# changelog

author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix deadkeys handling in kdm
  - Fix uninitialized variable in konsole, patch
    from Tim Waugh (#34452)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix rpmfind shortcut (Bugzilla #34057, KDE Bug #21100)
  - Add patch from KDE_2_1_BRANCH to get rid of debug output in
    the ktar IO slave


author: Than Ngo <than@redhat.com>
changelog:
  - fix charmap/encoding problem
  - fix MinimumFontSize in konqueror, default is 10
  - set correct DefaultEncoding for konqueror
  - clean up startkde
  - disable Israel and Thai, it's broken in qt


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove CD-ROM / Floppy .desktop files, they are generated automatically now
  - remove some other old obsolete default config files


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Log utmp/wtmp correctly in konsole, using utempter
  - Remove setuid state from konsole_grantpty, it's no longer needed now
    that we use utempter.
  - Fix escaping in the konsole KPart
  - Fix grammar and order in the arts control module


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-1
changelog:
  - 2.1.1
  - Don't crash if kfmexec is invoked without arguments (#32029)
  - Various desktopconv fixes:
    - Allow removing or ignoring KDE 1.x files
    - convert the printer icon we had on the desktop by default.
    - Support i18n
  - Add mailsettings tool (generates sane kcmemail defaults at first
    startup)
  - Fix up support for Brazil Portuguese and Chinese
  - Fix loading of child panel config files (harald)
  - remove -T and --title in konsole, use instead --caption (#31483) (Than Ngo)
  - More i18n fixes (zh_HK is closer to zh_TW than to zh_CN...)


author: Than Ngo <than@redhat.com>
changelog:
  - fix Login Screen Red Hat logo (Bug #32241)
  - fix kdm background color
  - fix a bug in setting font size (Bug #32258)


author: Than Ngo <than@redhat.com> 2.1-11
changelog:
  - fix placed icons on desktop (Bug #31985)
  - some bugfixes in startkde
  - restore support for Russian (bero)
  - merge bugfix patch from KDE_2_1_BRANCH, Ctrl-U could crash Konqueror
    under certain circumstances (bero)
  - Fix up the effects patch (if everything was disabled, no radio button
    was checked by default, rather than the "No effects" button) (bero)


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Fix up i18n support
  - Don't use predictable tmp file names in krdb
  - Remove the printer icon from the desktop. It uses klpq which is in kdeutils,
    so the icon should come from there.
  - fix error.c in kdebase-2.1-fixes.patch, It's broken (Than Ngo)
  - better fix for konsole keyboard mappings (Preston Brown)


author: Than Ngo <than@redhat.com>
changelog:
  - fix default profile for konqueror in webbrowser mode 
  - set lucidatypewriter as fixed-width font for konqueror


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Fix locale settings (old versions didn't check the user's locale settings
    and always started up in English)
  - Fix some braindead code in kwrite


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-8
changelog:
  - Add option to save backtraces to a file (#30867)
  - Fix kdm looking horrible on 8 bit displays
  - Revert to /usr/share/config with an exception for kdmrc
  - Add /etc/skel/Desktop/.directory (the /etc/skel/Desktop/* glob doesn't include
    /etc/skel/Desktop/.* ...)
  - Don't apply konsole-noxft patch anymore (workaround for an X bug
    that was fixed in 11.4)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - /usr/share/config -> /etc/kde
  - Don't throw all config files at every user's home directory; 2.x supports
    changing global defaults
  - Get rid of bogus "can't find schema named" warning
  - Fix various bugs in konsole (don't connect to a NULL slot, etc.)
  - Cripple kxmlrpcd by default (#23253)
  - Add a sane icon arrangement at first startup (#25026)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add fixes from KDE_2_1_BRANCH:
    - Fix up cookie handling in konqueror
    - Fix a potential crash in kcontrol when using config files from
      cvs snapshots
    - Fix possible khotkeys segfault
  - Fix up Konqueror User Agent dialog
  - Log in to "default" session by default (#29157)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix up konsole_grantpty to work with the /dev/pts filesystem and
    /dev/ptmx rather than the old /dev/ptyXX system
  - Replace ktip logo with Red Hat logo, the old one could be considered
    offensive by some people
  - Fix build with glibc 2.2.2
  - Turn off icon view in kdm
  - Other minor changes to default config


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - desktopconv: Don't strip off .png/.xpm/.gif in Icon= if it is
    provided as a full pathname
  - Build with --disable-debug
  - Fix a bug causing all icons to appear in the upper-left corner
  - Don't use antialiased fonts in konsole even if they're turned on.
    Konsole can't deal with them.
  - Don't show the postgres and amanda users in kdm
  - Add rhbug/bz shortcut to Bugzilla
  - Add ftpsearch/fs shortcut to FTP Search
  - Add "Eject" option to CD-ROM icon (RFE #26301)
  - Fix permissions on some files in /etc/skel/Desktop (having them readable
    by root only is not really useful ;) )
  - Fix PAM exiting (#25232, Patch from Tim Waugh)
  - Fix utmp handling in konsole (Bug #25048)
  - Rewrite desktopconv and run it from startkde, ensures
    clean updates from KDE 1.x (Bug #25473)
  - Add $HOME/bin to PATH in kdm (Bug #25743)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Link the greeter into kdm statically, pulling in libpthreads
    Fixes crash with glibc-2.2.1-3 i686


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Turn off anti-aliasing by default
  - Restore the turning AA on/off and "apply styles to non-KDE-apps"
    functionality, someone managed to break them just in time for
    2.1 beta 2.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Kill /usr/share/icons/hicolor/22x22/actions/view_tree.png, it's in
    kdelibs
  - restore missing /etc/kderc (Bug #24601)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS (fixed #24298, #24242)
  - Hack in support for turning anti-aliasing on and off, as requested
    by Than. Unfortunately, this patch probably won't go into the base 2.1
    because of the message freeze.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdm shouldn't show gdm and mailnull users (#23136)
  - don't install the konsole fonts, they're now
    included in XFree86 (#23467)
  - Obsoletes kdebase2 (from 7.0-preview)
  - Add config files (used to be in kdesupport) (#22601)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update
  - Obsolete kdebase-3d-screensavers, kdebase-locolor-icons,
    kapm kcmlaptop (optional stuff from KDE 1.x)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Some fixes to startkde:
    - if /etc/skel/.kde doesn't exist, don't copy it
    - remove stale .DCOPserver* files at startup
  - Rebuild with fixed kdoc


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move include files to /usr/include/kde
  - Don't install any of the mini-lesstif files, we need them at
    build time only
  - Fix consolehelper config for kappfinder


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update to KDE_2_0_BRANCH, now that the ".0 release" bugs are fixed
  - Get rid of the Red Hat menu, it's merged now
  - Fix up the gdm session file
  - Fix up kappfinder, run it through consolehelper (Bug #19903)
  - Enable Netscape plugin support, add a stripped down version of lesstif
    to allow this


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - get rid of the 3d-screensavers package - now that qt-GL is part of qt,
    there's no need to keep them separate to avoid the dependency.


author: Than Ngo <than@redhat.com>
changelog:
  - fix gnome-session so that KDE2 can be started from gdm
  - pam/kde2 instead pam/kde to avoid problem with KDE1
  - don't requires qt-GL, It's now in qt


author: Than Ngo <than@redhat.com>
changelog:
  - fix dependency problem with KDE1 so that KDE1 and KDE2 can be installed
    at the same time
  - add missing ldconfig in %post anf %postun
  - fix for reading config files in /etc/X11/xdm, add Xsession to requires


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild, now that kdelibs2 works on alpha
  - use the same ugly hack to get kdebase to compile
  - remove ksysguard on alpha (even more compiler problems)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - ExcludeArch ia64 for now
  - remove gnome .desktop file, we get it from gnome-core now.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Build the OpenGL screensavers, and move them to a separate package
  - Improve the spec file (BuildPrereqs etc.)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - start autorun if present in startkde
  - check for configured soundcard before running sound services


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added link to /etc/X11/applnk, .directory file
  - included lowcolor icon sub-package
  - enable .desktop file access


author: Preston Brown <pbrown@redhat.com>
changelog:
  - customized startkde script to set up user environment if not present.
  - mention kthememgr in description.


author: Preston Brown <pbrown@redhat.com>
changelog:
  - snapshot, includes kde 1.1.1 + fixes
  - kvt removed for security reasons.  It is a steaming pile of...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - today's snapshot makes kfm a bit nicer and some other fixes
  - moved default rc files to kdesupport


author: Preston Brown <pbrown@redhat.com>
changelog:
  - removed bell.xpm (used to be in fvwm2-icons, don't want installer to see
  - this previous connection and autoselect kdebase for upgrade).


author: Matthias Saou <matthias.saou@est.une.marmotte.net>
changelog:
  - Use %find_lang macro.
  - Add %doc files, including mandatory copy of the LGPL license.
  - Use -j2
  - Improve the descriptions


author: Chip Turner <cturner@redhat.com> 1.99_11-1
changelog:
  - upgrade to 1.99_11
  - remove aprinc patch, no longer necessary
  - remove hash fix, no longer necessary


author: Gary Benson <gbenson@redhat.com> 1.99_09-9
changelog:
  - Apache::Status requires Apache::compat (#103891).
  - add dependency on gdbm-devel (#103889).
  - avoid strip failures on non-root builds (#103889).


author: Gary Benson <gbenson@redhat.com>
changelog:
  - implement locking around test suite to avoid breakage when two
    architectures are built simultaneously on the same machine.
  - make the stale-server killer wait until the server is truly dead,
    and move it into the lock.


author: Gary Benson <gbenson@redhat.com> 1.99_09-8
changelog:
  - add an Apache::Status example to /etc/httpd/conf.d/perl.conf.
  - kill any stale test servers before building.


author: Nalin Dahyabhai <nalin@redhat.com> 1.26-2
changelog:
  - turn off large file support, which makes mod_perl think that server request
    structures are the wrong size (heads-up from Doug MacEachern and Chip Turner)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - rebuild with perl 5.6.0
  - add perlver macro to spec file to make handling of other perl versions easier


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - fixed the postun script to check for upgrades. doh
  - add triggerpostun to fix older versions of the package


author: Preston Brown <pbrown@redhat.com>
changelog:
  - incorporate fixes from Markus Pilzecker <mp@rhein-neckar.netsurf.de>:
  - Prefix: /usr
  - find apxs binary and package directories automatically


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added -fPIC to correct functionality on SPARC
  - upgrade to 1.21, removed build cruft from old buggy mod_perl days
  - added extra documentation that was missing


author: Preston Brown <pbrown@redhat.com>
changelog:
  - experimental patch from Doug MacEachern <dougm@pobox.com> to fix segfault
  - rebuilt against apache 1.3.6


author: Preston Brown <pbrown@redhat.com>
changelog:
  - disabled stacked_handlers.  They still seem busted!
  - minor updates so no conflicts with either apache / secureweb
  - fixed bug building on multiple architectures


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - added a patch to compile it as a shared object for the apache/ssl (and
    future revisions of apache)


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-100]
changelog:
  -cxgb3: prevent reading uninitialized stack memory to fix xgb_extension_ioctl infoleak (Eugene Teo) [633153] {CVE-2010-3296}
  -mlx4: disable MSI-X by default (Andy Gospodarek) [530596]
  -ext3: call fs's invalidatepage instead of block_invalidatepage (Josef Bacik) [488611]
  -av7110: check for negative array offset (Mauro Carvalho Chehab) [672400] {CVE-2011-0521}
  -ext3: don't dirty unmapped data buffers (Josef Bacik) [488611]
  -net: clear heap allocations for privileged ethtool actions (Jiri Pirko) [672431] {CVE-2010-4655}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-97]
changelog:
  -fs: fix filesystem corruption on ext2 (Alexander Viro) [662839]
  -sky2: fix oops in sky2_xmit_frame after tx timeout (Don Howard) [614559]
  -netdump: fix netdump failures on large memory systems (Neil Horman) [488557]


author: Don Howard <dhoward@redhat.com> [2.6.9-96]
changelog:
  -usb: ehci amd periodic frame list table quirk (Don Zickus) [651334]
  -fs: truncate blocks outside i_size after O_DIRECT write error (Eric Sandeen) [665067]


author: Don Howard <dhoward@redhat.com> [2.6.9-95]
changelog:
  -jbd: skip buffers that have a different jh (Josef Bacik) [488611]
  -unix: fix local socket dos (Neil Horman) [656758] {CVE-2010-4249}
  -s390x: qdio: fix zfcp stall with more than 63 active qdio devices (Hendrik Brueckner) [662130]
  -ehci-hcd: fix fatal error during bootup (Don Zickus) [656447]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-94]
changelog:
  -modules: sysctl to block module loading (Jerome Marchand) [645220]
  -redhat: added config_security_dmesg_restrict option (Frantisek Hrbata) [653252]
  -kernel: restrict unprivileged access to kernel syslog (Frantisek Hrbata) [653252]
  -sysctl: introduce ctl_unnumbered definition in sysctl.h (Frantisek Hrbata) [653252]
  -usb: allow usbstorage to have luns greater than 2TB (Don Zickus) [658824]
  -serial: clean data before filling it (Mauro Carvalho Chehab) [648809] {CVE-2010-4075}
  -sched: fix task starvation on Hyperthreaded cpus (Vitaly Mayatskikh) [488089]
  -s390: sclp: handle zero length event buffers (Hans-Joachim Picht) [487692]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-93]
changelog:
  -kernel: failure to revert address limit override in oops error path (Dave Anderson) [659569] {CVE-2010-4258}
  -nfsv4: fix oops in nfs4_kill_super (Jeff Layton) [660448]
  -net: filter: make sure filters dont read uninitialized memory (Jiri Pirko) [651701] {CVE-2010-4158}
  -net: limit sendto()/recvfrom()/iovec total length to INT_MAX (Jiri Pirko) [651924] {CVE-2010-3859}
  -bluetooth: fix missing null check (Jarod Wilson) [655663] {CVE-2010-4242}
  -ipc: initialize structure memory to zero for compat functions (Xiaotian Feng) [648811] {CVE-2010-4073}
  -ipc: shm: fix information leak to userland (Xiaotian Feng) [648817] {CVE-2010-4072}
  -netfront: default to copying instead of flipping (Laszlo Ersek) [653505]
  -net: packet: fix information leak to userland (Jiri Pirko) [649896] {CVE-2010-3876}
  -scsi: gdth: integer overflow in ioc_general (Frantisek Hrbata) [651174] {CVE-2010-4157}
  -sys_semctl: semctl fix kernel stack leakage (Xiaotian Feng) [648794] {CVE-2010-4083}
  -alsa: rme9652: prevent reading uninitialized stack memory (Stanislaw Gruszka) [648807] {CVE-2010-4080}
  -fs: only return EIO once on msync/fsync after IO failure (Rik van Riel) [645633]
  -xen: virtio_net: add get_drvinfo() to virtio_net (Laszlo Ersek) [647196]
  -xen: netfront: add get_drvinfo() to netfront (Laszlo Ersek) [647187]
  -kernel: fix possible integer overflow in mm/fremap.c (Larry Woodman) [637045]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-91]
changelog:
  -mm: prevent panic when setting /proc/sys/vm/nr_hugepages (Larry Woodman) [647567]
  -net: sctp: do not reset the packet during sctp_packet_config() (Jiri Pirko) [637865] {CVE-2010-3432}
  -scsi: fix panic in sysfs_hash_and_remove() when scsi device is removed (Mark Goodwin) [533299]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-90]
changelog:
  -kernel: prevent heap corruption in snd_ctl_new() (Jerome Marchand) [638482] {CVE-2010-3442}
  -forcedeth: latest bugfixes from upstream (Ivan Vecera) [552953]
  -forcedeth: remove CONFIG_FORCEDETH_NAPI=y from config-generic (Ivan Vecera) [552953]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.45]
changelog:
  -scsi: scsi_do_req submitted commands (tape) never complete when device goes (Rob Evers) [636289]
  -scsi: log msg when getting unit attention (Mike Christie) [585430]
  -jbd: fix panic in jbd when running bashmemory (Josef Bacik) [488611]
  -qla2xxx: work around hypertransport sync flood error on sun x4200 with qla2xxx (Chad Dupuis) [621621]
  -aio: implement request batching for better merging and throughput (Jeff Moyer) [508377]
  -fs: a bunch of patches to fix various nfsd/iget() races (Alexander Viro) [189918]
  -net: bonding: add debug module option (Jiri Pirko) [247116]
  -fix fd leaks if pipe() is called with an invalid address (Amerigo Wang) [509627]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.44]
changelog:
  -ide-scsi: fix deadlock in ide-scsi error handler (Doug Ledford) [526966]
  -mlx4_core: allocate sufficient memory for interrupt table (Doug Ledford) [530596]
  -mptbase: panic with domain validation while rebuilding after the disk is replaced (Rob Evers) [476874]
  -fs: buffer: __block_write_full_page simplification by removing last_bh logic (Jeff Moyer) [472752]
  -fs: buffer: __block_write_full_page speedup by removing get_bh() and put_bh() (Jeff Moyer) [472752]
  -fs: buffer: __block_write_full_page race fix (Jeff Moyer) [472752]
  -kernel: fix integer overflow in groups_search (Jerome Marchand) [457519]
  -cifs: remove bogus check in ntlm session setup code (Jeff Layton) [604786]
  -cifs: when renaming don't try to unlink negative dentry (Jeff Layton) [500904]
  -autofs4: fix lookup deadlock when user space uses a signal (Ian Kent) [477017]
  -fs: make sure data stored into inode is properly seen before unlocking new inode (Eric Sandeen) [563920]
  -ipc: hard_msgmax should be higher not lower on 64bit (Amerigo Wang) [525815]
  -fs: fix file truncations when both suid and write permissions set (Amerigo Wang) [525398]
  -block: fix rcu accesses in partition statistics (Jerome Marchand) [517523]
  -kernel headers: fix missing defintion that causes build break (Neil Horman) [504593]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.43]
changelog:
  -aacraid: fix file system going into read only mode (Rob Evers) [624713]
  -blkfront: xen domu, raid1, lvm, iscsi target export with blockio bug (Paolo Bonzini) [490148]
  -cciss: change version from 2.6.20.RH2 to 2.6.20.RH3 (Tomas Henzl) [594086]
  -cciss: added printk in do_cciss_request before BUG() (Tomas Henzl) [594086]
  -cciss: fix a nulll pointer dereference in complete_command() (Tomas Henzl) [594086]
  -cciss: fix an issue when sending command with no data (Tomas Henzl) [594086]
  -mm: honor __GFP_NOFAIL flag in __alloc_pages() (Lachlan McIlroy) [605455]
  -xen: fix crashing of x86 hvm guest on x86_64 (Radim Krčmář) [637658]
  -xen: hide xenbus warnings on hvm guest shutdown (Radim Krčmář) [505081]
  -powernow-k8: fix errant print statement during voltage transitions (Bhavna Sarathy) [217829]
  -fusion: add sleep before subsequent tur in scan function (Tomas Henzl) [495236]
  -bonding: fix a race condition in calls to slave mii ioctls (Flavio Leitner) [621209]
  -s390x: cio: vary off on chpid 00 causes unexpected recovery actions (Hendrik Brueckner) [619855]
  -netfilter: arp_tables: fix unaligned accesses caused by casting strings to long (Jiri Pirko) [591638]
  -net: neigh: fix state transition incomplete->failed via netlink request (Jiri Pirko) [485904]
  -x86_64: floating point state corruption after handling the signal (Oleg Nesterov) [564381]
  -pidhashing: enforce pid_max_limit in sysctls and lower pid_max_limit on 32bit systems (Jiri Pirko) [525941]
  -s390: cio: linux does not boot through xautolog with conmode 3270 (Hans-Joachim Picht) [526282]
  -net: fix proc net ip_conntrack seq_file operations (Danny Feng) [524884]
  -ia64: swiotlb: fix swiotlb pci_map_sg error handling (Tomas Henzl) [525427]
  -xen: try harder to balloon up under memory pressure (Andrew Jones) [507847]
  -mm: fix bogus memory node assumption in huge page allocation (AMEET M. PARANJAPE) [506827]
  -kernel: binfmt_misc c: avoid potential kernel stack overflow (Vitaly Mayatskikh) [459466]
  -net: fix ipvs wrr scheduler bug of updating current weight (Vitaly Mayatskikh) [462717]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.42]
changelog:
  -net: actually copy input_dev to new sk_buff in skb_clone (Andy Gospodarek) [616710]
  -net: fix reception of completely page backed sk_buffs (Andy Gospodarek) [500921]
  -net: fix various snmp counter issues (Thomas Graf) [500889]
  -xen: can enter tickless mode with rcu pending and hang (Paolo Bonzini) [427998]
  -xen: fix occasional deadlocks in xen netfront (Paolo Bonzini) [480937]
  -xen: xenbus suspend_mutex remains locked on trans fail (Paolo Bonzini) [456649]
  -ext2: put explicit checks to not divide by zero (Josef Bacik) [500181]
  -usb: ehci split iso fixes, full speed audio etc (Don Zickus) [624117]
  -xenbus: implement O_NONBLOCK for /proc/xen/xenbus (Paolo Bonzini) [607261]
  -nfs: initialize nfs_open_context list member at allocation time (Jeff Layton) [634632]
  -cifs: fix dentry hash calculation for case insensitive mounts (Jeff Layton) [562949]
  -cifs: fix length calculation for converted unicode readdir names (Jeff Layton) [562949]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.40]
changelog:
  -bonding: interface doesn t issue igmp report on slave interface during failover (Flavio Leitner) [637556]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.39]
changelog:
  -net: fix info leak in police code (Neil Horman) [636390] {CVE-2010-3477}
  -aio: check for multiplication overflow in io_submit (Jeff Moyer) [629447] {CVE-2010-3067}
  -fs: buffer.c: fix race in __block_prepare_write (Jeff Moyer) [480404]
  -3c59x: fix deadlock in irq handler tx path when netconsole in use (Neil Horman) [557380]
  -udp: use memory barrier in datagram_poll (Flavio Leitner) [546251]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.38]
changelog:
  -compat: make compat_alloc_user_space incorporate the access_ok (Xiaotian Feng) [634462] {CVE-2010-3081}
  -ext3: ensure inode is deleted from orphan list in ext3_direct_io() (Lachlan McIlroy) [629143]
  -sb800: add quirk for iso on amd sb800 (Pete Zaitcev) [537447]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.37]
changelog:
  -virtio_net: Fix MAX_PACKET_LEN to support 802.1Q VLANs (Michael S. Tsirkin) [607533]
  -do_generic_mapping_read: clear page errors when issuing a fresh read of the page (Rik van Riel) [481371]
  -ide: backport VIA PCI chipset ids to via82cxxx driver (Mauro Carvalho Chehab) [504778]
  -nfsd4: relax new lock seqid check (Jeff Layton) [577369]
  -igb: fix transmission of jumbo frames with mtu>=2100 (Stefan Assmann) [494597]
  -net: fix tcp conntrack to handle the half opened connection correctly (Jiri Pirko) [531914]
  -net: fix promisc refcounting for interfaces listening for multicast traffic (Neil Horman) [481292]
  -sctp: assign tsns earlier to avoid reordering (Neil Horman) [532045]
  -cciss: switch to using hlist to fix panic (Tomas Henzl) [479090]
  -nfs: statfs error handling and error message fix (Jeff Layton) [520018]
  -kthreads: fix kthread_create vs kthread_stop race (Oleg Nesterov) [519006]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.36]
changelog:
  -nfsd4: fix share conflict tests in nfs_check_open() (Jeff Layton) [510184]
  -nfsd4: move open owner checks from nfsd4_process_open2 into new function (Jeff Layton) [510184]
  -nfsd4: renew lease on seqid modifying operations (Jeff Layton) [508752]
  -ahci: add SATA GEN3 related messages (David Milburn) [512715]
  -igmp: fix ip_mc_sf_allow() race due to a lock problem (Flavio Leitner) [562904]
  -xen: don't recreate xenfb thread on every restore (Chris Lalancette) [543823]
  -bcm5709: update firmware for bcm5709 from version 4.4.23 to 4.6.15 (John Feeney) [532858]
  -net: apply broken_stats workaround to 5706 and 5708 (Flavio Leitner) [515274]
  -nfsd: fix races when cleaning up after last nfsd thread exits (Jeff Layton) [501500]
  -nfs: nfsd returns nfs4_ok when the owner opens a file with permission set to 000 (Peter Staubach) [507527]
  -nfsv4: send the delegation stateid for setattr calls (Jeff Layton) [502884]
  -nfsv4: fix up races in nfs4_proc_setattr (Jeff Layton) [502884]
  -nfsv4: don t reuse expired nfs4_state_owner structs (Jeff Layton) [502884]
  -nfsv4: fix a credential reference leak in nfs4_get_state_owner (Jeff Layton) [502884]
  -nfsv4: poll more aggressively when handling nfs4err_delay (Jeff Layton) [502884]
  -nfsv4: flush nfsv4 work workqueue before killing superblock (Jeff Layton) [501335]
  -nfsv4: only queue nfs4_close_state job when called by rpciod (Jeff Layton) [501335]
  -nfsv4: switch nfs4 workqueue to a per client queue (Jeff Layton) [501335]
  -nfs: mounted nfsv4/krb5 export inaccessible following an nfs server reboot (Harshula) [514684]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.35]
changelog:
  -mm: guard page for stacks that grow upwards (Johannes Weiner) [630564]
  -net sched: fix tcf_gact_dump memory leak (Jiri Pirko) [624907] {CVE-2010-2942}
  -s390x: dasd: allocate fallback cqr for reserve release (Hendrik Brueckner) [619527]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.34]
changelog:
  -megaraid_sas: fix physical disk handling and management ioctls (Tomas Henzl) [577178]
  -s390x: dasd: force online does not work if another side has reserved the disk (Hendrik Brueckner) [619449]
  -sound: realtek: fix sound on realtek ADCs (Pete Zaitcev) [491325]
  -qla2xxx: update firmware for 4g and 8g HBAs to 5.03.02 (Chad Dupuis) [519632]
  -qla2xxx: update version to 8.02.10.01.04.09-d (Chad Dupuis) [568271]
  -qla2xxx: fix cache destroy issue on unload FDMI registration (Chad Dupuis) [568271]
  -bonding: add xmit hash policy to /proc output (Andy Gospodarek) [557122]
  -xen: fix xen reporting bogus lowtotal (Chris Lalancette) [541538]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.33]
changelog:
  -mm: fix ia64 issue/regression caused by guard page patches (Don Howard) [607856] {CVE-2010-2240}
  -mm: fix up some user visible effects of the stack guard page (Don Howard) [607856] {CVE-2010-2240}
  -mm: keep a guard page below a grow down stack segment (Don Howard) [607856] {CVE-2010-2240}
  -usb: testing the wrong variable in fs_create_by_name() (Don Howard) [594633]
  -time: implement 'fine grained accounting' for PM timer depending on 'divider' and 'pmtimer_fine_grained' kernel parameters (Ulrich Obergfell) [586307]
  -time: initialize 'tick_nsec' depending on 'divider' and 'pmtimer_fine_grained' kernel parameters (Ulrich Obergfell) [586307]
  -time: introduce 'pmtimer_fine_grained' kernel parameter (Ulrich Obergfell) [586307]
  -tcp: fix tcp window clamping issue that is unrecoverable (Neil Horman) [546324]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.32]
changelog:
  -net: qla3xxx: replace kmalloc() call with kzalloc() (Jerome Marchand) [620485]
  -bnx2: fix panic in bnx2_poll_work() (John Feeney) [623265]
  -bonding: check if clients mac addr has changed (Flavio Leitner) [610236]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.31]
changelog:
  -net: fix corruption of net_device_wrapper structure (Jerome Marchand) [620485]
  -nfsd4: set OPEN_RESULT_LOCKTYPE_POSIX in open() (Jeff Layton) [575655]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.30]
changelog:
  -sky2: fix 88e803x transmit lockup on Yukon-FE chipset (Don Howard) [614559]
  -nfsd4: bug in read_buf when it is called to move over to next page (Jiri Olsa) [612033] {CVE-2010-2521}
  -cifs: fix a kernel BUG with remote OS/2 server (Eugene Teo) [608586] {CVE-2010-2248}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.27]
changelog:
  -pci: fix reference to dev->bus->pad2 in pcix_set_mmrbc() (Dean Nelson) [499355]
  -pci: cleanup error return for pcix get and set mmrbc functions (Dean Nelson) [499355]
  -pci: fix access of pci_x_cmd by pcix get and set mmrbc functions (Dean Nelson) [499355]
  -pci: fix return value from pcix_get_max_mmrbc (Dean Nelson) [499355]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.26]
changelog:
  -sctp: fix skb_over_panic from processing too many unknown params (Neil Horman) [584656] {CVE2010-1173}
  -kernel: keyrings: find_keyring_by_name() can gain the freed keyring (Vitaly Mayatskikh) [585098] {CVE-2010-1437}
  -virtio: net refill on out of memory (Herbert Xu) [589897]
  -net: pkt_sched: fix sfq qdisc crashes with limit of 2 packets (Jiri Pirko) [587644]
  -nfs: make sure client returns updated d_type info in getdents responses (Jeff Layton) [577378]
  -vfs: force reval of target when following last_bind symlinks (Jeff Layton) [533119] {CVE-2009-3726}
  -nfsv4: fix a problem whereby a buggy server can oops the kernel (Jeff Layton) [533119] {CVE-2009-3726}
  -nfsd4: move special stateid processing to nfs4_preprocess_stateid_op() (Jeff Layton) [517162]
  -nfsd4: move nfserr_openmode checking from nfsd_read/write into nfs4_preprocess_stateid_op() (Jeff Layton) [517162]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.25]
changelog:
  -time drift due to incorrect accounting of lost ticks if tick_divider > 1 (Ulrich Obergfell) [579716]
  -jbd: properly discard freed buffers after commit (Josef Bacik) [571546]
  -scsi: fixup size on read capacity failure (David Milburn) [569668]
  -ahci: honor PI register on sb700 (David Milburn) [522123]
  -drivers/base/bus.c: fix iteration in driver_detach() (Prarit Bhargava) [561108]
  -proc: open /proc/PID/xxx can fail with EINVAL instead of ENOENT (Oleg Nesterov) [556586]
  -mmap: do not return ENOMEM when mapcount is temporarily exceeded in munmap (Danny Feng) [557264]
  -numa: be more restrictive on enabling numa for intel systems (Neil Horman) [525801]
  -dm: fix oops in mempool_free when device removed (Milan Broz) [456047]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.24]
changelog:
  -net: fix an unexpectedly freed skb in tcp (Amerigo Wang) [577716] {CVE-2010-1188}
  -oprofile: final bits to support oprofile on Nehalem-EP (John Villalovos) [509423]
  -vfs: turn bad_inode_ops into an inode_operations_ext (Jeff Layton) [544381]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.23]
changelog:
  -net: fixup problems with vlan tagging and bonding driver option arp_validate=3 (Jiri Pirko) [555070]
  -virtio_net: fix tx wakeup race condition (Herbert Xu) [574785]
  -qla2xxx: update qla driver version from 8.02.09.01.04.09-d to 8.02.10.00.04.09-d (Rob Evers) [529063]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.22]
changelog:
  -qla2xxx: update qla driver version from 8.02.09.02.04.08-d to 8.02.09.01.04.09-d (Rob Evers) [529063]
  -diskdump: fix diskdump not working with qla2xxx (Rob Evers) [529063]
  -usb: fix information leak via userspace usb interface (Vitaly Mayatskikh) [566627] {CVE-2010-1083}
  -alsa: snd-hda-intel driver: avoid divide by zero (Jaroslav Kysela) [567170] {CVE-2010-1085}
  -dvb: fix endless loop when decoding ILE at dvb-core (Mauro Carvalho Chehab) [569240] {CVE-2010-1086}
  -ia64: ptrace: peek_or_poke requests can miss put_task_struct() (Oleg Nesterov) [567321] {CVE-2010-0729}
  -ia64: ptrace: peek_or_poke requests miss ptrace_check_attach() (Oleg Nesterov) [567321] {CVE-2010-0729}
  -tg3: refrain from touching MPS in tg3 (John Feeney) [554525]
  -sctp: sctp ootb packet deinal of service (Neil Horman) [555663] {CVE-2010-0008}
  -ia32: fix kernel panic when coredump VDSO page for 32bit process (Amerigo Wang) [549231] {CVE-2009-4271}
  -oprofile: Support arch_perfmon in Oprofile (John Villalovos) [553745]
  -oprofile: Fix name collision issue in Oprofile (John Villalovos) [553745]
  -oprofile: Fixes for the perf counter reservation system in Oprofile (John Villalovos) [553745]
  -oprofile: Enable use of the perf counter reservation system into the oprofile driver (John Villalovos) [553745]
  -netfilter: add connlimit match module support (Jiri Pirko) [522000]
  -netfilter: enable CONFIG_IP_NF_MATCH_CONNLIMIT=m (Jiri Pirko) [522000]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.21]
changelog:
  -kernel: fix DOS on x86_64, load_elf_binary() (Danny Feng) [560551] {CVE-2010-0307}
  -scsi: make sure to enable ordered mode on scsi drives with write cache enabled (Josef Bacik) [537475]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.20]
changelog:
  -e1000e: fix broken wake up on LAN functionality due to other e1000e patch (Andy Gospodarek) [558607]
  -signal: fix kernel information leak with print-fatal-signals=1 (Danny Feng) [554582] {CVE-2010-0003}
  -netfilter: ebtables: enforce CAP_NET_ADMIN for modifications to ebtables (Danny Feng) [555241] {CVE-2010-0007}
  -lpfc: lpfc driver doesn t acquire lock when searching hba for target (Rob Evers) [548496]
  -ext3: replace lock/unlock_super() with an explicit lock for resizing (Lachlan McIlroy) [547213]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.19]
changelog:
  -netpoll: fix more local_bh_enable() related badness warnings and infinite loop (Neil Horman) [516076]
  -ptrace: ptrace_detach can leak a zombie (Oleg Nesterov) [539506]
  -strace: strace hangs when the mt tracee does coredump (Oleg Nesterov) [539506]
  -e1000: Fix rx length check errors in e1000 (Neil Horman) [552134] {CVE-2009-4536}
  -r8169: improved rx length check for r8169 (Neil Horman) [550911] {CVE-2009-4537}
  -e1000e: fix rx length check errors in e1000e (Amerigo Wang) [551219] {CVE-2009-4538}
  -isdn: hfc_usb: fix read buffer overflow in collect_rx_frame() (Danny Feng) [539437] {CVE-2009-4005}
  -megaraid_sas: fix dbg_lvl and poll_mode_io file permissions in sysfs (Danny Feng) [537311] {CVE-2009-3889 CVE-2009-3939}
  -hfs: fix a potential buffer overflow (Amerigo Wang) [540739] {CVE-2009-4020}
  -gdth: prevent negative offsets in ioctl (Amerigo Wang) [539419] {CVE-2009-3080}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.18]
changelog:
  -netpoll: fix badness warnings as bottom halves are enabled but interrupts are not (Neil Horman) [516076]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.16]
changelog:
  -r8169: balance pci_map/unmap pair, use hw padding (Ivan Vecera) [529142] {CVE-2009-3613}
  -forcedeth: add phy_power_down parameter, leave phy powered up by default (Ivan Vecera) [532593]
  -fusion: mptctl module dereferences a userspace address, triggering a crash (Rob Evers) [528066]
  -net: ipv4: make ip_append_data handle null routing table (Jiri Pirko) [520299]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.15]
changelog:
  -fs: fix pipe.c null pointer dereference (Jeff Moyer) [530937] {CVE-2009-3547}
  -bnx2x: fix bnx2x failing when iptables is on (Stanislaw Gruszka) [527656]
  -hid-input: fix divide by zero in hid-input.c (Pete Zaitcev) [483783]
  -drm r128: add test for initialisation to all ioctls that require it (Danny Feng) [529601] {CVE-2009-3620}
  -igb: add link check function to verify that link is present (Stefan Assmann) [529037]
  -fix x86_64 32bit process register leak (Amerigo Wang) [526796] {CVE-2009-2910}
  -bnx2: panic in poll_freewait when using jumbo frames with bnx2 driver (Debbie Johnson) [523691]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.14]
changelog:
  -cifs: turn oplock breaks into a workqueue job (Jeff Layton) [516742]
  -cifs: have cifsFileInfo hold an extra inode reference (Jeff Layton) [516742]
  -cifs: take read lock on GlobalSMBSes_lock in is_valid_oplock_break (Jeff Layton) [516742]
  -cifs: remove cifsInodeInfo.oplockPending flag (Jeff Layton) [516742]
  -cifs: replace wrtpending with a real reference count (Jeff Layton) [516742]
  -cifs: protect GlobalOplock_Q with its own spinlock (Jeff Layton) [516742]
  -cifs: remove dnotify thread code (Jeff Layton) [516742]
  -cifs: kill misguided ->dir_notify() (Jeff Layton) [516742]
  -cifs: make dnotify thread experimental code (Jeff Layton) [516742]
  -cifs: fix wait_for_response to time out sleeping processes correctly (Jeff Layton) [516742]
  -cifs: cleanup conditional compilation (Jeff Layton) [516742]
  -net: af_unix: fix deadlock on connecting to shutdown socket (Jiri Pirko) [529629] {CVE-2009-3621}
  -net: netlink: fix typo in tcf_fill_node (Jiri Pirko) [521603] {CVE-2005-4881}
  -cciss: add bus attribute to support device mapper multipath target (Tomas Henzl) [484415]
  -ipt_recent: do not accept a rule if hit count is great than ip_pkt_list_tot (Amerigo Wang) [523983]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.13]
changelog:
  -ibmveth: fix rollover error in ibmveth_replenish_buffer_pool (Kevin Monroe) [515258]
  -net: prevent null pointer dereference in udp_sendmsg (Vitaly Mayatskikh) [518042] {CVE-2009-2698}
  -s390: kernel: missing capability check in z90crypt (Hans-Joachim Picht) [505986] {CVE-2009-1883}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.12]
changelog:
  -net: netlink: fix numerous padding memleaks (Jiri Pirko) [521603] {CVE-2005-4881}
  -pty: namespace for more than 256 devices when legacy pty support is enabled (Mauro Carvalho Chehab) [518126]
  -pty: allow changing legacy pty support at boot time and enable it at kconfig (Mauro Carvalho Chehab) [518126]
  -pty: enable support of legacy ptys, CONFIG_LEGACY_PTYS=y (Mauro Carvalho Chehab) [518126]
  -net: tc: fix unitialized kernel memory leak (Jiri Pirko) [520865] {CVE-2009-3228}
  -igb: allocate correct buffer for ethtool_get_strings and remove false tx stats (Stefan Assmann) [517329]
  -prevent an O_NODELAY writer from blocking when a tty write is blocked (Mauro Carvalho Chehab) [504019]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.11]
changelog:
  -infiniband: mthca: don't try to kmalloc large allocations (Doug Ledford) [510395]
  -virt: fix i386 virtio driver crash (Chris Lalancette) [509220]
  -ppc64: remove errant ulong division for getting/setting altivec registers (Kevin Monroe) [367061]
  -nfsv4: convert unnecessary xdr warning messages into dprintk (Jeff Layton) [445957]
  -qla2xxx: fix hang when using management tools (Marcus Barrow) [503489]
  -xen: change pvfb not to select abs pointer (Andrew Jones) [492868]
  -nlm: don't try to reclaim locks on -o nolock mounts (Jeff Layton) [176848]
  -usb uhci: add suspend_disabled parameter (Flavio Leitner) [476700]
  -xen: pvfb: frontend mouse wheel support (Paolo Bonzini) [496209]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.10]
changelog:
  -net: socket: make sock_sendpage() use kernel_sendpage() (Danny Feng) [516953] {CVE-2009-2692}
  -execve: must clear current->clear_child_tid (Oleg Nesterov) [515428]
  -kernel: fix information leak in do_sigaltstack() (Vitaly Mayatskikh) [515395]
  -cifs: add new options to disable overriding of ownership (Jeff Layton) [491931]
  -build with fno-delete-null-pointer-checks (Danny Feng) [511183]
  -megaraid: fix megaraid SAS tape input/output errors on mt_erase (Tomas Henzl) [504080]
  -nfs: acls on nfs mounted directories disappear (Peter Staubach) [488931]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.9]
changelog:
  -mpt fusion: fix typo in mpt fusion makefile (Tomas Henzl) [496120]
  -fs: nlm_lookup_host should not return invalidated nlm_host (Sachin S. Prabhu) [505591]
  -mptscsi: missing mptscsi raid1 disk causes kernel panic when rebooted before array rebuild (Rob Evers) [507864]
  -implement mmap_min_addr infrastructure (Vitaly Mayatskikh) [512641]
  -kernel: personality handling: fix per_clear_on_setid (Vitaly Mayatskikh) [508843] {CVE-2009-1895}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.8]
changelog:
  -memory barrier: adding smp_mb__after_lock (Jiri Olsa) [494404]
  -net: adding memory barrier to the poll and receive callbacks (Jiri Olsa) [494404]
  -scsi: do not fastfail device errors (Mike Christie) [505122]
  -lpfc: update emulex lpfc driver to 8.0.16.47 with memory leak fix (Rob Evers) [507680]
  -fix soft lockups due to infinite loops in posix_locks_deadlock (Amerigo Wang) [504279]
  -writeback: work around problems with persistent inode->dirtied_when values (Jeff Layton) [477784]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.7]
changelog:
  -icmpv6: no fragment header in icmpv6 reply after packet_too_big message (Amerigo Wang) [510454]
  -block: block initialize request struct (Tomas Henzl) [505506]
  -xen: wait 5 minutes for device connection (Paolo Bonzini) [396631]
  -xen: only recover connected devices on resume (Paolo Bonzini) [396631]
  -xen: fix the way GDT is accessed on non boot cpu in PV guest (Miroslav Rezanina) [493780]
  -ipv6 udp: fix wrong sendmsg return when the hop limit is invalid (Amerigo Wang) [501449]
  -audit: correct the record length of execve (Amerigo Wang) [502473]
  -ppc64: add mutex lock to serialize eeh event processing (AMEET M. PARANJAPE) [504378]
  -xen: fix pv guest crash when host has more than 64g ram (Chris Lalancette) [504988]
  -xen: pvfb probe and suspend fixes (Paolo Bonzini) [496206]
  -net: bonding: allow bond in mode balance alb to work properly in bridge (Jiri Pirko) [503762]
  -xen: pvfb frontend can send bogus screen updates (Paolo Bonzini) [496205]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.6]
changelog:
  -cciss: fix NMI watchdog lockup due to re-acquiring spinlock (Tomas Henzl) [509816]
  -ipv6: fix multicast join error message and misc (Danny Feng) [501229]
  -audit: proc_loginuid_write uses non terminated array (Amerigo Wang) [459499]
  -ipv6 raw: disallow ipproto_ipv6 level ipv6_checksum socket option on icmpv6 sockets (Danny Feng) [501450]
  -ipv6: assume the loopback address in link local scope (Danny Feng) [501447]
  -ipv6: support per interface icmp stats (Danny Feng) [507951]
  -numa: removing amd only gating from numa setup on x86_64 (Neil Horman) [506872]
  -r8169: fix crash when large packets are received (Ivan Vecera) [504730]
  -fix lost siginfo when a signal queue is full (Vitaly Mayatskikh) [479264]
  -copy_user_c can zero more data than needed (Vitaly Mayatskikh) [491284]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.5]
changelog:
  -block: protect the per gendisk partition array with rcu (Jeff Moyer) [495858]
  -fix __ptrace_unlink and zap_threads interaction (Oleg Nesterov) [506875]
  -mm: clear hugeptes properly (James Paradis) [497204]
  -net: rtl8139: allow to set mac address on running device (Jiri Pirko) [504156]
  -net: bonding: fix arp_validate 3 slaves behaviour (Flavio Leitner) [480237]
  -nmi: add intel processor 0x6f4 to nmi perfctr1 workaround (Prarit Bhargava) [499848]
  -Avoid ICE in get_random_int() with gcc-3.4.5 (Amerigo Wang) [501844]
  -kernel: random: make get_random_int more random (Amerigo Wang) [499785]
  -net: ipv6: check length of optval provided by user in setsockopt (Jiri Olsa) [500332]
  -add -rh1 to ata_piix's driver version (Prarit Bhargava) [495930]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.4]
changelog:
  -e1000: fix skb_over_panic (Neil Horman) [502983] {CVE-2009-1385}
  -netpoll: bust poll_lock when doing netdump (Neil Horman) [494688]
  -net: bonding: select current active slave when enslaving device for mode tlb and alb (Jiri Pirko) [500637]
  -net: bonding: ignore updelay param when there is no active slave (Jiri Pirko) [498012]
  -net: ipv6: fix return value when leave multicast group (Jiri Pirko) [500334]
  -net: update setsockopt to support rfc 3493 (Jiri Olsa) [500329]
  -cifs: fix potential buffer overruns when converting strings (Jeff Layton) [496575] {CVE-2009-1633}
  -cifs: fix unicode alignment and buffer sizing problems (Jeff Layton) [494278] {CVE-2009-1439}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.2]
changelog:
  -nfs: fix nfs v4 client handling of may_exec in nfs_permission (Peter Staubach) [500300] {CVE-2009-1630}
  -eliminate deadlock with echo 1 > /proc/sys/vm/drop_caches (Larry Woodman) [495861]
  -xen: fix xen local denial of service (Chris Lalancette) [500949] {CVE-2009-1758}
  -xen: fix __vsyscall_base and CONFIG_XEN (Oleg Nesterov) [461038]
  -disable iostat collection in gendisk (Jerome Marchand) [488544]
  -block: fix request flags (Jerome Marchand) [488544]
  -kernel: proc: avoid information leaks to non privileged processes (Amerigo Wang) [499548]
  -agp: zero pages before sending to userspace (Jiri Olsa) [497024]
  -fix cast in time keeping code (Prarit Bhargava) [491147]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89.1]
changelog:
  -Re-apply: fix race condition in input.c (Vivek Goyal) [501064]
  -nfs: inode of the overwritten file will remain in the icache (Flavio Leitner) [494015]
  -fix timespec off by one errors (Jason Baron) [496201]
  -add some long missing capabilities to cap_fs_mask (Eric Paris) [499074 497270] {CVE-2009-1072}
  -net: tcp: clear probes_out more aggressively in tcp_ack (Jiri Pirko) [494428]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-89]
changelog:
  -fix regression in cxgb3 driver spin_lock usage (Andy Gospodarek) [495557]
  -cxgb3: fixup possible workqueue deadlocks (Andy Gospodarek) [495558]
  -e1000: network driver doesn t reset nic during shutdown and prevents pxe reloads (George Beshers) [465620]
  -cxgb3: fix msix bringup so we don't leak vectors on failed init (Doug Ledford) [495556]
  -e1000e: support for 82583 and new 82574LA (Andy Gospodarek) [452287]
  -igb: support for dual port 82576 (Andy Gospodarek) [452289]
  -dm crypt: memory corruption when invalid mapping parameters provided (Milan Broz) [495673]
  -Revert "fix race condition in input.c (Vivek Goyal) [491940]
  -Revert "more fixes for fix race condition in input.c" (Vivek Goyal) [491940]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-88]
changelog:
  -cpu p-state limits (via acpi_ppc) ignored by os (Stanislaw Gruszka) [490531]
  -add some missing bits to the chelsio cxgb3 driver (Doug Ledford) [454557]
  -net: ipv6: mcast: fix joining all node multicast group on device initialization (Jiri Pirko) [494463]
  -exit_notify: kill the wrong capable check (Oleg Nesterov) [494269]
  -e1000e: reset chip when taking down interface (Andy Gospodarek) [452287]
  -kernel: random32: seeding improvement (Vitaly Mayatskikh) [458022]
  -nfsv4: client crashes when doing a lookup on files with long names (Sachin S. Prabhu) [493939]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-87]
changelog:
  -fix CLONE_PARENT and parent_exec_id interaction (Don Howard) [479962] {CVE-2009-0028}
  -qla2xxx: remove sysfs entry for nvram (Marcus Barrow) [476704]
  -mce: do not clear status registers in fatal conditions (Aristeu Rozanski) [489695]
  -nehalem ex support (John Villalovos) [491338]
  -cciss: export device model and vendor info through sysfs (Tomas Henzl) [490187]
  -cciss: kernel thread to detect config changes on the MSA2012 (Tomas Henzl) [490187]
  -cciss: cleanup redundant code (Tomas Henzl) [490187]
  -cciss: changes in config functions (Tomas Henzl) [490187]
  -x86_64: syscall_audit: fix 32/64 syscall hole (Jerome Marchand) [488000] {CVE-2009-0834}
  -x86_64: backport is_compat_task (Jerome Marchand) [488000] {CVE-2009-0834}


