
changelog:
  - lvm: vgreduce --removemissing unnecessarily removes PVs/LVs when some PVs in the VG fail
    Resolves: rhbz#1004482


author: Ryan McCabe <rmccabe@redhat.com> - 2.0.52-32
changelog:
  - Bring HA LVM inline with upstream to collect the fixes
    Resolves: rhbz#693855 rhbz#756180
  - rgmanager: Fix orainstance.sh error checking
    Resolves: rhbz#723819
  - rgmanager: Don't exit uncleanly when cman asks us to shut down.
    Resolves: rhbz#769730
  - Fix 773372: Any change to lvm.conf causes HA LVM to
    Resolves: rhbz#773372
  - rgmanager: Don't immediately stop services that have started sucessfully
    rgmanager: Fix return code when relocation fails and svc is running on original node
    Resolves: rhbz#789366
  - rgmanager: Fix for unmount of full filesystems
    Resolves: rhbz#819595
  - rgmanager: Fix for services stuck in recovery
    Resolves: rhbz#834459


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-28
changelog:
  - Fix for rhbz769731 - HA LVM failure to remove tag thwarts service relocation
    Resolves: rhbz#769731


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-26
changelog:
  - rgmanager: Add extra service status call
    rgmanager: Avoid duplicate restart of service
    rgmanager: Fix call to service_status()
    rgmanager: Fix tiny memory leak in sl_service_status
    rgmanager: Fix dependency issue related to ordering
    Resolves: rhbz#743214


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-23
changelog:
  - resource-agents: nfsclient: fix wildcard status checks
    Resolves: rhbz#700103
  - rgmanager: Mark services on dead nodes as stopped
    rgmanager: Send events on service stop & preserve frozen flag
    Resolves: rhbz#722230
  - resource-agents: Handle TREX and Webdispatcher in SAPInstance
    Resolves: rhbz#746992


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-22
changelog:
  - rgmanager: Fix ASEHAagent to allow for multiple ASEHA resources on one machine.
    rgmanager: Fix ASEHAagent to make server_name unique
    Resolves: rhbz#690265
  - rgmanager: Resolve rare deadlock
    Resolves: rhbz#713243
  - rgmanager: Add -F to clusvcadm man page
    Resolves: rhbz#715052
  - rgmanager: Fix dependency restart bug
    rgmanager: Fix dependency restart bug in CP mode
    Resolves: rhbz#743442
  - resource-agents: orainstance.sh: Fix temporary variables
    Resolves: rhbz#744283


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-21
changelog:
  - rgmanager: Fix bad passing of SFL_FAILURE up
    (fix_bad_passing_of_sfl_failure_up.patch)
    Resolves: rhbz#711521


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-20
changelog:
  - resource-agents: Improve LD_LIBRARY_PATH handling by SAP*
    (resource_agents_improve_ld_library_path_handling_by_sap*.patch)
    Resolves: rhbz#710637


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-19
changelog:
  - Fix changelog format
  - rgmanager: Fix reference count handling
    (fix_reference_count_handling.patch)
    Resolves: rhbz#692771


author: Marek Grac <mgrac@redhat.com> - 2.0.52-18
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Fix_pid_files.patch)
    Resolves: rhbz#663827


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-16
changelog:
  - rgmanager: Allow non-root clustat
    (allow_non_root_clustat.patch)
    Resolves: rhbz#510300
  - rgmanager: Initial commit of central proc + migration support
    (central_proc_+_migration_support.patch)
    Resolves: rhbz#525271
  - rgmanager: Make clufindhostname -i predictable
    (make_clufindhostname_i_predictable.patch)
    Resolves: rhbz#592613
  - resource-agents: Trim trailing slash for nfs clients
    (trim_trailing_slash_for_nfs_clients.patch)
    Resolves: rhbz#592624
  - rgmanager: Update last_owner on failover
    (update_last_owner_on_failover.patch)
    Resolves: rhbz#610483
  - rgmanager: Pause during exit if we stopped services
    (pause_during_exit_if_we_stopped_services.patch)
    Resolves: rhbz#619468
  - rgmanager: Fix quotaoff handling
    (fix_quotaoff_handling.patch)
    Resolves: rhbz#637678
  - resource-agents: Try force-unmount before fuser for netfs.sh
    (try_force_unmount_before_fuser_for_netfs_sh.patch)
    Resolves: rhbz#678494
  - rgmanager: Improve rgmanager's exclusive prioritization handling
    (improve_rgmanager_s_exclusive_prioritization_handling.patch)
    Resolves: rhbz#680256


author: Marek Grac <mgrac@redhat.com> - 2.0.52-15
changelog:
  - resource-agents: postgres-8 resource agent does not detect a failed
    start of postgres server 
    (postgres-8-Do-not-send-TERM-signal-when-killing-post.patch)
    (postgres-8-Improve-testing-if-postgres-started-succe.patch)
    Resolves: rhbz#663827


author: Marek Grac <mgrac@redhat.com> - 2.0.52-14
changelog:
  - resource-agents: Fix problems when generating XML configuration file
    (rgmanager-Fix-problems-in-generated-XML-config-file.patch)
    Resolves: rhbz#637802


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-13
changelog:
  - resource-agents: Use literal quotes for tr calls
    (resource_agents_use_literal_quotes_for_tr_calls.patch)
    Resolves: rhbz#637154


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-12
changelog:
  - resource-agents: Use shutdown immediate in oracledb.sh
    (use_shutdown_immediate_in_oracledb_sh.patch)
    Resolves: rhbz#633992
  - rgmanager: Add path to rhev-check.sh
    (add_path_to_rhev_check_sh.patch)
    Resolves: rhbz#634225
  - rgmanager: Make clustat report correct version
    (make_clustat_report_correct_version.patch)
    Resolves: rhbz#654160


author: Marek Grac <mgrac@redhat.com> - 2.0.52-11
changelog:
  - resource-agents: Listen line in generated httpd.conf incorrect
    (resource-agents-Remove-netmask-from-IP-address-when.patch)
    Resolves: rhbz#675739
  - resource-agents: Disable updates to static routes by RHCS IP tooling
    (resource-agents-Add-option-disable_rdisc-to-ip.sh.patch)
    Resolves: rhbz#620700


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-10.1
changelog:
  - rgmanager: Fix nofailback when service is in 'starting' state
    (fix_nofailback_when_service_is_in_starting_state.patch)
    Resolves: rhbz#669440


author: Marek Grac <mgrac@redhat.com> - 2.0.52-10
changelog:
  - resource-agents: Problem with whitespace in mysql resource name
    (resource_agents_fix_whitespace_in_names.patch)
    Resolves: rhbz#632704


author: Lon Hohberger <lhh@redhat.com> - Version: 2.0.52-9
changelog:
  - resource-agents: Fix migrateuriopt setting
    (resource_agents_fix_migrateuriopt_setting.patch)
    Resolves: rhbz#659477


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-8
changelog:
  - rgmanager: Do hard shut down if CMAN dies
    (do_hard_shut_down_if_cman_dies.patch)
    rgmanager: Work around lockspace release hang
    (work_around_lockspace_release_hang.patch)
    Resolves: rhbz#639961
  - rgmanager: Fix CIFS mount handling in netfs.sh
    (fix_cifs_mount_handling_in_netfs_sh.patch)
    Resolves: rhbz#640676


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-7
changelog:
  - rgmanager: Add multi-instance Oracle database agents
    (add_multi_instance_oracle_database_agents.patch)
    Resolves: rhbz#629208


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.18
changelog:
  - rgmanager: tomcat-5 can't start properly
    (tomcat_5_can_t_start_properly.patch)
    Resolves: rhbz#591003


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.17
changelog:
  - halvm: lvm agent incorrectly reports vg is in volume_list
    (lvm_agent_incorrectly_reports_vg_is_in_volume_list.patch)
    Resolves: rhbz#506587
  - rgmanager: Add non-critical flag to resources
    (rgmanager_add_non_critical_flag_to_resources.patch)
    rgmanager: Add non-critical base behavior
    (rgmanager_add_non_critical_base_behavior.patch)
    rgmanager: Header cleanup
    (rgmanager_header_cleanup.patch)
    rgmanager: Use rg_strings.c for flags
    (rgmanager_use_rg_strings_c_for_flags.patch)
    rgmanager: Present all flags in clustat output
    (rgmanager_present_all_flags_in_clustat_output.patch)
    rgmanager: Mark non-critical resources disabled
    (rgmanager_mark_non_critical_resources_disabled.patch)
    rgmanager: Add convalesce operation
    (rgmanager_add_convalesce_operation.patch)
    rgmanager: Allow restart,disable recovery policy
    (rgmanager_allow_restart,disable_recovery_policy.patch)
    rgmanager: Fix handling of independent subtrees
    (rgmanager_fix_handling_of_independent_subtrees.patch)
    rgmanager: Do not fail service if non-critical resources fail to stop
    (rgmanager_do_not_fail_service_if_non_critical_resources_fail_to_stop.patch)
    rgmanager: Support convalesce w/ central_processing
    (rgmanager_support_convalesce_w_central_processing.patch)
    rgmanager: Add -c option to man page & clusvcadm -h
    (rgmanager_add_c_option_to_man_page_clusvcadm_h.patch)
    rgmanager: Add independent subtree restart thresholds
    (rgmanager_add_independent_subtree_restart_thresholds.patch)
    rgmanager: clean up independent subtree restart handling
    (rgmanager_clean_up_independent_subtree_restart_handling.patch)
    rgmanager: Fix corner case in critical/non-critical handling
    (rgmanager_fix_corner_case_in_critical_non_critical_handling.patch)
    Resolves: rhbz#605733
  - resource-agents: Support ext4 in fs.sh
    (support_ext4_in_fs_sh.patch)
    Resolves: rhbz#636550


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.16
changelog:
  - rgmanager: Retry when config is out of sync
    (retry_when_config_is_out_of_sync.patch)
    Resolves: rhbz#568126


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.15
changelog:
  - rgmanager: Honor restricted FDs during migrations
    (honor_restricted_fds_during_migrations.patch)
    Resolves: rhbz#592380
  - rgmanager: Fix clustat return code
    (fix_clustat_return_code.patch)
    Resolves: rhbz#620730


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.13
changelog:
  - resource-agents: Fix samba netbios name
    (fix_samba_netbios_name.patch)
    Resolves: rhbz#531098
  - resource-agents: Fix vxfs support
    (fix_vxfs_support.patch)
    Resolves: rhbz#531843
  - rgmanager: Allow exit while waiting for cman
    (allow_exit_while_waiting_for_cman.patch)
    Resolves: rhbz#545229
  - rgmanager: Document failover domains
    (document_failover_domains.patch)
    Resolves: rhbz#557562
  - resource-agents: SAPDatabase: remove $TEMPFILE
    (sapdatabase_remove_tempfile.patch)
    Resolves: rhbz#565363
  - rgmanager: Kill processes correctly w/ force_unmount
    (kill_processes_correctly_w_force_unmount.patch)
    Resolves: rhbz#573705
  - HA LVM: Use CLVM with local machine kernel targets
    (use_clvm_with_local_machine_kernel_targets_bz_585229.patch)
    Resolves: rhbz#585229 rhbz#509368 rhbz#583769 rhbz#572311
  - resource-agents: Remove nfs service temp directories
    (remove_nfs_service_temp_directories.patch)
    Resolves: rhbz#595455
  - resource-agents: Fix migration mapping behavior w/ virsh
    (fix_migration_mapping_behavior_w_virsh.patch)
    Resolves: rhbz#596016


author: Marek Grac <mgrac@redhat.com> - 2.0.52-6.11
changelog:
  - postgres-8 will fail to stop gracefully if there are active
    clients connected
  - Resource agent for psql does not work correctly with netmask
  - Resolves: rhbz#587735 rhbz#614456


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.10
changelog:
  - Fix start timeout if status_program takes a long time
  - Use sysrq-b to reboot to work around a failed reboot() syscall
  - Resolves: rhbz#583788 rhbz#608397


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-6.2
changelog:
  - Add status_program attribute to vm.sh
  - Make status check tolerances user configurable and timing work
    correctly
  - Resolves: rhbz#583788


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-5
changelog:
  - Make relocate-to-offline host consistent with other relocation
    behaviors
  - Add isAlive error reporting for file system agents
  - Resolves: rhbz#562237 rhbz#536157


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.33
changelog:
  - Make VF timeouts scale with totem token timeout
  - Revert requires: line for installation in virtual machines.
  - Resolves: rhbz#548133 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.31
changelog:
  - Fix fs.sh bind mount handling
  - Add missing requires: line for libvirt 0.6.3
  - Resolves: rhbz#526286 rhbz#547752


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.27
changelog:
  - Add debugging information to dumps generated by rgmanager
  - Fix migration failure handling
  - Resolves: rhbz#512052 rhbz#499835


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.21
changelog:
  - Fix problem in ip.sh where it was not honoring monitor_link
    during startup
  - Resolves: rhbz#532756


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.15
changelog:
  - Fix problem causing rgmanager to stick after a node dies
    and rejoins, blocking configuration updates and other events
  - Resolves: rhbz#527777


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.14
changelog:
  - Fix problem causing service to get stuck in 'recovering' state
    when using central_processing
  - Resolves: rhbz#530409


author: Lon Hohberger <lhh@redhat.com> - 2.0.52-1.1
changelog:
  - Fix issue causing unmounting of cluster file systems while in 
  use during a configuration change.
  - Resolves: rhbz#506094


author: Chris Feist <cfeist@redhat.com> - 2.0.52-1
changelog:
  - When vm.sh does a status check and gets 'no state' it is now treated as a
    running state.
  - Resolves: rhb#514044


author: Chris Feist <cfeist@redhat.com> - 2.0.51-1
changelog:
  - In some cases virtual machines will be restarted after a successful migration
    when the cluster configuration is updated.
  - Resolves: rhbz#505340


author: Chris Feist <cfeist@redhat.com> - 2.0.50-1
changelog:
  - Extra checks from the oracle agents have been removed.
  - Several fixes to prevent DOS attacks through insecure use of /tmp/ files have
    been implemented.
  - vm.sh now uses libvirt
  - Users can now define an explicit service processing order when
    central_processing is enabled
  - Resolves: rhbz#470917 rhbz#412911 rhbz#468691 rhbz#492828


author: Chris Feist <cfeist@redhat.com> - 2.0.49-1
changelog:
  - Rgmanger now checks to see if it has been killed by the OOM killer and if
    so, reboots the node.
  - Resolves: rhbz#488072


author: Chris Feist <cfeist@redhat.com> - 2.0.48-1
changelog:
  - clulog now accepts '-' as the first character in messages.
  - If expire_time is 0 max_restarts is no longer ignored.
  - SAP scripts have been updated.
  - Empty PID files no longer cause resource start failures.
  - Recovery policy of type restart now works properly when using a resource
    based on ra-skelet.sh
  - startup_wait option has been added to the mysql resource agent.
  - samba.sh now kills the pid listed in the proper pid file.
  - Handling of '-F' has been improved to fix issues with rgmanager crashing if
    no members of a restricted failover domain are online and rgmanager failing
    to correctly restart service is they fail on the first node.
  - Enabled ability to prioritize services.
  - It is now possible to cap the number of simultaneious status checks to
    prevent load spikes.
  - Enabling a frozen service no longer fails and leaves the service in a failed
    state.
  - Forking and cloning during status checks has been optimized to reduce load
    spikes.
  - rg_test no longers hangs when running against a cluster due to the removal
    of an 8MB memory cap.
  - Resolves: rhbz#471431 rhbz#475826 rhbz#474444 rhbz#449394 rhbz#481058 rhbz#483093 rhbz#486711 rhbz#486717 rhbz#482858 rhbz#487598 rhbz#488714 rhbz#250718 rhbz#490455


author: Chris Feist <cfeist@redhat.com> - 2.0.46-1
changelog:
  - postgres-8.sh now uses 'su' instead of 'sudo' allowing the resource agent to
    run in the background.
  - Resolves: rhbz#462910


author: Chris Feist <cfeist@redhat.com> - 2.0.42-1
changelog:
  - rgmanager can now resolve hostnames to IP addresses and back when checking
    NFS clients.
  - Caching has been added in services to increase performance with a large
    number of individual mounters.
  - Resolves: rhbz#455324


author: Chris Feist <cfeist@redhat.com> - 2.0.40-1
changelog:
  - Parameter added for mapping cluster node name to xen migration
    target hostname.
  - Add support for service freeze/unfreeze.
  - rgmanager now detects restricted failover domain crashes.
  - Fix bugs when using rgmanager with IPv6.
  - rgmanager now waits for fence domain join to complete on startup.
  - clusvcadm man page fixes.
  - Resolves: rhbz#453429 rhbz#448046 rhbz#435466 rhbz#459582 rhbz#460032 rhbz#459754


author: Chris Feist <cfeist@redhat.com> - 2.0.39-1
changelog:
  - rgmanager no longer erroneously removes the wrong address when the IP
    address matches the broadcast address of the interface.
  - rgmanager now properly checks pbond links (used with Xen).
  - Resources with names that include spaces are now properly handled.
  - HA LVM now works properly on ia64 architectures.
  - Symlinks in mount points no longer cause failures.
  - rgmanager now properly sets the close on exec bit for its sockets (fixes
    SELinux issues)
  - Non-ethernet bonding slaves now work properly.
  - The LVM script now provides sufficient parameter descriptions.
  - Machines can now fence themselves if they cannot deactivate their logical
    volumes.
  - The LVM script no longer removes tags from all VGs.
  - Resolves: rhbz#453000 rhbz#451654 rhbz#445662 rhbz#446260 rhbz#441582 rhbz#433313 rhbz#331661 rhbz#443660 rhbz#431713 rhbz#242798 rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.38-1
changelog:
  - Leaving out the VG name paramater to 'vgchange --deltag' no longer
    causes the tag to be removed from all VGs.
  - Resolves: rhbz#438816


author: Chris Feist <cfeist@redhat.com> - 2.0.37-1
changelog:
  - A bug was fixed which caused incorrect return codes during service stop
    operations.
  - Resolves: rhbz#432998


author: Chris Feist <cfeist@redhat.com> - 2.0.34-1
changelog:
  - Extraneous errors in during HA lvm operations have been fixed
  - Oracle 10g Release 2 resource agent is now included
  - Resolves: rhbz#428346 rhbz#349571


author: Chris Feist <cfeist@redhat.com> - 2.0.33-1
changelog:
  - Samba shares may now be mounted from the netfs resource agent
  - clulog now honors rgmanager log levels
  - Fixed a crash on restart bug
  - Default migration policy is now live (from paused)
  - Restart counters have been implemented
  - Stopping a service using a shared GFS resource no longer umounts GFS if
    other services are using it
  - HA LVM now allows multiple LVs/VGs as long as they move together
  - Resolves: rhbz#289501 rhbz#303981 rhbz#345871 rhbz#247139 rhbz#254111 rhbz#427378 rhbz#428448


author: Chris Feist <cfeist@redhat.com> - 2.0.32-1
changelog:
  - Mounting samba shares are now supported.
  - clulog now honors cluster configuration specification of log levels in
    all cases.
  - clusvcadm man page has been updated
  - Default virtual machine migration is now live (-l)
  - It is now possible to fail over a service have a specified number of restarts
  - rgmanager no longer umounts shared gfs partitions when it is used by other
    services
  - Resolves: rhbz#250681 rhbz#289501 rhbz#303981 rhbz#324151 rhbz#345871 rhbz#400211 rhbz#254111


author: Chris Feist <cfeist@redhat.com> - 2.0.31-1
changelog:
  - Failed resources and their dependencies are restarted instead of the whole
    service
  - Resolves: rhbz#229650


author: Chris Feist <cfeist@redhat.com> - 2.0.29-1
changelog:
  - Virtual machines are no longer restarted when adding as a managed service
  - Made rgmanager compatible with new libdlm
  - Fixed an error which would cause a node to shutdown if you shutdown while
    processing a relocation request
  - A deadlock was fixed when doing lots of service relocations
  - Resolves: rhbz#248727 rhbz#249758 rhbz#247291 rhbz#249314


author: Joe Orton <jorton@redhat.com> - 2.2.3-69
changelog:
  - mod_cache: fix header merging for 304 case, thanks to Roy Badami (#845532)
  - correct CVE reference in old changelog entry (#849160)


author: Joe Orton <jorton@redhat.com> - 2.2.3-68
changelog:
  - mod_ssl: add _userID DN variable suffix for NID_userId (#840036)
  - fix handling of long chunk-line (#840845)
  - omit %posttrans daemon restart if
     /etc/sysconfig/httpd-disable-posttrans exists (#833042)


author: Joe Orton <jorton@redhat.com> - 2.2.3-67
changelog:
  - add server aliases to "httpd -S" output (#833043)
  - LSB compliance fixes for init script (#783242)
  - mod_ldap: add LDAPReferrals directive alias (#727342)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-66
changelog:
  - check if localhost.key is valid (#752618)
  - mod_proxy_ajp: honour ProxyErrorOverride (#767890)
  - mod_ssl: fixed start with FIPS 140-2 mode enabled (#773473)


author: Joe Orton <jorton@redhat.com> - 2.2.3-64
changelog:
  - add security fixes for CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 (#787597)	
  - remove patch for CVE-2011-3638, obviated by fix for CVE-2011-3639


author: Joe Orton <jorton@redhat.com> - 2.2.3-62
changelog:
  - mod_ldap: add support for nested groups (#546443)
  - mod_ssl: fix segfault with bad SSLCryptoDevice argument (#767990)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-60
changelog:
  - rotatelogs: create files even if they are empty (#677279)
  - rotatelogs: option to rotate files into a custom location (#677288)
  - mod_proxy: allow change BalancerMember state in web interface (#709869)


author: Jan Kaluza <jkaluza@redhat.com> - 2.2.3-59
changelog:
  - mod_proxy: add connectiontimeout option (#719907)
  - mod_alias: support Redirect to local path (#714725)


author: Joe Orton <jorton@redhat.com> - 2.2.3-49
changelog:
  - mod_proxy: add support for 'bybusyness' balancer (#555870)
  - mod_authnz_ldap: enable handling of referrals (#604727)
  - add mod_reqtimeout (#612198)
  - mod_ssl: fix use of overlapping memcpy (#636427)
  - mod_ssl: fix startup with duplicate SSL vhost configurations (#649648)
  - mod_proxy: fix proxy via chained SSL intermediary (#658766)
  - mod_proxy: fix header mapping for balancer:// URLS (#678057)
  - mod_filter: fix matching against response headers (#679994)
  - mod_ldap: fix caching in some configs (#264681)
  - mod_headers: correctly handle multiple matched headers (#673276)


author: Joe Orton <jorton@redhat.com> - 2.2.3-45
changelog:
  - ab: fail gracefully for OOM allocating stats structures (#645845)
  - init script: use $STOP_DELAY as delay before SIGKILL of parent (#644223)
  - mod_dav: don't delete the existing resource if a PUT fails (#572910)
  - core: don't replace Date header when acting as reverse proxy (#565865)
  - mod_dbd: fix pool usage (#633955)


author: Joe Orton <jorton@redhat.com> - 2.2.3-44
changelog:
  - mod_ssl: improved fix for SSLRequire's OID() function (#614423)
  - add security fixes for CVE-2010-1452, CVE-2010-2791 (#623211)
  - mod_deflate: rebase to 2.2.15 (#612211)
  - stop multiple invocations of filter init functions (#570628)


author: Joe Orton <jorton@redhat.com> - 2.2.3-38
changelog:
  - mod_ssl: fix additional case for OID() handling (#552942)
  - mod_authnz_ldap: fix handling of empty filter in group defn (#252038)


author: Joe Orton <jorton@redhat.com> - 2.2.3-32.el5
changelog:
  - fix hard-coded default pidfile to match default config (#505002)
  - mod_ssl: fix potential hang in renegotiation (#510515)
  - drop legacy X-Pad header from short responses (#526110)
  - mod_proxy_ajp: fix handling of large uploads (#528640)
  - mod_authnz_ldap: add AuthLDAPRemoteUserAttribute directive (#520838)
  - mod_rewrite: add DiscardPathInfo flag (#517500)
  - mod_authnz_ldap: don't fail authz if no ldap-* configured (#448350)
  - disable keepalive for Expect: 100-continue and error response (#533407)


author: Joe Orton <jorton@redhat.com> 2.2.3-27.el5
changelog:
  - mod_cgi, mod_cgid: fix logging on input read error (#498170)
  - mod_rewrite: don't serialize logfile access (#493023)
  - mod_ext_filter: fix spurious error log output (#479463)


author: Joe Orton <jorton@redhat.com> 2.2.3-25.el5
changelog:
  - mod_rewrite: fix URI escaping with [P] in directory context (#480604)
  - mod_cgi: fix headers/status in error responses (#480932)
  - mod_speling: fix handling of directory names (#485524)
  - init script: use ${pidfile} in more places (#491135)
  - mod_log_config: support remote/local with 'p' format (#493070)
  - remove Obsolete for mod_jk (#493592)
  - mod_ssl: fix SSL per-dir-reneg buffering with internal redirects (#488886)
  - fix spurious error messages on graceful restart (#233955)


author: Joe Orton <jorton@redhat.com> 2.2.3-22.el5
changelog:
  - add security fixes for CVE-2008-2939 (#468841)
  - note that the mod_proxy 2.2.9 rebase fixed CVE-2008-2364


author: Joe Orton <jorton@redhat.com> 2.2.3-16.el5
changelog:
  - mod_proxy*, mod_cache*: rebase to 2.2.9 (#252024, #249534,
    - backport changes to make chunk filter non-blocking (#454098)


author: Joe Orton <jorton@redhat.com> 2.2.3-15.el5
changelog:
  - mod_ldap: fix memory lifetime issues (#440259)
  - mod_ssl: configure OpenSSL dynamic lock callbacks (#462044)
  - escape the Request-Method in canned error responses (#445888)
  - build the event MPM and fix a deadlock therein (#444643)
  - mod_headers: support "RequestHeader edit" (#428253)
  - use "OPTIONS *" rather than "GET /" in dummy connection (#367981)


author: Joe Orton <jorton@redhat.com> 2.2.3-13.el5
changelog:
  - mod_proxy_balancer: allow alternative string to match for
    stickysession parameter (#439218)
  - fix dist tag in Release (#440615)


author: Joe Orton <jorton@redhat.com> 2.2.3-11.el5_1.1
changelog:
  - add security fixes for CVE-2007-6388, CVE-2007-6421
    and CVE-2007-6422 (#427240)
  - add security fix for CVE-2007-4465, CVE-2007-5000 (#421631)
  - add security fix for mod_proxy_ftp UTF-7 XSS (#427745)


author: Joe Orton <jorton@redhat.com> 2.2.3-8.el5
changelog:
  - add 'ServerTokens Full-Release' config option (#240857)
  - use init script in logrotate postrotate (#241680)
  - fix mod_proxy option inheritance (#245719)
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240024)
  - bump logresolve line buffer length to 10K (#245763)
  - add security fixes for CVE-2007-1863, CVE-2007-3304,
    and CVE-2006-5752 (#244666)


author: Joe Orton <jorton@redhat.com> 2.2.2-5
changelog:
  - require pkgconfig for -devel (#194152)
  - fixes for installed support makefiles (special.mk et al)
  - BR autoconf


author: Joe Orton <jorton@redhat.com> 2.2.0-5.1
changelog:
  - mod_auth_basic/mod_authn_file: if no provider is configured,
    and AuthUserFile is not configured, decline to handle authn
    silently rather than failing noisily.