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-86]
changelog:
  -qla2xxx: reduce BUS_BUSY error returns (Marcus Barrow) [490744]
  -scsi: modify scsi layer to retry DID_ERROR (Marcus Barrow) [490744]
  -tg3: add in driver phy support for 5785 (Andy Gospodarek) [452925]
  -e1000: fix false link detection (Michal Schmidt) [489960]
  -qla2xxx: fix flash program: fix read/write version update issues (Marcus Barrow) [491784]
  -qla2xxx: fix loop resets and HBA traversal (Marcus Barrow) [491784]
  -qla2xxx: 8 gb/s firmware update for blade servers 4.06.01 => 4.04.09 (Marcus Barrow) [492156]
  -qla2xxx: 4 gb/s firmware update for blade servers 4.06.01 => 4.04.09 (Marcus Barrow) [492156]
  -bnx2x: initialization and ia64 fixes (Andy Gospodarek) [453305]
  -hfs: fix hfs mount memory leak (Dave Anderson) [479607]
  -fix warn in __writeback_single_inode (Josef Bacik) [458955]
  -ide: increase the timeout in wait_drive_not_busy (Prarit Bhargava) [456078]
  -more fixes for fix race condition in input.c (James Paradis) [491940]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-85]
changelog:
  -md: pass down bio_rw_sync in raid 1,10 (Dave Maley) [467829]
  -fix the tsc clocksource when using the tick divider (Chris Lalancette) [491154]
  -bonding: give full arp monitoring cycle to slaves (Jiri Pirko) [489362]
  -megaraid: fix a bug in reset handler (Tomas Henzl) [481662]
  -dm: check that the log bitmap will fit within the log device (Milan Broz) [490021]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-84]
changelog:
  -cciss: disable dma refetch on p600 (Tomas Henzl) [454643]
  -cciss: remove unused variable (Tomas Henzl) [454643]
  -cciss: read config table to determine max_commands (Tomas Henzl) [454643]
  -cciss: Updated cciss driver to 2.6.20.RH2, update controller names and version (Tomas Henzl) [454643]
  -ext3: ext3_symlink should use gfp_nofs allocations inside (Flavio Leitner) [489768]
  -net: fix dst_entry leak (Neil Horman) [489300]
  -nmi watchdog: generate load on all cpus while testing if the watchdog works (Aristeu Rozanski) [488018]
  -qla4xxx: properly support async pdu messages (Marcus Barrow) [485092]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-83]
changelog:
  -arp: add uresolved_discards counter (Neil Horman) [453173]
  -xen: fix crash when modprobe xen-vnif in a kvm guest (Chris Lalancette) [485421]
  -Re-apply: fix kernel crash in sunrpc::cache_clean (Peter Staubach) [278291]
  -r8169: don t update statistics counters when interface is down (Ivan Vecera) [440467]
  -fix panic when loading pciehp module (Prarit Bhargava) [487385]
  -hid: fix return code in hid_probe (Aristeu Rozanski) [453171]
  -ixgbe: make sure devices can netdump (Andy Gospodarek) [484376]
  -igb: make sure devices can netdump (Andy Gospodarek) [484376]
  -igb: prevent deadlock while executing netdump (Andy Gospodarek) [435886]
  -bnx2: fix driver update that broke netdump (Andy Gospodarek) [484667]
  -bug fix for hdmi audio (Bhavana Nagendra) [459222]
  -usb: workaround for usb hang in sb600/sb700 (Pete Zaitcev) [472789]
  -netpoll: fix up device quota in netpoll prior to calling driver poll method (Neil Horman) [481207]
  -fix leap second hang (Prarit Bhargava) [479764]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-82]
changelog:
  -kernel: fix kernel memory disclosure in getsockopt() with option SO_BSDCOMPAT (Don Howard) [486516] {CVE-2009-0676}
  -e1000: move around config for es2lan (Andy Gospodarek) [473258]
  -dm: fix more random snapshot crashes and corruption (Mikulas Patocka) [484319]
  -dm: random snapshot crashes and corruption (Mikulas Patocka) [484319]
  -mptfusion: remove check for type disk (Tomas Henzl) [465514]
  -scsi: remove wrong lock from scsi layer (Tomas Henzl) [483191]
  -ipv6: fix link local connect hang (Neil Horman) [483619]
  -improve udp port randomization (Vitaly Mayatskikh) [480137]
  -e1000: test for unusable msi (Andy Gospodarek) [482822]
  -md: crash with partially succeeded request (Mikulas Patocka) [472796]
  -nfs: remove bogus lock if signalled case (Bryn M. Reeves) [456285] {CVE-2008-4307}
  -amd k6 doesn't support mce (Prarit Bhargava) [479910]
  -Revert "sunrpc: fix kernel crash in sunrpc cache_clean" (Vivek Goyal) [479728 278291]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-81]
changelog:
  -virtio_net: let virtio_net change the mtu (Chris Lalancette) [483535]
  -fix a buffer overflow vulnerability with del_rbu driver (Don Howard) [482940] {CVE-2009-0322}
  -net: backport of dscp functionality (Thomas Graf) [484398]
  -netxen critical fixes (Tony Camuso) [458863]
  -check futex timespec validity (Jerome Marchand) [472557]
  -cifs: replace missing else in cifs_open_inode_helper (Jeff Layton) [484261]
  -libata: ahci: Withdraw IGN_SERR_INTERNAL for SB800 SATA (David Milburn) [480395]
  -sd: Fix handling of NO_SENSE check condition (Rob Evers) [480666]
  -security: introduce missing kfree (Jiri Pirko) [480596] {CVE-2009-0031}
  -libata: fix removing adding hdd thru proc (David Milburn) [329201]
  -md: fix snapshot data corruption (Mikulas Patocka) [175830]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-80]
changelog:
  -evdev: use kref in order to call evdev_free only after all closes and disconnect (Mauro Carvalho Chehab) [460457]
  -evdev: avoid a race condition between open and disconnect (Mauro Carvalho Chehab) [460457]
  -evdev: simplify close disconnect code (Mauro Carvalho Chehab) [460457]
  -evdev: converts open close mutex into static (Mauro Carvalho Chehab) [460457]
  -evdev: adds memory barriers protect evdev (Mauro Carvalho Chehab) [460457]
  -mptfusion: limit dma addresses to 32bit for devices with 106E B1 chip (Tomas Henzl) [480158]
  -e1000: add parameter to set transmit descriptor size (Andy Gospodarek) [334411]
  -e1000e: add reboot notifier so wol will work (Andy Gospodarek) [432364]
  -net: fix ip tunnel can not be bound to another device (Michal Schmidt) [437410]
  -Revert "qla2xxx: more fix flash for isp25xx and scheduling" (Vivek Goyal) [476704]
  -Revert "identify pm timer calibration issues during boot" (Vivek Goyal) [456935]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-79]
changelog:
  -add new AMD HDMI audio device pci id (Joachim Deguara) [459222]
  -ofed: remove lro bits from ofed 1.4 update (Doug Ledford) [454557 478687]
  -config: ofed 1.4: disable MLX4 ethernet on iSeries (Doug Ledford) [454557 478687]
  -config: ofed 1.4: only build ipath on x86_64 (Doug Ledford) [454557 478687]
  -config: disable ehca driver to ensure ofed 1.4 builds on ppc64 (Doug Ledford) [454557 478687]
  -fix deadlock between mmap munmap and jbd (Josef Bacik) [439548]
  -enable entropy generation from e1000 and bnx2 network cards (Ivan Vecera) [439920]
  -netpoll: disable bottom halvees during napi poll (Neil Horman) [477945]
  -ofed 1.4 update (Doug Ledford) [454557 478687]
  -config: config file changes for ofed 1.4 update (Doug Ledford) [454557 478687]
  -[s390] zfcp: provide support for npiv (Hans-Joachim Picht) [249775]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.30]
changelog:
  -ioctl32: do not call ->handler() under the global lock (Oleg Nesterov) [185585]
  -ioctl32: kill the copy and paste horror in unregister_ioctl32_conversion (Oleg Nesterov) [185585]
  -forcedeth: update to latest upstream version 0.61 (Ivan Vecera) [479408]
  -config: forcedeth: set CONFIG_FORCEDETH_NAPI=y (Ivan Vecera) [479408]
  -ibmphp: fix underflow in ibmphp module refcount (Neil Horman) [467714]
  -proc: try to make it so that holding a procfile open keeps a module reference (Jeff Layton) [448603]
  -[s390] qdio: module ref counting in qdio_free not in proper place (Hans-Joachim Picht) [458076]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.29]
changelog:
  -qla4xxx: correct version number to 5.01.03.00.04.08-d (Marcus Barrow) [479862]
  -fix exit_itimers vs posix_timer_event ab-ba deadlock (Oleg Nesterov) [472864]
  -qla2xxx: firmware update to 4.06.01 for 8GB/s adapters (Marcus Barrow) [454839]
  -qla2xxx: firmware update to version 4.06.01 for 4GB/s adapters (Marcus Barrow) [454839]
  -qla2xxx: update to version 8.02.09.00.04.08-d (Marcus Barrow) [479094]
  -fix perfctr watchdog build warning (Aristeu Rozanski) [460920]
  -qla4xxx: code cleanups and removed dead code (Marcus Barrow) [477280]
  -qla4xxx: fix a driver timeout problem (Marcus Barrow) [477280]
  -qla4xxx: initialization fixes (Marcus Barrow) [477280]
  -qla4xxx: fixed hang during driver unload (Marcus Barrow) [477280]
  -qla4xxx: error recovery fixes (Marcus Barrow) [477280]
  -qla4xxx: dynamic ddb changes (Marcus Barrow) [477280]
  -e1000e: update to upstream version 0.3.3.3-k6 (Andy Gospodarek) [452287]
  -tsc: correct computed offset in mark_offset_tsc_hpet (Brian Maly) [451827]
  -dm snapshot: fix primary_pe race (Mikulas Patocka) [476461]
  -qla2xxx: more fix flash for isp25xx and scheduling (Marcus Barrow) [476704]
  -qla2xxx: correct flash write protect handling (Marcus Barrow) [476704]
  -qla2xxx: fix flash for isp25xx and sst flash (Marcus Barrow) [476704]
  -aio: fix race in aio_complete that leads to a process hang (Jeff Moyer) [456686]
  -autofs4: correct offset mount expire check (Ian Kent) [475715]
  -autofs4: cleanup autofs mount type usage (Ian Kent) [475715]
  -fix rmmod ohci_hcd (Pete Zaitcev) [455843 471560]
  -sctp: fix sctp premature recieve queue backup (Neil Horman) [467273]
  -acpi: fix empty proc acpi dsdt on hp ia64 systems (Prarit Bhargava) [455253]
  -power6: secondary cpu startup delay fix (Brad Peters) [439258]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.28]
changelog:
  -audit: remove bogus newlines in execve and path audit records (Jiri Pirko) [452390]
  -igb: set CONFIG_IGB_LRO=y for igb driver update (Vivek Goyal) [452289 435886]
  -system reboot fails after diskdump/netdump (Takao Indoh) [248666]
  -diskdump: fix diskdump to stop system when diskdump fails (Takao Indoh) [477635]
  -igb: update to upstream version 1.2.45-k2 (Andy Gospodarek) [452289 435886]
  -powernow k8: provide c state override when using tscsync (Brian Maly) [429165]
  -x86_64 race condition at shutdown panic (Ivan Vecera) [457409]
  -nfs4: handle incomplete opens more comprehensively (Jeff Layton) [446396]
  -identify pm timer calibration issues during boot (Prarit Bhargava) [456935]
  -Fix pm timer kernel option in Kconfig file (Prarit Bhargava) [294821]
  -nfsv4: add support for rdattr_error in nfsv4 readdir requests (Jeff Layton) [439431]
  -nfsv4: fix problems with callback thread shutdown (Jeff Layton) [432393]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.27]
changelog:
  -tg3: update to upstream version 3.96 (Andy Gospodarek) [452925]
  -sctp: memory overflow when fwd tsn chunk is received with bad stream id (Eugene Teo) [478960] {CVE-2009-0065}
  -lpfc: update lpfc to version 8.0.16.46 (Rob Evers) [452271]
  -lpfc: fix unlikely data corruption (Rob Evers) [452271]
  -ixgbe: update to upstream version 1.3.18-k4 (Andy Gospodarek) [452292]
  -xen: change xen-platform-pci.o from built in to loadable module for bare metal  (Xen FV)guests (Don Dutile) [474667]
  -net: fix BUG() in LLC receive (Michal Schmidt) [468890]
  -infiniband: include missing infiniband headers (Doug Ledford) [458805]
  -mptfusion: update mpt fusion to version 3.12.29.00rh (Rob Evers) [452163]
  -do_acct_process: fix the unsafe usage of tty (Oleg Nesterov) [469742]
  -avocent and zero period (Pete Zaitcev) [238181]
  -sched: rhel4 scheduler optimizations for financial applications (Larry Woodman) [456911]
  -sunrpc: prevent deadlock by not allowing rpc_malloc to sleep (Jeff Layton) [450743]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.26]
changelog:
  -unix: fix unix socket panic patch missing hunk (Neil Horman) [473268] {CVE-2008-5300}
  -s390: qdio: not more than 1 buffer in input_processing state (Hans-Joachim Picht) [478861]
  -make max_writeback_pages tunable via proc (Larry Woodman) [476997]
  -diskdump: fix diskdump to print warning message properly when block_order is too large (Takao Indoh) [456425]
  -bnx2: update to upstream version 1.7.9 (Andy Gospodarek) [452883]
  -bnx2x: update to upstream version 1.45.23 (Andy Gospodarek) [453305]
  -block: call flush_disk after detecting an online resize (Jeff Moyer) [454872]
  -block: add flush_disk to factor out common buffer cache flushing code (Jeff Moyer) [454872]
  -block: check for device resize when rescanning partitions (Jeff Moyer) [454872]
  -scsi: sd driver calls revalidate_disk wrapper (Jeff Moyer) [454872]
  -block: adjust block device size after an online resize of a disk (Jeff Moyer) [454872]
  -block: support for online resizing of block devices (Jeff Moyer) [454872]
  -xen: fix bug in low memory condition (Chris Lalancette) [249867]
  -pmtimer: properly detect pmtimer on asus a8v motherboard (Brian Maly) [203235]
  -kupdate is not syncing all dirty pages to disk within dirty_expire_centisecs (Larry Woodman) [476997]
  -fix race condition in input.c (James Paradis) [472005]
  -nmi watchdog: move check_nmi_watchdog to later in boot time (Aristeu Rozanski) [458859]
  -acpi: fix error attaching device data (Peter Martuccelli) [461519]
  -backport upstream debug code in page_remove_rmap (Larry Woodman) [479142]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.25]
changelog:
  -ethtool: tx checksum and coalesce fixes (Andy Gospodarek) [430997]
  -i386: fix disable and enable timer_nmi_watchdog (Aristeu Rozanski) [460920]
  -i386: disable nmis when unknown_nmi_panic is set when ioapic method is used (Aristeu Rozanski) [460920]
  -i386: make use of lapic_adjust_nmi_hz (Aristeu Rozanski) [460920]
  -i386: update reserve and release functions (Aristeu Rozanski) [460920]
  -i386: update suspend and resume functions (Aristeu Rozanski) [460920]
  -i386: implement and use nmi_watchdog_active (Aristeu Rozanski) [460920]
  -i386: update nmi_watchdog_tick (Aristeu Rozanski) [460920]
  -i386: add do_nmi_callback function (Aristeu Rozanski) [460920]
  -i386: add wd_enabled variable (Aristeu Rozanski) [460920]
  -i386: include perfctr watchdog on the i386 build (Aristeu Rozanski) [460920]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.24]
changelog:
  -scsi_scan: check return code from scsi_sysfs_add_sdev (Mike Christie) [478798]
  -scsi: handle async iscsi scsi sense events (Mike Christie) [204818]
  -xen: fix pv on hvm save restore (Chris Lalancette) [475849]
  -net: fix inet{,6} device initialization order (Thomas Graf) [456653]
  -prevent 32 bit kernel failure to boot on systems with more than 64GB of RAM (Larry Woodman) [461564]
  -fix sleeping function called from invalid context at include/linux/rwsem.h:43 (Luming Yu) [175189]
  -[s390] qdio: repair timeout handling for qdio_shutdown (Hans-Joachim Picht) [460535]
  -[s390] cio: memory leak when ccw devices are discarded (Hans-Joachim Picht) [460533]
  -[s390] cio: kernel panic in cm_enable processing (Hans-Joachim Picht) [459400]
  -[s390] dasd: prevent oops when hyper pav alias is set online (Hans-Joachim Picht) [460532]
  -[s390] dasd: fix ifcc handling (Hans-Joachim Picht) [456663]
  -[s390] zfcp: scsi devices offline after error injection (Hans-Joachim Picht) [457920]
  -[s390] cio: fix double unregistering of subchannels (Hans-Joachim Picht) [456090]
  -fix oops when appending data on an existing dvd (Mauro Carvalho Chehab) [457028]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.23]
changelog:
  -net: fix double list_del in net_rx_action (Neil Horman) [477202]
  -nfs: fix actimeo=0 not enforced during ftruncate operations, resulting in database crashes (Peter Staubach) [476726]
  -cifs: update cifs for rhel4.8 (Jeff Layton) [462459]
  -proc: fix ->open'less usage due to ->proc_fops flip (Jeff Layton) [462459]
  -iget: introduce a function to register iget failure (Jeff Layton) [462459]
  -input: i8042 remove polling timer (David Milburn) [246233]
  -diskdump does not work with promise supertrak ex (Takao Indoh) [455043]
  -mpt fusion 255 to 256 lun recognition (Rob Evers) [447793]
  -bonding: add checks to handle jiffy wrapping (Andy Gospodarek) [465624]
  -intel ibex peak pch support (John Villalovos) [451852]
  -mousedev: add option to ignore tablets (Aristeu Rozanski) [438011]
  -infiniband: fix duplicate sdp entries in proc net (Doug Ledford) [465360]
  -mm: tunable swap_token_timeout (Michal Schmidt) [439043]
  -ipv6: router soliciation support (Thomas Graf) [174376]
  -net: ip_conntrack_tcp: fix multiple problems with tcp window tracking (Thomas Graf) [471946]
  -s390: dasd: dasd_device_from_cdev called from interrupt (Hans-Joachim Picht) [476235]
  -s390: cio: ccwgroup online vs ungroup race condition (Hans-Joachim Picht) [476252]
  -kernel: enforce a minimum sg_io timeout (Eugene Teo) [475404]
  -i5000_edac: display thermal messages only once (Aristeu Rozanski) [461792]
  -i5000_edac: report everything using edac core (Aristeu Rozanski) [461792]
  -perfctr watchdog: don't use cccr_ovf_pmi1 on pentium 4D (Aristeu Rozanski) [459644]
  -diskdump against disk connected to 2nd cciss card fails (Tomas Henzl) [457775]
  -bridge: fix deadlock in br_stp_disable_bridge (Thomas Graf) [191777]
  -ebtables: don t match tcp udp source destination port for ip fragments (Thomas Graf) [191764]
  -icmp: fix extra dst release when ip_options_echo fails (Thomas Graf) [191797]
  -ip_queue: fix wrong skb len nlmsg_len assumption (Thomas Graf) [191770]
  -net: ensure device name passed to so_bindtodevice is null terminated (Thomas Graf) [191767]
  -udp: fix warning in udp_poll with fragments (Thomas Graf) [459185]
  -ia64: fix deadlock in ia64 sys_ptrace (Jerome Marchand) [442816]
  -usb: fix oops on disconnect of usb serial (Pete Zaitcev) [243067]
  -proc: proc filesystem in rhel4 doesn t follow usual unix filesystem conventions (Jiri Pirko) [445795]
  -[x86_64] ptrace: sign extend orig_rax to 64 bits (Jerome Marchand) [437881]
  -jbd: fix typo in recovery code (Josef Bacik) [447741]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.22]
changelog:
  -kernel: watchdog: fix buffer_underflow bug (Eugene Teo) [475739]
  -fs: fix "it already cleared for block"  errors (Josef Bacik) [460179]
  -e1000: remove e1000_clean_tx_irq call from e1000_netpoll (Andy Gospodarek) [443034]
  -e1000: restart receive unit on esb2 hardware (Andy Gospodarek) [453129]
  -netpoll: fix race condition between net_rx_action and poll_napi that can result in garbage device (Neil Horman) [474479]
  -net: fix unix socket panic patch regression (Neil Horman) [470434 473268] {CVE-2008-5029 CVE-2008-5300}
  -xen: virtio drivers: virtio config file changes (Chris Lalancette) [446215]
  -xen: virtio drivers: add virtio net (Chris Lalancette) [446215]
  -xen: virtio drivers: add virtio block (Chris Lalancette) [446215]
  -xen: virtio drivers: add virtio core (Chris Lalancette) [446215]
  -lockd: return nlm_lck_denied_grace_period after long periods (Peter Staubach) [461085]
  -ehea: device driver update from version 0078-04 to 0078-08 (AMEET M. PARANJAPE) [454838]
  -diskdump: support sata_svw driver (Takao Indoh) [435705]
  -wacom: send sync event after pad events (Aristeu Rozanski) [474055]
  -xen: guest will crash if rtl8139 nic is only one specified (Don Dutile) [472572]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.21]
changelog:
  -support digi pci-e gen1 4-8 port async io adapter on i/p6 servers (AMEET M. PARANJAPE) [454826]
  -pidhashing: fix alloc_pidmap (Jiri Pirko) [461246]
  -net: fix panic in tcp_retransmit_skb (Neil Horman) [437674]
  -nlm: tear down rpc clients in nlm_shutdown_hosts (Jeff Layton) [253754]
  -nlm: don t reattempt grant_msg when there is already an rpc in flight (Jeff Layton) [253754]
  -nlm: don t requeue block if it was invalidated while grant_msg was in flight (Jeff Layton) [253754]
  -nlm: make nlmsvc_create_block use nlmsvc_lookup_host (Jeff Layton) [253754]
  -[s390] fcp: backport fcp point to point connection support (Hans-Joachim Picht) [448777]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.20]
changelog:
  -xen: fix deadlock between mm_pin and scheduling (Chris Lalancette) [450953]
  -xen: unitialized xen watch structure can crash a guest on startup (Don Dutile) [472568]
  -usb: work around iso transfers in sb700 (Pete Zaitcev) [456978]
  -igb: fix wake up on lan with igb driver (Flavio Leitner) [456438]
  -sunrpc: fix kernel crash in sunrpc cache_clean (Peter Staubach) [278291]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.19]
changelog:
  -cpuspeed: fix transition of p-states (Tony Camuso) [440267]
  -neigh: fix timer leak in neigh_changeaddr (Thomas Graf) [434958]
  -v4l: avoid writing outside shadow bytes array (Mauro Carvalho Chehab) [471843]
  -net: fix unix socket panic (Neil Horman) [470434] {CVE-2008-5029}
  -hfsplus: fix buffer overflow with a corrupted image (Anton Arapov) [469636] {CVE-2008-4933}
  -hfsplus: check read_mapping_page return value (Anton Arapov) [469643] {CVE-2008-4934}
  -hfs: fix namelength memory corruption (Anton Arapov) [470771] {CVE-2008-5025}
  -fix add range_is_allowed check regression (Vitaly Mayatskikh) [460859]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.18]
changelog:
  -netpoll: play nicely with bonding (Andy Gospodarek) [248374]
  -net: fix race between poll_napi and net_rx_action (Andy Gospodarek) [463815]
  -netxen: netxen 3031 msi-x support (Tony Camuso) [458863]
  -netxen: netxen 3031 fw bugfixes enhancements (Tony Camuso) [458863]
  -netxen: netxen 3031 initial support (Tony Camuso) [458863]
  -netxen: netxen 2031 improve multiport nic handling (Tony Camuso) [458863]
  -netxen: netxen 2031 improve tx locking, interrupt handling, ethtool support (Tony Camuso) [458863]
  -atkbd: cancel delayed work before freeing its structure (Jiri Pirko) [461240]
  -kernel: fix copy_user on x86_64 for read of < 8 bytes (Larry Woodman) [453053]
  -fix diskdump failure when numa is on (Takao Indoh) [457736]
  -kernel: fix rtc deadlock (Prarit Bhargava) [463988]
  -enforce sg requires tx csum in ethtool (Neil Horman) [458898]
  -ipv6: use timer pending to fix bridge reference count problem (Jiri Pirko) [457009]
  -gart iommu alignment fixes (Prarit Bhargava) [298811]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.17]
changelog:
  -ipv4: fix byte value boundary check in ip_getsockopt (Jiri Pirko) [462741]
  -ext[234]: avoid printk floods in the face of directory corruption (Eric Sandeen) [459599] {CVE-2008-3528}
  -[s390] dasd: fix loop in request expiration handling (Hans-Joachim Picht) [466127]
  -libata: sata_nv disable adma by default (David Milburn) [441707]
  -aacraid: remove quirk aac_quirk_scsi_32 for some controllers (Tomas Henzl) [457552]
  -mptfusion: mpt causes panic if a raid 1 is configured (Tomas Henzl) [469236]
  -cpufreq: support for affected_cpus (Brian Maly) [465366]
  -atkbd: delay executing of led switching request (Jiri Pirko) [461240]
  -kernel: open call allows setgid bit when user is not in new file's group (Eugene Teo) [463686] {CVE-2008-4210}
  -cifs: fix o_append on directio mounts (Jeff Layton) [461005]
  -pwc: fix kernel pwc driver dos (Eugene Teo) [308511] {CVE-2007-5093}
  -[s390] prevent ptrace padding area read write in 31 bit mode (Jarod Wilson) [438148] {CVE-2008-1514}
  -ixgbe: remove device id for unsupported device (Andy Gospodarek) [456533]
  -[s390] fix race and overflow in stop_hz_timer and sched_clock (Hans-Joachim Picht) [446212]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.16]
changelog:
  -xen: document the tick divider (Chris Lalancette) [454793]
  -xen: add spurious fault handling to rhel4 xen (Chris Lalancette) [465914]
  -nfs: missing nfs_fattr_init in nfs3_proc_getacl and nfs3_proc_setacls (Jeff Layton) [455917]
  -nfs4: clean up local vfs lock regardless of rpc call status (Jeff Layton) [436092]
  -[s390] qdio: speed up multicast traffic on full hipersocket (Hans-Joachim Picht) [463739]
  -[s390] lcs: output request completion with zero cpa value (Hans-Joachim Picht) [463741]
  -fix futex_requeue locking (Jerome Marchand) [461662]
  -megaraid_sas: update megaraid_sas to version 4.01-rh1 (Tomas Henzl) [455297]
  -netdump: avoid infinite recursion in netdump during interrupt handing (Neil Horman) [428932]
  -fix linux kernel local filesystem dos (Eugene Teo) [457864] {CVE-2008-3275}
  -kernel: system panicked at kernel BUG at kernel/signal.c (Anton Arapov) [435987]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.15]
changelog:
  -xen: i386 fv guest crashes when attaching xvd on 64 bit dom0 (Don Dutile) [463897]
  -scsi: harden against possible data corrupter (Doug Ledford) [183651]
  -scsi: avoid an unnecessary error message (Doug Ledford) [169129]
  -autofs4: remove unused ioctls (Ian Kent) [460083]
  -autofs4: reorganize expire pending wait function calls (Ian Kent) [460083]
  -autofs4: fix direct mount pending expire race (Ian Kent) [460083]
  -autofs4: fix indirect mount pending expire race (Ian Kent) [460083]
  -autofs4: fix pending checks (Ian Kent) [460083]
  -autofs4: cleanup redundant readdir code (Ian Kent) [460083]
  -autofs4: indirect dentry must almost always be positive (Ian Kent) [460083 447420 437288 441794]
  -autofs4: fix waitq memory leak (Ian Kent) [460083]
  -autofs4: check kernel communication pipe is valid for write (Ian Kent) [460083]
  -autofs4: fix waitq locking (Ian Kent) [460083]
  -autofs4: fix pending mount race (Ian Kent) [460083]
  -autofs4: use struct qstr in waitq.c (Ian Kent) [460083]
  -autofs4: use lookup intent flags to trigger mounts (Ian Kent) [460083]
  -autofs4: don t release directory mutex if called in oz_mode (Ian Kent) [460083]
  -autofs4: use rehash list for lookups (Ian Kent) [460083]
  -autofs4: don t make expiring dentry negative (Ian Kent) [460083]
  -autofs4: fix mntput, dput order bug (Ian Kent) [460083]
  -autofs4: fix incorrect return from root.c:try_to_fill_dentry() (Ian Kent) [460083]
  -autofs4: fix sparse warning in waitq c:autofs4_expire_indirect (Ian Kent) [460083]
  -autofs4: check for invalid dentry in getpath (Ian Kent) [460083]
  -xen: fix lost packets when live migrating (Don Dutile) [460874]
  -xen: xen vnif stops working on reception of duplicate backend state change signals (Don Dutile) [464676]
  -xen: remove /proc/xen from fv and bare metal kernels (Don Dutile) [460984]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.14]
changelog:
  -mptfusion: fix outputting large amount of log message when issuing host reset (Tomas Henzl) [455451]
  -netdump: fix up several netdump issues (Neil Horman) [461014]
  -fix compile warnings (Doug Ledford) [465487]
  -do not use vma until we know it is valid (Doug Ledford) [161594]
  -check if kmalloc gave us a buffer or returned NULL (Doug Ledford) [161590]
  -xen: fix netfront mem leak (Don Dutile) [452369 450868]
  -xen: fix blkfront to accept 16 devices (Chris Lalancette) [455756]
  -xen: expand scsi majors (Chris Lalancette) [455756]
  -[s390] tape: fix race condition in tape block device driver (Hans-Joachim Picht) [451268]
  -[s390]: fix race with stack local wait_queue_head_t (Hans-Joachim Picht) [451284]
  -[s390] cio: fix system hang with reserved dasd (Hans-Joachim Picht) [451270]
  -[s390] qeth: crash during activation of OSA-cards (Hans-Joachim Picht) [420001]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.13]
changelog:
  -net: support for realtek 8111cp and 8111bp in conjunction with intel tylersburg chipset (Ivan Vecera) [451966 457310]
  -net: config file changes for realtek 8111cp and 8111bp support (Ivan Vecera) [451966 457310]
  -iptables: fix oops on module unload (Neil Horman) [456664]
  -ext3: fix ext3 block accounting (Josef Bacik) [450900]
  -scsi: aic7xxx: fix timer handling bug (David Milburn) [441751]
  -[s390] qdio: Refresh buffer states for IQDIO Asynchronous output queue (Hans-Joachim Picht) [381041]
  -[s390] qdio/qeth: Re-apply make sure sent skbs are freed in time (Hans-Joachim Picht) [381041]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.12]
changelog:
  -usbfs: backport usbfs_mutex (Pete Zaitcev) [458433]
  -sched: fix isolcpus vs balance bug (Peter Zijlstra) [461156]
  -add range_is_allowed check to mmap_mem (Eugene Teo) [460859]
  -pppoe: check packet length on all receive paths (Jiri Pirko) [457015]
  -allocate usb and scsi hba structs together (Pete Zaitcev) [441552]
  -knfsd: ignore mode changes on symlinks (Jeff Layton) [437921]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.11]
changelog:
  -nfsv4: handle the nfs4err_clid_inuse error in setclientid (Jeff Layton) [432881]
  -pppoe: fix skb_unshare_check call position (Jiri Pirko) [459063]
  -pppoe: unshare skb before anything else (Jiri Pirko) [457020]
  -fix kernel snd_seq_oss_synth_make_info leak (Eugene Teo) [457999] {CVE-2008-3272}
  -scsi: fix oops when removing devices from sym driver (Mike Christie) [441545]
  -Fix do_wait() vs exec() race (Vitaly Mayatskikh) [452706]
  -i2c piix4: increase initial delay for serverworks csb5 (David Milburn) [182687]
  -[s390] qeth: avoid inconsistent lock state for inet6_dev lock (Hans-Joachim Picht) [445528]
  -[s390] qdio: unrecognized inbound traffic if many fcp devices are online (Hans-Joachim Picht) [445532]
  -[s390] qeth: eddp skb buff problem running eddp guestlan (Hans-Joachim Picht) [445669]
  -[s390] qdio: change in timeout handling during qdio establish (Hans-Joachim Picht) [440224]
  -[s390] qeth: recovery problems with failing startlan (Hans-Joachim Picht) [439161]
  -[s390] lcs: ccl seq numbers required for prot 802.2 only (Hans-Joachim Picht) [438176]
  -[s390] qeth: ccl seq numbers required for protocol 802.2 only (Hans-Joachim Picht) [438020]
  -knfsd: revoke both setuid and setgid when uid or gid changes (Jeff Layton) [443044]
  -x86_64: do not call do_exit with interrupts disabled after iret exception (Vivek Goyal) [430282]
  -nfs: clean up short packet handling for nfsv4 readdir (Jeff Layton) [443655]
  -nfs: clean up short packet handling for nfsv3 readdir (Jeff Layton) [443655]
  -nfs: clean up short packet handling for nfsv2 readdir (Jeff Layton) [443655]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.10]
changelog:
  -iscsi_sfnet: fix data corruption when target has to resend packets (Mike Christie) [458469]
  -nfs: fix pages of a memory mapped nfs file get corrupted (Peter Staubach) [432974]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.9]
changelog:
  -dio: zero struct dio with kzalloc instead of manually (Eugene Teo) [461090] {CVE-2007-6716}
  -fix buffer head being marked uptodate despite error (Jiri Pirko) [453359]
  -nfs: writes should not clobber utimes calls (Flavio Leitner) [452257]
  -align per cpu section to configured cache bytes for i386, x86_64 and ppc64 (Michal Schmidt) [439921]
  -fix via rhine loosing link (Ivan Vecera) [437555]
  -[ia64] pcibios_fixup_device_resources should be __devinit (Prarit Bhargava) [447391]
  -[net] ehea: Update logging of checksum errors in ehea (Brad Peters) [431880]
  -xen: fix deadlock in 8250 driver when passing more than 512 bytes (Prarit Bhargava) [445054]
  -fix potential race in mark_buffer_dirty (Mikulas Patocka) [442579]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.8]
changelog:
  -fix regression in /proc/self/mem (Anton Arapov) [460106]
  -i386: execute stack overflow warning on interrupt stack (Michal Schmidt) [459009]
  -kernel: fix array out of bounds when mounting with selinux options (Eugene Teo) [456051]
  -acpi: fix compile with config_acpi_debug=y (Prarit Bhargava) [454050]
  -Fix documentation for pci_alloc_consistent to reflect correct alignment gurantees (Prarit Bhargava) [454417]
  -dm-raid: reduce io delay in dm-raid1 (Mikulas Patocka) [451088]
  -k8_edac: fix typo in user visible message (Aristeu Rozanski) [433341]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.7]
changelog:
  -alsa: fix boundary variable calc for 32 bit user space running on 64 bit kernels (Jaroslav Kysela) [459824]
  -alsa: hda driver update from upstream 2008-07-22 (Jaroslav Kysela) [452846]
  -alsa: hda driver update from mainstream 2008-06-11 (Jaroslav Kysela) [452846]
  -alsa: config file changes for hda driver update (Jaroslav Kysela) [452846]
  -[ppc64] Fixes cpu x stuck problem, seen on power LPAR (Brad Peters) [367661]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.5]
changelog:
  -fix stack overflow at ia32 as4 (Anton Arapov) [448914]
  -[s390] zfcp: remove scsi devices when removing complete adapter (Hans-Joachim Picht) [383311]
  -[s390] qeth: recognize/handle rc 19 from hydra 3 OSA (Hans-Joachim Picht) [382851]
  -[s390] dasd: setting a dasd online fails if the initial probe failed (Hans-Joachim Picht) [419981]
  -[s390] zfcp: imbalance in erp_ready_sem usage (Hans-Joachim Picht) [409431]
  -[s390] zfcp: zfcp_erp_action_dismiss used to ignore any actions in the ready list (Hans-Joachim Picht) [409411]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.4]
changelog:
  -x86_64: initialize vendor info in boot_cpu_data (Michal Schmidt) [453470]
  -fix cpuspeed not working on intel based servers (Tony Camuso) [440267]
  -nfs: ensure that noac and or actimeo=0 turn off attribute caching (Peter Staubach) [446083]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.3]
changelog:
  -sunrpc: prevent memory corruption from successful portmap call with dead parent task (Jeff Layton) [448076]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-78.1]
changelog:
  -alsa: use proper mask for shared IRQ in hda_intel (Brian Maly) [456155]
  -kernel: randomize udp port allocation (Eugene Teo) [454570]
  -dio: lock refcount operations (Jeff Moyer) [451819]
  -Revert "sys_times: Fix system unresponsiveness during many concurrent invocation of sys_times" (Vivek Goyal) [453507]
  -Revert "Minor code cleanup to sys_times() call" (Vivek Goyal) [453507]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-77]
changelog:
  -alsa: Add missing quirks for alc262 (Brian Maly) [453783]
  -Revert "i8042: remove polling timer support - Original bz 246233" (Vivek Goyal) [450918]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-76]
changelog:
  -tty: fix tty holes (Vivek Goyal) [453155] {CVE-2008-2812}
  -xen: fix use of pvdisk or blkfront or xen-vbd for boot device (Don Dutile) [452210]
  -ppc64: fix restore of vmx registers in signal return (Brad Peters) [403471]
  -pci: correct pci bus assignments (Pete Zaitcev) [181648]
  -Fix diskdump failure on new mpt fusion driver (Chip Coldwell) [268921]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-75]
changelog:
  -mptfusion: Fix regression where commands timeout when issuing host reset to mpt fusion hba (Chip Coldwell) [452265]
  -copy_user_generic_c does not zero bytes left at destination after GPF (Vitaly Mayatskikh) [451274] {CVE-2008-2729}
  -sctp: make sure length argument passed does not overflow (Neil Horman) [452480] {CVE-2008-2826}
  -[infiniband] ehca: fixes lost interrupts problem over ib ehca after lpar to lpar communication (Brad Peters) [450689]
  -cifs: don t allow demultiplex thread to exit until kthread_stop is called (Jeff Layton) [442789]
  -Fix copy_from_user vulnerability (Vitaly Mayatskikh) [433943] {CVE-2008-0598}
  -Revert "Enable fb_radeon driver on ppc64" (Vivek Goyal) [350931]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-74]
changelog:
  -[xen] pv on hvm: Fix can't open /dev/xvda while probing disks during installation issue (Don Dutile) [447315]
  -bnx2x: correct chip reset (Andy Gospodarek) [328001]
  -Fix race in switch_uid (Vince Worthington) [441282]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-73]
changelog:
  -Add more PCI IDs to support hdmi audio on amd chipsets (Bhavana Nagendra) [428964]
  -powernow k8: Repost to fix unnecessary error messages with synchronized p state transitions (Ed Pollard) [276771]
  -[usb] ohci-hcd: Fix kernel failed to boot and dropped to xmon on ppc64 (Vitaly Mayatskikh) [443052]
  -bonding: Fix interface flags issue (Andy Gospodarek) [442124]
  -qla4xxx: fix time outs, syncronization and re-logins (Marcus Barrow) [437898]
  -qla2xxx: update version to 8.02.09-d0-rhel4.7-04 (Marcus Barrow) [450645]
  -qla2xxx: correct srb usage after completion free issues resulting in slab corruption (Marcus Barrow) [450645]
  -qla2xxx: add 4 and 8 gb to port speed reporting (Marcus Barrow) [450645]
  -qla2xxx: add isp85xx in some ioctl paths for nvram and flash handling (Marcus Barrow) [450645]
  -qla2xxx: fix debug messages (Marcus Barrow) [450645]
  -qla2xxx: allocated firmware dump space for isp85xx (Marcus Barrow) [450645]
  -qla2xxx: correct isp84xx verify chip response handling (Marcus Barrow) [450645]
  -qla2xxx: add isp84xx to list of optionrom layout ids (Marcus Barrow) [450645]
  -qla2xxx: correct isp84xx logic operations in qla2x00_fw_ready (Marcus Barrow) [450645]
  -qla2xxx: correct isp84xx structure size mismatch with api (Marcus Barrow) [450645]
  -qla2xxx: correct isp84xx ioctl handling (Marcus Barrow) [450645]
  -Enable fb_radeon driver on ppc64 (Brad Peters) [350931]
  -ehca: fix for event queue overflow on ib ehca adapters (Brad Peters) [446714]
  -Fix deadlock possibility in arch_get_unmapped_area_topdown() (Vitaly Mayatskikh) [450094]
  -megaraid: Add support ibm blackrock controller (Chip Coldwell) [449718]
  -sit: Fix exploitable remote memory leak (Jiri Pirko) [446036] {CVE-2008-2136}
  -ehca: fix race possibility between qp async handler and destroy_qp (Brad Peters) [446110]
  -Fix hang when using  /proc/sys/vm/drop_caches under heavy load on large system (Larry Woodman) [449381]
  -Fix possible buffer overflow in asn.1 parsing routines (Anton Arapov) [444463] {CVE-2008-1673}
  -[s390] Fix vmrm cmm use triggering oom killer (Hans-Joachim Picht) [446257]
  -[s390] fix iucv limit and cmm proc permissions (Hans-Joachim Picht) [446257]
  -Extend mce banks support to more than 6 for dunnington and nehalem (Geoff Gustafson) [446675]
  -ppc64: Fix slb shadow buffer support (Brad Peters) [440138]
  -Add hp DL385 G2 and DL585 G2 to whitelist for bfsort (Tony Camuso) [251032]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-72]
changelog:
  -Minor code cleanup to sys_times() call (Vitaly Mayatskikh) [448934]
  -qla2xxx: Update firmware for 4,8 gb/s adapters to version 8.02.09-d0-rhel4.7-03 (Marcus Barrow) [448641]
  -xen: minimize loss of network connectivity after guest migration (Don Dutile) [444473]
  -dm-raid: Fix bad performance of dm-raid (Mikulas Patocka) [432566]
  -Re-apply: Add HP DL580 G5 to bfsort whitelist (Tony Camuso) [429727]
  -Revert "[MOXA] buffer overflow in moxa  driver" (Vivek Goyal) [423141]
  -Revert "neofb: avoid overwriting fb_info fields" (Vivek Goyal) [430252]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-71]
changelog:
  -cciss: disable scsi_ioctl_send_command in cciss driver (Doug Chapman) [443053]
  -bnx2: fix panic when changing device settings while running netconsole (Andy Gospodarek) [444041]
  -Infiniband: Fix ipoib oops (Doug Ledford) [445736]
  -Fix system lockup in eventpoll (Josef Bacik) [446409]
  -ptrace: fix ptrace_attach and ptrace_detach race (Jérôme Marchand) [311931]
  -diskdump: Fix diskdump regression in rhel 4.6 (Chip Coldwell) [268921]
  -[s390] ptrace: restore single_step behavior after do_signal (Jerome Marchand) [426647]
  -[NET] change skb_reserve to have signed length (Neil Horman) [445774]
  -x86_64: ia32 syscall restart fix (Jerome Marchand) [435000]
  -ehca: fix ehca driver for use with dapl (Doug Ledford) [443072]
  -ibmebus: Cleanup all devices upon module rmmod (Brad Peters) [441739]
  -sys_times: Fix system unresponsiveness during many concurrent invocation of sys_times (Vitaly Mayatskikh) [435280]
  -ehea: support ipv4 checksum capability only (Brad Peters) [439445]
  -xen: Fix blkfront deadlock on pv restore (Don Dutile) [429103]
  -Re-apply: Fix usb stress test issue on amd sbx00 systems (Bhavana Nagendra) [435787]
  -libata: ahci kill spurious ncq completion detection (David Milburn) [432396]
  -libata: implement ATA_PFLAG_RESETTING (David Milburn) [432396]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-70]
changelog:
  -proc pid limits: fix duplicate file names (Neil Horman) [443825]
  -md: make md pack rdev list (Doug Ledford) [194585]
  -Add needed locking to fcheck() in both dnotify.c and locks.c (Alexander Viro) [443438 439757] {CVE-2008-1669 CVE-2008-1375}
  -bonding: fix link monitor capability check (Andy Gospodarek) [441897]
  -Kernel doesn not clear DF for signal handlers (Vitaly Mayatskikh) [437315] {CVE-2008-1367}
  -Fix pv on hvm crash due to vnif increase patch (Don Dutile) [442538]
  -pv on hvm: memory corruption due to vnif increase (Don Dutile) [442298]
  -oprofile fix for penryn based procs (Geoff Gustafson) [439540]
  -sound: Fix sound driver update compilation error (Vivek Goyal) [319701 228440 228443 216447 248060 240912]
  -sound: Enable CONFIG_SND_INTEL_HDA=m driver (Vivek Goyal) [319701 228440 228443 216447 248060 240912]
  -Add HDMI audio support for AMD ATI chipsets (Bhavana Nagendra) [428964]
  -Dual core chips reported as quad core in cpuinfo (Geoff Gustafson) [326781]
  -alsa: Unmute DACs on AMD shiner (ad1884) (Brian Maly) [351911 314391]
  -[SOUND] azx sound driver update (Brian Maly) [319701 228440 228443 216447 248060 240912 234358]
  -Revert "s390: qeth: tcpdump does not work with osa Layer2 and VLAN enabled" (Vivek Goyal) [379031]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.34]
changelog:
  -Fix memory leak of struct percpu_data in free_percpu (Larry Woodman) [441321]
  -Do not limit shmem locked memory when rlimit_memlock is rlim_infinity (Larry Woodman) [439926]
  -sata: fix work around sb600 sata hw errata (Bhavana Nagendra) [300861]
  -diskdump: Fix flush_cpu_workqueue so that diskdump can work after momentary link down of lpfc (Takao Indoh) [216618]
  -Revert "Fix usb stress test issue on amd sbx00 systems" (Vivek Goyal) [435787]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.33]
changelog:
  -enhanced partition statistics: fix update partition statitics (Jerome Marchand) [233579]
  -enhanced partition statistics: fix core statistics (Jerome Marchand) [233579]
  -qla2xxx: isp84xx variant ioctl support (Marcus Barrow) [441445]
  -qla2xxx: isp84xx variant support (Marcus Barrow) [441445]
  -pci: fix quirk for ht1000 bridge chips (Andy Gospodarek) [439109]
  -rpc: do not block on skb allocation (Jeff Layton) [439436]
  -nmi: kill disable_irq calls (Aristeu Rozanski) [172749]
  -nmi: disable lapic and io apic nmis on  unknown_nmi_panic (Aristeu Rozanski) [172749]
  -nmi: use perfctr functions for probing (Aristeu Rozanski) [172749]
  -nmi: update check_nmi_watchdog (Aristeu Rozanski) [172749]
  -nmi: update reserve_lapic_nmi (Aristeu Rozanski) [172749]
  -nmi: use setup_apic_nmi_watchdog and  stop_apic_nmi_watchdog in suspend resume (Aristeu Rozanski) [172749]
  -nmi: change nmi_active usage (Aristeu Rozanski) [172749]
  -nmi: update nmi_watchdog_tick (Aristeu Rozanski) [172749]
  -nmi: modify setup_acpi_nmi_watchdog to handle both  io apic and lapic (Aristeu Rozanski) [172749]
  -nmi: introduce do_nmi_callback (Aristeu Rozanski) [172749]
  -nmi: introduce per cpu wd_enabled (Aristeu Rozanski) [172749]
  -nmi: add perfctr infrastructure (Aristeu Rozanski) [172749]
  -[SCSI] aic79xx: fix timer handling (David Milburn) [243936]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.32]
changelog:
  -xen: Fix gettimeofday is not monotonically increasing on xenU (Don Dutile) [438975]
  -xen: config file additions for xen pv-on-hvm drivers (Don Dutile) [437423]
  -xen: pv-on-hvm driver subsystem for non xen kernels (Don Dutile) [437423]
  -xen: modifications to drivers/xen/ files for pv on hvm use (Don Dutile) [437423]
  -xen: pv on hvm kconfig and makefile changes (Don Dutile) [437423]
  -xen: pv.h file modifications for compilation on xen and non xen kernels (Don Dutile) [437423]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.31]
changelog:
  -qla4xxx: race condition fixes with constant qla3xxx ifup/ifdown (Marcus Barrow) [430313]
  -qla4xxx: Fix targets not seen on first port (Marcus Barrow) [425721]
  -Fix compilation warnings coming from module.h (Vivek Goyal) [280431]
  -qla4xxx: Handle multiple ports per target (Marcus Barrow) [412671]
  -qla4xxx: Update driver version string to 5.01.02-d1 (Marcus Barrow) [317631]
  -qla4xxx: Throttle on queue full errors (version 5.01.02-d1) (Marcus Barrow) [317631]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.30]
changelog:
  -Fix __call_usermodehelper wait_for_helper race condition (Dave Anderson) [438800]
  -nfs: 32 bit nfs server returns eio for readdirplus request when backing file system has 32bit inodes (Peter Staubach) [438723]
  -Ensure IV is in linear part of the skb to avoid BUG due to OOB access (Thomas Graf) [427246]
  -Enhanced partition statistics: documentation (Jerome Marchand) [233579 310521]
  -Enhanced partition statistics: Fill old partition statistics with right data (Jerome Marchand) [233579 310521]
  -Enhanced partition statistics: procfs changes (Jerome Marchand) [233579 310521]
  -Enhanced partition statistics: sysfs changes (Jerome Marchand) [233579 310521]
  -Enhanced partition statistics: update partition statitics (Jerome Marchand) [233579 310521]
  -Enhanced partition statistics: core statistics (Jerome Marchand) [233579 310521]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.29]
changelog:
  -Revert "Add HP DL580 G5 to bfsort whitelist" (Vivek Goyal) [429727]
  -fix unprivileged crash on x86_64  cs corruption (Jarod Wilson) [439786]
  -ixgbe: Build module ixgbe CONFIG_IXGBE=m (Andy Gospodarek) [305051]
  -x86_64: add /dev/msr[0-n] device files (Jason Baron) [249514]
  -i386: Fix extended cpu model field being ignored (Geoff Gustafson) [439539]
  -x86_64: Fix hpet bug where system hangs during reboot cycle (Geoff Gustafson) [434854]
  -i386: Allow apicid to be 8 bit (Geoff Gustafson) [437821]
  -ixgbe: initial support code (Andy Gospodarek) [305051]
  -nfs: fix setgid handling in notify_change (Jeff Layton) [439253]
  -e1000: upstream update and alternate mac address support (Andy Gospodarek) [298901]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.28]
changelog:
  -powernow k8: fix UP kernel to register freq driver (David Milburn) [429519]
  -spec: fix summary description of largesmp kernel package (Vivek Goyal) [186606]
  -qla2xxx: Avoid delay for loop ready when loop dead (Marcus Barrow) [426411]
  -qla2xxx: Build qla25xx as module CONFIG_SCSI_QLA25XX=m (Marcus Barrow) [253287]
  -qla2xxx: Clean up firmware dumping mechanism for ISP25xx adapter (Marcus Barrow) [253287]
  -qla2xxx: Support ISP25xx adapters for 8GB/s (Marcus Barrow) [253287]
  -qla2xxx: Firmware support for new 8 GB/s adapter QLE25xx (Marcus Barrow) [253287]
  -qla2xxx: update 4 GB/s firmware to match 8 GB/s firmware (Marcus Barrow) [253287]
  -ext3: lighten up resize transaction requirements (Eric Sandeen) [166038]
  -nfs: Fix nfs_access_cache_shrinker race with umount (Peter Staubach) [433249]
  -hangcheck timer: remove monotomic clock dependencies (Brian Maly) [429928]
  -Fix execve returning EFBIG when running 4 GB executable (Dave Anderson) [393501]
  -[NET] Fix the redirect packet of the router if the jiffies wraparound (Thomas Graf) [428934]
  -bnx2: update to upstream version 1.6.9 (Andy Gospodarek) [311531 303051 310851]
  -Fix race condition in proc file reading that leads to module refcnt imbalance (Neil Horman) [280431]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.27]
changelog:
  -infiniband: hotcpu_notifier backport (Doug Ledford) [309591]
  -infiniband: Remove the unused cxgb3/core directory and files (Doug Ledford) [309591]
  -infiniband: Don't set CONFIG_MLX4_CORE on ppc64 iseries (Vivek Goyal) [309591]
  -infiniband: Enable various infiniband related config options (Vivek Goyal) [309591]
  -infiniband: additional kernel backports needed for ppc64 (Doug Ledford) [309591]
  -infiniband: update kconfig files so that setting infiniband off kills it all (Doug Ledford) [309591]
  -infiniband: backport for interrupt handler changes (Doug Ledford) [309591]
  -infiniband: add the genalloc backport (Doug Ledford) [309591]
  -infiniband: minor backports (Doug Ledford) [309591]
  -infiniband: util updates (Doug Ledford) [309591]
  -infiniband: srp updates (Doug Ledford) [309591]
  -infiniband: sdp updates (Doug Ledford) [309591]
  -infiniband: core updates and makefile kconfig  changes (Doug Ledford) [309591]
  -infiniband: additional backport (Doug Ledford) [309591]
  -infiniband: move vnic to qlgc_vnic (Doug Ledford) [309591]
  -infiniband: ipoib updates (Doug Ledford) [309591]
  -infiniband: various header config updates (Doug Ledford) [309591]
  -infiniband: ehca driver update (Doug Ledford) [309591]
  -infiniband: nes hardware driver update (Doug Ledford) [309591]
  -infiniband: mthca driver update (Doug Ledford) [309591]
  -infiniband: ipath driver update (Doug Ledford) [309591]
  -infiniband: cxgb3 driver update (Doug Ledford) [309591]
  -infiniband: amso1100 driver update (Doug Ledford) [309591]
  -infiniband: kill off some uninitialized_var usage that breaks our kernel (Doug Ledford) [309591]
  -additional kernel.h backports (Doug Ledford) [309591]
  -infiniband: move a couple backports (Doug Ledford) [309591]
  -infiniband: add the mlx4 core net and infiniband drivers (Doug Ledford) [309591]
  -infiniband: move the vnic driver to qlgc_vnic (Doug Ledford) [309591]
  -bnx2x: enable bnx2x module CONFIG_BNX2X=m (Vivek Goyal) [328001]
  -Fix ext3 direct IO  problem that occurs under memory pressure (Josef Bacik) [381221]
  -wacom: add support to cintiq 20wsx tablets (Aristeu Rozanski) [436890]
  -io_apic: fix irq race in check_timer (Brian Maly) [432405]
  -cxgb3: update to driver to support ofed 1 3 (Andy Gospodarek) [253452]
  -igb: update to upstream version 1.0.8-k2 (Andy Gospodarek) [298881]
  -e1000e: update to latest upstream (Andy Gospodarek) [311961 432364]
  -usb: Fix sporadic hangs in usb (Pete Zaitcev) [239723]
  -bnx2x: initial support for bcm57710 (Andy Gospodarek) [328001]
  -Fix usb stress test issue on amd sbx00 systems (Bhavana Nagendra) [435787]
  -mptfusion: Fix IO failures when host reset of adapter is in progress (Chip Coldwell) [429368]
  -mptfusion: Fix oops in mptctl_gettargetinfo due to null ioc raid_data piocpg3 (Chip Coldwell) [429623]
  -mptfusion: update mptfusion to version 3-12-19-00 (Chip Coldwell) [308341]
  -lpfc: update lpfc driver to version 8.0.16.40 (Chip Coldwell) [326931]
  -aacraid: update aacraid driver to version 1.1.5-2455 (Chip Coldwell) [300021]
  -aacraid: update aacraid driver to version 1.1.5-2453 (Chip Coldwell) [300021]
  -megaraid: Update megaraid_sas driver to version 3.18 (Chip Coldwell) [312061]
  -x86_64: fix 32-bit thread debugging (Jerome Marchand) [311881]
  -arcmsr: update the arcmsr driver to version 1.20.00.15.rh (Tomas Henzl) [428801]
  -e1000: disable pci-e completion timeouts on pseries (Andy Gospodarek) [231676]
  -[SCSI] ibmvscsi: add slave_configure to allow device restart (Brad Peters) [364601]
  -Request to demand load dm cluster logging module (Jonathan Brassow) [438834]
  -nfsv4: create dedicated workqueue for handling nfs4_close_state_work (Jeff Layton) [402581]
  -nfs: allow nfsv4 files open for write to invalidate caches (Jeff Layton) [359651]
  -k8_edac: add option to report gart errors (Aristeu Rozanski) [232488]
  -nfs: Allow RHEL4 to do READDIR on directory containing a referral (Jeff Layton) [227610]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.26]
changelog:
  -[SPEC] fix add call to weak modules script in spec file (Vivek Goyal) [438688]
  -[s390] qdio: FCP/SCSI write IO stagnates on LPAR (Hans-Joachim Picht) [436992]
  -lro: Build lro as module CONFIG_INET_LRO=m (Ed Pollard) [300201]
  -ehea: driver update and modifications to sync with upstream (Ed Pollard) [300201]
  -ehea: Fixes to make LRO compile in RHEL 4.7 (Ed Pollard) [300201]
  -ehea: Pull LRO support from upstream (Ed Pollard) [300201]
  -getrusage: fill ru_inblock and ru_oublock fields if possible (Jerome Marchand) [247285]
  -io accounting: set up config_task_io_accounting (Jerome Marchand) [247285]
  -io accounting: report in procfs (Jerome Marchand) [247285]
  -io accounting: account for direct io (Jerome Marchand) [247285]
  -io accounting: read accounting cifs fix (Jerome Marchand) [247285]
  -io accounting: read accounting nfs fix (Jerome Marchand) [247285]
  -io accounting: read accounting (Jerome Marchand) [247285]
  -io accounting: write cancel accounting (Jerome Marchand) [247285]
  -io accounting: write accounting (Jerome Marchand) [247285]
  -io accounting: core statistics (Jerome Marchand) [247285]
  -[PPC64] Add kernel support for storing slb entries, for cpu failure recovery (Brad Peters) [300081]
  -[Power6] Extend alignment exception handler to handle new floating point load, store instructions (Brad Peters) [300071]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.25]
changelog:
  -alsa: fix 32 to 64 bit pcm api conversion layer (Jaroslav Kysela) [429944]
  -[SPEC] Add call to weak modules script in spec file (Jon Masters) [438115]
  -bonding: 802.3ad: Fix no carrier on no partner found (Vince Worthington) [437865]
  -stex: update stex driver (Jeff Garzik) [251560]
  -s2io: Update to driver version 2.0.25.1 (Andy Gospodarek) [298551]
  -diskdump: fix diskdump to print warning message about large block_order (Takao Indoh) [219639]
  -[IPV4]: Fix fragmentation with header options (Thomas Graf) [214903]
  -sctp: backport new sctp receive buffer management code to rhel4 (Neil Horman) [200813]
  -diskdump: Diskdump performance regression in mptfusion driver (Takao Indoh) [438027]
  -[NETFILTER]: fix module to prevent deadlock via module refcounting (Neil Horman) [212922]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.24]
changelog:
  -Fix greyhound event based profiling support patch (Bhavana Nagendra) [437982]
  -forcedeth: update to upstream version 0.61 (Andy Gospodarek) [253592]
  -sata: work around sb600 sata hw errata (Jeff Garzik) [300861]
  -tg3: update to upstream version 3.86 (Andy Gospodarek) [324251]
  -[TCP] Fix tcp assertion where packets_out exceeds fackets_out (Thomas Graf) [296561]
  -i2c_piix4: Enable i2c_piix4 module on x86_64 (Prarit Bhargava) [424541]
  -Fix 64 bit dma issue on sb700 systems (Bhavana Nagendra) [434742]
  -ipr: dual sas raid adds support for new pci-e ipr adapters (Brad Peters) [299101]
  -ipr: dual sas raid escalates error handler failures all the way to host reset (Brad Peters) [299101]
  -[XEN] Fix xen pv netfront oops during live migrate (Chris Lalancette) [435351]
  -ICH10: Add relevant PCI device IDs to support ICH10 (Geoff Gustafson) [304101]
  -Retry: check to see if agp is valid before reporting aperture size warnings (Brian Maly) [392771 431897]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.23]
changelog:
  -pci: mmconfig patches 68.22 build breakage fix (Tony Camuso) [437837]
  -Add config_dm_multipath_hp to generic config (David Wysochanski) [195685]
  -xen: expand vnif number per a guest domain over four (Don Dutile) [435448]
  -sata_svw: update sata_svw driver to support broadcom HT1100 chipset (John Feeney) [234159]
  -qla3xxx: new 4032 does not work with vlan (Marcus Barrow) [314301]
  -Add greyhound event based profiling support (Bhavana Nagendra) [433524]
  -Adding sb800 sata controller support (Bhavana Nagendra) [299901]
  -dm-multipath: path group initialization retry support for hp hardware handler (David Wysochanski) [195685]
  -dm-multipath: add path group initialization retry support to generic multipath layer (David Wysochanski) [195685]
  -dm-multipath: add hp handler for HP active/passive array (David Wysochanski) [195685]
  -[s390] qeth: ifenslave -c causes kernel panic with vlan and osa layer2 (Hans-Joachim Picht) [387041]
  -[s390] zfcp: scsi LUNs going offline during cablepull or MC update (Hans-Joachim Picht) [207558]
  -[s390] zfcp: Various driver bugfixes from upstream (Hans-Joachim Picht) [248934]
  -Build PowerNow-k8 as module (Brian Maly) [234145]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.22.EL]
changelog:
  -xen: save restore migration of 32 bit pv guests can fail under load (Don Dutile) [431081]
  -sysfs: Keep away from adding an existing dirent (Josef Bacik) [383101]
  -[IA64] Avoid unnecessary tlb flushes when allocating memory (Doug Chapman) [424771]
  -[PCI] pci config: remove mmconf blacklist (Tony Camuso) [250313]
  -[PCI] pci config: Use PortIO to access config offsets below 256 byte (Tony Camuso) [250313]
  -wacom: add support to intuos3 12x19 (Aristeu Rozanski) [278681 253088]
  -wacom: add support to intuos3 12x12 (Aristeu Rozanski) [278681 253088]
  -wacom: fix the maximum distance value (Aristeu Rozanski) [278681 253088]
  -wacom: change cintiq interrupt handler (Aristeu Rozanski) [278681 253088]
  -wacom: add support for intuos3 4x6 (Aristeu Rozanski) [278681 253088]
  -wacom: use enum definitions for wacom models (Aristeu Rozanski) [278681 253088]
  -neofb: avoid overwriting fb_info fields (Vitaly Mayatskikh) [430252]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.21.EL]
changelog:
  -skge: do not clear multicast state on link down (Andy Gospodarek) [377611]
  -net: drop duplicate frames on vlan accelerated bonding interfaces (Andy Gospodarek) [295161]
  -ipmi: initialize second bmc properly (Peter Martuccelli) [411041]
  -diskdump: do not disregard crc error of the diskdump module (Takao Indoh) [248766]
  -Make kernel build when CONFIG_HIGHMEM is not set (Jason Baron) [185202]
  -Add HP DL580 G5 to bfsort whitelist (Tony Camuso) [429727]
  -sched: Exiting process returns its first time_slice to wrong process (Vitaly Mayatskikh) [238034]
  -Fix e820 map hole size calculations (Larry Woodman) [206113]
  -[NET] bonding: add MAC based failover support to bonding driver (Brad Peters) [300031]
  -[SCSI] aic7xxx: fix ahc_done check SCB_ACTIVE for tagged transactions (David Milburn) [223333]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.20.EL]
changelog:
  -EDAC: Add CONFIG_EDAC_I5000 option to config files (Vivek Goyal) [235936]
  -Reset LEDS on dell usb keyboards (John Feeney) [225361]
  -Tolapai: Report correct cpu cache info (Geoff Gustafson) [426301]
  -Tolapai: sata and i2c support (Geoff Gustafson) [304131]
  -Fix memory leak in alloc_disk_node (Jerome Marchand) [435892]
  -jbd: Fix journal overflow issues (Josef Bacik) [183119]
  -knfsd: Ratelimit remotely triggered rpc error messages (Chris Snook) [428149]
  -pata_jmicron: match devices using vendor and device class only and update quirk for JMB361/3/5/6 (Aristeu Rozanski) [337671]
  -cciss: Add SG_IO ioctl and fix error reporting for SG_IOCTL (Tomas Henzl) [293651]
  -cciss: add init of drv->cylinders back to cciss_geometry_inquiry (Tomas Henzl) [432026]
  -cciss : Modify /proc/driver/cciss entries to avoid system crash (Tomas Henzl) [432480]
  -EDAC: add support to intel 5000 chipsets (Aristeu Rozanski) [235936]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.19.EL]
changelog:
  -edac: Add CONFIG_EDAC_I3000 option to config files (Vivek Goyal) [427799]
  -cdrom: kill "open failed" message (John Feeney) [247446]
  -Insufficient range checks in fault handlers with mremap (Vitaly Mayatskikh) [428969] {CVE-2008-0007}
  -Fix CDROM mounting problem when changing isos in iseries legacy (Brad Peters) [334651]
  -[PPC64] xmon: Make xmon= off work on rhel 4 (Brad Peters) [426878]
  -cciss: Change version number to 3.6.20-RH1 (Tomas Henzl) [426109]
  -cciss: Support new SAS/SATA controllers (Tomas Henzl) [426111]
  -cciss: Copyright information updated as per HP Legal (Tomas Henzl) [426110]
  -cciss: Remove read_ahead and use block layer defaults instead (Tomas Henzl) [426114]
  -Fix unix stream socket recv race condition (Hideo AOKI) [433685]
  -[NET] Fix socket name string length returned by sys_getsockname (Doug Ledford) [434554]
  -EDAC: add support to intel 3000 3010 chipsets (Aristeu Rozanski) [427799]
  -Revert "s390:qdio/qeth: make sure sent skbs are freed in time" (Vivek Goyal) [381041]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.18.EL]
changelog:
  -nlm: fix a client side race on blocking locks (Jeff Layton) [432855]
  -nlm: cleanup for blocked locks (Jeff Layton) [432855]
  -[PPC] Support for cpu freq values great than 32 bit on power5/6 (Guy Streeter) [373031]
  -[SCSI] fix kernel panic caused by scsi medium error (Takahiro Yasui) [242046]
  -forcedeth: msi bugfix: Stop using stale irq number (Andy Gospodarek) [359231]
  -ide: __ide_end_request check for empty list before dequeuing request (David Milburn) [426279]
  -redhat will not ipl with more than 64 procs (Scott Moser) [248428]
  -[MOXA] buffer overflow in moxa  driver (Vitaly Mayatskikh) [423141] {CVE-2005-0504}
  -s390: cio: collection of update patches (Hans-Joachim Picht) [380931]
  -s390:qdio/qeth: make sure sent skbs are freed in time (Hans-Joachim Picht) [381041]
  -s390: qeth: tcpdump does not work with osa Layer2 and VLAN enabled (Hans-Joachim Picht) [379031]
  -make concurrent proc net dev reads return sane stats for bonds (Chris Snook) [430576]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.17.EL]
changelog:
  -Missing sb600 sb700 40 pin ide cable support (Bhavana Nagendra) [431440]
  -SB700 contains two ide channels (Bhavana Nagendra) [335361]
  -smbus: AMD ATI SB600 700 800 use same smbus controller devid (Bhavana Nagendra) [252287]
  -libata: un-blacklist hitachi drives to enable NCQ (David Milburn) [430293]
  -libata: sata_nv may send commands with duplicate  tags (David Milburn) [430293]
  -add mutex_destroy() definition (Jason Baron) [233234]
  -sunrpc: print unsigned integers in stats (Jeff Layton) [401861]
  -nfsd: don t try to cache reply to nfsv2 readdir (Jeff Layton) [430946]
  -sunrpc: make sure portmap calls are always soft RPC tasks (Jeff Layton) [248787]
  -[NET] link_watch: always schedule urgent events (Don Dutile) [429930]
  -nfs: don t expose internal readdir errors to userspace (Jeff Layton) [354371]
  -nfs4: Make sure nfs4 mounts are interruptable when intr is specified (Jeff Layton) [151085]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.16.EL]
changelog:
  -[XEN] Fix xen pv oops when mmaping prot_none during save restore (Chris Lalancette) [311431]
  -[NET] link_watch: handle jiffies wraparound (Vince Worthington) [433698]
  -IA64: user data corruption on misaligned access with certain fp instructions (Luming Yu) [430918]
  -xen: xenbus suspend_mutex remains locked after transaction failure (Don Dutile) [250381]
  -hotplug: acpiphp: avoid acpiphp cannot get bridge info pci hotplug failure (Konrad Rzeszutek) [287741]
  -[COREDUMP] add MMF_DUMP_ELF_HEADERS flag support (Hideo AOKI) [235742]
  -[COREDUMP]: Documentation for coredump filter (Hideo AOKI) [235742]
  -[COREDUMP] elf: add coredump filtering feature (Hideo AOKI) [235742]
  -[COREDUMP]: add an interface for coredump filter (Hideo AOKI) [235742]
  -kswapd: kswapd does not use lower_zone_protection value properly, resulting in oomkill (Larry Woodman) [358731]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.15.EL]
changelog:
  -nfs: Introduce nfs.enable_ino64 command line parameter to enable/disable 32bit inode numbers (Peter Staubach) [213518]
  -nfs: 32 bit nfs client does not handle 64 inodes correctly. Server side changes. (Peter Staubach) [213518]
  -nfs: 32 bit nfs client does not handle 64 inodes correctly. Client side change (Peter Staubach) [213518]
  -xen: rapid block device plug unplug leads to kernel crash and or soft lockup (Don Dutile) [426031]
  -[NET] make tcp_input_metrics get minimum rto via tcp_rto_min (Anton Arapov) [427204]
  -acpiphp: differentiate between slot empty and slot power off (Prarit Bhargava) [248489]
  -Fix IPI interrupt storm on IA64 (Prarit Bhargava) [359671]
  -smbfs: Fix calculation of size parameter in smb_receive (Jeff Layton) [355141]
  -smbfs: fix more warnings and errors with debug builds (Jeff Layton) [355141]
  -smbfs: Fix debug logging only compilation error (Jeff Layton) [355141]
  -smbfs: smbfs readdir vs signal fix (Jeff Layton) [355141]
  -smbfs: Fix names_cache memory leak (Jeff Layton) [355141]
  -smbfs: smb_file_open retval fix (Jeff Layton) [355141]
  -smbfs: Turn null dereference into BUG() (Jeff Layton) [355141]
  -smbfs: fix data corruption in smb_proc_setattr_unix (Jeff Layton) [355141]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.14.EL]
changelog:
  -epoll_wait with negative timeout value results in bogus printk (Peter Staubach) [278961]
  -proc: add /proc/<pid>/limits (Neil Horman) [207340]
  -ACPI PCIE hotplug fails due to  non receipt of acpi events (Konrad Rzeszutek) [252262]
  -Powernow-k8: Get rid of unnecessary error messages with synchronized p state transitions (Konrad Rzeszutek) [276771]
  -ide : handle ide removeable drives properly (Josef Bacik) [249061]
  -[AIO] account for io wait properly (Jeff Moyer) [220902]
  -nfs:for nfs4_create_exclusive, reset any fields set in attrmask (Jeff Layton) [196180]
  -nfs: set attrmask correctly on nfs4_create_exclusive reply (Jeff Layton) [196180]
  -Implement udp_poll to reduce likelyhood of false positive return from select() (Neil Horman) [212321]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.13.EL]
changelog:
  -sunrpc: don't retry portmap query forever if it is not responding (Jeff Layton) [204309]
  -nfs: Discard pagecache data for dirs on denty_iput (Jeff Layton) [364361]
  -Fix /proc/cpuinfo giving wrong model number information (John Feeney) [313631]
  -nfs: fix ATTR_KILL_S*ID handling on NFS (Jeff Layton) [225557]
  -[NET] kernel needs to support TCP_RTO_MIN (Anton Arapov) [251240]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.12.EL]
changelog:
  -eHEA: add poll_controller support to eHEA to support netdump and netconsole (Neil Horman) [249041]
  -Display count of pagecache pages in show_mem output (Larry Woodman) [428014]
  -Prevent long delay before OOM killer launches (Larry Woodman) [252939]
  -x86_64: Prevent iounmap from sleeping with a spinlock held (Larry Woodman) [361931]
  -i8042: remove polling timer support (David Milburn) [340561]
  -hfs: Do not mount the fs if hfs can t find the root inode (Josef Bacik) [223514]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.11.EL]
changelog:
  -cifs: update changes file and version string (Jeff Layton) [427544]
  -cifs: fix endian conversion problem in posix mkdir (Jeff Layton) [427544]
  -cifs: fix potential data corruption when writing out cached dirty pages (Jeff Layton) [427544]
  -cifs: when mount helper missing fix slash wrong direction in share (Jeff Layton) [427544]
  -cifs: fix error message about packet signing (Jeff Layton) [427544]
  -cifs: fix cifsd to shut down when signing fails during mount (Jeff Layton) [427544]
  -cifs: reduce chance of list corruption in find_writable_file (Jeff Layton) [427544]
  -cifs: fix memory leak in statfs to very old servers (Jeff Layton) [427544]
  -cifs: fix buffer overflow if server sends corrupt response to small request (Jeff Layton) [372981] {CVE-2007-5904}
  -cifs: log better errors on failed mounts (Jeff Layton) [427544]
  -cifs: fix oops on second mount to same server when null auth is used (Jeff Layton) [427544]
  -cifs: fix spurious reconnect on 2nd peek from read of SMB length (Jeff Layton) [427544]
  -cifs: fix bad handling of EAGAIN error on kernel_recvmsg in cifs_demultiplex_thread (Jeff Layton) [427544]
  -cifs: have older kernels clean out pages list in cifs_readpages (Jeff Layton) [427544]
  -cifs: add inline cifs_filemap_write_and_wait for older kernels (Jeff Layton) [427544]
  -cifs: add mutex_lock and mutex_unlock definitions (Jeff Layton) [427544]
  -cifs: account for change of kmem_cache_t to struct kmem_cache (Jeff Layton) [427544]
  -cifs: remove duplicate kzalloc definition (Jeff Layton) [427544]
  -cifs: Import cifs stock version 1.50c (Jeff Layton) [427544]
  -audit: break execve records into smaller parts (Eric Paris) [427532] {CVE-2008-0004}
  -eHEA: Fix kernel panic on DLPAR remove of eHEA (real fix) (Scott Moser) [253765]
  -Revert "check to see if agp is valid before reporting aperture size warnings" (Vivek Goyal) [392771]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.10.EL]
changelog:
  -s390: qeth: discard inbound packets with unknown header id (Hans-Joachim Picht) [350871]
  -s390: qeth: hipersockets layer-3 interface to drop non-IP packets (Hans-Joachim Picht) [380961]
  -check to see if agp is valid before reporting aperture size warnings (Brian Maly) [392771]
  -xen: local domu to domu ssh broken when firewall enabled (Don Dutile) [414131]
  -nfs: multithreaded file lock/unlock issues over NFS (Sachin Prabhu) [346331]
  -Don't truncate /proc/PID/environ at 4096 characters (Anton Arapov) [254037]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.9.EL]
changelog:
  -udf: fix possible leakage of blocks (Eric Sandeen) [202765]
  -udf: fix possible udf data corruption (Eric Sandeen) [202765]
  -udf: support files larger than 1g (Eric Sandeen) [202765]
  -udf: add assertions in udf_discard_prealloc (Eric Sandeen) [202765]
  -udf: use get_bh instead of directly accessing b_count (Eric Sandeen) [202765]
  -udf: introduce struct extent_position (Eric Sandeen) [202765]
  -udf: use sector_t and loff_t for file offsets (Eric Sandeen) [202765]
  -udf: fix possible udf deadlock and memory corruption (Eric Sandeen) [202765]
  -udf: deadlock on unmount fix (Eric Sandeen) [202765]
  -udf: fix reservation discarding (Eric Sandeen) [202765]
  -nfs: Fix nfs read performance regression. Introduce a new tunable. (Larry Woodman) [396081]
  -nfs: High vm pagecache reclaim latency on systems with large highmem to lowmem ratio fix (Larry Woodman) [371191]
  -Do not mmap a page at address zero without MAP_FIXED (Vitaly Mayatskikh) [360281]