author: Joe Orton <jorton@redhat.com> 2.2.0-5
changelog:
  - mod_ssl: add security fix for CVE-2005-3357 (#177914)
  - mod_imagemap: add security fix for CVE-2005-3352 (#177913)
  - add fix for AP_INIT_* designated initializers with C++ compilers
  - httpd.conf: enable HTMLTable in default IndexOptions
  - httpd.conf: add more "redirect-carefully" matches for DAV clients


author: Joe Orton <jorton@redhat.com> 2.2.0-2
changelog:
  - don't strip C-L from HEAD responses (Greg Ames, #110552)
  - load mod_proxy_balancer by default
  - add proxy_ajp.conf to load/configure mod_proxy_ajp
  - Obsolete mod_jk
  - update docs URLs in httpd.conf/ssl.conf


author: Joe Orton <jorton@redhat.com> 2.0.54-15
changelog:
  - log notice giving SELinux context at startup if enabled
  - drop SSLv2 and restrict default cipher suite in default
   SSL configuration


author: Joe Orton <jorton@redhat.com> 2.0.54-14
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (CVE-2005-2700)
  - add security fix for byterange filter DoS (CVE-2005-2728)
  - add security fix for C-L vs T-E handling (CVE-2005-2088)
  - mod_ssl: add security fix for CRL overflow (CVE-2005-1268)
  - mod_ldap/mod_auth_ldap: add fixes from 2.0.x branch (upstream #34209 etc)
  - add fix for dummy connection handling (#167425)
  - mod_auth_digest: fix hostinfo comparison in CONNECT requests
  - mod_include: fix variable corruption in nested includes (upstream #12655)
  - mod_ssl: add fix for handling non-blocking reads
  - mod_ssl: fix to enable output buffering (upstream #35279)
  - mod_ssl: buffer request bodies for per-location renegotiation (upstream #12355)


author: Joe Orton <jorton@redhat.com> 2.0.54-11
changelog:
  - mod_dav_fs: fix uninitialized variable (#162144)
  - add epoch to dependencies as appropriate
  - mod_ssl: drop dependencies on dev, make
  - mod_ssl: mark post script dependencies as such


author: Joe Orton <jorton@redhat.com> 2.0.54-7
changelog:
  - mod_userdir: fix memory allocation issue (upstream #34588)
  - mod_ldap: fix memory corruption issue (Brad Nicholes, upstream #34618)


author: Joe Orton <jorton@redhat.com> 2.0.54-5
changelog:
  - create default dummy cert in /etc/pki/tls
  - use a pseudo-random serial number on the dummy cert
  - change default ssl.conf to point at /etc/pki/tls
  - merge back -suexec subpackage; SELinux policy can now be
    used to persistently disable suexec (#155716)
  - drop /etc/httpd/conf/ssl.* directories and Makefiles
  - unconditionally enable PIE support
  - mod_ssl: fix for picking up -shutdown options (upstream #34452)


author: Joe Orton <jorton@redhat.com> 2.0.53-6
changelog:
  - update default httpd.conf:
   * clarify the comments on AddDefaultCharset usage (#135821)
   * remove all the AddCharset default extensions
   * don't load mod_imap by default
   * synch with upstream 2.0.53 httpd-std.conf
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)
  - htdigest: fix permissions of created files (upstream #33765)
  - remove htsslpass


author: Joe Orton <jorton@redhat.com> 2.0.52-7
changelog:
  - fix cosmetic issues in "service httpd reload"
  - move User/Group higher in httpd.conf (#146793)
  - load mod_logio by default in httpd.conf
  - apachectl: update for correct libselinux tools locations


author: Joe Orton <jorton@redhat.com> 2.0.52-6
changelog:
  - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  - SELinux: run httpd -t under runcon in configtest (Steven Smalley)
  - fix SSLSessionCache comment for distcache in ssl.conf
  - restart using SIGHUP not SIGUSR1 after logrotate
  - add ap_save_brigade fix (upstream #31247)
  - mod_ssl: fix possible segfault in auth hook (upstream #31848)
  - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  - apachectl: restore use of $OPTIONS
  - apachectl, httpd.init: refuse to restart if $HTTPD -t fails
  - apachectl: run $HTTPD -t in user SELinux context for configtest
  - update for pcre-5.0 header locations


author: Kamil Dudka <kdudka@redhat.com> 7.15.5-14
changelog:
  - fix stack smashing in the FTP implementation (#652557)
  - fix proxy kerberos authentication (#657396)
  - update running_handles counter properly in curl_multi_remove_handle (#688871)


author: Kamil Dudka <kdudka@redhat.com> - 7.15.5-8
changelog:
  - mention lack of IPv6, FTPS and LDAP support while using a socks proxy
    (#473128)
  - avoid tight loop if an upload connection is broken (#479967)
  - add options --ftp-account and --ftp-alternative-to-user to program help
    (#517084)
  - fix crash when reusing connection after negotiate-auth (#517199)
  - support for CRL loading from a PEM file (#532069)


author: Ivana Varekova <varekova@redhat.com> - 7.15.1-2
changelog:
  - fix multilib problem - #181290 - 
    curl-devel.i386 not installable together with curl-devel.x86-64


author: Joe Orton <jorton@redhat.com> 7.12.3-3
changelog:
  - don't pass /usr to --with-libidn to remove "-L/usr/lib" from
    'curl-config --libs' output on x86_64.


author: Adrian Havill <havill@redhat.com> 7.12.3-1
changelog:
  - Upgrade to 7.12.3, which uses poll() for FDSETSIZE limit (#134794)
  - require libidn-devel for devel subpkg (#141341)
  - remove proftpd kludge; included upstream


author: Adrian Havill <havill@redhat.com> 7.12.1-1
changelog:
  - upgrade to 7.12.1
  - enable GSSAPI auth (#129353)
  - enable I18N domain names (#134595)
  - workaround for broken ProFTPD SSL auth (#134133). Thanks to
    Aleksandar Milivojevic


author: Adrian Havill <havill@redhat.com> 7.10.6-7
changelog:
  - aclocal before libtoolize
  - move OpenLDAP license so it's present as a doc file, present in
    both the source and binary as per conditions


author: Joe Orton <jorton@redhat.com> 7.9.8-2
changelog:
  - fix `curl-config --libs` output for libdir!=/usr/lib
  - remove docs/LIBCURL from docs list; remove unpackaged libcurl.la
  - libtoolize and reconf


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include curl-config in curl-devel
  - update to 7.8 to fix memory leak and strlcat() symbol pollution from libcurl


author: Tim Powers <timp@redhat.com>
changelog:
  - update to 7.4.1 to fix bug #20337, problems with curl -c
  - not using patch anymore, it's included in the new source. Keeping
    for reference


author: Tim Powers <timp@redhat.com>
changelog:
  - changelog started
  - general cleanups, changed prefix to /usr, added manpage to files section
  - including in Powertools


author: Jakub Hrozek <jhrozek@redhat.com> - 253-51.1
changelog:
  - Add a patch by Gino LV. Ledesma to catch leaking sockets
  - Resolves: rhbz#905908 - (slow) socket leak in nss_ldap


author: Jakub Hrozek <jhrozek@redhat.com> - 253-50
changelog:
  - Free ldap_result when search does not return anything (#835555)
  - Use contents of ldap.secret even if it does not contain a newline (#797410)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-46
changelog:
  - Require openldap libs with a fix for #609722 - libldap ignores a directory
    of CA certificates if any of them can't be read (#593242)
  - when closing a context, clean it up so that we won't try to issue an abandon
    when we go to use it again for something else (#696707)


author: Jakub Hrozek <jhrozek@redhat.com> - 253-45
changelog:
  - fix a regression caused by patch #39 - SRV records processing
    would crash if there was no basedn set (#705841)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-43
changelog:
  - incorporate Martin Poole's patch to handle larger-than-previously-expected
    configuration files (#705841)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-42
changelog:
  - add Ross Tyler's patch to always require authentication during password
    change requests for expired passwords, so that modules which check password
    quality (pam_cracklib) will always have the old password on-hand to examine
    as well (#667758)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-41
changelog:
  - backport fixes for upstream #350 (parsing results when the connection is
    gone) and #351 (double-free of message chain) (#684889)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-40
changelog:
  - return any non-success errors in setnetgrent(), not just netgroup-not-found
    errors (#664609, more of #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-38
changelog:
  - add a build-time requirement on a sufficiently-new openssl-devel to ensure
    that we get SHA-2 hashes when we're using TLS, because we still static-link
    the nss_ldap module (#683349)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-37
changelog:
  - add proposed patch for upstream #421: sometimes errno gets reset before we
    return control to libc (#661630)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-36
changelog:
  - tweak patch for postponing the connection drop in a newly-forked child until
    we're first called so that it doesn't try to close sockets which we just
    assumed were our own (more of #474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-35
changelog:
  - don't unconditionaly set up a new LDAP structure every time we try to read
    someone's supplemental groups list, regardless of whether or not we did so
    previously, and clean the connection up completely if we fail to get a
    response or parse it (#654650, from upstream #418 and #392 via Olivier
    Fourdan)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-34
changelog:
  - link nss_ldap and pam_ldap with -z nodelete so that memory allocated by
    library dependencies which is lost at unload doesn't leak, for the sake
    of applications which call PAM for authentication many times over (Mark
    Goodwin, #511238)
  - fix some memory leaks in pam_ldap (upstream #326,#333, part of #511238)
  - fix an uninitialized variable error (Mark Goodwin, part of #511238)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-32
changelog:
  - add revised testing patch to postpone the connection drop in a newly-forked
    child until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-31
changelog:
  - add testing patch to postpone the connection drop in a newly-forked child
    until we're first called (#474181)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-30
changelog:
  - report the remaining life of soon-to-be-expired passwords with granularity
    in hours, if possible (Masahiro Matsuya, #537358)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-27
changelog:
  - pull in backported fix for upstream #378, which returns NETDB_INTERNAL in
    h_errno in cases when nss_ldap's run out of space in the supplied buffer and
    libc provided us with an h_errno variable to set for it to also check
    (Jason Luo, #468807)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-26
changelog:
  - pull in fix for upstream #313, which returns a clean error when we've
    failed to parse our configuration correctly, in this case due either to a
    larger-than-handled nss_initgroups_ignoreusers setting (#584157) or the
    lack of any servers being configured (#538498)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-25
changelog:
  - avoid deadlock when one of our lookups recurses into our own host resolution
    routine, which would otherwise cause a deadlock or a crash (#448883)
  - provisionally add an "nss_check_case" option which, when enabled, will
    ignore entries for which the result didn't case-exact match the query,
    regardless of the comparison performed by the directory (#508621,#518911)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-24
changelog:
  - update build dependency on openldap to 2.3.43-7 to get fixes for referral
    chasing (#510522) which affected nss_ldap (#472920)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-23
changelog:
  - unblock SIGPIPE while closing the connection in the child's part of
    atfork(), so that it can get delivered before we reset the signal
    handler (#454315)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-22
changelog:
  - add patch to not assume we got a result for our start_tls request within the
    bind timelimit (Jatin Nansi, #499302)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-19
changelog:
  - don't close a oneshot connection while we're in the middle of answering a
    specific query (#488857)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-18
changelog:
  - turn the default for paged results back off (#486321)
  - pull in fix for leaking descriptors from version 255 (#428837)
  - replace our proposed patch for being stricter about malformed entries with
    the version upstream went with, and start applying it (#457258)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-15
changelog:
  - build nss_ldap with --enable-paged-results (#444185)
  - add patch to make netgroup enumeration fail due to lack of entries in
    setnetgrent(), rather than in getnetgrent(), to match how other mechanisms
    work (Jose Plans, #445972)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-13
changelog:
  - block SIGPIPE in the atfork handler, so that it doesn't trip up when
    attempting to drop a connection to the server (#448014)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-11
changelog:
  - backport changes to group parsing from version 254 to fix heap corruption
    when parsing nested groups (#444031)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-7
changelog:
  - add keyutils-libs-devel and libselinux-devel as a buildrequires: in order to
    static link with newer Kerberos (#427370)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-6
changelog:
  - suppress password-expired errors encountered during referral chases during
    modify requests (#335661)
  - interpret server-supplied policy controls when chasing referrals, so that
    we don't give up when following a referral for a password change after
    reset (#335661)
  - don't attempt to change the password using ldap_modify if the password
    change mode is "exop_send_old" (we already didn't for "exop") (#364501)
  - don't drop the supplied password if the directory server indicates that
    the password needs to be changed because it's just been reset: we may need
    it to chase a referral later (#335661)
  - correctly detect libresolv and build a URI using discovered settings, so that
    server discovery can work again (#254172)
  - honor the "port" setting again by correctly detecting when a URI doesn't
    already specify one (#326351)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-4
changelog:
  - add dbus,radvd,tomcat,radiusd,news,mailman to the default list of
    nss_initgroups_ignoreusers (#243753)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - resize the supplemental GID array when it gets too large and an array size
    limit isn't set (Gavin Romig-Koch, #246541)