author: Vivek Goyal <vgoyal@redhat.com> [2.6.9-68.8.EL]
changelog:
  -Fix unserialized task->files updation (Vitaly Mayatskikh) [250799]
  -nfs: fix redundant and incorrect protocol for nfs4 in /proc/mounts (Jeff Layton) [171712]
  -psmouse: Add support for cortps protocol (Aristeu Rozanski) [221467]
  -Potential deadlock in DM mirror code fix (Jonathan Brassow) [247879]
  -SIGKILL not respected under special circumstances fix (Michal Schmidt) [253665]
  -ide: Introduce command line option to disable ide drivers (Gerd Hoffmann) [270661]
  -networking: kernel oopses when multicasting with connection oriented socket (Anton Arapov) [250842]


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.7]
changelog:
  -Fix possible NULL pointer dereference inside of strncmp() if of_get_property() failed (Vitaly Mayatskikh) [396811]
  -fix sys_waitid() hang (Jerome Marchand) [382191] {CVE-2007-5500}
  -dm mirror: fix pvmove causes kernel panic (Milan Broz) [179201]
  -fix possible filesystem corruption (Vitaly Mayatskikh) [428795] {CVE-2008-0001}


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.6]
changelog:
  -add support for Realtek RTL8111/8168 PCI-Express NIC (Ivan Vecera) [251383]
  -ISDN: fix isdn_net_setcfg() vulnerability (Aristeu Rozanski) [392131] {CVE-2007-6063}
  -fix panic caused by set_mempolicy with MPOL_BIND (Vitaly Mayatskikh) [293211] {CVE-2007-4130}
  -fix core dump file permissions (Don Howard) [396981] {CVE-2007-6206}
  -I4L: fix isdn_ioctl memory issue (Vitaly Mayatskikh) [425161] {CVE-2007-6151}
  -fix dput after mntput bugs (Josef Bacik) [403361]
  -fix  xenbus has use-after-free (Don Dutile) [249727]
  -acpiphp: Examine slots below P2P bridges (Prarit Bhargava) [415981]


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.4]
changelog:
  -do not call set_page_dirty_lock() on compound pages (Luming Yu) [248954 252400]
  -disables irqs in core sysrq code (Prarit Bhargava) [253573]
  -ipv6: fix inet6_dev refcnt leak (Neil Horman) [252222]
  -i386: ensure compressed diskdump header contains correct panic cpu (Dave Anderson) [309081]
  -fix up kabi for: enhance criteria for dead peer detection in ip_conntrack (Neil Horman)


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.3]
changelog:
  -enhance criteria for dead peer detection in ip_conntrack (Neil Horman) [205966]
  -i386/x86_64 segment register access update (Peter Zijlstra) [414251]
  -Remove duplicated FAKE_STACK_FRAME macro (Peter Zijlstra) [414261]
  -add new CIFS Kconfig options (Jeff Layton) [282591]
  -dm: fix bd_mount_sem counter corruption (Milan Broz) [377351]
  -dm: fix panic on shrinking device size (Milan Broz) [360311]
  -dm crypt: fix oops on device removal (Milan Broz) [377371]


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.2]
changelog:
  -add missing dput() in do_lookup() error case (Eric Sandeen) [363471]
  -fix diskdump performance regression on mpt fustion driver (Takao Indoh) [284991]
  -add missing pskb_may_pull in icmp_filter (Jerome Marchand) [356501]
  -Fix incorrect logic in AMD NMI code (Prarit Bhargava) [387451]
  -Get rid of Tux's O_ATOMICLOOKUP (Michal Schmidt) [358681]
  -lcs: After channel failure do not drive normal shutdown sequence (Hans-Joachim Picht) [354141]


author: Jason Baron <jbaron@redhat.com> [2.6.9-68.1]
changelog:
  -add back: eliminate excessive latency when writing to a large file
  -add back: setting better values for dirty limits
  -serial: assert DTR for serial console devices (Michal Schmidt) [244248]
  -bonding: only do ipv6 addrconf on master bond devices (Vince Worthington) [249631]
  -lsm: reduce noise during security_register (Ivan Vecera) [249404]
  -selinux: quiet complaints when using OpenAFS (Eric Paris) [239628]
  -Fix for NFS attribute timeout handling (Fabio Leite) [247905]
  -tty: set pending_signal() when returning -ERESTARTSYS (Aristeu Rozanski) [245343]
  -ieee80211 off-by-two integer underflow (Anton Arapov) [346381] {CVE-2007-4997}
  -fix bad schedule_timeout() call causing excessive delay (Jonathan Brassow) [381081]
  -do not return zero in mmap (Rik van Riel) [360281]


author: Jason Baron <jbaron@redhat.com> [2.6.9-68]
changelog:
  -revert: eliminate excessive latency when writing to a large file
  -revert: setting better values for dirty limits


author: Jason Baron <jbaron@redhat.com> [2.6.9-64]
changelog:
  -cifs: fix memory corruption due to bad error handling in cifs_demultiplex_thread() (Jeff Layton) [269261]


author: Jason Baron <jbaron@redhat.com> [2.6.9-63]
changelog:
  -update: fix P4/Xeon Thermal transition interrupt handler emits warning messages far too frequently (Brian Maly, Jason Baron) [183280]
  -x86: set MAX_MP_BUSSES to 260 for 'default' machine handler (Prarit Bhargava) [218885]
  -qla3xxx: add memory barrier to inbound packet handler (Marcus Barrow) [314271]
  -mptfuxion: fix NaT consumption panic (Chip Coldwell) [325641]
  -libata: prevent devices with blank model names from being DMA blacklisted (David Milburn) [316991]


author: Jason Baron <jbaron@redhat.com> [2.6.9-62.1]
changelog:
  -further fixes for: netpoll, fix deadlock from recursive call through netpoll_send_skb() (Neil Horman) [313751]
  -fix denial of service with wedged processes (Vitaly Mayatskikh) [221414]


author: Jason Baron <jbaron@redhat.com> [2.6.9-62]
changelog:
  -fix P4/Xeon Thermal transition interrupt handler emits warning messages far too frequently (Brian Maly, Jason Baron) [183280]
  -cxgb3: fix backport issue and prevent panic on module unload (Andy Gospodarek) [252174]
  -libata fixes (Jeff Garzik) [323851]
  -alsa: add position_fix blacklist (Brian Maly) [245782]
  -add tcp_slow_start_after_idle tunable (Thomas Graf) [242157]
  -netpoll, fix deadlock from recursive call through netpoll_send_skb() (Neil Horman) [313751]
  -libata-core: support wildcard matching in ata_blacklist_entry (David Milburn) [237692 239367 316991]
  -bnx2: Add PHY workaround for 5709 A1 (Andy Gospodarek) [317341]
  -fix return value from __bio_map_user on error (Eric Sandeen) [316661]
  -alsa: support for AD1984 codecs (Brian Maly) [280381]
  -add Module.symbers file to binary kernel packages (Jon Masters) [325351]


author: Jason Baron <jbaron@redhat.com> [2.6.9-61]
changelog:
  -add support (device IDs) for Bolton NICs (Bruce Allan) [251220]
  -qla4xxx: fix overrun/underrun handling (Marcus Barrow) [267061]
  -Make sure -devel package files are mode 655 (Doug Ledford) [317121]
  -qla2xxx: fix uninitialized pointers in ioctl module (Marcus Barrow) [311681]
  -flush TLB as appropriate on mutlti-core (Geoff Gustafson, Bhavana Nagendra) [309221]
  -ext3: ensure do_split leaves enough free space in both blocks (Eric Sandeen) [311301]
  -kernel/module.c: don't deadlock rmmod'ing a module in use (Jarod Wilson) [163140]
  -fix bad order of dm-raid1 presuspend ops can hang cluster mirrors (Jonathan Brassow) [316031]


author: Jason Baron <jbaron@redhat.com> [2.6.9-60]
changelog:
  -add phys_to_virt in lib/swiotlb.c (Anton Arapov) [250898]
  -add support (device IDs) for HP Mezzanine cards (Andy Gospodarek) [251215]
  -netfront: Avoid deref'ing skb after it is potentially freed (Herbert Xu) [252137]
  -MPV: fix kernel panic mode when HTX is run (Scott Moser) [246018]
  -ia64: fix unexpected SIGILL on NFS/Montecito (Luming Yu) [253593]
  -fix ibm,loc-code not unique for eHEA/eHCA adapters (Scott Moser) [271781]
  -netxen: update to upstream with major bug fixes (Andy Gospodarek) [249770]
  -e1000e: initial support for ICH9 hardware (Andy Gospodarek) [234259 253790]
  -igb: initial support for Zoar hardware (Andy Gospodarek) [247323]
  -fix can't boot 2.6.9-56-smp with Vmware (Chip Coldwell) [253538]
  -Don't allow the stack to grow into hugetlb reserved regions (Vitaly Mayatskikh) [294981] {CVE-2007-3739}
  -x86_64: fix x86_64 syscall vulnerability (Anton Arapov, Roland McGrath) [297861] {CVE-2007-4573}
  -Prevent bridges from being re-investigated (Prarit Bhargava) [284871]
  -fix missing ioctl() permission checks in aacraid driver (Vitaly Mayatskikh) [298361] {CVE-2007-4308}
  -fix alsa memory disclosure flaw (Vitaly Mayatskikh) [297751] {CVE-2007-4571}
  -v4l: enable bttv driver (Aristeu Rozanski) [179146]
  -qla2xxx: fix loading ioctl module panics ia64 systems (Marcus Barrow) [300921]


author: Jason Baron <jbaron@redhat.com> [2.6.9-59]
changelog:
  -ia64: fsys_gettimeofday leaps days if it runs with nojitter (Luming Yu) [250828]
  -s390x: hypfs: inode corruption due to missing locking (Brad Hinson) [254174]
  -fix constantly rebuilding infiniband modules (Andy Gospodarek) [282361]
  -fix broken include headers in -xenU-devel package (Doug Ledford) [241268]
  -Fix spurious syscall tracing after PTRACE_DETACH + PTRACE_ATTACH (Roland McGrath) [276861]
  -Reset current->pdeath_signal on SUID binary execution (Peter Zijlstra) [251118 252306]


author: Jason Baron <jbaron@redhat.com> [2.6.9-58]
changelog:
  -ia64: fix ib_ipath.ko needs unknown symbol __iowrite32_copy (Luming Yu) [250656]
  -ppc64: fix eeh kernel crash in hxecom (Scott Moser) [252076]
  -fix bound check ordering issue in random driver (Vitaly Mayatskikh) [275951] {CVE-2007-3105}


author: Jason Baron <jbaron@redhat.com> [2.6.9-57]
changelog:
  -s390: write support for appldata monitor records (Jan Glauber) [233505]
  -Support mobile processors in fid/did to frequency conversion (Bhavana Nagendra) [250835]
  -fix regression in MPT/Fusion diskdump (Nobuhiro Tachino) [251153]
  -cifs: fix deadlock in cifs_get_inode_info_unix (Jeff Layton) [252315]
  -Fix MMIO config space quirks on AMD Greyhound procs (Bhavana Nagendra) [252993]
  -QLogic driver does not login to the fabric - new fw required (Marcus Barrow) [201334]
  -Fix ipath driver when 2 ipath controllers are on the same subnet (Doug Ledford) [253003i 252161]
  -fix kernel panic on DLPAR remove of eHEA logical port (Scott Moser) [251369]
  -Prevent OOM killing when running heavy loads on EM64T systems with more than 4GB RAM (Larry Woodman) [199758 236051]
  -autofs4 - fix deadlock during directory create (Ian Kent) [246530]
  -fix vfat compat ioctls DoS on 64-bit (Eric Sandeen) [250665] {CVE-2007-2878}
  -VM scalability patch that prevnets system hangs (Larry Woodman) [234572]
  -update RHEL_VERSION to .6 (Jason Baron) [254222]


author: Jason Baron <jbaron@redhat.com> [2.6.9-56]
changelog:
  -add /proc/sys/vm/drop_caches to clear pagecache and slabcache on demand (Larry Woodman) [205722]
  -add cpuid4 emulation for AMD processors (Bhavana Nagendra) [243435]
  -netxen: add bits that were omitted from the original backport (Andy Gospodarek) [249317]
  -sym53c8xx: fix odd byte transfers to wide device (David Milburn) [242808]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.26]
changelog:
  -Support for p-state transitions on Intel and support for ACPI 3.0 _PSD method (Brian Maly) [196798]
  -eliminate excessive latency when writing to a large file (Larry Woodman) [205722]
  -add getcpu system call (Luming Yu) [241592]
  -Add support for Areca RAID controllers (Tomas Henzl) [233399]
  -Update qla2xxx driver (Marcus Barrow) [245631]
  -stop excessive swapout after processes exit and free list is adequate (Larry Woodman) [234572]
  -update qla2xxx driver - ref-counting (Marcus Barrow) [245939]
  -Update qla2xxx driver to version 8.01.07.04.- 2400 firmware (Marcus Barrow) [246234]
  -cciss driver updates (Tomas Henzl) [230122]
  -ACPI: support for PCI Root Bridge detection on HP rx6600/rx3600 (Brian Maly) [230421]
  -Update qla4xxx driver from v5.01.00-d6 to v5.01.00-d8 (Marcus Barrow) [234097]
  -Update qla3xxx to version 2.03.00-k4 (Marcus Barrow) [234000]
  -Update adp94xx from 1.0.8-6 to 1.0.8-12 (Ryan Powers) [233675]
  -Update OFED support to 1.2 (Doug Ledford) [248711]
  -add DONTFORK/DOFORK suport to madvise() (Larry Woodman)
  -Update qla2xxx driver to version 8.01.07.04 - EXPORT symbols and version update (Marcus Barrow) [249732]
  -s2io: update to driver version 2.0.16.1 (Andy Gospodarek) [228348]
  -ppc: Cope with PCI host bridge I/O window not starting at 0 (Scott Moser) [248736]
  -DLPAR remove I/O resource failed (Scott Moser) [249731]
  -initial support for Chelsio T3 (cxgb3) adapters (Andy Gospodarek) [196400]
  -fix cpufreq scaling doesn't work on Conroe Broadwater boxes (Konrad Rzeszutek) [249753]
  -k8_edac: add support for revision F processors (Aristeu Rozanski) [231854]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.25]
changelog:
  -fix /proc/mtrr interface bug (Bhavana Nagendra) [223824]
  -fix timer irq breakage on IBM NetVista and ThinkCentre S50 (Brian Maly) [203818]
  -fix race arising from inappropriate use of recalc_sigpending (Neil Horman) [222902]
  -fix gdb does not resolve symbols from cores (Dave Anderson) [220410]
  -fix install fails on ATI/AMD SB700 chipset w/ combined mode (Bhavana Nagendra) [244195 244196]
  -PCI-X/PCI-Express read control interfaces and fix AMD-8131 errata (Bhavana Nagendra) [234336]
  -Identifies correct number of procs in powernow-k8 driver (Bhavana Nagendra) [234243]
  -update lpfc to version 8.0.16.34 (Chip Coldwell) [233508]
  -LSI Fusion driver update (Chip Coldwell) [227451 233552 235645]
  -Prevent panic durring install on a 64GB EM64T (Larry Woodman) [223433]
  -Update megaraid_sas driver to 00.00.03.13 (Chip Coldwell) [232598]
  -fix LTC35264-System error during PCI hotplug (Konrad Rzeszutek) [243001]
  -ia64: fix vmalloc perfmon crash (Luming Yu) [185082] {CVE-2006-0558}
  -fix oops in vt_ioctl() (Jason Baron) [249836]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.24]
changelog:
  -update CIFS to 1.48aRH (Jeff Layton) [239339]
  -pci/quirks: disable MSI on Serverworks/Broadcom HT1000 (Andy Gospodarek) [227657]
  -Fix CPUID calls to support GH processors (Bhavana Nagendra) [222144]
  -Fix TSC reporting for processors with constant TSC (Bhavana Nagendra) [243432]
  -Add sb600 SMBus device ID (Prarit Bhargava) [246589]
  -fix SB600 controller only has one channel (Prarit Bhargava) [226950]
  -update ipr driver for new power SAS RAID (Scott Moser) [233615]
  -fix diskdump fails to save 1TB memory (Nobuhiro Tachino) [227135]
  -IPMI:Do not start kipmid if the driver supports interrupts (Peter Martuccelli) [233622]
  -fix race between loading xenblk.ko and scanning for LVM partitions (Don Dutile) [248024]
  -fix Kernel Assertion Error -- assertion (!atomic_read(&sk->sk_wmem_alloc)) failed at net/ipv4/af_inet.c (150) (Thomas Graf) [216752]
  -add OProfile kernel support for POWER6 (Scott Moser) [244457]
  -add OProfile kernel support for 970MP (Scott Moser) [222867]
  -fix databuffer miscompare on htx run (Scott Moser) [248193]
  -add nexen nic driver (Konrad Rzeszutek) [235424]
  -update dell_rbu driver (John Feeney) [237471]
  -promise pata support (Jeff Garzik) [204665]
  -sata_vsc cacheline size fix (Jeff Garzik) [222999]
  -update ata_piix driver (Jeff Garzik) [234154]
  -update SATA device blacklist (Jeff Garzik) [237692]
  -add PCI IDs to AHCI SATA driver (Jeff Garzik) [248234]
  -fix fat12 race in __fat_access (Eric Paris) [236278]
  -lmsensors: add nforce 2s/3(s)/4 smbus support (Eric Paris) [205816]
  -fix incorrect accounting of Committed_AS memory (Larry Woodman) [246086]
  -add additional device IDs for SB700 (Prarit Bhargava) [248108]
  -netxen: add bits that were omitted from the original backport (Andy Gospodarek) [249317]
  -split the journal checkpointing list into two separate lists (Josef Bacik) [248453]
  -revised patch for: fix performance issue with lots of nfs_pages (Josef Bacik) [238586]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.23]
changelog:
  -nfs: fix hang due to multiple dentries pointing to same directory inode (Peter Staubach) [175312]
  -disablle mmconfig on Intel DG965MQ and D26928 (Brian Maly) [220093]
  -make GART pages must be uncacheable (Chip Coldwell) [223238]
  -alsa: disable mmap of control/status structures while in compat mode (Aristeu Rozanski) [225061]
  -usb: add multi-lun exclusion for HP (Pete Zaitcev) [230110]
  -md: mark disk failed if superblock update fails (Michal Schmidt) [237019]
  -VM scalability patch that prevnets system hangs (Larry Woodman) [234572]
  -nfs: fix stale negative dentries (Fabio Leite) [228801]
  -Fix AMD64 AGP aperture validation (Bhavana Nagendra) [243434]
  -Add Greyhound performance counter events (Bhavana Nagendra) [234237]
  -ia64: fix boot on Altix 450 w/ PCI-E blade (George Beshers) [246636]
  -fix /proc/cpuinfo does not show "Itanium 2" as the family name for Montecitoia64 (Nobuhiro Tachino) [200984]
  -scsi: set error value when failing commands in prep_fn (David Milburn) [244097]
  -lower maximum nr_requests possible in cfq (Eric Sandeen) [234278]
  -Various fixes for >4GB i686 guests (Chris Lalancette) [233543]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.22]
changelog:
  -update iscsi-sfnet driver (Mike Christie) [238795 239447]
  -s390: enable packed stack layout (Chris Snook) [239116]
  -s390: add 3592 crypto tape support (Jan Glauber) [233506]
  -s390: support hypfs for z/VM (Jan Glauber) [233605]
  -fix diskdump with ipr driver fails if drives are in RAID config (Nobuhiro Tachino) [237900]
  -ppc64: Quieten lparcfg (Scott Moser) [222683]
  -ppc64: identify POWER5+ correctly in /proc/cpuinfo (Scott Moser) [243765]
  -ppc64: system enters xmon on second dlpar IO adapter add (Scott Moser) [235716]
  -ppc64: add pci sub-id for icom pci express WAN adapter (Scott Moser) [240492]
  -fix usb hub disappears due to overcurrent (John Feeney) [241002]
  -fix cannot find IDE device with ATI/AMD SB700 chipset (Bhavana Nagendra) [244194]
  -fix bug in Xen timer_interrupt (Rik van Riel) [246586]
  -tty_io: grab tty_sem while changing tty struct in release_dev (Aristeu Rozanski) [230747]
  -s390: fix broken copy_in_user function (Jan Glauber) [231049]
  -s390: fix zfcp SCSI LUNS going offline during cablepull (Jan Glauber) [207558]
  -s390: fix z90crypt trying non-functional devices (Jan Glauber) [208586]
  -s390: fix xpram module parameter parsing (Jan Glauber) [220996]
  -s390: fix dasd steal lock on shared dasd leads to I/O error (Jan Glauber) [228300]
  -s390: fix ctc communication with z/OS broken (Jan Glauber) [199711]
  -s390: add qeth sequence numbers for incoming packets (Jan Glauber) [240789]
  -wacom: fix absolute coordinates on Intuos3 and Cintiq tablets (Aristeu Rozanski) [247648]
  -edac_mc: backport sysfs support (Aristeu Rozanski) [235237]
  -e752x_edac: fix reverse csrows (Aristeu Rozanski) [247860]
  -serial 8250: add backup timer (Aristeu Rozanski) [197212 246665]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.21]
changelog:
  -improve scalability in schedule_timeout() (Michal Schmidt) [221035]
  -fix usb oops (Scott Moser) [206027]
  -dm log: remove 512 byte hard-sector-size restriction (Milan Broz) [185461]
  -add Hitachi HDS7250SASUN500G 0621KTAWSD to ncq blacklist (Prarit Bhargava) [239367]
  -add support for JMicron 36x ide controller cards. (Aristeu Rozanski) [233396]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.20]
changelog:
  -ppc64: fix intermittent fpscr corruption (Scott Moser) [197725]
  -ibmveth: fix crash at module removal time (Scott Moser) [213532]
  -fix sg use with software iscsi (Mike Christie) [186008]
  -fix stack randomization across suid/sgid exec (Ernie Petrides) [188072]
  -update aacraid driver to 1.1.5-2441 (Chip Coldwell) [227679]
  -add runtime switch for dasd erp logging (Jan Glauber) [233600]
  -e1000: update to version 7.3.20-k2 (Andy Gospodarek) [233609 216769 231676]
  -fix EHCI for nVidia usb controllers with >2GB (Pete Zaitcev) [244698]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.19]
changelog:
  -nfs: inc/dec i_count when getting/putting open state (Jeff Layton) [209419]
  -nfs: fix deadlock with multiple stateful operations (Jeff Layton) [228292]
  -nfs: fix "busy inodes" during open()  (Jeff Layton) [234587]
  -tg3: add wmb calls removed during 4.5 tg3 update (Andy Gospodarek) [229685]
  -cciss: update default read-ahead (Tomas Henzl) [239998]
  -qlogic: use DID_IMM_RETRY (Marcus Barrow) [231319]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.18]
changelog:
  -nfs: fix performance issue with large number of pages (Josef Bacik) [238586]
  -ppc: add hotplug support for Promise 20275 controller (Scott Moser) [233501]
  -ppc: fix pci_iomap bug when accessing pdc20275 MMIO reg (Scott Moser) [241932]
  -ppc: update ehea driver (Scott Moser) [233673 237856]
  -fix bug at unload time in ibmvscsic (Scott Moser) [175609]
  -bnx2: driver update and support for 5709 chips (Andy Gospodarek) [229678]
  -device mapper: Allow invalid snapshots to be activated (Milan Broz) [244214]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.17]
changelog:
  -Add netdump support to the ibmveth driver (Scott Moser) [229741]
  -Fix buffer overflow in capi debug functions (Anton Arapov) [230563] {CVE-2007-1217}
  -Add /proc numa maps support (Anton Arapov) [240216]
  -Add support for ATI/AMD SB700 sata controller (Bhavana Nagendra) [244193]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.16]
changelog:
  -xen: fix i386 PV ballooning (Chris Lalancette) [234496]
  -fix graphic corruption issue with 'setterm -blank 0' (Nobuhiro Tachino) [230103]
  -dm: fix failures when creating many snapshots (new dm-io interface) (Milan Broz) [174834 196759 242965]
  -dm: allow offline devices in table (Milan Broz) [244058]
  -add panic at oom support (Nobuhiro Tachino) [224104]
  -xen: fix save/restore failure under load (Chris Lalancette) [236929]
  -enable CONFIG_KPROBES for i686 Xen (Chris Lalancette) [245938]
  -dm: do not restrict bounce_limit in dm queue (Milan Broz) [156385]
  -dm io: panic on large request (Milan Broz) [240752]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.15]
changelog:
  -fix potential oops in ext[23] when acl ERR_PTR not recognized (Bryn Reeves) [241885]
  -dm: move fn call that could block outside spinlock (Jonathan Brassow) [242068]
  -Mirror writes to non-synced regions must be marked/cleared in the log (Jonathan Brassow) [242074]
  -fix sleeping function called from invalid context warning in bridge code (Neil Horman) [241807]
  -umount: avoid racy block-size set (Eric Sandeen) [234922]
  -don't add certain scsi devices (Josef Bacik) [244108]
  -fix overlapping bio's problem in raid5 (Josef Bacik) [244109]
  -nfs: make sure O_SYNC writes return errors (Jeff Layton) [244709]
  -ipvs: fix ipvs state variable when service thread fails to start (Neil Horman) [235760]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.14]
changelog:
  -ppc: add eHCA driver (Janice Girouard) [222908]
  -Resolve ATA issues with HP5750's CDROM (Prarit Bhargava) [226947 240027]
  -fix for unbalanced cpu scheduling (Ernie Petrides) [239286]
  -fix libata reference counting (Bryn Reeves) [241215]
  -4g4g: remove unused var in alloc_ldt() (Jerome Marchand) [223851]
  -fix netpoll to reply to arp frames over bonded interfaces (Neil Horman) [239551]
  -Modify EFI to warn for only pre-1.00 tables (Prarit Bhargava) [240378]
  -fix ipv4 'Treason uncloaked' message (Anton Arapov) [238725]
  -fix for bogus resource data w/multi-threaded exec (Ernie Petrides) [240349]
  -Remove non-existing SB600 raid id (Prarit Bhargava) [244041]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.13]
changelog:
  -ext3: fix block bitmap leakage on ENOSPC (Eric Sandeen) [228461]
  -ppc: fix rt_sigreturn does not restore context after interrupted syscall (Janice Girouard) [194570]
  -Add smaps functionality to RHEL-4 (Chris Lalancette) [215407]
  -ext3: handle orphan inodes vs. readonly snapshots (Eric Sandeen) [217928]
  -fix irqbalance causes oops during PCI removal (Kimball Murray) [229584]
  -fix sys_flock() double-free (Dave Anderson) [234367]
  -fix diskdump fails when configure partition#15 device (Nobuhiro Tachino) [228573]
  -back out previous nfs4_init_client patch and apply upstream version (Jeff Layton) [236606]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.12]
changelog:
  -nfs: fix permission handling for truncate calls (Jeff Layton) [191533]
  -nfs: Properly retry operations that return NFS4ERR_OLD_STATEID (Jeff Layton) [236606]
  -nfs: when creating files, only hash the dentry if create was successful (Jeff Layton) [239625]
  -nfs: add nordirplus option (Jeff Layton) [240122]
  -nfs: protocol V3 :write procedure patch (Peter Staubach) [222798]
  -nfs: fix context close race (Josef Bacik) [239039]
  -nfs: fix mishandling of dentries during create style operations (Peter Staubach) [224424]
  -sunrpc: fix several NFS server oopses when using krb5i with NFSv3 (Jeff Layton) [227726]
  -when downsizing RPC response buffer, account for checksum (Jeff Layton) [240419]
  -fix fcntl(F_SETLEASE, F_WRLCK) for a file on NFS always returns EAGAIN (Peter Staubach) [182616]
  -tg3: update to version 3.77 (Neil Horman) [229685]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.11]
changelog:
  -natsemi: fix driver hang under heavy load (Andy Gospodarek) [226308]
  -reduce loglevel for some selinux messages (Eric Paris) [224000]
  -qeth: fix layer 2 MAC address recovery on virtual interfaces (Chris Snook) [238576]
  -fix double kfree in smbfs (Jeff Layton) [232211]
  -clean-up of device-mapper mirror code (Jonathan Brassow) [236270]
  -device-mapper: unconditionalize log flush (Jonathan Brassow) [235040]
  -dm-raid1.c: rh_in_sync should be allowed to block (Jonathan Brassow) [236626]
  -smbfs: add default dir_mode and file_mode when one isn't specified in options (Jeff Layton) [168280]
  -smbfs: fix slab corruption due to bad error handling in smb_add_request (Jeff Layton) [234300]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.10]
changelog:
  -add support for Intel 6300ESB Watchdog timer (Jason Baron) [228623]
  -fix 32-bit process running on a 64-bit kernel cannot use IPC msgsnd/msgrcv larger than 64K (Jerome Marchand) [230661]
  -check to see if AGP is valid before reporting aperture size (Brian Maly) [211580]
  -nbd: fix race in nbd driver (Neil Horman) [233653]
  -only set implicit MAY_WRITE intent flag for permission check in open_namei() (Jeff Layton) [229177]
  -fix nfs_fhget to return appropriate errors (Jeff Layton) [189615]
  -dio: clean up completion phase of direct_io_worker() (Jeff Moyer) [198859 207114]
  -aio: fix sleeping function called from invalid context at kernel/workqueue.c (Jeff Moyer) [190729]
  -aio: fix indefinite hang in process exit path (Jeff Moyer) [210281]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.9]
changelog:
  -remove 'extern inline' declarations (Jason Baron) [179622]
  -sis900: fix rx ring refill order (Neil Horman) [219085]
  -make MADV_DONTNEED scalable (Rik van Riel) [237679]
  -add missing audit_notify_watch() to removexattr (Alexander Viro) [174707]
  -Fix memory leak in dma_alloc_coherent() (Prarit Bhargava) [243657]
  -bonding: various upstream cherry-picks (Andy Gospodarek) [223100 160340 232597 230077 225472]
  -forcedeth: update to driver version 0.60 (Andy Gospodarek) [221910]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.8]
changelog:
  -mask off high order mode bits when doing NFS setattr calls (Jeff Layton) [227188]
  -fix error handling in check_partition() (Eric Sandeen) [229709]
  -call mntget() before doing a follow_link() (Josef Bacik) [233119]
  -fix DoS in PPPOE (Neil Horman) [239823] {CVE-2007-2525}
  -fix out of bounds fib_probs access vulnerability (Neil Horman) [236387] {CVE-2007-2172}
  -ip_conntrack_sctp: fix remotely triggerable NULL ptr dereference (Don Howard) [243245] {CVE-2007-2876}
  -cciss: fix size calculation in diskdump (Bryn Reeves) [243834]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.7]
changelog:
  -amd74xx.c: add support for NVIDIA_NFORCE_MCP55_IDE controller (Michal Schmidt) [232084]
  -nlm: when reclaiming locks, skip non-posix locks (Jeff Layton) [210128] {CVE-2006-5158}
  -add missing fput() in a 32-bit ioctl on 64-bit x86 systems (Jeff Burke) [227978] {CVE-2007-0773}
  -prevent oops in compat_sys_mount with NULL data pointer (Jeff Layton) [239922] {CVE-2006-7203}
  -nfs: fix repeated NFS mount failures lead to kernel panic (Peter Staubach) [211092]
  -fix nr_unused accounting (Eric Sandeen) [236786]
  -fix kernel-devel package is missing headers on some arches (Doug Ledford) [241268]
  -fix bluetooth setsockopt() information leaks (Don Howard) [234293] {CVE-2007-1353}


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.6]
changelog:
  -add post-op attributes to NFSv4 LINK calls (Jeff Layton) [227373]
  -allow netdump to queue frames while show_state is running (Neil Horman) [226701]
  -fix core-dumping unreadable binaries via PT_INTERP (Eric Sandeen) [228659] {CVE-2007-0958}
  -fix kmap() leak in fat_prepare_write() (Eric Sandeen) [229846]
  -fix bug in shmget system call with > 2GB shared memory (Jerome Marchand) [230658]
  -allow LVS to send existing connections to alternate services if primary becomes unavailable (Neil Horman) [208830]
  -ixgb: fix early TSO completion causing Tx hang (Bruce Allan) [232985]
  -restore 'enforcemodulesig' behavior (Jason Baron) [225471]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.4]
changelog:
  -nfs: add some missing post-op inode revalidations (Jeff Layton) [227249]
  -fix kernel spinlock panic in nfs/inode.c (Peter Staubach) [228076]
  -make gdb accurately output the backtrace for gate page (Dave Anderson) [226872]
  -fix iterator to completely dump route table (Neil Horman) [215715]
  -cifs: have client recognize when a file is no longer read-only (Jeff Layton) [223196]
  -safely store sysfs inode nrs in the sysfs dirent (Eric Sandeen) [237861]
  -protect sysfs ->s_dentry w/ locking (Eric Sandeen) [237861]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.3]
changelog:
  -fix NLM_GRANTED callback checks (Jeff Layton) [220897]
  -fix race in efi variable delete code (Prarit Bhargava) [185978]
  -fix command line "nousbstorage" results in "nousb" (Guy Streeter) [224455]
  -scsi: fix expression in scsi_error.c and scsi_scan.c (David Milburn) [224479]
  -Make sure l_linger is unsigned to avoid negative timeouts (Jeff Burke) [222982]
  -autofs4: fix race between mount and expire (Ian Kent) [174821]
  -fix skb_linearize panic using IPoIB (Konrad Rzeszutek) [234033]
  -fix 32bit-compat rt_sigtimedwait (Guy Streeter) [237176]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.2]
changelog:
  -raw: don't allow the creation of a raw device with minor number 0 (Jeff Moyer) [218315]
  -fix sys_shmget allocation limit test (Guy Streeter) [224026]
  -fix for vm_committed_space accounting w/32-bit execs (Ernie Petrides) [218757]
  -fix jffs2 taints kernel (Jason Baron) [186619]
  -avoid oops from sysfs_hash_and_remove_file (Eric Sandeen) [227359]
  -ext3: fix list scanning in __cleanup_transaction (Eric Sandeen) [224638]
  -don't limit /proc/sys/vm/max_queue_depth upper value (Larry Woodman) [222185]
  -fix for futex()/FUTEX_WAIT race condition (Ernie Petrides) [217067]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.1]
changelog:
  -fix VM hangs by balancing inactive lists and setting better values for dirty limits (Larry Woodman) [205722]


author: Jason Baron <jbaron@redhat.com> [2.6.9-55]
changelog:
  -stex: fix regression in sg_reset (Jun'ichi "Nick" Nomura) [234532]
  -nfs: Allow files open for write to invalidate caches (Jeff Layton) [237135]
  -e1000: fix watchdog timeout panics (Andy Gospodarek) [231185]
  -re-enable readahead for multi-page sequential IOs (Eric Sandeen) [193077]


author: Jason Baron <jbaron@redhat.com> [2.6.9-54]
changelog:
  -s390: include complete 3270 console driver crash patch (Jan Glauber) [183649]
  -fix an oops condition in ipoib (Doug Ledford) [233301]
  -ppc: fix lpar is hung after soft reset or initiating system dump via HMC (Janice Girouard) [234339]
  -fix C-state divisor not functioning correctly on Greyhound (Bhavana Nagendra) [235442]
  -revert: support for p-state transitions on Intel and support for ACPI 3.0 _PSD method


author: Don Howard <dhoward@redhat.com> [2.6.9-53]
changelog:
  -e1000: ensure that rx unit is started (Jeff Garzik) [234370]
  -e1000: fix jumbo frame performance issue (Andy Gospodarek) [233988]
  -make version & release info available at compile time (Konrad Rzeszutek) [232526]
  -revert: prevent rmmod of qla2nnn when it is in use (Tom Coughlan) [234260]
  -tg3: fix bug when bringing up bond iface in balanced-alb mode. (Andy Gospodarek) [216895]
  -diskdump: fix regression with megaraid_sas (Nobuhiro Tachino) [234850]
  -x86: Make sure hpet_address is 0 when any part of HPET initialization fails (Brian Maly ) [231382]


author: Jason Baron <jbaron@redhat.com> [2.6.9-52]
changelog:
  -fix boot panic on >=16 cpu on Intel microcore platforms (Brian Maly) [221479]
  -ppc64: fix out of tree builds (Janice Girouard) [209852]
  -ppc64: fix system drops to xmon when qla3xxx module is removed (Konrad Rzeszutek) [231627]
  -fix high TCP latency with small packets (Thomas Graf) [229907]
  -fix usb ports don't recover after overcurrent (John Feeney) [231226]
  -cciss: driver bug fixes (Tom Coughlan) [196628]
  -fix mptscsih_doDv panic when checking disk in RAID volume (David Milburn) [231909]
  -add PowerEdge R900 pci=bfsort automatically (John Feeney) [233281]


author: Jason Baron <jbaron@redhat.com> [2.6.9-51]
changelog:
  -tty: fix possible double idr index freeing (Aristeu Rozanski) [214188]
  -Fix typo in the qla1280 reset (George Beshers) [217886]
  -blacklist SEAGATE tape drive (Chip Coldwell) [197381]
  -Fix off by one error in mthca driver (Doug Ledford) [233086]
  -Fix ipv6 OOPS triggerable (Neil Horman) [233114]
  -ppc: fix ehea oops during TCP+IO stress testing (Janice Girouard) [232944]
  -fix tux overflow (Jason Baron) [229717]
  -add one more PCI ID for ICH9 (Geoff Gustafson) [197011]


author: Jason Baron <jbaron@redhat.com> [2.6.9-50]
changelog:
  -V4L: use GFP_DMA when allocating memory for mmap (Aristeu Rozanski) [179146]
  -nfs4: fix client panics (Steve Dickson) [226983]
  -fix panic in nfs4_get_sb  (Jeff Layton) [229780]
  -autofs4: add missing hunk in "automounter cannot shutdown when timeount=0" patch (Ian Kent) [199977 205836]
  -add ipr driver back to ppciseries kernel (Janice Girouard) [230353]


author: Jason Baron <jbaron@redhat.com> [2.6.9-49]
changelog:
  -Increase number of e820 entries hard limit from 32 to 128 (Larry Woodman) [218094]
  -fix GoVault not accessible due to reset failure on ata_piix (Konrad Rzeszutek) [195730 207148]
  -additional devices added to pci bfsort whitelist (Andy Gospodarek) [213948]
  -Fix key serial number collision problem (David Howells) [227495] {CVE-2007-0006}
  -fix audit panic on watched files (Eric Paris) [223129] {CVE-2007-0001}
  -fix pcmcia panics on Sun Bladeserver (Brian Maly) [204914]
  -flush icache early when loading module (Doug Chapman) [227898]
  -fix panic on boot with certiain intel sound cards (Jason Baron) [228059]
  -libata: make HDIO_DRIVE_TASK ioctl to return ATA registers to user space (Jun'ichi "Nick" Nomura) [220836]
  -ppc: fix sctu Data buffer miscompare (Janice Girouard) [225219]
  -fix icmp oops in sctp (Neil Horman) [223818]
  -Fix 8139cp netconsole and tcpdump (Chris Lalancette) [229287]
  -ppc: fix install to detect SATA DVD-ROM drive (Janice Girouard) [229333]
  -fix reset bugs in qla4xxx (Mike Christie) [228416]
  -fix BUG_ON() panic in __kmap_atomic() (Jerome Marchand) [223851]
  -wacom: support new tablets (Aristeu Rozanski) [228531]


author: Jason Baron <jbaron@redhat.com> [2.6.9-47]
changelog:
  -remove extra __ip_vs_conn_put() for incoming ICMP (Jeff Burke) [167398 220149]
  -ppc: fix ehea driver fails to process incoming TCP packets if MCS value on HMC>1 (Janice Girouard) [224201]
  -ppc: fix ehea driver unstable due to possible nullpointer access (Janice Girouard) [224246]
  -ppc: ehea driver must use new method to determine available ports (Janice Girouard) [225470]
  -ppc: fix ehea driver produces misleading log messages (Janice Girouard) [225509]
  -add ioctls to mpt fusion (Tom Coughlan) [193759]
  -ppc: fix GA7SP3:HV2++:errinjct for scsi causes system to go into debugger (Janice Girouard) [198813]


author: Jason Baron <jbaron@redhat.com> [2.6.9-46]
changelog:
  -sctp: fix oops that occurs with non-linear skbs (Neil Horman) [221127]
  -diskdump: fix up aacraid support (Nobuhiro Tachino) [170857]
  -optimize writer path in timer_interpolator_get_counter() (Prarit Bhargava) [220639]
  -add Promise EX8650/4650 support (Jun'ichi "Nick" Nomura) [217852]
  -s390 netiucv: avoid duplicate iucv-interfaces to the same peer (Jan Glauber) [202251]
  -cciss: add scsi error handlers (Tom Coughlan) [162972]


author: Jason Baron <jbaron@redhat.com> [2.6.9-45]
changelog:
  -ia64: megaraid_mbox unaligned accesses (Chip Coldwell) [222417]
  -ppc: fix pci-e network adapter (Janice Girouard) [223551]
  -ppc: update ehea driver (anice Girouard) [223845]
  -ext3: return ENOENT from ext3_link when racing with unlink (Eric Sandeen) [196915]
  -fix elf core file truncated at 2GB (Guy Streeter) [224243]
  -ipmi: fix driver not seeing extra IPMI nodes on multinode x460 (Konrad Rzeszutek) [224429]
  -fix MegaRAID SATA RAID 150-4/6 do not support 64-bit DMA (Chip Coldwell) [210852]
  -fix for accounting in multi-threaded processes (Ernie Petrides) [219319] 
  -nfs: fix mounts freeze (Peter Staubach) [212398]
  -wacom: support new tablets (Aristeu Rozanski) [180545]
  -fix shost->host_busy is set to -1 (Chip Coldwell) [176879]
  -correct error message "event field not found" (Pete Zaitcev) [202010]
  -fix mptscsi adds DID_BUS_BUSY host status when scsi status of BUSY is returned (Chip Coldwell) [197158]
  -device mapper mirroring - remove error message (Jonathan Brassow) [223865]


author: Jason Baron <jbaron@redhat.com> [2.6.9-44]
changelog:
  -fix support CPU frequency scaling in the kernel (Konrad Rzeszutek) [222081]
  -sata: more updates (Jeff Garzik) [223280]
  -allow alternate nic ordering to allow 2.4 ordering (Andy Gospodarek) [213948]
  -fix missing PCI Device in aic79xx driver (Chip Coldwell) [220602]
  -fix HP laptops failing to reboot (Sachin Prabhu) [184523]
  -add support for 3ware 9650SE SATA-RAID (Chip Coldwell) [220850]
  -cpqarray fix failure to detect arrays (Chip Coldwell) [222695]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.40]
changelog:
  -add PCIe power management quirk (Geoff Gustafson) [197009]
  -MCE Thresholding support for family 0x10 AMD processors (Bhavana Nagendra) [196894]
  -i386: acpi_skip_timer_override for NVIDIA (Brian Maly) [193937 200412]
  -fix aic79xx module removal path (David Milburn) [212388]
  -fix stack overflow due to recursion between scsi_request_fn and blk_requeue_request (Neil Horman) [202848]
  -Fix JBD race in t_forget list handling (Eric Sandeen) [176738]
  -Prevent userspace EOVERFLOW errors from increasing i_ino value (Jeff Layton) [213652 215549]
  -minimal changes to allow Lustre client support (Eric Sandeen) [196637]
  -Efficient translation of intel binaries to ppc (Janice Girouard) [196794]
  -Update MPTSAS driver to v3.02.73rh (Konrad Rzeszutek) [180936 196789 193760 196782]
  -Support the LSI MegaRAID driver (Konrad Rzeszutek) [196790 193056]
  -avoid ESB2 IDE interrupt storm (Kimball Murray) [218498]
  -new ppc Host Ethernet Adapter Device Driver (Janice Girouard) [196774]
  -USB equipment cannot be used on certain Toshiba systems (Brian Maly) [170134]
  -Support for p-state transitions on Intel and support for ACPI 3.0 _PSD method (Brian Maly) [196798]
  -Backport the 'IBM eBus patch' from kernel 2.6.16 and 2.6.17 (Janice Girouard) [196799]
  -ext3: fix READA failures cause "directory hole" (Chip Coldwell, Stephen Tweedie) [213921]
  -Audit: 196233: correct/update audit filter rule comparison (Eric Paris) [196233]
  -fix bre channel cable-pull bug (Chip Coldwell) [163818]
  -Fix page_is_ram on x86_64 to always return 1 (Chris Lalancette) [221273]
  -proc: fix readdir race fix (Nobuhiro Tachino) [212631]
  -Add netdump support to 8139cp driver (Chris Lalancette) [217932]
  -powernow: remove __initdata from tscsync (Prarit Bhargava) [221975]
  -fix incorrect cache_decay_ticks calculation on x86_64 and i386 (Jason Baron) [192395]
  -aio: fix kernel panic in aio_free_ring (Jeff Moyer) [220971] {CVE-2006-5754}
  -Fix for missing headers in kernel-xenU-devel (Don Dutile) [219538]
  -fix ext2_check_page denial of service (Eric Sandeen) [217021] {CVE-2006-6054}
  -PPC64: Return correct value from request_irq() (David Howells) [172436]
  -dm: stalls on resume if noflush is used (Milan Broz) [221386]
  -NFSv4 client doesn't return a delegation before removing a file (Steve Dickson) [155929]
  -fix listxattr syscall can corrupt user space programs (Eric Sandeen) [220677] {CVE-2006-5753}
  -revert: Update Emulex lpfc to 8.0.16.30, and lpfcdfc to 2.0.18


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.39]
changelog:
  -fix ohci unrecoverable error (Konrad Rzeszutek) [182433]
  -x86_64: clear_kernel_mapping: mapping has been split-fix memory leak (Larry Woodman) [202027]
  -dm mirror: better handling of writes after log device failure (Jonathan Brassow) [199622]
  -export iscsi portal and current address (Mike Christie) [219730]
  -ext3: fix ext3_readdir READA failures cause "directory hole" (Chip Coldwell) [213921]
  -edac: fixes and updates (Aristeu Rozanski)
  -dm snapshot: fix metadata error handling (Milan Broz) [215945]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.38]
changelog:
  -fix errant PCI Address space collision messages (Janice Girouard) [215823]
  -bonding: link status not always reported correctly (Andy Gospodarek) [212392]
  -fix stream of device not ready messages from 'hald' GoVault access attempts (Konrad Rzeszutek) [207750]
  -add autofs5 (Ian Kent) [199977]
  -device-mapper mirroring - fix sync status change (Jonathan Brassow) [217581]
  -nfs: correct acl permisssions (Peter Staubach) [214996]
  -netpoll: avoid extraneous printks when freeing skbuffs from interrupt context (Neil Horman) [172476]
  -disable MSI for PXH6700/6702 due to quirk (Geoff Gustafson) [168501]
  -s390: build sclp_cpi as a module (Jan Glauber) [194338]
  -bnx2: driver upgrades and fixes (Andy Gospodarek) [202053 217690 212055]
  -Include the qla3xxx networking driver (Konrad Rzeszutek) [209341]
  -Update cciss driver to 2.6.11.RH1 (Tom Coughlan) [196628]
  -Prevent rmmod of qla2nnn when it is in use (Tom Coughlan) [203505]
  -fix oops in st code when tape is deleted via sysfs while in use (Doug Ledford) [164649]
  -Update Emulex lpfc to 8.0.16.30, and lpfcdfc to 2.0.18 (Tom Coughlan) [196780]
  -tg3: improve 5704s autoneg (John Linville) [219328]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.37]
changelog:
  -add qlogic iscsi driver (Mike Christie) [180363]
  -fix laptop shutdown behavior when closing lid (Jim Paradis) [154061]
  -s390: qeth driver fixes (Jan Glauber) [104646 200166 202047 212176]
  -add IBM Advanced Management Module 2 to the whitelist for USB storage for devices with multiple LUNs (Konrad Rzeszutek) [196809]
  -serial fifo fixes (Alan Cox) [168845]
  -update SCSI blacklist for HP and SEAGATE Tape Devices (Chip Coldwell) [197381]
  -fix oops in md device stop code (Doug Ledford) [199304]
  -fix race condition in sys_mincore() (Doug Chapman) [180663] {CVE-2006-4814}
  -fix console when no "console=" arguments are specified (Chris Lalancette) [220949]
  -fix oops bug in cdev_put() (Doug Ledford) [164649]
  -eClipz: CAS call crashing firmware (Janice Girouard) [220486]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.36]
changelog:
  -s390: fix panic in do_sync_write()/do_sync_read() (Jan Glauber) [196348]
  -tg3: update to 3.64-rh (John Linville) [196786 198003 202063]
  -dm: add ioctl support for mapped devices (Milan Broz) [168801]
  -fix "Hardware P-state driver for AMD processors" for up kernel (Bhavana Nagendra)
  -dm mirror: fix deadlock in kmirrord when dirty log on mirror itself (Milan Broz) [186950]
  -dm: store and use md pointer in every table (Milan Broz) [199622]
  -dm: fix overwriting of extra slot in bi_io_vec (Milan Broz) [219615]
  -dm: fix suspend error path (Milan Broz) [219616]
  -dm multipath: rr path order is inverted (Milan Broz) [219630]
  -dm: add common biosets code (Milan Broz) [215939]
  -dm mirror: remove trailing space from table (Milan Broz) [215941]
  -revert: nfs: fix permission handling for truncate calls


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.34]
changelog:
  -xen: add Paravirt framebuffer support (Chris Lalancette) [216721]
  -xen: rebase drivers/xen & hv calls to RHEL5 xen (Don Dutile, Chris Lalancette) [215838 201622 201781]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.33]
changelog:
  -make sys_signal() properly initialize 'sa_mask' (Anil Keshavamurthy) [191780]
  -disable mmconf for DL585 G2 systems (Jim Paradis) [190123]
  -Add internal 64-bit inode number support (David Howells, Alexander Viro) [171702]
  -hvsi: fix terminal possible terminal hangs (Janice Girouard) [201723]
  -add support Intel ICH9 chipset (Konrad Rzeszutek) [197011 214488]
  -blacklist Raritan KVM USB dongle (John Feeney) [204063]
  -Add packet size checks for CAPI messages (Marcel Holtmann) [218602] {CVE-2006-6106}


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.32]
changelog:
  -protect HVC driver against N_TTY line discipline bug (David Howells) [146126]
  -SuperTrak - add hard reset functionality (David Milburn) [199589]
  -r8169: update to 2.2LK (John Linville) [181653]
  -x86_64: fix incorrect threshold for timekeeping 'lost ticks' error reporting (Brian Maly) [159733]
  -remove unstable cpu speed scaling driver (longhaul) (Brian Maly) [172730 186074]
  -change "IW_HANDLER_VERSION" to 5 to reflect the interface version better (John Linville)
  -s390: make cmm driver actually useful (Jan Glauber) [198793 164430 165096]
  -s390: fix recovery after link status changes (Chris Snook) [211486]
  -raise CONFIG_SERIAL_8250_NR_UARTS to 64 (Aristeu S. Rozanski F.) [189859]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.31]
changelog:
  -edac: add K8 support (Aristeu Rozanski) [200846]
  -fix zlib_inflate oops due to corrupted cramfs image (Eric Sandeen) [216958] {CVE-2006-5823}
  -add diskdumpo support for ibmvscsi driver (Janice Girouard) [195910]
  -spin_trylock and spin_is_locked UP fixes (Andy Gospodarek) [218934]
  -Fix netpoll arp_reply to respond to the router that asked (Chris Lalancette) [218664]
  -hfs: return error code in case of error (Eric Paris) [217011] {CVE-2006-6056}
  -xen: fix out of tree kernel builds (Chris Lalancette) [209850]
  -ide: add support to VIA VT8251 (Aristeu Rozanski) [208648]
  -dm-crypt: fix possible data corruption if running over md-raid5 (Milan Broz) [218266]
  -azx: re-enable internal speaker on xw4400 (John Linville) [203133]
  -e1000: fix ipmi breakage (John Linville) [211393]
  -netfilter: Add some flag combinations to ip contrack to detect valid tcp flag sets (Neil Horman) [219149]
  -e1000: fix WoL (restore reboot notifier code) (John Linville) [219152]
  -remove microcode size check (Geoff Gustafson) [214888]
  -diskdump: add selectable dump filtering (Akira Imamura) [215617]
  -ipmi: add schedule() in kthread (Peter Martuccelli) [204940]
  -x86_64: fix make xconfig (Jason Baron) [170658 170795 175869]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.30]
changelog:
  -emu10k1: add support to Audigy2 ZS Cardbus (Aristeu S. Rozanski F.) [179147]
  -ipmi: fix oops in ipmi_si (Peter Martuccelli) [211920]
  -8250_pci: add suport to Sealevel card (Aristeu S. Rozanski F.) [193185]
  -nfs: fix kernel BUG() at locks:1799 (Sachin Prabhu) [218777]
  -Break HID resubmission on EHCI too (Pete Zaitcev) [184396]
  -fix get_fdb_entries() integer overflow (Thomas Graf) [216452] {CVE-2006-5751}
  -fix lockup via /proc/net/ip6_flowlabel (Thomas Graf) [213214] {CVE-2006-5619}
  -ipr drivers updates for Native SAS and SATA device support (Janice M. Girouard) [196762]
  -Update driver ipr for supporting SAS/SATA devices (Janice M. Girouard) [210477]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.29]
changelog:
  -fix page allocation failure due to fragmentation in sock_alloc_send_pskb() (Larry Woodman) [198796]
  -PCI: disable MSI on known quirky chipsets (Bruce Allan) [185405]
  -dm snapshot: allow zero chunk_size (Milan Broz) [215944]
  -dm snapshot: fix metadata writing when suspending (Milan Broz) [215947]
  -device mapper: fix alloc_dev error path (Milan Broz) [215931]
  -dm multipath: dereferencing uninitialized pointer in multipath_ctr (Milan Broz) [217050]
  -device mapper: prevent removal of open devices (Milan Broz) [217726]
  -diskdump: fix error message after MODE_SENSE using megaraid_sas driver (Nobuhiro Tachino) [196468]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.28]
changelog:
  -Fix performance on 10G ethernet (Ben Woodard) [208355]
  -e1000: update to 7.2.7-k2 (John Linville) [196781 196999 201219 202046 203685 203833 194408]
  -correct 32bit stime on 64bit kernel (Guy Streeter) [216513]
  -Switch IPSEC SA's over properly (Jeff Layton) [176455]
  -fix lack of irq blocking when uidhash_lock is taken (Ernie Petrides) [216771]
  -fix ext3fs_dirhash denial of service (Eric Sandeen) [217030] {CVE-2006-6053}
  -mask cmci immediately on switching to cmcp (Kei Tokunaga) [209149]
  -prevent incorrect error in __generic_file_aio_read() (Larry Woodman) [214778]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.27]
changelog:
  -nfs: add nfs performance metrics (Steve Dickson) [199263]
  -xen: fix profiling (Rik van Riel) [215985]
  -xen: add cpu hotplug (Chris Lalancette) [207672 207673]
  -sata: updates to 2.6.19-rcX (Jeff Garzik)
  -Fix flowi clobbering (Chris Lalancette) [216880]
  -ipv6 addrconf: fix double unlock (Neil Horman) [212122]
  -sctp: backport more agressive peer window closing on send (Neil Horman) [207933]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.26]
changelog:
  -s390: fix hypfs crash when specifying invalid mount option (Josef Whiter) [208191]
  -bonding: fix primary interface initialization problem with active-backup bond (Andy Gospodarek) [208362]
  -xen: fix ballooning up with mem=NNNm boot argument (Rik van Riel) [215615]
  -input: fix poll() for connection and disconnection (Aristeu Rozanski) [214711 180545]
  -net: fix dev_queue_xmit to not call local_bh_enable in out_kfree_skb error path (Neil Horman) [212144] {CVE-2006-6535}
  -SCTP: Fix peeloff race/oops (Neil Horman) [191332]
  -fix for page/buffer race in pagevec_strip() (Ernie Petrides) [214483]
  -audit: close memory leak (Sachin Prabhu) [216667]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.25]
changelog:
  -x86_64: make cpu frequency display in /proc/cpuinfo consistent (Anil Keshavamurthy) [193132 182493]
  -ppc: add support for eClipz (Janice Girouard) [199695]
  -ia64: fixup kprobes fault (David Smith)
  -nfs: randomize RPC XIDs (Peter Staubach) [186604]
  -hwmon: include support for the smsc47b397 sensors (Eric Paris) [196641]
  -usb: PWC driver update (Pete Zaitcev) [179148]
  -x86_64: fix perms/range of vsyscall vma in /proc/*/maps (Ernie Petrides) [210779]
  -i386: fix oops on Machine Check (Neil Horman) [203894]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.24]
changelog:
  -nfs: disable v2 acl support (Peter Staubach) [191831]
  -ia64: sn code refresh (Greg Edwards) [196927 196931]
  -ipv6: fix ECN breakage on big-endian (Alexander Viro)
  -fix for zeroed child thread tids in core dumps (Ernie Petrides) [189236]
  -catch blocks beyond pagecache limit in __getblk_slow() (Eric Sandeen) [214288 206328] {CVE-2006-5757}
  -Compute checksum properly in netpoll_send_udp (Chris Lalancette) [214544]
  -x86_64: Make sure hpet_address is 0 when any part of HPET initialization fails (Brian Maly ) [207150]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.23]
changelog:
  -Powernow p-state updates (Bhavana Nagendra) [176274]
  -Add support for RDTSCP and P-state invariant TSC (Bhavana Nagendra) [196864]
  -s390: add monreader device driver (Jan Glauber) [196806]
  -s390: fix channel measurement facility data inconsistencies (Jan Glauber) [196058]
  -ipv6: fix deadlock in ipv6 duplicate address detection code (Neil Horman) [212122]
  -fix EOVERFLOW in SIOCGIFHWADDR (Doug Ledford) [180980 202389]
  -fix multicast on ipoib interfaces (Doug Ledford) [211202]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.22]
changelog:
  -Fix BUG() check in invalidate_dquots() (David Milburn) [209639]
  -s390: dasd driver update (Jan Glauber) [196778 180632 202879]
  -s390: tape driver update (Jan Glauber) [196766]
  -s390: fix possible deadlock in appldata (Jan Glauber) [179666]
  -xen: fix vm86old crash (Chris Lalancette)
  -azx: support broadwater platforms (John Linville) [197000 202735 196972]
  -ipw2200: Filter unsupported channels out in ad-hoc mode (John Linville) [197010]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.21]
changelog:
  -dm snapshot: fix full snapshot removal causes a panic (Milan Broz) [204791]
  -s390: common i/o layer update (Jan Glauber) [195333 200463 200466 201959 201962]
  -usb: fix ohci related hangs (Pete Zaitcev) [197722 198858]
  -s390: support rebooting from SCSI devices (Jan Glauber) [196796]
  -s390: fix 3270 console driver crash (Jan Glauber) [183649]
  -Prevent i386-hugemem kernel freeze during kernel panic output (Larry Woodman) [199559]
  -x86_64: fix uniprocessor boot panic (Jason Baron) [198657]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.20]
changelog:
  -fix do_swap_page() can map random data if swap read fails (Peter Zijlstra) [198749]
  -force mount UDF_PART_FLAG_READ_ONLY filesystem with MS_RDONLY (Eric Sandeen) [182302]
  -nfsv4: fix up another missing nfsv4 error conversion in mount path (Neil Horman) [185306]
  -update ipt_recent module to latest version to fix jiffies LONG_MAX confusion (Neil Horman) [202412]
  -Remove duplicate dput in sysfs (Prarit Bhargava) [207885]
  -s390: fix information leak (Jan Glauber) [209435] {CVE-2006-5174}
  -prevent hang on shutdown with busy NFSv4 mount (Jeff Layton) [201710]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.19]
changelog:
  -fix information leak in __block_prepare_write() (Eric Sandeen) [207463] {CVE-2006-4813}
  -xen: enable CONFIG_CRASH for crash debugging of live system (Chris Lalancette)
  -fix fdset race between open() and fork() (Eric Sandeen) [199478 201563]
  -ia64: export number of actual processors for the installer (Prarit Bhargava) [201328]
  -serial: tickle NMI watchdog on console write (Aristeu S. Rozanski F.) [197943]
  -sky2: update to version 1.6 from upstream (John Linville) [191912 198808]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.18]
changelog:
  -x8664: Add physflat APIC support for x86_64 (Jim Paradis) [192760]
  -honor hpet irq overrides on nvidia (Prarit Bhargava) [197678]
  -ext3: correctly delete orphaned inodes under direct-IO (David Howells) [203897]
  -autofs4 - fix "Busy inodes ...." at umount (Ian Kent) [199510]
  -x8664: fix exec of 32-bit process vs. read of /proc/pid/maps race (Eric Sandeen) [178981]
  -initialize partition policy in add_partition() (Chris Snook) [207440]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.17]
changelog:
  -create proper /proc/<pid>/maps permissions for setuid programs (Jason Baron) [198279 165351]
  -avoid poll() failing on EINVAL unnecessarily (Chris Snook) [204691]
  -NFS is revalidating directory entries too often (Steve Dickson) [183697]
  -backport loop.c changes to support write method for GFS (Eric Sandeen) [187930]
  -fix for shmdt() mishandling of unusual shm segments (Ernie Petrides) [180526]
  -ia64: fix local DoS with corrupted ELF (Dave Anderson) [205335] {CVE-2006-4538}
  -tg3: fix init failure - unable to obtain MAC address (Andy Gospodarek) [208922]
  -xen: Fix do_arch_prctl bug (Chris Lalancette) [207669]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.16]
changelog:
  -x86: create Xen guest kernels (Rik van Riel, Chris Lalancette) [201622 204685]
  -x86_64: create Xen guest kernels (Rik van Riel, Chris Lalancette) [201781]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.15]
changelog:
  -make fcntl(...,F_GETLK...) return the pid when a file is on NFS (Jeff Layton) [197259]
  -make sure that d_off != 0 for '.' and '..' on ext3 with dir_index enabled (Jeff Layton) [197930]
  -allow Opterons to synchronize p-state when using TSC as time source (Bhavana Nagendra) [196868]
  -fix NS message send failure for NICS with long initalizations (Neil Horman) [184293]
  -fix to properly increment the IpInAddrErrors SNMP counter (Neil Horman) [199249]
  -ia64: add iomap interfaces (Guy Streeter) [203920]
  -re-order scheduler runqueue locking to fix deadlocks (Anil Keshavamurthy) [197382]
  -prevent regular users to change keymaps on console (Aristeu S. Rozanski F.) [172357]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.14]
changelog:
  -allow hotplug to support PCI-to-PCI Bridges (Prarit Bhargava) [180525]
  -ia64: ptrace speedups (Anil Keshavamurthy)
  -fix phantom increasing load accounting bug (Chris Snook) [207244]
  -fix netfilter do_add_counters race (Thomas Graf) [191698] {CVE-2006-0039}
  -fix ip over atm clip_mkip may dereference freed pointer (Thomas Graf) [206265] {CVE-2006-4997}
  -ppc64: Clear EN_ATTN bit in PPC970 HID0 (David Woodhouse) [201684] {CVE-2006-4093}


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.13]
changelog:
  -edac: add option to force use of BIOS hidden function (Aristeu S. Rozanski F.) [185762]
  -correct collision threshold mask in sky2 driver (Neil Horman) [177991]
  -nfs: fix wrong fragment size on statvfs (Amit Gud) [189238]
  -fix sector_div for 64 bit arches to avoid oops in raid0_make_request (Neil Horman) [198495]
  -fix overflow in scsicam_bios_param (Chip Coldwell) [193068]
  -fix sys_perfmonctl() file descriptor reference count issue (Anil Keshavamurthy) [204360] {CVE-2006-3741}
  -fix oops occuring from malformed ULE packet (Neil Horman) [204912] {CVE-2006-4623}
  -x86_64: increase nmi watchdog timeout from 5 to 30 seconds (Larry Woodman) [205722]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.12]
changelog:
  -fix ext2 readdir f_pos revalidation logic (David Milburn) [193877]
  -nfs: fix permission handling for truncate calls (Jeff Layton) [191533]
  -fix connection leak in ipvs netfilter code (Neil Horman) [200415]
  -pcnet32: get correct mac address (John Linville) [188813]
  -set sym53c875 pci configuration size to prevent parity errors (David Milburn) [206182]
  -fix deadlock in serial while using low_latency (Aristeu S. Rozanski F.) [197951]
  -sctp: create abort messages properly (Neil Horman) [204460] {CVE-2006-4535}
  -ipw2[12]00: restore get_wireless_stats pointer (John Linville) [198820]
  -ipw2200: accept broadcast MAC traffic (John Linville) [203421]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.11]
changelog:
  -fix CONFIG_ROOT_NFS compile failure (Steve Dickson) [177624]
  -fix replacing zero length file over NFS doesn't update mtime (Peter Staubach) [193621]
  -fix for netpoll recursion deadlock (Neil Horman) [194055]
  -ia64: fix can't boot with new f/w which supports dynamic reconfiguration (Anil Keshavamurthy) [187133]
  -fix Megaraid driver fails to reset when adapter is in cluster mode (David Milburn) [149620]
  -allow nfsd to mount from devices with higher minors (Amit Gud) [143897]
  -fix sun partitions over 1TiB (Eric Sandeen) [199760]
  -Prevent deadlock in audit system when dealing with large rule sets (Eric Paris) [191069]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.10]
changelog:
  -audit locking fixes (Aristeu S. Rozanski F.) [187520]
  -ia64: fix fls() (Guy Streeter) [198693]
  -Fix ipv6 route locking (David Miller) [167715]
  -add Hitachi SAN SCSI whitelist entries (David Milburn) [199633]
  -Add AMD specific odd-core/quad-core support (Bhavana Nagendra) [176276]
  -fix unmap_huge_page_range for x86_64 and ia64 (Neil Horman) [182153]
  -Update CIFS to 1.45 (Steve Dickson) [204281 189434 180491 187295 187183 199167]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.9]
changelog:
  -Fix panic in hugetlb_page code (Prarit Bhargava) [194358]
  -PCI bus0 anomolies fix for Horus system (Bhavana Nagendra) [192476]
  -Add diskdump support for sata_nv (Nobuhiro Tachino) [196156]
  -fix panic when netconsole is loaded and forcedeth put in promiscuous mode (Andy Gospodarek) [205483]
  -bonding: use signed type to catch return code from ->get_settings (John Linville) [196068]
  -amd8111e: fix NAPI interrupt in poll (John Linville) [197949]
  -ixgb: update to 1.0.109-k4 (John Linville) [180907]
  -Support for additional Audigy4 Card (Andy Gospodarek) [204392]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.8]
changelog:
  -fix NFS cache consistency when a file is mmap'ed (Jeff Layton) [186142]
  -fix uhci_hcd races (Pete Zaitcev) [181784]
  -add oprofile kernel support for Woodcrest (Ernie Petrides) [198263]
  -fix for nested execution of on_each_cpu() functions (Ernie Petrides) [168301 185316]
  -fix wrong error code on interrupted close syscalls (Ernie Petrides) [200086]
  -tux symlink fixes (Ingo Molnar) [187731]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.7]
changelog:
  -usb: calculate hid interval interval once (Pete Zaitcev) [181669]
  -fix use after free in scsi/sr.c (Jeff Layton) [161591]
  -restric permission() to return -EACESS if no execute bits are set (Jeff Layton) [198682]
  -fix nvidia forcedeth WOL to respond to the correct MAC addresses (Andy Gospodarek) [199499]
  -add support for LSI Logic SAS ZCR (Chip Coldwell) [198196]
  -Fix memory leak in Fix leak in mousedev_release() (Pete Zaitcev) [177429]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.6]
changelog:
  -fix erroneous printk for 'missing' mptable (Eric Paris) [191283]
  -fix persistent slowdown in sctp (Neil Horman) [194056]
  -fix ipv6 ref count leaks (Neil Horman) [190019]
  -fix crash from NULL deref in kill_proc_info (Neil Horman) [195549]
  -Fix hugepage crash on failing mmap (Larry Woodman) [165345] {CVE-2005-4811}
  -x86_64: Properly flush pmd's (Jim Paradis) [155081]
  -x86_64: Access MPC table via proper virtual address (Jim Paradis) [201058]
  -x86_64: Properly initialize boot_cpu_id (Jim Paradis) [198657]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.5]
changelog:
  -IDE piix: fix locking in piix_tune_drive() (Aristeu S. Rozanski F.) [183211]
  -fix bio_copy_user() leak ((Aristeu S. Rozanski F.) [192062]
  -Fix memory corruption in OSC calls (Prarit Bhargava) [185303]
  -sctp: ipv6 inetaddr register separate notifier (Chris Lalancette) [203942]
  -fix io error propagation in DIO (Josef Whiter) [202186]
  -jbd: fix bug in journal_commit_transaction (Eric Sandeen) [158363 188620]
  -serial: fix serial8250_console_write() locking (Aristeu S. Rozanski F.) [166591]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.4]
changelog:
  -serial: tickle NMI watchdog on console write (Aristeu S. Rozanski F.) [197943]
  -ia64: add option to disable 'unaligned access' messages (Aristeu S. Rozanski F.) [180755]
  -sctp: Fix data overflow in iovec computation (Neil Horman) [202122] {CVE-2006-3745}
  -fix O_DIRECT writes to memory holes can leak a page reference (Jeff Moyer) [191736] {CVE-2004-2660}
  -fix sctp chunk length overflow (Neil Horman) [192636] {CVE-2006-1858}
  -fix possible DoS in write routine of ftdi_sio driver (Pete Zaitcev) [197610] {CVE-2006-2936}
  -fix typo in drivers/cdrom/cdrom.c (Chip Coldwell) [197670] {CVE-2006-2935}
  -don't shut down on bogus filehandles from nfs clients (Eric Sandeen) [199172] {CVE-2006-3468}
  -fix for prevention of setuid/gid on /proc/<pid> files (Ernie Petrides) [198973] {CVE-2006-3626}
  -fix SNMP NAT netfilter memory corruption (Thomas Graf) [192632] {CVE-2006-2444}
  -fix for non-hugemem x86 DoS w/bogus %ds/%es values (Ernie Petrides) [196280] {CVE-2006-2932]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.3]
changelog:
  -fix cpu_khz when booting with clock=pit (Norm Murray) [191455]
  -x86_64: Fix race in free_iommu (Jim Paradis) [189963 191552]
  -fix neighbour leak blocking netdevice removal (Andy Gospodarek) [193762]
  -fix possible memory leak during mcfg setup (Konrad Rzeszutek) [191039]
  -fix Montecito ITC sync error (Anil Keshavamurthy) [192962]
  -Add scan of PHY 0 to forcedeth driver (Prarit Bhargava) [197797]
  -acpi parse fix (Jim Paradis) [202130]
  -optimize: ia64: add cow icache flush (Anil Keshavamurthy) [194469]


author: Jason Baron <jbaron@redhat.com> [2.6.9-42.2]
changelog:
  -fix possible get_nodes() crash (Ernie Petrides) [184510 183665] {CVE-2006-0557}
  -x86_64: Remove incorrect global_flush_tlb() optimization (Jim Paradis) [186325]
  -fix mprotect to not allow permission subversion (Jason Baron) [190073] {CVE-2006-2071}
  -fix vm deadlock under heavy swap conditions (Neil Horman) [193695]
  -fix QLogic InfiniPath problem with >= 4GB memory (Konrad Rzeszutek) [198847]
  -set UniProcessor i386 kernel to use the 'noapic' option for Unisys ES7000/5xx (Konrad Rzeszutek) [196723]
  -Fix reboot on IBM Pizzaro machines (Bastien Nocera) [200111]
  -use upstream version of write implies read for mmap (Jason Baron)


author: Joe Orton <jorton@redhat.com> 2.0.52-25.ent
changelog:
  - mod_rewrite: extend maximum text map line length to 8K (#185029)
  - mod_ssl: add SSL_CLIENT_V_REMAIN variable (#163488)


author: Joe Orton <jorton@redhat.com> 2.0.52-22.ent
changelog:
  - worker MPM: add security fix for memory consumption DoS (CVE-2005-2970),
    and bug fixes for handling resource allocation failures (#173509)


author: Joe Orton <jorton@redhat.com> 2.0.52-21.ent
changelog:
  - mod_ssl: add security fix for HTTP-on-SSL-port handling (CVE-2005-3357)
  - mod_imap: add security fix for XSS issue (CVE-2005-3352)


author: Joe Orton <jorton@redhat.com> 2.0.52-19.ent
changelog:
  - mod_ssl: add security fix for SSLVerifyClient (#167194, CVE CAN-2005-2700)
  - add security fix for byterange filter DoS (#167102, CVE CAN-2005-2728)


author: Joe Orton <jorton@redhat.com> 2.0.52-18.ent
changelog:
  - mod_auth_ldap: fix issues with some authn/authz combinations
    (thanks to Jared Jennings, #159289)
  - mod_ldap: fix cache mutex permissions so that locking works
  - mod_ldap: fix child crashes if cache is disabled