author: Nalin Dahyabhai <nalin@redhat.com> - 253-1
changelog:
  - update to 253
    - closes a crasher when glibc's initgroups backend passes in a zero-length,
      NULL buffer to start
    - includes lookup_nssldap updates for autofs


author: Nalin Dahyabhai <nalin@redhat.com> - 251-2
changelog:
  - configure with --enable-configurable-krb5-ccname-gssapi instead of
    --enable-configurable-krb5-ccname, the latter of which doesn't actually
    do anything (Howard Wilkinson)


author: Nalin Dahyabhai <nalin@redhat.com> - 250-5
changelog:
  - adjust nss_ldap's makefile rule to more correctly deduce the right soversion
    for nsswitch modules (#191927)


author: Nalin Dahyabhai <nalin@redhat.com> - 248-2
changelog:
  - set "nss_initgroups_ignoreusers root,ldap" in the default configuration
    file, so that nss_ldap will assume that there are no supplemental groups
    for this user to be found in the directory server (#180657)


author: Nalin Dahyabhai <nalin@redhat.com> 245-1
changelog:
  - update to nss_ldap 245
  - add patch from upcoming 246 release to change the placeholder used when
    userPassword is unreadable from "x" to "*" (upstream #240)


author: Nalin Dahyabhai <nalin@redhat.com> 239-1
changelog:
  - update to nss_ldap 239
  - provide a libnss_ldap.so link for directly linking with nss_ldap, as glibc
    does for the modules it provides


author: Nalin Dahyabhai <nalin@redhat.com> 234-5
changelog:
  - update to pam_ldap 180 to get fix for vulnerability from parsing password
    policy controls which don't contain error numbers (#166164, CAN-2005-2497)


author: Nalin Dahyabhai <nalin@redhat.com> 234-4
changelog:
  - override glibc version detection so that mismatches between the versions of
    32- and 64-bit glibc don't result in our %install installing the module
    with a different name than the 'make install' target uses


author: Nalin Dahyabhai <nalin@redhat.com> 234-3
changelog:
  - fix type mismatch bug in patch for using non-blocking start_tls in
    preference to the blocking version when it's available (#156582)


author: Nalin Dahyabhai <nalin@redhat.com> 232-2
changelog:
  - prefer using libraries in /usr/lib/nss_ldap-openldap if we find any
  - use ldap_start_tls in preference to ldap_start_tls_s, if found, so that
    we can time out if the server has gone catatonic


author: Nalin Dahyabhai <nalin@redhat.com> 227-1
changelog:
  - update to version 227
  - force nss_ldap to mimic pam_ldap's behavior when the tls_checkpeer setting is
    unconfigured in ldap.conf


author: Nalin Dahyabhai <nalin@redhat.com> 226-3
changelog:
  - fix misleading doc comment in /etc/ldap.conf -- the checkpeer setting follows
    libldap's default, which is dependent on the version of OpenLDAP which which
    this package is linked (part of #143622)


author: Nalin Dahyabhai <nalin@redhat.com> 226-1
changelog:
  - update to nss_ldap 226, pam_ldap 176
  - rework pam_ldap dns autoconfig patch
  - require automake instead of automake15, because autoreconf uses the current
    version (#129877)


author: Nalin Dahyabhai <nalin@redhat.com> 212-1
changelog:
  - update to 212, pam_ldap 167
  - link nss_ldap with libgssapi_krb5, the static libsasl2 includes the gssapi
    mech, at least for now, and we pick up its unresolved symbols at link-time
  - fix out-of-bounds error at initialization-time (part of #101269)
  - include pam_ldap's authorization schema files for slapd as a doc file


author: Nalin Dahyabhai <nalin@redhat.com> 207-5
changelog:
  - fix objectclass and attribute mapping, which failed due to uninitialized
    fields in mapping index structures, fixed upstream in 210 (#110547)


author: Nalin Dahyabhai <nalin@redhat.com> 207-3
changelog:
  - link dynamically with libcom_err if it isn't in /usr/kerberos/lib (which
    we assume means that it's in /lib)


author: Nalin Dahyabhai <nalin@redhat.com> 207-1
changelog:
  - update to build with newer OpenLDAP
  - add README.TLS to remind people that in order for TLS support to be usable,
    the server's certificate has to pass validation checks made by the client


author: Nalin Dahyabhai <nalin@redhat.com> 202-4
changelog:
  - rework static link order to account for libssl requiring libkrb5
  - force assembly locking on %ix86 systems
  - link with libz, which libssl also requires


author: Nalin Dahyabhai <nalin@redhat.com> 202-2
changelog:
  - apply DB patches from sleepycat.com
  - correctly point nss_ldap at the bundled DB library
  - create /%{_lib} instead of /lib to install into


author: Nalin Dahyabhai <nalin@redhat.com> 202-1
changelog:
  - update to nss_ldap 202, pam_ldap 153
  - update DB from 4.0.14 to 4.1.24.NC
  - try to address multilib path changes


author: Nalin Dahyabhai <nalin@redhat.com> 188-0.6
changelog:
  - rebuild for RHL 6.2
  - change dependency on pam-devel to /usr/include/security/pam_modules.h
  - drop build deps on cyrus-sasl-devel and openldap >= 2.x
  - modify pam_ldap versions file so that binutils from RHL 6.2 can parse it
  - update to nss_ldap 188
  - update to pam_ldap 144


author: Nalin Dahyabhai <nalin@redhat.com> 184-1
changelog:
  - update to pam_ldap 138
  - enable rfc2307bis schema support
  - version the pam_ldap module
  - add the proper soname to the nss_ldap module and remove the symlink
  - add a trigger to run ldconfig again when an upgrade removes the symlink,
    which used to be in this package (doh!)
  - fix the symlink from %{_libdir} to the module (for linking directly to it)


author: Nalin Dahyabhai <nalin@redhat.com> 173-1
changelog:
  - update to nss_ldap 173, which includes doc updates
  - update to pam_ldap 133, which simplifies the dnsconfig patch quite a bit


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - link statically with libldap again, because libldap is linked with other
    shared libraries now (keeping us from having files in /usr open when we
    go to shut the system down)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 172, fixing schema mapping code
  - update to pam_ldap 124, incorporating TLS default option and doc fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 164, fixing the timeout problem correctly
  - update to pam_ldap 122, fixing escaping of user name in filters


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 163, fixing the timeout problem
  - update to pam_ldap 120
  - add gdbm-devel as a buildprereq, because we list it in $LIBS (#48999)
  - add db3-devel as a buildprereq (#48999)
  - add pam-devel as a buildprereq (#48999)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make nss_ldap fail when attempting to startup TLS fails, because that's what
    we do when LDAPS doesn't work (and what pam_ldap does already)
  - add DNS autoconfiguration to pam_ldap


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 149, minor fixes for compile glitches
  - update to pam_ldap 105, minor fixes (as above) and handles shadow expiration


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 138, which folds in our patch for initgroups
  - change the default search base in ldap.conf to dc=example,dc=com


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - version the NSS module so that it works properly with programs which have
    been linked statically to a different version of an LDAP library, like
    Netscape Communicator


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - BuildPrereq gdbm-devel
  - pass RPM_OPT_FLAGS as CFLAGS to %configure
  - if protocol version is 2, explicitly set protocol version to 3 before trying
    to start TLS
  - add STARTTLS support to nss_ldap
  - work around a build-time problem on ia64


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to nss_ldap 122
  - link statically with libsasl, require the first devel package that supplied it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to pam_ldap 67 to fix a bug in template user code
  - convert symlink in /usr/lib to a relative one (#16132)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - use the ldap.conf file as an external source
  - don't forcibly build the support for version 3
  - imported the default spec file from the tarball and fixed it up for RH 6.1


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-25
changelog:
  - Resolves: #739223 - ipvsadm errors should not be fatal
  - Resolves: #786364 - reread config can cause lvsd to segfault


author: Ryan O'Hara <rohara@redhat.com> 0.8.4-23
changelog:
  - Resolves: #708035 - too many VIPs can causes HTTP 414 error
  - Resolves: #698505 - add CIDR /23 netmask to drop-down menus


author: Marek Grac <mgrac@redhat.com> 0.8.4-19
changelog:
  - Resolves: #550126 - fails to parse load average with ruptime
  - Resolves: #453451 - LVS rebooted simultaneously cause problems


author: Marek Grac <mgrac@redhat.com> 0.8.4-15
changelog:
  - Resolves: #522230 - 'service pulse stop' does not kill nanny process
  - Resolves: #533113 - piranha-0.8.4-13.el5 breaks LVS


author: Lon Hohberger <lhh@redhat.com> 0.8.4-11
changelog:
  - Resolves: #238498  - need fallback service
  - Resolves: #243908  - nanny blocks signals in child processes


author: Marek Grac <mgrac@redhata.com>
changelog:
  - Resolves: #446802 - segfault if syslog message is longer 
                        than 80 characters


author: Marek Grac <mgrac@redhat.com> 0.8.4-8
changelog:
  - Resolves: #243278 - Fixes wrong init scripts
  - Resolves: #249312 - VIP doesn't go down
  - Resolves: #245788 - send_arp & incorrectly-formed ARP
  - Resolves: #338101 - php errors in piranha-gui


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-4
changelog:
  - Removed /etc/sysconfig/ha/example_script, as equal example is
     already in /usr/share/doc/piranha/docs/script_templates/* 
  - Update apache's modules, use libphp5 (instead of libphp4)


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.4-3
changelog:
  - Removed .htaccess file, as equal configuration 
     already in /etc/sysconfig/ha/conf/httpd.conf
  - Added logrotate conf file


author: Stanko Kupcevic <kupcevic@redhat.com> 0.8.3-1
changelog:
  - Document send_program in lvs.cf manpage (bz190022)
  - Fix lvsd where it segfaults when nanny dies (bz176913)


author: Lon Hohberger <lhh@redhat.com> 0.8.0-1
changelog:
  - Build for RHCS-4
  - Lots of php warning cleanups
  - rename lvs to lvsd so as not to conflict with 'lvs' command


author: Lon Hohberger <lhh@redhat.com> 0.7.9-1
changelog:
  - Force sending of last heartbeat before shutdown of backup
  so that the master re-arps the VIPs (#134007)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed up piranha-passwd (#60440)
  - Updated the LVS-HOWTO docs (#60204)
  - fixed the silly misname of a directory in the httpd.conf (#60529)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - pulled in Wensong's memory leak patchs
  - Dropped the shared scsi portion in the web interface
    Note: FOS will vanish in piranha 0.7.0's interface, in
    theory that functionality will be taken over by clumanager
    which is part of the advanced server offering.
    In the future clumanager/piranha will merge (so I'm told)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - send_arp,c, changed the
    sock=socket(AF_INET,SOCK_RAW,htons(ETH_P_RARP));
    back to
    sock=socket(AF_INET,SOCK_PACKET,htons(ETH_P_RARP));
    as I got reports that this wasn't working.
    It will work fine, just there will be noise that it's
    an obsolete interface


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Finally someone spotted the reason why the children don't die
    much happiness spread by Sebastien <sebastien.bonnet@experian.fr>
  - Added in additional patch from Sebastien for bugzilla #57654
    which I think is also a solution for #15911


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a patch I got from pzb for to be a good deal more sensible
    about how we detect if we're using FOS mode or LVS mode other than looking
    for a start or stop script (shudder)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in Wensongs quiesce server patch for nanny
  - Updated the web interface to also know about the quiesce option


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Merged in a patch for nanny.c from Wensong <wensong@gnuchina.org>
    which cleans up the run() function by splitting out two new
    funcions, adjustWeight(), and checkState().
  - I thought I'd removed the portion in the Makefile that tweaks with
    /etc/httpd/conf/httpd.conf but it was still there when I looked.
    Removed it.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - control.php3 has for ages been calling /usr/sbin/ipvsadm.
    Unfortunately that changed to /sbin and was not updated
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56497
  - In the pulse.c code, too few elements were allocated
    for the arguments causeing an occasional segv.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Added in a switchover for fos (virt/real address swapover
    to prevent the fos call to nanny checking the real IP
    instead of the VIP


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Bundled in some very simple template scripts with the
    documentation. Dropped in an example_script with the
    main dist. Bumped the version number (0.6.0-10)


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Removed nasty httpd.conf modifications in the
    rpm spec file. (An artifact of the old install
    system)
  - Dropped in an example script for use with the
    send_program function. Probably need to spend a
    week cooking up a library of 'common' scripts
    for use.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Fixed parse.php3 so that it wouldn't issue the persistance option
    twice in the lvs.cf configuration file


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Various tidyups/rpm fiddling in an effort to allow for building standalone
    outside of the buildsystem.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Humm, killed off the piranha.desktop file as the GUI is web based not X11
    and this makes no sense to try and start from a menu item. A bookmark maybe.


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Directives from der Boss, we must be able to run rpm -V successfully
  - Collapsed piranha piranha-gui piranha-docs into a single rpm


author: Philip Copeland <bryce@redhat.com>
changelog:
  - Made fast changes to the hard coded /usr/sbin/ipvsadm
    to be /sbin/ipvsadm. This should be in a define in a header file
    however because of time pressure I'm doing it this way first and
    fix it up next week.


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected netmask logic so it does not ref gethost call and is only
    used when value is non-zero.
  - Added netmask error code and return string
  - Fixed pulse's use of netmasks in ifconfig and sendarp calls
  - Put missing "if debug" blocks around debug output
  - If using FOS, assume active if no backup node specified in lvs.cf
  - Correct inconsistent use of --test-start, --nofork, --nodaemon, and
    --norun between pulse, nanny, fos, and lvs. Updated man pages too.
  - Removed ipvsadm build from Makefile
  - piranha requires ipvsadm 1.17+
  - parser now handles trailing \r chars (customer problem)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed piranha-gui startup script and piranha spec file
  - Fixed gui error screen to report correct file permission & ownership


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Removed ipvsadm inclusion in piranha RPM
  - Changed version to exceed last experiemental release
  - Corrected web reference in spec file
  - Cleaned up 7.x installationin spec and makefile
  - Bumped version (multiple times)


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Merged Bryce's ipvsadm changes
  - Changed nobody to apache (if apache user apache exists)
  - Migrate existing lvs.cf file if appropriate
  - bumped version


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Backed out some patches to pulse.c, fos.c, lvs.c, and nanny.c
  - Updated documentation
  - Changed "take control" heartbeat


author: Philip Copeland <copeland@redhat.com>
changelog:
  - removed the 'accept' input button in control.php3 to
    better fit the documentation
  - Updated the lvserror.php3 to reflect another not so uncommon
    fault that may prevent correct running of the GUI
  - Tidied up some eyecandy


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Fixed an incorrect pag redirection in the failover pages
  - added two missing subnet masks to the peristance netmask field


author: Philip Copeland <copeland@redhat.com>
changelog:
  - modified the piranha.spec.in file and Makefile to allow for
    release number updates (from editing the Makefile)
  - fixed a bug in redundancy.php3 which occurs when no lvs.cf file
    is present
  - made ipvsadm popt change (minor patch which shouldn't affect
    native redhat installed systems)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - core item ipvsadm has been updated to use ipvs-0.9.12-2.2.14
  - Minor tweeking of directory scruture
  - gui files no longer included in rpm builds
  - added a load of patches from the bugzilla archives
  - made kernel diffs
  - made sure the rpms built and installed correctly


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - changed the password updating/setting policy.  Made all password actions
    root operations via a root owned shell tool (piranha-passwd)


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Security exposure raised by ISS regarding the passwd.php3
    file fixed by replacing the external call to htpasswd with
    php3s own crypt function (see parse.php3 change_password)
  - Rebuilt packages and generated errata.


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - removed killapache
  - changed sample httpd shutdown to use proper init scripts
  - Keith fixed MORONIC spelling error in pulse.c :)
  - moved the GUI README into the %doc list


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Improved take control heartbeat login in pulse
  - Enhanced old GUI README to notify user of special conditions
  - Bumped version


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added fos to file list
  - moved apache & php requires to gui package
  - reordered the install of killapache to make strip not puke


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected signaling, heartbeat, and failover in pulse
  - Bumped version to reflect a stable release
  - Note: pulse USR1/2 disabled in this checkin


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Corrected memory errors in parser
  - Updated fos
  - Improved (but have not finished) pulse changes
  - Bumped version to reflect parser change


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added password services to web control
  - Altered pulse to provide a signal escalator between nobody root
    as we now have a "use a uid/gid < 100" limitation that
    apache's suexec doesn't cater for
  - Added default password to web (null)
  - minor spec file changes


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - New version of pulse with enhanced signals
  - New service = xxx parameter in config system
  - New man pages and doc updates


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - *NO* "echo's" in spec files!
  - made /etc/lvs.cf a %config so it'll get backed up on upgrades
  - cleaned up some useradd/groupadd errors


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed passthrough of routing type options
  - Fixed man pages to reflect routing type options
  - Changed formatting of sample.cf file and included comments
  - Bumped version number


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Fixed segfault problem in nanny
  - Minor changes reporting the phase out of the old GUI
  - Bumped version number
  - Changed spec file to include web in GUI RPM


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Bumped version to reflect Bryce's changes to install scripts
  - Added persistent netmask to lvsconfig and lvs and sample.cf


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Added send/expect parsing to lvs, lvsconfig, and nanny.
  - Updated nanny man page and sample.cf file


author: Philip Copeland <copeland@redhat.com>
changelog:
  - Added NAT/direct routing/tunneling to the web interface
  - fixed up the web documents to tell the web browsers that
    caching them would be a BAD idea
  - Added some prettify stuff


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Changed pulse call to send_arp to /usr/sbin
  - Suppress sock error on unconfigured tunl device
  - Bumped version


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that RPM_BUILD_ROOT != / when installing
  - handle case if httpd not installed during %install
  - handle gzipped man pages


author: Keith Barrett <kbarrett@redhat.com>
changelog:
  - Minor updates to doc files and man pages.
  - Added headers and history to some source files
  - Created nanny.h file


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - added a send_arp tool to the package
  - removed the /etc/lvs.cf entry (it was dumb here)
  - strip all binaries too
  - added nanny to package


author: Mike Wangsmo <wanger@redhat.com>
changelog:
  - restructured the package to come from CVS
  - renamed it
  - added oot's lvs daemon
  - added the perl client_monitor tool from Lars Marowsky-Bree
  - put stubs in for the GUI
  - buffed up the Makefile


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-3
changelog:
  - Fix method that replaced values in config files, it would result
    in a zero-length file (#813387)


author: Rob Crittenden <rcritten@redhat.com> - 2.1.3-1
changelog:
  - Rebase to upstream 2.1.3 (#753936)
  - Updated patch for CVE-2011-3636 to include CR in the HTTP headers.
    xmlrpc-c in RHEL-6 doesn't support the dont_advertise option so that is
    not set any more. Another fake header, X-Original-User_Agent, is added
    so there is no more trailing junk after the Referer header.  (#752226)
  - Add ia64 to list for 64-bit cyrus-sasl-gssapi (#750338)
  - Set minimum n-v-r of sssd to 1.5.1-40


author: Rob Crittenden <rcritten@redhat.com> - 2.0-16
changelog:
  - _isa is not defined in RHEL 5, use alternate mechanism to require
    arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-15
changelog:
  - KDC autodiscovery may fail when domain != realm (#710143)
  - Use updated xmlrpc-c API to do GSSAPI ticket delegation (#723667)
  - Set minimum curl and xmlrpc-c versions (#723667)
  - Require arch-specific cyrus-sasl-gssapi (#723620)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-12
changelog:
  - Update to upstream 2.0.0rc3 (#631907)
  - Add patch to work on Python 2.4
  - Set minimum Requires for authconfig to 5.3.21-7 (sssd support)
  - Set minimum Requires for openssl to 0.9.8e-18 (sha2 support)
  - Add Requires for sssd, set minimum to sssd-1.5.1-18
  - Add Requires for bind-utils
  - Remove Requires on nss_ldap
  - Update license to GPLv3+


author: Rob Crittenden <rcritten@redhat.com> - 2.0-10
changelog:
  - Port to RHEL-5 (#607772)
  - Drop nslcd patch
  - Drop move binaries patch
  - authconfig 6.0 isn't available so we can't automatically configure sssd
    so configure nss_ldap instead


author: Rob Crittenden <rcritten@redhat.com> - 2.0-8
changelog:
  - Re-add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed. This got inadvertantly
    dropped when the source tarball was re-based (#559004)
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails at runtime. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-7
changelog:
  - Update nokrbv patch to remove another usage of python-krbV that
    isn't directly used by ipa-client but fails the build. (#598626)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-4
changelog:
  - Update source tarball to freeIPA v2.0 alpha 3 (tag 1.9.0_alpha3) (#556620)
  - More spec file clean ups
  - Don't install the po files so it doesn't conflict with the server
    ipa-python package


author: Rob Crittenden <rcritten@redhat.com> - 2.0-2
changelog:
  - Remove some commented-out Requires
  - Replace Requires on nss_ldap with nss-pam-ldapd (#559004)
  - Add patch to attempt to configure a number of nss_ldap related files
    if installed and configure nslcd.conf if installed (#559004)


author: Rob Crittenden <rcritten@redhat.com> - 2.0-1
changelog:
  - Initial spec
  - policycoreutils version set to 2.0.78-3 to fix problem with
    restorecon returning 1 in non-failure cases.


author: Miroslav Grepl <mgrepl@redhat.com> 1.33.12-14.7
changelog:
  - Remove semanage translation functionality
  Resolves: #460970
  - Fix semanage port add/delete problems
  Resolves: #505521
  - Fix instances of #!/usr/bin/env python in policycoreutils-gui
  Resolves: #521298
  - Fix semanage command does not support -node option
  Resolves: #527487


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.4
changelog:
  - Add semodule -DB support
  Resolves: #493115
  - Add ~/www ~/web to restorecond.conf
  Resolves: #458687
  - Fix sort order for portsPage
  Resolves: #468170
  - Allow <<none>> in homedir 
  Resolves: #354361


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.2
changelog:
  - Fix chcat throwing error messages while changing context  
  - stop genhomedircon creating duplicate entries
  Resolves: #433429


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-14.1
changelog:
  - Allow <<none>> to exist in homedir/genhomedircon handling it properly
  Resolves: #354361
  - Ignore granted messages with audit2allow
  Resolves: #441402
  - Fix semanage fcontext to quote regex
  Resolves: #435140
  - Fix chcat throwing error messages while changing context  
  Resolves: #220813
  - Make semanage understand -S option
  Resolves: #316011
  - genhomedircon matches misc in /home path


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-13
changelog:
  - Add support for selecting a store in semanage
  Resolves: #316011
  - Handle bad options on semodule command line
  - Add newrole support for alternate pam configurations
  Resolves: #336171


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-8
changelog:
  - Fix gui componants
  - Fix genhomedircon to use __default__ to get default user and prefix
  Resolves: #237324


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-7
changelog:
  - Fix service httpd status to return correct code
  Resolves: #232164
  - Update Linda Knippers patch for newrole on serial console
  Resolves: #228102


author: Dan Walsh <dwalsh@redhat.com> 1.33.12-1
changelog:
  - Want to update to match api
  - Update to upstream
  	* Merged newrole securetty check from Dan Walsh.
  	* Merged semodule patch to generalize list support from Karl MacMillan.
  Resolves: #200110


author: Dan Walsh <dwalsh@redhat.com> 1.33.11-1
changelog:
  - Update to upstream
  	* Merged fixfiles and seobject fixes from Dan Walsh.
  	* Merged semodule support for list of modules after -i from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.33.10-1
changelog:
  - Update to upstream
  	* Merged patch to correctly handle a failure during semanage handle
  	  creation from Karl MacMillan.
  	* Merged patch to fix seobject role modification from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.33.8-1
changelog:
  - Update to upstream
  	* Merged patches from Dan Walsh to:
  	  - omit the optional name from audit2allow
  	  - use the installed python version in the Makefiles
  	  - re-open the tty with O_RDWR in newrole


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-9
changelog:
  - Fix fixfiles script to use tty command correctly.  If this command fails, it 
  should set the LOGFILE to /dev/null
  Resolves: #220879


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-7
changelog:
  - add exists switch to semanage to tell it not to check for existance of Linux user
  Resolves: #219421


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-6
changelog:
  - Fix audit2allow generating reference policy
  - Fix semanage to manage user roles properly 
  Resolves: #220071


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-5
changelog:
  - Update po files
  - Fix newrole to open stdout and stderr rdrw so more will work on MLS machines
  Resolves: #216920


author: Dan Walsh <dwalsh@redhat.com> 1.33.6-1
changelog:
  - Update to upstream
  	* Patch from Dan Walsh to add an pam_acct_msg call to run_init
  	* Patch from Dan Walsh to fix error code returns in newrole
  	* Patch from Dan Walsh to remove verbose flag from semanage man page
  	* Patch from Dan Walsh to make audit2allow use refpolicy Makefile
  	  in /usr/share/selinux/<SELINUXTYPE>


author: Dan Walsh <dwalsh@redhat.com> 1.33.4-1
changelog:
  - Upstream accepted my patches
  	* Merged setsebool patch from Karl MacMillan. 
  	  This fixes a bug reported by Yuichi Nakamura with
  	  always setting booleans persistently on an unmanaged system.


author: Dan Walsh <dwalsh@redhat.com> 1.32-1
changelog:
  - Add newrole audit patch from sgrubb
  - Update to upstream
  	* Merged audit2allow -l fix from Yuichi Nakamura.
  	* Merged restorecon -i and -o - support from Karl MacMillan.
  	* Merged semanage/seobject fix from Dan Walsh.
  	* Merged fixfiles -R and verify changes from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.30-1
changelog:
  - Update to upstream
  	* Merged newrole auditing of failures due to user actions from
  	  Michael Thompson.