author: Joe Orton <jorton@redhat.com> 2.0.52-14.ent
changelog:
  - mod_ssl: add security fix for CRL overflow (CVE CAN-2005-1268)
  - mod_ssl: add fix to enable buffering (upstream #35279)
  - mod_ssl: immediately catch aborted connections (upstream #32699)
  - add htdbm(1) man page (Matt Brubeck, #114080)
  - mod_userdir: add fix for possible memory corruption (upstream #34588)
  - fail build if PIE support could not be enabled


author: Joe Orton <jorton@redhat.com> 2.0.52-13.ent
changelog:
  - fix fd leak if using piped loggers (#157832)
  - fix error messages in piped loggers respawn failure case
  - in children, close read fd of pipe to piped loggers (Jeff Trawick, #127981)
  - mod_ssl: apply ssl-*-shutdown settings correctly (upstream #34452)


author: Joe Orton <jorton@redhat.com> 2.0.52-11.ent
changelog:
  - restore use of $OPTIONS in apachectl again (#115910)
  - mod_ssl: set user from SSLUserName in access hook (upstream #31418)


author: Joe Orton <jorton@redhat.com> 2.0.52-10.ent
changelog:
  - mod_proxy: notice aborted client-connection (#138359)
  - mod_include: fix off-by-one in variable expansion (upstream #32985)
  - require apr with sendfile support on s390 (#146891)


author: Joe Orton <jorton@redhat.com> 2.0.52-8.ent
changelog:
  - apachectl: fix for final RHEL4 libselinux tools location
  - mod_ssl: revert to use builtin passphrase prompt again (#128667)


author: Joe Orton <jorton@redhat.com> 2.0.52-5.ent
changelog:
  - update htsslpass to be a filter rather than exec:
  - refuse to "reload" from init script if $HTTPD -t fails


author: Joe Orton <jorton@redhat.com> 2.0.52-4.ent
changelog:
  - add security fix for CVE CAN-2004-0942 (memory consumption DoS)
  - fix SSLSessionCache comment for distcache in ssl.conf
  - restart using SIGHUP not SIGUSR1 after logrotate
  - add ap_save_brigade fix (upstream #31247)
  - add htsslpass(1) and configure as default SSLPassPhraseDialog (#128677)
  - apachectl: restore use of $OPTIONS
  - apachectl: refuse to restart if $HTTPD -t fails
  - apachectl: run $HTTPD -t in user SELinux context for configtest


author: Joe Orton <jorton@redhat.com> 2.0.50-8
changelog:
  - add improved child reclaim timing logic (#119128/#132360)
  - add BuildRequire zlib-devel for mod_deflate


author: Joe Orton <jorton@redhat.com> 2.0.50-6
changelog:
  - include /etc/sysconfig/httpd template (#112085)
  - pass $OPTIONS in httpd invocations in apachectl (#115910)
  - do not pass $OPTIONS to apachectl from init script
  - start httpd in C locale by default from apachectl


author: Joe Orton <jorton@redhat.com> 2.0.50-5
changelog:
  - move manual configuration into conf.d/manual.conf (#131208)
  - add test_hook from HEAD, -t -DDUMP_CERTS for mod_ssl
  - document AddDefaultCharset change since 1.3 in migration.html


author: Joe Orton <jorton@redhat.com> 2.0.50-4
changelog:
  - start httpd in the C locale by default (#128002)
  - fix CustomLog comments in default httpd.conf (#43223)
  - ensure correct mod_suexec vs mod_userdir hook ordering 
    (Joshua Slive, upstream #18156)


author: Joe Orton <jorton@redhat.com> 2.0.50-3
changelog:
  - update -proxy11 patch
  - explain where suexec went if SuexecUserGroup is used but
    /usr/sbin/suexec is not found


author: Joe Orton <jorton@redhat.com> 2.0.49-8
changelog:
  - split out suexec into httpd-suexec package (#77972)
  - link to system pcreposix.h to fix including httpd.h


author: Joe Orton <jorton@redhat.com> 2.0.49-7
changelog:
  - don't install or use bundled pcreposix.h
  - bump default MaxClients to 256
  - drop default Timeout to 2 minutes
  - merge from upstream:
   * add fix for VirtualHost multiple address handling (Jeff Trawick)


author: Joe Orton <jorton@redhat.com> 2.0.49-5
changelog:
  - remove comments about ScoreBoardFile in httpd.conf
  - avoid redundant name lookup in pod code
  - mod_headers: add %{...}s feature for using SSL variables
  - mod_autoindex: don't truncate output on stat() failure (#117959)
  - mod_ssl: fix shmcb corruption with small caches (Geoff Thorpe)
  - mod_ssl: security fix for overflow in FakeBasicAuth (CVE CAN-2004-0488)
  - mod_deflate: fix memory consumption for large responses
  - check that suexec is setuid root (André Malo)
  - worker: add ThreadStackSize (Jeff Trawick) and ThreadGuardSize directives


author: Joe Orton <jorton@redhat.com> 2.0.49-4
changelog:
  - make "noindex" page valid XHTML 1.1 (Pascal Volk, #122020)
  - fix SEGV with no Listen directives (Michael Corcoran)
  - mod_cgi: synch with 2.0 backport proposed upstream


author: Joe Orton <jorton@redhat.com> 2.0.49-3
changelog:
  - conflict with older pcre (#121531)
  - include mod_ext_filter
  - mod_cgi: handle concurrent stderr/stdout from script


author: Joe Orton <jorton@redhat.com> 2.0.49-2
changelog:
  - mod_ssl: fix session cache memory leak (Madhu Mathihalli)
  - mod_ssl: fix SEGV when trying to shutdown during pool cleanup
  - merge the mod_proxy HTTP/1.1-compliance fixes
  - apply fix for #118020


author: Joe Orton <jorton@redhat.com> 2.0.49-1
changelog:
  - update to 2.0.49 (#118798, thanks to Robert Scheck)
  - only link ab and mod_ssl against SSL_LIBS
  - open log files using APR_LARGEFILE where available


author: Joe Orton <jorton@redhat.com> 2.0.48-17
changelog:
  - use "SSLMutex default" in default ssl.conf
  - limit to 128K XML request bodies in default httpd.conf; fix to 
    give a 413 error not a 400 if the limit is exceeded
  - mod_rewrite: add %{SSL:...} and %{HTTPS} variable lookups
  - mod_dav: propagate executable property across COPY/MOVE
  - mod_dav: give 507 on out-of-space errors in more places
  - mod_ssl: add ssl_is_https optional function
  - mod_ssl: support indexed lookup of DN components
  - mod_ssl: optimised variable lookup
  - mod_ssl: install only minimal mod_ssl.h
  - worker: fix potential hang at restart


author: Joe Orton <jorton@redhat.com> 2.0.48-16
changelog:
  - fix apxs -q installbuilddir
  - really update to ab from HEAD
  - remove check that accept() returns an fd < FD_SETSIZE


author: Joe Orton <jorton@redhat.com> 2.0.48-14
changelog:
  - mod_dav: fix 401 on destination and reject unescaped fragment in URI
  - remove redundant ldconfig invocation from mod_ssl %post
  - remove unnecessary -headusage patch


author: Joe Orton <jorton@redhat.com> 2.0.48-13
changelog:
  - allow further customisation of init script (Peter Bieringer, #114619)
  - worker fixes from upstream
  - use basename(filename) in APLOG_MARK to reduce noise levels at 
    "LogLevel debug"


author: Joe Orton <jorton@redhat.com> 2.0.48-10
changelog:
  - update to ab from HEAD
  - remove dbmmanage man page (part of #114080)
  - mod_ssl: fix streaming nph- CGI scripts over SSL
  - mod_autoindex: fixes from 2.0 branch (André Malo)
  - add NameVirtualHost vs mod_ssl warning to httpd.conf (#114315)
  - mod_proxy: HTTP/1.1-compliance fixes from HEAD


author: Joe Orton <jorton@redhat.com> 2.0.48-9
changelog:
  - use a large BSS in the test PIE executable to trigger bugs early
  - tighten check on CPP output in MMN check (#113934)


author: Joe Orton <jorton@redhat.com> 2.0.48-8
changelog:
  - add man page fixes
  - mod_include: use parser rewrite+fixes from 2.0 branch (André Malo et al)
  - mod_ssl: add distcache support (Geoff Thorpe)
  - mod_ssl: SSL variable handling fixes for non-SSL connections (various)
  - allow linking modules against specific libraries found during configure


author: Joe Orton <jorton@redhat.com> 2.0.48-7
changelog:
  - hack to ensure that /usr/sbin/suexec gets stripped
  - merges from upstream:
   * fix for CVE CAN-2003-0020 (André Malo)
   * open log files read-only (Jeff Trawick)
   * mod_cgi: fix logging of script exec failure messages (Jeff Trawick)
   * mod_proxy: fix leak in request body handling (Larry Toppi)
  - merges from Taroon:
   * move away /var/www/html/index.html before upgrade from 1.3 (#70705)
   * allow upgrade from Stronghold 4.0
   * migration guide updates 
   * mod_log_config: fix logging of timezone (upstream #23642)
   * mod_ssl: restore readable error descriptions in error log


author: Joe Orton <jorton@redhat.com> 2.0.48-6
changelog:
  - fix httpd.init issues reported by Behdad Esfahbod
  - add fix for mod_usertrack (#113269)
  - automatically raise RLIMIT_CORE if CoreDumpDirectory is used
  - emit warning at end of %prep if PIE support is not enabled
  - add symlink to libtool script from build directory (#113720)
  - don't link suexec against the world


author: Joe Orton <jorton@redhat.com> 2.0.48-5
changelog:
  - use graceful restart in logrotate
  - bump default MaxRequestsPerChild for prefork to 4000
  - move vendor string for Server header into spec file
  - include mod_status extension hook and use it in mod_ssl to include
    SSL session cache statistics in server-status output


author: Joe Orton <jorton@redhat.com> 2.0.48-2
changelog:
  - update to 2.0.48
  - includes security fix for CVE CAN-2003-0542
  - include mpm*.h to fix mod_fastcgi build (#108080)
  - increase DYNAMIC_MODULE_LIMIT to 128
  - re-enable ap_hack_* export trimming patch
  - only use -export-dynamic when linking httpd, not suexec etc
  - don't load mod_unique_id by default


author: Joe Orton <jorton@redhat.com> 2.0.47-10
changelog:
  - httpd.conf: configure test page in welcome.conf, load suexec, 
   don't use custom error docs by default, sync with upstream.
  - add "Powered by Fedora" icon (Garrett LeSage)
  - migration guide updates
  - drop mod_cgid
  - enable SSL_EXPERIMENTAL_ENGINE (#106858)
  - drop minimum suexec gid to 100 (#74753, #107083)
  - speed up graceful restarts in prefork (#105725)
  - mod_ssl fixes


author: Joe Orton <jorton@redhat.com> 2.0.47-6
changelog:
  - update httpd.conf for manual changes (alietss@yahoo.com, #101015)
  - use anonymous shm for LDAP auth cache (#103566)


author: Joe Orton <jorton@redhat.com> 2.0.47-4
changelog:
  - add mod_include fixes from upstream
  - httpd.conf updates: wording fixes from upstream; load
    mod_deflate by default, update AddLanguage section (#98455)
  - don't add eNULL cipher in default ssl.conf (#98401)
  - only bind to IPv4 addresses in default config (#98916)


author: Joe Orton <jorton@redhat.com> 2.0.45-6
changelog:
  - don't load /usr/sbin/envvars from apxs
  - add fix for mod_dav_fs namespace handling
  - add fix for mod_dav If header etag comparison
  - remove irrelevant warning from mod_proxy
  - don't conflict with thttpd (#91422)


author: Joe Orton <jorton@redhat.com> 2.0.45-5
changelog:
  - don't package any XML sources in httpd-manual
  - fix examples in default httpd.conf for enabling caching


author: Joe Orton <jorton@redhat.com> 2.0.45-3
changelog:
  - update httpd.conf for changes from default in 2.0.45
  - include conf.d/*.conf after loading standard modules
  - include LDAP and cache modules (#75370, #88277)
  - run buildconf in %build not %prep


author: Joe Orton <jorton@redhat.com> 2.0.45-1
changelog:
  - update to 2.0.45 (#82227)
  - use separate apr, apr-util packages (#74951)
  - mark logrotate file as noreplace (#85654)
  - mark all of /var/www/error as %config-not-noreplace
  - remove dates from error pages (#86474)
  - don't enable mod_cgid for worker MPM (#88819)


author: Joe Orton <jorton@redhat.com> 2.0.40-21.1
changelog:
  - add security fixes for CAN-2003-0020, CAN-2003-0132, CAN-2003-0083
  - add security fix for file descriptor leaks, #82142
  - add bug fix for #82587


author: Joe Orton <jorton@redhat.com> 2.0.40-21
changelog:
  - add security fix for CAN-2003-0020; replace non-printable characters
    with '!' when printing to error log.
  - disable debuginfo on IA64.


author: Joe Orton <jorton@redhat.com> 2.0.40-17
changelog:
  - add mod_cgid and httpd binary built with worker MPM (#75496)
  - allow choice of httpd binary in init script
  - pick appropriate CGI module based on loaded MPM in httpd.conf
  - source /etc/sysconfig/httpd in apachectl to get httpd choice
  - make "apachectl status" fail gracefully when links isn't found (#78159)


author: Joe Orton <jorton@redhat.com> 2.0.40-15
changelog:
  - fix possible infinite recursion in config dir processing (#77206)
  - fix memory leaks in request body processing (#79282)


author: Joe Orton <jorton@redhat.com> 2.0.40-14
changelog:
  - remove unstable shmht session cache from mod_ssl
  - get SSL libs from pkg-config if available (Nalin Dahyabhai)
  - stop "apxs -a -i" from inserting AddModule into httpd.conf (#78676)


author: Joe Orton <jorton@redhat.com> 2.0.40-12
changelog:
  - pass libdir to configure; clean up config_vars.mk
  - package instdso.sh, fixing apxs -i (#73428)
  - prevent build if upstream MMN differs from mmn macro
  - remove installed but unpackaged files


author: Joe Orton <jorton@redhat.com> 2.0.40-9
changelog:
  - security fixes for CAN-2002-0840 and CAN-2002-0843
  - fix for possible mod_dav segfault for certain requests


author: Joe Orton <jorton@redhat.com> 2.0.40-7
changelog:
  - add LoadModule lines for proxy modules in httpd.conf (#73349)
  - fix permissions of conf/ssl.*/ directories; add Makefiles for
    certificate management (#73352)


author: Joe Orton <jorton@redhat.com> 2.0.40-4
changelog:
  - set SIGXFSZ disposition to "ignored" (#69520)
  - make dummy connections to the first listener in config (#72692)


author: Joe Orton <jorton@redhat.com> 2.0.40-3
changelog:
  - allow "apachectl configtest" on a 1.3 httpd.conf
  - add mod_deflate
  - enable LDAP support in apr-util
  - don't package everything in /var/www/error as config(noreplace)


author: Joe Orton <jorton@redhat.com> 2.0.36-7
changelog:
  - use /sbin/nologin as shell for apache user (#68371)
  - add patch from CVS to fix possible infinite loop when processing
    internal redirects


author: Gary Benson <gbenson@redhat.com> 2.0.36-5
changelog:
  - patch apachectl to detect 1.3.x httpd.conf's and direct users
    to the migration guide
  - ship the migration guide


author: Joe Orton <jorton@redhat.com>
changelog:
  - move /etc/httpd2 back to /etc/httpd
  - add noindex.html page and poweredby logo; tweak default config
    to load noindex.html if no default "/" page is present.
  - add patch to prevent mutex errors on graceful restart


author: Joe Orton <jorton@redhat.com>
changelog:
  - initial build; based heavily on apache.spec and mod_ssl.spec
  - fixes: #65214, #58490, #57376, #61265, #65518, #58177, #57245


author: Jason Baron <jbaron@redhat.com> [2.6.9-55.0.1]
changelog:
  -fix kernel spinlock panic in nfs/inode.c (Peter Staubach) [240855]
  -fix core-dumping unreadable binaries via PT_INTERP (Eric Sandeen) [243256] {CVE-2007-0958}
  -nlm: when reclaiming locks, skip non-posix locks (Jeff Layton) [243251] {CVE-2006-5158}
  -add missing fput() in a 32-bit ioctl on 64-bit x86 systems (Jeff Burke) [243252] {CVE-2007-0773}
  -prevent oops in compat_sys_mount with NULL data pointer (Jeff Layton) [243263] {CVE-2006-7203}
  -fix 32bit-compat rt_sigtimedwait (Guy Streeter) [240458]
  -nfs: fix repeated NFS mount failures lead to kernel panic (Peter Staubach) [240851]
  -safely store sysfs inode nrs in the sysfs dirent (Eric Sandeen) [242558] 
  -protect sysfs ->s_dentry w/ locking (Eric Sandeen) [242558]
  -fix nr_unused accounting (Eric Sandeen) [241784]
  -fix bluetooth setsockopt() information leaks (Don Howard) [243259] {CVE-2007-1353}
  -fix DoS in PPPOE (Neil Horman) [243262] {CVE-2007-2525}
  -fix out of bounds fib_probs access vulnerability (Neil Horman) [243261] {CVE-2007-2172}
  -ip_conntrack_sctp: fix remotely triggerable NULL ptr dereference (Don Howard) [243746] {CVE-2007-2876}


author: Jason Baron <jbaron@redhat.com> [2.6.9-55]
changelog:
  -stex: fix regression in sg_reset (Jun'ichi "Nick" Nomura) [237132]
  -nfs: Allow files open for write to invalidate caches (Jeff Layton) [237135]
  -e1000: fix watchdog timeout panics (Andy Gospodarek) [237130]
  -re-enable readahead for multi-page sequential IOs (Eric Sandeen) [237138]


author: Kristian Høgsberg <krh@redhat.com> - 6.8.2-1.EL.19
changelog:
  - Fix root priv elevation bug (242903).  Just don't delete the
    directory and make sure when we create the directory, that we set
    the mode using mkdir -m.


author: Adam Jackson <ajax@redhat.com>
changelog:
  - Add cve-2007-1351.patch (#234056)
  - Add cve-2007-1003.patch  (#233000)
  - Add int-overflow.patch (#231693)


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Add patch 1222, add-rs482.patch (but don''t apply yet), which is a completely
    untested 'backport' of RS482 support.


author: Soren Sandmann <sandmann@redhat.com>
changelog:
  - Update ia64-disable-offscreen-pixmaps.patch to turn offscreen pixmaps off
    in the option processing code rather than in the default.


author: Adam Jackson <ajax@redhat.com> 6.8.2-1.EL.13.47
changelog:
  - xorg-x11-6.8.2-ati-radeon-ddc-mode.patch: Force radeon''s "DDCMode" to true
    on Dell server chipsets to fix cursor tracking. (#172250)


author: Soren Sandmann <sandmann@redhat.com> - 6.8.2-1.EL.13.43
changelog:
  - Merge security fixes:
      xorg-x11-6.8.2-cve-2006-4740-cid-fonts.patch
      xorg-x11-server-CVE-2006-6101.patch
      xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch

      ChangeLog:

      * Wed Jan 03 2007 Adam Jackson <ajax@redhat.com> 6.8.2-1.EL.13.37.5
      - Add xorg-x11-6.8.2-sorted-xkbcomp-dirs.patch to fix rpmdiff multilib
          failure.

      * Tue Jan 02 2007 Adam Jackson <ajax@redhat.com> 6.8.2-1.EL.13.37.4
      - Add xorg-x11-server-CVE-2006-6101.patch. (#218871)

      * Wed Sep  6 2006 Adam Jackson <ajackson@redhat.com> 6.8.2-1.EL.13.37.2
      - Fix for CID font parser integer overflows. (CVE-2006-3470, #204548)


author: Soren Sandmann <sandmann@redhat.com> - 6.8.2-1.EL.13.39
changelog:
  - Add patch to make libGLw use system copies of Motif headers instead
    of its own internal ones. Add BuildRequires on openmotif-devel. (#178196).


author: Mike A. Harris <mharris@redhat.com> 6.8.0-5
changelog:
  - Enable "#define HasDevRandom YES" in host-$arch.def for bug (#126205)
  - Remove "Requires: xorg-x11, xorg-x11-libs = 6.8.2-1.EL.19" from twm
    subpackage, as the libs twm is linked to should automatically be picked up
    by rpm "find-provides", and xterm moved to a separate package a long time
    ago, so both of these should no longer be needed. (#123423)
  - Added xorg-x11-6.8.0-ia64-460gx-pci-typo.patch to fix typo in Intel 460gx
    PCI handling code on ia64. (#126586)
  - Remove "XtermWithI18N" from host.def as we build xterm externally
  - Added SElinux fix to xfs initscript (#130421,130969)


author: Urs Beyerle <urs.beyerle@psi.ch> 3.1.r2-1.sl4
changelog:
  - #include <linux/squash...> -> #include "squash..."
  - #define CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE 3 (the default)
  - no patching of do_mounts, so no initrd support
  - build for RHEL kernel 2.6.9


author: Nalin Dahyabhai <nalin@redhat.com> 1.3.4-48
changelog:
  - add patch to fix buffer overflow and double-free in rpc library (#239073,
    CVE-2007-2442/CVE-2007-2443)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - assume that time intervals specified without a unit attached are meant to
    be a count of seconds, as later upstream versions do (#197522)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-46.SLx
changelog:
  - added recent patches from CVS:
  - 1022: namei-dont-randomly-full-salvage-20070514
  - 1023: vos-namelen-for-dump-restore-is-stupid-20070509
  - 1024: supergroup-cleanup-20070516
  - 1025: ptserver-fix-bitmap-20070516
  - 1026: glibc24-jmp-buf-mangling-20070516 (SL5 only)
  - 1027: rx-call-abort-release-refcount-20070425
  - 1028: dont-fclose-null-20070514


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-44.SLx
changelog:
  - SL4/5 init script: fix cache partition detection on SL4/5
  - SL4: replace patch1020 by slightly fixed version now in CVS
  - add accompanying patch1021 (vmalloc-no-glock-20070418)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-43.SLx
changelog:
  - SL4: added patch1020 by Chris Wing to turn off broken symlink caching, see
    https://lists.openafs.org/pipermail/openafs-devel/2007-March/015069.html
  - add buildhost and version-release to AFS version string


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-42.SLx
changelog:
  - upstream release with new default of -nosuid for local cell, see OPENAFS-SA-2007-001
    * this may break things for sites relying on setuid files in AFS *
  - added a word of warning to the SuidCells config file
  - updated CellServDB to version from grand.central.org as of 2007-03-21
  - added linux-task-pointer-safety-20070320 from CVS (see RT #55973)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.3-0.rc3.39.SLx
changelog:
  - added patch to make sure afs_pag_destroy() holds the glock, from 
    https://lists.openafs.org/pipermail/openafs-devel/2007-March/014985.html
  - for SL5, changed comments on afsd options in the sysconfig file
  - for SL5, changed default afsd options to " " (as recommended by developers)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.3-0.rc3.38.SLx
changelog:
  - upstream rc3, could remove all recent patches
  - support new xenU kernel variant on SL4
  - automated macro for rc sources
  - put back kernel module dependencies (except if built --without kreqs)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.3-0.rc2.36.SLx
changelog:
  - release candidate 2 of next upstream version
  - still needs patches for the tasklist_lock issue
  - added patch against leaks in the kernel module (from CVS)
  - fixed retry of parallel build of only_libafs_tree


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-35.SLx
changelog:
  - put SLx macros into a helper script, recognize 4.9x as SL5
  - put debuginfo override into a helper script, required by RPM on SL3/4
  - fix debuginfo release
  - omit kernel dependency from kernel-module unless built --with kreqs
    (work around yum limitation to help the kernel module plugin)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-33.SLx
changelog:
  - override debuginfo package name for kernel module package
  - to make this work, never build the module and userland in same run


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-32.SLx
changelog:
  - added three patches from CVS:
    Patch1011: openafs-1.4.2-linux-osi-cred-pool-byebye-20061218.patch
      will hopefully rid us of the panics due to "cannot malloc 4xxx bytes"
      observed on SL3 systems (2.4.21-47.0.1.ELsmp), even if unloaded
    Patch1012: openafs-1.4.2-linux26-disable-backing-readahead-20061109.patch
      is just there to make the noext one succeed, and should not do any harm
    Patch1013: openafs-1.4.2-linux-statfs-dentry-20061109.patch
      should provide a reasonable df output (not 0kB or 166YB) on recent
      2.6 kernels (SL5)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-29.SLx
changelog:
  - should build on {SL3 SL4 SL5} x {i686 ia64 x86_64} x {any variant}
  - renamed base package to openafs.SLx to get a common src.rpm; binary packages
    retain their usual names, with SL3 etc. appended to release; added build
    instructions to base package description
  - krb5: build aklog and asetkey from source coming with the openafs tarball
    now; only ka-forwarder is still built from krb5-afs
  - run parallel makes (and try again if the first attempt fails)
  - make use of new (build) requirements on kernel[-devel] on SL4/5
  - updated CellServDB to latest from grand.central.org (w/o openafs.org entry!)
  - allow changing configure options from the command line
  - record configure option in description of server package
  - init script: check more thoroughly for a defined cell; try to guess it if not
  - init script: subtract 32MB from cache partition size if it is ext3 when
    calculating the usable cache size, then use 70% (not 80)
  - init script: use 100MB (not just 8) if cache is not on dedicated filesystem
  - on SL5: separate init scripts for client and server
    - client: /etc/init.d/afs (as before), owned by openafs-client
    - server: /etc/init.d/afs-server (new), owned by openafs-server


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-0.fc3.15.SL5
changelog:
  - upstream final candidate 3
  - besides a real fix for amd64, some quite substantial changes in salvager
    and volserver


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-0.rc1.14.SL5
changelog:
  - find kernel headers in /usr/src/kernels
  - add rxubikdeclare patch (not sure it is important)
  - find kernel headers on FC6


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-0.rc1.12.SL5
changelog:
  - drop patches no longer needed
  - add patch 1005 for last tiny configure problem, run regen, add buildreq
    on autoconf, automake


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.2-0.beta3.11.SL5
changelog:
  - build on FC6T2 (ugly, ugly hacks)
  - update CellServDB
  - the last patch is now in upstream sources
  - tag "copyright" changed to "license"
  - aklog.1 is no longer in src/aklog


author: Miloslav Trmac <mitr@redhat.com> - 7.93.27.EL-1
changelog:
  - Do unmount network mounts, not doing so can prevent other unmounting other
    filesystems
    Reverts: #200915


author: Miloslav Trmac <mitr@redhat.com> - 7.93.26.EL-1
changelog:
  - network-functions: source config before calling configure_ccwgroup_device
    Resolves: #199139
  - setsysfont, rc.sysinit: fix KEYTABLE, setsysfont when serial console is
    present
    Resolves: #150769
  - netfs: call multipath, kpartx if necessary
    Resolves: #180977
  - rc.sysinit: run zfcpconf.sh earlier, so devices are available for LVM usage
    Resolves: #189494
  - init.d/functions: add configurable delay for killproc (<jorton@redhat.com>)
    Resolves: #198468
  - ifup: support aliases-on-vlan
    Resolves: #193133
  - rc.sysinit: don't use vgscan, only use vgchange
    Resolves: #191879
  - ifdown: run ifenslave -d on bonding devices
    Resolves: #199706
  - init.d/halt: don't try to unmount network mounts
    Resolves: #200915
  - ifdown, ifup-aliases: fix static routes for aliases
    Resolves: #202948
  - ifup: fix actual 169.254 networks
    Resolves: #203591


author: Miloslav Trmac <mitr@redhat.com> - 7.93.25.EL-1
changelog:
  - Document HOTPLUG (#189509)
  - Prevent activation of network interfaces by hotplug during bootup (#183706)
  - Add NETWORKDELAY and LINKDELAY (#176851)


author: Bill Nottingham <notting@redhat.com> 7.93.21.EL-1
changelog:
  - rc.sysinit: add call to kpartx for multipath devices (#168538)
  - use multipath.static, not dynamic multipath (#168321)
  - don't fsck netdev filesystems in rc.sysinit (#172804)


author: Bill Nottingham <notting@redhat.com> 7.93.14.EL-1
changelog:
  - prefdm: fix prefdm arg handling (#154312, <khc@pm.waw.pl>)
  - sysconfig.txt: update route documentation (#154531, <link@pobox.com>)
  - fix mistranslation (#151120)
  - rc.sysinit: reinitialize LVM on top of RAID in the mdadm case (#149514)
  - don't run rngd (#130350, essentially)
  - init.d/functions: fix echo (#155270)
  - initlog: free some of the more egregious memory leaks (#85935)
  - initlog: fix potential memory overread (#153685, <in-redhat@baka.org>)
  - add proper ipsec route (#146169, #140654)
  - fix grep mismatching interfaces (#157252, #153669)
  - handle alternate vlan naming schemes (#115001)
  - netfs: handle lvm & fsck for network block devices (#148764, <alewis@redhat.com>)
  - support for diskdump on swap partitions (#160223)
  - ifup-routes: make sure commented lines are handled correctly (#154353,


author: Bill Nottingham <notting@redhat.com> 7.93.12.EL-1
changelog:
  - fix netfs w.r.t nfs root filesystem (#142169)
  - fix multiple scsi_hostadapter loads (#145432)
  - don't run the DDC probe in kmodule
  - fix ONxxx (#136531, <cww@redhat.com>)
  - fix various fgreps to not catch commented lines (#136531, expanded
    from <cww@redhat.com>)
  - kill dhcp client even if BOOTOPROTO is now static (#127726, others)
  - set ETHTOOL_OPTS on addressless devices (#144682, <mpoole@redhat.com>)
  - change setting of IPv6 default route (#142308, <pb@bieringer.de>)


author: Bill Nottingham <notting@redhat.com> 7.93.6.EL-1
changelog:
  - fix some of the rhgb fsck code (<laroche@redhat.com>)
  - fix module blacklisting to not mismatch (#137755)


author: Bill Nottingham <notting@redhat.com> 7.93.4.EL-1
changelog:
  - fix prefdm fallback to installed display managers (#137274)
  - fix incorrect rhgb temp path (#137391)


author: Bill Nottingham <notting@redhat.com> 7.91-1
changelog:
  - rc.d/rc.sysinit: remove devlabel call
  - mdadm support, now that raidtools is gone (#126636, #88785)
  - call ipv6to4 scripts in /etc/ppp/(ip-up|ip-down) (#124390, <dwmw2@redhat.com>)
  - cleanup a couple of nits that could affect bug #134754
  - make sure we return to rhgb after fsck (#133966, #112839, #134449)
  - automatically reboot when fsck calls for it, instead of requiring
    manual intervention (#117641 and duplicates)
  - ifup-wireless: fix key for open vs. restricted (#135235, <dax@gurulabs.com>)
  - translation updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - use runuser instead of su; require it
  - init.d/halt: use right file name for random seed (#134432)


author: Bill Nottingham <notting@redhat.com> - 7.86-1
changelog:
  - use /etc/hotplug/blacklist to blacklist modules in hardware init (#132719)
  - filter indic locales on the console (#134198)


author: Bill Nottingham <notting@redhat.com> - 7.85-1
changelog:
  - ifup, network-functions: fix worked-by-accident shell quoting
  - lang.csh: remove setting of dspmbyte (#89549, <mitr@redhat.com>)
  - SELinux fixes
  - clean up prefdm
  - init.d/functions: export LC_MESSAGES (#133786)
  - allow daemon to coredump if requested (#130175)
  - network-functions: be more liberal in what we accept for link types (#90602, #127984)
  - fix overzealousness with -range aliases (#65415)
  - rc.sysinit: use s-c-keyboard, not kbdconfig (#133929)
  - fix checkpid logic, clean up potential errors (#134030)
  - translation updates


author: Bill Nottingham <notting@redhat.com> - 7.82-1
changelog:
  - fix handling of nonexistent devices (#132839)
  - rhgb enhancements (<veillard@redhat.com>, #132665)
  - initscripts.spec: require nash (#132513)
  - translation updates


author: Dan Walsh <dwalshg@redhat.com> - 7.78-2
changelog:
  - fix setting SELinux contexts on udev-created-in-initrd devices
  - Let restorecon check if selinux is enabled.


author: Bill Nottingham <notting@redhat.com> - 7.77-1
changelog:
  - mount usbfs (#131347)
  - start any automatic raid devices
  - remove triggers for ancient releases, bulletproof remaining ones (#131356)


author: Jason Vas Dias <jvdias@redhat.com> 7.73-1
changelog:
  - Add support for running the DHCPv6 client to ifup 
  - (new DHCPV6C=yes/no ifcfg-${IF} variable) + update sysconfig.txt


author: Bill Nottingham <notting@redhat.com> 7.70-1
changelog:
  - autoload hardware modules on startup
  - minor fsck cleanup (#115028, <leonard-rh-bugzilla@den.ottolander.nl>)
  - ifup: support STP bridging (#123324)
  - rc.sysinit: do a SELinux relabel if forced
  - rc.sysinit: remove devfs compat and the remaining 2.4 compat
  - ifup-wireless: support multiple keys (#127957)
  - fix firmware loading (#129155, <bnocera@redhat.com>)


author: Jason Vas Dias <jvdias@redhat.com> 7.67-1
changelog:
  - fix change_resolv_conf: if pre-existing /etc/resolv.conf
  - non-existent or empty, replace with new file contents.


author: Jason Vas Dias <jvdias@redhat.com> 7.66-1
changelog:
  - Allow users to use generic /etc/dhclient.conf if per-device
  - /etc/dhclient-${DEVICE}.conf is non-existent or empty


author: Bill Nottingham <notting@redhat.com> 7.62-1
changelog:
  - fix up resolv.conf munging (#129921)
  - use rngd if available
  - run start_udev if necessary (#120605)
  - readonly root updates (#129893, <markmc@redhat.com>)
  - ifup-wireless: quote key (#129930)
  - remove rawdevices (#130048)
  - handle binfmt_misc in rc.sysinit for the case where it's built in (#129954)
  - remove mkkerneldoth
  - don't remove linguas in lang.* (part of #9733)
  - fix nfs unmounting (#129765)
  - fix URL (#129433)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bonding + no IP (#127285)
  - wrap second LVM initialization in vgscan check to avoid extraneous messages (#127639)


author: Bill Nottingham <notting@redhat.com> 7.59-1
changelog:
  - set context on ICE directory after making it (#127099, <concert@europe.com>)
  - don't mount GFS filesystems in rc.sysinit


author: Bill Nottingham <notting@redhat.com> 7.58-1
changelog:
  - rc.d/rc.sysinit: hack: make ICE directory on boot (#86480)
  - set devicetype for xDSL (#126194)
  - ignore locking failures when starting lvm volumes (#126192, <radu@primit.ro>)
  - unset LC_MESSAGES for rhgb (#126020, <ynakai@redhat.com>)
  - bonding fixes
  - setsysfont: remove error (#100559)
  - remove duplicate setting of network routes (#125450)
  - vlan fixes (#107504, <hrunting@texas.net>)
  - ifup-aliases: remove bogus route setting (#120908)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix bridging confusing module order (#122848, <luto@myrealbox.com>)
  - rc.d/rc.sysinit: don't mount cifs (#122501)


author: Bill Nottingham <notting@redhat.com> 7.51-1
changelog:
  - get rid of LVM error when no volumes are defined (#121197)
  - fix selinux short-circuit test (#121143, <michal@harddata.com>)
  - /dev/mapper/control is a special file, check it accordingly (#121963)
  - support ETHTOOL_OPTS on bonding slaves (#119430, <hrunting@texas.net>)
  - handle multiple spaces correctly in rc.sysinit, network-functions
    (#118583, <pallas@kadan.cz>)
  - cleanup fd leaks, mem leaks, other bogosities
    (#119987, <linux_4ever@yahoo.com>)
  - rc.d/init.d/network: remove ipv6 bogosity (#114128)
  - translation updates


author: Bill Nottingham <notting@redhat.com> 7.50-1
changelog:
  - fix LVM issues in rc.sysinit (#120458, #119975)
  - deal with fixed racoon parser
  - translation updates from translators
  - fix USB loading (#120911)


author: Bill Nottingham <notting@redhat.com> 7.49-1
changelog:
  - use alsa for mixer saving in halt
  - don't umount /proc in halt (#118880)
  - various translation updates from translators


author: Bill Nottingham <notting@redhat.com> 7.47-1
changelog:
  - translation: catch more input strings (#106285, <mitr@volny.cz>)
  - remove autologin from prefdm (#108969)
  - return to rhgb after ./unconfigured (#109807, <jkeating@j2solutions.net>)
  - handle iso15 in setsysfont (#110243)
  - clean up samba & vmware in rc.sysinit (#113104)
  - some sysconfig.txt documentation (#110427, #118063)
  - fix bug in umount-on-halt (#113088, <giardina@airlab.elet.polimi.it>)
  - handle CIFS in netfs (#115691)
  - make sure hotplug isn't stuck unset (#116666, <aoliva@redhat.com>)
  - handle network fs better in rc.sysinit (#111290)
  - nomodules applies to usb/firewire too (#113278)
  - ipsec fix (#116922, <felipe_alfaro@linuxmail.org>)
  - make sure rc exits cleanly (#117827, <enrico.scholz@informatik.tu-chemnitz.de>)
  - fsck root FS from initrd, for dynamic majors (#117575, <sct@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.44-1
changelog:
  - NFSv4 support (<chucklever@bigfoot.com>, <steved@redhat.com>)
  - handle 2.6-style 'install ethX ...' lines correctly
  - mount sysfs by default
  - time to clean up the cruft. remove:
    - boot-time depmod
    - linking of /boot/System.map to /boot/System.map-`uname -r`
    - /var/log/ksyms.X
    - libredhat-kernel support


author: Bill Nottingham <notting@redhat.com> 7.31-1
changelog:
  - fix bonding + dhcp (#91399)
  - fix typo (#103781)
  - sysconfig/network-scripts/ifup: fix use of local

  - fix shutdown with NFS root (#100556, <Julian.Blake@cern.ch>)
  - remove /var/run/confirm when done with /etc/rc (#100898)
  - ipcalc: fix some memory handling (#85478, <miked@ed.ac.uk>)
  - handle sorting > 10 network devices (#98209)
  - unset ONPARENT after use (#101384)
  - random other fixes
  - bridging support (<dwmw2@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.29-1
changelog:
  - setsysfont: don't echo to /dev/console (#102004)
  - fix ethernet device renaming deadlock (#101566)
  - consoletype: don't return 'vt' on vioconsole (#90465)
  - ifup: fix short-circuit (#101445)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-routes: pass the interface name to handle_file() so that we don't try
    to use the routes file's name as an interface name


author: Bill Nottingham <notting@redhat.com> 7.27-1
changelog:
  - add a check to consoletype for the current foreground console
  - use it when running unicode_start (#98753)


author: Bill Nottingham <notting@redhat.com> 7.26-1
changelog:
  - ipsec support (see sysconfig.txt, ifup-ipsec)
  - read $CONFIG.keys, for non-world-readable keys
  - allow default window size for routes to be set with WINDOW= (#98112)
  - support setting device options with ethtool opts
  - fix s390 bootup spew (#98078)
  - support renaming interfaces with nameif based on hwaddr


author: Bill Nottingham <notting@redhat.com> 7.25-1
changelog:
  - fix DNS punching in the case of other rules for the DNS server
    (#97686, <martin@zepler.org>)
  - initlog, ppp-watch, and usernetctl tweaks (<linux_4ever@yahoo.com>)
  - fix grep for mingetty (#97188)
  - fix rhgb-client bad syntax
  - change network device searching, use correct naming, fix route issues
    (<harald@redhat.com>)
  - other random tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - initscripts-s390.patch: remove not needed parts about PNP=
  - inittab.390: sync with normal version
  - rc.sysinit: remove two further calls to /sbin/consoletype with $CONSOLETYPE


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - sysconfig/init.s390: set LOGLEVEL=3 as for other archs
  - rc.d/init.d/network, rc.d/rc: change confirmation mode to
    not use an environment variable
  - rc.d/init.d/functions: make strstr() even shorter, remove old
    "case" version that has been already commented out
  - rc.d/rc.sysinit:
  	- no need to set NETWORKING=no, it is not used/exported
  	- do not export BOOTUP
  	- delete two "sleep 1" calls that wants to add time to go
  	  into confirmation mode. There is enough time to press a
  	  key anyway or use "confirm" in /proc/cmdline.
  	- read /proc/cmdline into a variable
  	- use strstr() to search in /proc/cmdline
  	- add "forcefsck" as possible option in /proc/cmdline
  	- while removing lock files, no need to call `basename`
  	- add unamer=`uname -r` and reduce number of forks
  	- do not fork new bash to create /var/log/ksyms.0


author: Karsten Hopp <karsten@redhat.de> 7.15-1
changelog:
  - Mainframe has no /dev/ttyX devices and no mingetty, don't 
    initialize them. This gave error messages during startup


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - init.d/network: don't advertise "probe: true" in the header if we don't
    recognize "probe" as an argument


author: Bill Nottingham <notting@redhat.com> 7.09-1
changelog:
  - initialize two ttys past # of mingettys (for GDM)
  - fix zeroconf route
  - redhat-config-network writes $NAME.route for some static routes
    (e.g., ppp); handle that (#84193)


author: Bill Nottingham <notting@redhat.com> 7.08-1
changelog:
  - load keybdev & mousedev even if hid is already loaded/static
  - run fewer scripts through action (#49670, #75279, #81531)


author: Bill Nottingham <notting@redhat.com> 7.07-1
changelog:
  - fix nicknames & profiles (#82246)
  - fix check_device_down (#83780, <pzb@datstacks.com>)
  - vlan fixes (<tis@foobar.fi>)
  - fix groff macros (#83531, <tsekine@sdri.co.jp>)
  - various updated translations
  - fix checkpid for multiple pids (#83401)


author: Bill Nottingham <notting@redhat.com> 7.04-1
changelog:
  - tweak some translatable strings
  - fix for rc.sysinit on machines that pass arguments to mingetty
    (<nalin@redhat.com>)


author: Bill Nottingham <notting@redhat.com> 7.03-1
changelog:
  - move system font setting sooner (<milan.kerslager@pslib.cz>)
  - fix link checking for dhcp, use both ethtool and mii-tool
  - fix CJK text on the console, and locale-archive held open
    on shutdown
  - IPv6 updates <pekkas@netcore.fi>, <pb@bieringer.de>
  - speedup tweaks (<drepper@redhat.com>)
  - use glib2 for ppp-watch (#78690, <kisch@mindless.com>)
  - add zeroconf route (#81738)
  - fix ifup-ppp for dial-on-demand, and onboot (<goeran@uddeborg.pp.se>)
  - tweak raidtab parsing, don't worry about not-in-fstab RAID devices
    (#71087, #78467, <aja@mit.edu>)
  - don't automatically bring up aliases if 'ONPARENT=no' is set (#78992)
  - getkey cleanups/tweaks (#76071, <ben@enchantedforest.org>)
  - rework halt_get_remaining (#76831, <michal@harddata.com>)
  - ipcalc: fix calculation of /32 addresses (#76646)
  - various other tweaks and fixes


author: Bill Nottingham <notting@redhat.com> 7.00-1
changelog:
  - tweaks for potential GUI bootup
  - loop checking for network link state, don't unilterally wait five
    seconds


author: Bill Nottingham <notting@redhat.com> 6.97-1
changelog:
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - devlabel support (<Gary_Lerhaupt@Dell.com>)
  - do lazy NFS umounts


author: Bill Nottingham <notting@redhat.com> 6.96-1
changelog:
  - fix various static-routes brokeness (#74317, #74318, #74320, #76619,
    - fix handling of SYSFONTACM in setsysfont (#75662)
  - fix lang.csh for CJK (#76908, <ynakai@redhat.com>)
  - IPv6 update (<pekkas@netcore.fi>, <pb@bieringer.de>)
  - other minor tweaks


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't infinite loop on ifdown
  - remove disabling of DMA; this can cause problems
  - move swap startup to after LVM (#66588)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't cycle through eth0-eth9 on dhcp link check (#68127)
  - don't retry indefinitely on ppp startup
  - activate network profile passed on kernel commandline via netprofile=
  - fix iptables invocations again
  - translation refresh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - require /etc/redhat-release (#68903)
  - fix tty2-tty6 (sort of)
  - fix iptables invocations (#70807, #71201, #68368)
  - other minor tweaks


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /sbin/service: set PATH before calling startup scripts
    HOME and TERM are also set during bootup, but they should not make
    a difference for well-written daemons.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - /etc/init.d/functions:
  	daemon(): avoid starting another bash
  	killproc(): avoid starting another bash for the default case
  - do not call "insmod -p" before loading the "st" module


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - allow an option for ups poweroff  #68123
  - change grep for ONBOOT=  #63903
  - allow building with a cross-compiler  #64362,#64255
  - faster check in network-functions:check_default_route()
  - better checks for backup files
  - drastically reduce the number of consoletype invocations
  - do not export "GATEWAY" in network-functions
  - code cleanups in rc.sysinit


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - rc.sysinit: do not load raid modules unless /etc/raidtab exists
  - many cleanups for more consistent shell programming and also
    many smaller speedups within network scripts, no un-necessary sourcing
    of files etc
  - nearly re-code /etc/rc.d/rc


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - start some sh coding cleanups
  - change to /etc/init.d/functions
  - eliminate some un-necessary PATH settings
  - eliminate some TEXTDOMAIN settings


author: Bill Nottingham <notting@redhat.com> 6.64-1
changelog:
  - make sure chatdbg is set before using it (#63448, <Bertil@Askelid.com>)
  - allow tweaking of more devices with hdparm (#53511), and
    tweak non-disk devices iff they explicitly have a config file
    for that device (#56575, #63415)
  - some translation updates


author: Bill Nottingham <notting@redhat.com> 6.63-1
changelog:
  - ipcalc cleanups (#58410)
  - quit stripping binaries
  - do LVM init after RAID init too (#63238)
  - export all locale variables (#56142)
  - run sysctl -p after network init as well


author: Bill Nottingham <notting@redhat.com> 6.62-1
changelog:
  - delete X/VNC locks on startup (#63035)
  - shut up DMA disabling, move it to after ide-scsi (#62873, #62956)
  - use full path to /sbin/ifconfig (#59457)
  - /sbin/service: change to root directory before staring/stopping;
    also sanitize environment


author: Bill Nottingham <notting@redhat.com> 6.56-1
changelog:
  - use nameif for interfaces where we don't agree on HWADDR with the
    config file (<harald@redhat.com>)
  - LSB support tweaks


author: Mike A. Harris <mharris@redhat.com> 6.55-1
changelog:
  - Removed process accounting stuff from rc.sysinit and halt scripts as it is
    now handled by the psacct initscript in the psacct package


author: Than Ngo <than@redhat.com>
changelog:
  - add ISDN patches from pekkas@netcore.fi and pb@bieringer.de (bug #52491)
  - fix handling of ISDN LSZ Compresssion


author: Bill Nottingham <notting@redhat.com> 6.31-1
changelog:
  - message un-tweaks (<johnsonm@redhat.com>)
  - make getkey more useful, fix some of the autofsck stuff (<johnsonm@redhat.com>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix a broken call to check_device_down
  - make all loopback addresses have host scope, not global scope.
    Fixes #49374, possibly others


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add is_available() network function, use it; cleans up ugly modprobe
    error messages
  - update translation info
  - fix #51787


author: Than Ngo <than@redhat.com>
changelog:
  - don't set MSN if it' empty (it's now optional)
  - don't give login name as a cmdline-option (Bug #23066)
  - remove peer device file if ppp connection is down
  - fix channel bundling


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak raittab grep slightly (#51231)
  - allow resetting of default route for DHCP addresses (#48994)
  - save resolv.conf in ifup-ppp for restoration by ifdown-post (#50759)
  - when munging firewall rules for dns, only allow dest ports 1025-65535 (#44038, #40833)
  - allow shell characters in ppp names (#43719)
  - allow setting DHCP arguments, just kill dhcpcd instead of using -k (#46492)
  - behave sanely if ifup called when dhcpcd is running (#49392, #51038)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - honor HOTPLUG=no if running under hotplug (#47483)
  - use awk, not grep, for modprobe -c checks (#49616)
  - don't print ugly messages for the case where the device doesn't exist,
    and there is no alias (i.e., PCMCIA ONBOOT=yes (#various))
  - run kbdconfig in /.unconfigured mode (#43941)
  - use a bigger buffer size argument to dmesg (#44024)
  - detach loopback devices on shutdown (#43919, #45826)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't use kbd commands in setsysfont now that we've switched back to
    console-tools (#50075)
  - sleep in check_link_down; some devices require it
  - only bring link down if check_link_down fails


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update netdev stuff to use _netdev
  - IPv6 updates (<pekkas@netcore.fi>)
  - fix downing of devices with static IPs (#49777, #49783)
  - put ifcfg-lo back in the package


author: Bill Nottingham <notting@redhat.com>
changelog:
  - own some more directories
  - use -O nonetdev, require mount package that understands this
  - fix do_netreport when called as non-root
  - remove ip addresses from interfaces on ifdown
  - oops, fix ifup/ifdown


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix '--check'
  - prereq sh-utils (#43065)
  - fix some invocations of reboot/halt (#45966)
  - fix typo in ifup-wireless
  - don't muck with /etc/issue each boot
  - big IPv6 update (<pekkas@netcore.fi>)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - disable hwclock on S390 (no such executable)
  - Fix up kernel versioning on binary-only modules (S390)
  - don't use newt scripts on S390 console


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - reenable pump, but make sure dhcpcd is the default. This
    way, upgrades of systems without dhcpcd has a better chance at
    working.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run ifup ppp0 if ppp-watch gets SIGINT (#40585, ak@cave.hop.stu.neva.ru)
  - fix do_netreport (#37716, #39603 <crlf@aeiou.pt>)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - copyright: GPL -> license: GPL
  - fix a syntax error in lang.csh
  - skip commented-out i18n configuration lines in lang.csh


author: Bill Nottingham <notting@redhat.com>
changelog:
  - IPv6 fixes (#30506)
  - make static-routes handling more sane and consistent (#29500, #29549)
  - handle multiple USB controllers *correctly*


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - usernetctl, ppp-watch: cleanups
  - netreport: use O_NOFOLLOW
  - ifup-ppp: let ppp-watch watch over demand-dialed connections (#28927)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run isapnp on isapnp-enabled 2.4 kernels (part of #29450)
  - disable hotplug during network initscript
  - don't munge wireless keys in ifup; that will be done with the
    PCMCIA wireless stuff
  - run sndconfig --mungepnp for non-native-isapnp soundcards
  - don't explicitly kill things in init.d/single, init will do it
  - don't explicitly load usb-storage; mount the usbdevfs before initializing
    host controller modules


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix some substitions in init.d/functions (fixes various killproc issues)
  - make sure ipv6 module alias is available if configured
  - fix initlog segfaults in popt when called with bogus stuff (#28140)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pidofproc() and killproc() try to use the PID associated with the full
    pathname first before killing the daemon by its basename (for daemons that
    share the same basename, i.e. "master" in postfix and cyrus-imapd) (#19016)
  - fix status() as well


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - add all save changes for s390 s390x that won't break anything
    patches are from Oliver Paukstadt @ millenux.com


author: Bill Nottingham <notting@redhat.com>
changelog:
  - modify firewall on ifup to allow any new DNS servers through (#25951)
  - don't muck with the font in lang.csh/lang.sh (#26349)
  - don't display Japanese if we aren't on a pty (#25041)
  - load ide-scsi if passed on /proc/cmdline


author: Bill Nottingham <notting@redhat.com>
changelog:
  - various init.d/functions cleanups (#10761, from <mjt@tls.msk.ru>)
  - in daemon(), only look at pidfile to determine if process is running
    (#17244, others)
  - ifup-ppp enhancements (#17388, from <ayn2@cornell.edu>)
  - ipv6 support (#23576, originally by Peter Bieringer <pb@bieringer.de>)
  - lots of other minor fixes (see ChangeLog)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add plusb support (#18892, patch from <eric.ayers@compgen.com>)
  - don't ignore RETRYTIMEOUT when we never connect (#14071, patch from
    <ak@cave.hop.stu.neva.ru>)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - do LVM setup through normal initscripts mechanisms
  - ignore backup files in /etc/sysconfig/network-scripts
  - lots of .po file updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - only load sound if persistent DMA buffers are necessary
  - fix lots of bugs: #18619, #21187, #21283, #12097
  - integrate MAXFAIL option for ppp-watch
  - don't load keymaps/fonts on a serial console


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - changed hdparm section in rc.sysinit to allow different
    parameters for each disk (if needed) by copying 
    /etc/sysconfig/harddisks to /etc/sysconfig/harddiskhda (hdb,hdc..)
  - fix RFE #20967


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - handle "gw x.x.x.x" as the last pair of flags in ifup-routes (#18804)
  - fix top-level makefile install target
  - make usernetctl just fall-through if getuid() == 0


author: Bill Nottingham <notting@redhat.com>
changelog:
  - add usleep after kill -KILL in pidofproc, works around lockd issues (#14847)
  - add some fallback logic to prefdm (#16464)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't load usb drivers if they're compiled statically
  - don't call ifdown-post twice for ppp (#15285)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - remove console-tools requirement
  - in netfs, start portmap if needed
  - cosmetic cleanups, minor tweaks
  - don't probe USB controllers


author: Matt Wilson <msw@redhat.com>
changelog:
  - kill all the PreTransaction stuff
  - directory ownership cleanups, add more LSB symlinks
  - move all the stuff back in to /etc/rc.d/


author: Bill Nottingham <notting@redhat.com>
changelog:
  - tweak %pre back to a mv (rpm is fun!)
  - do USB initialization before fsck, so keyboard works if it fails


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - ifup-ppp: add hooks for demand-dialing PPP
  - functions: use basename of process when looking for its PID file


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't create resolv.conf 0600
  - don't run ps as much (speed issues)
  - allow setting of MTU
  - other minor fixes


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - check that LC_ALL/LINGUAS and LANG are set before referencing them in lang.csh
  - fix check for /var/*/news, work around for bug #9140


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - attempt to restore default route if PPP takes it over
  - man page fix for ipcalc
  - shvar cleaning
  - automate maintaining /boot/System.map symlinks


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - improvements in clone device handling
  - better signal handling in ppp-watch
  - yet another attempt to fix those rare PAP/CHAP problems


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix more possible failed CHAP authentication (with chat scripts)
  - fix ppp default route problem
  - added ppp-watch man page, fixed usernetctl man page
  - make ifup-ppp work again when called from netcfg and linuxconf
  - try to keep ppp-watch from filling up logs by respawning pppd too fast
  - handle all linuxconf-style alias files with linuxconf


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load mixer settings for monolithic sound
  - man page for ppp-watch
  - add ARP variable for ifup
  - some i18n fixes


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fix some failed CHAP authentication
  - fix extremely unlikely, but slightly possible kill-random-process
    bug in ppp-watch
  - allow DNS{1,2} in any ifcfg-* file, not just PPP, and
    add nameserver entries, don't just replace them
  - don't use /tmp/confirm, use /var/run/confirm instead


author: Bill Nottingham <notting@redhat.com>
changelog:
  - assorted brown paper bag fixes
  - check for programs/files before executing/sourcing them
  - control stop-a like magic sysrq


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - ppp-watch now always kills pppd pgrp to make sure dialers are dead,
    and tries to hang up the modem


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - add --remotename option to wvdial code
  - make sure we do not have an earlier version of wvdial that doesn't
    know how handle --remotename
  - make ppp-watch background itself after 30 seconds even if
    connection does not come up, at boot time only, so that a
    non-functional PPP connection cannot hang boot.


author: Bill Nottingham <notting@redhat.com>
changelog:
  - new NFS unmounting from Bill Rugolsky <rugolsky@ead.dsa.com> 
  - fix ifup-sl/dip confusion
  - more raid startup cleanup
  - make utmp group 22


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - use new linkname argument to pppd to make if{up,down}-ppp
    reliable -- requires ppp-2.3.9 or higher


author: Bill Nottingham <notting@redhat.com>
changelog:
  - stability fixes for initlog
  - initlog now has a config file
  - add alias speedup from dharris@drh.net
  - move netfs links
  - usleep updates


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't make module-info, System.map links
  - handle utmpx/wtmpx
  - fix lots of bugs in 4.21 release :)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - clean out /var better
  - let everyone read /var/run/ppp*.dev
  - fix network startup so it doesn't depend on /usr


author: Bill Nottingham <notting@redhat.com>
changelog:
  - load keymaps & console font early
  - fixes for channel bonding, strange messages with non-boot network interfaces


author: Bill Nottingham <notting@redhat.com>
changelog:
  - don't run linuxconf if /usr isn't mounted
  - set macaddr before bootp
  - zero in the /var/run/utmpx file (gafton)
  - don't set hostname on ppp/slip (kills X)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - doc updates
  - support for SYSFONTACM, other console-tools stuff
  - add net route for interface if it isn't there.
  - fix for a bash/bash2 issue


author: Bill Nottingham <notting@redhat.com>
changelog:
  - Mmm. Must always remove debugging code. before release. *thwap*
  - pump support
  - mount -a after mount -a -t nfs


author: Bill Nottingham <notting@redhat.com>
changelog:
  - bugfixes (ifup-ppp, kill -TERM, force fsck, hwclock --adjust, setsysfont)
  - add initlog support. Now everything is logged (and bootup looks different)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - rc.sysvinit should be working with all kernel versions now
  - requires e2fsprogs (for fsck)
  - set INPUTRC and LESSCHARSET on linux-lat


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - /etc/rc.d/rc: don't run /etc/rc.d/rcN.d/[KS]??foo.{rpmsave,rpmorig} scripts.
  - /etc/rc.d/rc.sysinit: raid startup (Nigel.Metheringham@theplanet.net).
  - /sbin/setsysfont: permit unicode fonts.


author: Erik Troan <ewt@redhat.com>
changelog:
  - ipcalc should *never* have been setgid anything
  - depmod isn't run properly for non-serial numbered kernels


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added lots of linuxconf support.  Should still work on systems that
    do not have linuxconf installed, but linuxconf gives enhanced support.
  - In concert with linuxconf, added IPX support.  Updated docs to reflect it.


author: Erik Troan <ewt@redhat.com>
changelog:
  - touch /var/lock/subsys/kerneld after cleaning out /var/lock/subsys
  - the logic for when  /var/lock/subsys/kerneld is touched was backwards


author: Erik Troan <ewt@redhat.com>
changelog:
  - tried to get /proc stuff right one more time (uses -t nonfs,proc now)
  - added support for /fsckoptions
  - changed 'yse' to 'yes' in KERNELD= line


author: Erik Troan <ewt@redhat.com>
changelog:
  - set domainname to "" if none is specified in /etc/sysconfig/network
  - fix /proc mounting to get it in /etc/mtab


author: Erik Troan <ewt@redhat.com>
changelog:
  - fixed network-scripts to allow full pathnames as config files
  - removed some old 3.0.3 pcmcia device handling


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /var/run/netreport needs to be group-writable now that /sbin/netreport
    is setguid instead of setuid.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added network-functions to spec file.
  - Added report functionality to usernetctl.
  - Fixed bugs I introduced into usernetctl while adding clone device support.
  - Clean up entire RPM_BUILD_ROOT directory in %clean.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Clone device support in network scripts, rc scripts, and usernetctl.
  - Disassociate from controlling tty in PPP and SLIP startup scripts,
    since they act as daemons.
  - Spec file now provides start/stop symlinks, since they don't fit in
    the CVS archive.


author: Donnie Barnes <djb@redhat.com>
changelog:
  - reworked status() to adjust for processes that change their argv[0] in
    the process table.  The process must still have it's "name" in the argv[0]
    string (ala sendmail: blah blah).


author: Donald Barnes <djb@redhat.com>
changelog:
  - added status function to functions along with better killproc 
    handling.
  - added /sbin/usleep binary (written by me) and man page
  - changed BuildRoot to /var/tmp instead of /tmp


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - /sbin/netreport sgid rather than suid.
  - /var/run/netreport writable by group root.

  - /etc/ppp/ip-{up|down} no longer exec their local versions, so
    now ifup-post and ifdown-post will be called even if ip-up.local
    and ip-down.local exist.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Support for net event notification:
    Call /sbin/netreport to request that SIGIO be sent to you whenever
    a network interface changes status (won't work for brining up SLIP
    devices).
    Call /sbin/netreport -r to remove the notification request.
  - Added ifdown-post, and made all the ifdown scrips call it, and
    added /etc/ppp/ip-down script that calls /etc/ppp/ip-down.local
    if it exists, then calls ifdown-post.
  - Moved ifup and ifdown to /sbin


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added DHCP support
  - Set hostname via reverse name lookup after configuring a networking
    device if the current hostname is (none) or localhost


author: Erik Troan <ewt@redhat.com>
changelog:
  - Got rid of xargs dependency in halt script
  - Don't mount /proc twice (unmount it in between)
  - sulogin and filesystem unmounting only happened for a corrupt root 
    filesystem -- it now happens when other filesystems are corrupt as well


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Added MTU for PPP.
  - Put PPPOPTIONS at the end of the options string instead of at the
    beginning so that they override other options.  Gives users more rope...
  - Don't do module-based stuff on non-module systems.  Ignore errors if
    st module isn't there and we try to load it.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - Changed ifup-ppp and ifdown-ppp not to use doexec, because the argv[0]
    provided by doexec goes away when pppd gets swapped out.
  - ifup-ppp now sets remotename to the logical name of the device.
    This will BREAK current PAP setups on netcfg-managed interfaces,
    but we needed to do this to add a reasonable interface-specific
    PAP editor to netcfg.


author: Erik Troan <ewt@redhat.com>
changelog:
  - Added usernetctl wrapper for user mode ifup and ifdown's and man page
  - Rewrote ppp and slip kill and retry code 
  - Added doexec and man page


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed a problem which can cause inode corruption
  - Built for 55.0.2.EL
  - Resolves: rhbz#243146 rhbz#244254


author: Robin Norwood <rnorwood@redhat.com> 0.48-2
changelog:
  - Resolves: rhbz#245618
  - Backport patch to fix dn_expand looping issue
  - Backport patch to randomize ID field


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.11
changelog:
  - update to PEAR 1.4.9, matching RHEL-5 (#263501)
   * bundle XML_RPC-1.5.0, Console_Getopt-1.2, Archive_Tar-1.3.1
   * fix paths in default pear.conf, installed PEAR registry
   * replace /usr/bin/pear et al with simpler wrapper scripts


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.10
changelog:
  - add security fixes for CVE-2007-5898, CVE-2007-4782, CVE-2007-5899,
    CVE-2008-2051, CVE-2008-2107, CVE-2008-2108 (#445921)


author: Joe Orton <jorton@redhat.com> 4.3.9-3.22.7
changelog:
  - add security fixes for CVE-2007-2756, CVE-2007-2872, CVE-2007-3799,
    CVE-2007-3996, CVE-2007-3998, CVE-2007-4658, CVE-2007-4670 (#278391)


author: Kai Engert <kengert@redhat.com> 1.0.9-3.el4
changelog:
  - Update to latest snapshot of Mozilla 1.8.0 branch
  - Include patches for Mozilla bugs 379245, 199088, 384925, 178993,
    381300 (+382686), 358594 (+380933), 382532 (+382503)


author: Marco Pesenti Gritti <mpg@redhat.com> 2.8.1-1
changelog:
  - Update
  - Remove CAN-2004-0888, it's upstream now
  - Remove gnome-vfs-error-checking patch, upstream


author: Dan Williams <dcbw@redaht.com> 2.8.0-1
changelog:
  - Update to 2.8.0
  - Fix Gnome #153153/Red Hat #132469, patch works around a
  	gnome-vfs issue by issuing an error, rather than crashing


author: Than Ngo <than@redhat.com> 7:3.3.1-3.7
changelog:
  - apply patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179055)


author: Than Ngo <than@redhat.com> 3.1.2-4
changelog:
  - disable kpovmodeler temporary. waiting for freeglut
  - built with gcc-3.3-12
  - remove excludearch s390/s390x


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.2-0.cvs20010726.1
changelog:
  - The -devel package has kscan-related files -n only. Since kscan isn't built
    on s390/s390x, don't build the devel package there.


author: Than Ngo <than@redhat.com> 1:3.00-11.12
changelog:
  - apply official patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179046)


author: Than Ngo <than@redhat.com> 1:3.00-11.11
changelog:
  - apply patch to fix buffer overflow issue in the xpdf codebase
    when handling splash images CVE-2006-0301 (#179046)


author: Than Ngo <than@redhat.com> 1:3.00-5
changelog:
  - update t1lib upstream
  - add cjk font patch, thanks to Yukihiro Nakai, bug #123540
  - fix a bug in font rasterizer, bug #125559
  - improve menue entry, bug #125850


author: Than Ngo <than@redhat.com> 1:2.03-1
changelog:
  - 2.03
  - remove xpdf-2.02pl1.patch, which is included in 2.03
  - fix warning issue (bug #106313)
  - fix huge memory leak, (bug #89552)


author: Than Ngo <than@redhat.com> 2.02-2
changelog:
  - build with freetype in RHL, #79680
  - unsafe temporary files, #79682
  - add Xfree86-devel in buildprereq
  - build with -O0 on ppc, gcc bug


author: Than Ngo <than@redhat.com> 1.00-1
changelog:
  - update to 1.00 (bug #59239, #48904)
  - remove some patch files, which are included in 1.00
  - sub packages for chinese-simplified, chinese-traditional, japanese and korean


author: Than Ngo <than@redhat.com>
changelog:
  - add german translation into desktop file
  - move desktop file to /etc/X11/applnk/Graphics (Bug #32720)


author: Than Ngo <than@redhat.com>
changelog:
  - added a default URL handler script with a corresponding definition
    in Xpdf, thanks to Michal Jaegermann <michal@harddata.com> (Bug #23112)


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.7
changelog:
  - apply additional patch to fix xpdf flaws from Ludwig Nussel
    (CVE-2005-3191, CVE-2005-3192 and CVE-2005-3193)


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.6
changelog:
  - apply more complete fix for CVE-2005-3193 (#175110) suggested by
    security response team, taken from xpdf


author: Jindrich Novy <jnovy@redhat.com> 2.0.2-22.EL4.3
changelog:
  - Add explicit casting to CAN-2004-0888 (former CESA-2004-007) patch
    to let it work on 64bit machines.
  - Modified CAN-2005-0064 patch to the official one.


author: Leonard den Ottolander <leonard * den ottolander nl>
changelog:
  - Move some font utilities, font sources and other relevant files to
    tetex-fonts.
  - Clean up inter-dependencies (bug #11721).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-8
changelog:
  - Fix pdvips (bug #101951).  Patch from MATSUURA Takanori.
  - Fix pxdvi (bug #101954).  Patch from MATSUURA Takanori.
  - Build requires autoconf213 (bug #101338).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-4
changelog:
  - Allow build directory to contain '_'.
  - Ship l2hconf.pm (bug #87900).
  - Updated pxdvi patch (bug #89478).  No longer need crash, 58256 patches.
  - Use Xaw3d (bug #86561).


author: Tim Waugh <twaugh@redhat.com> 2.0.2-3
changelog:
  - Use _smp_mflags, except for pTeX.
  - Add japanese.map back in, and integrate it into pdvips/config/*.map.
  - Make updmap use 'mktemp -d'.
  - Fix pdvips config file search path in texmf.cnf.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-2
changelog:
  - Updated latex2html.
  - Renumber sources and patches.
  - Make dvipdft use 'mktemp -d', and don't use tmpnam() in dvipdfm.
  - Apply badscriptj patch again.
  - Don't need extra texconfig init now.
  - Clean up %prep section.
  - No longer need protos patch.
  - Make marvosym-rightarrow.patch apply with -p1.
  - Updated ptex.
  - Adapted dvipsk-jdvips, pxdvi, prerq patches.
  - Dropped japanese-psfonts patch; no longer seems to apply.
  - No longer need xdvik-dot, ptex-target patches.
  - No need to update ConTeXt, epsf.tex, pdftex.def, epstopdf, fancybox.sty.
  - Remove dvi-to-ps.fpi, testpage.dvi.
  - Don't strip binaries in 'make install'.
  - Ported badscript patch, adding xdvizilla fix.


author: Tim Waugh <twaugh@redhat.com> 2.0.2-1
changelog:
  - 2.0.2.
  - No longer need dvips security, R0 patches.
  - Disable Japanese support for now.
  - Don't patch language.dat (need a better way of doing that anyway).
  - Don't update pdftex.
  - No longer need teTeX-texmf-pdftex.diff, arch, tektronix, acrobat-subr,
    xaw3d, thumbpdf, images, man-typo, thumbpdf, bison patches.
  - Don't apply badscript patch for now (needs adapting).
  - Port texdoc-defaults, fmtutil patches.
  - No longer need to update texinfo.tex or marvosym.sty.
  - Avoid using subshells in %build.
  - Don't run updmap (no longer needed?).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-65
changelog:
  - Don't ship printconf test page for DVI.
  - Don't ship readlink(1), now that it's in the coreutils package (bug #84200).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-61
changelog:
  - Use Guiseppe Ghibò's texmf-gg archive version 1.0.3k/1.0.2k.
  - No longer need cx, Z patches.
  - Remove backup file.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-59
changelog:
  - Revert 'dvips assumes -R' for now (dvips-secure, dvips-output).
  - Fix bison error.
  - Own more directories (bug #73978).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-58
changelog:
  - Tweak file list counts.
  - Don't install files not packaged.
  - Own another directory (bug #73978).
  - Fix 'dvips -R0' (bug #71650).
  - Send dvips output to default location (bug #71650).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-52
changelog:
  - Remove --insecure option from dvips since -R0 already does it.
  - Fix another pxdvi crash (bug #63996).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-49
changelog:
  - Make dvips assume -R by default.
  - Don't make dvilj package any more.  Use dvips and ghostscript instead
    (bug #65391).
  - Don't require gimp-print to build (any more).
  - File list tweaking.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-48
changelog:
  - Change tetex-doc group to Documentation (bug #63049).
  - Fix some man pages (bug #63537, bug #63538).
  - Increase memory limit for xmltex (bug #64752).
  - pdftex: thumbpdf patch.
  - Updated pdftex.def (bug #63712).
  - Updated epstopdf (bug #65021).
  - Updated fancybox.sty (bug #65394).
  - Add ghostscript, gimp-print to tetex-latex build requires list
    (shouldn't need to list gimp-print explicitly really).
  - Add netpbm-progs to tetex-latex build requires and requires lists.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-47
changelog:
  - Apply changes from Tom Moertel <tom@moertel.com> (bug #63257):
    - Added patch that works around font (printing) bug in Acrobat Reader 5.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-46
changelog:
  - Fix bug #62285.
  - Don't strip binaries explicitly (bug #62568).
  - Only ship xdvipaper.dvips in one package (bug #62754).
  - Adjust file list counts.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-43
changelog:
  - Run 'texconfig init' in an appropriate %post script (bug #59950).
  - Don't ship CVS internal files (bug #60055).
  - Try to fix up pdftex.map a little (bug #60164).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-42
changelog:
  - Updated ConTeXt to more useful/stable version 2002-01-28 (bug #59390).
  - Unset HOME before building (bug #59932).
  - Use generalized latex2html build-or-not macros (bug #59940).
  - Adjust file list counts for sanity check.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-41
changelog:
  - Filter out bad requires (bug #59819).
  - Put pstoimg and texexpand in tetex-latex where they belong.
  - Adjust file list counts for sanity check accordingly.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-40
changelog:
  - Mark XDvi noreplace (bug #59636).
  - Set xdvi wwwBrowser resource to mozilla instead of netscape (bug #59636).
  - Mark files in /usr/share/texmf/tex/generic/config/ %config(noreplace)
    (bug #59615).
  - New pdfetex now also generated from pdftex 0.14h source (bug #59390).
  - Adjust file list counts for sanity check.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-39
changelog:
  - Updated marvosym.sty (bug #58025).
  - Updated latex2html (bug #58199).
  - Ship xdviprint and xdvipaper.dvips (bug #58256).
  - Fix latex2html not to use DB_File.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-37
changelog:
  - Update texdoc default helper applications (bug #55874).
  - Make pxdvi generate fonts when they're missing (bug #55883).
  - Mention 'texconfig' in main package %description.
  - Mark dvips config.* noreplace.
  - Mark pdvips config files %config(noreplace).
  - Sanity check the file lists.
  - Set TEXMFLOCAL.
  - Fix comment in tetex.cron (bug #56115).
  - Adjust unused font removal time to 180 days (bug #56115).
  - Add comment in texmf.cnf about how to use HOMETEXMF (bug #57063).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-36
changelog:
  - Rebuild in sane build environment (bug #54961).
  - Enable HOMETEXMF (bug #55286).
  - More texmf.cnf modifications for xmltex.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-31
changelog:
  - Choose a package for files owned by multiple packages (bug #51584).
  - Updated pTeX to 2.1.11, using patch from MATSUURA Takanori (bug #51817).
  - Updated pdftex to 0.14h (bug #48261, bug #46067, bug #52902).
  - Run texconfig init again at the end of installation, to take account of
    things installed by hand (like pdftex).
  - Don't run reautoconf; it shouldn't be needed anyway.
  - Fix build problems arising when Japanese is disabled.


author: Tim Powers <timp@redhat.com> 1.0.7-30
changelog:
  - rebuild to see if that tempfile in /usr/bin doesn't go away (possible build anomoly that can't be reproduced)


author: Tim Waugh <twaugh@redhat.com> 1.0.7-28
changelog:
  - Don't ship backup file texmf.cnf.pdvips (bug #52174).
  - Actually ship the patched texmf.cnf file (bug #48842).
  - Japanese xdvik patch version 1.04.
  - Build Japanese-patched xdvik as 'pxdvik' bug (bug #52089).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-27
changelog:
  - updmap is a config file (bug #50854).
  - Use a different config.ps for pdvips (bug #48842).
  - Run updmap in dvips/config and pdvips/config (bug #37513).
  - Put pdvips-specific settings in texmf.cnf (various, incl. bug #48842).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-26
changelog:
  - Don't put texi2html.html in /usr/html (bug #50643).
  - Newer Japanese dvipsk patch (bug #46785).
  - Build Japanese-patched dvipsk as 'pdvips' like SuSE (bug #46785).
  - Don't apply patch 46, and hopefully fix bug #48842.


author: Tim Waugh <twaugh@redhat.com> 1.0.7-22
changelog:
  - XDvi resources: mfmode back to cx (bug #44182).
  - Patch from Oliver Paukstadt <oliver.paukstadt@millenux.com>:
    - ported to IBM zSeries (s390x, 64 bit)


author: Tim Waugh <twaugh@redhat.com> 1.0.7-17
changelog:
  - More backup files not to ship (bug #35801).
  - Remove the ^Z from picins.sty (bug #36497).
  - Run updmap to get psfonts.map updated (bugs #17333, #37513).


author: Tim Waugh <twaugh@redhat.com> 1.0.7-16
changelog:
  - Updated texinfo translation files (bug #8682).
  - Make tetex-dvips require psutils (bug #13216).
  - Don't ship backup file from cx patch.
  - Make japanese.map work (bug #32134).
  - Make xdvi prettier (bug #17415).
  - Fix PDF images (bug #32703).


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Turn on Japanese changes (bug #26249).
  - Japanese support clashed with xaw3d patch; fixed up.
  - Replace dvi-to-ps (rhs-printfilters) with mf40-tetex_filters
    (printconf).  Create testpage.dvi (from tex/latex/base/testpage.tex).
  - Default to lj instead of cx in gray.mf and black.mf (bug #25988).
  - Build requires VFlib2-devel.


author: Tim Waugh <twaugh@redhat.com>
changelog:
  - Update tetex-dvilj description.
  - Patch latex2html to support tabularx environments better (bug #24852).
  - Make xdvi work with files that end in '.' (bug #11478).
  - Mark ls-R as %ghost (bug #12275).
  - Build requires w3c-libwww-devel.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - sync with Mandrake version.
  - Revert gcc296 patch, no longer needed.
  - Enable i18n hyphenation for several languages (#11570,#17040).
  - jadetex hash is now 50000 (#9092)
  - create symlinks for Euler fonts (#9782).
  - correct comment tetex.cron (#10022).
  - unset TEXINPUTS in %build/%install (#10412).
  - use Xaw3d rather than Xaw (#17415).
  - insert thumbnails into pdflatex correctly (#19278).
  - update to texi2html-1.64 (#20604).
  - add latex2html (but not on ia64) (#16966).
  - hacks to avoid accidental version clash with system libraries (#21263).
  - rebuild with gcc-2.96-69 so that latex.fmt is built (#22838).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - merge japanese changes (disabled for now, per msw@redhat.com).
  - add support for Icelandic (Richard Allen <ra@hp.is>).


author: Giuseppe Ghibò <ghibo@mandrakesoft.com> 1.0.7-7mdk
changelog:
  - updated the LaTeX hyperref package to version 6.70f for getting jadetex
    working.
  - added support for spanish, portuguese and sweden pattern hyphenation in the
    default LaTeX format files (hope trie values are enough...).


author: Giuseppe Ghibò <ghibo@mandrakesoft.com> 1.0.7-5mdk
changelog:
  - changed arrays texmf.cnf the array value for jadetex, pdfjadetex, according to  the Christoph, Rahtz, Pepping's "Installing JadeTeX" document.


author: Giuseppe Ghibò <ghibo@mandrakesoft.com>
changelog:
  - updated to version 1.0.7.
  - merged k6 and arm patches into teTeX-1.0-arch.patch
  - sligtly increased internal array main_memory, so that latex
    doesn't have problems with big macro packages such as pstricks
    or Xy-TeX.
  - integrate teTeX-1.0-tektrokix.patch (fixes a typo) from Jeff
    Johnson <jbj@redhat.com>.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - build for Red Hat 6.2 (and sync with Mandrake tetex-1.0.6-6mdk).
  - always apply AMD K6 patch; won't hurt, and removes platform dependency.
  - spelling correction (#7085).


author: Giuseppe Ghibò <ghibo@linux-mandrake.com>
changelog:
  - fine tuning subpackage package list.
  - added teTeX dependence to package xdvi (it cannot works without fonts).


author: Giuseppe Ghibò <ghibo@linux-mandrake.com>
changelog:
  - cleaned %clean. Now spec file support buildroot.
  - added support for 'resolution' in dvi-to-ps.fpi as well as
    the config.generic file.
  - fixed a problem in manpage links (reported by Dusan
    Gabrijelcic <dusan@kamra.e5.ijs.si>).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - update to 1.0.6.
  - merge in Giuseppe Ghibò changes from mandrake package.
  - dvi-to-ps.fpi: read postcript configuration settings (#3379).


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - fixed new bugs reported by Thomas Esser (included
    patch 1.0.5-1.0.6-pre).
  - added amstex, bamstex and bplain to the list of format files to build.


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - fixed and removed unneeded things in teTeX-1.0-texmfcnf.patch,
    according to Thomas Esser suggestions.


author: Giuseppe Ghibò <ghibo@caesar.polito.it>
changelog:
  - upgraded to teTeX 1.0 final.
  - removed texmf.cnf external config file, and provided
    as patch.
  - removed ``texconfig init'' (now it's included into 'make install').
  - moved texmf unpacking to buildroot before 'make install'.
  - added italian hyphenation.


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - upgrade to 1.0.1.
  - add buildroot translated texmfmain for install (#1719)
  - mark /usr/share/texmf/xdvi/XDvi as %config (#1067)
  - generate texmf.cnf and then merge in old conventions


author: Kayvan A. Sylvan <kayvan@sylvan.com>
changelog:
  - upgraded snapshot
  - Fixed PATH setting for ``texconfig init''. As it was, you could
    not build a working teTeX on a machine with tetex installed.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - I think I have got the buildroot problems right this time
  - auto rebuild in the new build environment (release 15)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - slight changes in the packaging (unpack texmf directly into the buildroot
    and build it there)
  - added texmfsrc source tarball to comply with the license


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - add patch to make it compile on the arm (RmS)
  - build for glibc 2.1
  - use tar hack instead of the cp -a to overcome cp's brokeness re: symlinks
    handling


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - requires ed
  - Fixed obsoletes line
  - credted the doc subpackage
  - fully buildroot
  - require dialog in the main package
  - add support for wmconfig in for the xdvi package


author: Otto Hammersmith <otto@redhat.com>
changelog:
  - added install-info support (dvips, fontname and kpathsea)
  - combined the two changelogs in the spec file.


author: Michael Fulbright <msf@redhat.com>
changelog:
  - Upgraded to tetex-lib to 0.4pl8 and fixed cron tmpwatch entry to not
    delete /var/lib/texmf/fonts and /var/lib/texmf/texfonts


author: Michael Fulbright <msf@redhat.com>
changelog:
  - Upgraded to 0.4pl6, and fixed file permissions on /var/lib/texmf/texfonts
    so normal users could create fonts on demand.


author: Elliot Lee <sopwith@redhat.com> 2.0.0-7
changelog:
  - More missing libXau hackery (prog_as.patch so we can run auto* to pull 
  in an updated libtool)
  - _smp_mflags


author: Steve Conklin <sconklin@redhat.com> 2.1.19-11
changelog:
  - Resolves: bz243910 krb5-libs are not thread-safe
  - Resolves: bz244075 Memory leaks in digest-md5 plugin
  - Added missing build dependency for groff to spec file


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-8
changelog:
  - add unapplied patches which make the DIGEST-MD5 plugins omit the realm
    argument when the environment has $CYRUS_SASL_DIGEST_MD5_OMIT_REALM set to a
    non-zero value, for testing purposes
  - add missing build dependency on zlib-devel (#190113)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-7
changelog:
  - make v1 of the sasl library use /dev/urandom instead of /dev/random, as
    we do in v2 of the library at compile-time (#157012)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-6
changelog:
  - backport fix for segfault in the digest-md5 module in cases when the
    client didn't supply a realm (#189814, CVE-2006-1721)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.19-1
changelog:
  - rebuild (the 2.1.19 changelog for fixing a buffer overflow referred to a CVS
    revision between 2.1.18 and 2.1.19)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a saslauthd_version option to libsasl's saslauthd client and teach it to
    do the right thing
  - enable the saslauthd client code in libsasl version 1 (it's still going away!)
  - add saslauthd1-checkpass/saslauthd2-checkpass for testing the above change


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.17, forcing the gssapi plugin to be shared now, as before
  - use a bundled libdb (#112215)
  - build static-with-all-plugins and normal-shared libsasl versions
  - add sasl2-{shared,static}-mechlist for very basic sanity checking
  - make inclusion of sasl1 stuffs conditional, because it's so going away


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-6
changelog:
  - use /dev/urandom instead of /dev/random for SASL2 (docs indicate that this is
    safe if you aren't using OTP or SRP, and we build neither); SASL1 appears to
    use it to seed the libc RNG only (#103378)


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.15-5
changelog:
  - install saslauthd's mdoc page instead of the pre-formatted man page, which
    would get formatted again


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - include testsaslauthd
  - note in the README that the saslauthd protocol is different for v1 and v2,
    so v1's clients can't talk to the v2 server


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - consider either des_cbc_encrypt or DES_cbc_encrypt to be sufficient when
    searching for a DES implementation in libcrypto
  - pull in CPPFLAGS and LDFLAGS from openssl's pkg-config data, if it exists


author: Nalin Dahyabhai <nalin@redhat.com> 2.1.7-3
changelog:
  - rebuild, overriding sasldir when running make so that on multilib systems
    applications will be able to load modules for the right arch


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.1.0, which is designed to be installed in parallel with cyrus sasl
    1.x, so fork the package and rename it to cyrus-sasl2
  - add the sasldb auxprop plugin to the main package
  - add disabled-by-default saslauthd init script
  - move the .la files for plugins into their respective packages -- they're
    needed by the library


author: Nalin Dahyabhai <nalin@redhat.com> 1.5.24-21
changelog:
  - include sample programs in the -devel subpackage, prefixing their names
    with "sasl-" to reduce future potential naming conflicts


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add gdbm-devel as a build dependency (#44990)
  - split off CRAM-MD5 and DIGEST-MD5 into a subpackage of their own (#43079,
    and dialogs with David L. Parsley)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - split out the PLAIN and LOGIN mechanisms into their own package (this allows
    an administrator to disable them by simply removing the package)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move .so files for modules to their respective packages -- they're not -devel
    links meant for use by ld anyway


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - force use of gdbm for database files to avoid DB migration weirdness
  - enable login mechanism
  - disable gssapi until it can coexist peacefully with non-gssapi setups
  - actually do a make in the build section (#15410)


author: Mads Kiilerich <mads@kiilerich.com>
changelog:
  - updated to sasl 1.5.11
  - configure --disable-krb4 --without-rc4 --disable-cram 
    because of missing libraries and pine having cram as default...
  - handle changing libsasl.so versions


author: Tom Lane <tgl@redhat.com> 4.1.20-2.RHEL4.1.0.1
changelog:
  - Fix CVE-2007-3780: remote DOS via bad password length byte
  Resolves: #257621
  - Workaround for new gcc bug on ia64: it locks up while compiling sql_table.cc


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Built for 55.0.3.EL
  - Fixes problem which would could cause viewing /proc/cluster/dlm_locks
    to crash the system
  - Resolves: rhbz#250319 rhbz#250156


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixes a problem which causes a TCP connection to the DLM port to block
    DLM operations.
  - Resolves: rhbz#248957


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed a problem which caused the glock trimming patch to work incorrectly.
  - Resolves: rhbz#247650


author: Don Howard <dhoward@redhat.com> [2.6.9-55.0.4]
changelog:
  -revert: add missing audit_notify_watch() to removexattr
  -autofs4: fix race between mount and expire (Ian Kent) [248126]


author: Don Howard <dhoward@redhat.com> [2.6.9-55.0.3]
changelog:
  -Fix panic following reload of LSI Fusion driver (Chip Coldwell) [227451]
  -Fix buffer overflow in capi debug functions (Anton Arapov) [243257] {CVE-2007-1217}
  -add missing audit_notify_watch() to removexattr (Alexander Viro) [248126]
  -fix VM hangs by balancing inactive lists and setting better values for dirty limits (Larry Woodman) [248141]
  -nfs: add nordirplus option (Jeff Layton) [249848]
  -ia64: fix vmalloc perfmon crash (Luming Yu) [250199] {CVE-2006-0558}
  -fix stack randomization across suid/sgid exec (Ernie Petrides) [250200]


author: Mike A. Harris <mharris@redhat.com> 6.8.0-5
changelog:
  - Enable "#define HasDevRandom YES" in host-$arch.def for bug (#126205)
  - Remove "Requires: xorg-x11, xorg-x11-libs = 6.8.2-1.EL.31" from twm
    subpackage, as the libs twm is linked to should automatically be picked up
    by rpm "find-provides", and xterm moved to a separate package a long time
    ago, so both of these should no longer be needed. (#123423)
  - Added xorg-x11-6.8.0-ia64-460gx-pci-typo.patch to fix typo in Intel 460gx
    PCI handling code on ia64. (#126586)
  - Remove "XtermWithI18N" from host.def as we build xterm externally
  - Added SElinux fix to xfs initscript (#130421,130969)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.14-80.SLx
changelog:
  - 1.4.14 release, no additional patches
  - updated CellServDB from grand.central.org (last changed 2010-12-13)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.12-79.SLx
changelog:
  - 1.4.12 release, no additional patches
  - updated CellServDB from grand.central.org (phy.bris.ac.uk is ok)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.12-77.pre1.SLx
changelog:
  - prerelease 1 for next upstream release
  - patches 1065..1069 are already in
  - added patches since prerelease from stable-1_4_x git branch
  - updated CellServDB from grand.central.org (dementia.org entry changed)
  - changed CellservDB entry for phy.bris.ac.uk (mail from Winnie Lasseco)
  - package afs_compile_et + manpage (in -devel)


author: Stephan Wiesand <stephan wiesand desy de> 1.4.11-76.SLx
changelog:
  - added more post-1.4.11 fixes from stable-1_4_x git branch:
    1068: fix-linux24-builds-20090718
    1069: kernel-init-vrequest-structure-20090914


author: Stephan Wiesand <stephan wiesand desy de> 1.4.11-75.SLx
changelog:
  - upstream release 1.4.11
  - updated CellServDB from grand.central.org
  - install release notes and changelog into /usr/share/doc/openafs-<version>
  - explicitly build src/auth/setkey (for -debug package)
  - do not install the new compile_et manpage, it clashes with e2fsprogs-devel
  - do not install the new rmtsysd manpage, this doesn't exist for linux yet
  - copyauth is no longer built; delete the manpage as well
  - package new manpages for restorevol, vsys
  - added post-1.4.11 fixes from stable-1_4_x git branch:
    1066: export-ktc-curpag-everywhere-20090713
    1067: fix-getvolume-for-nonroot-dynroot-fids-20090722


author: Stephan Wiesand <stephan wiesand desy de> 1.4.10-74.SLx
changelog:
  - upstream release 1.4.10
  - removed patches 1062..65
  - updated CellServDB from grand.central.org; remove wallace from RAL entry


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.8-71.SLx
changelog:
  - upstream release 1.4.8
  - post release patches:
    1062: viced-helper-thread-count-20081111 (1-liner to stay within 128 threads)
    1063..65: fileserver man page updates


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.8-0.69.pre1.SLx
changelog:
  - patches 1058..1061 are in pre1
  - package new manpages for krb.conf and vldb_convert (in -server)
  - upstream now installs the K5 klog as klog.krb5; package, + a symlink to k5log
  - should no longer need 1057


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.7-68.SLx
changelog:
  - replace 1056 by 1057: linux-hlist-unhashed-opencoding-20080520
  - more post-1.4.7 patches (either trivial, or serious and simple):
    1058: butc-xbsa-lwp-protoize-damage-20080501
    1059: uuid-corrected-duplicate-check-20080501
    1060: viced-large-more-threads-20080506
    1061: vos-sync-flag-voltype-properly-20080521


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.7-0.61.pre2.SLx
changelog:
  - first stab at 1.4.7 prerelease
  - had to change twiddle patch (301 -> 303) (one of two typos is now fixed)
  - 1051 is already in now
  - parallel make is hopelessly broken now; remove retry kludges and don't try
  - remove useless symlink manpages
  - package the new read_tape manpage
  - temp. patches from cvs (should be in pre3):
    1052: linux-flush-unlock-20080402
    1053: linux-flush-compare-20080402
    1054: vlserver-checksignal-returns-voidstar-20080401


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.6-58.SLx
changelog:
  - new upstream release; fixes fileserver bugs (OPENAFS-SA-2007-003, DOS)
  - this obsoletes patches 1052,54,55;
  - also removed linux-nsec-timestamp-zero (1053) for the time being
  - renamed klog.krb5 to k5log
  - => this is a build of pristine openafs-1.4.6, except for the extra k5log
  - largefile-fileserver is the default since 1.4.5 -> adapt configure options
  - added "--with debugsyms" build option


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.5-56.SLx
changelog:
  - first patches from cvs
    1051: krb5-klog-20071101
    1052: cbd-use-callback-size-for-callbacks-20071105
    1053: linux-nsec-timestamp-zero-20071106
    1054: viced-missing-lock-20071109
    1055: viced-accurately-track-file-callbacks-20071112
  - krb5 capable klog packaged as klog.krb5 in openafs-krb5


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.5-0.53.pre3.SLx
changelog:
  - prerelease 3 of next upstream version, obsoletes patches 1018..1049
  - new patch 1050: oldfs-2gb (see RT #73720, but this one also works on amd64)
  - new man pages for CellAlias and pt_util
  - there is no more kseal executable
  - ka-forwarder now comes with upstream, and with a man page
  - => we no longer need afs-krb5 at all; this also obsoletes patches 103, 104, 204
  - removed unused SuidCells
  - use man-pages from release, meanwhile they are better than those from #19268
  - make sure man pages are packaged once only
  - support for building against lustre-kernel-source on SL4/5


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-52.SLx
changelog:
  - more patches from CVS:
    1044: viced-assert-less-20070719
    1045: viced-multi-probe-addr-20070808
    1046: find-dcache-just-hold-the-lock-slightly-longer-20070820
    1047: linux-modparam-269-updates-20070821
    1048: linux-module-error-handling-20070821-modified
    1049: viced-remove-asserts-20070821


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-51.SLx
changelog:
  - SL5: actually add the improved init script...
  - more patches from CVS:
    1037: bucoord-dump-levels-20070517.patch
    1038: budb-ol_verify-20070706.patch
    1039: clone-dont-hold-vol-lock-20070516.patch
    1040: des-p-temp-volatile-20070703.patch
    1041: memcache-alloc-failures-20070623.patch
    1042: pagsh-krb5-20070710.patch
    1043: tvolser-locking-updates-20070322.patch


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-50.SLx
changelog:
  - SL5: improved afs-server init script; also set it to unconfined_exec_t
    in postinstall if selinux active
  - updated CellServDB to current version from grand.central.org
  - more patches from CVS:
    1033: volser-delete-clone-not-source-20070702
    1034: avoid-empty-uuid-20070618
    1035: forceallnewconns-prototype-20070627
    1036: volser-earlier-logging-20070627


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-49.SLx
changelog:
  - SL3: added corrected patch1032 from CVS to find 64bit syscall table on amd64
    (openafs-1.4.4-amd64-linux-24-syscall-probe-symbol-change-20070623-fixed)


author: Stephan Wiesand <stephan.wiesand@desy.de> 1.4.4-47.SLx
changelog:
  - SL5: fix /etc/init.d/afs-server (missing fi in stop code)
  - more patches from CVS:
  - 1029: linux-kmem-destroy-fix-20070609
  - 1030: vsprocs-avoid-bogus-error-20070606
  - 1031: sl5-vfs-flush-3arg-20070612 (modified patch w/o ifdefs since that
    would require running regen.sh - which doesn't work on SL5)


author: Than Ngo <than@redhat.com> 3.3.3-13.RHEL4
changelog:
  - Resolves: #276991, Qt UTF8 improper character expansion, CVE-2007-0242
  - Resolves: #269101, Qt off by one buffer overflow, CVE-2007-4137


author: Steve Dickson <steved@redhat.com> 1.0.6-8
changelog:
  - Add function to handle xdr of gss_buffer_desc.  This properly
    handles the size_t/u_int mismatch on 64-bit platforms. (bz 189900)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.14
changelog:
  - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276)
  - fix CVE-2006-2940 - parasitic public keys DoS (#207274)
  - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940)
  - fix CVE-2006-4343 - sslv2 client DoS (#206940)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.11
changelog:
  - fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180)
  - don't overwrite customized ca-bundle.pem on upgrade (#175811)


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.4
changelog:
  - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which
    disables the countermeasure against man in the middle attack in SSLv2
    (#169863)
  - more fixes for constant time/memory access for DSA signature algorithm


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.2
changelog:
  - fix CAN-2005-0109 - use constant time/memory access mod_exp
    so bits of private key aren't leaked by cache eviction (#157631)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-33
changelog:
  - add an intermediate <openssl/opensslconf.h> which points to the right
    arch-specific opensslconf.h on multilib arches


author: Joe Orton <jorton@redhat.com> 0.9.7a-27
changelog:
  - updated ca-bundle.crt: removed expired GeoTrust roots, added
    freessl.com root, removed trustcenter.de Class 0 root


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-25
changelog:
  - add dependency on zlib-devel for the -devel package, which depends on zlib
    symbols because we enable zlib for libssl (#102962)


author: Phil Knirsch <pknirsch@redhat.com> 0.9.7a-24
changelog:
  - Use /dev/urandom instead of PRNG for libica.
  - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c
  - Use latest ICA engine patch from IBM.


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-22
changelog:
  - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged
    as not needing executable stacks


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544)
    and heap corruption (CAN-2003-0545)
  - update RHNS-CA-CERT files
  - ease back on the number of threads used in the threading test


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - backport fix for engine-used-for-everything from 0.9.7b
  - backport fix for prng not being seeded causing problems, also from 0.9.7b
  - add a check at build-time to ensure that RSA is thread-safe
  - keep perlpath from stomping on the libica configure scripts


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7a-5
changelog:
  - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's
    attack (CAN-2003-0131)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-8
changelog:
  - add fix to guard against attempts to allocate negative amounts of memory
  - add patch for CAN-2003-0078, fixing a timing attack


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.7-6
changelog:
  - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(),
    to get the right behavior when passed uninitialized context structures
    (#83766)
  - build with -mcpu=ev5 on alpha family (#83828)


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-30
changelog:
  - add configuration stanza for x86_64 and use it on x86_64
  - build for linux-ppc on ppc
  - start running the self-tests again


author: Gary Benson <gbenson@redhat.com> stronghold-0.9.6c-1
changelog:
  - upgrade to 0.9.6c
  - bump BuildArch to i686 and enable assembler on all platforms
  - synchronise with shrimpy and rawhide
  - bump soversion to 3


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-4
changelog:
  - move man pages back to %{_mandir}/man?/foo.?ssl from
    %{_mandir}/man?ssl/foo.?
  - add an [ engine ] section to the default configuration file


author: Nalin Dahyabhai <nalin@redhat.com> 0.9.6b-3
changelog:
  - add patches for AEP hardware support
  - add patch to keep trying when we fail to load a cert from a file and
    there are more in the file
  - add missing prototype for ENGINE_ubsec() in engine_int.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a script for creating dummy certificates
  - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.?