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-6
changelog:
  - Change setfiles and restorecon to use stderr except for -o flag
  - Also -o flag will now output files


author: Dan Walsh <dwalsh@redhat.com> 1.30.28-1
changelog:
  - Security fixes to run python in a more locked down manner
  - More Translations
  - Update to upstream
  	* Merged fix for restorecon // handling from Erich Schubert.
  	* Merged translations update and fixfiles fix from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.27-4
changelog:
  - Add -i qualified to restorecon to tell it to ignore files that do not exist
  - Fixfiles also modified for this change


author: Dan Walsh <dwalsh@redhat.com> 1.30.26-1
changelog:
  - Update to upstream
  	* Merged semanage local file contexts patch from Chris PeBenito.
  - Fix fixfiles log creation
  - More translations


author: Dan Walsh <dwalsh@redhat.com> 1.30.25-1
changelog:
  - Update to upstream
  	* Merged patch from Dan Walsh with:
  	  * audit2allow: process MAC_POLICY_LOAD events
  	  * newrole:  run shell with - prefix to start a login shell
  	  * po:  po file updates
  	  * restorecond:  bail if SELinux not enabled
  	  * fixfiles: omit -q 
  	  * genhomedircon:  fix exit code if non-root
  	  * semodule_deps:  install man page
  	* Merged secon Makefile fix from Joshua Brindle.
  	* Merged netfilter contexts support patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.30.22-1
changelog:
  - Update to upstream
  	* Merged restorecond size_t fix from Joshua Brindle.
  	* Merged secon keycreate patch from Michael LeMay.
  	* Merged restorecond fixes from Dan Walsh.
  	  Merged updated po files from Dan Walsh.
  	* Merged python gettext patch from Stephen Bennett.
  	* Merged semodule_deps from Karl MacMillan.


author: Dan Walsh <dwalsh@redhat.com> 1.30.17-1
changelog:
  - Update to upstream
  	* Lindent.
  	* Merged patch from Dan Walsh with:
  	  * -p option (progress) for setfiles and restorecon.
  	  * disable context translation for setfiles and restorecon.
  	  * on/off values for setsebool.
  	* Merged setfiles and semodule_link fixes from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.30.14-1
changelog:
  - Update to upstream
  	* Merged fix for setsebool error path from Serge Hallyn.
  	* Merged patch from Dan Walsh with:
  	*    Updated po files.
  	*    Fixes for genhomedircon and seobject.
  	*    Audit message for mass relabel by setfiles.


author: Dan Walsh <dwalsh@redhat.com> 1.30.11-1
changelog:
  - Update to upstream
  	* Merged more translations from Dan Walsh.
  	* Merged patch to relocate setfiles to /sbin for early relabel
  	  when /usr might not be mounted from Dan Walsh.
  	* Merged semanage/seobject patch to preserve fcontext ordering in list.
  	* Merged secon patch from James Antill.


author: James Antill <jantill@redhat.com> 1.30.10-2
changelog:
  - secon fixes for --self-exec etc.
  - secon change from level => sensitivity, add clearance.
  - Add mass relabel AUDIT patch, but disable it until kernel problem solved.


author: Dan Walsh <dwalsh@redhat.com> 1.30.10-1
changelog:
  - Update to upstream
  	* Merged patch with updates to audit2allow, secon, genhomedircon,
  	  and semanage from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.30.9-1
changelog:
  - Update to upstream
  	* Fixed audit2allow and po Makefiles for DESTDIR= builds.
  	* Merged .po file patch from Dan Walsh.
  	* Merged bug fix for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.30.8-1
changelog:
  - Update to upstream
  	* Merged fix warnings patch from Karl MacMillan.
  	* Merged patch from Dan Walsh.
  	  This includes audit2allow changes for analysis plugins,
  	  internationalization support for several additional programs 
  	  and added po files, some fixes for semanage, and several cleanups.
  	  It also adds a new secon utility.


author: Dan Walsh <dwalsh@redhat.com> 1.30.6-1
changelog:
  - Add /etc/samba/secrets.tdb to restorecond.conf
  - Update from upstream
  	* Merged semanage prefix support from Russell Coker.
  	* Added a test to setfiles to check that the spec file is
  	  a regular file.


author: Dan Walsh <dwalsh@redhat.com> 1.30.4-1
changelog:
  - Update from upstream
  	* Merged audit2allow fixes for refpolicy from Dan Walsh.
  	* Merged fixfiles patch from Dan Walsh.
  	* Merged restorecond daemon from Dan Walsh.
  	* Merged semanage non-MLS fixes from Chris PeBenito.
  	* Merged semanage and semodule man page examples from Thomas Bleher.


author: Dan Walsh <dwalsh@redhat.com> 1.30.1-1
changelog:
  - Make audit2allow translate dontaudit as well as allow rules
  - Update from upstream
  	* Merged semanage labeling prefix patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.26-1
changelog:
  - Update from upstream
  	* Merged semanage bug fix patch from Ivan Gyurdiev.
  	* Merged improve bindings patch from Ivan Gyurdiev.
  	* Merged semanage usage patch from Ivan Gyurdiev.
  	* Merged use PyList patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.23-1
changelog:
  - Update from upstream
  	* Merged newrole -V/--version support from Glauber de Oliveira Costa.
  	* Merged genhomedircon prefix patch from Dan Walsh.
  	* Merged optionals in base patch from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.20-1
changelog:
  - Update from upstream
  	* Merged seuser/user_extra support patch to semodule_package 
  	  from Joshua Brindle.
  	* Merged getopt type fix for semodule_link/expand and sestatus
  	  from Chris PeBenito.
  - Fix genhomedircon output


author: Dan Walsh <dwalsh@redhat.com> 1.29.17-1
changelog:
  - Update from upstream
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged seusers.system patch from Ivan Gyurdiev.
  	* Merged improve port/fcontext API patch from Ivan Gyurdiev.
  	* Merged genhomedircon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.15-1
changelog:
  - Update from upstream
  	* Merged newrole audit patch from Steve Grubb.
  	* Merged seuser -> seuser local rename patch from Ivan Gyurdiev.
  	* Merged semanage and semodule access check patches from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.29.11-1
changelog:
  - Added translation support to semanage
  - Update from upstream
  	* Modified newrole and run_init to use the loginuid when
  	  supported to obtain the Linux user identity to re-authenticate,
  	  and to fall back to real uid.  Dropped the use of the SELinux
  	  user identity, as Linux users are now mapped to SELinux users
  	  via seusers and the SELinux user identity space is separate.
  	* Merged semanage bug fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat.8 and genhomedircon patches from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.8-1
changelog:
  - Update to match NSA
  	* Merged semanage fixes from Ivan Gyurdiev.
  	* Merged semanage fixes from Russell Coker.
  	* Merged chcat, genhomedircon, and semanage diffs from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.7-1
changelog:
  - Update to match NSA
  	* Merged newrole cleanup patch from Steve Grubb.
  	* Merged setfiles/restorecon performance patch from Russell Coker.
  	* Merged genhomedircon and semanage patches from Dan Walsh.
  	* Merged remove add_local/set_local patch from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.29.4-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon and semanage patch from Dan Walsh.
  	* Changed semodule error reporting to include argv[0].


author: Dan Walsh <dwalsh@redhat.com> 1.29.3-1
changelog:
  - Update to match NSA
  	* Merged semanage getpwnam bug fix from Serge Hallyn (IBM).
  	* Merged patch series from Ivan Gyurdiev.
  	  This includes patches to:
  	  - cleanup setsebool
  	  - update setsebool to apply active booleans through libsemanage
  	  - update semodule to use the new semanage_set_rebuild() interface
  	  - fix various bugs in semanage
  	* Merged patch from Dan Walsh (Red Hat).
  	  This includes fixes for restorecon, chcat, fixfiles, genhomedircon,
  	  and semanage.


author: Dan Walsh <dwalsh@redhat.com> 1.29.2-1
changelog:
  - Fix genhomedircon to work in installer
  - Update to match NSA
  	* Merged patch for chcat script from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.29.1-1
changelog:
  - Update to match NSA
  	* Merged fix for audit2allow long option list from Dan Walsh.
  	* Merged -r option for restorecon (alias for -R) from Dan Walsh.
  	* Merged chcat script and man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.27.36-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to warn on use of ROLE in homedir_template
  	  if using managed policy, as libsemanage does not yet support it.


author: Dan Walsh <dwalsh@redhat.com> 1.27.35-1
changelog:
  - Update to match NSA
  	* Merged genhomedircon bug fix from Dan Walsh.
  	* Revised semodule* man pages to refer to checkmodule and
  	  to include example sections.


author: Dan Walsh <dwalsh@redhat.com> 1.27.33-1
changelog:
  - Update to match NSA
  	* Merged audit2allow --tefile and --fcfile support from Dan Walsh.
  	* Merged genhomedircon fix from Dan Walsh.
  	* Merged semodule* man pages from Dan Walsh, and edited them.
  	* Changed setfiles to set the MATCHPATHCON_VALIDATE flag to
  	  retain validation/canonicalization of contexts during init.


author: Dan Walsh <dwalsh@redhat.com> 1.27.31-1
changelog:
  - Update to match NSA
  	* Changed genhomedircon to always use user_r for the role in the
  	  managed case since user_get_defrole is broken.
  - Add te file capabilities to audit2allow
  - Add man pages for semodule


author: Dan Walsh <dwalsh@redhat.com> 1.27.30-1
changelog:
  - Update to match NSA
  	* Merged sestatus, audit2allow, and semanage patch from Dan Walsh.
  	* Fixed semodule -v option.


author: Dan Walsh <dwalsh@redhat.com> 1.27.29-1
changelog:
  - Update to match NSA
  	* Merged audit2allow python script from Dan Walsh.
  	  (old script moved to audit2allow.perl, will be removed later).
  	* Merged genhomedircon fixes from Dan Walsh.
  	* Merged semodule quieting patch from Dan Walsh
  	  (inverts default, use -v to restore original behavior).


author: Dan Walsh <dwalsh@redhat.com> 1.27.28-2
changelog:
  - Update to match NSA
  	* Merged genhomedircon rewrite from Dan Walsh.
  - Rewrite audit2allow to python


author: Dan Walsh <dwalsh@redhat.com> 1.27.26-1
changelog:
  * Added -B (--build) option to semodule to force a rebuild.
  	* Reverted setsebool patch to call semanage_set_reload_bools().
  	* Changed setsebool to disable policy reload and to call
  	  security_set_boolean_list to update the runtime booleans.
  	* Changed setfiles -c to use new flag to set_matchpathcon_flags()
  	  to disable context translation by matchpathcon_init().


author: Dan Walsh <dwalsh@redhat.com> 1.27.23-1
changelog:
  - Update to match NSA
  	* Changed setfiles for the context canonicalization support.
  	* Changed setsebool to call semanage_is_managed() interface
  	  and fall back to security_set_boolean_list() if policy is
  	  not managed.
  	* Merged setsebool memory leak fix from Ivan Gyurdiev.
  	* Merged setsebool patch to call semanage_set_reload_bools()
  	  interface from Ivan Gyurdiev.


author: Dan Walsh <dwalsh@redhat.com> 1.27.20-1
changelog:
  - Update to match NSA
  	* Merged setsebool patch from Ivan Gyurdiev.
  	  This moves setsebool from libselinux/utils to policycoreutils,
  	  and rewrites it to use libsemanage for permanent boolean changes.


author: Dan Walsh <dwalsh@redhat.com> 1.27.19-1
changelog:
  - Update to match NSA
  	* Merged semodule support for reload, noreload, and store options
  	  from Joshua Brindle.
  	* Merged semodule_package rewrite from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.18-1
changelog:
  - Update to match NSA
  	* Cleaned up usage and error messages and releasing of memory by
     	  semodule_* utilities.
  	* Corrected error reporting by semodule.
  	* Updated semodule_expand for change to sepol interface.
  	* Merged fixes for make DESTDIR= builds from Joshua Brindle.


author: Dan Walsh <dwalsh@redhat.com> 1.27.12-1
changelog:
  - Update to match NSA
  	* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.


author: Dan Walsh <dwalsh@redhat.com> 1.27.11-1
changelog:
  - Update to match NSA
  	* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
  	* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
  	* Merged fixfiles patch from Dan Walsh (Red Hat).
  	* Updated semodule for removal of semanage_strerror.


author: Dan Walsh <dwalsh@redhat.com> 1.27.7-1
changelog:
  - Update to match NSA
  	* Updated semodule_link and semodule_expand to use shared libsepol.
  	Fixed audit2why to call policydb_init prior to policydb_read (still
  	uses the static libsepol).


author: Dan Walsh <dwalsh@redhat.com> 1.27.6-1
changelog:
  - Update to match NSA
  	* Updated for changes to libsepol. 
  	Changed semodule and semodule_package to use the shared libsepol.
  	Disabled build of semodule_link and semodule_expand for now.
  	Updated audit2why for relocated policydb internal headers,
  	still needs to be converted to a shared lib interface.


author: Dan Walsh <dwalsh@redhat.com> 1.27.5-1
changelog:
  - Update to match NSA
  	* Fixed warnings in load_policy.
  	* Rewrote load_policy to use the new selinux_mkload_policy()
  	interface provided by libselinux.


author: Dan Walsh <dwalsh@redhat.com> 1.27.3-1
changelog:
  - Update to match NSA
  	* Merged patch to update semodule to the new libsemanage API
  	and improve the user interface from Karl MacMillan (Tresys).
  	* Modified semodule for the create/connect API split.


author: Dan Walsh <dwalsh@redhat.com> 1.27.2-1
changelog:
  - Update to match NSA
  	* Merged run_init open_init_pty bug fix from Manoj Srivastava
  	  (unblock SIGCHLD).  Bug reported by Erich Schubert.


author: Dan Walsh <dwalsh@redhat.com> 1.27.1-1
changelog:
  - Update to match NSA
  	* Merged error shadowing bug fix for restorecon from Dan Walsh.
  	* Merged setfiles usage/man page update for -r option from Dan Walsh.
  	* Merged fixfiles -C patch to ignore :s0 addition on update
  	  to a MCS/MLS policy from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.25.9-1
changelog:
  - Update to match NSA
  	* Changed setfiles -c to translate the context to raw format
  	prior to calling libsepol.


author: Dan Walsh <dwalsh@redhat.com> 1.25.6-1
changelog:
  - Update to match NSA
  	* Merged fixes for semodule_link and sestatus from Serge Hallyn (IBM).
  	  Bugs found by Coverity.


author: Dan Walsh <dwalsh@redhat.com> 1.25.5-1
changelog:
  - Update to match NSA
  	* Merged patch to move module read/write code from libsemanage
  	  to libsepol from Jason Tang (Tresys).


author: Dan Walsh <dwalsh@redhat.com> 1.23.11-1
changelog:
  - Update to match NSA
  	* Merged fixfiles and newrole patch from Dan Walsh.
  	* Merged audit2why man page from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.23.10-1
changelog:
  - Update to match NSA
  	* Extended audit2why to incorporate booleans and local user 
  	  settings when analyzing audit messages.


author: Dan Walsh <dwalsh@redhat.com> 1.23.9-1
changelog:
  - Update to match NSA
  	* Updated audit2why for sepol_ prefixes on Flask types to
  	  avoid namespace collision with libselinux, and to 
  	  include <selinux/selinux.h> now.


author: Dan Walsh <dwalsh@redhat.com> 1.23.7-1
changelog:
  - Change -f flag in fixfiles to remove stuff from /tmp
  - Change -F flag to pass -F flag  to restorecon/fixfiles.  (IE Force relabel).


author: Dan Walsh <dwalsh@redhat.com> 1.23.6-1
changelog:
  - Update to match NSA
  	* Fixed signed/unsigned pointer bug in load_policy.
  	* Reverted context validation patch for genhomedircon.


author: Dan Walsh <dwalsh@redhat.com> 1.23.5-1
changelog:
  - Update to match NSA
  	* Reverted load_policy is_selinux_enabled patch from Dan Walsh.
  	  Otherwise, an initial policy load cannot be performed using
  	  load_policy, e.g. for anaconda.


author: Dan Walsh <dwalsh@redhat.com> 1.23.4-1
changelog:
  - Update to version from NSA
  	* Merged load_policy is_selinux_enabled patch from Dan Walsh.
  	* Merged restorecon verbose output patch from Dan Walsh.
  	* Merged setfiles altroot patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.23.3-1
changelog:
  - Update to version from NSA
          * Merged context validation patch for genhomedircon from Eric Paris.
  - Fix verbose output of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.23.2-1
changelog:
  - Update to version from NSA
  	* Changed setfiles -c to call set_matchpathcon_flags(3) to
  	  turn off processing of .homedirs and .local.


author: Dan Walsh <dwalsh@redhat.com> 1.23.1-1
changelog:
  - Update to released version from NSA
  	* Merged rewrite of genhomedircon by Eric Paris.
  	* Changed fixfiles to relabel jfs since it now supports security xattrs
  	  (as of 2.6.11).  Removed reiserfs until 2.6.12 is released with 
  	  fixed support for reiserfs and selinux.


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-2
changelog:
  - Apply Uli patch
  	* The Makefiles should use the -Wall option even if compiled in beehive
  	* Add -W, too
  	* use -Werror when used outside of beehive.  This could also be used unconditionally
  	* setfiles/setfiles.c: fix resulting warning
  	* restorecon/restorecon.c: Likewise
  	* run_init/open_init_pty.c: argc hasn't been checked, the program would crash if
  called without parameters.  ignore the return value of nice properly.
  	* run_init: don't link with -ldl lutil
  	* load_policy: that's the bad bug.  pointer to unsigned int is passed, size_t is
  written to.  fails on 64-bit archs
  	* sestatus: signed vs unsigned problem
  	* newrole: don't link with -ldl


author: Dan Walsh <dwalsh@redhat.com> 1.21.18-1
changelog:
  - Update to latest from NSA
  	* Changed load_policy to fall back to the original policy upon
  	  an error from sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.17-1
changelog:
  - Update to latest from NSA
  	* Merged new genhomedircon script from Dan Walsh.
  	* Changed load_policy to call sepol_genusers().


author: Dan Walsh <dwalsh@redhat.com> 1.21.13-1
changelog:
  - Update from NSA
  	* Merged further change to fixfiles -C from Dan Walsh.
  	* Merged updated fixfiles script from Dan Walsh.
  - Fix error handling of restorecon


author: Dan Walsh <dwalsh@redhat.com> 1.21.12-1
changelog:
  - More cleanup of fixfiles sed patch
  	* Merged further patches for restorecon/setfiles -e and fixfiles -C.


author: Dan Walsh <dwalsh@redhat.com> 1.21.10-1
changelog:
  - More cleanup of fixfiles sed patch
  - Upgrade to latest from NSA
  	* Merged patch for open_init_pty from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.9-1
changelog:
  - More cleanup of sed patch
  - Upgrade to latest from NSA
  	* Merged updated fixfiles script from Dan Walsh.
  	* Merged updated man page for fixfiles from Dan Walsh and re-added unzipped.
  	* Reverted fixfiles patch for file_contexts.local; 
  	  obsoleted by setfiles rewrite.
  	* Merged error handling patch for restorecon from Dan Walsh.
  	* Merged semi raw mode for open_init_pty helper from Manoj Srivastava.
  	* Rewrote setfiles to use matchpathcon and the new interfaces
  	  exported by libselinux (>= 1.21.5).


author: Dan Walsh <dwalsh@redhat.com> 1.21.7-3
changelog:
  - Fix fixfiles patch
  - Upgrade to latest from NSA
  	* Prevent overflow of spec array in setfiles.
  - Add diff comparason between file_contexts to fixfiles
  - Allow restorecon to give an warning on file not found instead of exiting


author: Dan Walsh <dwalsh@redhat.com> 1.21.5-1
changelog:
  - Upgrade to latest from NSA
  	* Merged newrole -l support from Darrel Goeddel (TCS).
  - Fix genhomedircon STARTING_UID


author: Dan Walsh <dwalsh@redhat.com> 1.21.3-1
changelog:
  - Upgrade to latest from NSA
  	* Fixed restorecon to not treat errors from is_context_customizable()
  	  as a customizable context.
  	* Merged setfiles/restorecon patch to not reset user field unless
  	  -F option is specified from Dan Walsh.
  	* Merged open_init_pty helper for run_init from Manoj Srivastava.
  	* Merged audit2allow and genhomedircon man pages from Manoj Srivastava.


author: Dan Walsh <dwalsh@redhat.com> 1.21.1-3
changelog:
  - Don't change user componant if it is all that changed unless forced.
  - Change fixfiles to concatinate file_context.local for setfiles


author: Dan Walsh <dwalsh@redhat.com> 1.20.1-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles rewrite from Dan Walsh.
  	* Merged restorecon patch from Dan Walsh.


author: Dan Walsh <dwalsh@redhat.com> 1.19.3-1
changelog:
  - Update to latest from NSA
  	* Merged fixfiles and restorecon patches from Dan Walsh.
  	* Don't display change if only user part changed.


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-4
changelog:
  - Fix fixfiles handling of rpm
  - Fix restorecon to not warn on symlinks unless -v -v 
  - Fix output of verbose to show old context as well as new context


author: Dan Walsh <dwalsh@redhat.com> 1.19.2-1
changelog:
  - Update to latest from NSA
  	* Changed restorecon to ignore ENOENT errors from matchpathcon.
  	* Merged nonls patch from Chris PeBenito.


author: Dan Walsh <dwalsh@redhat.com> 1.17.6-1
changelog:
  - Update with NSA
  	* Added -l option to setfiles to log changes via syslog.
  	* Merged -e option to setfiles to exclude directories.
  	* Merged -R option to restorecon for recursive descent.


author: Dan Walsh <dwalsh@redhat.com> 1.14.1-2
changelog:
  - Fix fixfiles.cron to not run on non SELinux boxes
  - Fix several problems in fixfiles and fixfiles.cron


author: Dan Walsh <dwalsh@redhat.com> 1.13.3-1
changelog:
  - Update latest from NSA
  - Add -o option to setfiles to save output of any files with incorrect context.


author: Colin Walters <walters@redhat.com> 1.10-3
changelog:
  - Add patch to fall back to authenticating via uid if
    the current user's SELinux user identity is the default
    identity
  - Add BuildRequires pam-devel


author: Dan Walsh <dwalsh@redhat.com> 1.9-9
changelog:
  - Change restorecon to not follow symlinks.  It is too difficult and confusing
  - to figure out the file context for the file pointed to by a symlink.


author: Colin Walters <walters@redhat.com> - 0.73-10
changelog:
  - Add patch to fix CVE-2010-1172
    Drop broken-xml.patch which this one now incorporates
    Resolves: #585395


author: Adam Tkac <atkac redhat com> 32:9.7.0-13.P2
changelog:
  - fixed various bind-chroot packaging errors (#829823)
  - generate rndc.key during `service named start` (#829827)
  - nslookup: return non-zero exit code when fail to get answer (#829829)
  - named could fail to send a uncompressable zone


author: Adam Tkac <atkac redhat com> 32:9.7.0-12.P2
changelog:
  - initscript should kill only the "correct" named process
  - don't check MD5, size and mtime of sysconfig/named
  - host utility now honors "attempts", "timeout" and "debug" options
    in resolv.conf
  - add new option DISABLE_ZONE_CHECKING to sysconfig/named
  - improve handling of lame responses with no SOA
  - mount /etc/named.root.key into chroot (#719855)
  - document dig exit codes
  - print "the working directory is not writable" as debug message
  - zero zone->curmaster before return in dns_zone_setmasterswithkeys()
  - fix IDN related statement in dig.1 manpage (#811566)
  - disable broken testsuite tests, they also don't work with upstream
    tarball


author: Adam Tkac <atkac redhat com> 32:9.7.0-7.P2
changelog:
  - work correctly when new DS is introduced in the trusted DNS tree (#675467)
  - include root zone DNSKEY (#693788)


author: Adam Tkac <atkac redhat com> 32:9.7.0-4.P2
changelog:
  - replace bind97-rh507429.patch by improved bind97-rh643102.patch
  - don't pass unsupported "-N" option to useradd (#643323)


author: Miroslav Rezanina <mrezanin@redhat.com> - 3.0.3-142.el55_9.3
changelog:
  - xm: Fix vcpu-pin complain for CPU number out of range (rhbz 960013)
  - libxc: Support set affinity for more than 64 CPUS (rhbz 960013)
  - libxc: Fixes for "support affinity for more than 64 CPUS" (rhbz 960013)
  - xend: Fix bug of a cpu affinity vcpu-pin under ia32pa (rhbz 960013)
  - libxc: Fix cpu number overflow for vcpu-pin (rhbz 960013)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-68.el5
changelog:
  - backport fixes to teach libkrb5 to use descriptors higher than FD_SETSIZE
    to talk to a KDC by using poll() if it's detected at compile-time, revised
    (#701444, RT#6905)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-67.el5
changelog:
  - add backported patch by way of jbarbuc to free subkeys created by the
    KDC while processing TGS requests (#708516)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-66.el5
changelog:
  - add backported patch by way of several people to better avoid false
    detection of replay attacks when talking to systems with coarse time
    resolution (#713500)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-65.el5
changelog:
  - ftpd: add backported patch to check for errors when calling setegid
    (MITKRB5-SA-2011-005, CVE-2011-1526, #719098)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-63.el5
changelog:
  - unbreak processing of multi-line macros (#735363,#736132), broken by the
    original fix for #665833