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6a
  - use the build-shared target to build shared libraries
  - bump the soversion to 2 because we're no longer compatible with
    our 0.9.5a packages or our 0.9.6 packages
  - drop the patch for making rsatest a no-op when rsa null support is used
  - put all man pages into <section>ssl instead of <section>
  - break the m2crypto modules into a separate package


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.6
  - enable MD2
  - use the libcrypto.so and libssl.so targets to build shared libs with
  - bump the soversion to 1 because we're no longer compatible with any of
    the various 0.9.5a packages circulating around, which provide lib*.so.0


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152
    bytes or so, causing EVP_DigestInit() to zero out stack variables in
    apps built against a version of the library without it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - disable some inline assembly, which on x86 is Pentium-specific
  - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove -Wa,* and -m* compiler flags from the default Configure file (#20656)
  - add the CA.pl man page to the perl subpackage


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - byte-compile python extensions without the build-root
  - adjust the makefile to not remove temporary files (like .key files when
    building .csr files) by marking them as .PRECIOUS


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.9.5a, modified for U.S.
  - add perl as a build-time requirement
  - move certificate makefile to another package
  - disable RC5, IDEA, RSA support
  - remove optimizations for now


author: Bernhard Rosenkrdnzer <bero@redhat.de>
changelog:
  - inital packaging
  - changes from base:
    - Move /usr/local/ssl to /usr/share/ssl for FHS compliance
    - handle RPM_OPT_FLAGS


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.6.el4
changelog:
  - replace gimp_error() by gimp_message()/gimp_quit() in a few plugins so they
    don't crash but gracefully exit when encountering error conditions
  - fix endianness issues in the PSP plugin to avoid it doing (seemingly) endless
    loops when loading images
  - fix endianness issues in the PCX plugin which cause it to not detect corrupt
    images


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.5.el4
changelog:
  - add safeguard to avoid crashes while loading corrupt PSD images (#247571,
    patch by Raphaël Quinet)


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.4.el4
changelog:
  - don't divide by zero when loading a layer or mask with zero width or height
    when loading PSD images (#247571, patch by Sven Neumann)


author: Nils Philippsen <nphilipp@redhat.com> - 2.0.5-7.0.3.el4
changelog:
  - add ChangeLog entry to psd-invalid-dimensions patch (#247571)
  - validate size values read from files before using them to allocate memory in
    various file plugins (#247571, patch by Mukund Sivaraman and Raphaël Quinet)
  - detect invalid image data when reading files in several plugins (#247571,
    patch by Sven Neumann and Raphaël Quinet, adapted for 2.0.5)
  - validate size values read from files before using them to allocate memory in
    the PSD and sunras plugins (#247571, patch by Mukund Sivaraman)
  - convert spec file to UTF-8


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.7]
changelog:
  - fix autofs problem with symbolic links (Ian Kent) [248126]
  - fix privilege escalation via PR_SET_PDEATHSIG (Peter Zijlstra) [252306] {CVE-2007-3848}
  - fix bound check ordering issue in random driver (Vitaly Mayatskikh) [275941] {CVE-2007-3105}
  - fix memory leak of dma_alloc_coherent() on x86_64 (Prarit Bhargava) [282351]
  - makes CIFS honour a process' umask (Jeff Layton) [293121] {CVE-2007-3740}
  - fix signing mount options and error handling for CIFS (Jeff Layton) [293141] {CVE-2007-3843}


author: Martin Stransky <stransky@redhat.com> - 1.0.9-5.el4
changelog:
  - added pathes for Mozilla bugs 267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942,325761,392149


author: Miloslav Trmac <mitr@redhat.com> - 1.12-2.el4.4
changelog:
  - Don't install resizecons.8 on non-x86 (#186877, patch by Keiichi Mori
    <kmori@redhat.com>)
  - Don't report loadkeys errors on kernels with CVE-2005-3257 fixed (#191477)


author: Adrian Havill <havill@redhat.com> 1.08-9
changelog:
  - don't print "plus before..." warnings about non-supported capslock
    in unimode <Andries.Brouwer@cwi.nl> (#81855)


author: Adrian Havill <havill@redhat.com> 1.08-7
changelog:
  - make euro/latin-9 the default instead of latin-1 and 7-bit (#97013)
  - fix swedish keymap; se, not sv (#88791)
  - add fr-latin0 legacy alias of fr-latin-9 (#88324)
  - add ".map" ext to filename param of init script (#90562)


author: Nalin Dahyabhai <nalin@redhat.com> 1.08-2
changelog:
  - only output terminal unicode init sequence if both stdout and stderr are
    connected to terminals, so that it doesn't show up when script outputs
    get piped to files


author: Nalin Dahyabhai <nalin@redhat.com> 1.06-27
changelog:
  - add detached signature
  - remove directory names from PAM configuration so that the same config file
    can be used for any arch on multilib systems


author: Jakub Jelinek <jakub@redhat.com> 1.06-24
changelog:
  - use cyr-sun16 cyrillic chars in latarcyrheb-sun16 font
    instead of old LatArCyrHeb-16 chars
  - add Euro character to latarcyrheb-sun16
  - use latarcyrheb-sun16 by default in unicode_start script


author: Than Ngo <than@redhat.com>
changelog:
  - update to 1.0.6
  - use %{_tmppath}
  - use find_lang
  - support new gettext
  - remove some patch files, which are included in 1.0.6
  - fix to use RPM_OPT_FLAGS


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.05-2
changelog:
  - Build everything, obsoletes console-tools
  - s/Copyright:/License:/
  - License is GPL, not just distributable
  - Add our compose mappings from old console-tools
  - Add triggerpostun -- console-tools magic to get sane fonts and mappings


author: Than Ngo <than@redhat.com> - 6:3.3.1-6.l4
changelog:
  - Resolves: #290851,
    CVE-2007-4569, kdm password-less login vulnerability
    CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofing


author: Than Ngo <than@redhat.com> - 6:3.3.1-7.RHEL4
changelog:
  - Resolves: #293881, UTF-8 overlong sequence decoding vulnerability, CVE-2007-0242
  - Resolves: #293551, Konqueror improper HTML comment rendering, CVE-2007-0537


author: Than Ngo <than@redhat.com> 6:3.3.1-3.11
changelog:
  - Kate backup file permission leak, apply patch to fix this vulnerabilities
    CAN-2005-1920, #163130


author: Than Ngo <than@redhat.com> 6:3.3.1-3.8
changelog:
  - backport the patch to fix kimgio input validation vulnerabilities,
    CAN-2005-1046, #152092, thanks to KDE security team


author: Than Ngo <than@redhat.com> 6:3.3.1-3.3
changelog:
  - Applied patch to fix Konqueror Java Vulnerability, CAN-2004-1145
  - Applied patch to fix ftp kioslave command injection, CAN-2004-1165


author: Than Ngo <than@redhat.com> 6:3.2.3-4
changelog:
  - built with libpcre support, it's needed for using regular expressions in Javascript code bug #125264


author: Warren Togami <wtogami@redhat.com> 3.2.2-2
changelog:
  - #120265 #119642 -devel req alsa-lib-devel esound-devel fam-devel
                               glib2-devel libart_lgpl-devel
  - #88853 BR autoconf automake libpng-devel libvorbis-devel
              glib2-devel libtiff-devel
  - cups-libs explicit epoch, some cleanups


author: Than Ngo <than@redhat.com> 6:3.1.93-0.1
changelog:
  - 3.2 Beta 1
  - remove many patches, which are now in upstream
  - adjust many redhat specific patch files
  - cleanup rpm file list


author: Than Ngo <than@redhat.com> 6:3.1.1-2
changelog:
  - add patch file from CVS to fix: https authentication through proxy fails
  - add patch file from CVS to fix: KZip fails for some .zip archives


author: Than Ngo <than@redhat.com> 6:3.1-3
changelog:
  - add patch to set correct default encoding, bug #82539
  - don't overwrite defaultstyle, bug #74795, #80103


author: Than Ngo <than@redhat.com> 3.0.4-1
changelog:
  - 3.0.4
  - Added 2 patch files for built-in tests from AndreyPozdeev@rambler.ru (bug #75003)
  - Added KDE Url (bug #54592)


author: Than Ngo <than@redhat.com> 3.0.3-10
changelog:
  - Added fix to get correct Lib directory name on 64bit machine
  - New fix to handle desktop file renames (bug #74071)


author: Than Ngo <than@redhat.com> 3.0.2-4
changelog:
  - Added system tray dock patch from Harald Hoyer
  - Added Buildrequires audiofile-devel (bug #69983)
  - Added Buildrequires openssl-devel (bug #64858)
  - Rebuild against qt 3.0.5 (bug #70379)
  - Added patch to remove "about KDE" menu item from help menu (bug #67287)
  - Fixed dependencies bug by update (bug #69798)
  - Added some bugfixes from 3.0.2 stable branches


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-10
changelog:
  - Change sonames to something indicating the compiler version if a compiler
    < gcc 3.1 is used
  - Add compat symlinks for binary compatibility with other distributions


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-7
changelog:
  - Merge the following fixes from KDE_3_0_BRANCH:
    - RFC 2818 compliance for KSSL
    - Detect premature loss of connection in http ioslave (this may have
      been the cause of the bugzilla CGI.pl:1444 issue)
    - Don't send SIGHUP to kdesu child applications
    - Fix KHTML form rendering problems


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-2
changelog:
  - Add a khtml fix from KDE_3_0_BRANCH, prevents form content from
    being submitted twice, which probably caused the CGI.pl:1444 bug
    some people have noted with Bugzilla.


author: Than Ngo <than@redhat.com> 3.0.0-0.cvs20020326.2
changelog:
  - scale down icons for submenus pointing to legacy
    applications rather than keeping them at 32x32 (bug #61506)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020107.1
changelog:
  - arts-devel provides kdelibs-sound-devel for backwards compatibility
  - Update, rebuild with gcc 3.1-0.15


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20020104.1
changelog:
  - Update
  - Make sure we aren't built with gcc 3.1 prior to -0.14
  - Remove -O0 hack, no longer needed with gcc 3.1-0.14
  - Adapt spec file to base changes (good-bye, libkfile, libkssl and libksycoca!)


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.0.0-0.cvs20011214.1
changelog:
  - Update
  - Update Japanese patches
  - Temporarily exclude alpha (compiler bugs)
  - Add workaround for gcc bug #57502


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-5
changelog:
  - Merge fixes from current KDE_2_1_BRANCH - fixes 2 memory leaks and
    makes kio_http more tolerant to broken Auth requests sent by some
    servers
  - Add missing mcop{class,type} files in arts package
  - Handle PATH changes in kdesu, some KControl modules need /sbin in the
    PATH... (#34209)
  - Add KDE2PORTING.html file in /usr/share/docs/kdelibs-devel-3.3.1,
    it's quite useful...


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-3
changelog:
  - Fix up kded to watch directories we can't write to
  - Use mkstemp() rather than tmpfile() for xauth file generation
    in kdesu


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1.1-2
changelog:
  - Fix up cookie escaping (this should finally fix bugzilla for good)
  - Security: cookies shouldn't be world readable, some websites store
    login information


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-10
changelog:
  - Don't crash in KProcess if getpwuid() returns NULL, happens with
    LDAP authentication
  - Require qt >= 2.3.0 (#31770)
  - Fix crash in KURLCompletion


author: Bernhard Rosenkraenzer <bero@redhat.com> 2.1-9
changelog:
  - Add some more fixes and <layer> support from KDE_2_1_BRANCH
  - Patch KService to not add K menu entries if the desktop files
    aren't readable by the user we're running at (removes bogus
    timetool, control-panel etc. entries; I'd still prefer running
    those through consolehelper over hiding them from users...)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Revert to putting config files in /usr/share/config
  - Fix up cookie handling when combined with JavaScript (#30577)
  - Add some html rendering fixes from KDE_2_1_BRANCH


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add khtml+DOM fixes from KDE_2_1_BRANCH
  - BuildPrereq docbook stuff so we don't get broken kdb2html stuff


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix klauncher escape sequence handling (#25307, Patch from Tim Waugh)
  - Fix krun escape sequence handling (#25134, Patch from Tim Waugh)
  - Make /usr/share/doc/HTML/en/kspell/common symlink relative (#24793)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Apply patch from CVS to fix up Cookie handling in Konqueror.
    Finally Bugzilla works perfectly in Konqueror.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - kdelibs-sound-devel requires audiofile-devel, kdelibs-sound doesn't.
  - Update, fixes various HTML rendering bugs


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - remove the Java hacks; KDE now requires a Java 2 compliant
    environment, so there's no chance to get any of it to run
    with current kaffe.


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move libkmedia2_idl to arts; it's needed there
  - Fix up the Java stuff. The new stuff is ugly, but seems to work
  - Get rid of the compiler bug workaround: the ICE was triggered by
    unclean code
  - Change the description of the arts package for translation purposes


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Work around compiler bugs (sigh)
  - Fix specfile (added files)
  - Split arts into a separate package; it's required by SDL,
    and depending on kdelibs-sound (which requires kdelibs)
    is overkill


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Update CVS - security fix in Java/Javascript code.
    There seems to be some conspiracy going on - "commit important
    fixes right after Red Hat built new RPMs" or the likes. :>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - update to current KDE_2_0_BRANCH, now that most of the ".0 release"
    bugs are fixed
  - fix typo in specfile: it's mitshm, not libshm
  - Add ksendbugmail, required for the "Report Bug" feature to work


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Move back to /usr
  - New CVS snapshot
  - Clean up specfile
  - Use %defines so we can build CVS snapshots and releases from the same
    specfile


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot, new Qt
  - various fixes to spec file
  - get rid of -O0, no longer required with gcc 2.96-41 (except on alpha)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - new snapshot
  - split: move sound support to a separate package, suggestion from
    David Faure <david@linux-mandrake.com>


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - move programming docs to /usr/share/doc/kdelibs-devel-3.3.1-9.el4
    and to kdelibs-devel package
  - new snapshot


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Add qt version number in Requires, add kdoc HTML help
    (patch from David Faure <david@mandrakesoft.com>)
  - Actually use the %clean section


author: Bernhard Rosenkraenzer <bero@redhat.de>
changelog:
  - 2.0 snapshots
  - Change prefix to respect %{prefix} so we can coexist with KDE 1.x
  - kdelibs-devel requires kdelibs


author: Preston Brown <pbrown@redhat.com>
changelog:
  - remove linking to qimgio from kdecore, moved to kpanel/kfm directly
  - renamed "lowcolor" directory to "locolor"


author: Preston Brown <pbrown@redhat.com>
changelog:
  - added lowcolor icons directory and /usr/share/pixmaps to icon search path
  - hacking to recognize .desktop files as application/x-kdelnk


author: Preston Brown <pbrown@redhat.com>
changelog:
  - updated to KDE 1.1.2.
  - use /usr/lib/qt-1.44 as qt root.
  - separate devel subpackages; include documentation and kdoc.
  - added KDE icon.
  - relocated includes to /usr/include/kde


author: Tom Lane <tgl@redhat.com> 2:1.2.7-3.el4_5.1
changelog:
  - Back-port critical fixes from libpng 1.2.22, primarily to fix CVE-2007-5269
  Resolves: #337501
  - Update License tag and some other obsolete bits in specfile


author: Martin Stransky <stransky@redhat.com> - 1.5.0.12-0.5.el4
changelog:
  - added pathes for Mozilla bugs 199088,267833,309322,345305,361745,
    362901,372309,378787,381300,384105,386914,387033,387881,388121,388784
    390078,393537,395942


author: Warren Togami <wtogami@redhat.com> 2.6.2-2
changelog:
  - Upstream backports:
      97e003ed2bc2bafbb993693c9ae9c6d667731cc1 aim-buddy-status-grab
      37aa00d044431100d37466517568640cb082680c yahoo-buddy-idle-time
      40005b889ee276fbcd0a4e886a68d8a8cce45698 yahoo-status-change-away
      cb46b045aa6e927a3814d9053c2b1c0f08d6fa62 crash-validate-jid


author: Stu Tomlison <stu@nosnilmot.com> 2.5.8-2
changelog:
  - Backport patch from upstream to enable NSS to recognize root CA
    certificates that use MD2 & MD4 algorithms in their signature, as
    used by some MSN and XMPP servers


author: Warren Togami <wtogami@redhat.com> 2.5.2-6
changelog:
  - Automatically detect booleans to enable build features from dist tag
  - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain


author: Warren Togami <wtogami@redhat.com> 2.5.2-2
changelog:
  - Upstream backports:
    100: sametime-redirect-null crash
    101: NetworkManager-improvement
    102: no-password-in-dialog-if-not-remembering
    103: temporarily-remember-password-during-auto-reconnect
    104: smilie-theme-change-crash
    105: url_fetch_connect_cb-double-free crash
    106: GtkIMHtmlSmileys-remove-crash
    107: remove-dialog-from-open-dialog-list


author: Stu Tomlinson <stu@nosnilmot.com> 2.5.1-3
changelog:
  - Backport fixes from upstream:
    Add "Has You:" back to MSN tooltips
    Fix crash during removal of your own buddy icon
    Fix crash when handling self signed certificate with NSS SSL


author: Stu Tomlinson <stu@nosnilmot.com> 2.4.1-3
changelog:
  - Rebuild for new evolution-data-server
  - Clean up default prefs.xml
  - Enable nautilus integration plugin by default in prefs.xml (#242289)


author: Warren Togami <wtogami@redhat.com> - 2.2.0-2
changelog:
  - License clarification
  - Backport patches to fix memory leaks
  - Backport patches to fix proxy settings & status scores


author: Warren Togami <wtogami@redhat.com> - 2.1.0-2
changelog:
  - Upstream fix backports
    115: gmail-notification-crash #2323
    117: drag-and-drop-mouse-click-group-header #2333
    118: jabber-confirm-authentication-unencrypted-crash #2493


author: Stu Tomlinson <stu@nosnilmot.com> - 2.1.0-1
changelog:
  - 2.1.0
  - Only include translations in libpurple instead of duplicating them in
    packages that depend on libpurple anyway


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.1-4
changelog:
  - Fix purple-remote for AIM & ICQ accounts (#240589)
  - Add missing Requires to -devel packages
  - Add missing BuildRequires for libxml2-devel


author: Stu Tomlinson <stu@nosnilmot.com> - 2.0.0-1
changelog:
  - 2.0.0
  - Add scriptlets to install & uninstall GConf schemas
  - Move schema file from libpurple to Pidgin to avoid GConf
    dependencies in libpurple
  - rename gaim-fedora-prefs.xml to purple-fedora-prefs.xml


author: Stu Tomlinson <stu@nosnilmot.com>
changelog:
  - Update Gtk icon cache when installing or uninstalling (#238621)
  - Don't own all directories we put icons in


author: Warren Togami <wtogami@redhat.com> - 2.0.0-0.35.beta7devel
changelog:
  - upstream insists that we remove the Epoch
    rawhide users might need to use --oldpackage once to upgrade
  - remove mono and howl cruft


author: Stu Tomlinson <stu@nosnilmot.com> - 2:2.0.0-0.34.beta7devel
changelog:
  - Split into pidgin, finch & libpurple, along with corresponding -devel RPMs
  - Remove ldconfig for plugin directories
  - Fix non-UTF8 %changelog


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.33.beta7devel
changelog:
  - pidgin-2.0.0 snapshot prior to beta7
  - rename gaim to pidgin/purple/finch in various places of spec (not complete)
  - ExcludeArch s390, s390x.  It never did work there.
  - Include meanwhile plugin by moving to Extras


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.31.beta6
changelog:
  - Removed debian-02_gnthistory-in-gtk
    Removed debian-03_gconf-gstreamer.patch
    Upstream recommended removing these patches.
  - Add fix-buggy-fetch-url
  - Enable type_chat and type_chat_nick in default prefs.xml


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.22.beta5
changelog:
  - 2.0.0 beta5
  - Debian patches
      02_gnthistory-in-gtk
      03_gconf-gstreamer
      04_blist-memleak
      05_url-handler-xmpp
      06_jabber-registration-srv
      07_msn-custom-smiley-crash
  - SILC Account Edit Crash


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.19.beta4
changelog:
  - buildreq NetworkManager-glib-devel FC5+ (katzj)
  - #213800 debug window freeze fix
  - #212818 IRC SIGPIPE crash fix


author: Warren Togami <wtogami@redhat.com> - 2:2.0.0-0.17.beta4
changelog:
  - temporary workaround for gstreamer build bug in beta4
    --enable-gstreamer prevented it from working =)
    NOTE: beta4 removed libao support entirely.  Distros that lack gstreamer-0.10+
    will need to use command line sound output from now on.
  - Gadu Gadu is re-included in beta4 without requirement of external library


author: Warren Togami <wtogami@redhat.com> 2.0.0-0.3.beta3
changelog:
  - more spec cleanups
  - buildreq libXScrnSaver-devel, gettext, intltool, desktop-file-utils
  - disable mono for now due to #196877


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-9
changelog:
  - Ensure that security opt flags are used (#165795)
  - Many bug fixes from Peter Lawler (#171350)
    156: Fix Yahoo chatroom ignore on join
    157: Fix Italian yahoo profiles
    158: Strip HTML from status
    159: xmlnode cleanup
    160: Fix crash on non-terminated strings
    161: silc-close-gaim_request-window-prpl-disconnect-p1
    162: silc-close-gaim_request-window-prpl-disconnect-p2
    163: silc-close-gaim_request-window-prpl-disconnect-p3
    164: silc-close-gaim_request-window-prpl-disconnect-p4
    165: silc-close-gaim_request-window-prpl-disconnect-p5
    166: silc-close-gaim_request-window-prpl-disconnect-p6
    167: MSN data corruption fix
    168: msn-kill-convo-close-timeout-notices-p1
    169: msn-kill-convo-close-timeout-notices-p2
    170: msn-kill-convo-close-timeout-notices-p3
    171: forceful-connection_disconnect-not-wipe-password
    172: Clipboard leak and history scrolling fix
    173: smileys-logtype-p1
    174: smileys-logtype-p2
    175: Allow Italics in IRC
    176: Add more authors
    177: Update copyright
    178: Update HACKING doc
    179: Fix doc creation
    180: Fix AIM/ICQ Rate Limiting issue


author: Ray Strode <rstrode@redhat.com> - 1:1.5.0-7
changelog:
  - use upstream desktop file (except use generic name, because 
    this is our default instant messaging client)


author: Peter Jones <pjones@redhat.cm> - 1:1.5.0-4
changelog:
  - rebuild for new cairo, add -Wno-pointer-sign
  - add -Wno-pointer-sign until somebody maintaining this package makes it build
    without it.


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-2
changelog:
  - always use -z relro and FORTIFY_SOURCE opt flags for FC3+ and RHEL4+ 
    (compiler simply ignores these flags if they are unsupported)


author: Warren Togami <wtogami@redhat.com> - 1:1.5.0-1
changelog:
  - 1.5.0 security and bug fixes
    CAN-2005-2370 Gadu-Gadu memory alignment bug
    CAN-2005-2102 AIM/ICQ non-UTF-8 Filename Crash
    CAN-2005-2103 AIM/ICQ away message buffer overflow


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-5
changelog:
  - FC5+ automatic -fstack-protector-all switch
  - 150: MSN buddy names with space disconnect and profile corruption
         (supercedes patch 149)
  - 151: Gadu Gadu memory alignment crash
  - 152: Rename Group Merge crash
  - 153: mailto: parse crash (util.c)
  - 154: mailto: parse crash (MSN)
  - 155: mailto: parse crash (Zephyr)


author: Warren Togami <wtogami@redhat.com> 1:1.4.0-4
changelog:
  - 149: MSN username with space disconnect fix
  - Do not own perl dir, remove empty files (#162994 jpo)


author: Warren Togami <wtogami@redhat.com> 1:1.3.1-0
changelog:
  - 1.3.1 more bug fixes
    CAN-2005-1269 CAN-2005-1934
  - enable Message Notification plugin by default


author: Warren Togami <wtogami@redhat.com> 1:1.3.0-1
changelog:
  - 1.3.0 many bug fixes and two security fixes
    long URL crash fix (#157017) CAN-2005-1261
    MSN bad messages crash fix (#157202) CAN-2005-1262


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-4
changelog:
  - 144: POSIX functions became macros, build fix (#150429)
  - 145: Fix non-proxy yahoo file transfer
  - 146: Fix non-proxy yahoo buddy icons


author: Warren Togami <wtogami@redhat.com> 1:1.1.4-1
changelog:
  - 1.1.4 with MSN crash fix, g_stat() crash workaround
    CAN-2005-0208 Gaim HTML parsing DoS (another one)


author: Warren Togami <wtogami@redhat.com> 1:1.1.3-2
changelog:
  - 1.1.3 including two security fixes
    CAN-2005-0472 Client freezes when receiving certain invalid messages
    CAN-2005-0473 Client crashes when receiving specific malformed HTML


author: Warren Togami <wtogami@redhat.com> 0.82-1
changelog:
  - Update to 0.82 resolves several security issues and bugs
    CAN-2004-0500, CAN-2004-0754, CAN-2004-0784, CAN-2004-0785
    More details at http://gaim.sourceforge.net/security/


author: Warren Togami <wtogami@redhat.com> 0.81-4
changelog:
  - conditionalize features for alternate target distributions
  - remove unnecessary ExclusiveArch
  - other cleanups


author: Warren Togami <wtogami@redhat.com> 0.81-3
changelog:
  - CVS backport 133: CAN-2004-0500 MSNLP buffer overflow
                 134: Select buddy icon in new account crash
                 135: Jabber join crash
                 136: Jabber tooltip fake self crash


author: Warren Togami <wtogami@redhat.com> 0.81-1
changelog:
  - 0.81
  - krb5-devel for Zephyr
  - evolution-data-server-devel integration
    plugin disabled by default because it seems very unstable


author: Warren Togami <wtogami@redhat.com> 0.80-1
changelog:
  - update to 0.80
  - enable ExtPlacement plugin by default
  - Smiley Theme "Default" by default (bug fix)
  - Insertions -> Control-{B/I/U} by default


author: Warren Togami <wtogami@redhat.com> 0.79-2
changelog:
  - remove tray icon patch temporarily because it seems to cause more
    problems than it solves.
  - provide gaim-devel
  - CVS backport 128: Cached buddy icons fix


author: Warren Togami <wtogami@redhat.com> 0.79-1
changelog:
  - update to 0.79
  - update desktop patch
  - update header and pkgconfig locations
  - update default prefs
  - FC3 sed behavior workaround
  - temporarily disable evolution integration


author: Warren Togami <wtogami@redhat.com> 0.78-7
changelog:
  - CVS backport 125: MSN disconnect on non-fatal error fix
                 126: Paste html with img crash fix
                 127: Misplaced free fix


author: Warren Togami <wtogami@redhat.com> 0.77-7
changelog:
  - CVS backport 121: byte order badness and crashing copy & paste fix
                 122: history.so scroll to bottom in new tabs fix


author: Warren Togami <wtogami@redhat.com> 0.77-6
changelog:
  - CVS backport 118: x86-64 yahoo auth fix
                 119: Copy/paste fixes for UCS-2 encoded selection
                 120: IRC reconnect segfault fix
  - remove relnot.so plugin because it is unusable in FC
  - Default enable logging and history.so plugin
            enable autoreconnect plugin
  - Fix Gnome Default url handler


author: Warren Togami <wtogami@redhat.com> 0.77-3
changelog:
  - remove gnome-open manual, since 0.77 has "GNOME Default" as default.
  - update default prefs.xml, disable buddy icons in buddy list
  - CVS backport 114: plugin prefs saving fix
                 115: autoreconn-suppress-dialogs
                 116: fix smileys in dialogs
                 117: gtk+ 2.0 compat


author: Warren Togami <wtogami@redhat.com> 0.76-6
changelog:
  - CVS backports:
    111 Prevent Crash during password change if blank fields
    112 Prevent Crash if remote sends invalid characters
    113 Enable /etc/gaim/prefs.xml defaults for new profiles
  - Tray Icon enabled by default
  - Relabel internal version with V-R


author: Warren Togami <wtogami@redhat.com> 0.76-5
changelog:
  - CVS backports: 
    102 Fix ^F keybinding when gtkrc is set to emacs mode
    103 Add Missing File: evolution-1.5.x buildability
    104 When MSN server intermittently has problems accessing buddy list, MSN will crash with 0.76
    105, 106, 107 MSN Error reporting fixes
    108 History plugin causes unnecessary horizontal scrollbars
    109 Fix the text replace plugin 
    110 Prevent message sending while offline


author: Warren Togami <wtogami@redhat.com>
changelog:
  - CVS snapshot, generated with automake-1.7.9
  - update #4
  - update #2 but disable
  - #5 no longer needed
  - default to gnome-open #6
  - some spec cleanup


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-1.1.0
changelog:
  - Include patch that fixes a bunch of buffer-related problems, mostly
    from nectar@freebsd.org and some of my own changes.


author: Christopher Blizzard <blizzard@redhat.com> 1:0.75-0
changelog:
  - Update to 0.75.
  - Remove mem leak patch that is already included in 0.75.
  - Clean up a lot of old unused patches and old source tarballs.


author: Christopher Blizzard <blizzard@redhat.com> 0.59-7
changelog:
  - Include patch that uses htmlview instead of calling Netscape
    directly
  - Include patch that turns off the buddy ticker and changes the button
    look to the (sane) default.


author: Tim Powers <timp@redhat.com>
changelog:
  - updated to 0.11.0pre2
  - enable gnome support
  - updated ispell to aspell patch
  - cleaned up file list


author: Tim Powers <timp@redhat.com>
changelog:
  - some ideas taken from the package available at the gaim website, mainly to install the applet stuff too.


author: Tim Powers <timp@redhat.com>
changelog:
  - cleaned up spec for use with RPM 4.0 (al la _sysconfdir _datadir etc)
  - update to 0.9.17
  - yay! a man page!


author: Warren Togami <wtogami@redhat.com> 1.1.0-4
changelog:
  - #119551 flac-xmms -> xmms-flac to match fedora.us and freshrpms.net
  - Obsoletes flac-libs to upgrade smoothly from fedora.us


author: Petr Machata <pmachata@redhat.com> - 2007h-1.el4
changelog:
  - Upstream 2007h
    - Brazil will observe DST from 2007-10-14 to 2008-02-17
    - Egypt and Gaza switched earlier than we expected
    - Iran will resume DST next year
    - Venezuela is scheduled to change TZ to -4:30 on January 1
  - Resolves: #298091
  - Resolves: #266881


author: Petr Machata <pmachata@redhat.com> - 2007g-1.el4
changelog:
  - Upstream 2007g
    - Egypt switches the September 7, not September 28
    - Daviess, Dubous, Knox, Martin, and Pike Counties, Indiana, switch
      from central to eastern time in November
    - South Australia, Tasmania, Victoria, and New South Wales are
      changing their DST rules effective next year
    - Several Antarctic station's rules weren't properly updated to account
      for this year's change to the New Zealand daylight saving rules
  - Venezuela timezone changes from -4:00 to -4:30 at 24 September
  - Resolves: #298091
  - Resolves: #266881


author: Petr Machata <pmachata@redhat.com> - 2007f-1.el4
changelog:
  - Upstream 2007f
    - New Zealand is extending DST, starting later this year.
    - Haiti no longer observes DST.
    - The Turks and Caicos switch at 02:00, not at 00:00, and have
      adopted US DST rules.
  - Upstream 2007e
    - Syria switched to summer time at Mar/29.
    - Honduras will not enter DST this year.
  - Resolves: #241812


author: Petr Machata <pmachata@redhat.com> - 2007d-1.el4
changelog:
  - Upstream 2007d
    - Mongolia has abolished DST.
    - Turkey will use EU rules this year, changing at 01:00 UTC rather
      than 01:00 standard time.
    - Cuba observed DST starting Sunday.
    - Resolute, Nunavut switched from Central to Eastern time last
      November.


author: Petr Machata <pmachata@redhat.com> - 2007c-1.el4
changelog:
  - Upstream 2007c
    - Pulaski County, Indiana, switched back to eastern time.
    - Turkey switches at 01:00 standard time, not at 01:00 UTC.
  - Upstream 2007b
    - Changes to the commentary in "leapseconds".
  - Resolves: #230088


author: Petr Machata <pmachata@redhat.com> - 2007a-1.el4
changelog:
  - Upstream 2007a
    - Updates to Bahamas, they will be in sync with 2007 US DST change
    - New zone Australia/Eucla
    - Africa/Asmera renamed to Africa/Asmara, link created
    - Atlantic/Faeroe renamed to Atlantic/Faroe, link created
  - Upstream 2006p
    - Western Australia DST trial
    - Latitude/longitude changes for Europe/Jersey and Europe/Podgorica
  - Upstream 2006o
    - Cuba has ended its three years of permanent DST.
    - Updates in historical timestamps for Chile.
  - Resolves: #218328


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.12]
changelog:
  - update: deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
  - fix machine check errors with Clovertown G0-step CPU (Geoff Gustafson) [320791]
  - fix disable block layer bouncing for most memory on 64bit systems (Jim Paradis) [330111]


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.11]
changelog:
  - fix denial of service with wedged processes (Vitaly Mayatskikh) [302931] {CVE-2006-6921}
  - fix stack growing into hugetlb reserved regions (Vitaly Mayatskikh) [294971] {CVE-2007-3739}
  - fix creating of RHEL4u5 guest domain on i686 RHEL-5.1 host (Chris Lalancette) [251013]
  - fix memory leak in __bio_map_user (Eric Sandeen) [328371]
  - fix deadlock from recursive call through netpoll_send_skb (Neil Horman) [328351]
  - fix ALSA memory disclosure flaw (Vitaly Mayatskikh) [297741] {CVE-2007-4571}
  - fix missing ioctl() permission checks in aacraid driver (Vitaly Mayatskikh) [298341] {CVE-2007-4308}
  - fix VFAT compat ioctls DoS on 64-bit (Eric Sandeen) [253316] {CVE-2007-2878}


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-55.0.10]
changelog:
  - fix: automounter hangs with rapid access to the same mount point when the system is under high load (Ian Kent) [309781]
  - restored: all patches from 2.6.9-55.0.7


author: Milan Broz <mbroz@redhat.com> - 2.02.37-1
changelog:
  - Update to latest upstream bugfix release.
  - Fixes several regressions introduced by using metadata cache.
    Resolves: #444608


author: Zdenek Kabelac <zkabelac@redhat.com> - 2.02.27-2
changelog:
  - Introduce VG_GLOBAL lock type for vgscan/pvscan to trigger clvmd -R.
  - Fix clvmd -R, so it fully refreshes the caches.
    Resolves: #138396


author: Milan Broz <mbroz@redhat.com> - 2.02.21-4
changelog:
  - Fix processing of exit status in init scripts.
  - Flag nolocking as clustered so clvmd startup sees clustered LVs.
  - Resolves: rhbz#231979 rhbz#232707


author: Alasdair Kergon <agk@redhat.com> - 2.02.18-2
changelog:
  - Update spec file: BuildRequires, BuildRoot & Description typo.
  - No longer enable by default on installation.
  - The default is now locking_type 3 (lvm2 built-in).


author: Alasdair Kergon <agk@redhat.com> - 2.02.16-1
changelog:
  - Adjust some alignments for ia64. 
  - Fix VG clustered read locks to use PR not CR. 
  - Add startup timeout to clvmd startup script.


author: Alasdair Kergon <agk@redhat.com> - 2.02.06-4.0
changelog:
  - Avoid clvm 'unaligned access' error on some archs. (194626, lost)
  - Rebuild after recent lvm2 patches.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.1
changelog:
  - Switch from 'ExcludeArch: s390 s390x ppc' to 
    'ExclusiveArch: i386 ia64 x86_64' to match dlm dependency.


author: Alasdair Kergon <agk@redhat.com> - 2.01.09-1.0
changelog:
  - clvmd: Don't allow user operations to start until lvm thread is fully up.
  - clvmd-gulm: Set KEEPALIVE on sockets.


author: Alasdair Kergon <agk@redhat.com> - 2.01.07-1.0
changelog:
  - clvmd FDs close-on-exec
  - unlock gulm VG & orphan locks at startup in case they are stale
  - unlock gulm VG & orphan locks if client dies.


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed a bug which could leave locks hanging around even when the userland
    process that was using them exits.
  - Removed a spurious assertion.
  - Resolves: rhbz#301511 rhbz#319671


author: Miroslav Lichvar <mlichvar@redhat.com> - 14:3.8.2-11.el4
changelog:
  - fix buffer overflow in 802.11 printer (#232519, CVE-2007-1218)
  - fix return codes in arpwatch init script (#237780)
  - with -C option, drop root privileges before opening first savefile (#214377)


author: Harald Hoyer <harald@redhat.com> - 14:3.8.2-1
changelog:
  - update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13
  - patched tcpdump configure for gcc34 optimizations
  - removed obsolete patches


author: Harald Hoyer <harald@redhat.de> 12:3.6.2-10
changelog:
  - took old purge patch for filters
  - fixed #54225,#58346
  - drop root by default #49635
  - fixed #54593
  - fixed #57711


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - fix building of tcpslice on glibc 2.2.2 (time.h)
  - disable /etc/init.d requirement and fix %post scripts in arpwatch


author: Harald Hoyer <harald@redhat.com>
changelog:
  - fixed EINTR stopping for e.g. SIGSTOP. (#22008)
  - added -u option for tcpdump (#20231)
  - new arpwatch version (#23172)
  - added "all" and "one" interface for -i (#20907)
  - added arpwatch sysconfig (#23172)


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - use --enable-ipv6
  - Add two patches from CVS to enhance 802.2 printing, and more importantly,
    to be able to specify 'no stp'


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Make SMB printing output a lot more quiet unless in verbose mode.
  - Make -n resolve port/protocol numbers but not hostnames, -nn for no
    resolving at all
  - Separate droproot patch from a more generic man/usage fix one
  - Add non-promiscuous mode -by default patch, but don't apply it by default


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Update to 20010108 CVS, disable some upstreamed patches.
  - Change some additional .1 pages to .8.
  - Add droproot patch, some --usage and man page fixes.


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - Initial packaging with latest tcpdump.org CVS tcpdump-3.6 and libpcap-0.6.
  - add earlier print-domain.c, the latest is segfaulting
  - don't unnecesessarily include snprintf.o, it didn't compile with gcc 2.96 anyway
  - don't use savestr, require openssl, tweak tweak tweak
  - add tcpslice, patch it a bit for egcs detection


author: Pekka Savola <pekkas@netcore.fi>
changelog:
  - tcpdump: spice up the manpage about interfaces
  - tcpdump: add 'all' and 'any' keywords to -i, saner default behaviour.
  - upgrade arpwatch to 2.1a10


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - eliminate more buffer overflows (from FreeBSD) (#20069).
  - 802.1q ether type incorrect (#19850).
  - add -u flag to drop arpwatch privs (#19696).


author: Matt Wilson <msw@redhat.com>
changelog:
  - source /etc/init.d/functions
  - back out /etc/init.d/arpwatch, place file in /etc/rc.d
  - move initscript to /etc/init.d
  - changed initscript to use start() and stop() functions
  - added condrestart to init script
  - added %post %preun %postun scripts to register arpwatch script
  - added Prereq: for all things needed in post/preun/postun


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - remove sparc64 SIOCGIFNAME hack, not needed with (at least) kernel 2.2.12-40.
  - upgrade to ANK ss991030 snapshot with pcap magic fix (#6773).
  - add getprotobyname lookup (#6725).
  - getservbyname port lookup appears functional (#7569).
  - remove uid 2090 backdoor (sorry Dave) (#7116).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - include A. Kuznetsov's patches to libpcap/tcpdump.
  - added arpsnmp to package (#3258).
  - arp2ethers written for different of awk (#4326).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - separate package for libpcap.
  - update tcpdump to 3.4, libpcap to 0.4.
  - added arpwatch (but disabled for now)


author: Joe Orton <jorton@redhat.com> 2.0.52-35.ent
changelog:
  - add 'ServerTokens Full-Release' config option (#236419)
  - add security fix for CVE-2007-3304 (#246182)
  - add security fixes for CVE-2007-1863 and CVE-2006-5752 (#244664)


author: Joe Orton <jorton@redhat.com> 2.0.52-34.ent
changelog:
  - use init script in logrotate postrotate (#241407)
  - mod_proxy: fix handling of percent chars (#233254)
  - fix {default,cgi}_handler returning bogus errors (#197915)
  - fix unnecessary loss of C-L in HEAD responses (#173467)


author: Joe Orton <jorton@redhat.com> 2.0.52-33.ent
changelog:
  - fix ProxyErrorOverride to only affect 4xx, 5xx responses (#240022)
  - fix mod_proxy option inheritance (#242920)


author: Tomas Smetana <tsmetana@redhat.com> - 3:2.1.5.1-34.rhel4.6
changelog:
  - fix #200036 - canceling subscription confirmation crashes mailman
  - fix #205651 - CVE-2006-4624 logfile CRLF injection
  - fix #230939 - missing migrate-fhs script
  - fix #223191 - spam filters gets deleted when sender filter is edited
  - fix #242677 - wrong init script


author: Harald Hoyer <harald@redhat.com> - 3:2.1.5-34.rhel4.1
changelog:
  - fix for bug #173139 (CVE-2005-3573 Mailman Denial of Service)
  - fix for bug #176089 (CVE-2005-4153 Mailman Denial of Service)


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-32.rhel4
changelog:
  - fix bug #132750, add daemon to mail-gid so courier mail server will work.
  - fix bug #143008, wrong location of mailmanctl in logrotate
  - fix bug #142605, init script doesn't use /var/lock/subsys


author: John Dennis <jdennis@redhat.com> 3:2.1.5-26
changelog:
  - fix typo in install documentation
  - fix error in templates/Makefile.in, bad install args, fixes bug #136001,
    thank you to Kaj J. Niemi for spotting this.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-21
changelog:
  - move list data dir to /var/lib/mailman to conform to FHS
    move lock dir to /var/lock/mailman to conform to FHS
    move config dir (VAR_PREFIX/data) to /etc/mailman to conform to FHS
    Thanks to Matt Domsch for pointing this out.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-20
changelog:
  - fix bug #132732, security policy violations,
  - bump release verison
    move non-data installation files from /var/mailman to /usr/lib/mailman,
    update documentation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-15
changelog:
  - fix bug #117615, don't overwrite user modified templates on install
    made template directory "config noreplace"


author: John Dennis <jdennis@redhat.com> 3:2.1.5-14
changelog:
  - add comments into the crontab files so users know the /etc/cron.d
    file is volitile and will edit the right file.
    Also make the master crontab file "config noreplace" so edits are preserved.


author: John Dennis <jdennis@redhat.com> 3:2.1.5-10
changelog:
  - fix bug #129492 and bug #120912
    stop using crontab to setup mailman's cron jobs,
    instead install cron script in /etc/cron.d


author: John Dennis <jdennis@redhat.com> 3:2.1.5-9
changelog:
  - apply patch to elminate "-1 LISTNAME moderator request(s) waiting" messages
    problem desciption here:
    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.038.htp


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-6
changelog:
  - fix bug in pre scriplet, last command had been "service mailman stop"
    which should have been harmless if mailman was not installed except
    that it left the exit status from the script as non-zero and rpm
    aborted the install.


author: John Dennis <jdennis@redhat.com> - 3:2.1.5-5
changelog:
  - add status reporting to init.d control script
    stop mailman during an installation
    restart mailman if it had been running prior to installation


author: John Dennis <jdennis@redhat.com> 3:2.1.5-1
changelog:
  - bring up to latest 2.1.5 upstream release
    From Barry Warsaw: Mailman 2.1.5, a bug fix release that also
    contains new support for the Turkish language, and a few minor new
    features. Mailman 2.1.5 is a significant upgrade which should
    improve disk i/o performance, administrative overhead for discarding
    held spams, and the behavior of bouncing member disables.  This
    version also contains a fix for an exploit that could allow 3rd
    parties to retrieve member passwords.  It is thus highly recommended
    that all existing sitesupgrade to the latest version


author: Warren Togami <wtogami@redhat.com> 3:2.1.4-4
changelog:
  - #105638 fix bytecompile and rpm -V
  - postun /etc/postfix/aliases fix
  - clean uninstall (no more empty dirs)
  - #115378 RedirectMatch syntax fix


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - fix bug 72004, 74483, 74484, 87856 - improper log rotation
  - fix bug 88083 - mailman user/group needed to exist during build
  - fix bug 88144 - wrong %file attributes on mm_cfg.py
  - fix bug 89221 - mailman user not created on install
  - fix bug 89250 - wrong pid file name in initscript


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - various small tweaks to the spec file to make installation cleaner
  - use /usr/bin/python when compiling, redirect compile output to /dev/null,
  - don't run update in %post, let the user do it, remove the .pyc files in %postun,
  - add setting of MAILHOST and URLHOST to localhost.localdomain, don't let
  - configure set them to the build machine.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - 1) remove config patch, mailmanctl was not the right file to install in init.d,
  - it needed to be scripts/mailman
  - 2) rename httpd-mailman.conf to mailman.conf, since the file now lives
  - in httpd/conf.d directory the http prefix is redundant and inconsistent
  - with the other file names in that directory.


author: John Dennis <jdennis@finch.boston.redhat.com>
changelog:
  - Bring package up to date with current upstream source, 2.1
  - Fix several install/packaging problems that were in upstream source
  - Add multiple mail group functionality
  - Fix syntax error in fblast.py
  - Remove the forced setting of mail host and url host in mm_cfg.py


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.9-1
changelog:
  - include README.QMAIL in with the docs (#58887)
  - include README.SENDMAIL and README.EXIM in with the docs
  - use an included httpd.conf file instead of listing the configuration
    directives in the %description, which due to specspo magic might look
    wrong sometimes (part of #51324)
  - interpolate the DEFAULT_HOST_NAME value in mm.cfg into both the DEFAULT_URL
    and MAILMAN_OWNER (#57987)
  - move logs to /var/log/mailman, qfiles to /var/spool/mailman, rotate
    logs in the log directory (#48724)
  - raise exceptions when someone tries to set the admin address for a list
    to that of the admin alias (#61468)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix a default permissions problem in /var/mailman/archives/private,
    reported by Johannes Erdfelt
  - update to 2.0.9


author: Nalin Dahyabhai <nalin@redhat.com> 2.0.8-1
changelog:
  - set FQDN and URL at build-time so that they won't be set to the host the
    RPM package is built on (#59177)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 2.0.5
  - change the default hostname from localhost to localhost.localdomain in the
    default configuration
  - chuck configuration file settings other than those dependent on the host name
    (the build system's host name is not a good default)  (#32337)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make the default owner root again so that root owns the docs
  - update to 2.0beta5, which fixes a possible security vulnerability
  - add smrsh symlink


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to beta4
  - change uid/gid to apache.apache to match apache (#13593)
  - properly recompile byte-compiled versions of the scripts (#13619)
  - change mailman alias from root to postmaster


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move web files to reside under /var/www
  - move files from /usr/share to /usr/share
  - integrate spot-fixes from mailman lists via gnome.org


author: Behdad Esfahbod <besfahbo@redhat.com> - 1.14.9-1
changelog:
  - Update to 1.14.9
  - Resolves: #216424, #216850, #211964, #213632
  - Add Thai language engine. (disabled, since there's no libthai)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-7
changelog:
  - Fix problem with pango_layout_get_attributes returning one too few items
    (Needed to fix problems mentioned in #135656, 
    http://bugzilla.gnome.org/show_bug.cgi?id=155912)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-5
changelog:
  - Fix problem in the last patch where we weren't getting the metrics from the 
    right font description (#136428, Steven Lawrance)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-4
changelog:
  - Move place where we compute fontset metrics to fix problems with line 
    height in CJK locales (#131218)


author: Owen Taylor <otaylor@redhat.com> - 1.6.0-2
changelog:
  - Add patch from CVS to fix display of U+3000 (#132203,  
    reported upstream by Suresh Chandrasekharan, Federic Zhang)


author: Owen Taylor <otaylor@redhat.com> 1.4.0-2
changelog:
  - Fix location for modules file on ppc/ppc64 (#114399)
  - Make the spec file check to avoid further mismatches


author: Owen Taylor <otaylor@redhat.com> 1.2.5-3.0
changelog:
  - Package pango-querymodules as pango-querymodules-{32,64}; look for 
    pango.modules in an architecture-specific directory.
    (Fixes #111511, Justin M. Forbes)


author: Tim Powers <timp@redhat.com> 1.2.1-3
changelog:
  - remove deps on Xft and Xft-devel since XFree86 no longer has the
    virtual prvodes. Instead, require XFree86-devel > 4.2.99


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Patch from CVS to synthesize GDEF tables for fonts
    without them, like the Kacst fonts in fonts-arabic


author: Havoc Pennington <hp@redhat.com>
changelog:
  - explicitly require pangoxft to be built, so we catch situations such
    as xft.pc moving to /usr/X11R6
  - also add /usr/X11R6/lib/pkgconfig to PKG_CONFIG_PATH as a temporary 
    hack


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Fix linked list manipulation problem that was causing hang for anaconda
  - Fix warning from loading mini-fonts with context == NULL


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Remove fixed-ltmain.sh, relibtoolize; to fix relink problems without 
  - Fix bug causing hex boxes to be misrendered
    leaving RPATH (#66005)
  - For FT2 backend, supply FT_LOAD_NO_BITMAP to avoid problems with 
    fonts with embedded bitmaps (#67851)


author: Owen Taylor <otaylor@redhat.com>
changelog:
  - Up FreeType version to deal with FreeType-2.0.x / 2.1.x \
    ABI changes for pango's OpenType code.


author: Havoc Pennington <hp@redhat.com>
changelog:
  - Version 0.22
  - add explicit check for required glib2 version before we do the build,
    so we don't end up with bad RPMs on --nodeps builds
  - PreReq the glib2_version version, instead of 1.3.8 hardcoded that 
    no one had updated recently


author: Jan Safranek <jsafranek@redhat.com> 5.1.2-11.EL4.11.3
changelog:
  - fix buffer overflow in perl module (CVE-2008-2292) (#449895)
  - fix SNMPv3 authentication checks (unknown CVE) (#449895)


author: Jan Safranek <jsafranek@redhat.com> 5.1.2-11.EL4.11
changelog:
  - decrease logging of incoming connections, which slows down syslog
    (#241581)
  - reference to net-snmp-config removed from snmpd.conf man page
    (#202599)
  - fix snmpusm man page to describe all options (#202745)
  - check if port number is valid (#205154)
  - fix ssRawCpu* counters to wrap correctly on overflow (#223775)
  - add rpm-devel to BuildPreReq to enable hrSWInstalled OID
    (#235885)
  - snmptrapd survives logrotate (#239663)
  - output of exec statement can be longer than 1023 characters
    (#242775)
  - fix -M option of net-snmp-utils (#199165)
  - add diskio MIB (#245380)
  - snmpconf should generate config files with proper selinux context
    (#192447)
  - fix snmpwalk / bulkwalk on TCP scalars (#248196)


author: Radek Vokál <rvokal@redhat.com> 5.1.2-11.EL4.9
changelog:
  - add disman/event-mib for link notifications
  - fix crash on unacknowledged informs
  - fix for negative OID values 
  - store pid in /var/run/snmpd.pid
  - communication can be limited by tcp_wrappers
  - Resolves: #202584 #211264 #212282 #211457 #220045 #206005


author: Radek Vokál <rvokal@redhat.com>
changelog:
  - finally fixing bug #204729
  - cleaning up the testing mess
  - patch from Josef Moellers <josef.moellers@fujitsu-siemens.com>


author: Radek Vokal <rvokal@redhat.com>
changelog:
  - processor table added (#201850)
  - fixed snmptrapd init script, the path for config file is /etc/sysconfig/snmptrapd.options (#197752)
  - fixed snmptrapd init script, don't overide user settings (#195702)
  - fixed leak in snmptrapd (#192769)
  - fixed snmpd init script, the path for config file is /etc/sysconfig/snmpd.options (#199450)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.6.hf1
changelog:
  - snmpd loops forever in host resources (#171135)
  - fix agent crash for certain MIBs (#177692)
  - fix crash when using invalid override line (#176922)
  – fix snmptrapd segv with long trap (#187106)
  - fix Extend MIB to work with TCP-wrapper (#173373)