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-62.el5
changelog:
  - incorporate a fix to teach the file labeling bits about when replay caches
    are expunged (#712453)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-60.el5
changelog:
  - don't bail halfway through an unlock operation when the result will
    be discarded and the end-result not cleaned up (Martin Osvald, #586032)
  - add a versioned dependency between krb5-server-ldap and krb5-libs (internal
    tooling)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-59.el5
changelog:
  - don't discard the error code from an error message received in response
    to a change-password request (#658871, RT#6893)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-58.el5
changelog:
  - ftpd: add patch from Jatin Nansi to correctly match "$user restrict"
    lines in /etc/ftpusers (#644215, RT#6889)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-57.el5
changelog:
  - ftp: add modified patch from Rogan Kyuseok Lee to report the number of
    bytes transferred correctly when transferring large files on 32-bit
    systems (#648404)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add upstream patch to fix hang or crash in the KDC when using the LDAP kdb
    backend (CVE-2011-0281, CVE-2011-0282, #671097)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-55.el5
changelog:
  - incorporate upstream patch for checksum acceptance issues from
    MITKRB5-SA-2010-007 (CVE-2010-1323, #652308)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-52.el5
changelog:
  - krshd: don't limit user names to 16 chars when utmp can handle names
    at least a bit longer than that (#611713)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-49.el5
changelog:
  - ftpd: backport changes to modify behavior to match telnetd,rshd,rlogind and
    accept GSSAPI auth to any service for which we have a matching key (#538075)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-47.el5
changelog:
  - pull in fix for RT#5551 to treat the referral realm when seen in a ticket
    as though it were the local realm (#498554, also very likely #450122)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-46.el5
changelog:
  - add aes256-cts:normal and aes128-cts:normal to the list of keysalts
    in the default kdc.conf (part of #565941)
  - add a note to kdc.conf(5) pointing to the admin guide for the list of
    recognized key and salt types (the rest of #565941)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-44.el5
changelog:
  - libgssapi: backport patch from svn to stop returning context-expired errors
    when the ticket which was used to set up the context expires (#605367,
    upstream #6739)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-42.el5
changelog:
  - stop caring about the endianness of stash files (#514741), which will be
    replaced by proper keytab files in later releases
  - don't crash in krb5_get_init_creds_password() if the passed-in options
    struct is NULL and the client's keys have expired (#555875)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-41.el5
changelog:
  - ksu: perform PAM account and session management before dropping privileges
    to those of the target user (#540769 and #596887, respectively)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add candidate patch to correct libgssapi null pointer dereference which
    could be triggered by malformed client requests (CVE-2010-1321, #583704)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-40.el5
changelog:
  - fix a null pointer dereference and crash introduced in our PAM patch that
    would happen if ftpd was given the name of a user who wasn't known to the
    local system, limited to being triggerable by gssapi-authenticated clients by
    the default xinetd config (Olivier Fourdan, #569472)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-39.el5
changelog:
  - add upstream patch to fix a few use-after-free bugs, including one in
    kadmind (CVE-2010-0629, #578186)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-38.el5
changelog:
  - merge patch to correct KDC integer overflows which could be triggered by
    malformed RC4 and AES ciphertexts (CVE-2009-4212, #546348)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-37.el5
changelog:
  - pull changes to libkrb5 to properly handle and chase "off-path" referrals
    back from 1.7 (#546538)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-33.el5
changelog:
  - kdb5_util: when renaming a database, if the new name's associated lock
    files don't exist, go ahead and create them (#442879)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ksu: perform PAM account and session management for the target user;
    authentication is still performed as before (#477033)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix typo in ksu's reporting of errors getting credentials (#462890)
  - kadmind.init: stop setting up a keytab, as kadmind's been able to use
    the database directly for a while now (#473151)
  - pull up patch to set PAM_RHOST (James Leddy, #479071)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5_3.2
changelog:
  - add fix for potential buffer read overrun in the SPNEGO GSSAPI mechanism
    (#490636, CVE-2009-0844)
  - add fix for NULL pointer dereference when handling certain error cases
    in the SPNEGO GSSAPI mechanism (#490636, CVE-2009-0845)
  - add fix for attempt to free uninitialized pointer in the ASN.1 decoder
    (#491036, CVE-2009-0846)
  - add fix for bug in length validation in the ASN.1 decoder (CVE-2009-0847)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-32.el5
changelog:
  - add patch to also report an error in rcp if close() returns an error,
    which could indicate an out-of-space error on an NFS filesystem (Tomas
    Smetana, #461902)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-31.el5
changelog:
  - add a backported patch which adds a check on credentials obtained from
    a foreign realm to make sure that they're of an acceptable type, and
    if not, retry to the request to get one of the right type (Sadique Puthen,


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-30.el5
changelog:
  - backport fix from 1.6.3 to register file-based ccaches created with
    the krb5_cc_new_unique() function with the global list, so that we
    don't crash when we go to close the ccache (#468729)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-29.el5
changelog:
  - backport fix from 1.6.3 to abort a sequential scan of a keytab if the
    handle to the keytab has become invalidated during the scan (via Vince
    Worthington, #460911)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-28.el5
changelog:
  - if we successfully change the user's password during an attempt to get
    initial credentials, but then fail to get initial creds from a non-master
    using the new password, retry against the master (#432334)
  - telnet: remove the proviso in the man page which says that the "z" command
    only works in csh, as this is only true on systems where other shells don't
    implement job control (#433947)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - avoid double-logging by not parsing /etc/krb5.conf twice (#434858)
  - ftp: fix to not incorrectly reuse target filenames during mget when case-
    mapping is enabled (#442716)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-25.el5
changelog:
  - add preliminary patch to fix use of uninitialized pointer / double-free in
    KDC (CVE-2008-0062,CVE-2008-0063) (#432620, #432621)
  - add backported patch to fix use-after-free in libgssapi_krb5 (CVE-2007-5901)
    (#415321)
  - add backported patch to fix double-free in libgssapi_krb5 (CVE-2007-5971)
    (#415351)
  - add preliminary patch to fix incorrect handling of high-numbered descriptors
    in the RPC library (CVE-2008-0947) (#433596)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-24
changelog:
  - kdb_ldap: add patch to recognize "nsAccountLock: TRUE" as indicating that
    an entry should have the DISALLOW_ALL_TIX flag set (read only), for better
    interop with Fedora, Netscape, Red Hat Directory Server (Simo Sorce, #431784)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-23.el5
changelog:
  - backport changes from 1.6.3 which allow callers of the the sendto-kdc
    functions to override the failover behavior on a per-response basis, and
    default to failing over on service-unavailable errors (#230384)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-22
changelog:
  - add patch to fall back to TCP kpasswd servers for kdc-unreachable,
    can't-resolve-server, and response-too-big errors (#392631)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-21
changelog:
  - add conditional logic to allow building only the krb5-server-ldap subpackage
    (#427790)
  - use the right sequence numbers when generating password-set/change requests
    for kpasswd servers after the first one (#427789)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-20
changelog:
  - allocate space for the relative path including the nul-terminator (Jose
    Plans, #426085)
  - fix a couple of spots where a file context wouldn't be freed


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-19
changelog:
  - backport from 1.6.3 to initialize a library-allocated get_init_creds_opt
    structure the same way we would one which was allocated by the calling
    application, to restore kinit's traditional behavior of doing a password
    change right when it detects an expired password (#413051)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-18
changelog:
  - fix syntax error in kadmin init script (#373011,#381011)
  - turn off content/size/date verification on krb5.conf (#329771)
  - fix storage of delegated krb5 credentials when they've been wrapped up in
    spnego (#319351)
  - return a delegated credential handle even if the application didn't pass a
    location to store the flags which would be used to indicate that credentials
    were delegated (#314651)
  - in login, allow PAM to interact with the user when they've been strongly
    authenticated (#309951)
  - signal PAM when we're changing an expired password that it's an expired
    password, so that when cracklib flags a password as being weak it's treated
    as an error even if we're running as root (#308131)
  - set the key expiration time in an AS-REP using the sooner of the client's
    entry's key expiration time and the entry's expiration time, instead of
    just the entry's expiration time (#250257)
  - in ftp, don't lose track of a client socket when a server-side error
    causes a download to fail (#248618)
  - in ftp, fix runique when mget is used (#247633)
  - add the snippet documenting the kdc_tcp_ports option to kdc.conf's man
    page, using text taken from the administrator's guide (#282191)
  - in kpasswd, when reading the client's principal name from the ccache fails
    for any reason, fall back to the user's name (#248631)
  - init script cleanups (Michal Marciniszyn, #242500)
  - tweak the telnet man page to refer to the telnet rlogin escape character
    as such instead of rereferring to it simly as the escape character or the
    telnet escape character (#247741)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-17.el5
changelog:
  - ftpd: also do PAM session and credential management when ftp clients use
    strong authentication (#286291)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-14
changelog:
  - make krb5-workstation depend on the PAM configuration file used by login.krb5
  - fix omission of kadmin log file when labeling (#253558)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-13
changelog:
  - add preliminary patch to fix buffer overflow in rpcsec_gss implementation
    in libgssrpc (#250973, CVE-2007-3999) and write through uninitialized
    pointer in kadmind (#250976, CVE-2007-4000)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-11
changelog:
  - login: change to the user's home directory after dropping privileges,
    not before (#248050)
  - turn off the ldap features


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-10.el5
changelog:
  - add a patch to allow applications to try to use a key with kvno=0, if
    found, in place of the "right" version for a request (Luke Howard, #230379)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-9
changelog:
  - incorporate fixes for MITKRB5-SA-2007-004 (CVE-2007-2442,CVE-2007-2443)
    and MITKRB5-SA-2007-005 (CVE-2007-2798) (#239073)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - perform PAM account / session management in krshd (#182195,#195922)
  - perform PAM authentication and account / session management in ftpd
  - perform PAM authentication, account / session management, and password-
    changing in login.krb5 (#182195,#195922)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - preprocess kerberos.ldif into a format FDS will like better, and include
    that as a doc file as well


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - switch man pages to being generated with the right paths in them
  - drop old, incomplete SELinux patch
  - add patch from Greg Hudson to make srvtab routines report missing-file errors
    at same point that keytab routines do (#241805)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-2
changelog:
  - pull patch from svn to undo unintentional chattiness in ftp
  - pull patch from svn to handle NULL krb5_get_init_creds_opt structures
    better in a couple of places where they're expected


author: Nalin Dahyabhai <nalin@redhat.com> 1.6.1-1
changelog:
  - update to 1.6.1
    - drop no-longer-needed patches for CVE-2007-0956,CVE-2007-0957,CVE-2007-1216
    - drop patch for sendto bug in 1.6, fixed in 1.6.1


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - kadmind.init: don't fail outright if the default principal database
    isn't there if it looks like we might be using the kldap plugin
  - kadmind.init: attempt to extract the key for the host-specific kadmin
    service when we try to create the keytab


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-6
changelog:
  - omit dependent libraries from the krb5-config --libs output, as using
    shared libraries (no more static libraries) makes them unnecessary and
    they're not part of the libkrb5 interface (patch by Rex Dieter, #240220)
    (strips out libkeyutils, libresolv, libdl)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-4
changelog:
  - fix an uninitialized length value which could cause a crash when parsing
    key data coming from a directory server
  - correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move the default acl_file, dict_file, and admin_keytab settings to
    the part of the default/example kdc.conf where they'll actually have
    an effect (#236417)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-3
changelog:
  - add patch to correct unauthorized access via krb5-aware telnet
    daemon (#229782, CVE-2007-0956)
  - add patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add patch to fix double-free in kadmind (#231537, CVE-2007-1216)


author: Nalin Dahyabhai <nalin@redhat.com> 1.6-2
changelog:
  - add buildrequires: on keyutils-libs-devel to enable use of keyring ccaches,
    dragging keyutils-libs in as a dependency


author: Nalin Dahyabhai <nalin@redhat.com> 1.5-22
changelog:
  * Thu Mar 15 2007 Nalin Dahyabhai <nalin@redhat.com> 1.5-21
  - add preliminary patch to fix buffer overflow in krb5kdc and kadmind
    (#231528, CVE-2007-0957)
  - add preliminary patch to fix double-free in kadmind (#231537, CVE-2007-1216)