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.6
changelog:
  - agentx leak patches
  - return IP address instead of MAC address (#167588)
  - changes in tcp_dos patch


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.3
changelog:
  - snmpd reports gigabit Ethernet speeds using ethtool (#152480)
  – fixed doublefree error (#157539)
  - CAN-2005-1740 fixed insecure temporary file usage (#158769) <suse.de>


author: Radek Vokal <rvokal@redhat.com> 5.1.2-11.EL4.1
changelog:
  - lmSensors correctly recognized (#150199)
  - fixed retreiving swap size (#150084)
  - net-snmp no longer dies when querying hrSWInstalledLastUpdateTime (#155038)
  - Fixed error building ASN.1 representation (#154421)
  - 64bit network counters correctly wrap (#154455)
  - net-snmp properly deals with large partitions (#153101) <jryska@redhat.com>
  - unexpected length for type ASN_UNSIGNED fixed (#151892)
  - snmptrapd initscript reads correctly options from /etc/snmp/snmptrapd.options (#154798)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.2-9
changelog:
  - Droped obsolete lm-sensors patch and enabled lmSensors module
  - Marked several patches to be removed for 5.1.3


author: Radek Vokal <rvokal@redhat.com> 5.1.2-4
changelog:
  - New prereq for net-snmp-devel
  - lelf check removed from configure.in (#128748)
  - fixed snmpd coredump when sent SIGHUP (#127314)


author: Phil Knirsch <pknirsch@redhat.com> 5.1.1-2
changelog:
  - Added Kaj J. Niemi that fixes ipAdEntIfIndex problem (#119106)
  - Added Kaj J. Niemi to shut up memshared message for 2.6 kernel (#119203)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-12
changelog:
  - Hacked an ugly perl hack to get rid of perl RPATH problems.
  - Fixed 64bit patch and applied it. ;-)


author: Phil Knirsch <pknirsch@redhat.com> 5.1-9
changelog:
  - Reverted removal of _includir redefiniton due to php-snmp dependancy.
  - Remove SO_BSDCOMPAT setsockopt() call, deprecated.


author: Phil Knirsch <pknirsch@redhat.com> 5.1-3
changelog:
  - Removed snmpcheck again, needs perl(Tk) which we don't ship (#111194).
  - Fixed getopt definition in include file (#111209).
  - Included Kaj J. Niemi's patch for broken perl module (#111319).
  - Included Kaj J. Niemi's patch for broken async getnext perl call (#111479).
  - Included Kaj J. Niemi's patch for broken hr_storage (#111502).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-2
changelog:
  - Included BuildPrereq on lm_sensors-devel on x86 archs (#110616).
  - Fixed deprecated initscript options (#110618).


author: Phil Knirsch <pknirsch@redhat.com> 5.1-1
changelog:
  - Updated to latest net-snmp-5.1 upstream version.
  - Tons of specfile and patch cleanup.
  - Cleaned up perl stuff (mib2c etc, see #107707).
  - Added lm_sensors support patch for x86 archs from Kaj J. Niemi (#107618).
  - Added support for custom mib paths and mibs to snmptrapd initscript (#102762)


author: Phil Knirsch <pknirsch@redhat.com> 5.0.9-1
changelog:
  - Updated to latest upstream version net-snmp-5.0.9
  - Added patch to fix net-snmp-perl problems (#105842).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.8-2
changelog:
  - Hack to make it build on 64bit platforms with /usr/lib64 correctly.
  - Fixed bug #85071 (leak of open descriptors for ipv6).


author: Phil Knirsch <pknirsch@redhat.com> 5.0.1-5
changelog:
  - Added --enable-ucd-snmp-compatibility for compatibility with older version
    and fixed installation thereof.
  - Got rid of the perl(Tk) dependancy by removing snmpcheck.
  - Include /usr/include/ucd-snmp in the filelist.
  - Fixed a problem with the ucd-snmp/version.h file.


author: Phil Knirsch <pknirsch@redhat.com> 4.2.3-4
changelog:
  - Added the snmptrapd init script as per request (#49205)
  - Fixed the again broken rpm query stuff (#57444)
  - Removed all old and none-used db related stuff (libs and header checks/files)


author: Phil Knirsch <phil@redhat.de> 4.2.3-1
changelog:
  - Update to 4.2.3 final.
  - Fixed libtool/rpath buildroot pollution problem.
  - Fixed library naming problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a server segfault for snmpset operation (#53640). Thanks to Josh Giles
    and Wes Hardaker for the patch.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Final bcm5820 fix. Last one was broken.
  - Fixed bugzilla bug (#51960) where the binaries contained rpath references.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Fixed a couple of security issues:
    o /tmp race and setgroups() privilege problem
    o Various buffer overflow and format string issues.
    o One signedness problem in ASN handling.
  - Fixed an important RFE to support bcm5820 cards. (#51125)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Removed tkmib from the package once again as we don't ship the Tk.pm CPAN
    perl module required to run it (#49363)
  - Added missing Provides for the .so.0 libraries as rpm doesn't seem to find
    those during the build anymore (it used to) (#46388)


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Enabled IPv6 support (RFE #47764)
  - Hopefully final fix of snmpwalk problem (#42153). Thanks to Douglas Warzecha
    for the patch and Matt Domsch for reporting the problem.


author: Philipp Knirsch <pknirsch@redhat.de>
changelog:
  - Updated to 4.2.1. Removed 2 obsolete patches (fromcvs and #18153)
  - Include /usr/share/snmp/snmpconf in %files


author: Matt Wilson <msw@redhat.com>
changelog:
  - configure with --enable-reentrant and added "smux" and "agentx" to
    --with-mib-modules= argument (#29626)


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - don't depend on /etc/init.d so that package will work with 6.2.
  - perl path fiddles no longer needed.
  - rely on brp-compress frpm rpm to compress man pages.
  - patch from ucd-snmp CVS (Wes Hardaker).
  - configure.in needs to check for rpm libraries correctly (#23033).
  - add simple logrotate script (#21399).
  - add options to create pidfile and log with syslog with addresses (#23476).


author: Jeff Johnson <jbj@redhat.com>
changelog:
  - tkmib doco had #!/usr/bin/perl55
  - include snmpcheck and tkmib again (still needs some CPAN module, however).


author: Tomas Mraz <tmraz@redhat.com> 3.9p1-8.RHEL4.21
changelog:
  - move pam session calls so pam_close_session is always called (#216689)
  - get canonical hostname for gssapi (#216854)
  - CVE-2006-5052 don't leak info about user existence with krb5 auth (#234643)
  - fix some memory leaks in sftp (#240909)
  - correctly kill sshd in initscript (#244655)
  - close unused ends of sockets so [pam] child is always terminated (#247440)


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-6.el4_6.1
changelog:
  - Security fix for CVE-2007-4138
  - Security fix for CVE-2007-4572
  - Security fix for CVE-2007-5398
  - Multilib Fix
  - resolves: #351481
  - resolves: #350741
  - resolves: #358131
  - resolves: #359121


author: Tomas Mraz <tmraz@redhat.com> 0.9.7a-43.17
changelog:
  - use poll when reading random device (#236164)
  - make ssl session ID context matching strict (#244436)
  - openssl utility shouldn't crash on invalid PKCS#12 files (#245083)
  - CVE-2007-3108 remove conditionals in BN_div, BN_mod and final
    Montgomery reduction (#250580)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.22
changelog:
  - add pam_tally2 module (#228044)
  - unset XAUTHORITY when appropriate (#228980)
  - CVE-2007-1716 always decrement use count (#230823)
  - reset priority only when specified in limits.conf (#232407)
  - CVE-2007-3102 prevent audit log injection through user name (#247797)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.19
changelog:
  - make pam_unix consistent with useradd that it allows '.' and '_'
    on beginning of user name (#212136)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.18
changelog:
  - support service and list match in pam_succeed_if (#173926)
  - support user defined list separator in pam_access (#201008)
  - add pam_keyinit module for session keyring initialization (#183218)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.14
changelog:
  - add locking with auditing to auth phase of pam_tally (#170562)
  - report errors on relabelling terminal devices correctly in
    pam_selinux (#170587)
  - add support for new limits (sigpending, msgqueue) (#170844)
  - don't require tty in pam_access (#170467)
  - add support for netgroup matching in pam_succeed_if (#170315)


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.11
changelog:
  - link pam_loginuid to audit library now that it is called from it
  - don't return error if kernel is compiled without audit support


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.8
changelog:
  - #152331 allow larger buffer for getgr* functions
  - #158272 flush input first, then print the prompt


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - ALLGROUP and ALL limits weren't correctly applied by pam_limits
  - Fix a typo in pam_localuser README


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.2
changelog:
  - #115309 prefer changing local password instead of NIS one for local users
  - Fix PAM_IGNORE return value handling and correct the grubb_leak patch
    to fix #143750


author: Tomas Mraz <tmraz@redhat.com> 0.77-66.1
changelog:
  - add argument to pam_console_apply to restrict its work to specified files
  - #140451 parse passwd entries correctly and test for failure


author: Tomas Mraz <tmraz@redhat.com> 0.77-66
changelog:
  - #77646 log failures when renaming the files when changing password
  - Log failure on missing /etc/security/opasswd when remember option is present


author: Tomas Mraz <tmraz@redhat.com>
changelog:
  - #87628 pam_timestamp remembers authorization after logout
  - #116956 fixed memory leaks in pam_stack


author: Tomas Mraz <tmraz@redhat.com> 0.77-63
changelog:
  - Fix checking of group Development/Debug syntax in pam_limits
  - Drop fencepost patch as it was already fixed 
    by upstream change from 0.75 to 0.77
  - Fix brokenshadow patch


author: Tomas Mraz <tmraz@redhat.com> 0.77-61
changelog:
  - #129328 pam_env shouldn't abort on missing /etc/environment
  - #126985 pam_stack should always copy the conversation function 
  - #127524 add /etc/security/opasswd to files


author: Tomas Mraz <tmraz@redhat.com> 0.77-56
changelog:
  - #75454 fixed locking when changing password
  - #127054 
  - #125653 removed unnecessary getgrouplist call
  - #124979 added quiet option to pam_succeed_if


author: Dan Walsh <dwalsh@redhat.com> 0.77-19.sel
changelog:
  - Change unix_chkpwd to handle unix_passwd and unix_acct
  - This eliminates the need for pam modules to have read/write access to /etc/shadow.


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-15
changelog:
  - don't install _pam_aconf.h -- apps don't use it, other PAM headers which
    are installed don't use it, and its contents may be different for arches
    on a multilib system
  - check for linkage problems in modules at %install-time (kill #107093 dead)
  - add buildprereq on flex (#101563)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_pwdb.so link with libnsl again so that it loads (#107093)
  - remove now-bogus buildprereq on db4-devel (we use a bundled copy for
    pam_userdb to avoid symbol collisions with other db libraries in apps)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_succeed_if: fix thinko in argument parsing which would walk past the
    end of the argument list


author: Nalin Dahyabhai <nalin@redhat.com> 0.77-0
changelog:
  - update to 0.77 upstream release
    - pam_limits: limits now affect root as well
    - pam_nologin: returns PAM_IGNORE instead of PAM_SUCCESS unless "successok"
      is given as an argument
    - pam_userdb: correctly return PAM_AUTH_ERR instead of PAM_USER_UNKNOWN when
      invoked with the "key_only" argument and the database has an entry of the
      form "user-<wrongpassword>"
  - use a bundled libdb for pam_userdb.so because the system copy uses threads,
    and demand-loading a shared library which uses threads into an application
    which doesn't is a Very Bad Idea


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-49
changelog:
  - modify calls to getlogin() to check the directory of the current TTY before
    searching for an entry in the utmp/utmpx file (#98020, #98826, CAN-2003-0388)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-46
changelog:
  - pam_xauth: reintroduce ACL support, per the original white paper
  - pam_xauth: default root's export ACL to none instead of everyone


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-45
changelog:
  - create /lib/security, even if it isn't /%{_lib}/security, because we
    can't locate /lib/security/$ISA without it (noted by Arnd Bergmann)
  - clear out the duplicate docs directory created during %install


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-44
changelog:
  - fix syntax errors in pam_console's yacc parser which newer bison chokes on
  - forcibly set FAKEROOT at make install time


author: Elliot Lee <sopwith@redhat.com> 0.75-42
changelog:
  - Since cracklib-dicts location will not be correctly detected without 
    that package being installed, add buildreq for cracklib-dicts.
  - Add patch57: makes configure use $LIBNAME when searching for cracklib 
    dicts, and error out if not found.


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-40
changelog:
  - pam_timestamp_check: check that stdio descriptors are open before we're
    invoked
  - add missing chroot.conf


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-36
changelog:
  - pam_timestamp: chown intermediate directories when creating them
  - pam_timestamp_check: add -d flag to poll


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-31
changelog:
  - libpam_misc: fix possible infinite loop in misc_conv (#62195)
  - pam_xauth: fix cases where DISPLAY is "localhost:screen" and the xauth
    key is actually stored using the system's hostname (#61524)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-20
changelog:
  - pam_stack: fix some memory leaks (reported by Fernando Trias)
  - pam_chroot: integrate Owl patch to report the more common causes of failures


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-19
changelog:
  - fix a bug in the getpwnam_r wrapper which sometimes resulted in false
    positives for non-existent users


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-16
changelog:
  - pam_xauth: always return PAM_SUCCESS or PAM_SESSION_ERR instead of PAM_IGNORE,
    matching the previous behavior (libpam treats PAM_IGNORE from a single module
    in a stack as a session error, leading to false error messages if we just
    return PAM_IGNORE for all cases)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-15
changelog:
  - reorder patches so that the reentrancy patch is applied last -- we never
    came to a consensus on how to guard against the bugs in calling applications
    which this sort of change addresses, and having them last allows for dropping
    in a better strategy for addressing this later on


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_rhosts: allow "+hostname" as a synonym for "hostname" to jive better
    with the hosts.equiv(5) man page
  - use the automake install-sh instead of the autoconf install-sh, which
    disappeared somewhere between 2.50 and now


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_tally: don't try to read past the end of faillog -- it probably contains
    garbage, which if written into the file later on will confuse /usr/bin/faillog


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: don't just return if the user is root -- we'll want to set the
    priority (it could be negative to elevate root's sessions)
  - pam_issue: fix off-by-one error allocating space for the prompt string


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_mkhomedir: recurse into subdirectories properly
  - pam_mkhomedir: handle symlinks
  - pam_mkhomedir: skip over special items in the skeleton directory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add cracklib as a buildprereq
  - pam_wheel: don't ignore out if the user is attempting to switch to a
    unprivileged user (this lets pam_wheel do its thing when users attempt
    to get to system accounts or accounts of other unprivileged users)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: close a possible DoS due to use of dotlock-style locking in
    world-writable directories by relocating the temporary file to the target
    user's home directory
  - general: include headers local to this tree using relative paths so that
    system headers for PAM won't be pulled in, in case include paths don't
    take care of it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_xauth: rewrite to skip refcounting and just use a temporary file
    created using mkstemp() in /tmp


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_userdb: fix the key_only flag so that the null-terminator of the
    user-password string isn't expected to be part of the key in the db file,
    matching the behavior of db_load 3.2.9


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_unix: use crypt() instead of bigcrypt() when salted field is less than
    the critical size which lets us know it was generated with bigcrypt()
  - use a wrapper to handle ERANGE errors when calling get....._r functions:
    defining PAM_GETPWNAM_R and such (for getpwnam, getpwuid, getgrnam,
    getgrgid, and getspnam) before including _pam_macros.h will cause them
    to be implemented as static functions, similar to how defining PAM_SM_xxx
    is used to control whether or not PAM declares prototypes for certain
    functions


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-12
changelog:
  - noreplace configuration files in /etc/security
  - pam_console: update pam_console_apply and man pages to reflect
    /var/lock -> /var/run move


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modules: use getpwnam_r and friends instead of non-reentrant versions
  - pam_console: clear generated .c and .h files in "clean" makefile target


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_stack: perform deep copy of conversation structures
  - include the static libpam in the -devel subpackage (#52321)
  - move development .so and .a files to %{_libdir}
  - pam_unix: don't barf on empty passwords (#51846)
  - pam_unix: redo compatibility with "hash,age" data wrt bigcrypt (#42394)
  - console.perms: add usb camera, scanner, and rio devices (#15528)
  - pam_cracklib: initialize all options properly (#49613)


author: Nalin Dahyabhai <nalin@redhat.com> 0.75-10
changelog:
  - pam_xauth: fix errors due to uninitialized data structure (fix from Tse Huong
    Choo)
  - pam_xauth: random cleanups
  - pam_console: use /var/run/console instead of /var/lock/console at install-time
  - pam_unix: fix preserving of permissions on files which are manipulated


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: use /var/run/console instead of /var/lock/console for lock files
  - pam_issue: read the right number of bytes from the file


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: don't error out if the group has no members, but is the user's
    primary GID (reported by David Vos)
  - pam_unix: preserve permissions on files which are manipulated (#43706)
  - pam_securetty: check if the user is the superuser before checking the tty,
    thereby allowing regular users access to services which don't set the
    PAM_TTY item (#39247)
  - pam_access: define NIS and link with libnsl (#36864)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: fix logic bug when changing permissions on single
    file and/or lists of files
  - pam_console: return the proper error code (reported and patches
    for both from Frederic Crozat)
  - change deprecated Copyright: tag in .spec file to License:


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: change js* to js[0-9]*
  - include pam_aconf.h in more modules (patches from Harald Welte)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - console.perms: add apm_bios to the list of devices the console owner can use
  - console.perms: add beep to the list of sound devices


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_access: compare IP addresses with the terminating ".", as documented
    (patch from Carlo Marcelo Arenas Belon, I think) (#16505)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge up to 0.75
  - pam_unix: temporarily ignore SIGCHLD while running the helper
  - pam_pwdb: temporarily ignore SIGCHLD while running the helper
  - pam_dispatch: default to uncached behavior if the cached chain is empty


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - remove /dev/dri from console.perms -- XFree86 munges it, so it's outside of
    our control (reminder from Daryll Strauss)
  - add /dev/3dfx to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_wheel: make 'trust' and 'deny' work together correctly
  - pam_wheel: also check the user's primary gid
  - pam_group: also initialize groups when called with PAM_REINITIALIZE_CRED


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_console: error out on undefined classes in pam_console config file
  - console.perms: actually change the permissions on the new device classes
  - pam_console: add an fstab= argument, and -f and -c flags to pam_console_apply
  - pam_console: use g_log instead of g_critical when bailing out
  - console.perms: logins on /dev/vc/* are also console logins, from Douglas
    Gilbert via Tim Waugh


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add pam_console_apply
  - /dev/pilot's usually a serial port (or a USB serial port), so revert its
    group to 'uucp' instead of 'tty' in console.perms
  - change pam_console's behavior wrt directories -- directories which are
    mount points according to /etc/fstab are taken to be synonymous with
    their device special nodes, and directories which are not mount points
    are ignored


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - own /etc/security
  - be more descriptive when logging messages from pam_limits
  - pam_listfile: remove some debugging code (#28346)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - pam_limits: change the documented default config file to reflect the defaults
  - pam_limits: you should be able to log in a total of maxlogins times, not
    (maxlogins - 1)
  - handle group limits on maxlogins correctly (#25690)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - actually time out when attempting to lckpwdf() (#25889)
  - include time.h in pam_issue (#25923)
  - update the default system-auth to the one generated by authconfig 4.1.1
  - handle getpw??? and getgr??? failures more gracefully (#26115)
  - get rid of some extraneous {set,end}{pw,gr}ent() calls


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - merge to 0.74
  - make console.perms match perms set by MAKEDEV, and add some devfs device names
  - add 'sed' to the buildprereq list (#24666)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix handling of "nis" when changing passwords by adding the checks for the
    data source to the password-updating module in pam_unix
  - add the original copyright for pam_access (fix from Michael Gerdts)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix similar() function in pam_cracklib (#14740)
  - fix example in access.conf (#21467)
  - add conditional compilation for building for 6.2 (for pam_userdb)
  - tweak post to not use USESHADOW any more


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add RLIMIT_LOCKS to pam_limits (patch from Jes Sorensen) (#20542)
  - link pam_userdb to Berkeley DB 2.x to match 6.2's setup correctly


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - tweak pre script to be called in all upgrade cases
  - get pam_unix to only care about the significant pieces of passwords it checks
  - add /usr/include/db1/db.h as a build prereq to pull in the right include
    files, no matter whether they're in glibc-devel or db1-devel
  - pam_userdb.c: include db1/db.h instead of db.h


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - patch from Dmitry V. Levin to have pam_stack propagate the PAM fail_delay
  - roll back the README for pam_xauth to actually be the right one
  - tweak pam_stack to use the parent's service name when calling the substack


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - modify the files list to make sure #16456 stays fixed
  - make pam_stack track PAM_AUTHTOK and PAM_OLDAUTHTOK items
  - add pam_chroot module
  - self-hosting fixes from the -devel split
  - update generated docs in the tree


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix problems when looking for headers in /usr/include (#17236)
  - clean up a couple of compile warnings


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - give users /dev/cdrom* instead of /dev/cdrom in console.perms (#16768)
  - add nvidia control files to console.perms


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - move pam_filter modules to /lib/security/pam_filter (#16111)
  - add pam_tally's application to allow counts to be reset (#16456)
  - move README files to the txts subdirectory


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add a broken_shadow option to pam_unix
  - add all module README files to the documentation list (#16456)


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - need to make pam_console's checking a little stronger
  - only pass data up from pam_stack if the parent didn't already define it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - make pam_console's extra checks disableable
  - simplify extra check to just check if the device owner is root
  - add a debug log when pam_stack comes across a NULL item
  - have pam_stack hand items up to the parent from the child


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - fix installation of pam_xauth man pages (#12417)
  - forcibly strip helpers (#12430)
  - try to make pam_console a little more discriminating


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - symlink libpam.so to libpam.so.0.77, and likewise for libpam_misc
  - reverse order of checks in _unix_getpwnam for pam_unix


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add account management wrappers for pam_listfile, pam_nologin, pam_securetty,
    pam_shells, and pam_wheel


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - add system-auth control file
  - let gethostname() call in pam_access.c be implicitly declared to avoid
    conflicting types if unistd.c declares it


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - Add new pam_stack module.
  - Install pwdb_chkpwd and unix_chkpwd as the current user for non-root builds


author: Elliot Lee <sopwith@redhat.com>
changelog:
  - Add a patch to accept 'pts/N' in /etc/securetty as a match for tty '5'
    (which is what other pieces of the system think it is). Fixes bug #7641.


author: Nalin Dahyabhai <nalin@redhat.com>
changelog:
  - update to 0.72
  - fix pam_unix password-changing bug
  - fix pam_unix's cracklib support
  - change package URL


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - many bug fixes in pam_xauth
  - pam_console can now handle broken applications that do not set
    the PAM_TTY item.


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - fixed glob/regexp confusion in pam_console, added kbd and fixed fb devices
  - added pam_xauth module


author: Michael K. Johnson <johnsonm@redhat.com>
changelog:
  - changed /dev/cdrom default user permissions back to 0600 in console.perms
    because some cdrom players open O_RDWR.


author: Karel Zak <kzak@redhat.com> 2.12a-17.el4_6.1
changelog:
  - fix #324441 - CVE-2007-5191 util-linux (u)mount doesn't drop
  		privileges properly when calling helpers


author: Karel Zak <kzak@redhat.com> 2.12a-16.EL4.27
changelog:
  - fix #230724 - raw confusing when users try to bind /dev/raw/raw0
  - fix #233470 - documentation bug in nfs man page
  - fix #236848 - mount/fstab.c:lock_mtab() should open with proper permissions
  - fix #239850 - ipcs needs to be 64bit binary to handle > 2GB memory segments on PPC64
  - fix #242000 - guest rhel4u5 "fdisk -l" can't display default disk and partitions on rhel5


author: Jeff Layton <jlayton@redhat.com> 2.12a-16.EL4.26
changelog:
  - fix #240304 - add support for nordirplus NFS mount option
  - fix #240780 - only pass NFS socket to kernels that need one
  - fix #240780 - fix NFS retry= option to handle bindresvport failure


author: Jason Vas Dias <jvdias@redhat.com> 192-6.EL4
changelog:
  - fix bug 193238: prevent deadlock on Cleanup() in reapchild() -
                    backport fix from latest xterm


author: Mike A. Harris <mharris@redhat.com> 192-1.EL4.1
changelog:
  - Fixed xterm-resources-redhat.patch to restore "*VT100*eightBitInput: false"
    in order to avoid regression (#158528)


author: Mike A. Harris <mharris@redhat.com> 192-1.EL4.0
changelog:
  - Enabled xterm-resources-redhat.patch to fix various bugs caused due to it
    being inadvertently disabled for so long.
  - Updated xterm-resources-redhat.patch to enable xterm utf8 resource by
    default, as our default OS environment is UTF-8, for bug (#138681)


author: Mike A. Harris <mharris@redhat.com> 191-1
changelog:
  - Updated main tarball to xterm-191 for FC3 devel
  - Disabled xterm-resources-redhat.patch to see what if anything breaks, as
    it no longer applies cleanly.  Hopefully we can just ship stock xterm
    resources now, although I realize that is more likely to be a pie in the
    sky fantasy once the bug reports trickle in from this change.  ;o)


author: Mike A. Harris <mharris@redhat.com> 179-3
changelog:
  - Added symlink /usr/X11R6/bin/xterm pointing to _bindir/xterm so that apps
    and scripts which invoke xterm explicitly as /usr/X11R6/bin/xterm, will
    continue to work correctly without surprises (#101994)


author: Mike A. Harris <mharris@redhat.com> 179-1
changelog:
  - Updated to upstream xterm 179
  - [SECURITY] Added xterm-can-2003-0063.patch from XFree86 4.3.0-12 package
  - Added Red Hat xterm-resources-redhat.patch from XFree86 4.3.0-12 package
  - Added "chmod -R u+w *" after source is decompressed or else patches can not
    be applied due to upstream source being read only files
  - Built xterm 179-1 in rawhide


author: Mike A. Harris <mharris@redhat.com> 177-2
changelog:
  - Build fix for lib64:  _x11datadir == /usr/X11R6/lib
  - Another lib64 build fix:  xterm uses /usr/%{_lib}/X11/app-defaults when it
    should be using an arch-neutral dir {_x11datadir}/X11/app-defaults instead


author: Mike A. Harris <mharris@redhat.com> 177-1
changelog:
  - Call configure with "--enable-luit --enable-warnings --enable-wide-chars
    --with-utempter"
  - Initial build.


author: Stepan Kasal <skasal@redhat.com> - 4.5-4.6
changelog:
  - Add pcre-4.5-CVE-2007-1659.patch
  - Update pcre-4.5-CVE-2007-1660.patch
  - Add pcre-4.5-CVE-2007-7230.patch
  - Resolves: #380511


author: Stepan Kasal <skasal@redhat.com> - 4.5-4.5
changelog:
  - Add patches for CVE-2006-7224, CVE-2006-7225, and CVE-2006-7226.
  - This synchronizes this branch with 4.5 and resolves #373421
  - Related: #380511


author: Jitka Kudrnacova <jkudrnac@redhat.com> 3:3.2.Ob6-3.40.1.rhel4
changelog:
  - Fixed missing $opts in rundig on call htfuzy (#179101)
  - Removed htdig-pdfparser and htdigconfig man pages (#185143)


author: Phil Knirsch <pknirsch@redhat.com> 3:3.2.0b6-3.40.1
changelog:
  - Fixed security bug with unescaped output in htsearch and qtest (#144127)
  - Removed .la and .a libs from package (#145649)


author: Phil Knirsch <pknirsch@redhat.com> 3.2.0b6-1
changelog:
  - Update to htdig-3.2.0b6
  - Removed obsolete patches (already included upstream).
  - Added manpages to basic package.
  - Added missing httpd BuildPreReq (#125037)
  - Added fix for broken behaviour with robots.txt (#126482)


author: Phil Knirsch <pknirsch@redhat.com> 3.2.0b5-6
changelog:
  - Removed buildroot cruft from HtFileFype (#116442).
  - Use mktemp in HtFileFype to create temporary file (#116443).


author: Bernhard Rosenkraenzer <bero@linux-easy.com> 3.2.0-2.20020505
changelog:
  - Fix build with current toolchain (automake 1.6, autoconf 2.53 changes)
  - Update snapshot, fixes some more problems


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest snapshot to fix several problems.
  - Fixed a problem with htdig segfaulting on s390 (#58202).


author: Bernhard Rosenkraenzer <bero@redhat.com> 3.2.0-0.b3.4
changelog:
  - move pictures etc. to base package and to a directory outside of
    /var/www - The current KDevelop search function doesn't work without
    them.


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - built against glibc
  - build all the fuzzy databases before packaging, because it is time
    consuming operation and we don't want the user to be impatient


author: James Antill <james.antill@redhat.com> - 2.3.4-14.4.el4_6.1
changelog:
  - Fix possible integer overflow in image ops
  - Fix off by one strxfrm malloc
  - Fix pypcre bugs
  - Resolves: rhbz#392041


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-10
changelog:
  - Fixed bug #77418 (Demo dir not packaged)
  - More tweaking on #19347 (Moved Tools/ under /usr/lib/python2.3/Tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-8
changelog:
  - Fixed bug #129769: Makefile in new python conflicts with older version found
    in old python-devel
  - Reorganized the spec file to get rid of the aspython2 define; __python_ver
    is more powerful.


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-7
changelog:
  - Including html documentation for non-i386 arches
  - Fixed #125362 (python-doc html files have japanese character encoding)
  - Fixed #128923 (missing dependency between python and python-devel)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-6
changelog:
  - Fixed #128030 (help() not printing anything)
  - Fixed #125472 (distutils.sysconfig.get_python_lib() not returning the right
    path on 64-bit systems)
  - Fixed #127357 (building python as a shared library)
  - Fixed  #19347 (including the contents of Tools/scripts/ in python-tools)


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-3
changelog:
  - Added an optik.py that provides the same interface from optparse for
    backward compatibility; obsoleting python-optik


author: Mihai Ibanescu <misa@redhat.com> 2.3.4-1
changelog:
  - Updated to 2.3.4-1 with Robert Scheck's help (bug #124764)
  - Added BuildRequires: tix-devel (bug #124918)


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-6
changelog:
  - Correct fix for #122304 from upstream:
    http://sourceforge.net/tracker/?func=detail&atid=105470&aid=931848&group_id=5470


author: Mihai Ibanescu <misa@redhat.com> 2.3.3-4
changelog:
  - Fix for bug #122304 : splitting the domain name fails on 64-bit arches
  - Fix for bug #120879 : including Makefile into the main package

  - Requires XFree86-devel instead of -libs (see bug #118442)


author: Mihai Ibanescu <misa@redhat.com> 2.3-0.2
changelog:
  - Building python 2.3
  - Added more BuildRequires
  - Updated the startup files for modulator and pynche; idle installs its own
    now.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-25
changelog:
  - Fixed bug #84886: pydoc dies when run w/o arguments
  - Fixed bug #84205: add python shm module back (used to be shipped with 1.5.2)
  - Fixed bug #84966: path in byte-compiled code still wrong


author: Jeremy Katz <katzj@redhat.com> 2.2.2-23
changelog:
  - ftp uri's should be able to specify being rooted at the root instead of 
    where you login via ftp (#84692)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-22
changelog:
  - Using newer Japanese codecs (1.4.9). Thanks to 
    Peter Bowen <pzb@datastacks.com> for pointing this out.


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-13
changelog:
  - Attempt to look both in /usr/lib64 and /usr/lib/python2.2/site-packages/:
    some work on python-2.2.2-lib64.patch


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-11.7.3
changelog:
  - Fixed bug #82544: Errata removes most tools
  - Fixed bug #82435: Python 2.2.2 errata breaks redhat-config-users
  - Removed .lib64 and - files that get installed after we fix the multilib
    .py files.


author: Jeremy Katz <katzj@redhat.com> 2.2.2-8
changelog:
  - urllib2 didn't support non-anonymous ftp.  add support based on how 
    urllib did it (#80676, #78168)


author: Mihai Ibanescu <misa@redhat.com> 2.2.2-7
changelog:
  - Fix bug #79647 (Rebuild of SRPM fails if python isn't installed)
  - Added a bunch of missing BuildRequires found while fixing the
    above-mentioned bug


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.7.3
  - Recompiled for 7.3 (to fix the -lcrypt bug)
  - Fix for the spurious error message at the end of the build (build-requires
    gets confused by executable files starting with """"): make the tests
    non-executable.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-5
  - Fixed configuration patch to add -lcrypt when compiling cryptmodule.c

  2.2.2-4
  - Spec file change from Matt Wilson <msw@redhat.com> to disable linking 
    with the C++ compiler.


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-3.*
  - Merged patch from Karsten Hopp <karsten@redhat.de> from 2.2.1-17hammer to
    use %{_libdir}
  - Added XFree86-libs as BuildRequires (because of tkinter)
  - Fixed duplicate listing of plat-linux2
  - Fixed exclusion of lib-dynload/japanese
  - Added lib64 patch for the japanese codecs
  - Use setup magic instead of using tar directly on JapaneseCodecs


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  2.2.2-2
  - Fix #76912 (python-tools contains idle, which uses tkinter, but there is no
    requirement of tkinter from python-tools).
  - Fix #74013 (rpm is missing the /usr/lib/python2.2/test directory)


author: Mihai Ibanescu <misa@redhat.com>
changelog:
  - builds as python2 require a different libdb
  - changed the buildroot name of python to match python2 builds


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-16
changelog:
  - the same, but in builddirs - this will remove them from the 
    docs package, which doesn't look in the buildroot for files.


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-8
changelog:
  - Make files in /usr/bin install side by side with python 1.5 when
  - Drop explicit requirement of db4
    built as python2


author: Nalin Dahyabhai <nalin@redhat.com> 2.2-5
changelog:
  - disable ndbm support, which is db2 in disguise (really interesting things
    can happen when you mix db2 and db4 in a single application)


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.11c1
changelog:
  - 2.2 RC 1
  - Don't include the _tkinter module in the main package - it's 
    already in the tkiter packace
  - Turn off the mpzmodule, something broke in the buildroot


author: Matt Wilson <msw@redhat.com> 2.2-0.9b2
changelog:
  - changed DESTDIR to point to / so that distutils will install dynload
    modules properly in the installroot


author: Trond Eivind Glomsrød <teg@redhat.com> 2.2-0.4a4
changelog:
  - 2.2a4
  - Enable UCS4 support
  - Enable IPv6
  - Provide distutils
  - Include msgfmt.py and pygettext.py


author: Trond Eivind Glomsrød <teg@redhat.com>
changelog:
  - fix the "requires" clause, it lacked a space causing problems
  - use %{_tmppath}
  - don't define name, version etc
  - add the available patches from the Python home page


author: Matt Wilson <msw@redhat.com>
changelog:
  - modify all files to use "python2.0" as the intrepter
  - don't build the Expat bindings
  - build against db1


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - updated for 2.0c1
  - build audioop, imageop, and rgbimg extension modules
  - include xml.parsers subpackage
  - add test.xml.out to files list


author: Jeremy Hylton <jeremy@beopen.com>
changelog:
  - Version 2 of 2.0b1
  - Make the package relocatable.  Thanks to Suchandra Thapa.
  - Exclude Tkinter from main RPM.  If it is in a separate RPM, it is
    easier to track Tk releases.


author: Simo Sorce <ssorce@redhat.com> 3.0.25b-6.el4_6.4
changelog:
  - Security fix for CVE-2007-6015
  - Fix for regression introduced with CVE-2007-4572
  - resolves: #407341
  - resolves: #407071


author: Petr Machata <pmachata@redhat.com> - 2007j-1.el4
changelog:
  - Upstream 2007j
    - New links America/St_Barthelemy and America/Marigot
    - Venezuela is changing their clocks on December 9 at 03:00
  - Upstream 2007i
    - Syria DST will take place at Midnight between Thursday and Friday.
    - Cuba will end DST on the last Sunday of October.
  - Update tst-timezone.c from glibc CVS
  - Resolves: #410111


author: Vitaly Mayatskikh <vmayatsk@redhat.com> [2.6.9-67.0.1]
changelog:
  -kernel ieee80211 off-by-two integer underflow (Anton Arapov) [346361] {CVE-2007-4997}
  -fix for NFS attribute timeout handling (Fabio Leite) [371551]
  -fix bad schedule_timeout() call causing excessive delay (Jonathan Brassow) [399661]
  -do not return zero in mmap (Rik van Riel) [400811]
  -fs: fix missing dput in do_lookup error case leaks dentries (Eric Sandeen) [363461] {CVE-2007-5494}
  -s390: fix LTC39618-kernel panic making lcs interfaces online on LPAR (Hans-Joachim Picht) [400801]
  -x86_64: Fix incorrect logic in AMD NMI code (Prarit Bhargava) [404741]
  -scsi: fix diskdump performance regression on mpt fustion driver (Takao Indoh) [404781]


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE14-1.4E
changelog:
  - fix for #170392 - updated to the latest upstream
  - fix for #183869 - squid can abort when getting status
  - fix for #212137 - squid does not support >1024 file descriptors
  - fix for #222883 - CVE-2007-0247, Squid crashes when receiving 
                      certain FTP listings


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE6-3.4E.12
changelog:
  - fix for #160704 - squid child processes exit with signal 6
  - fix for #168378 - CVE-2005-2917 Squid malformed NTLM authentication DoS
  - fix for #153274 - the 64bit LFS issue
  - fix for #161640 - Request to re-enable IDENT lookups in squid
  - fix for #162660 - pam authentication fails
  - fix for #172697 - Squid doesn't handle headers split across packets
  - fix for #170399 - Squid blocks page served by broken server
  - fix for #172375 - Error pages should not be replaced by updates
  - fix for #172392 - One translated Polish language error is missing


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE6-3.4E.11
changelog:
  - fix for #167414 - Multiple squid DoS issues
  - fix for #166520 - CAN-2004-2479 squid information disclosure


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.8
changelog:
  - Backport the -dns_query-4 patch to fix
    bz #157455 CAN-2005-1519 DNS lookups unreliable on untrusted networks
  - Backport the changes from the -5 version of the dns_query patch.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.6
changelog:
  - Backport 2.5.STABLE7-post.patch to close
    bz#151423 CAN-2005-0718 Segmentation fault on failed PUT/POST request
  - Backport 2.5.STABLE9-setcookie.patch to close
    bz#150232 cookie leak in squid
  - Backport 2.5.STABLE9-acl_error to close
    bz#151412 Unexpected access control results on configuration errors
  - Backport changes to the ldap helper between STABLE6 and STABLE9 to close
    bz#150907 LDAP authentication fails with an assertion error


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E.3
changelog:
  - Reorganize patches in this spec file so backported upstream fixes come
    after the upstream 2.5.STABLE6 patches.
  - Backport two more security fixes to close
    CAN-2005-0211 bz#146779
    and bz#146785


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3.4E
changelog:
  - Backport fixes for bz#145545
    CAN-2005-0096 and CAN-2005-0097, remote DOS security holes. 
    CAN-2005-0094, a remote buffer-overflow DOS security hole. 
    CAN-2005-0095, a remote DOS security hole.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-10rc4.3E or later.
    This fixes bugzilla #103726
  - clean up extra whitespace at the end of lines in this spec file.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add -j2 to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use /usr/lib64
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Add a check to the use of "node" before calling start_transition.
  - A check for a null messages was added to prevent a kernel oops.
  - Resolves: rhbz#233521 rhbz#199433


author: Chris Feist <cfeist@redhat.com>
changelog:
  - cmirror write path no longer appears deadlocked after recovery
  - Touch up on keeping cluster mirrors in sync when nominal and resync I/O
    overlap.
  - Resolves: rhbz#290821, rhbz#291521


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Cluster mirrors no longer become out of sync if nominal and resync I/O
    overlap.
  - Resolves: rhbz#291521


author: Chris Feist <cfeist@redhat.com>
changelog:
  - When two logs are loaded that represent the same entity the second log
    now starts suspended.
  - Resolves: rhbz#239856


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Fixed an issue caused by a lock master sending an async "granted" message
    for a convert reqeust before sending a reply for the original convert.
  - Resolves: rhbz #349001


author: Chris Feist <cfeist@redhat.com>
changelog:
  - dlm-kernel now sets the source address for outgoing packets to the node ip
    address, instead of allowing the kernel to pick the source address.
  - Resolves: rhbz #338511


author: Chris Feist <cfeist@redhat.com>
changelog:
  - When closing a device dlm now tries harder to release all locks
  - Fixed a DLM locking assertion failure (line 1390)
  - Resolves: rhbz#280161 rhbz#240453 rhbz#238490


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Built for 2.6.9-56.EL kernel
  - Fixed crash when running 'cat /proc/cluster/dlm_locks'
  - Fixed dlm hang when tcp connection was opened to dlm port
  - Fixed DLM locking assertion failure on line 139
  - Resolves: rhbz#240356 rhbz#245828 rhbz#240453


author: Chris Feist <cfeist@redhat.com>
changelog:
  - GFS can now take advantage of settings that override the diaper devices's
    generic readahead value.
  - Resolves: rhbz#230803


author: Chris Feist <cfeist@redhat.com>
changelog:
  - Built for 2.6.9-56.EL
  - gfs_ondisk.h now includes uint64_t instead of __be64
  - A race between GFS lookup code and VM inode cache reclaim logic has been
    fixed
  - glock trimming code now works properly
  - Fixed a problem which could cause hangs in the gfs jid code
  - Resolves: rhbz#239523 rhbz#242720 rhbz#245776 rhbz#237678


author: Tom Lane <tgl@redhat.com> 7.4.19-1.el4_6.1
changelog:
  - Update to PostgreSQL 7.4.19 to fix CVE-2007-4769, CVE-2007-4772,
    CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
  Resolves: #427135


author: Eric Sandeen <esandeen@redhat.com> 1.35-12.9.el4
changelog:
  - Fix debugfs segfault when no fs open (#226801)
  - Avoid recursive loops in logdump due to symlinks in /dev (#212301)


author: Eric Sandeen <esandeen@redhat.com> 1.35-12.8.el4
changelog:
  - Don't write changes to the backup superblocks by default (#229568)
  - e2fsck: added sanity check for xattr validation (#230434)


author: Peter Jones <pjones@redhat.com>
changelog:
  - Revert label probing change; we don't need it since mount doesn't use
    libblkid in rhel 4.
    Related: rhbz#234815


author: Thomas Woerner <twoerner@redhat.com> 1.35-12.3.EL4
changelog:
  - removed referenced to ext2resize from man pages (#164383)
  - fixed possible crash on a bad disconnected inode (#166093)
  - enabled tune2fs to set and clear resize_inode feature (#167816)


author: Thomas Woerner <twoerner@redhat.com> 1.35-12.2.EL4
changelog:
  - Fixed overflow handling for device size determination on 64-bit hosts
    (#158518) - Thanks to Stephen C. Tweedie for the patch.
  - Fixed SEGV on large partitions (#158931)
  - Close File descriptor for unregognized devices (#159878)
    Thanks to David Milburn for the patch.
  - Fixed type aliasing problem (ext2fs abort) (#161183)
    Thanks to Stephen C. Tweedie for the patch.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-12.1.EL4
changelog:
  - Reenable offline resize
    + fix interactions with online resize
  - Many bugfixes from e2fsprogs-1.36:
    + Offline resize maintains the online resize inode
    + e2fsck fixes for online resize 
    + fix mke2fs -[R|E] resize= option
    + fix removal of the xattr feature
    + fix offline resize byte swapping on bigendian hosts
    + dumpe2fs/tune2fs will show the reserved GDT blocks on a filesystem
  - Fix determination of device size for devices >= 4TB (bugzilla #143907)
  - Fix gdt verification on bigendian hosts for online resize 
    (bugzilla #142493, #142480)
  - Never default to blocksize >4K in mke2fs
  - Supercede old double-kfree fix (bugzilla #132707)
  - Remove undesirable debug printfs from libe2fs resize code


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.6.EL4
changelog:
  - Disable offline resize for now: resize2fs is incompatible with
    online resize, and can result in corrupt filesystems.


author: Stephen C. Tweedie <sct@redhat.com> 1.35-11.4.EL4
changelog:
  - More byte-order fixes for mke2fs and ext2online
  - Disable fallback to old-style resize if new kernel resize code is not
    available


author: Phil Knirsch <pknirsch@redhat.com> 1.35-2
changelog:
  - Updated s390 patch. It's not not arch dependant anymore but only changes the
    default blocksizes when necessary.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update the mainframe patch to its current version, but disable it
    until the change also properly supports SCSI and is usable also
    for non-mainframe archs


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.35-pre
  - use ldconfig to create symlinks to shared libs
  - remove some cruft from the spec file
  - man3 is now part of the devel rpm


author: Phil Knirsch <pknirsch@redhat.com> 1.32-7
changelog:
  - Fixed problem with mke2fs and default blocksize small partitions on dasd
  - Disabled Florians patch for now as it's a little incomplete. :-)


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.30, leave out already integrated patches
  - clean up spec file
  - also package some missing files


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.23-4
changelog:
  - Fix headers of libext2fs - it wasn't possible to include them from
    C++ code (using private as a variable name isn't a good idea)
  - Fix build with autoconf 2.5x


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - update to 1.23. This was requested to support the "auto" fstype
    to ease ext2 <-> ext3 conversions.


author: Alan Eldridge <alane@geeksrus.net>
changelog:
  - Added 16K buffer for reading /proc/partitions in 
    get_label_by_device.c to correct problems with LABEL= in fsck 
    caused by not reading /proc/partitions in a single read() call;
    if somebody has a "partitions" > 16K, it may still fail ...


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - fix bug 194429 / upstream 2.5.2_APPROVED bug 5073
  - fix bug 194896 raised for upstream bugs listed below


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - More upstream 2.5.2_APPROVED bug fixes:
    o 5119: memory leak in CMPI implementation
    o 5115: fix SetConfig_EnvVar comments
  - fix bug 194378: merge in changelog from 2.4.1


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - Fix bug 193892: make SDK makefile create libraries with correct SELinux context
  - Fix bug 193919: make /var/lib/Pegasus/cache/trace directory have mode 777
  - Fix bug 192921: make /var/lib/Pegasus/repository directory 
  	          owned by root:root, mode 0700


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2.EL4
changelog:
  - Apply upstream patches for latest 2.5.2_APPROVED bugs:
    o 5046: cimprovider timeout needs to be increased
    o 5047: cimmof timeout needs to be increased
    o 5048: Invalid Pointer in CIMOperationRequestEncoder code
    o 5049: Unnecessary dependency on experimental headers
    o 5051: Improved handling of OOP indication provide module failures
    o 5053: reserveCapacity method may cause size overflow
    o 5059: XMLWriter does not escape '>' in strings
    o 5072: Potential race condition with OOP response chunks
    o 5083: CIMRequestMessage buildResponse() should be const
  - Fix bug 193121: restore world read access to libraries


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-1.EL4
changelog:
  - fix bug 190432: %exclude /usr/lib64/debug from RPM
  - fix upstream OpenPegasus '2.5.2_APPROVED' bugs, applying upstream patches:
    o 4955 : Bogus Description property for OperatingSystem provider
    o 4956 : reserveCapacity method may cause size overflow on invalid input
    o 4968 : CMPI provider up-calls cause failure with out-of-process
    o 4978 : snmpDeliverTrap_netsnmp::_createSession function is not thread safe
    o 4983 : Memory leak in OOP indication generation
    o 4984 : Forked process hangs in system call
    o 4986 : Adding automated test for snmpIndication Handler
    (  http://cvs.opengroup.org/bugzilla/show_bug.cgi?id=? )


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-1.EL4
changelog:
  - restore PEGASUS_DISABLE_CQL=true, as sblim-cmpi-base no longer requires 
    CQL to be enabled, and OpenPegasus steering committee requested it
  - apply upstream update to 'pegasus-2.5.1-warnings.patch'


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5.1-2
changelog:
  - Apply patches for the two '2.5.2_APPROVED' upstream bugzillas 
    4934(4943) and 4945 :
    (http://cvs.opengroup.org/bugzilla/buglist.cgi?bug_id=4943%2C4945)
  - Fix the PATH_MAX and MAXHOSTNAMELEN issues (again)


author: Jason Vas Dias <jvdias@redhat.com> - 2:2.5-6
changelog:
  - restore SSLv23_method SSL support now that bug 173399 is fixed
  - rebuild for new gcc, glibc, glibc-kernheaders
  - PAMBasicAuthenticatorUnix.cpp includes no longer include syslog.h: add
  - /usr/bin/install now decides to fail if chown fails - set $INSTALL_USER, $INSTALL_GROUP


